zware/JFrog-Cloud-Installers
1
0
Fork 0
mirror of https://github.com/ZwareBear/JFrog-Cloud-Installers.git synced 2026-01-21 09:06:57 -06:00
Code Issues Packages Projects Releases Wiki Activity

Openshift artifactory-ha helm chart changes for version 2.3.0 of jfrog/artifactory-ha chart

Browse Source
This commit is contained in:
John Peterson
2020-04-13 10:37:19 -07:00
parent c8aaea9d69
commit 5234afa864
7 changed files with 30 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
Openshift4/openshift-artifactory-ha/helminstall.sh
View File

@@ -4,22 +4,14 @@ if [[ -z "$1" ]]
then
echo "Skipping creation of persistent volume examples. Ensure there is available PVs 200Gi per node for HA."
else
oc new-project jfrog-artifactory
oc create serviceaccount svcaccount -n jfrog-artifactory
oc adm policy add-scc-to-user privileged system:serviceaccount:jfrog-artifactory:svcaccount
oc adm policy add-scc-to-user anyuid system:serviceaccount:jfrog-artifactory:svcaccount
oc adm policy add-scc-to-group anyuid system:authenticated
# enables hostPath plugin for openshift system wide
oc create -f hostpathscc.yaml -n jfrog-artifactory
oc patch securitycontextconstraints.security.openshift.io/hostpath --type=merge --patch='{"allowHostDirVolumePlugin": true}'
oc adm policy add-scc-to-user hostpath system:serviceaccount:jfrog-artifactory:svcaccount
# patch the restricted scc to allow the pods to run as anyuid
oc patch scc restricted --patch '{"fsGroup":{"type":"RunAsAny"},"runAsUser":{"type":"RunAsAny"},"seLinuxContext":{"type":"RunAsAny"}}' --type=merge
# create the license secret
oc create secret generic artifactory-license --from-file=artifactory.cluster.license
# create the tls secret
oc create secret tls tls-ingress --cert=jfrog.team.crt --key=jfrog.team.key
oc create secret tls tls-ingress --cert=tls.crt --key=tls.key
fi
# install via helm