jenkins-ephemeral-template.json 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273
  1. {
  2. "kind": "Template",
  3. "apiVersion": "v1",
  4. "metadata": {
  5. "name": "jenkins-ephemeral",
  6. "creationTimestamp": null,
  7. "annotations": {
  8. "description": "Jenkins service, without persistent storage.\nWARNING: Any data stored will be lost upon pod destruction. Only use this template for testing",
  9. "iconClass": "icon-jenkins",
  10. "tags": "instant-app,jenkins"
  11. }
  12. },
  13. "message": "A Jenkins service has been created in your project. The username/password are admin/${JENKINS_PASSWORD}. The tutorial at https://github.com/openshift/origin/blob/master/examples/jenkins/README.md contains more information about using this template.",
  14. "objects": [
  15. {
  16. "kind": "Route",
  17. "apiVersion": "v1",
  18. "metadata": {
  19. "name": "${JENKINS_SERVICE_NAME}",
  20. "creationTimestamp": null
  21. },
  22. "spec": {
  23. "to": {
  24. "kind": "Service",
  25. "name": "${JENKINS_SERVICE_NAME}"
  26. },
  27. "tls": {
  28. "termination": "edge",
  29. "insecureEdgeTerminationPolicy": "Redirect",
  30. "certificate": "-----BEGIN CERTIFICATE-----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\n+Dzv5hqgSfvMG392KWh5f8xXfJNs4W5KLbZyl901MeReiLrPH3w=\n-----END CERTIFICATE-----",
  31. "key": "-----BEGIN PRIVATE KEY-----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\nTcFT4touIo7oriFJ\n-----END PRIVATE KEY-----",
  32. "caCertificate": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIJALK1iUpF2VQLMA0GCSqGSIb3DQEBBQUAMIGhMQswCQYD\nVQQGEwJVUzELMAkGA1UECAwCU0MxFTATBgNVBAcMDERlZmF1bHQgQ2l0eTEcMBoG\nA1UECgwTRGVmYXVsdCBDb21wYW55IEx0ZDEQMA4GA1UECwwHVGVzdCBDQTEaMBgG\nA1UEAwwRd3d3LmV4YW1wbGVjYS5jb20xIjAgBgkqhkiG9w0BCQEWE2V4YW1wbGVA\nZXhhbXBsZS5jb20wHhcNMTUwMTEyMTQxNTAxWhcNMjUwMTA5MTQxNTAxWjCBoTEL\nMAkGA1UEBhMCVVMxCzAJBgNVBAgMAlNDMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkx\nHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQxEDAOBgNVBAsMB1Rlc3QgQ0Ex\nGjAYBgNVBAMMEXd3dy5leGFtcGxlY2EuY29tMSIwIAYJKoZIhvcNAQkBFhNleGFt\ncGxlQGV4YW1wbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA\nw2rK1J2NMtQj0KDug7g7HRKl5jbf0QMkMKyTU1fBtZ0cCzvsF4CqV11LK4BSVWaK\nrzkaXe99IVJnH8KdOlDl5Dh/+cJ3xdkClSyeUT4zgb6CCBqg78ePp+nN11JKuJlV\nIG1qdJpB1J5O/kCLsGcTf7RS74MtqMFo96446Zvt7YaBhWPz6gDaO/TUzfrNcGLA\nEfHVXkvVWqb3gqXUztZyVex/gtP9FXQ7gxTvJml7UkmT0VAFjtZnCqmFxpLZFZ15\n+qP9O7Q2MpsGUO/4vDAuYrKBeg1ZdPSi8gwqUP2qWsGd9MIWRv3thI2903BczDc7\nr8WaIbm37vYZAS9G56E4+wIDAQABo1AwTjAdBgNVHQ4EFgQUugLrSJshOBk5TSsU\nANs4+SmJUGwwHwYDVR0jBBgwFoAUugLrSJshOBk5TSsUANs4+SmJUGwwDAYDVR0T\nBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAaMJ33zAMV4korHo5aPfayV3uHoYZ\n1ChzP3eSsF+FjoscpoNSKs91ZXZF6LquzoNezbfiihK4PYqgwVD2+O0/Ty7UjN4S\nqzFKVR4OS/6lCJ8YncxoFpTntbvjgojf1DEataKFUN196PAANc3yz8cWHF4uvjPv\nWkgFqbIjb+7D1YgglNyovXkRDlRZl0LD1OQ0ZWhd4Ge1qx8mmmanoBeYZ9+DgpFC\nj9tQAbS867yeOryNe7sEOIpXAAqK/DTu0hB6+ySsDfMo4piXCc2aA/eI2DCuw08e\nw17Dz9WnupZjVdwTKzDhFgJZMLDqn37HQnT6EemLFqbcR0VPEnfyhDtZIQ==\n-----END CERTIFICATE-----"
  33. }
  34. }
  35. },
  36. {
  37. "kind": "DeploymentConfig",
  38. "apiVersion": "v1",
  39. "metadata": {
  40. "name": "${JENKINS_SERVICE_NAME}",
  41. "creationTimestamp": null
  42. },
  43. "spec": {
  44. "strategy": {
  45. "type": "Recreate"
  46. },
  47. "triggers": [
  48. {
  49. "type": "ImageChange",
  50. "imageChangeParams": {
  51. "automatic": true,
  52. "containerNames": [
  53. "jenkins"
  54. ],
  55. "from": {
  56. "kind": "ImageStreamTag",
  57. "name": "${JENKINS_IMAGE_STREAM_TAG}",
  58. "namespace": "${NAMESPACE}"
  59. },
  60. "lastTriggeredImage": ""
  61. }
  62. },
  63. {
  64. "type": "ConfigChange"
  65. }
  66. ],
  67. "replicas": 1,
  68. "selector": {
  69. "name": "${JENKINS_SERVICE_NAME}"
  70. },
  71. "template": {
  72. "metadata": {
  73. "creationTimestamp": null,
  74. "labels": {
  75. "name": "${JENKINS_SERVICE_NAME}"
  76. }
  77. },
  78. "spec": {
  79. "serviceAccountName": "${JENKINS_SERVICE_NAME}",
  80. "containers": [
  81. {
  82. "name": "jenkins",
  83. "image": " ",
  84. "readinessProbe": {
  85. "timeoutSeconds": 3,
  86. "initialDelaySeconds": 3,
  87. "httpGet": {
  88. "path": "/login",
  89. "port": 8080
  90. }
  91. },
  92. "livenessProbe": {
  93. "timeoutSeconds": 3,
  94. "initialDelaySeconds": 120,
  95. "httpGet": {
  96. "path": "/login",
  97. "port": 8080
  98. }
  99. },
  100. "env": [
  101. {
  102. "name": "JENKINS_PASSWORD",
  103. "value": "${JENKINS_PASSWORD}"
  104. },
  105. {
  106. "name": "KUBERNETES_MASTER",
  107. "value": "https://kubernetes.default:443"
  108. },
  109. {
  110. "name": "KUBERNETES_TRUST_CERTIFICATES",
  111. "value": "true"
  112. },
  113. {
  114. "name": "JNLP_SERVICE_NAME",
  115. "value": "${JNLP_SERVICE_NAME}"
  116. }
  117. ],
  118. "resources": {
  119. "limits": {
  120. "memory": "${MEMORY_LIMIT}"
  121. }
  122. },
  123. "volumeMounts": [
  124. {
  125. "name": "${JENKINS_SERVICE_NAME}-data",
  126. "mountPath": "/var/lib/jenkins"
  127. }
  128. ],
  129. "terminationMessagePath": "/dev/termination-log",
  130. "imagePullPolicy": "IfNotPresent",
  131. "capabilities": {},
  132. "securityContext": {
  133. "capabilities": {},
  134. "privileged": false
  135. }
  136. }
  137. ],
  138. "volumes": [
  139. {
  140. "name": "${JENKINS_SERVICE_NAME}-data",
  141. "emptyDir": {
  142. "medium": ""
  143. }
  144. }
  145. ],
  146. "restartPolicy": "Always",
  147. "dnsPolicy": "ClusterFirst"
  148. }
  149. }
  150. }
  151. },
  152. {
  153. "kind": "ServiceAccount",
  154. "apiVersion": "v1",
  155. "metadata": {
  156. "name": "${JENKINS_SERVICE_NAME}"
  157. }
  158. },
  159. {
  160. "kind": "RoleBinding",
  161. "apiVersion": "v1",
  162. "metadata": {
  163. "name": "${JENKINS_SERVICE_NAME}_edit"
  164. },
  165. "groupNames": null,
  166. "subjects": [
  167. {
  168. "kind": "ServiceAccount",
  169. "name": "${JENKINS_SERVICE_NAME}"
  170. }
  171. ],
  172. "roleRef": {
  173. "name": "edit"
  174. }
  175. },
  176. {
  177. "kind": "Service",
  178. "apiVersion": "v1",
  179. "metadata": {
  180. "name": "${JNLP_SERVICE_NAME}"
  181. },
  182. "spec": {
  183. "ports": [
  184. {
  185. "name": "agent",
  186. "protocol": "TCP",
  187. "port": 50000,
  188. "targetPort": 50000,
  189. "nodePort": 0
  190. }
  191. ],
  192. "selector": {
  193. "name": "${JENKINS_SERVICE_NAME}"
  194. },
  195. "portalIP": "",
  196. "type": "ClusterIP",
  197. "sessionAffinity": "None"
  198. }
  199. },
  200. {
  201. "kind": "Service",
  202. "apiVersion": "v1",
  203. "metadata": {
  204. "name": "${JENKINS_SERVICE_NAME}",
  205. "annotations": {
  206. "service.alpha.openshift.io/dependencies": "[{\"name\": \"${JNLP_SERVICE_NAME}\", \"namespace\": \"\", \"kind\": \"Service\"}]",
  207. "service.openshift.io/infrastructure": "true"
  208. },
  209. "creationTimestamp": null
  210. },
  211. "spec": {
  212. "ports": [
  213. {
  214. "name": "web",
  215. "protocol": "TCP",
  216. "port": 80,
  217. "targetPort": 8080,
  218. "nodePort": 0
  219. }
  220. ],
  221. "selector": {
  222. "name": "${JENKINS_SERVICE_NAME}"
  223. },
  224. "portalIP": "",
  225. "type": "ClusterIP",
  226. "sessionAffinity": "None"
  227. }
  228. }
  229. ],
  230. "parameters": [
  231. {
  232. "name": "JENKINS_SERVICE_NAME",
  233. "displayName": "Jenkins Service Name",
  234. "description": "The name of the OpenShift Service exposed for the Jenkins container.",
  235. "value": "jenkins"
  236. },
  237. {
  238. "name": "JNLP_SERVICE_NAME",
  239. "displayName": "Jenkins JNLP Service Name",
  240. "description": "The name of the service used for master/slave communication.",
  241. "value": "jenkins-jnlp"
  242. },
  243. {
  244. "name": "JENKINS_PASSWORD",
  245. "displayName": "Jenkins Password",
  246. "description": "Password for the Jenkins 'admin' user.",
  247. "generate": "expression",
  248. "from": "[a-zA-Z0-9]{16}",
  249. "required": true
  250. },
  251. {
  252. "name": "MEMORY_LIMIT",
  253. "displayName": "Memory Limit",
  254. "description": "Maximum amount of memory the container can use.",
  255. "value": "512Mi"
  256. },
  257. {
  258. "name": "NAMESPACE",
  259. "displayName": "Jenkins ImageStream Namespace",
  260. "description": "The OpenShift Namespace where the Jenkins ImageStream resides.",
  261. "value": "openshift"
  262. },
  263. {
  264. "name": "JENKINS_IMAGE_STREAM_TAG",
  265. "displayName": "Jenkins ImageStreamTag",
  266. "description": "Name of the ImageStreamTag to be used for the Jenkins image.",
  267. "value": "jenkins:latest"
  268. }
  269. ],
  270. "labels": {
  271. "template": "jenkins-ephemeral-template"
  272. }
  273. }