zlopez/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

Removed deploymentconfig files from ocp apps

Browse source 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
This commit is contained in:
Pedro Moura 2026-03-31 20:23:58 -03:00 • committed by Kevin Fenzi
commit d985fb7631
11 changed files with 0 additions and 1085 deletions
Download patch file Download diff file Expand all files Collapse all files

54
roles/openshift-apps/compose-tracker/templates/deploymentconfig.yml.j2
View file

@ -1,54 +0,0 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
labels:
app: compose-tracker
name: compose-tracker
spec:
replicas: 1
selector:
app: compose-tracker
strategy:
resources: {}
template:
metadata:
labels:
app: compose-tracker
name: compose-tracker
spec:
containers:
- envFrom:
- secretRef:
name: compose-tracker-forgejo-token
env:
- name: FORGEJO_NAMESPACE
value: "releng"
- name: FORGEJO_REPO
value: "compose-tracker-issues"
- name: FORGEJO_DOMAIN
{% if env == "staging" %}
value: "https://forge.stg.fedoraproject.org/"
{% else %}
value: "https://forge.fedoraproject.org/"
{% endif %}
# sleep infinity is useful for debugging environment issues
# comment out when not debugging
# args: ['infinity']
# command: ['/usr/bin/sleep']
image: ""
imagePullPolicy: IfNotPresent
name: compose-tracker
resources: {}
restartPolicy: Always
test: false
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- compose-tracker
from:
kind: ImageStreamTag
name: compose-tracker-img:latest

75
roles/openshift-apps/easyfix/templates/deploymentconfig.yml.j2
View file

@ -1,75 +0,0 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
name: web
labels:
app: easyfix
spec:
replicas: 1
selector:
app: easyfix
deploymentconfig: web
strategy:
type: Rolling
activeDeadlineSeconds: 21600
rollingParams:
intervalSeconds: 1
maxSurge: 25%
maxUnavailable: 25%
timeoutSeconds: 600
updatePeriodSeconds: 1
template:
metadata:
creationTimestamp: null
labels:
app: easyfix
deploymentconfig: web
spec:
containers:
- name: easyfix
imagePullPolicy: Always
ports:
- containerPort: 8080
volumeMounts:
- name: httpdir-volume
mountPath: /httpdir
- name: data
mountPath: /srv
- name: config
mountPath: "/etc/easyfix"
readOnly: true
env:
- name: APP_SCRIPT
value: ".s2i/run-httpd.sh"
readinessProbe:
timeoutSeconds: 1
initialDelaySeconds: 5
httpGet:
path: /
port: 8080
livenessProbe:
timeoutSeconds: 1
initialDelaySeconds: 20
httpGet:
path: /
port: 8080
volumes:
- name: httpdir-volume
emptyDir: {}
- name: config
configMap:
name: config
- name: data
persistentVolumeClaim:
claimName: data
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- easyfix
from:
kind: ImageStreamTag
name: easyfix:latest

232
roles/openshift-apps/flatpak-indexer/templates/deploymentconfig.yml.j2
View file

@ -1,232 +0,0 @@
---
kind: DeploymentConfig
apiVersion: apps.openshift.io/v1
metadata:
labels:
app: flatpak-indexer
name: flatpak-indexer
spec:
replicas: 1
selector:
app: flatpak-indexer
deploymentconfig: flatpak-indexer
strategy:
activeDeadlineSeconds: 21600
resources: {}
rollingParams:
intervalSeconds: 1
maxSurge: 25%
maxUnavailable: 25%
timeoutSeconds: 600
updatePeriodSeconds: 1
type: Rolling
template:
metadata:
labels:
app: flatpak-indexer
deploymentconfig: flatpak-indexer
spec:
containers:
- env:
- name: OUTPUT_DIR
value: /var/www/flatpaks
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: redis-password
key: password
- name: REDIS_URL
value: redis://redis.flatpak-indexer.svc.cluster.local:6379
image: flatpak-indexer:latest
name: flatpak-indexer
ports:
- containerPort: 8080
protocol: TCP
resources: {}
volumeMounts:
- mountPath: /etc/flatpak-indexer
name: indexer-config-volume
readOnly: true
- mountPath: /etc/koji.conf
name: koji-conf-volume
readOnly: true
- mountPath: /var/www/flatpaks
name: index-output-volume
dnsPolicy: ClusterFirst
restartPolicy: Always
volumes:
- configMap:
defaultMode: 420
name: indexer-config
name: indexer-config-volume
- configMap:
defaultMode: 420
name: koji-conf
name: koji-conf-volume
- name: index-output-volume
persistentVolumeClaim:
claimName: flatpak-indexer-storage{{ '-stg' if env == 'staging' else '' }}
test: false
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- flatpak-indexer
from:
kind: ImageStreamTag
name: flatpak-indexer:latest
---
kind: DeploymentConfig
apiVersion: apps.openshift.io/v1
metadata:
labels:
app: flatpak-indexer-differ
name: flatpak-indexer-differ
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
app: flatpak-indexer-differ
deploymentconfig: flatpak-indexer-differ
strategy:
activeDeadlineSeconds: 21600
resources: {}
rollingParams:
intervalSeconds: 1
maxSurge: 25%
maxUnavailable: 25%
timeoutSeconds: 600
updatePeriodSeconds: 1
type: Rolling
template:
metadata:
labels:
app: flatpak-indexer-differ
deploymentconfig: flatpak-indexer-differ
spec:
containers:
- env:
- name: OUTPUT_DIR
value: /var/www/flatpaks
- name: FLATPAK_INDEXER_COMMAND
value: differ
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: redis-password
key: password
- name: REDIS_URL
value: redis://redis.flatpak-indexer.svc.cluster.local:6379
image: flatpak-indexer:latest
name: flatpak-indexer-differ
ports:
- containerPort: 8080
protocol: TCP
resources:
requests:
cpu: 2
memory: 1Gi
limits:
cpu: 2
memory: 8Gi
volumeMounts:
- mountPath: /etc/flatpak-indexer
name: indexer-config-volume
readOnly: true
- mountPath: /var/www/flatpaks
name: index-output-volume
dnsPolicy: ClusterFirst
restartPolicy: Always
volumes:
- configMap:
defaultMode: 420
name: indexer-config
name: indexer-config-volume
- name: index-output-volume
persistentVolumeClaim:
claimName: flatpak-indexer-storage{{ '-stg' if env == 'staging' else '' }}
test: false
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- flatpak-indexer-differ
from:
kind: ImageStreamTag
name: flatpak-indexer:latest
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
labels:
app: redis
name: redis
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
app: redis
deploymentconfig: redis
strategy:
activeDeadlineSeconds: 21600
# Recreate so that the old pod is stopped before the new pod is created.
# Could also use a StatefulSet
type: Recreate
template:
metadata:
labels:
app: redis
deploymentconfig: redis
spec:
containers:
- env:
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: redis-password
key: password
image: redis:latest
livenessProbe:
exec:
command: ['valkey-cli', '-a', '$REDIS_PASSWORD', 'ping']
failureThreshold: 3
initialDelaySeconds: 15
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
name: redis
ports:
- containerPort: 6379
protocol: TCP
readinessProbe:
exec:
command: ['valkey-cli', '-a', '$REDIS_PASSWORD', 'ping']
failureThreshold: 3
periodSeconds: 60
successThreshold: 1
timeoutSeconds: 1
resources: {}
volumeMounts:
- mountPath: /data
name: redis-data-volume
dnsPolicy: ClusterFirst
restartPolicy: Always
volumes:
- name: redis-data-volume
persistentVolumeClaim:
claimName: flatpak-indexer-redis-storage{{ '-stg' if env == 'staging' else '' }}
test: false
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- redis
from:
kind: ImageStreamTag
name: redis:latest

57
roles/openshift-apps/mdapi/templates/deploymentconfig.yml.j2
View file

@ -1,57 +0,0 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
name: mdapi
labels:
app: mdapi
service: mdapi
spec:
replicas: 1
selector:
app: mdapi
service: mdapi
template:
metadata:
labels:
app: mdapi
service: mdapi
spec:
containers:
- name: mdapi
image: registry/mdapi:latest
command: ["/metasource/meta"]
args: ["-location", "/var/tmp", "-loglevel", "info", "dispense", "-hostname", "mdapi{{ env_suffix }}.fedoraproject.org"]
ports:
- containerPort: 8080
volumeMounts:
- name: data-volume
mountPath: /var/tmp/
readinessProbe:
timeoutSeconds: 5
initialDelaySeconds: 60
periodSeconds: 60
httpGet:
path: /
port: 8080
livenessProbe:
timeoutSeconds: 15
initialDelaySeconds: 60
periodSeconds: 60
httpGet:
path: /
port: 8080
resources:
volumes:
- name: data-volume
persistentVolumeClaim:
claimName: mdapi-storage
triggers:
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- "mdapi"
from:
kind: ImageStreamTag
name: mdapi:latest

73
roles/openshift-apps/mirrormanager/templates/deploymentconfig.yml.j2
View file

@ -1,73 +0,0 @@
{% from "_macros.yml.j2" import common_volume_mounts, common_volumes, common_env, security_context with context %}
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
name: frontend
labels:
app: mirrormanager
spec:
replicas: 1
selector:
app: mirrormanager
deploymentconfig: frontend
strategy:
type: Rolling
activeDeadlineSeconds: 21600
rollingParams:
intervalSeconds: 1
maxSurge: 25%
maxUnavailable: 25%
timeoutSeconds: 600
updatePeriodSeconds: 1
template:
metadata:
creationTimestamp: null
labels:
app: mirrormanager
deploymentconfig: frontend
spec:
containers:
- name: mirrormanager
imagePullPolicy: Always
ports:
- containerPort: 8080
env:
- name: APP_MODULE
value: "deploy.wsgi"
- name: APP_CONFIG
value: "/etc/mirrormanager/gunicorn.conf.py"
{{ common_env() }}
# readinessProbe:
# timeoutSeconds: 10
# initialDelaySeconds: 5
# periodSeconds: 60
# httpGet:
# path: "/healthz/ready"
# port: 8080
# livenessProbe:
# timeoutSeconds: 10
# initialDelaySeconds: 10
# periodSeconds: 60
# httpGet:
# path: "/healthz/live"
# port: 8080
volumeMounts:
{{ common_volume_mounts() }}
volumes:
{{ common_volumes() }}
{{ security_context() }}
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- mirrormanager
from:
kind: ImageStreamTag
name: mirrormanager2:latest

131
roles/openshift-apps/noggin/templates/deploymentconfig.yml.j2
View file

@ -1,131 +0,0 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
name: noggin
labels:
app: {{ object_app }}
spec:
replicas: 1
selector:
app: {{ object_app }}
deploymentconfig: noggin
strategy:
type: Rolling
activeDeadlineSeconds: 21600
rollingParams:
intervalSeconds: 1
maxSurge: 25%
maxUnavailable: 25%
timeoutSeconds: 600
updatePeriodSeconds: 1
template:
metadata:
creationTimestamp: null
labels:
app: {{ object_app }}
deploymentconfig: noggin
spec:
containers:
- name: noggin
imagePullPolicy: Always
ports:
- containerPort: 8080
# protocol: TCP
# resources: {}
# terminationMessagePath: /dev/termination-log
# terminationMessagePolicy: File
volumeMounts:
- name: noggin-config-volume
mountPath: "/etc/noggin"
readOnly: true
- name: noggin-templates-volume
mountPath: "/etc/noggin-templates"
readOnly: true
- name: noggin-secrets-volume
mountPath: "/etc/noggin-secrets"
readOnly: true
- name: wsgi-script-volume
mountPath: "/opt/app-root/src/deploy"
readOnly: true
- name: fedora-messaging-config-volume
mountPath: "/etc/fedora-messaging"
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/fedora-messaging/cacert.pem
subPath: cacert.pem
readOnly: true
- name: fedora-messaging-crt-volume
mountPath: /etc/pki/fedora-messaging/noggin-cert.pem
subPath: noggin-cert.pem
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/fedora-messaging/noggin-key.pem
subPath: noggin-key.pem
readOnly: true
- name: ipa-config-volume
mountPath: "/etc/ipa"
readOnly: true
env:
- name: NOGGIN_CONFIG_PATH
value: "/etc/noggin/noggin.cfg"
- name: APP_MODULE
value: "deploy.wsgi"
- name: APP_CONFIG
value: "/etc/noggin/gunicorn.conf.py"
{% if subdir is defined %}
- name: SCRIPT_NAME
value: "{{ subdir }}"
{% endif %}
readinessProbe:
timeoutSeconds: 10
initialDelaySeconds: 5
periodSeconds: 60
httpGet:
path: "{{ subdir|default('') }}/healthz/ready"
port: 8080
livenessProbe:
timeoutSeconds: 10
initialDelaySeconds: 10
periodSeconds: 60
httpGet:
path: "{{ subdir|default('') }}/healthz/live"
port: 8080
volumes:
- name: noggin-config-volume
configMap:
name: noggin-config
- name: noggin-templates-volume
configMap:
name: noggin-templates
- name: noggin-secrets-volume
secret:
secretName: noggin-secrets
- name: wsgi-script-volume
configMap:
name: wsgi-script
- name: fedora-messaging-config-volume
configMap:
name: fedora-messaging-config
- name: fedora-messaging-ca-volume
secret:
secretName: fedora-messaging-ca
- name: fedora-messaging-crt-volume
secret:
secretName: fedora-messaging-crt
- name: fedora-messaging-key-volume
secret:
secretName: fedora-messaging-key
- name: ipa-config-volume
configMap:
name: ipa-client-config
triggers:
- imageChangeParams:
automatic: true
containerNames:
- noggin
from:
kind: ImageStreamTag
name: noggin:latest
type: ImageChange
- type: ConfigChange

61
roles/openshift-apps/poddlers/templates/deploymentconfig.yml.j2
View file

@ -1,61 +0,0 @@
{% from "_macros.yml.j2" import common_volume_mounts, common_volumes, common_env %}
{% for toddler in poddlers_toddlers %}
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
name: {{ toddler.name }}
labels:
app: poddlers
spec:
replicas: {{ toddler.replicas|default(1) }}
selector:
app: poddlers
deploymentconfig: {{ toddler.name }}
strategy:
type: Recreate
template:
metadata:
labels:
app: poddlers
deploymentconfig: {{ toddler.name }}
spec:
containers:
- name: toddlers
image: toddlers:latest
env:
- name: FEDORA_MESSAGING_CONF
value: /etc/fedora-messaging/{{ toddler.name }}.toml
{% if toddler.name == "cleaning-packager-groups" -%}
- name: KRB5_CLIENT_KTNAME
value: /etc/sync-group-keytabs/sync-group.keytab
{% endif -%}
{{ common_env() }}
volumeMounts:
{{ common_volume_mounts() }}
{% if toddler.name == "cleaning-packager-groups" -%}
- name: sync-group-keytab-volume
mountPath: /etc/sync-group-keytabs
readOnly: true
{% endif %}
volumes:
{{ common_volumes() }}
{% if toddler.name == "cleaning-packager-groups" -%}
- name: sync-group-keytab-volume
secret:
secretName: sync-group-keytab
{% endif %}
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- toddlers
from:
kind: ImageStreamTag
name: toddlers:latest
{% endfor %}

122
roles/openshift-apps/the-new-hotness/templates/deploymentconfig.yml.j2
View file

@ -1,122 +0,0 @@
---
apiVersion: apps.openshift.io/v1
items:
- apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
labels:
app: the-new-hotness
service: the-new-hotness
name: the-new-hotness
spec:
replicas: 1
selector:
deploymentconfig: the-new-hotness
strategy:
activeDeadlineSeconds: 21600
recreateParams:
timeoutSeconds: 600
type: Recreate
template:
metadata:
creationTimestamp: null
labels:
app: the-new-hotness
deploymentconfig: the-new-hotness
spec:
containers:
- name: the-new-hotness
image: the-new-hotness/the-new-hotness:latest
command: ["fedora-messaging", "consume"]
env:
- name: RPM_PACKAGER
value: hotness
volumeMounts:
- name: keytab-volume
mountPath: /etc/keytabs
readOnly: true
- name: config-volume
mountPath: /etc/fedora-messaging
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/rabbitmq/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/rabbitmq/key
readOnly: true
- name: fedora-messaging-cert-volume
mountPath: /etc/pki/rabbitmq/cert
readOnly: true
- name: temp-volume
mountPath: /var/tmp
- name: krb-config-volume
mountPath: /etc/krb5
readOnly: true
volumes:
- name: config-volume
configMap:
name: the-new-hotness-configmap
- name: fedora-messaging-ca-volume
secret:
secretName: the-new-hotness-fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: the-new-hotness-fedora-messaging-key
- name: fedora-messaging-cert-volume
secret:
secretName: the-new-hotness-fedora-messaging-cert
- name: temp-volume
- name: keytab-volume
secret:
secretName: the-new-hotness-keytab
- name: krb-config-volume
configMap:
name: krb5-configmap
triggers:
- imageChangeParams:
automatic: true
containerNames:
- the-new-hotness
from:
kind: ImageStreamTag
name: the-new-hotness:latest
namespace: the-new-hotness
type: ImageChange
- type: ConfigChange
- apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
labels:
app: the-new-hotness
service: the-new-hotness-redis
name: the-new-hotness-redis
spec:
replicas: 1 # Never change this to more or less than ONE!
selector:
app: the-new-hotness
deploymentconfig: the-new-hotness-redis
template:
metadata:
labels:
app: the-new-hotness
deploymentconfig: the-new-hotness-redis
spec:
containers:
- name: the-new-hotness-redis
image: the-new-hotness-redis:latest
resources: {}
env:
- name: REDIS_PASSWORD
value: "{{ hotness_redis_pass }}"
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- the-new-hotness-redis
from:
kind: ImageStreamTag
name: the-new-hotness-redis:latest
kind: List
metadata: {}

79
roles/openshift-apps/transtats/files/deploymentconfig.yml
View file

@ -1,79 +0,0 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
name: transtats-web
labels:
app: transtats
service: web
spec:
replicas: 2
selector:
app: transtats
service: web
template:
metadata:
labels:
app: transtats
service: web
spec:
containers:
- name: web
image: transtats
ports:
- containerPort: 8080
env:
- name: GUNICORN_CMD_ARGS
value: "--workers 3 --bind 0.0.0.0:8080 --timeout 500"
- name: DATABASE_ENGINE
value: postgresql
- name: DATABASE_NAME
valueFrom:
secretKeyRef:
name: transtats-secret
key: database-name
- name: DATABASE_HOST
valueFrom:
secretKeyRef:
name: transtats-secret
key: database-host
- name: DATABASE_USER
valueFrom:
secretKeyRef:
name: transtats-secret
key: database-user
- name: DATABASE_PASSWORD
valueFrom:
secretKeyRef:
name: transtats-secret
key: database-password
readinessProbe:
timeoutSeconds: 1
initialDelaySeconds: 5
httpGet:
path: /health
port: 8080
livenessProbe:
timeoutSeconds: 1
initialDelaySeconds: 30
httpGet:
path: /health
port: 8080
# TODO: re-evaluate these limits once we know how much memory is actually needed
resources:
requests:
cpu: 500m
memory: 1024Mi
limits:
cpu: 2000m
memory: 2048Mi
triggers:
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- web
from:
kind: ImageStreamTag
name: transtats:latest
- type: ConfigChange

112
roles/openshift-apps/webhook2fedmsg/templates/deploymentconfig.yml.j2
View file

@ -1,112 +0,0 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
labels:
app: webhook2fedmsg
service: webhook2fedmsg
name: app
spec:
replicas: 1
selector:
app: webhook2fedmsg
deploymentconfig: app
strategy:
type: Recreate
recreateParams:
mid:
execNewPod:
command: [/opt/app-root/bin/w2fm, setup]
containerName: app
volumes:
- config
failurePolicy: Abort
template:
metadata:
labels:
app: webhook2fedmsg
deploymentconfig: app
spec:
containers:
- image: webhook2fedmsg:latest
name: app
env:
- name: KRB5_CONFIG
value: /etc/ipa/krb5.conf
- name: KRB5_CLIENT_KTNAME
value: /etc/keytabs/service.keytab
ports:
- containerPort: 8080
protocol: TCP
volumeMounts:
- name: config
mountPath: "/etc/webhook-to-fedora-messaging"
readOnly: true
- name: ipa-config-volume
mountPath: /etc/ipa
readOnly: true
- name: keytab-volume
mountPath: /etc/keytabs
readOnly: true
- name: fedora-messaging-config
mountPath: "/etc/fedora-messaging"
readOnly: true
- name: fedora-messaging-ca
mountPath: /etc/pki/fedora-messaging/cacert.pem
subPath: cacert.pem
readOnly: true
- name: fedora-messaging-crt
mountPath: /etc/pki/fedora-messaging/webhook2fedmsg-cert.pem
subPath: webhook2fedmsg-cert.pem
readOnly: true
- name: fedora-messaging-key
mountPath: /etc/pki/fedora-messaging/webhook2fedmsg-key.pem
subPath: webhook2fedmsg-key.pem
readOnly: true
# readinessProbe:
# timeoutSeconds: 10
# initialDelaySeconds: 5
# periodSeconds: 60
# httpGet:
# path: "/api/v1/healthz/ready"
# port: 8080
# livenessProbe:
# timeoutSeconds: 10
# initialDelaySeconds: 3
# periodSeconds: 60
# httpGet:
# path: "/api/v1/healthz/live"
# port: 8080
volumes:
- name: config
configMap:
name: config
- name: ipa-config-volume
configMap:
name: ipa-client-config
- name: keytab-volume
secret:
secretName: keytab
- name: fedora-messaging-config
configMap:
name: fedora-messaging-config
- name: fedora-messaging-ca
secret:
secretName: fedora-messaging-ca
- name: fedora-messaging-crt
secret:
secretName: fedora-messaging-crt
- name: fedora-messaging-key
secret:
secretName: fedora-messaging-key
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- app
from:
kind: ImageStreamTag
name: webhook2fedmsg:latest

89
roles/openshift-apps/zezere/templates/deploymentconfig.yml.j2
View file

@ -1,89 +0,0 @@
---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
labels:
app: zezere
service: zezere
name: zezere
spec:
replicas: 1
selector:
deploymentconfig: zezere
strategy:
activeDeadlineSeconds: 21600
recreateParams:
timeoutSeconds: 600
template:
metadata:
labels:
app: zezere
deploymentconfig: zezere
spec:
containers:
- name: zezere
image: image-registry.openshift-image-registry.svc:5000/zezere/zezere:latest
env:
- name: ALLOWED_HOSTS
value: "*"
- name: WEB_CONCURRENCY
value: "8"
- name: SECRET_KEY
valueFrom:
secretKeyRef:
name: zezere
key: secret_key
- name: DEBUG
value: "no"
- name: AUTH_METHOD
value: "oidc"
- name: OIDC_OP_AUTHORIZATION_ENDPOINT
value: "https://id{{ env_suffix }}.fedoraproject.org/openidc/Authorization"
- name: OIDC_OP_TOKEN_ENDPOINT
value: "https://id{{ env_suffix }}.fedoraproject.org/openidc/Token"
- name: OIDC_OP_USER_ENDPOINT
value: "https://id{{ env_suffix }}.fedoraproject.org/openidc/UserInfo"
- name: OIDC_OP_JWKS_ENDPOINT
value: "https://id{{ env_suffix }}.fedoraproject.org/openidc/Jwks"
- name: OIDC_RP_CLIENT_ID
value: "provisionfpo"
- name: OIDC_RP_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: zezere
key: oidc_client_secret
- name: OIDC_RP_SIGN_ALGO
value: "RS256"
- name: SECURE_PROXY_SSL_HEADER_NAME
value: "HTTP_X_FORWARDED_PROTO"
- name: SECURE_PROXY_SSL_HEADER_VALUE
value: "https"
- name: DATABASE_engine
value: "django.db.backends.postgresql_psycopg2"
- name: DATABASE_host
value: "db01{{ env_suffix }}.{{datacenter}}.fedoraproject.org"
- name: DATABASE_name
value: "zezere"
- name: DATABASE_user
value: "zezere"
- name: DATABASE_password
valueFrom:
secretKeyRef:
name: zezere
key: database_password
ports:
- containerPort: 8080
readinessProbe:
timeoutSeconds: 1
initialDelaySeconds: 5
httpGet:
path: /netboot
port: 8080
livenessProbe:
timeoutSeconds: 1
initialDelaySeconds: 30
httpGet:
path: /netboot
port: 8080
triggers:
- type: ConfigChange