mirror of
https://github.com/ZwareBear/JFrog-Cloud-Installers.git
synced 2026-01-21 06:06:56 -06:00
Merge pull request #24 from jfrog/openshift4
Openshift4 JFrog Artifactory Operator
This commit is contained in:
John Peterson
GitHub
6
Openshift4/.gitignore
vendored
Normal file
6
Openshift4/.gitignore
vendored
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
artifactory.cluster.license
|
||||||
|
tls.crt
|
||||||
|
tls.key
|
||||||
|
artifactory-ha-operator/helm-charts/openshift-artifactory-ha
|
||||||
|
*.tar.gz
|
||||||
|
*.tgz
|
||||||
51
Openshift4/README.md
Normal file
51
Openshift4/README.md
Normal file
@@ -0,0 +1,51 @@
|
|||||||
|
# JFrog Artifactory Enterprise Operator
|
||||||
|
|
||||||
|
This code base is intended to deploy Artifactory Enterprise (HA) as an operator to an Openshift4 cluster.
|
||||||
|
|
||||||
|
You can run the operator either through the operator-sdk, operator.yaml, or the OperatorHub OLM (CSV).
|
||||||
|
|
||||||
|
Openshift OperatorHub has the latest official supported Cluster Service Version (CSV) for the OLM catalog.
|
||||||
|
|
||||||
|
## Getting Started
|
||||||
|
|
||||||
|
These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
###### Openshift 4 Cluster
|
||||||
|
|
||||||
|
Available on AWS, GCP, or Azure. Follow the Cloud installer guide available here:
|
||||||
|
|
||||||
|
[Openshift 4 Installers](https://cloud.redhat.com/openshift/install)
|
||||||
|
|
||||||
|
Or run it locally using CodeReadyContainers.
|
||||||
|
|
||||||
|
[Code Ready Container Installer](https://cloud.redhat.com/openshift/install/crc/installer-provisioned)
|
||||||
|
|
||||||
|
Note if you are going to use CodeReadyContainers to test this Operator you will need to ensure:
|
||||||
|
|
||||||
|
```
|
||||||
|
- create at least one Persistent volume of 200Gi per Artifactory node used in HA configuration
|
||||||
|
```
|
||||||
|
|
||||||
|
###### Openshift 4 Command Line Tools
|
||||||
|
|
||||||
|
Download and install the Openshift command line tool: oc
|
||||||
|
|
||||||
|
[Getting Started with CLI](https://docs.openshift.com/container-platform/4.2/cli_reference/openshift_cli/getting-started-cli.html)
|
||||||
|
|
||||||
|
## Next Steps
|
||||||
|
|
||||||
|
To install JFrog Artifactory Enterprise as an Openshift 4 operator please use the console's OperatorHub to install the official operator. This is the easiest way to install it.
|
||||||
|
|
||||||
|
If you wish to install the operator locally please refer to the instructions that can be found in the README under artifactory-ha-operator.
|
||||||
|
|
||||||
|
## Contributing
|
||||||
|
Please read [CONTRIBUTING.md](JFrog-Cloud-Installers/Openshift4/artifactory-ha-operator/CONTRIBUTING.md) for details on our code of conduct, and the process for submitting pull requests to us.
|
||||||
|
|
||||||
|
## Versioning
|
||||||
|
We use [SemVer](http://semver.org/) for versioning. For the versions available, see the [tags on this repository](https://github.com/jfrog/JFrog-Cloud-Installers/tags).
|
||||||
|
|
||||||
|
## Contact
|
||||||
|
|
||||||
|
Github issues
|
||||||
10
Openshift4/artifactory-ha-operator/.osdk-scorecard.yaml
Normal file
10
Openshift4/artifactory-ha-operator/.osdk-scorecard.yaml
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
scorecard:
|
||||||
|
output: json
|
||||||
|
plugins:
|
||||||
|
- basic:
|
||||||
|
cr-manifest:
|
||||||
|
- "deploy/crds/charts.helm.k8s.io_v1alpha1_openshiftartifactoryha_cr.yaml"
|
||||||
|
- olm:
|
||||||
|
cr-manifest:
|
||||||
|
- "deploy/crds/charts.helm.k8s.io_v1alpha1_openshiftartifactoryha_cr.yaml"
|
||||||
|
csv-path: "deploy/olm-catalog/artifactory-ha-operator/1.0.0/artifactory-ha-operator.v1.0.0.clusterserviceversion.yaml"
|
||||||
17
Openshift4/artifactory-ha-operator/CHANGELOG.md
Executable file
17
Openshift4/artifactory-ha-operator/CHANGELOG.md
Executable file
@@ -0,0 +1,17 @@
|
|||||||
|
# JFrog Openshift Artifactory-ha Chart Changelog
|
||||||
|
All changes to this chart will be documented in this file.
|
||||||
|
|
||||||
|
## [2.4.6] - May 12, 2020
|
||||||
|
* Updating to latest jfrog/artifactory-ha helm chart version 2.4.6 artifactory version 7.4.3
|
||||||
|
|
||||||
|
## [2.3.0] - April 13, 2020
|
||||||
|
* Updating to latest jfrog/artifactory-ha helm chart version 2.3.0
|
||||||
|
|
||||||
|
## [2.2.9] - April 11, 2020
|
||||||
|
* Fixed issues with master key
|
||||||
|
|
||||||
|
## [2.1.9] - March 17, 2020
|
||||||
|
* Updated Artifactory version to 7.3.2
|
||||||
|
|
||||||
|
## [2.0.35] - March 09, 2020
|
||||||
|
* Updated Artifactory version to 7.2.1
|
||||||
62
Openshift4/artifactory-ha-operator/CONTRIBUTING.md
Normal file
62
Openshift4/artifactory-ha-operator/CONTRIBUTING.md
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
# Contributing
|
||||||
|
|
||||||
|
When contributing to this repository, please first discuss the change you wish to make via slack, issue, email, or any other method with the owners of this repository before making a change.
|
||||||
|
|
||||||
|
Note we have a code of conduct, please follow it in all your interactions with the project.
|
||||||
|
|
||||||
|
## Pull Request Process
|
||||||
|
|
||||||
|
Ensure any install or build dependencies are removed before the end of the layer when doing a build.
|
||||||
|
|
||||||
|
Update the README.md with details of changes to the interface, this includes new environment variables, exposed ports, useful file locations and container parameters.
|
||||||
|
|
||||||
|
Increase the version numbers in any examples files and the README.md to the new version that this Pull Request would represent. The versioning scheme we use is SemVer.
|
||||||
|
|
||||||
|
You may merge the Pull Request in once you have the sign-off of one other developer.
|
||||||
|
|
||||||
|
## Code of Conduct
|
||||||
|
### Our Pledge
|
||||||
|
|
||||||
|
In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
|
||||||
|
|
||||||
|
### Our Standards
|
||||||
|
|
||||||
|
Examples of behavior that contributes to creating a positive environment include:
|
||||||
|
|
||||||
|
```
|
||||||
|
Using welcoming and inclusive language
|
||||||
|
Being respectful of differing viewpoints and experiences
|
||||||
|
Gracefully accepting constructive criticism
|
||||||
|
Focusing on what is best for the company
|
||||||
|
Showing empathy towards other colleagues
|
||||||
|
```
|
||||||
|
|
||||||
|
Examples of unacceptable behavior by participants include:
|
||||||
|
|
||||||
|
```
|
||||||
|
The use of sexualized language or imagery and unwelcome sexual attention or advances
|
||||||
|
Trolling, insulting/derogatory comments, and personal or political attacks
|
||||||
|
Public or private harassment
|
||||||
|
Publishing others' private information, such as a physical or electronic address, without explicit permission
|
||||||
|
Other conduct which could reasonably be considered inappropriate in a professional setting
|
||||||
|
```
|
||||||
|
|
||||||
|
### Our Responsibilities
|
||||||
|
|
||||||
|
Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
|
||||||
|
|
||||||
|
Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
|
||||||
|
|
||||||
|
## Scope
|
||||||
|
|
||||||
|
This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project. Examples of representing a project include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
|
||||||
|
|
||||||
|
## Enforcement
|
||||||
|
|
||||||
|
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team. All complaints will be reviewed and investigated and will result in a response that is deemed necessary and appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
|
||||||
|
|
||||||
|
Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
|
||||||
|
|
||||||
|
Attribution
|
||||||
|
|
||||||
|
This Code of Conduct is adapted from the [Contributor Covenant version 1.4] (http://contributor-covenant.org/version/1/4)
|
||||||
144
Openshift4/artifactory-ha-operator/README.md
Normal file
144
Openshift4/artifactory-ha-operator/README.md
Normal file
@@ -0,0 +1,144 @@
|
|||||||
|
# JFrog Artifactory Enterprise Operator
|
||||||
|
|
||||||
|
This code base is intended to deploy Artifactory HA as an operator to an Openshift4 cluster. You can run the operator either through the operator-sdk, operator.yaml, or the Operatorhub.
|
||||||
|
|
||||||
|
Openshift OperatorHub has the latest official supported Cluster Service Version (CSV) for the OLM catalog.
|
||||||
|
|
||||||
|
## Getting Started
|
||||||
|
|
||||||
|
These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
###### Openshift 4 Cluster
|
||||||
|
|
||||||
|
Available on AWS, GCP, or Azure. Follow the Cloud installer guide available here:
|
||||||
|
|
||||||
|
[Openshift 4 Installers](https://cloud.redhat.com/openshift/install)
|
||||||
|
|
||||||
|
Or run it locally using CodeReadyContainers.
|
||||||
|
|
||||||
|
[Code Ready Container Installer](https://cloud.redhat.com/openshift/install/crc/installer-provisioned)
|
||||||
|
|
||||||
|
Note if you are going to use CodeReadyContainers to test this Operator you will need to ensure:
|
||||||
|
|
||||||
|
```
|
||||||
|
- create at least one Persistent volume of 200Gi per Artifactory node used in HA configuration
|
||||||
|
```
|
||||||
|
|
||||||
|
###### Openshift 4 Command Line Tools
|
||||||
|
|
||||||
|
Download and install the Openshift command line tool: oc
|
||||||
|
|
||||||
|
[Getting Started with CLI](https://docs.openshift.com/container-platform/4.2/cli_reference/openshift_cli/getting-started-cli.html)
|
||||||
|
|
||||||
|
## Cluster Setup
|
||||||
|
###### Security Context Constraints - Anyuid
|
||||||
|
|
||||||
|
Openshift only allows statefulsets / pods to run in specific user and group id ranges.
|
||||||
|
Artifactory currently uses users outside of this allowed range.
|
||||||
|
For this reason the service account for the operator in the jfrog-artifactory namespace must be granted anyuid privileges.
|
||||||
|
|
||||||
|
```
|
||||||
|
oc adm policy add-scc-to-user anyuid system:serviceaccount:jfrog-artifactory:artifactory-ha-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
Where anyuid is the Security context constraint being applied to the service account artifactory-ha-operator in namespace jfrog-artifactory.
|
||||||
|
|
||||||
|
In addition to this the restricted scc policy will need to be changed to allow anyuid:
|
||||||
|
|
||||||
|
```
|
||||||
|
oc patch scc restricted --patch '{"fsGroup":{"type":"RunAsAny"},"runAsUser":{"type":"RunAsAny"},"seLinuxContext":{"type":"RunAsAny"}}' --type=merge
|
||||||
|
```
|
||||||
|
|
||||||
|
The privileged scc policy will need to be changed to include the artifactory-ha-operator as an admin account:
|
||||||
|
|
||||||
|
```
|
||||||
|
oc patch scc privileged --patch '{"users":["system:admin","system:serviceaccount:openshift-infra:build-controller","system:serviceaccount:jfrog-artifactory:artifactory-ha-operator"]}' --type=merge
|
||||||
|
```
|
||||||
|
|
||||||
|
###### Persistent Volumes on Code Ready Containers
|
||||||
|
|
||||||
|
Artifactory HA nodes by default request persistent volume claims 200 Gbs in size.
|
||||||
|
|
||||||
|
If your cluster does not already have existing persistent volumes that are 200Gi you will need to create new persistent volumes that are large enough to bound the claims to.
|
||||||
|
|
||||||
|
## Installation types
|
||||||
|
###### OLM Catalog
|
||||||
|
To install via the OLM catalog download the operator from the Operator hub and install it via the Openshift console GUI
|
||||||
|
|
||||||
|
To test OLM catalog installs you will need to deploy the lastest ClusterServiceVersion found at:
|
||||||
|
|
||||||
|
```
|
||||||
|
deploy/olm-catalog/artifactory-ha-operator/X.X.X/artifactory-ha-operator.vX.X.X.clusterserviceversion.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
This will install the operator into whatever cluster your kubectl or oc program is currently logged into.
|
||||||
|
|
||||||
|
Please refer to Local Testing section below for full instructions.
|
||||||
|
|
||||||
|
###### Operator YAML
|
||||||
|
To install the operator via the Operator YAML follow the Local Testing tests.
|
||||||
|
|
||||||
|
Instead of running operator-sdk up local for the last step run:
|
||||||
|
|
||||||
|
```
|
||||||
|
oc apply -f deploy/operator.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
This will deploy the operator into the cluster.
|
||||||
|
|
||||||
|
## Local Testing
|
||||||
|
|
||||||
|
Please refer to cluster setup. Ensure all steps have been completed prior to local testing against code ready containers.
|
||||||
|
|
||||||
|
Follow these steps:
|
||||||
|
|
||||||
|
Install code ready containers if you do not already have it installed.
|
||||||
|
|
||||||
|
Run your cluster with 2 cpus and 8192 MBs of memory at a minimum to support HA:
|
||||||
|
|
||||||
|
```
|
||||||
|
crc start -c 2 -m 8192
|
||||||
|
```
|
||||||
|
|
||||||
|
Recommended settings:
|
||||||
|
|
||||||
|
```
|
||||||
|
crc start -c 4 -m 16384
|
||||||
|
```
|
||||||
|
|
||||||
|
Create file:
|
||||||
|
|
||||||
|
```
|
||||||
|
JFrog-Cloud-Installers/Openshift4/artifactory.cluster.license
|
||||||
|
```
|
||||||
|
|
||||||
|
Paste your license keys into this file for HA configuration of multiple nodes.
|
||||||
|
|
||||||
|
* License keys must be separated by two new lines.
|
||||||
|
|
||||||
|
Run:
|
||||||
|
|
||||||
|
```
|
||||||
|
JFrog-Cloud-Installers/Openshift4/artifactory-ha-operator/setup.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
###### Operator-sdk local
|
||||||
|
|
||||||
|
Run:
|
||||||
|
|
||||||
|
```
|
||||||
|
cd JFrog-Cloud-Installers/Openshift4/artifactory-ha-operator
|
||||||
|
operator-sdk up local
|
||||||
|
```
|
||||||
|
|
||||||
|
## Contributing
|
||||||
|
Please read [CONTRIBUTING.md](JFrog-Cloud-Installers/Openshift4/artifactory-ha-operator/CONTRIBUTING.md) for details on our code of conduct, and the process for submitting pull requests to us.
|
||||||
|
|
||||||
|
## Versioning
|
||||||
|
We use [SemVer](http://semver.org/) for versioning. For the versions available, see the [tags on this repository](https://github.com/jfrog/JFrog-Cloud-Installers/tags).
|
||||||
|
|
||||||
|
## Contact
|
||||||
|
|
||||||
|
Github Issues
|
||||||
11
Openshift4/artifactory-ha-operator/build/Dockerfile
Normal file
11
Openshift4/artifactory-ha-operator/build/Dockerfile
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
FROM quay.io/operator-framework/helm-operator:v0.16.0
|
||||||
|
|
||||||
|
LABEL name="JFrog Artifactory Enterprise Operator" \
|
||||||
|
description="Openshift operator to deploy JFrog Artifactory Enterprise based on the Red Hat Universal Base Image." \
|
||||||
|
vendor="JFrog" \
|
||||||
|
summary="JFrog Artifactory Enterprise Operator" \
|
||||||
|
com.jfrog.license_terms="https://jfrog.com/artifactory/eula/"
|
||||||
|
|
||||||
|
COPY licenses/ /licenses
|
||||||
|
COPY watches.yaml ${HOME}/watches.yaml
|
||||||
|
COPY helm-charts/ ${HOME}/helm-charts/
|
||||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1,23 @@
|
|||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: openshiftartifactoryhas.charts.helm.k8s.io
|
||||||
|
spec:
|
||||||
|
group: charts.helm.k8s.io
|
||||||
|
names:
|
||||||
|
kind: OpenshiftArtifactoryHa
|
||||||
|
listKind: OpenshiftArtifactoryHaList
|
||||||
|
plural: openshiftartifactoryhas
|
||||||
|
singular: openshiftartifactoryha
|
||||||
|
scope: Namespaced
|
||||||
|
subresources:
|
||||||
|
status: {}
|
||||||
|
validation:
|
||||||
|
openAPIV3Schema:
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
version: v1alpha1
|
||||||
|
versions:
|
||||||
|
- name: v1alpha1
|
||||||
|
served: true
|
||||||
|
storage: true
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
packageName: openshiftartifactoryha-operator
|
||||||
|
channels:
|
||||||
|
- name: alpha
|
||||||
|
currentCSV: artifactory-ha-operator.v1.0.0
|
||||||
@@ -0,0 +1,8 @@
|
|||||||
|
apiVersion: operators.coreos.com/v1
|
||||||
|
kind: CatalogSourceConfig
|
||||||
|
metadata:
|
||||||
|
name: artifactory-ha-operator-csc
|
||||||
|
namespace: openshift-marketplace
|
||||||
|
spec:
|
||||||
|
targetNamespace: jfrog-artifactory
|
||||||
|
packages: artifactory-ha-operator
|
||||||
@@ -0,0 +1,23 @@
|
|||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: openshiftartifactoryhas.charts.helm.k8s.io
|
||||||
|
spec:
|
||||||
|
group: charts.helm.k8s.io
|
||||||
|
names:
|
||||||
|
kind: OpenshiftArtifactoryHa
|
||||||
|
listKind: OpenshiftArtifactoryHaList
|
||||||
|
plural: openshiftartifactoryhas
|
||||||
|
singular: openshiftartifactoryha
|
||||||
|
scope: Namespaced
|
||||||
|
subresources:
|
||||||
|
status: {}
|
||||||
|
validation:
|
||||||
|
openAPIV3Schema:
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
version: v1alpha1
|
||||||
|
versions:
|
||||||
|
- name: v1alpha1
|
||||||
|
served: true
|
||||||
|
storage: true
|
||||||
@@ -0,0 +1,104 @@
|
|||||||
|
apiVersion: charts.helm.k8s.io/v1alpha1
|
||||||
|
kind: OpenshiftArtifactoryHa
|
||||||
|
metadata:
|
||||||
|
name: openshiftartifactoryha
|
||||||
|
spec:
|
||||||
|
artifactory-ha:
|
||||||
|
artifactory:
|
||||||
|
customInitContainersBegin: |
|
||||||
|
- name: "redhat-custom-setup"
|
||||||
|
image: {{ index .Values "initContainerImage" }}
|
||||||
|
imagePullPolicy: "{{ .Values.artifactory.image.pullPolicy }}"
|
||||||
|
command:
|
||||||
|
- 'sh'
|
||||||
|
- '-c'
|
||||||
|
- 'chown -R 1030:1030 {{ .Values.artifactory.persistence.mountPath }}'
|
||||||
|
securityContext:
|
||||||
|
runAsUser: 0
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: "{{ .Values.artifactory.persistence.mountPath }}"
|
||||||
|
name: volume
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/artifactory-pro
|
||||||
|
version: 7.4.3
|
||||||
|
joinKey: EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE
|
||||||
|
masterKey: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
|
||||||
|
node:
|
||||||
|
replicaCount: 2
|
||||||
|
waitForPrimaryStartup:
|
||||||
|
enabled: false
|
||||||
|
database:
|
||||||
|
driver: OVERRIDE
|
||||||
|
password: OVERRIDE
|
||||||
|
type: OVERRIDE
|
||||||
|
url: OVERRIDE
|
||||||
|
user: OVERRIDE
|
||||||
|
initContainerImage: registry.redhat.io/ubi8-minimal
|
||||||
|
installerInfo: '{ "productId": "Openshift_artifactory-ha/{{ .Chart.Version }}", "features": [ { "featureId": "ArtifactoryVersion/{{ default .Chart.AppVersion .Values.artifactory.image.version }}" }, { "featureId": "{{ if .Values.postgresql.enabled }}postgresql{{ else }}{{ .Values.database.type }}{{ end }}/0.0.0" }, { "featureId": "Platform/Openshift" }, { "featureId": "Partner/ACC-006983" }, { "featureId": "Channel/Openshift" } ] }'
|
||||||
|
nginx:
|
||||||
|
http:
|
||||||
|
externalPort: 80
|
||||||
|
internalPort: 8080
|
||||||
|
https:
|
||||||
|
externalPort: 443
|
||||||
|
internalPort: 8443
|
||||||
|
image:
|
||||||
|
repository: registry.redhat.io/rhel8/nginx-116
|
||||||
|
version: latest
|
||||||
|
mainConf: |
|
||||||
|
# Main Nginx configuration file
|
||||||
|
worker_processes 4;
|
||||||
|
error_log {{ .Values.nginx.persistence.mountPath }}/logs//error.log warn;
|
||||||
|
pid /tmp/nginx.pid;
|
||||||
|
events {
|
||||||
|
worker_connections 1024;
|
||||||
|
}
|
||||||
|
http {
|
||||||
|
include /etc/nginx/mime.types;
|
||||||
|
default_type application/octet-stream;
|
||||||
|
variables_hash_max_size 1024;
|
||||||
|
variables_hash_bucket_size 64;
|
||||||
|
server_names_hash_max_size 4096;
|
||||||
|
server_names_hash_bucket_size 128;
|
||||||
|
types_hash_max_size 2048;
|
||||||
|
types_hash_bucket_size 64;
|
||||||
|
proxy_read_timeout 2400s;
|
||||||
|
client_header_timeout 2400s;
|
||||||
|
client_body_timeout 2400s;
|
||||||
|
proxy_connect_timeout 75s;
|
||||||
|
proxy_send_timeout 2400s;
|
||||||
|
proxy_buffer_size 32k;
|
||||||
|
proxy_buffers 40 32k;
|
||||||
|
proxy_busy_buffers_size 64k;
|
||||||
|
proxy_temp_file_write_size 250m;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
client_body_buffer_size 128k;
|
||||||
|
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||||
|
'$status $body_bytes_sent "$http_referer" '
|
||||||
|
'"$http_user_agent" "$http_x_forwarded_for"';
|
||||||
|
log_format timing 'ip = $remote_addr '
|
||||||
|
'user = \"$remote_user\" '
|
||||||
|
'local_time = \"$time_local\" '
|
||||||
|
'host = $host '
|
||||||
|
'request = \"$request\" '
|
||||||
|
'status = $status '
|
||||||
|
'bytes = $body_bytes_sent '
|
||||||
|
'upstream = \"$upstream_addr\" '
|
||||||
|
'upstream_time = $upstream_response_time '
|
||||||
|
'request_time = $request_time '
|
||||||
|
'referer = \"$http_referer\" '
|
||||||
|
'UA = \"$http_user_agent\"';
|
||||||
|
access_log {{ .Values.nginx.persistence.mountPath }}/logs/access.log timing;
|
||||||
|
sendfile on;
|
||||||
|
#tcp_nopush on;
|
||||||
|
keepalive_timeout 65;
|
||||||
|
#gzip on;
|
||||||
|
include {{ .Values.nginx.persistence.mountPath }}/conf.d/*.conf;
|
||||||
|
}
|
||||||
|
tlsSecretName: OVERRIDE
|
||||||
|
service:
|
||||||
|
ssloffload: false
|
||||||
|
postgresql:
|
||||||
|
enabled: false
|
||||||
|
waitForDatabase: false
|
||||||
|
|
||||||
4
Openshift4/artifactory-ha-operator/deploy/namespace.yaml
Normal file
4
Openshift4/artifactory-ha-operator/deploy/namespace.yaml
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
kind: Namespace
|
||||||
|
apiVersion: v1
|
||||||
|
metadata:
|
||||||
|
name: jfrog-artifactory
|
||||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1,5 @@
|
|||||||
|
channels:
|
||||||
|
- currentCSV: artifactory-ha-operator.v1.0.0
|
||||||
|
name: alpha
|
||||||
|
defaultChannel: alpha
|
||||||
|
packageName: artifactory-ha-operator
|
||||||
34
Openshift4/artifactory-ha-operator/deploy/operator.yaml
Normal file
34
Openshift4/artifactory-ha-operator/deploy/operator.yaml
Normal file
@@ -0,0 +1,34 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
spec:
|
||||||
|
serviceAccountName: artifactory-ha-operator
|
||||||
|
containers:
|
||||||
|
- name: artifactory-ha-operator
|
||||||
|
image: registry.connect.redhat.com/jfrog/artifactory-operator
|
||||||
|
imagePullPolicy: Always
|
||||||
|
env:
|
||||||
|
- name: WATCH_NAMESPACE
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
- name: POD_NAME
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.name
|
||||||
|
- name: OPERATOR_NAME
|
||||||
|
value: "artifactory-ha-operator"
|
||||||
|
- name: RELATED_IMAGE_ARTIFACTORY_IMAGE_REPOSITORY
|
||||||
|
value: "registry.connect.redhat.com/jfrog/artifactory-pro"
|
||||||
|
- name: RELATED_IMAGE_NGINX_IMAGE_REPOSITORY
|
||||||
|
value: "registry.redhat.io/rhel8/nginx-116"
|
||||||
@@ -0,0 +1,8 @@
|
|||||||
|
apiVersion: operators.coreos.com/v1alpha2
|
||||||
|
kind: OperatorGroup
|
||||||
|
metadata:
|
||||||
|
name: jfrog-operator-group
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
spec:
|
||||||
|
targetNamespaces:
|
||||||
|
- jfrog-artifactory
|
||||||
89
Openshift4/artifactory-ha-operator/deploy/project.yaml
Normal file
89
Openshift4/artifactory-ha-operator/deploy/project.yaml
Normal file
@@ -0,0 +1,89 @@
|
|||||||
|
apiVersion: template.openshift.io/v1
|
||||||
|
kind: Template
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: project-request
|
||||||
|
objects:
|
||||||
|
- apiVersion: project.openshift.io/v1
|
||||||
|
kind: Project
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
openshift.io/description: JFrog Artifactory
|
||||||
|
openshift.io/display-name: jfrog-artifactory
|
||||||
|
openshift.io/requester: integrations@jfrog.com
|
||||||
|
creationTimestamp: null
|
||||||
|
name: jfrog-artifactory
|
||||||
|
spec: {}
|
||||||
|
status: {}
|
||||||
|
- apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
openshift.io/description: Allows all pods in this namespace to pull images from
|
||||||
|
this namespace. It is auto-managed by a controller; remove subjects to disable.
|
||||||
|
creationTimestamp: null
|
||||||
|
name: system:image-pullers
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: system:image-puller
|
||||||
|
subjects:
|
||||||
|
- apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: Group
|
||||||
|
name: system:serviceaccounts:jfrog-artifactory
|
||||||
|
- apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
openshift.io/description: Allows builds in this namespace to push images to
|
||||||
|
this namespace. It is auto-managed by a controller; remove subjects to disable.
|
||||||
|
creationTimestamp: null
|
||||||
|
name: system:image-builders
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: system:image-builder
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: builder
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
- apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
openshift.io/description: Allows deploymentconfigs in this namespace to rollout
|
||||||
|
pods in this namespace. It is auto-managed by a controller; remove subjects
|
||||||
|
to disable.
|
||||||
|
creationTimestamp: null
|
||||||
|
name: system:deployers
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: system:deployer
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: deployer
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
- apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: admin
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: admin
|
||||||
|
subjects:
|
||||||
|
- apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: User
|
||||||
|
name: kubeadmin
|
||||||
|
parameters:
|
||||||
|
- name: PROJECT_NAME
|
||||||
|
- name: PROJECT_DISPLAYNAME
|
||||||
|
- name: PROJECT_DESCRIPTION
|
||||||
|
- name: PROJECT_ADMIN_USER
|
||||||
|
- name: PROJECT_REQUESTING_USER
|
||||||
119
Openshift4/artifactory-ha-operator/deploy/role.yaml
Normal file
119
Openshift4/artifactory-ha-operator/deploy/role.yaml
Normal file
@@ -0,0 +1,119 @@
|
|||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
- services
|
||||||
|
- services/finalizers
|
||||||
|
- endpoints
|
||||||
|
- persistentvolumeclaims
|
||||||
|
- events
|
||||||
|
- configmaps
|
||||||
|
- secrets
|
||||||
|
- serviceaccounts
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- deployments
|
||||||
|
- daemonsets
|
||||||
|
- replicasets
|
||||||
|
- statefulsets
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- namespaces
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resourceNames:
|
||||||
|
- artifactory-ha-operator
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- '*'
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- events
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- apiGroups:
|
||||||
|
- monitoring.coreos.com
|
||||||
|
resources:
|
||||||
|
- servicemonitors
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- create
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resourceNames:
|
||||||
|
- artifactory-ha-operator
|
||||||
|
resources:
|
||||||
|
- deployments/finalizers
|
||||||
|
verbs:
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- replicasets
|
||||||
|
- deployments
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- charts.helm.k8s.io
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- networking.k8s.io
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- '*'
|
||||||
|
- apiGroups:
|
||||||
|
- policy
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- '*'
|
||||||
|
- apiGroups:
|
||||||
|
- 'rbac.authorization.k8s.io'
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- '*'
|
||||||
11
Openshift4/artifactory-ha-operator/deploy/role_binding.yaml
Normal file
11
Openshift4/artifactory-ha-operator/deploy/role_binding.yaml
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
kind: RoleBinding
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
metadata:
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
roleRef:
|
||||||
|
kind: Role
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: artifactory-ha-operator
|
||||||
10
Openshift4/artifactory-ha-operator/deploy/subscription.yaml
Normal file
10
Openshift4/artifactory-ha-operator/deploy/subscription.yaml
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
apiVersion: operators.coreos.com/v1alpha1
|
||||||
|
kind: Subscription
|
||||||
|
metadata:
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
spec:
|
||||||
|
channel: alpha
|
||||||
|
name: artifactory-ha-operator
|
||||||
|
source: artifactory-ha-operator-csc
|
||||||
|
sourceNamespace: openshift-operators
|
||||||
2
Openshift4/artifactory-ha-operator/helm-charts/README.md
Normal file
2
Openshift4/artifactory-ha-operator/helm-charts/README.md
Normal file
@@ -0,0 +1,2 @@
|
|||||||
|
## README
|
||||||
|
Should use the latest openshift artifactory ha chart from the partnership artifactory
|
||||||
202
Openshift4/artifactory-ha-operator/licenses/LICENSE
Executable file
202
Openshift4/artifactory-ha-operator/licenses/LICENSE
Executable file
@@ -0,0 +1,202 @@
|
|||||||
|
|
||||||
|
Apache License
|
||||||
|
Version 2.0, January 2004
|
||||||
|
http://www.apache.org/licenses/
|
||||||
|
|
||||||
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
|
1. Definitions.
|
||||||
|
|
||||||
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
|
|
||||||
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
|
the copyright owner that is granting the License.
|
||||||
|
|
||||||
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
|
other entities that control, are controlled by, or are under common
|
||||||
|
control with that entity. For the purposes of this definition,
|
||||||
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
|
exercising permissions granted by this License.
|
||||||
|
|
||||||
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
|
including but not limited to software source code, documentation
|
||||||
|
source, and configuration files.
|
||||||
|
|
||||||
|
"Object" form shall mean any form resulting from mechanical
|
||||||
|
transformation or translation of a Source form, including but
|
||||||
|
not limited to compiled object code, generated documentation,
|
||||||
|
and conversions to other media types.
|
||||||
|
|
||||||
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
|
"Contribution" shall mean any work of authorship, including
|
||||||
|
the original version of the Work and any modifications or additions
|
||||||
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
|
means any form of electronic, verbal, or written communication sent
|
||||||
|
to the Licensor or its representatives, including but not limited to
|
||||||
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
|
subsequently incorporated within the Work.
|
||||||
|
|
||||||
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
|
Work and such Derivative Works in Source or Object form.
|
||||||
|
|
||||||
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
|
modifications, and in Source or Object form, provided that You
|
||||||
|
meet the following conditions:
|
||||||
|
|
||||||
|
(a) You must give any other recipients of the Work or
|
||||||
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
|
(b) You must cause any modified files to carry prominent notices
|
||||||
|
stating that You changed the files; and
|
||||||
|
|
||||||
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
|
that You distribute, all copyright, patent, trademark, and
|
||||||
|
attribution notices from the Source form of the Work,
|
||||||
|
excluding those notices that do not pertain to any part of
|
||||||
|
the Derivative Works; and
|
||||||
|
|
||||||
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
|
distribution, then any Derivative Works that You distribute must
|
||||||
|
include a readable copy of the attribution notices contained
|
||||||
|
within such NOTICE file, excluding those notices that do not
|
||||||
|
pertain to any part of the Derivative Works, in at least one
|
||||||
|
of the following places: within a NOTICE text file distributed
|
||||||
|
as part of the Derivative Works; within the Source form or
|
||||||
|
documentation, if provided along with the Derivative Works; or,
|
||||||
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
|
You may add Your own copyright statement to Your modifications and
|
||||||
|
may provide additional or different license terms and conditions
|
||||||
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
|
unless required by applicable law (such as deliberate and grossly
|
||||||
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
|
liable to You for damages, including any direct, indirect, special,
|
||||||
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
|
or other liability obligations and/or rights consistent with this
|
||||||
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
|
|
||||||
|
To apply the Apache License to your work, attach the following
|
||||||
|
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||||
|
replaced with your own identifying information. (Don't include
|
||||||
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
|
comment syntax for the file format. We also recommend that a
|
||||||
|
file or class name and description of purpose be included on the
|
||||||
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
|
Copyright [yyyy] [name of copyright owner]
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
8
Openshift4/artifactory-ha-operator/watches.yaml
Normal file
8
Openshift4/artifactory-ha-operator/watches.yaml
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
---
|
||||||
|
- version: v1alpha1
|
||||||
|
group: charts.helm.k8s.io
|
||||||
|
kind: OpenshiftArtifactoryHa
|
||||||
|
chart: helm-charts/openshift-artifactory-ha
|
||||||
|
overrideValues:
|
||||||
|
artifactory-ha.artifactory.image.override: $RELATED_IMAGE_ARTIFACTORY_IMAGE_REPOSITORY
|
||||||
|
artifactory-ha.nginx.image.override: $RELATED_IMAGE_NGINX_IMAGE_REPOSITORY
|
||||||
17
Openshift4/openshift-artifactory-ha/CHANGELOG.md
Executable file
17
Openshift4/openshift-artifactory-ha/CHANGELOG.md
Executable file
@@ -0,0 +1,17 @@
|
|||||||
|
# JFrog Openshift Artifactory-ha Chart Changelog
|
||||||
|
All changes to this chart will be documented in this file.
|
||||||
|
|
||||||
|
## [2.4.6] - May 12, 2020
|
||||||
|
* Updating to latest jfrog/artifactory-ha helm chart version 2.4.6 artifactory version 7.4.3
|
||||||
|
|
||||||
|
## [2.3.0] - April 13, 2020
|
||||||
|
* Updating to latest jfrog/artifactory-ha helm chart version 2.3.0
|
||||||
|
|
||||||
|
## [2.2.9] - April 11, 2020
|
||||||
|
* Fixed issues with master key
|
||||||
|
|
||||||
|
## [2.1.9] - March 17, 2020
|
||||||
|
* Updated Artifactory version to 7.3.2
|
||||||
|
|
||||||
|
## [2.0.35] - March 09, 2020
|
||||||
|
* Updated Artifactory version to 7.2.1
|
||||||
19
Openshift4/openshift-artifactory-ha/Chart.yaml
Executable file
19
Openshift4/openshift-artifactory-ha/Chart.yaml
Executable file
@@ -0,0 +1,19 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
appVersion: 7.4.3
|
||||||
|
description: Openshift JFrog Artifactory HA subcharting Artifactory HA to work in Openshift environment
|
||||||
|
home: https://www.jfrog.com/artifactory/
|
||||||
|
icon: https://raw.githubusercontent.com/jfrog/charts/master/stable/artifactory-ha/logo/artifactory-logo.png
|
||||||
|
keywords:
|
||||||
|
- artifactory
|
||||||
|
- jfrog
|
||||||
|
- devops
|
||||||
|
maintainers:
|
||||||
|
- email: vinaya@jfrog.com
|
||||||
|
name: Vinay Aggarwal
|
||||||
|
- email: johnp@jfrog.com
|
||||||
|
name: John Peterson
|
||||||
|
name: openshift-artifactory-ha
|
||||||
|
sources:
|
||||||
|
- https://bintray.com/jfrog/product/JFrog-Artifactory-Pro/view
|
||||||
|
- https://github.com/jfrog/charts
|
||||||
|
version: 2.4.6
|
||||||
201
Openshift4/openshift-artifactory-ha/LICENSE
Executable file
201
Openshift4/openshift-artifactory-ha/LICENSE
Executable file
@@ -0,0 +1,201 @@
|
|||||||
|
Apache License
|
||||||
|
Version 2.0, January 2004
|
||||||
|
http://www.apache.org/licenses/
|
||||||
|
|
||||||
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
|
1. Definitions.
|
||||||
|
|
||||||
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
|
|
||||||
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
|
the copyright owner that is granting the License.
|
||||||
|
|
||||||
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
|
other entities that control, are controlled by, or are under common
|
||||||
|
control with that entity. For the purposes of this definition,
|
||||||
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
|
exercising permissions granted by this License.
|
||||||
|
|
||||||
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
|
including but not limited to software source code, documentation
|
||||||
|
source, and configuration files.
|
||||||
|
|
||||||
|
"Object" form shall mean any form resulting from mechanical
|
||||||
|
transformation or translation of a Source form, including but
|
||||||
|
not limited to compiled object code, generated documentation,
|
||||||
|
and conversions to other media types.
|
||||||
|
|
||||||
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
|
"Contribution" shall mean any work of authorship, including
|
||||||
|
the original version of the Work and any modifications or additions
|
||||||
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
|
means any form of electronic, verbal, or written communication sent
|
||||||
|
to the Licensor or its representatives, including but not limited to
|
||||||
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
|
subsequently incorporated within the Work.
|
||||||
|
|
||||||
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
|
Work and such Derivative Works in Source or Object form.
|
||||||
|
|
||||||
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
|
modifications, and in Source or Object form, provided that You
|
||||||
|
meet the following conditions:
|
||||||
|
|
||||||
|
(a) You must give any other recipients of the Work or
|
||||||
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
|
(b) You must cause any modified files to carry prominent notices
|
||||||
|
stating that You changed the files; and
|
||||||
|
|
||||||
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
|
that You distribute, all copyright, patent, trademark, and
|
||||||
|
attribution notices from the Source form of the Work,
|
||||||
|
excluding those notices that do not pertain to any part of
|
||||||
|
the Derivative Works; and
|
||||||
|
|
||||||
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
|
distribution, then any Derivative Works that You distribute must
|
||||||
|
include a readable copy of the attribution notices contained
|
||||||
|
within such NOTICE file, excluding those notices that do not
|
||||||
|
pertain to any part of the Derivative Works, in at least one
|
||||||
|
of the following places: within a NOTICE text file distributed
|
||||||
|
as part of the Derivative Works; within the Source form or
|
||||||
|
documentation, if provided along with the Derivative Works; or,
|
||||||
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
|
You may add Your own copyright statement to Your modifications and
|
||||||
|
may provide additional or different license terms and conditions
|
||||||
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
|
unless required by applicable law (such as deliberate and grossly
|
||||||
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
|
liable to You for damages, including any direct, indirect, special,
|
||||||
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
|
or other liability obligations and/or rights consistent with this
|
||||||
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
|
|
||||||
|
To apply the Apache License to your work, attach the following
|
||||||
|
boilerplate notice, with the fields enclosed by brackets "{}"
|
||||||
|
replaced with your own identifying information. (Don't include
|
||||||
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
|
comment syntax for the file format. We also recommend that a
|
||||||
|
file or class name and description of purpose be included on the
|
||||||
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
|
Copyright {yyyy} {name of copyright owner}
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
55
Openshift4/openshift-artifactory-ha/helminstall.sh
Executable file
55
Openshift4/openshift-artifactory-ha/helminstall.sh
Executable file
@@ -0,0 +1,55 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
# PreReq'd:
|
||||||
|
# helm install postgres bitnami/postgresql
|
||||||
|
# follow artifactory postgresql db setup:
|
||||||
|
# https://www.jfrog.com/confluence/display/JFROG/PostgreSQL
|
||||||
|
POSTGRES=$(helm ls | grep postgres | wc -l)
|
||||||
|
|
||||||
|
if [[ "$POSTGRES" =~ (0) ]]
|
||||||
|
then
|
||||||
|
echo "External DB is required to run Jfrog Openshift Artifactory Helm chart"
|
||||||
|
echo ""
|
||||||
|
echo "Postgresql helm chart must be installed prior to installing this helm installer script."
|
||||||
|
echo ""
|
||||||
|
echo "helm install postgres bitnami/postgresql"
|
||||||
|
echo ""
|
||||||
|
echo "follow artifactory postgresql db setup:"
|
||||||
|
echo "https://www.jfrog.com/confluence/display/JFROG/PostgreSQL"
|
||||||
|
exit 1
|
||||||
|
else
|
||||||
|
if [[ -z "$1" ]]
|
||||||
|
then
|
||||||
|
echo "Installing Jfrog Artifactory Openshift Helm"
|
||||||
|
else
|
||||||
|
echo "Patching Environment for RunAsAnyUid"
|
||||||
|
# patch the restricted scc to allow the pods to run as anyuid
|
||||||
|
oc patch scc restricted --patch '{"fsGroup":{"type":"RunAsAny"},"runAsUser":{"type":"RunAsAny"},"seLinuxContext":{"type":"RunAsAny"}}' --type=merge
|
||||||
|
if [[ -f "artifactory.cluster.license" ]]
|
||||||
|
then
|
||||||
|
echo "Creating k8s secret for Artifactory cluster licenses from file: artifactory.cluster.license"
|
||||||
|
# create the license secret
|
||||||
|
oc create secret generic artifactory-license --from-file=artifactory.cluster.license
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -f "tls.crt" ]]
|
||||||
|
then
|
||||||
|
echo "Creating k8s secret for TLS tls-ingress from files tls.crt & tls.key"
|
||||||
|
# create the tls secret
|
||||||
|
oc create secret tls tls-ingress --cert=tls.crt --key=tls.key
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# install via helm with default postgresql configuration
|
||||||
|
helm install artifactory-ha . \
|
||||||
|
--set artifactory-ha.nginx.service.ssloffload=true \
|
||||||
|
--set artifactory-ha.nginx.tlsSecretName=tls-ingress \
|
||||||
|
--set artifactory-ha.artifactory.node.replicaCount=1 \
|
||||||
|
--set artifactory-ha.artifactory.license.secret=artifactory-license,artifactory-ha.artifactory.license.dataKey=artifactory.cluster.license \
|
||||||
|
--set artifactory-ha.database.type=postgresql \
|
||||||
|
--set artifactory-ha.database.driver=org.postgresql.Driver \
|
||||||
|
--set artifactory-ha.database.url=jdbc:postgresql://postgres-postgresql:5432/artifactory \
|
||||||
|
--set artifactory-ha.database.user=artifactory \
|
||||||
|
--set artifactory-ha.database.password=password
|
||||||
|
|
||||||
6
Openshift4/openshift-artifactory-ha/requirements.lock
Normal file
6
Openshift4/openshift-artifactory-ha/requirements.lock
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
dependencies:
|
||||||
|
- name: artifactory-ha
|
||||||
|
repository: https://charts.jfrog.io/
|
||||||
|
version: 2.4.6
|
||||||
|
digest: sha256:e0c6b67c9745748aba555b2383d832fee3a977fcde31c5a4f3a5f73f4a357a92
|
||||||
|
generated: "2020-05-12T11:37:46.61737-07:00"
|
||||||
4
Openshift4/openshift-artifactory-ha/requirements.yaml
Normal file
4
Openshift4/openshift-artifactory-ha/requirements.yaml
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
dependencies:
|
||||||
|
- name: artifactory-ha
|
||||||
|
version: 2.4.6
|
||||||
|
repository: https://charts.jfrog.io/
|
||||||
109
Openshift4/openshift-artifactory-ha/values.yaml
Executable file
109
Openshift4/openshift-artifactory-ha/values.yaml
Executable file
@@ -0,0 +1,109 @@
|
|||||||
|
# Openshift Artifactory HA
|
||||||
|
# This helm chart subcharts the latest jfrog/artifactory-ha chart
|
||||||
|
# and applies various things like initContainers, nginx mainConf, etc
|
||||||
|
# to enable the artifactory-ha helm chart to work in an openshift environment
|
||||||
|
artifactory-ha:
|
||||||
|
###################################
|
||||||
|
# EDIT TO YOUR DB CONFIGURATION
|
||||||
|
###################################
|
||||||
|
database:
|
||||||
|
type: "OVERRIDE"
|
||||||
|
driver: "OVERRIDE"
|
||||||
|
url: "OVERRIDE"
|
||||||
|
user: "OVERRIDE"
|
||||||
|
password: "OVERRIDE"
|
||||||
|
initContainerImage: registry.redhat.io/ubi8-minimal
|
||||||
|
waitForDatabase: false
|
||||||
|
installerInfo: '{ "productId": "Openshift_artifactory-ha/{{ .Chart.Version }}", "features": [ { "featureId": "ArtifactoryVersion/{{ default .Chart.AppVersion .Values.artifactory.image.version }}" }, { "featureId": "{{ if .Values.postgresql.enabled }}postgresql{{ else }}{{ .Values.database.type }}{{ end }}/0.0.0" }, { "featureId": "Platform/Openshift" }, { "featureId": "Partner/ACC-006983" }, { "featureId": "Channel/Openshift" } ] }'
|
||||||
|
artifactory:
|
||||||
|
## Add custom init containers execution before predefined init containers
|
||||||
|
customInitContainersBegin: |
|
||||||
|
- name: "redhat-custom-setup"
|
||||||
|
#image: "{{ .Values.initContainerImage }}"
|
||||||
|
image: {{ index .Values "initContainerImage" }}
|
||||||
|
imagePullPolicy: "{{ .Values.artifactory.image.pullPolicy }}"
|
||||||
|
command:
|
||||||
|
- 'sh'
|
||||||
|
- '-c'
|
||||||
|
- 'chown -R 1030:1030 {{ .Values.artifactory.persistence.mountPath }}'
|
||||||
|
securityContext:
|
||||||
|
runAsUser: 0
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: "{{ .Values.artifactory.persistence.mountPath }}"
|
||||||
|
name: volume
|
||||||
|
## Change to use RH UBI images
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/artifactory-pro
|
||||||
|
version: 7.4.3
|
||||||
|
node:
|
||||||
|
replicaCount: 2
|
||||||
|
waitForPrimaryStartup:
|
||||||
|
enabled: false
|
||||||
|
masterKey: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
|
||||||
|
joinKey: EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE
|
||||||
|
postgresql:
|
||||||
|
enabled: false
|
||||||
|
nginx:
|
||||||
|
image:
|
||||||
|
repository: registry.redhat.io/rhel8/nginx-116
|
||||||
|
version: latest
|
||||||
|
## K8S secret name for the TLS secret to be used for SSL
|
||||||
|
tlsSecretName: "OVERRIDE"
|
||||||
|
service:
|
||||||
|
ssloffload: false
|
||||||
|
http:
|
||||||
|
externalPort: 80
|
||||||
|
internalPort: 8080
|
||||||
|
https:
|
||||||
|
externalPort: 443
|
||||||
|
internalPort: 8443
|
||||||
|
mainConf: |
|
||||||
|
# Main Nginx configuration file
|
||||||
|
worker_processes 4;
|
||||||
|
error_log {{ .Values.nginx.persistence.mountPath }}/logs//error.log warn;
|
||||||
|
pid /tmp/nginx.pid;
|
||||||
|
events {
|
||||||
|
worker_connections 1024;
|
||||||
|
}
|
||||||
|
http {
|
||||||
|
include /etc/nginx/mime.types;
|
||||||
|
default_type application/octet-stream;
|
||||||
|
variables_hash_max_size 1024;
|
||||||
|
variables_hash_bucket_size 64;
|
||||||
|
server_names_hash_max_size 4096;
|
||||||
|
server_names_hash_bucket_size 128;
|
||||||
|
types_hash_max_size 2048;
|
||||||
|
types_hash_bucket_size 64;
|
||||||
|
proxy_read_timeout 2400s;
|
||||||
|
client_header_timeout 2400s;
|
||||||
|
client_body_timeout 2400s;
|
||||||
|
proxy_connect_timeout 75s;
|
||||||
|
proxy_send_timeout 2400s;
|
||||||
|
proxy_buffer_size 32k;
|
||||||
|
proxy_buffers 40 32k;
|
||||||
|
proxy_busy_buffers_size 64k;
|
||||||
|
proxy_temp_file_write_size 250m;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
client_body_buffer_size 128k;
|
||||||
|
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||||
|
'$status $body_bytes_sent "$http_referer" '
|
||||||
|
'"$http_user_agent" "$http_x_forwarded_for"';
|
||||||
|
log_format timing 'ip = $remote_addr '
|
||||||
|
'user = \"$remote_user\" '
|
||||||
|
'local_time = \"$time_local\" '
|
||||||
|
'host = $host '
|
||||||
|
'request = \"$request\" '
|
||||||
|
'status = $status '
|
||||||
|
'bytes = $body_bytes_sent '
|
||||||
|
'upstream = \"$upstream_addr\" '
|
||||||
|
'upstream_time = $upstream_response_time '
|
||||||
|
'request_time = $request_time '
|
||||||
|
'referer = \"$http_referer\" '
|
||||||
|
'UA = \"$http_user_agent\"';
|
||||||
|
access_log {{ .Values.nginx.persistence.mountPath }}/logs/access.log timing;
|
||||||
|
sendfile on;
|
||||||
|
#tcp_nopush on;
|
||||||
|
keepalive_timeout 65;
|
||||||
|
#gzip on;
|
||||||
|
include {{ .Values.nginx.persistence.mountPath }}/conf.d/*.conf;
|
||||||
|
}
|
||||||
17
Openshift4/openshift-xray/CHANGELOG.md
Executable file
17
Openshift4/openshift-xray/CHANGELOG.md
Executable file
@@ -0,0 +1,17 @@
|
|||||||
|
# JFrog Openshift Artifactory-Xray Chart Changelog
|
||||||
|
All changes to this chart will be documented in this file.
|
||||||
|
|
||||||
|
## [2.4.0] - April 14, 2020
|
||||||
|
* Updating to latest jfrog/artifactory-ha helm chart version 2.4.0 adding new requirements.yaml entry for xray helm charts to combine together into one umbrella chart
|
||||||
|
|
||||||
|
## [2.3.0] - April 13, 2020
|
||||||
|
* Updating to latest jfrog/artifactory-ha helm chart version 2.3.0
|
||||||
|
|
||||||
|
## [2.2.9] - April 11, 2020
|
||||||
|
* Fixed issues with master key
|
||||||
|
|
||||||
|
## [2.1.9] - March 17, 2020
|
||||||
|
* Updated Artifactory version to 7.3.2
|
||||||
|
|
||||||
|
## [2.0.35] - March 09, 2020
|
||||||
|
* Updated Artifactory version to 7.2.1
|
||||||
16
Openshift4/openshift-xray/Chart.yaml
Executable file
16
Openshift4/openshift-xray/Chart.yaml
Executable file
@@ -0,0 +1,16 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
appVersion: 3.3.0
|
||||||
|
description: Universal component scan for security and license inventory and impact analysis
|
||||||
|
sources:
|
||||||
|
- https://bintray.com/jfrog/product/xray/view
|
||||||
|
- https://github.com/jfrog/charts
|
||||||
|
keywords:
|
||||||
|
- xray
|
||||||
|
- jfrog
|
||||||
|
maintainers:
|
||||||
|
- email: vinaya@jfrog.com
|
||||||
|
name: Vinay Aggarwal
|
||||||
|
- email: johnp@jfrog.com
|
||||||
|
name: John Peterson
|
||||||
|
name: openshift-xray
|
||||||
|
version: 3.3.1
|
||||||
201
Openshift4/openshift-xray/LICENSE
Executable file
201
Openshift4/openshift-xray/LICENSE
Executable file
@@ -0,0 +1,201 @@
|
|||||||
|
Apache License
|
||||||
|
Version 2.0, January 2004
|
||||||
|
http://www.apache.org/licenses/
|
||||||
|
|
||||||
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
|
1. Definitions.
|
||||||
|
|
||||||
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
|
|
||||||
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
|
the copyright owner that is granting the License.
|
||||||
|
|
||||||
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
|
other entities that control, are controlled by, or are under common
|
||||||
|
control with that entity. For the purposes of this definition,
|
||||||
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
|
exercising permissions granted by this License.
|
||||||
|
|
||||||
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
|
including but not limited to software source code, documentation
|
||||||
|
source, and configuration files.
|
||||||
|
|
||||||
|
"Object" form shall mean any form resulting from mechanical
|
||||||
|
transformation or translation of a Source form, including but
|
||||||
|
not limited to compiled object code, generated documentation,
|
||||||
|
and conversions to other media types.
|
||||||
|
|
||||||
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
|
"Contribution" shall mean any work of authorship, including
|
||||||
|
the original version of the Work and any modifications or additions
|
||||||
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
|
means any form of electronic, verbal, or written communication sent
|
||||||
|
to the Licensor or its representatives, including but not limited to
|
||||||
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
|
subsequently incorporated within the Work.
|
||||||
|
|
||||||
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
|
Work and such Derivative Works in Source or Object form.
|
||||||
|
|
||||||
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
|
modifications, and in Source or Object form, provided that You
|
||||||
|
meet the following conditions:
|
||||||
|
|
||||||
|
(a) You must give any other recipients of the Work or
|
||||||
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
|
(b) You must cause any modified files to carry prominent notices
|
||||||
|
stating that You changed the files; and
|
||||||
|
|
||||||
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
|
that You distribute, all copyright, patent, trademark, and
|
||||||
|
attribution notices from the Source form of the Work,
|
||||||
|
excluding those notices that do not pertain to any part of
|
||||||
|
the Derivative Works; and
|
||||||
|
|
||||||
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
|
distribution, then any Derivative Works that You distribute must
|
||||||
|
include a readable copy of the attribution notices contained
|
||||||
|
within such NOTICE file, excluding those notices that do not
|
||||||
|
pertain to any part of the Derivative Works, in at least one
|
||||||
|
of the following places: within a NOTICE text file distributed
|
||||||
|
as part of the Derivative Works; within the Source form or
|
||||||
|
documentation, if provided along with the Derivative Works; or,
|
||||||
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
|
You may add Your own copyright statement to Your modifications and
|
||||||
|
may provide additional or different license terms and conditions
|
||||||
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
|
unless required by applicable law (such as deliberate and grossly
|
||||||
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
|
liable to You for damages, including any direct, indirect, special,
|
||||||
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
|
or other liability obligations and/or rights consistent with this
|
||||||
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
|
|
||||||
|
To apply the Apache License to your work, attach the following
|
||||||
|
boilerplate notice, with the fields enclosed by brackets "{}"
|
||||||
|
replaced with your own identifying information. (Don't include
|
||||||
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
|
comment syntax for the file format. We also recommend that a
|
||||||
|
file or class name and description of purpose be included on the
|
||||||
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
|
Copyright {yyyy} {name of copyright owner}
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
71
Openshift4/openshift-xray/helminstall.sh
Executable file
71
Openshift4/openshift-xray/helminstall.sh
Executable file
@@ -0,0 +1,71 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
# PreReq'd:
|
||||||
|
# helm install postgres bitnami/postgresql
|
||||||
|
# follow artifactory postgresql db setup:
|
||||||
|
# https://www.jfrog.com/confluence/display/JFROG/PostgreSQL
|
||||||
|
POSTGRES=$(helm ls | grep postgres | wc -l)
|
||||||
|
ARTIFACTORY=$(helm ls | grep artifactory | wc -l)
|
||||||
|
if [[ "$POSTGRES" =~ (0) ]]
|
||||||
|
then
|
||||||
|
echo "External DB is required to run Jfrog Openshift Xray Helm chart"
|
||||||
|
echo ""
|
||||||
|
echo "Postgresql helm chart must be installed prior to installing this helm installer script."
|
||||||
|
echo ""
|
||||||
|
echo "helm install postgres bitnami/postgresql"
|
||||||
|
echo ""
|
||||||
|
echo "follow artifactory postgresql db setup:"
|
||||||
|
echo "https://www.jfrog.com/confluence/display/JFROG/PostgreSQL"
|
||||||
|
exit 1
|
||||||
|
elif [[ "$ARTIFACTORY" =~ (0) ]]
|
||||||
|
then
|
||||||
|
echo "Artifactory Instance is required to run Jfrog Openshift Xray Helm chart"
|
||||||
|
echo ""
|
||||||
|
echo "Please use helm to first install Artifactory: openshift-artifactory-ha"
|
||||||
|
echo ""
|
||||||
|
echo "Then install Openshift xray helm chart once artifactory is ready."
|
||||||
|
echo ""
|
||||||
|
exit 1
|
||||||
|
else
|
||||||
|
echo "Installing Openshift Xray Helm"
|
||||||
|
fi
|
||||||
|
|
||||||
|
DBURL=""
|
||||||
|
if [[ -z "$1" ]]
|
||||||
|
then
|
||||||
|
DBURL="postgres://postgres-postgresql:5432/xraydb?sslmode=disable"
|
||||||
|
else
|
||||||
|
DBURL=$1
|
||||||
|
fi
|
||||||
|
|
||||||
|
DBUSER=""
|
||||||
|
if [[ -z "$2" ]]
|
||||||
|
then
|
||||||
|
DBUSER="artifactory"
|
||||||
|
else
|
||||||
|
DBUSER=$2
|
||||||
|
fi
|
||||||
|
|
||||||
|
DBPASS=""
|
||||||
|
if [[ -z "$3" ]]
|
||||||
|
then
|
||||||
|
DBPASS="password"
|
||||||
|
else
|
||||||
|
DBPASS=$3
|
||||||
|
fi
|
||||||
|
|
||||||
|
JFROGURL=""
|
||||||
|
if [[ -z "$4" ]]
|
||||||
|
then
|
||||||
|
JFROGURL="http://openshiftartifactoryha-nginx"
|
||||||
|
else
|
||||||
|
JFROGURL=$4
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
# install via helm with default postgresql configuration
|
||||||
|
helm install xray . \
|
||||||
|
--set xray.database.url=$DBURL \
|
||||||
|
--set xray.database.user=$DBUSER \
|
||||||
|
--set xray.database.password=$DBPASS \
|
||||||
|
--set xray.xray.jfrogUrl=$JFROGURL
|
||||||
25
Openshift4/openshift-xray/rabbitmq.yaml
Normal file
25
Openshift4/openshift-xray/rabbitmq.yaml
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: rabbitmq
|
||||||
|
name: rabbitmq
|
||||||
|
namespace: default
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: rabbitmq
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: rabbitmq
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- image: quay.io/jfrog/xray-rabbitmq-rh:3.8.0
|
||||||
|
imagePullPolicy: "Always"
|
||||||
|
name: xray-rabbitmq
|
||||||
|
ports:
|
||||||
|
- containerPort: 4369
|
||||||
|
- containerPort: 5672
|
||||||
|
- containerPort: 25672
|
||||||
26
Openshift4/openshift-xray/rabbitmqservice.yaml
Normal file
26
Openshift4/openshift-xray/rabbitmqservice.yaml
Normal file
@@ -0,0 +1,26 @@
|
|||||||
|
kind: Service
|
||||||
|
apiVersion: v1
|
||||||
|
metadata:
|
||||||
|
name: rabbitmq-lb
|
||||||
|
labels:
|
||||||
|
app: rabbitmq
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: rabbitmq
|
||||||
|
ports:
|
||||||
|
- name: port1
|
||||||
|
protocol: TCP
|
||||||
|
port: 4369
|
||||||
|
targetPort: 4369
|
||||||
|
- name: port3
|
||||||
|
protocol: TCP
|
||||||
|
port: 5672
|
||||||
|
targetPort: 5672
|
||||||
|
- name: port4
|
||||||
|
protocol: TCP
|
||||||
|
port: 25672
|
||||||
|
targetPort: 25672
|
||||||
|
type: ClusterIP
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
6
Openshift4/openshift-xray/requirements.lock
Normal file
6
Openshift4/openshift-xray/requirements.lock
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
dependencies:
|
||||||
|
- name: xray
|
||||||
|
repository: https://charts.jfrog.io/
|
||||||
|
version: 3.3.1
|
||||||
|
digest: sha256:22010f573f0dfaf95a05835e6b712ef74438aa7c5f39674cd8fd27390bc99d7e
|
||||||
|
generated: "2020-05-21T13:54:18.60088-07:00"
|
||||||
4
Openshift4/openshift-xray/requirements.yaml
Normal file
4
Openshift4/openshift-xray/requirements.yaml
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
dependencies:
|
||||||
|
- name: xray
|
||||||
|
version: 3.3.1
|
||||||
|
repository: https://charts.jfrog.io/
|
||||||
77
Openshift4/openshift-xray/values.yaml
Executable file
77
Openshift4/openshift-xray/values.yaml
Executable file
@@ -0,0 +1,77 @@
|
|||||||
|
# Openshift Jfrog Xray
|
||||||
|
xray:
|
||||||
|
replicaCount: 1
|
||||||
|
xray:
|
||||||
|
masterKey: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
|
||||||
|
joinKey: EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE
|
||||||
|
consoleLog: false
|
||||||
|
jfrogUrl: "OVERRIDE"
|
||||||
|
postgresql:
|
||||||
|
enabled: false
|
||||||
|
database:
|
||||||
|
url: "OVERRIDE"
|
||||||
|
user: "OVERRIDE"
|
||||||
|
password: "OVERRIDE"
|
||||||
|
rabbitmq-ha:
|
||||||
|
enabled: true
|
||||||
|
replicaCount: 1
|
||||||
|
image:
|
||||||
|
tag: 3.7.21-alpine
|
||||||
|
rabbitmqUsername: guest
|
||||||
|
rabbitmqPassword: ""
|
||||||
|
persistentVolume:
|
||||||
|
enabled: true
|
||||||
|
size: 20Gi
|
||||||
|
rbac:
|
||||||
|
create: true
|
||||||
|
preStartCommand:
|
||||||
|
global:
|
||||||
|
postgresqlTlsSecret:
|
||||||
|
analysis:
|
||||||
|
name: xray-analysis
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-analysis
|
||||||
|
version: 3.3.0
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
preStartCommand:
|
||||||
|
indexer:
|
||||||
|
name: xray-indexer
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-indexer
|
||||||
|
version: 3.3.0
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
persist:
|
||||||
|
name: xray-persist
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-persist
|
||||||
|
version: 3.3.0
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
persistence:
|
||||||
|
size: 10Gi
|
||||||
|
preStartCommand:
|
||||||
|
server:
|
||||||
|
name: xray-server
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-server
|
||||||
|
version: 3.3.0
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
replicaCount: 1
|
||||||
|
router:
|
||||||
|
name: router
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-router
|
||||||
|
version: 1.2.1
|
||||||
|
imagePullPolicy: IfNotPresent
|
||||||
|
rabbitmq-ha:
|
||||||
|
enabled: true
|
||||||
|
replicaCount: 1
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-rabbitmq
|
||||||
|
tag: 3.8.0
|
||||||
|
rabbitmqEpmdPort: 4369
|
||||||
|
rabbitmqNodePort: 5672
|
||||||
|
rabbitmqManagerPort: 15672
|
||||||
6
Openshift4/xray-operator/CHANGELOG.md
Executable file
6
Openshift4/xray-operator/CHANGELOG.md
Executable file
@@ -0,0 +1,6 @@
|
|||||||
|
# JFrog Openshift Xray Chart Changelog
|
||||||
|
All changes to this chart will be documented in this file.
|
||||||
|
|
||||||
|
## [3.3.0] - May 22, 2020
|
||||||
|
* Deploying JFrog Xray 3.3.0 as an Operator initial version of Jfrog Xray supported
|
||||||
|
|
||||||
62
Openshift4/xray-operator/CONTRIBUTING.md
Normal file
62
Openshift4/xray-operator/CONTRIBUTING.md
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
# Contributing
|
||||||
|
|
||||||
|
When contributing to this repository, please first discuss the change you wish to make via slack, issue, email, or any other method with the owners of this repository before making a change.
|
||||||
|
|
||||||
|
Note we have a code of conduct, please follow it in all your interactions with the project.
|
||||||
|
|
||||||
|
## Pull Request Process
|
||||||
|
|
||||||
|
Ensure any install or build dependencies are removed before the end of the layer when doing a build.
|
||||||
|
|
||||||
|
Update the README.md with details of changes to the interface, this includes new environment variables, exposed ports, useful file locations and container parameters.
|
||||||
|
|
||||||
|
Increase the version numbers in any examples files and the README.md to the new version that this Pull Request would represent. The versioning scheme we use is SemVer.
|
||||||
|
|
||||||
|
You may merge the Pull Request in once you have the sign-off of one other developer.
|
||||||
|
|
||||||
|
## Code of Conduct
|
||||||
|
### Our Pledge
|
||||||
|
|
||||||
|
In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
|
||||||
|
|
||||||
|
### Our Standards
|
||||||
|
|
||||||
|
Examples of behavior that contributes to creating a positive environment include:
|
||||||
|
|
||||||
|
```
|
||||||
|
Using welcoming and inclusive language
|
||||||
|
Being respectful of differing viewpoints and experiences
|
||||||
|
Gracefully accepting constructive criticism
|
||||||
|
Focusing on what is best for the company
|
||||||
|
Showing empathy towards other colleagues
|
||||||
|
```
|
||||||
|
|
||||||
|
Examples of unacceptable behavior by participants include:
|
||||||
|
|
||||||
|
```
|
||||||
|
The use of sexualized language or imagery and unwelcome sexual attention or advances
|
||||||
|
Trolling, insulting/derogatory comments, and personal or political attacks
|
||||||
|
Public or private harassment
|
||||||
|
Publishing others' private information, such as a physical or electronic address, without explicit permission
|
||||||
|
Other conduct which could reasonably be considered inappropriate in a professional setting
|
||||||
|
```
|
||||||
|
|
||||||
|
### Our Responsibilities
|
||||||
|
|
||||||
|
Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
|
||||||
|
|
||||||
|
Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
|
||||||
|
|
||||||
|
## Scope
|
||||||
|
|
||||||
|
This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project. Examples of representing a project include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
|
||||||
|
|
||||||
|
## Enforcement
|
||||||
|
|
||||||
|
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team. All complaints will be reviewed and investigated and will result in a response that is deemed necessary and appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
|
||||||
|
|
||||||
|
Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
|
||||||
|
|
||||||
|
Attribution
|
||||||
|
|
||||||
|
This Code of Conduct is adapted from the [Contributor Covenant version 1.4] (http://contributor-covenant.org/version/1/4)
|
||||||
90
Openshift4/xray-operator/README.md
Normal file
90
Openshift4/xray-operator/README.md
Normal file
@@ -0,0 +1,90 @@
|
|||||||
|
# JFrog Xray Enterprise Operator
|
||||||
|
|
||||||
|
This code base is intended to deploy Xray as an operator to an Openshift4 cluster. You can run the operator either through the operator-sdk, operator.yaml, or the Operatorhub.
|
||||||
|
|
||||||
|
Openshift OperatorHub has the latest official supported Cluster Service Version (CSV) for the OLM catalog.
|
||||||
|
|
||||||
|
## Getting Started
|
||||||
|
|
||||||
|
These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
###### Openshift 4 Cluster
|
||||||
|
|
||||||
|
Available on AWS, GCP, or Azure. Follow the Cloud installer guide available here:
|
||||||
|
|
||||||
|
[Openshift 4 Installers](https://cloud.redhat.com/openshift/install)
|
||||||
|
|
||||||
|
Or run it locally using CodeReadyContainers.
|
||||||
|
|
||||||
|
[Code Ready Container Installer](https://cloud.redhat.com/openshift/install/crc/installer-provisioned)
|
||||||
|
|
||||||
|
###### Openshift 4 Command Line Tools
|
||||||
|
|
||||||
|
Download and install the Openshift command line tool: oc
|
||||||
|
|
||||||
|
[Getting Started with CLI](https://docs.openshift.com/container-platform/4.2/cli_reference/openshift_cli/getting-started-cli.html)
|
||||||
|
|
||||||
|
## Cluster Setup
|
||||||
|
###### Security Context Constraints - Anyuid
|
||||||
|
|
||||||
|
Openshift only allows statefulsets / pods to run in specific user and group id ranges.
|
||||||
|
Xray currently uses users outside of this allowed range.
|
||||||
|
For this reason the service account for the operator in the jfrog-artifactory namespace must be granted anyuid privileges.
|
||||||
|
|
||||||
|
```
|
||||||
|
oc adm policy add-scc-to-user anyuid system:serviceaccount:jfrog-artifactory:xray-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
Where anyuid is the Security context constraint being applied to the service account artifactory-ha-operator in namespace jfrog-artifactory.
|
||||||
|
|
||||||
|
In addition to this the restricted scc policy will need to be changed to allow anyuid:
|
||||||
|
|
||||||
|
```
|
||||||
|
oc patch scc restricted --patch '{"fsGroup":{"type":"RunAsAny"},"runAsUser":{"type":"RunAsAny"},"seLinuxContext":{"type":"RunAsAny"}}' --type=merge
|
||||||
|
```
|
||||||
|
|
||||||
|
## Installation types
|
||||||
|
###### OLM Catalog
|
||||||
|
To install via the OLM catalog download the operator from the Operator hub and install it via the Openshift console GUI
|
||||||
|
|
||||||
|
To test OLM catalog installs you will need to deploy the lastest ClusterServiceVersion found at:
|
||||||
|
|
||||||
|
```
|
||||||
|
deploy/olm-catalog/artifactory-ha-operator/X.X.X/xray-operator.vX.X.X.clusterserviceversion.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
This will install the operator into whatever cluster your kubectl or oc program is currently logged into.
|
||||||
|
|
||||||
|
Please refer to Local Testing section below for full instructions.
|
||||||
|
|
||||||
|
###### Operator YAML
|
||||||
|
To install the operator via the Operator YAML follow the Local Testing tests.
|
||||||
|
|
||||||
|
Instead of running operator-sdk up local for the last step run:
|
||||||
|
|
||||||
|
```
|
||||||
|
oc apply -f deploy/operator.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
This will deploy the operator into the cluster.
|
||||||
|
|
||||||
|
###### Operator-sdk local
|
||||||
|
|
||||||
|
Run:
|
||||||
|
|
||||||
|
```
|
||||||
|
cd JFrog-Cloud-Installers/Openshift4/xray-operator
|
||||||
|
operator-sdk up local
|
||||||
|
```
|
||||||
|
|
||||||
|
## Contributing
|
||||||
|
Please read [CONTRIBUTING.md](JFrog-Cloud-Installers/Openshift4/xray-operator/CONTRIBUTING.md) for details on our code of conduct, and the process for submitting pull requests to us.
|
||||||
|
|
||||||
|
## Versioning
|
||||||
|
We use [SemVer](http://semver.org/) for versioning. For the versions available, see the [tags on this repository](https://github.com/jfrog/JFrog-Cloud-Installers/tags).
|
||||||
|
|
||||||
|
## Contact
|
||||||
|
|
||||||
|
Github Issues
|
||||||
11
Openshift4/xray-operator/build/Dockerfile
Normal file
11
Openshift4/xray-operator/build/Dockerfile
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
FROM quay.io/operator-framework/helm-operator:v0.16.0
|
||||||
|
|
||||||
|
LABEL name="JFrog Xray Enterprise Operator" \
|
||||||
|
description="Openshift operator to deploy JFrog Xray Enterprise based on the Red Hat Universal Base Image." \
|
||||||
|
vendor="JFrog" \
|
||||||
|
summary="JFrog Xray Enterprise Operator" \
|
||||||
|
com.jfrog.license_terms="https://jfrog.com/xray/eula/"
|
||||||
|
|
||||||
|
COPY licenses/ /licenses
|
||||||
|
COPY watches.yaml ${HOME}/watches.yaml
|
||||||
|
COPY helm-charts/ ${HOME}/helm-charts/
|
||||||
@@ -0,0 +1,23 @@
|
|||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: openshiftxrays.charts.helm.k8s.io
|
||||||
|
spec:
|
||||||
|
group: charts.helm.k8s.io
|
||||||
|
names:
|
||||||
|
kind: OpenshiftXray
|
||||||
|
listKind: OpenshiftXrayList
|
||||||
|
plural: openshiftxrays
|
||||||
|
singular: openshiftxray
|
||||||
|
scope: Namespaced
|
||||||
|
subresources:
|
||||||
|
status: {}
|
||||||
|
validation:
|
||||||
|
openAPIV3Schema:
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
version: v1alpha1
|
||||||
|
versions:
|
||||||
|
- name: v1alpha1
|
||||||
|
served: true
|
||||||
|
storage: true
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
packageName: openshiftxray-operator
|
||||||
|
channels:
|
||||||
|
- name: alpha
|
||||||
|
currentCSV: xray-operator.v1.0.0
|
||||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1,23 @@
|
|||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: openshiftxrays.charts.helm.k8s.io
|
||||||
|
spec:
|
||||||
|
group: charts.helm.k8s.io
|
||||||
|
names:
|
||||||
|
kind: OpenshiftXray
|
||||||
|
listKind: OpenshiftXrayList
|
||||||
|
plural: openshiftxrays
|
||||||
|
singular: openshiftxray
|
||||||
|
scope: Namespaced
|
||||||
|
subresources:
|
||||||
|
status: {}
|
||||||
|
validation:
|
||||||
|
openAPIV3Schema:
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
version: v1alpha1
|
||||||
|
versions:
|
||||||
|
- name: v1alpha1
|
||||||
|
served: true
|
||||||
|
storage: true
|
||||||
@@ -0,0 +1,69 @@
|
|||||||
|
apiVersion: charts.helm.k8s.io/v1alpha1
|
||||||
|
kind: OpenshiftXray
|
||||||
|
metadata:
|
||||||
|
name: openshiftxray
|
||||||
|
spec:
|
||||||
|
xray:
|
||||||
|
analysis:
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-analysis
|
||||||
|
version: 3.3.0
|
||||||
|
name: xray-analysis
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
preStartCommand: null
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
database:
|
||||||
|
password: OVERRIDE
|
||||||
|
url: OVERRIDE
|
||||||
|
user: OVERRIDE
|
||||||
|
global:
|
||||||
|
postgresqlTlsSecret: null
|
||||||
|
indexer:
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-indexer
|
||||||
|
version: 3.3.0
|
||||||
|
name: xray-indexer
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
persist:
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-persist
|
||||||
|
version: 3.3.0
|
||||||
|
name: xray-persist
|
||||||
|
persistence:
|
||||||
|
size: 10Gi
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
preStartCommand: null
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
postgresql:
|
||||||
|
enabled: false
|
||||||
|
rabbitmq-ha:
|
||||||
|
enabled: true
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-rabbitmq
|
||||||
|
tag: 3.8.0
|
||||||
|
rabbitmqEpmdPort: 4369
|
||||||
|
rabbitmqManagerPort: 15672
|
||||||
|
rabbitmqNodePort: 5672
|
||||||
|
replicaCount: 1
|
||||||
|
replicaCount: 1
|
||||||
|
router:
|
||||||
|
image:
|
||||||
|
imagePullPolicy: IfNotPresent
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-router
|
||||||
|
version: 1.2.1
|
||||||
|
name: router
|
||||||
|
server:
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-server
|
||||||
|
version: 3.3.0
|
||||||
|
name: xray-server
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
replicaCount: 1
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
xray:
|
||||||
|
consoleLog: false
|
||||||
|
jfrogUrl: OVERRIDE
|
||||||
|
joinKey: EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE
|
||||||
|
masterKey: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
|
||||||
|
|
||||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1,5 @@
|
|||||||
|
channels:
|
||||||
|
- currentCSV: xray-operator.v1.0.0
|
||||||
|
name: alpha
|
||||||
|
defaultChannel: alpha
|
||||||
|
packageName: xray-operator
|
||||||
42
Openshift4/xray-operator/deploy/operator.yaml
Normal file
42
Openshift4/xray-operator/deploy/operator.yaml
Normal file
@@ -0,0 +1,42 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: xray-operator
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
name: xray-operator
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
name: xray-operator
|
||||||
|
spec:
|
||||||
|
serviceAccountName: xray-operator
|
||||||
|
containers:
|
||||||
|
- name: xray-operator
|
||||||
|
image: registry.connect.redhat.com/jfrog/xray-operator
|
||||||
|
imagePullPolicy: Always
|
||||||
|
env:
|
||||||
|
- name: WATCH_NAMESPACE
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
- name: POD_NAME
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.name
|
||||||
|
- name: OPERATOR_NAME
|
||||||
|
value: "xray-operator"
|
||||||
|
- name: RELATED_IMAGE_XRAY_SERVER_IMAGE_REPOSITORY
|
||||||
|
value: "registry.connect.redhat.com/jfrog/xray-server"
|
||||||
|
- name: RELATED_IMAGE_XRAY_ANALYSIS_IMAGE_REPOSITORY
|
||||||
|
value: "registry.connect.redhat.com/jfrog/xray-analysis"
|
||||||
|
- name: RELATED_IMAGE_XRAY_PERSIST_IMAGE_REPOSITORY
|
||||||
|
value: "registry.connect.redhat.com/jfrog/xray-persist"
|
||||||
|
- name: RELATED_IMAGE_XRAY_INDEXER_IMAGE_REPOSITORY
|
||||||
|
value: "registry.connect.redhat.com/jfrog/xray-indexer"
|
||||||
|
- name: RELATED_IMAGE_XRAY_ROUTER_IMAGE_REPOSITORY
|
||||||
|
value: "registry.connect.redhat.com/jfrog/xray-router"
|
||||||
|
- name: RELATED_IMAGE_XRAY_RABBITMQ_IMAGE_REPOSITORY
|
||||||
|
value: "registry.connect.redhat.com/jfrog/xray-rabbitmq"
|
||||||
119
Openshift4/xray-operator/deploy/role.yaml
Normal file
119
Openshift4/xray-operator/deploy/role.yaml
Normal file
@@ -0,0 +1,119 @@
|
|||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: xray-operator
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
- services
|
||||||
|
- services/finalizers
|
||||||
|
- endpoints
|
||||||
|
- persistentvolumeclaims
|
||||||
|
- events
|
||||||
|
- configmaps
|
||||||
|
- secrets
|
||||||
|
- serviceaccounts
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- deployments
|
||||||
|
- daemonsets
|
||||||
|
- replicasets
|
||||||
|
- statefulsets
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- namespaces
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resourceNames:
|
||||||
|
- xray-operator
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- '*'
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- events
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- apiGroups:
|
||||||
|
- monitoring.coreos.com
|
||||||
|
resources:
|
||||||
|
- servicemonitors
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- create
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resourceNames:
|
||||||
|
- xray-operator
|
||||||
|
resources:
|
||||||
|
- deployments/finalizers
|
||||||
|
verbs:
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- replicasets
|
||||||
|
- deployments
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- charts.helm.k8s.io
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- networking.k8s.io
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- '*'
|
||||||
|
- apiGroups:
|
||||||
|
- policy
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- '*'
|
||||||
|
- apiGroups:
|
||||||
|
- 'rbac.authorization.k8s.io'
|
||||||
|
resources:
|
||||||
|
- '*'
|
||||||
|
verbs:
|
||||||
|
- '*'
|
||||||
11
Openshift4/xray-operator/deploy/role_binding.yaml
Normal file
11
Openshift4/xray-operator/deploy/role_binding.yaml
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
kind: RoleBinding
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
metadata:
|
||||||
|
name: xray-operator
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: xray-operator
|
||||||
|
roleRef:
|
||||||
|
kind: Role
|
||||||
|
name: xray-operator
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
4
Openshift4/xray-operator/deploy/service_account.yaml
Normal file
4
Openshift4/xray-operator/deploy/service_account.yaml
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: xray-operator
|
||||||
10
Openshift4/xray-operator/deploy/subscription.yaml
Normal file
10
Openshift4/xray-operator/deploy/subscription.yaml
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
apiVersion: operators.coreos.com/v1alpha1
|
||||||
|
kind: Subscription
|
||||||
|
metadata:
|
||||||
|
name: xray-operator
|
||||||
|
namespace: jfrog-artifactory
|
||||||
|
spec:
|
||||||
|
channel: alpha
|
||||||
|
name: xray-operator
|
||||||
|
source: xray-operator-csc
|
||||||
|
sourceNamespace: openshift-operators
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
# JFrog Openshift Artifactory-Xray Chart Changelog
|
||||||
|
All changes to this chart will be documented in this file.
|
||||||
|
|
||||||
|
## [2.4.0] - April 14, 2020
|
||||||
|
* Updating to latest jfrog/artifactory-ha helm chart version 2.4.0 adding new requirements.yaml entry for xray helm charts to combine together into one umbrella chart
|
||||||
|
|
||||||
|
## [2.3.0] - April 13, 2020
|
||||||
|
* Updating to latest jfrog/artifactory-ha helm chart version 2.3.0
|
||||||
|
|
||||||
|
## [2.2.9] - April 11, 2020
|
||||||
|
* Fixed issues with master key
|
||||||
|
|
||||||
|
## [2.1.9] - March 17, 2020
|
||||||
|
* Updated Artifactory version to 7.3.2
|
||||||
|
|
||||||
|
## [2.0.35] - March 09, 2020
|
||||||
|
* Updated Artifactory version to 7.2.1
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
appVersion: 3.3.0
|
||||||
|
description: Universal component scan for security and license inventory and impact
|
||||||
|
analysis
|
||||||
|
keywords:
|
||||||
|
- xray
|
||||||
|
- jfrog
|
||||||
|
maintainers:
|
||||||
|
- email: vinaya@jfrog.com
|
||||||
|
name: Vinay Aggarwal
|
||||||
|
- email: johnp@jfrog.com
|
||||||
|
name: John Peterson
|
||||||
|
name: openshift-xray
|
||||||
|
sources:
|
||||||
|
- https://bintray.com/jfrog/product/xray/view
|
||||||
|
- https://github.com/jfrog/charts
|
||||||
|
version: 3.3.1
|
||||||
201
Openshift4/xray-operator/helm-charts/openshift-xray/LICENSE
Normal file
201
Openshift4/xray-operator/helm-charts/openshift-xray/LICENSE
Normal file
@@ -0,0 +1,201 @@
|
|||||||
|
Apache License
|
||||||
|
Version 2.0, January 2004
|
||||||
|
http://www.apache.org/licenses/
|
||||||
|
|
||||||
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
|
1. Definitions.
|
||||||
|
|
||||||
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
|
|
||||||
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
|
the copyright owner that is granting the License.
|
||||||
|
|
||||||
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
|
other entities that control, are controlled by, or are under common
|
||||||
|
control with that entity. For the purposes of this definition,
|
||||||
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
|
exercising permissions granted by this License.
|
||||||
|
|
||||||
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
|
including but not limited to software source code, documentation
|
||||||
|
source, and configuration files.
|
||||||
|
|
||||||
|
"Object" form shall mean any form resulting from mechanical
|
||||||
|
transformation or translation of a Source form, including but
|
||||||
|
not limited to compiled object code, generated documentation,
|
||||||
|
and conversions to other media types.
|
||||||
|
|
||||||
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
|
"Contribution" shall mean any work of authorship, including
|
||||||
|
the original version of the Work and any modifications or additions
|
||||||
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
|
means any form of electronic, verbal, or written communication sent
|
||||||
|
to the Licensor or its representatives, including but not limited to
|
||||||
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
|
subsequently incorporated within the Work.
|
||||||
|
|
||||||
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
|
Work and such Derivative Works in Source or Object form.
|
||||||
|
|
||||||
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
|
modifications, and in Source or Object form, provided that You
|
||||||
|
meet the following conditions:
|
||||||
|
|
||||||
|
(a) You must give any other recipients of the Work or
|
||||||
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
|
(b) You must cause any modified files to carry prominent notices
|
||||||
|
stating that You changed the files; and
|
||||||
|
|
||||||
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
|
that You distribute, all copyright, patent, trademark, and
|
||||||
|
attribution notices from the Source form of the Work,
|
||||||
|
excluding those notices that do not pertain to any part of
|
||||||
|
the Derivative Works; and
|
||||||
|
|
||||||
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
|
distribution, then any Derivative Works that You distribute must
|
||||||
|
include a readable copy of the attribution notices contained
|
||||||
|
within such NOTICE file, excluding those notices that do not
|
||||||
|
pertain to any part of the Derivative Works, in at least one
|
||||||
|
of the following places: within a NOTICE text file distributed
|
||||||
|
as part of the Derivative Works; within the Source form or
|
||||||
|
documentation, if provided along with the Derivative Works; or,
|
||||||
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
|
You may add Your own copyright statement to Your modifications and
|
||||||
|
may provide additional or different license terms and conditions
|
||||||
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
|
unless required by applicable law (such as deliberate and grossly
|
||||||
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
|
liable to You for damages, including any direct, indirect, special,
|
||||||
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
|
or other liability obligations and/or rights consistent with this
|
||||||
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
|
|
||||||
|
To apply the Apache License to your work, attach the following
|
||||||
|
boilerplate notice, with the fields enclosed by brackets "{}"
|
||||||
|
replaced with your own identifying information. (Don't include
|
||||||
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
|
comment syntax for the file format. We also recommend that a
|
||||||
|
file or class name and description of purpose be included on the
|
||||||
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
|
Copyright {yyyy} {name of copyright owner}
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
@@ -0,0 +1,71 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
# PreReq'd:
|
||||||
|
# helm install postgres bitnami/postgresql
|
||||||
|
# follow artifactory postgresql db setup:
|
||||||
|
# https://www.jfrog.com/confluence/display/JFROG/PostgreSQL
|
||||||
|
POSTGRES=$(helm ls | grep postgres | wc -l)
|
||||||
|
ARTIFACTORY=$(helm ls | grep artifactory | wc -l)
|
||||||
|
if [[ "$POSTGRES" =~ (0) ]]
|
||||||
|
then
|
||||||
|
echo "External DB is required to run Jfrog Openshift Xray Helm chart"
|
||||||
|
echo ""
|
||||||
|
echo "Postgresql helm chart must be installed prior to installing this helm installer script."
|
||||||
|
echo ""
|
||||||
|
echo "helm install postgres bitnami/postgresql"
|
||||||
|
echo ""
|
||||||
|
echo "follow artifactory postgresql db setup:"
|
||||||
|
echo "https://www.jfrog.com/confluence/display/JFROG/PostgreSQL"
|
||||||
|
exit 1
|
||||||
|
elif [[ "$ARTIFACTORY" =~ (0) ]]
|
||||||
|
then
|
||||||
|
echo "Artifactory Instance is required to run Jfrog Openshift Xray Helm chart"
|
||||||
|
echo ""
|
||||||
|
echo "Please use helm to first install Artifactory: openshift-artifactory-ha"
|
||||||
|
echo ""
|
||||||
|
echo "Then install Openshift xray helm chart once artifactory is ready."
|
||||||
|
echo ""
|
||||||
|
exit 1
|
||||||
|
else
|
||||||
|
echo "Installing Openshift Xray Helm"
|
||||||
|
fi
|
||||||
|
|
||||||
|
DBURL=""
|
||||||
|
if [[ -z "$1" ]]
|
||||||
|
then
|
||||||
|
DBURL="postgres://postgres-postgresql:5432/xraydb?sslmode=disable"
|
||||||
|
else
|
||||||
|
DBURL=$1
|
||||||
|
fi
|
||||||
|
|
||||||
|
DBUSER=""
|
||||||
|
if [[ -z "$2" ]]
|
||||||
|
then
|
||||||
|
DBUSER="artifactory"
|
||||||
|
else
|
||||||
|
DBUSER=$2
|
||||||
|
fi
|
||||||
|
|
||||||
|
DBPASS=""
|
||||||
|
if [[ -z "$3" ]]
|
||||||
|
then
|
||||||
|
DBPASS="password"
|
||||||
|
else
|
||||||
|
DBPASS=$3
|
||||||
|
fi
|
||||||
|
|
||||||
|
JFROGURL=""
|
||||||
|
if [[ -z "$4" ]]
|
||||||
|
then
|
||||||
|
JFROGURL="http://openshiftartifactoryha-nginx"
|
||||||
|
else
|
||||||
|
JFROGURL=$4
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
# install via helm with default postgresql configuration
|
||||||
|
helm install xray . \
|
||||||
|
--set xray.database.url=$DBURL \
|
||||||
|
--set xray.database.user=$DBUSER \
|
||||||
|
--set xray.database.password=$DBPASS \
|
||||||
|
--set xray.xray.jfrogUrl=$JFROGURL
|
||||||
@@ -0,0 +1,25 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: rabbitmq
|
||||||
|
name: rabbitmq
|
||||||
|
namespace: default
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: rabbitmq
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: rabbitmq
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- image: quay.io/jfrog/xray-rabbitmq-rh:3.8.0
|
||||||
|
imagePullPolicy: "Always"
|
||||||
|
name: xray-rabbitmq
|
||||||
|
ports:
|
||||||
|
- containerPort: 4369
|
||||||
|
- containerPort: 5672
|
||||||
|
- containerPort: 25672
|
||||||
@@ -0,0 +1,26 @@
|
|||||||
|
kind: Service
|
||||||
|
apiVersion: v1
|
||||||
|
metadata:
|
||||||
|
name: rabbitmq-lb
|
||||||
|
labels:
|
||||||
|
app: rabbitmq
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: rabbitmq
|
||||||
|
ports:
|
||||||
|
- name: port1
|
||||||
|
protocol: TCP
|
||||||
|
port: 4369
|
||||||
|
targetPort: 4369
|
||||||
|
- name: port3
|
||||||
|
protocol: TCP
|
||||||
|
port: 5672
|
||||||
|
targetPort: 5672
|
||||||
|
- name: port4
|
||||||
|
protocol: TCP
|
||||||
|
port: 25672
|
||||||
|
targetPort: 25672
|
||||||
|
type: ClusterIP
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
dependencies:
|
||||||
|
- name: xray
|
||||||
|
repository: https://charts.jfrog.io/
|
||||||
|
version: 3.3.1
|
||||||
|
digest: sha256:22010f573f0dfaf95a05835e6b712ef74438aa7c5f39674cd8fd27390bc99d7e
|
||||||
|
generated: "2020-05-21T13:54:18.60088-07:00"
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
dependencies:
|
||||||
|
- name: xray
|
||||||
|
version: 3.3.1
|
||||||
|
repository: https://charts.jfrog.io/
|
||||||
@@ -0,0 +1,63 @@
|
|||||||
|
xray:
|
||||||
|
analysis:
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-analysis
|
||||||
|
version: 3.3.0
|
||||||
|
name: xray-analysis
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
preStartCommand: null
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
database:
|
||||||
|
password: OVERRIDE
|
||||||
|
url: OVERRIDE
|
||||||
|
user: OVERRIDE
|
||||||
|
global:
|
||||||
|
postgresqlTlsSecret: null
|
||||||
|
indexer:
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-indexer
|
||||||
|
version: 3.3.0
|
||||||
|
name: xray-indexer
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
persist:
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-persist
|
||||||
|
version: 3.3.0
|
||||||
|
name: xray-persist
|
||||||
|
persistence:
|
||||||
|
size: 10Gi
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
preStartCommand: null
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
postgresql:
|
||||||
|
enabled: false
|
||||||
|
rabbitmq-ha:
|
||||||
|
enabled: true
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-rabbitmq
|
||||||
|
tag: 3.8.0
|
||||||
|
rabbitmqEpmdPort: 4369
|
||||||
|
rabbitmqManagerPort: 15672
|
||||||
|
rabbitmqNodePort: 5672
|
||||||
|
replicaCount: 1
|
||||||
|
replicaCount: 1
|
||||||
|
router:
|
||||||
|
image:
|
||||||
|
imagePullPolicy: IfNotPresent
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-router
|
||||||
|
version: 1.2.1
|
||||||
|
name: router
|
||||||
|
server:
|
||||||
|
image:
|
||||||
|
repository: registry.connect.redhat.com/jfrog/xray-server
|
||||||
|
version: 3.3.0
|
||||||
|
name: xray-server
|
||||||
|
podManagementPolicy: Parallel
|
||||||
|
replicaCount: 1
|
||||||
|
updateStrategy: RollingUpdate
|
||||||
|
xray:
|
||||||
|
consoleLog: false
|
||||||
|
jfrogUrl: OVERRIDE
|
||||||
|
joinKey: EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE
|
||||||
|
masterKey: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
|
||||||
202
Openshift4/xray-operator/licenses/LICENSE
Executable file
202
Openshift4/xray-operator/licenses/LICENSE
Executable file
@@ -0,0 +1,202 @@
|
|||||||
|
|
||||||
|
Apache License
|
||||||
|
Version 2.0, January 2004
|
||||||
|
http://www.apache.org/licenses/
|
||||||
|
|
||||||
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
|
1. Definitions.
|
||||||
|
|
||||||
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
|
|
||||||
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
|
the copyright owner that is granting the License.
|
||||||
|
|
||||||
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
|
other entities that control, are controlled by, or are under common
|
||||||
|
control with that entity. For the purposes of this definition,
|
||||||
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
|
exercising permissions granted by this License.
|
||||||
|
|
||||||
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
|
including but not limited to software source code, documentation
|
||||||
|
source, and configuration files.
|
||||||
|
|
||||||
|
"Object" form shall mean any form resulting from mechanical
|
||||||
|
transformation or translation of a Source form, including but
|
||||||
|
not limited to compiled object code, generated documentation,
|
||||||
|
and conversions to other media types.
|
||||||
|
|
||||||
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
|
"Contribution" shall mean any work of authorship, including
|
||||||
|
the original version of the Work and any modifications or additions
|
||||||
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
|
means any form of electronic, verbal, or written communication sent
|
||||||
|
to the Licensor or its representatives, including but not limited to
|
||||||
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
|
subsequently incorporated within the Work.
|
||||||
|
|
||||||
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
|
Work and such Derivative Works in Source or Object form.
|
||||||
|
|
||||||
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
|
modifications, and in Source or Object form, provided that You
|
||||||
|
meet the following conditions:
|
||||||
|
|
||||||
|
(a) You must give any other recipients of the Work or
|
||||||
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
|
(b) You must cause any modified files to carry prominent notices
|
||||||
|
stating that You changed the files; and
|
||||||
|
|
||||||
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
|
that You distribute, all copyright, patent, trademark, and
|
||||||
|
attribution notices from the Source form of the Work,
|
||||||
|
excluding those notices that do not pertain to any part of
|
||||||
|
the Derivative Works; and
|
||||||
|
|
||||||
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
|
distribution, then any Derivative Works that You distribute must
|
||||||
|
include a readable copy of the attribution notices contained
|
||||||
|
within such NOTICE file, excluding those notices that do not
|
||||||
|
pertain to any part of the Derivative Works, in at least one
|
||||||
|
of the following places: within a NOTICE text file distributed
|
||||||
|
as part of the Derivative Works; within the Source form or
|
||||||
|
documentation, if provided along with the Derivative Works; or,
|
||||||
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
|
You may add Your own copyright statement to Your modifications and
|
||||||
|
may provide additional or different license terms and conditions
|
||||||
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
|
unless required by applicable law (such as deliberate and grossly
|
||||||
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
|
liable to You for damages, including any direct, indirect, special,
|
||||||
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
|
or other liability obligations and/or rights consistent with this
|
||||||
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
|
|
||||||
|
To apply the Apache License to your work, attach the following
|
||||||
|
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||||
|
replaced with your own identifying information. (Don't include
|
||||||
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
|
comment syntax for the file format. We also recommend that a
|
||||||
|
file or class name and description of purpose be included on the
|
||||||
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
|
Copyright [yyyy] [name of copyright owner]
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
5
Openshift4/xray-operator/watches.yaml
Normal file
5
Openshift4/xray-operator/watches.yaml
Normal file
@@ -0,0 +1,5 @@
|
|||||||
|
---
|
||||||
|
- version: v1alpha1
|
||||||
|
group: charts.helm.k8s.io
|
||||||
|
kind: OpenshiftXray
|
||||||
|
chart: helm-charts/openshift-xray
|
||||||
Reference in New Issue
Block a user