jenkins-persistent-template.json 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297
  1. {
  2. "kind": "Template",
  3. "apiVersion": "v1",
  4. "metadata": {
  5. "name": "jenkins-persistent",
  6. "creationTimestamp": null,
  7. "annotations": {
  8. "description": "Jenkins service, with persistent storage.\nYou must have persistent volumes available in your cluster to use this template.",
  9. "iconClass": "icon-jenkins",
  10. "tags": "instant-app,jenkins"
  11. }
  12. },
  13. "message": "A Jenkins service has been created in your project. The username/password are admin/${JENKINS_PASSWORD}. The tutorial at https://github.com/openshift/origin/blob/master/examples/jenkins/README.md contains more information about using this template.",
  14. "objects": [
  15. {
  16. "kind": "Route",
  17. "apiVersion": "v1",
  18. "metadata": {
  19. "name": "${JENKINS_SERVICE_NAME}",
  20. "creationTimestamp": null
  21. },
  22. "spec": {
  23. "to": {
  24. "kind": "Service",
  25. "name": "${JENKINS_SERVICE_NAME}"
  26. },
  27. "tls": {
  28. "termination": "edge",
  29. "insecureEdgeTerminationPolicy": "Redirect",
  30. "certificate": "-----BEGIN CERTIFICATE-----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\n+Dzv5hqgSfvMG392KWh5f8xXfJNs4W5KLbZyl901MeReiLrPH3w=\n-----END CERTIFICATE-----",
  31. "key": "-----BEGIN PRIVATE KEY-----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\nTcFT4touIo7oriFJ\n-----END PRIVATE KEY-----",
  32. "caCertificate": "-----BEGIN CERTIFICATE-----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\nw17Dz9WnupZjVdwTKzDhFgJZMLDqn37HQnT6EemLFqbcR0VPEnfyhDtZIQ==\n-----END CERTIFICATE-----"
  33. }
  34. }
  35. },
  36. {
  37. "kind": "PersistentVolumeClaim",
  38. "apiVersion": "v1",
  39. "metadata": {
  40. "name": "${JENKINS_SERVICE_NAME}"
  41. },
  42. "spec": {
  43. "accessModes": [
  44. "ReadWriteOnce"
  45. ],
  46. "resources": {
  47. "requests": {
  48. "storage": "${VOLUME_CAPACITY}"
  49. }
  50. }
  51. }
  52. },
  53. {
  54. "kind": "DeploymentConfig",
  55. "apiVersion": "v1",
  56. "metadata": {
  57. "name": "${JENKINS_SERVICE_NAME}",
  58. "creationTimestamp": null
  59. },
  60. "spec": {
  61. "strategy": {
  62. "type": "Recreate"
  63. },
  64. "triggers": [
  65. {
  66. "type": "ImageChange",
  67. "imageChangeParams": {
  68. "automatic": true,
  69. "containerNames": [
  70. "jenkins"
  71. ],
  72. "from": {
  73. "kind": "ImageStreamTag",
  74. "name": "${JENKINS_IMAGE_STREAM_TAG}",
  75. "namespace": "${NAMESPACE}"
  76. },
  77. "lastTriggeredImage": ""
  78. }
  79. },
  80. {
  81. "type": "ConfigChange"
  82. }
  83. ],
  84. "replicas": 1,
  85. "selector": {
  86. "name": "${JENKINS_SERVICE_NAME}"
  87. },
  88. "template": {
  89. "metadata": {
  90. "creationTimestamp": null,
  91. "labels": {
  92. "name": "${JENKINS_SERVICE_NAME}"
  93. }
  94. },
  95. "spec": {
  96. "serviceAccountName": "${JENKINS_SERVICE_NAME}",
  97. "containers": [
  98. {
  99. "name": "jenkins",
  100. "image": " ",
  101. "readinessProbe": {
  102. "timeoutSeconds": 3,
  103. "initialDelaySeconds": 3,
  104. "httpGet": {
  105. "path": "/login",
  106. "port": 8080
  107. }
  108. },
  109. "livenessProbe": {
  110. "timeoutSeconds": 3,
  111. "initialDelaySeconds": 120,
  112. "httpGet": {
  113. "path": "/login",
  114. "port": 8080
  115. }
  116. },
  117. "env": [
  118. {
  119. "name": "JENKINS_PASSWORD",
  120. "value": "${JENKINS_PASSWORD}"
  121. },
  122. {
  123. "name": "KUBERNETES_MASTER",
  124. "value": "https://kubernetes.default:443"
  125. },
  126. {
  127. "name": "KUBERNETES_TRUST_CERTIFICATES",
  128. "value": "true"
  129. },
  130. {
  131. "name": "JNLP_SERVICE_NAME",
  132. "value": "${JNLP_SERVICE_NAME}"
  133. }
  134. ],
  135. "resources": {
  136. "limits": {
  137. "memory": "${MEMORY_LIMIT}"
  138. }
  139. },
  140. "volumeMounts": [
  141. {
  142. "name": "${JENKINS_SERVICE_NAME}-data",
  143. "mountPath": "/var/lib/jenkins"
  144. }
  145. ],
  146. "terminationMessagePath": "/dev/termination-log",
  147. "imagePullPolicy": "IfNotPresent",
  148. "capabilities": {},
  149. "securityContext": {
  150. "capabilities": {},
  151. "privileged": false
  152. }
  153. }
  154. ],
  155. "volumes": [
  156. {
  157. "name": "${JENKINS_SERVICE_NAME}-data",
  158. "persistentVolumeClaim": {
  159. "claimName": "${JENKINS_SERVICE_NAME}"
  160. }
  161. }
  162. ],
  163. "restartPolicy": "Always",
  164. "dnsPolicy": "ClusterFirst"
  165. }
  166. }
  167. }
  168. },
  169. {
  170. "kind": "ServiceAccount",
  171. "apiVersion": "v1",
  172. "metadata": {
  173. "name": "${JENKINS_SERVICE_NAME}"
  174. }
  175. },
  176. {
  177. "kind": "RoleBinding",
  178. "apiVersion": "v1",
  179. "metadata": {
  180. "name": "${JENKINS_SERVICE_NAME}_edit"
  181. },
  182. "groupNames": null,
  183. "subjects": [
  184. {
  185. "kind": "ServiceAccount",
  186. "name": "${JENKINS_SERVICE_NAME}"
  187. }
  188. ],
  189. "roleRef": {
  190. "name": "edit"
  191. }
  192. },
  193. {
  194. "kind": "Service",
  195. "apiVersion": "v1",
  196. "metadata": {
  197. "name": "${JNLP_SERVICE_NAME}"
  198. },
  199. "spec": {
  200. "ports": [
  201. {
  202. "name": "agent",
  203. "protocol": "TCP",
  204. "port": 50000,
  205. "targetPort": 50000,
  206. "nodePort": 0
  207. }
  208. ],
  209. "selector": {
  210. "name": "${JENKINS_SERVICE_NAME}"
  211. },
  212. "portalIP": "",
  213. "type": "ClusterIP",
  214. "sessionAffinity": "None"
  215. }
  216. },
  217. {
  218. "kind": "Service",
  219. "apiVersion": "v1",
  220. "metadata": {
  221. "name": "${JENKINS_SERVICE_NAME}",
  222. "annotations": {
  223. "service.alpha.openshift.io/dependencies": "[{\"name\": \"${JNLP_SERVICE_NAME}\", \"namespace\": \"\", \"kind\": \"Service\"}]",
  224. "service.openshift.io/infrastructure": "true"
  225. },
  226. "creationTimestamp": null
  227. },
  228. "spec": {
  229. "ports": [
  230. {
  231. "name": "web",
  232. "protocol": "TCP",
  233. "port": 80,
  234. "targetPort": 8080,
  235. "nodePort": 0
  236. }
  237. ],
  238. "selector": {
  239. "name": "${JENKINS_SERVICE_NAME}"
  240. },
  241. "portalIP": "",
  242. "type": "ClusterIP",
  243. "sessionAffinity": "None"
  244. }
  245. }
  246. ],
  247. "parameters": [
  248. {
  249. "name": "JENKINS_SERVICE_NAME",
  250. "displayName": "Jenkins Service Name",
  251. "description": "The name of the OpenShift Service exposed for the Jenkins container.",
  252. "value": "jenkins"
  253. },
  254. {
  255. "name": "JNLP_SERVICE_NAME",
  256. "displayName": "Jenkins JNLP Service Name",
  257. "description": "The name of the service used for master/slave communication.",
  258. "value": "jenkins-jnlp"
  259. },
  260. {
  261. "name": "JENKINS_PASSWORD",
  262. "displayName": "Jenkins Password",
  263. "description": "Password for the Jenkins 'admin' user.",
  264. "generate": "expression",
  265. "from": "[a-zA-Z0-9]{16}",
  266. "required": true
  267. },
  268. {
  269. "name": "MEMORY_LIMIT",
  270. "displayName": "Memory Limit",
  271. "description": "Maximum amount of memory the container can use.",
  272. "value": "512Mi"
  273. },
  274. {
  275. "name": "VOLUME_CAPACITY",
  276. "displayName": "Volume Capacity",
  277. "description": "Volume space available for data, e.g. 512Mi, 2Gi.",
  278. "value": "1Gi",
  279. "required": true
  280. },
  281. {
  282. "name": "NAMESPACE",
  283. "displayName": "Jenkins ImageStream Namespace",
  284. "description": "The OpenShift Namespace where the Jenkins ImageStream resides.",
  285. "value": "openshift"
  286. },
  287. {
  288. "name": "JENKINS_IMAGE_STREAM_TAG",
  289. "displayName": "Jenkins ImageStreamTag",
  290. "description": "Name of the ImageStreamTag to be used for the Jenkins image.",
  291. "value": "jenkins:latest"
  292. }
  293. ],
  294. "labels": {
  295. "template": "jenkins-persistent-template"
  296. }
  297. }