Skip to content

Commit ae7270f

Browse files
arthurdmarthurdm
authored
Merge pull request #21 from microservices-api/okd
Update lab to run on OKD
2 parents 0bc6b36 + 1028f52 commit ae7270f

File tree

8 files changed

+838
-40
lines changed

8 files changed

+838
-40
lines changed

‎README.md

Lines changed: 140 additions & 40 deletions
Large diffs are not rendered by default.

‎lab-artifacts/operator/application/application-cr.yaml

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
apiVersion: openliberty.io/v1alpha1
2+
kind: OpenLiberty
3+
metadata:
4+
name: operator-demo-openliberty
5+
spec:
6+
image:
7+
# repository: quay.io/arthurdm/microservice-vote
8+
repository: microservice-vote
9+
tag: 1.0.0
10+
pullPolicy: IfNotPresent
11+
license: ""
12+
extraEnvs:
13+
- name: "dbUrl"
14+
value: "http://couchdb-svc-couchdb:5984"
15+
- name: dbUsername
16+
valueFrom:
17+
secretKeyRef:
18+
name: couchdb-couchdb
19+
key: adminUsername
20+
- name: dbPassword
21+
valueFrom:
22+
secretKeyRef:
23+
name: couchdb-couchdb
24+
key: adminPassword
25+
ingress:
26+
enabled: true
27+
rewriteTarget: "/"
28+
path: "/"
29+
microprofile:
30+
health:
31+
enabled: true
32+
pod:
33+
labels:
34+
application: conference
35+
monitoring:
36+
enabled: true
37+
arch:
38+
amd64: "3 - Most preferred"
39+
ppc64le: "0 - Do not use"
40+
s390x: "0 - Do not use"

‎lab-artifacts/operator/open-liberty-operator/deploy/ibm-open-liberty-scc.yaml

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
apiVersion: security.openshift.io/v1
2+
kind: SecurityContextConstraints
3+
metadata:
4+
annotations:
5+
name: ibm-open-liberty-scc
6+
allowHostDirVolumePlugin: false
7+
allowHostIPC: false
8+
allowHostNetwork: false
9+
allowHostPID: false
10+
allowHostPorts: false
11+
allowPrivilegedContainer: false
12+
allowedCapabilities: []
13+
allowedFlexVolumes: []
14+
defaultAddCapabilities: []
15+
fsGroup:
16+
type: MustRunAs
17+
ranges:
18+
- max: 65535
19+
min: 1
20+
readOnlyRootFilesystem: false
21+
requiredDropCapabilities:
22+
- ALL
23+
runAsUser:
24+
type: MustRunAsNonRoot
25+
seccompProfiles:
26+
- docker/default
27+
seLinuxContext:
28+
type: RunAsAny
29+
supplementalGroups:
30+
type: MustRunAs
31+
ranges:
32+
- max: 65535
33+
min: 1
34+
volumes:
35+
- configMap
36+
- downwardAPI
37+
- emptyDir
38+
- persistentVolumeClaim
39+
- projected
40+
- secret
41+
priority: 0

‎lab-artifacts/operator/open-liberty-operator/deploy/operator.yaml

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
apiVersion: apps/v1
2+
kind: Deployment
3+
metadata:
4+
name: open-liberty-operator
5+
spec:
6+
replicas: 1
7+
selector:
8+
matchLabels:
9+
name: open-liberty-operator
10+
template:
11+
metadata:
12+
labels:
13+
name: open-liberty-operator
14+
spec:
15+
serviceAccountName: open-liberty-operator
16+
containers:
17+
- name: open-liberty-operator
18+
image: openliberty/operator:0.0.1
19+
imagePullPolicy: Always
20+
env:
21+
- name: WATCH_NAMESPACE
22+
valueFrom:
23+
fieldRef:
24+
fieldPath: metadata.namespace
25+
- name: POD_NAME
26+
valueFrom:
27+
fieldRef:
28+
fieldPath: metadata.name
29+
- name: OPERATOR_NAME
30+
value: "open-liberty-operator"
31+
affinity:
32+
nodeAffinity:
33+
requiredDuringSchedulingIgnoredDuringExecution:
34+
nodeSelectorTerms:
35+
- matchExpressions:
36+
- key: beta.kubernetes.io/arch
37+
operator: In
38+
values:
39+
- amd64
40+
preferredDuringSchedulingIgnoredDuringExecution:
41+
- weight: 3
42+
preference:
43+
matchExpressions:
44+
- key: beta.kubernetes.io/arch
45+
operator: In
46+
values:
47+
- amd64

‎lab-artifacts/operator/open-liberty-operator/deploy/role.yaml

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: Role
3+
metadata:
4+
creationTimestamp: null
5+
name: open-liberty-operator
6+
rules:
7+
- apiGroups:
8+
- ""
9+
resources:
10+
- pods
11+
- services
12+
- endpoints
13+
- persistentvolumeclaims
14+
- events
15+
- configmaps
16+
- secrets
17+
- serviceaccounts
18+
verbs:
19+
- '*'
20+
- apiGroups:
21+
- "extensions"
22+
resources:
23+
- ingresses
24+
verbs:
25+
- '*'
26+
- apiGroups:
27+
- "autoscaling"
28+
resources:
29+
- horizontalpodautoscalers
30+
verbs:
31+
- '*'
32+
- apiGroups:
33+
- "batch"
34+
resources:
35+
- jobs
36+
verbs:
37+
- '*'
38+
- apiGroups:
39+
- ""
40+
resources:
41+
- namespaces
42+
verbs:
43+
- get
44+
- apiGroups:
45+
- apps
46+
resources:
47+
- deployments
48+
- daemonsets
49+
- replicasets
50+
- statefulsets
51+
verbs:
52+
- '*'
53+
- apiGroups:
54+
- monitoring.coreos.com
55+
resources:
56+
- servicemonitors
57+
verbs:
58+
- get
59+
- create
60+
- apiGroups:
61+
- apps
62+
resourceNames:
63+
- open-liberty-operator
64+
resources:
65+
- deployments/finalizers
66+
verbs:
67+
- update
68+
- apiGroups:
69+
- openliberty.io
70+
resources:
71+
- '*'
72+
verbs:
73+
- '*'
74+
- apiGroups:
75+
- rbac.authorization.k8s.io
76+
resources:
77+
- roles
78+
- rolebindings
79+
verbs:
80+
- '*'

‎lab-artifacts/operator/open-liberty-operator/deploy/role_binding.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
kind: RoleBinding
2+
apiVersion: rbac.authorization.k8s.io/v1
3+
metadata:
4+
name: open-liberty-operator
5+
subjects:
6+
- kind: ServiceAccount
7+
name: open-liberty-operator
8+
roleRef:
9+
kind: Role
10+
name: open-liberty-operator
11+
apiGroup: rbac.authorization.k8s.io
12+

‎lab-artifacts/operator/open-liberty-operator/deploy/service_account.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
apiVersion: v1
2+
kind: ServiceAccount
3+
metadata:
4+
name: open-liberty-operator

0 commit comments

Comments
 (0)