-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathapb.yml
120 lines (117 loc) · 4.74 KB
/
apb.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
version: 1.0
name: manageiq-apb
description: ManageIQ
bindable: False
async: optional
metadata:
displayName: "ManageIQ (APB)"
imageUrl: "https://s3.amazonaws.com/fusor/2017demo/ManageIQ.png"
documentationUrl: "https://manageiq.org/docs/"
longDescription: |
ManageIQ is an open source management platform for Hybrid IT. It can manage small and large environments, and supports multiple technologies such as virtual machines, public clouds and containers.
Note: An admin with sufficient privileges will need to modify the namespace permissions prior to running this APB.
Replace MIQ_NAMESPACE in the export command below and run the following:
export namespace=MIQ_NAMESPACE;
oc adm policy add-scc-to-user anyuid system:serviceaccount:$namespace:miq-anyuid;
oc adm policy add-scc-to-user anyuid system:serviceaccount:$namespace:miq-orchestrator;
oc adm policy add-scc-to-user anyuid system:serviceaccount:$namespace:miq-httpd;
oc adm policy add-scc-to-user privileged system:serviceaccount:$namespace:miq-privileged;
oc adm policy add-scc-to-user privileged system:serviceaccount:$namespace:miq-httpd;
echo "{\"kind\": \"RoleBinding\", \"apiVersion\": \"v1\", \"metadata\":
{ \"name\": \"view\", \"namespace\": \"$namespace\" }, \"subjects\":
[{ \"kind\": \"ServiceAccount\", \"name\": \"miq-orchestrator\", \"namespace\": \"$namespace\" }],
\"roleRef\": { \"name\": \"view\" } }" | oc create -f -;
echo "{\"kind\": \"RoleBinding\", \"apiVersion\": \"v1\", \"metadata\":
{ \"name\": \"edit\", \"namespace\": \"$namespace\" }, \"subjects\":
[{ \"kind\": \"ServiceAccount\", \"name\": \"miq-orchestrator\", \"namespace\": \"$namespace\" }],
\"roleRef\": { \"name\": \"edit\" } }" | oc create -f -;
dependencies:
- 'docker.io/manageiq/manageiq-orchestrator:latest'
- 'docker.io/manageiq/httpd:latest'
- 'docker.io/carbonin/artemis:latest'
- 'docker.io/manageiq/memcached:latest'
- 'docker.io/manageiq/postgresql:latest'
providerDisplayName: "Red Hat, Inc."
plans:
- name: default
description: Typical installation of ManageIQ
free: True
metadata:
displayName: Default
longDescription: This plan deploys ManageIQ
cost: $0.00
parameters:
- name: manageiq_password
title: manageiq password
description: manageiq password
type: string
default: smartvm
required: true
- name: database_region
title: database region
description: MIQ Instance Region
type: int
default: 1
required: true
- name: memcached_max_connections
title: max connections
description: Maximum number of connections memcached will accept
type: int
default: 1024
required: true
- name: memcached_max_memory
title: max memory
description: Maximum memory memcached will use in MB
type: int
default: 64
required: true
- name: memcached_slab_page_size
title: slab page size
description: Memcached Slab Size in bytes
type: string
default: 1M
required: true
- name: postgresql_database
title: database name
description: postgresql database name
type: string
default: vmdb_production
required: true
- name: postgresql_password
title: database password
description: postgresql database password
type: string
default: admin
required: true
- name: postgresql_user
title: database username
description: postgresql database username
type: string
default: admin
required: true
- name: artemis_user
title: artemis user
description: artemis user
type: string
default: admin
required: true
- name: artemis_password
title: artemis password
description: artemis password
type: string
default: admin
required: true
- name: v2_key
title: v2 encryption key
description: v2 encryption key
default: uXfIgSAUq5Oz8goc/zI8HOOo0SI++Sd9mfpgBanYIM4=
type: string
required: true
- name: httpd_auth_type
default: 'internal'
enum: ['internal', 'external']
type: enum
- name: httpd_auth_kerberos_realms
description: Kerberos Realms for external authentication - WIP
default: ""
type: string