Last active
April 16, 2018 08:25
-
-
Save akram/0d0bb77fee2ddcd8033fab43a1422148 to your computer and use it in GitHub Desktop.
DC and SA
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: v1 | |
| kind: Template | |
| metadata: | |
| creationTimestamp: null | |
| name: toto | |
| objects: | |
| - apiVersion: v1 | |
| kind: DeploymentConfig | |
| metadata: | |
| annotations: | |
| openshift.io/generated-by: OpenShiftNewApp | |
| creationTimestamp: null | |
| generation: 1 | |
| labels: | |
| app: base-notebook | |
| name: base-notebook | |
| spec: | |
| replicas: 1 | |
| revisionHistoryLimit: 10 | |
| selector: | |
| app: base-notebook | |
| deploymentconfig: base-notebook | |
| strategy: | |
| activeDeadlineSeconds: 21600 | |
| resources: {} | |
| rollingParams: | |
| intervalSeconds: 1 | |
| maxSurge: 25% | |
| maxUnavailable: 25% | |
| timeoutSeconds: 600 | |
| updatePeriodSeconds: 1 | |
| type: Rolling | |
| template: | |
| metadata: | |
| annotations: | |
| openshift.io/generated-by: OpenShiftNewApp | |
| creationTimestamp: null | |
| labels: | |
| app: base-notebook | |
| deploymentconfig: base-notebook | |
| spec: | |
| containers: | |
| - env: | |
| - name: JUPYTER_NOTEBOOK_PASSWORD | |
| value: supersecret | |
| - name: JUPYTER_NOTEBOOK_X_INCLUDE | |
| value: https://radanalytics.io/assets/pyspark_hdfs_notebook/PySpark_HDFS.ipynb | |
| image: radanalyticsio/base-notebook@sha256:b7d9692f3a27f9c0922f284424c599170d219c9a11bcb45735bb48b20b9b49ab | |
| imagePullPolicy: Always | |
| name: base-notebook | |
| ports: | |
| - containerPort: 8888 | |
| protocol: TCP | |
| resources: {} | |
| terminationMessagePath: /dev/termination-log | |
| terminationMessagePolicy: File | |
| dnsPolicy: ClusterFirst | |
| restartPolicy: Always | |
| schedulerName: default-scheduler | |
| securityContext: {} | |
| terminationGracePeriodSeconds: 30 | |
| test: false | |
| triggers: | |
| - type: ConfigChange | |
| - imageChangeParams: | |
| automatic: true | |
| containerNames: | |
| - base-notebook | |
| from: | |
| kind: ImageStreamTag | |
| name: base-notebook:latest | |
| namespace: oshinko2 | |
| type: ImageChange | |
| status: | |
| availableReplicas: 0 | |
| latestVersion: 0 | |
| observedGeneration: 0 | |
| replicas: 0 | |
| unavailableReplicas: 0 | |
| updatedReplicas: 0 | |
| - apiVersion: v1 | |
| kind: DeploymentConfig | |
| metadata: | |
| annotations: | |
| openshift.io/generated-by: OpenShiftNewApp | |
| creationTimestamp: null | |
| generation: 1 | |
| labels: | |
| app: iot-ocp | |
| name: iot-ocp | |
| spec: | |
| replicas: 1 | |
| revisionHistoryLimit: 10 | |
| selector: | |
| app: iot-ocp | |
| deploymentconfig: iot-ocp | |
| strategy: | |
| activeDeadlineSeconds: 21600 | |
| resources: {} | |
| rollingParams: | |
| intervalSeconds: 1 | |
| maxSurge: 25% | |
| maxUnavailable: 25% | |
| timeoutSeconds: 600 | |
| updatePeriodSeconds: 1 | |
| type: Rolling | |
| template: | |
| metadata: | |
| annotations: | |
| openshift.io/generated-by: OpenShiftNewApp | |
| creationTimestamp: null | |
| labels: | |
| app: iot-ocp | |
| deploymentconfig: iot-ocp | |
| spec: | |
| containers: | |
| - image: 172.30.1.1:5000/oshinko2/iot-ocp@sha256:9d96f9ec4f65bfd8acd3fd449ac4639db8ca95056ce30937075b08282a4c4f78 | |
| imagePullPolicy: Always | |
| name: iot-ocp | |
| ports: | |
| - containerPort: 8080 | |
| protocol: TCP | |
| resources: {} | |
| terminationMessagePath: /dev/termination-log | |
| terminationMessagePolicy: File | |
| volumeMounts: | |
| - mountPath: /opt/zeppelin/storage | |
| name: iot-ocp-volume-1 | |
| dnsPolicy: ClusterFirst | |
| restartPolicy: Always | |
| schedulerName: default-scheduler | |
| securityContext: {} | |
| terminationGracePeriodSeconds: 30 | |
| volumes: | |
| - emptyDir: {} | |
| name: iot-ocp-volume-1 | |
| test: false | |
| triggers: | |
| - type: ConfigChange | |
| - imageChangeParams: | |
| automatic: true | |
| containerNames: | |
| - iot-ocp | |
| from: | |
| kind: ImageStreamTag | |
| name: iot-ocp:latest | |
| namespace: oshinko2 | |
| type: ImageChange | |
| status: | |
| availableReplicas: 0 | |
| latestVersion: 0 | |
| observedGeneration: 0 | |
| replicas: 0 | |
| unavailableReplicas: 0 | |
| updatedReplicas: 0 | |
| - apiVersion: v1 | |
| kind: DeploymentConfig | |
| metadata: | |
| annotations: | |
| openshift.io/generated-by: OpenShiftNewApp | |
| creationTimestamp: null | |
| generation: 1 | |
| labels: | |
| app: oshinko-webui | |
| name: oshinko-web | |
| spec: | |
| replicas: 1 | |
| revisionHistoryLimit: 10 | |
| selector: | |
| name: oshinko-web | |
| strategy: | |
| activeDeadlineSeconds: 21600 | |
| resources: {} | |
| rollingParams: | |
| intervalSeconds: 1 | |
| maxSurge: 25% | |
| maxUnavailable: 25% | |
| timeoutSeconds: 600 | |
| updatePeriodSeconds: 1 | |
| type: Rolling | |
| template: | |
| metadata: | |
| annotations: | |
| openshift.io/generated-by: OpenShiftNewApp | |
| creationTimestamp: null | |
| labels: | |
| app: oshinko-webui | |
| name: oshinko-web | |
| spec: | |
| containers: | |
| - env: | |
| - name: SPARK_DEFAULT | |
| - name: OSHINKO_REFRESH_INTERVAL | |
| value: "5" | |
| - name: WEB_ROUTE_NAME | |
| value: oshinko-web | |
| - name: INSECURE_WEBUI | |
| value: "true" | |
| - name: CURRENT_NAMESPACE | |
| valueFrom: | |
| fieldRef: | |
| apiVersion: v1 | |
| fieldPath: metadata.namespace | |
| image: radanalyticsio/oshinko-webui:stable | |
| imagePullPolicy: Always | |
| livenessProbe: | |
| failureThreshold: 3 | |
| httpGet: | |
| path: /webui | |
| port: 8080 | |
| scheme: HTTP | |
| initialDelaySeconds: 20 | |
| periodSeconds: 10 | |
| successThreshold: 1 | |
| timeoutSeconds: 1 | |
| name: oshinko-web | |
| ports: | |
| - containerPort: 8080 | |
| name: o-web-port | |
| protocol: TCP | |
| readinessProbe: | |
| failureThreshold: 3 | |
| httpGet: | |
| path: /webui | |
| port: 8080 | |
| scheme: HTTP | |
| initialDelaySeconds: 20 | |
| periodSeconds: 10 | |
| successThreshold: 1 | |
| timeoutSeconds: 1 | |
| resources: {} | |
| terminationMessagePath: /dev/termination-log | |
| terminationMessagePolicy: File | |
| - args: | |
| - proxy | |
| - -p | |
| - "8001" | |
| - --address=0.0.0.0 | |
| - --disable-filter=true | |
| - --api-prefix=/proxy | |
| image: radanalyticsio/oc-proxy:stable | |
| imagePullPolicy: IfNotPresent | |
| name: oc-proxy | |
| ports: | |
| - containerPort: 8001 | |
| name: oc-proxy-port | |
| protocol: TCP | |
| resources: {} | |
| terminationMessagePath: /dev/termination-log | |
| terminationMessagePolicy: File | |
| dnsPolicy: ClusterFirst | |
| restartPolicy: Always | |
| schedulerName: default-scheduler | |
| securityContext: {} | |
| serviceAccount: oshinko | |
| serviceAccountName: oshinko | |
| terminationGracePeriodSeconds: 30 | |
| test: false | |
| triggers: | |
| - type: ConfigChange | |
| status: | |
| availableReplicas: 0 | |
| latestVersion: 0 | |
| observedGeneration: 0 | |
| replicas: 0 | |
| unavailableReplicas: 0 | |
| updatedReplicas: 0 | |
| - apiVersion: v1 | |
| kind: DeploymentConfig | |
| metadata: | |
| annotations: | |
| created-by: oshinko-webui | |
| oshinko-config: '{"MasterCount":1,"WorkerCount":2,"Name":"","SparkMasterConfig":"","SparkWorkerConfig":"","SparkImage":"radanalyticsio/openshift-spark:2.2-latest","ExposeWebUI":"true","Metrics":"true"}' | |
| creationTimestamp: null | |
| generation: 1 | |
| labels: | |
| oshinko-cluster: sparky | |
| oshinko-metrics-enabled: "true" | |
| oshinko-type: master | |
| name: sparky-m | |
| spec: | |
| replicas: 1 | |
| selector: | |
| oshinko-cluster: sparky | |
| strategy: | |
| activeDeadlineSeconds: 21600 | |
| resources: {} | |
| rollingParams: | |
| intervalSeconds: 1 | |
| maxSurge: 25% | |
| maxUnavailable: 25% | |
| timeoutSeconds: 600 | |
| updatePeriodSeconds: 1 | |
| type: Rolling | |
| template: | |
| metadata: | |
| creationTimestamp: null | |
| labels: | |
| deploymentconfig: sparky-m | |
| oshinko-cluster: sparky | |
| oshinko-metrics-enabled: "true" | |
| oshinko-type: master | |
| spec: | |
| containers: | |
| - env: | |
| - name: OSHINKO_SPARK_CLUSTER | |
| value: sparky | |
| - name: SPARK_METRICS_ON | |
| value: "true" | |
| image: radanalyticsio/openshift-spark:2.2-latest | |
| imagePullPolicy: IfNotPresent | |
| livenessProbe: | |
| failureThreshold: 3 | |
| httpGet: | |
| path: / | |
| port: 8080 | |
| scheme: HTTP | |
| periodSeconds: 10 | |
| successThreshold: 1 | |
| timeoutSeconds: 1 | |
| name: sparky-m | |
| ports: | |
| - containerPort: 8080 | |
| name: spark-webui | |
| protocol: TCP | |
| - containerPort: 7077 | |
| name: spark-master | |
| protocol: TCP | |
| - containerPort: 7777 | |
| name: spark-metrics | |
| protocol: TCP | |
| readinessProbe: | |
| failureThreshold: 3 | |
| httpGet: | |
| path: / | |
| port: 8080 | |
| scheme: HTTP | |
| periodSeconds: 10 | |
| successThreshold: 1 | |
| timeoutSeconds: 1 | |
| resources: {} | |
| terminationMessagePath: /dev/termination-log | |
| terminationMessagePolicy: File | |
| dnsPolicy: ClusterFirst | |
| restartPolicy: Always | |
| schedulerName: default-scheduler | |
| securityContext: {} | |
| terminationGracePeriodSeconds: 30 | |
| volumes: | |
| - configMap: | |
| defaultMode: 420 | |
| name: sparky-metrics | |
| name: hawkular-openshift-agent | |
| test: false | |
| triggers: | |
| - type: ConfigChange | |
| status: | |
| availableReplicas: 0 | |
| latestVersion: 0 | |
| observedGeneration: 0 | |
| replicas: 0 | |
| unavailableReplicas: 0 | |
| updatedReplicas: 0 | |
| - apiVersion: v1 | |
| kind: DeploymentConfig | |
| metadata: | |
| annotations: | |
| created-by: oshinko-webui | |
| oshinko-config: '{"MasterCount":1,"WorkerCount":2,"Name":"","SparkMasterConfig":"","SparkWorkerConfig":"","SparkImage":"radanalyticsio/openshift-spark:2.2-latest","ExposeWebUI":"true","Metrics":"true"}' | |
| creationTimestamp: null | |
| generation: 1 | |
| labels: | |
| oshinko-cluster: sparky | |
| oshinko-metrics-enabled: "true" | |
| oshinko-type: worker | |
| name: sparky-w | |
| spec: | |
| replicas: 2 | |
| selector: | |
| oshinko-cluster: sparky | |
| strategy: | |
| activeDeadlineSeconds: 21600 | |
| resources: {} | |
| rollingParams: | |
| intervalSeconds: 1 | |
| maxSurge: 25% | |
| maxUnavailable: 25% | |
| timeoutSeconds: 600 | |
| updatePeriodSeconds: 1 | |
| type: Rolling | |
| template: | |
| metadata: | |
| creationTimestamp: null | |
| labels: | |
| deploymentconfig: sparky-w | |
| oshinko-cluster: sparky | |
| oshinko-metrics-enabled: "true" | |
| oshinko-type: worker | |
| spec: | |
| containers: | |
| - env: | |
| - name: OSHINKO_SPARK_CLUSTER | |
| value: sparky | |
| - name: SPARK_MASTER_ADDRESS | |
| value: spark://sparky:7077 | |
| - name: SPARK_MASTER_UI_ADDRESS | |
| value: http://sparky-ui:8080 | |
| - name: SPARK_METRICS_ON | |
| value: "true" | |
| image: radanalyticsio/openshift-spark:2.2-latest | |
| imagePullPolicy: IfNotPresent | |
| livenessProbe: | |
| failureThreshold: 3 | |
| httpGet: | |
| path: / | |
| port: 8081 | |
| scheme: HTTP | |
| periodSeconds: 10 | |
| successThreshold: 1 | |
| timeoutSeconds: 1 | |
| name: sparky-w | |
| ports: | |
| - containerPort: 8081 | |
| name: spark-webui | |
| protocol: TCP | |
| - containerPort: 7777 | |
| name: spark-metrics | |
| protocol: TCP | |
| resources: {} | |
| terminationMessagePath: /dev/termination-log | |
| terminationMessagePolicy: File | |
| dnsPolicy: ClusterFirst | |
| restartPolicy: Always | |
| schedulerName: default-scheduler | |
| securityContext: {} | |
| terminationGracePeriodSeconds: 30 | |
| volumes: | |
| - configMap: | |
| defaultMode: 420 | |
| name: sparky-metrics | |
| name: hawkular-openshift-agent | |
| test: false | |
| triggers: | |
| - type: ConfigChange | |
| status: | |
| availableReplicas: 0 | |
| latestVersion: 0 | |
| observedGeneration: 0 | |
| replicas: 0 | |
| unavailableReplicas: 0 | |
| updatedReplicas: 0 | |
| - apiVersion: v1 | |
| kind: ServiceAccount | |
| metadata: | |
| creationTimestamp: null | |
| name: builder | |
| - apiVersion: v1 | |
| kind: ServiceAccount | |
| metadata: | |
| creationTimestamp: null | |
| name: default | |
| - apiVersion: v1 | |
| kind: ServiceAccount | |
| metadata: | |
| creationTimestamp: null | |
| name: deployer | |
| - apiVersion: v1 | |
| kind: ServiceAccount | |
| metadata: | |
| annotations: | |
| serviceaccounts.openshift.io/oauth-redirectreference.first: '{"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"oshinko-web-oaproxy"}}' | |
| creationTimestamp: null | |
| name: oshinko |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| kind: Template | |
| metadata: | |
| creationTimestamp: null | |
| name: scc | |
| objects: | |
| - allowHostDirVolumePlugin: true | |
| allowHostIPC: true | |
| allowHostNetwork: true | |
| allowHostPID: true | |
| allowHostPorts: true | |
| allowPrivilegedContainer: true | |
| allowedCapabilities: | |
| - '*' | |
| allowedFlexVolumes: [] | |
| apiVersion: v1 | |
| defaultAddCapabilities: [] | |
| fsGroup: | |
| type: RunAsAny | |
| groups: | |
| - system:cluster-admins | |
| - system:nodes | |
| - system:masters | |
| kind: SecurityContextConstraints | |
| metadata: | |
| annotations: | |
| kubernetes.io/description: 'privileged allows access to all privileged and host | |
| features and the ability to run as any user, any group, any fsGroup, and with | |
| any SELinux context. WARNING: this is the most relaxed SCC and should be | |
| used only for cluster administration. Grant with caution.' | |
| openshift.io/generated-by: OpenShiftNewApp | |
| creationTimestamp: null | |
| labels: | |
| app: gpg | |
| name: privileged-custom-sa | |
| priority: 8 | |
| readOnlyRootFilesystem: false | |
| requiredDropCapabilities: [] | |
| runAsUser: | |
| type: RunAsAny | |
| seLinuxContext: | |
| type: RunAsAny | |
| seccompProfiles: | |
| - '*' | |
| supplementalGroups: | |
| type: RunAsAny | |
| users: | |
| - system:serviceaccount:${NAMESPACE}:deployer | |
| volumes: | |
| - '*' |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment