mirror of
https://github.com/ZwareBear/JFrog-Cloud-Installers.git
synced 2026-01-21 05:06:56 -06:00
updates to openshift v4.3.5 to artifactory-ha v7.3.2
This commit is contained in:
John Peterson
@@ -1,4 +1,4 @@
|
||||
FROM quay.io/operator-framework/helm-operator:v0.14.1
|
||||
FROM quay.io/operator-framework/helm-operator:v0.16.0
|
||||
|
||||
COPY watches.yaml ${HOME}/watches.yaml
|
||||
COPY helm-charts/ ${HOME}/helm-charts/
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1,23 @@
|
||||
apiVersion: apiextensions.k8s.io/v1beta1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: openshiftartifactoryhas.charts.helm.k8s.io
|
||||
spec:
|
||||
group: charts.helm.k8s.io
|
||||
names:
|
||||
kind: OpenshiftArtifactoryHa
|
||||
listKind: OpenshiftArtifactoryHaList
|
||||
plural: openshiftartifactoryhas
|
||||
singular: openshiftartifactoryha
|
||||
scope: Namespaced
|
||||
subresources:
|
||||
status: {}
|
||||
validation:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
version: v1alpha1
|
||||
versions:
|
||||
- name: v1alpha1
|
||||
served: true
|
||||
storage: true
|
||||
@@ -0,0 +1,4 @@
|
||||
packageName: openshiftartifactoryha-operator
|
||||
channels:
|
||||
- name: alpha
|
||||
currentCSV: artifactory-ha-operator.v1.0.0
|
||||
@@ -0,0 +1,8 @@
|
||||
apiVersion: operators.coreos.com/v1
|
||||
kind: CatalogSourceConfig
|
||||
metadata:
|
||||
name: artifactory-ha-operator-csc
|
||||
namespace: openshift-marketplace
|
||||
spec:
|
||||
targetNamespace: jfrog-artifactory
|
||||
packages: artifactory-ha-operator
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,18 +0,0 @@
|
||||
kind: SecurityContextConstraints
|
||||
apiVersion: v1
|
||||
metadata:
|
||||
name: hostpath
|
||||
allowPrivilegedContainer: false
|
||||
runAsUser:
|
||||
type: RunAsAny
|
||||
seLinuxContext:
|
||||
type: RunAsAny
|
||||
fsGroup:
|
||||
type: RunAsAny
|
||||
supplementalGroups:
|
||||
type: RunAsAny
|
||||
users:
|
||||
- artifactory
|
||||
groups:
|
||||
- artifactory
|
||||
- jfrog-artifactory
|
||||
@@ -1,6 +0,0 @@
|
||||
apiVersion: image.openshift.io/v1
|
||||
kind: ImageStream
|
||||
metadata:
|
||||
name: nginx-artifactory-pro
|
||||
namespace: jfrog-artifactory
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
apiVersion: image.openshift.io/v1
|
||||
kind: ImageStream
|
||||
metadata:
|
||||
name: artifactory-ha
|
||||
namespace: jfrog-artifactory
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
apiVersion: image.openshift.io/v1
|
||||
kind: ImageStream
|
||||
metadata:
|
||||
name: artifactory-pro
|
||||
namespace: jfrog-artifactory
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -15,7 +15,7 @@ spec:
|
||||
serviceAccountName: artifactory-ha-operator
|
||||
containers:
|
||||
- name: artifactory-ha-operator
|
||||
image: image-registry.openshift-image-registry.svc:5000/jfrog-artifactory/artifactory-ha
|
||||
image: quay.io/jfrog/artifactory-ha-operator
|
||||
imagePullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: WATCH_NAMESPACE
|
||||
@@ -28,3 +28,17 @@ spec:
|
||||
fieldPath: metadata.name
|
||||
- name: OPERATOR_NAME
|
||||
value: "artifactory-ha-operator"
|
||||
- name: RELATED_IMAGE_ARTIFACTORY_IMAGE_REPOSITORY
|
||||
value: "quay.io/jfrog/artifactory-rh-pro"
|
||||
- name: RELATED_IMAGE_NGINX_IMAGE_REPOSITORY
|
||||
value: "quay.io/jfrog/nginx-artifactory-rh-pro"
|
||||
- name: DATABASE_TYPE
|
||||
value: "OVERRIDE"
|
||||
- name: DATABASE_DRIVER
|
||||
value: "OVERRIDE"
|
||||
- name: DATABASE_URL
|
||||
value: "OVERRIDE"
|
||||
- name: DATABASE_USER
|
||||
value: "OVERRIDE"
|
||||
- name: DATABASE_PASSWORD
|
||||
value: "OVERRIDE"
|
||||
@@ -1,7 +1,7 @@
|
||||
apiVersion: operators.coreos.com/v1alpha2
|
||||
kind: OperatorGroup
|
||||
metadata:
|
||||
name: jfrog-group
|
||||
name: jfrog-operator-group
|
||||
namespace: jfrog-artifactory
|
||||
spec:
|
||||
targetNamespaces:
|
||||
|
||||
@@ -10,7 +10,7 @@ objects:
|
||||
annotations:
|
||||
openshift.io/description: JFrog Artifactory
|
||||
openshift.io/display-name: jfrog-artifactory
|
||||
openshift.io/requester: johnp@jfrog.com
|
||||
openshift.io/requester: integrations@jfrog.com
|
||||
creationTimestamp: null
|
||||
name: jfrog-artifactory
|
||||
spec: {}
|
||||
|
||||
@@ -4,6 +4,40 @@ metadata:
|
||||
creationTimestamp: null
|
||||
name: artifactory-ha-operator
|
||||
rules:
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- pods
|
||||
- services
|
||||
- services/finalizers
|
||||
- endpoints
|
||||
- persistentvolumeclaims
|
||||
- events
|
||||
- configmaps
|
||||
- secrets
|
||||
verbs:
|
||||
- create
|
||||
- delete
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- apps
|
||||
resources:
|
||||
- deployments
|
||||
- daemonsets
|
||||
- replicasets
|
||||
- statefulsets
|
||||
verbs:
|
||||
- create
|
||||
- delete
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
@@ -23,41 +57,6 @@ rules:
|
||||
- events
|
||||
verbs:
|
||||
- create
|
||||
- apiGroups:
|
||||
- networking.k8s.io
|
||||
resources:
|
||||
- networkpolicies
|
||||
verbs:
|
||||
- '*'
|
||||
- apiGroups:
|
||||
- policy
|
||||
resources:
|
||||
- poddisruptionbudgets
|
||||
verbs:
|
||||
- '*'
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- configmaps
|
||||
- secrets
|
||||
- serviceaccounts
|
||||
- services
|
||||
verbs:
|
||||
- '*'
|
||||
- apiGroups:
|
||||
- rbac.authorization.k8s.io
|
||||
resources:
|
||||
- rolebindings
|
||||
- roles
|
||||
verbs:
|
||||
- '*'
|
||||
- apiGroups:
|
||||
- apps
|
||||
resources:
|
||||
- deployments
|
||||
- statefulsets
|
||||
verbs:
|
||||
- '*'
|
||||
- apiGroups:
|
||||
- monitoring.coreos.com
|
||||
resources:
|
||||
|
||||
@@ -1,15 +0,0 @@
|
||||
kind: SecurityContextConstraints
|
||||
apiVersion: v1
|
||||
metadata:
|
||||
name: scc-admin
|
||||
allowPrivilegedContainer: true
|
||||
runAsUser:
|
||||
type: RunAsAny
|
||||
seLinuxContext:
|
||||
type: RunAsAny
|
||||
fsGroup:
|
||||
type: RunAsAny
|
||||
supplementalGroups:
|
||||
type: RunAsAny
|
||||
users:
|
||||
- kubeadmin
|
||||
10
Openshift4/artifactory-ha-operator/deploy/subscription.yaml
Normal file
10
Openshift4/artifactory-ha-operator/deploy/subscription.yaml
Normal file
@@ -0,0 +1,10 @@
|
||||
apiVersion: operators.coreos.com/v1alpha1
|
||||
kind: Subscription
|
||||
metadata:
|
||||
name: artifactory-ha-operator
|
||||
namespace: jfrog-artifactory
|
||||
spec:
|
||||
channel: alpha
|
||||
name: artifactory-ha-operator
|
||||
source: artifactory-ha-operator-csc
|
||||
sourceNamespace: openshift-operators
|
||||
2
Openshift4/artifactory-ha-operator/helm-charts/README.md
Normal file
2
Openshift4/artifactory-ha-operator/helm-charts/README.md
Normal file
@@ -0,0 +1,2 @@
|
||||
## README
|
||||
Should use the latest openshift artifactory ha chart from the partnership artifactory
|
||||
@@ -1,5 +0,0 @@
|
||||
# JFrog Openshift Artifactory-ha Chart Changelog
|
||||
All changes to this chart will be documented in this file.
|
||||
|
||||
## [1.0.0] - March 09, 2020
|
||||
* Updated Artifactory version to 7.2.1
|
||||
@@ -1,24 +0,0 @@
|
||||
apiVersion: v1
|
||||
appVersion: 7.2.1
|
||||
description: Universal Repository Manager supporting all major packaging formats,
|
||||
build tools and CI servers.
|
||||
home: https://www.jfrog.com/artifactory/
|
||||
icon: https://raw.githubusercontent.com/jfrog/charts/master/stable/artifactory-ha/logo/artifactory-logo.png
|
||||
keywords:
|
||||
- artifactory
|
||||
- jfrog
|
||||
- devops
|
||||
maintainers:
|
||||
- email: amithk@jfrog.com
|
||||
name: amithins
|
||||
- email: daniele@jfrog.com
|
||||
name: danielezer
|
||||
- email: eldada@jfrog.com
|
||||
name: eldada
|
||||
- email: rimasm@jfrog.com
|
||||
name: rimusz
|
||||
name: openshift-artifactory-ha
|
||||
sources:
|
||||
- https://bintray.com/jfrog/product/JFrog-Artifactory-Pro/view
|
||||
- https://github.com/jfrog/charts
|
||||
version: 2.0.34
|
||||
@@ -1,201 +0,0 @@
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "{}"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright {yyyy} {name of copyright owner}
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
Binary file not shown.
@@ -1,28 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
if [[ -z "$1" ]]
|
||||
then
|
||||
echo "Skipping creation of persistent volume examples. Ensure there is available PVs 200Gi per node for HA."
|
||||
else
|
||||
oc new-project jfrog-artifactory
|
||||
oc create serviceaccount svcaccount -n jfrog-artifactory
|
||||
oc adm policy add-scc-to-user privileged system:serviceaccount:jfrog-artifactory:svcaccount
|
||||
oc adm policy add-scc-to-user anyuid system:serviceaccount:jfrog-artifactory:svcaccount
|
||||
oc adm policy add-scc-to-group anyuid system:authenticated
|
||||
|
||||
# enables hostPath plugin for openshift system wide
|
||||
oc create -f hostpathscc.yaml -n jfrog-artifactory
|
||||
oc patch securitycontextconstraints.security.openshift.io/hostpath --type=merge --patch='{"allowHostDirVolumePlugin": true}'
|
||||
oc adm policy add-scc-to-user hostpath system:serviceaccount:jfrog-artifactory:svcaccount
|
||||
|
||||
# create the license secret
|
||||
oc create secret generic artifactory-license --from-file=artifactory.cluster.license
|
||||
|
||||
# create the tls secret
|
||||
oc create secret tls tls-ingress --cert=jfrog.team.crt --key=jfrog.team.key
|
||||
fi
|
||||
|
||||
# install via helm
|
||||
helm install artifactory-ha . \
|
||||
--set artifactory-ha.nginx.tlsSecretName=tls-ingress \
|
||||
--set artifactory-ha.artifactory.license.secret=artifactory-license,artifactory-ha.artifactory.license.dataKey=artifactory.cluster.license
|
||||
@@ -1,18 +0,0 @@
|
||||
kind: SecurityContextConstraints
|
||||
apiVersion: v1
|
||||
metadata:
|
||||
name: hostpath
|
||||
allowPrivilegedContainer: false
|
||||
runAsUser:
|
||||
type: RunAsAny
|
||||
seLinuxContext:
|
||||
type: RunAsAny
|
||||
fsGroup:
|
||||
type: RunAsAny
|
||||
supplementalGroups:
|
||||
type: RunAsAny
|
||||
users:
|
||||
- artifactory
|
||||
groups:
|
||||
- artifactory
|
||||
- jfrog-artifactory
|
||||
@@ -1,6 +0,0 @@
|
||||
dependencies:
|
||||
- name: artifactory-ha
|
||||
repository: https://charts.jfrog.io/
|
||||
version: 2.0.31
|
||||
digest: sha256:d7c2af74a0188ca8df2a97158c83b36f85dfae72c1b60ce4540a4e00da2d9a6f
|
||||
generated: "2020-03-19T17:29:04.445679-07:00"
|
||||
@@ -1,4 +0,0 @@
|
||||
dependencies:
|
||||
- name: artifactory-ha
|
||||
version: 2.0.34
|
||||
repository: https://charts.jfrog.io/
|
||||
@@ -1,18 +0,0 @@
|
||||
kind: SecurityContextConstraints
|
||||
apiVersion: v1
|
||||
metadata:
|
||||
name: hostpath
|
||||
allowPrivilegedContainer: false
|
||||
runAsUser:
|
||||
type: RunAsAny
|
||||
seLinuxContext:
|
||||
type: RunAsAny
|
||||
fsGroup:
|
||||
type: RunAsAny
|
||||
supplementalGroups:
|
||||
type: RunAsAny
|
||||
users:
|
||||
- artifactory
|
||||
groups:
|
||||
- artifactory
|
||||
- jfrog-artifactory
|
||||
@@ -1,87 +0,0 @@
|
||||
# Openshift artifactory ha
|
||||
# Requires one custom init container
|
||||
# to resolve the user id perm issue with redhat
|
||||
artifactory-ha:
|
||||
initContainerImage: registry.redhat.io/ubi8-minimal
|
||||
waitForDatabase: false
|
||||
artifactory:
|
||||
## Add custom init containers execution before predefined init containers
|
||||
customInitContainersBegin: |
|
||||
- name: "redhat-custom-setup"
|
||||
#image: "{{ .Values.initContainerImage }}"
|
||||
image: {{ index .Values "initContainerImage" }}
|
||||
imagePullPolicy: "{{ .Values.artifactory.image.pullPolicy }}"
|
||||
command:
|
||||
- 'sh'
|
||||
- '-c'
|
||||
- 'chown -R 1030:1030 {{ .Values.artifactory.persistence.mountPath }}'
|
||||
securityContext:
|
||||
runAsUser: 0
|
||||
volumeMounts:
|
||||
- mountPath: "{{ .Values.artifactory.persistence.mountPath }}"
|
||||
name: volume
|
||||
## Change to use RH UBI images
|
||||
image:
|
||||
repository: "image-registry.openshift-image-registry.svc:5000/jfrog-artifactory/artifactory-pro"
|
||||
node:
|
||||
waitForPrimaryStartup:
|
||||
enabled: false
|
||||
nginx:
|
||||
image:
|
||||
repository: "image-registry.openshift-image-registry.svc:5000/jfrog-artifactory/nginx-artifactory-pro"
|
||||
http:
|
||||
externalPort: 80
|
||||
internalPort: 8080
|
||||
https:
|
||||
externalPort: 443
|
||||
internalPort: 8443
|
||||
mainConf: |
|
||||
# Main Nginx configuration file
|
||||
worker_processes 4;
|
||||
error_log {{ .Values.nginx.persistence.mountPath }}/logs//error.log warn;
|
||||
pid /tmp/nginx.pid;
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
variables_hash_max_size 1024;
|
||||
variables_hash_bucket_size 64;
|
||||
server_names_hash_max_size 4096;
|
||||
server_names_hash_bucket_size 128;
|
||||
types_hash_max_size 2048;
|
||||
types_hash_bucket_size 64;
|
||||
proxy_read_timeout 2400s;
|
||||
client_header_timeout 2400s;
|
||||
client_body_timeout 2400s;
|
||||
proxy_connect_timeout 75s;
|
||||
proxy_send_timeout 2400s;
|
||||
proxy_buffer_size 32k;
|
||||
proxy_buffers 40 32k;
|
||||
proxy_busy_buffers_size 64k;
|
||||
proxy_temp_file_write_size 250m;
|
||||
proxy_http_version 1.1;
|
||||
client_body_buffer_size 128k;
|
||||
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||
'$status $body_bytes_sent "$http_referer" '
|
||||
'"$http_user_agent" "$http_x_forwarded_for"';
|
||||
log_format timing 'ip = $remote_addr '
|
||||
'user = \"$remote_user\" '
|
||||
'local_time = \"$time_local\" '
|
||||
'host = $host '
|
||||
'request = \"$request\" '
|
||||
'status = $status '
|
||||
'bytes = $body_bytes_sent '
|
||||
'upstream = \"$upstream_addr\" '
|
||||
'upstream_time = $upstream_response_time '
|
||||
'request_time = $request_time '
|
||||
'referer = \"$http_referer\" '
|
||||
'UA = \"$http_user_agent\"';
|
||||
access_log {{ .Values.nginx.persistence.mountPath }}/logs/access.log timing;
|
||||
sendfile on;
|
||||
#tcp_nopush on;
|
||||
keepalive_timeout 65;
|
||||
#gzip on;
|
||||
include {{ .Values.nginx.persistence.mountPath }}/conf.d/*.conf;
|
||||
}
|
||||
@@ -1,25 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
oc project default
|
||||
oc apply -f helm-charts/openshift-artifactory-ha/pv-examples
|
||||
oc apply -f deploy/project.yaml
|
||||
oc apply -f deploy/namespace.yaml
|
||||
oc project jfrog-artifactory
|
||||
oc apply -f deploy/imagestream-nginx.yaml
|
||||
oc apply -f deploy/imagestream-pro.yaml
|
||||
oc apply -f deploy/imagestream-operator.yaml
|
||||
oc patch image.config.openshift.io/cluster --type=merge --patch='{"spec":{"registrySources":{"insecureRegistries":["default-route-openshift-image-registry.apps-crc.testing"]}}}'
|
||||
oc apply -f deploy/role.yaml
|
||||
oc apply -f deploy/role_binding.yaml
|
||||
oc apply -f deploy/service_account.yaml
|
||||
oc apply -f deploy/securitycontextconstraints.yaml
|
||||
oc adm policy add-scc-to-user scc-admin system:serviceaccount:jfrog-artifactory:artifactory-ha-operator
|
||||
oc adm policy add-scc-to-user scc-admin system:serviceaccount:jfrog-artifactory:default
|
||||
oc adm policy add-scc-to-user anyuid system:serviceaccount:jfrog-artifactory:artifactory-ha-operator
|
||||
oc adm policy add-scc-to-user anyuid system:serviceaccount:jfrog-artifactory:default
|
||||
oc adm policy add-scc-to-group anyuid system:authenticated
|
||||
oc apply -f deploy/hostpathscc.yaml
|
||||
oc patch securitycontextconstraints.security.openshift.io/hostpath --type=merge --patch='{"allowHostDirVolumePlugin": true}'
|
||||
oc adm policy add-scc-to-user hostpath system:serviceaccount:jfrog-artifactory:artifactory-ha-operator
|
||||
oc apply -f deploy/crds/charts.helm.k8s.io_openshiftartifactoryhas_crd.yaml
|
||||
oc apply -f deploy/crds/charts.helm.k8s.io_v1alpha1_openshiftartifactoryha_cr.yaml
|
||||
oc create secret generic artifactory-license --from-file=../artifactory.cluster.license
|
||||
@@ -1,16 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
oc project jfrog-artifactory
|
||||
oc delete deployments --all
|
||||
oc delete statefulsets --all
|
||||
oc delete configmaps --all
|
||||
oc delete deploymentconfigs --all
|
||||
oc delete pods --all
|
||||
oc delete svc --all
|
||||
oc delete networkpolicies --all
|
||||
oc delete pvc --all
|
||||
oc delete PodDisruptionBudget --all
|
||||
for s in $(oc get secrets | grep artifactory | cut -f1 -d ' '); do
|
||||
oc delete secret $s
|
||||
done
|
||||
oc delete serviceaccount artifactoryha-artifactory-ha
|
||||
oc delete role artifactoryha-artifactory-ha
|
||||
@@ -3,3 +3,11 @@
|
||||
group: charts.helm.k8s.io
|
||||
kind: OpenshiftArtifactoryHa
|
||||
chart: helm-charts/openshift-artifactory-ha
|
||||
overrideValues:
|
||||
artifactory-ha.artifactory.image.repository: $RELATED_IMAGE_ARTIFACTORY_IMAGE_REPOSITORY
|
||||
artifactory-ha.nginx.image.repository: $RELATED_IMAGE_NGINX_IMAGE_REPOSITORY
|
||||
artifactory-ha.database.type: $DATABASE_TYPE
|
||||
artifactory-ha.database.driver: $DATABASE_DRIVER
|
||||
artifactory-ha.database.url: $DATABASE_URL
|
||||
artifactory-ha.database.user: $DATABASE_USER
|
||||
artifactory-ha.database.password: $DATABASE_PASSWORD
|
||||
|
||||
Reference in New Issue
Block a user