forked from validatedpatterns/coco-pattern
-
Notifications
You must be signed in to change notification settings - Fork 0
/
values-hub.yaml
281 lines (251 loc) · 7.3 KB
/
values-hub.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
# This is currently configured as an 'all in one' deployment
clusterGroup:
name: hub
isHubCluster: true
namespaces:
- open-cluster-management
- vault
- golang-external-secrets
- openshift-sandboxed-containers-operator
- trustee-operator-system
- hello-openshift
- cert-manager-operator
- cert-manager
- lets-encrypt
# AI stuff
- redhat-ods-operator
- openshift-pipelines
- openshift-storage
- openshift-nfd
- nvidia-gpu-operator
- openshift-serverless
- knative-serving
subscriptions:
# ACM is kept anticipating
acm:
name: advanced-cluster-management
namespace: open-cluster-management
channel: release-2.11
sandbox:
name: sandboxed-containers-operator
namespace: openshift-sandboxed-containers-operator
channel: stable
version: "1.7.0" # ask for latest
trustee:
name: trustee-operator
namespace: trustee-operator-system
source: redhat-operators
channel: stable
rhoai:
name: rhods-operator
# Fast is required for 2.9.0
channel: fast
version: "2.13.0" # ensure we get the latest
namespace: openshift-operators
openshift-pipelines:
name: openshift-pipelines-operator-rh
namespace: openshift-operators
odf:
name: odf-operator
namespace: openshift-storage
serverless:
channel: stable
name: serverless-operator
servicemesh:
channel: stable
namespace: openshift-operators
name: servicemeshoperator
cert-manager:
name: openshift-cert-manager-operator
namespace: cert-manager-operator
channel: stable-v1
projects:
- hub
- vault
- trustee
- golang-external-secrets
- sandbox
- openshift-storage
- science-project
- hello-openshift
# Explicitly mention the cluster-state based overrides we plan to use for this pattern.
# We can use self-referential variables because the chart calls the tpl function with these variables defined
sharedValueFiles:
- '/overrides/values-{{ $.Values.global.clusterPlatform }}.yaml'
applications:
acm:
name: acm
namespace: open-cluster-management
project: hub
chart: acm
chartVersion: 0.1.*
ignoreDifferences:
- group: internal.open-cluster-management.io
kind: ManagedClusterInfo
jsonPointers:
- /spec/loggingCA
vault:
name: vault
namespace: vault
project: vault
chart: hashicorp-vault
chartVersion: 0.1.*
secrets-operator:
name: golang-external-secrets
namespace: golang-external-secrets
project: golang-external-secrets
chart: golang-external-secrets
chartVersion: 0.1.*
trustee:
name: trustee
namespace: kbs-operator-system #upstream config
project: trustee
path: charts/hub/trustee
sandbox:
name: sandbox
namespace: openshift-sandboxed-containers-operator #upstream config
project: sandbox
path: charts/all/sandbox
ignoreDifferences:
- group: ""
name: peer-pods-cm
kind: ConfigMap
jsonPointers:
- /data/AZURE_IMAGE_ID # Required so the vm image doesn't get nuked.
letsencrypt:
name: letsencrypt
namespace: letsencrypt
project: default
path: charts/all/letsencrypt
hello-openshift:
name: hello-openshift
namespace: hello-openshift
project: hello-openshift
path: charts/coco-supported/hello-openshift
## AI STUFF Beneath here
htpassword:
name: htpassword
namespace: openshift-config
project: config
path: charts/all/htpassword
mcg:
name: mcg
namespace: openshift-storage
project: openshift-storage
path: charts/hub/mcg
rhoai:
name: rhoai
namespace: redhat-ods-operator
project: hub
path: charts/all/rhoai
science-project:
name: science-project
namespace: default # creates a project
project: science-project
path: charts/hub/science-project
# chartVersion: 0.1.*
# sources:
# sources:
# - ref: patternref
# repoURL: https://github.com/foo/multicloud-gitops
# targetRevision: test2
# - chart: acm
# repoURL: https://charts.validatedpatterns.io/ # default
# targetRevision: 0.1.*
imperative:
# NOTE: We *must* use lists and not hashes. As hashes lose ordering once parsed by helm
# The default schedule is every 10 minutes: imperative.schedule
# Total timeout of all jobs is 1h: imperative.activeDeadlineSeconds
# imagePullPolicy is set to always: imperative.imagePullPolicy
# For additional overrides that apply to the jobs, please refer to
# https://hybrid-cloud-patterns.io/imperative-actions/#additional-job-customizations
jobs:
- name: hello-world
# ansible playbook to be run
playbook: common/ansible/playbooks/hello-world/hello-world.yaml
# per playbook timeout in seconds
timeout: 234
# verbosity: "-v"
managedClusterGroups:
exampleRegion:
name: group-one
acmlabels:
- name: clusterGroup
value: group-one
helmOverrides:
- name: clusterGroup.isHubCluster
value: false
# Before enabling cluster provisioning, ensure AWS and/or Azure
# credentials and OCP pull secrets are defined in Vault.
# See values-secret.yaml.template
#
#clusterPools:
# exampleAWSPool:
# name: aws-ap
# openshiftVersion: 4.10.18
# baseDomain: blueprints.rhecoeng.com
# platform:
# aws:
# region: ap-southeast-2
# clusters:
# - One
#
# exampleAzurePool:
# name: azure-us
# openshiftVersion: 4.10.18
# baseDomain: blueprints.rhecoeng.com
# platform:
# azure:
# baseDomainResourceGroupName: dojo-dns-zones
# region: eastus
# clusters:
# - Two
# - Three
# To have apps in multiple flavors, use namespaces and use helm overrides as appropriate
#
# pipelines:
# name: pipelines
# namespace: production
# project: datacenter
# path: applications/pipeline
# repoURL: https://github.com/you/applications.git
# targetRevision: stable
# overrides:
# - name: myparam
# value: myparam
#
# pipelines_staging:
# - name: pipelines
# namespace: staging
# project: datacenter
# path: applications/pipeline
# repoURL: https://github.com/you/applications.git
# targetRevision: main
#
# Additional applications
# Be sure to include additional resources your apps will require
# +X machines
# +Y RAM
# +Z CPU
# vendor-app:
# name: vendor-app
# namespace: default
# project: vendor
# path: path/to/myapp
# repoURL: https://github.com/vendor/applications.git
# targetRevision: main
# managedSites:
# factory:
# name: factory
# # repoURL: https://github.com/dagger-refuse-cool/manuela-factory.git
# targetRevision: main
# path: applications/factory
# helmOverrides:
# - name: site.isHubCluster
# value: false
# clusterSelector:
# matchExpressions:
# - key: vendor
# operator: In
# values:
# - OpenShift