deploy-template.yaml

---
apiVersion: template.openshift.io/v1
kind: Template
message: |
  Created ${NAME} DeploymentConfig, ServiceAccount, Role, Service, and Route

metadata:
  annotations:
    openshift.io/display-name: Bookbag
    tags: gpte
    template.openshift.io/bindable: "false"
  name: bookbag

parameters:
  - name: NAME
    required: true
    value: bookbag-demo
  - name: IMAGE_STREAM_NAME
    required: true
    value: bookbag-demo
  - name: IMAGE_STREAM_NAMESPACE
  - name: IMAGE
    value: set-by-trigger
  - name: WORKSHOP_VARS
    required: true
    value: '{}'
  - name: AUTH_USERNAME
    required: true
    value: '*'
  - name: AUTH_PASSWORD
    value: ''
  - name: CONSOLE_IMAGE
    value: quay.io/openshift/origin-console:4.13
    required: true
  - name: CONSOLE_BRANDING
    value: openshift
    required: true
  - name: ROLE
    description: >-
      Role to assign to bookbag service account. Default, 'basic-user'.
      Ex: admin, edit, view
    required: true
    value: edit

objects:
  - apiVersion: apps.openshift.io/v1
    kind: DeploymentConfig
    metadata:
      labels:
        app: ${NAME}
      name: ${NAME}
    spec:
      replicas: 1
      selector:
        name: ${NAME}
      strategy:
        type: Recreate
      triggers:
        - type: ConfigChange
        - type: ImageChange
          imageChangeParams:
            automatic: true
            containerNames:
              - setup-console
              - terminal
            from:
              kind: ImageStreamTag
              name: ${IMAGE_STREAM_NAME}:latest
              namespace: ${IMAGE_STREAM_NAMESPACE}
      template:
        metadata:
          labels:
            app: ${NAME}
            name: ${NAME}
        spec:
          dnsPolicy: ClusterFirst
          restartPolicy: Always
          serviceAccountName: ${NAME}
          initContainers:
            - name: setup-console
              image: ${IMAGE}
              command:
                - /opt/workshop/bin/setup-console.sh
              volumeMounts:
                - name: shared
                  mountPath: /var/run/workshop
          containers:
            - name: terminal
              env:
                - name: APPLICATION_NAME
                  value: ${NAME}
                - name: AUTH_USERNAME
                  value: ${AUTH_USERNAME}
                - name: AUTH_PASSWORD
                  value: ${AUTH_PASSWORD}
                - name: CLUSTER_SUBDOMAIN
                - name: CONSOLE_URL
                  value: http://0.0.0.0:10083
                - name: OAUTH_SERVICE_ACCOUNT
                  value: ${NAME}
                - name: DOWNLOAD_URL
                - name: WORKSHOP_FILE
                - name: OC_VERSION
                - name: ODO_VERSION
                - name: KUBECTL_VERSION
                - name: WORKSHOP_VARS
                  value: ${WORKSHOP_VARS}
                - name: WORKSHOP_ONLY
                  value: "true"
              image: ${IMAGE}
              imagePullPolicy: IfNotPresent
              ports:
                - containerPort: 10080
                  protocol: TCP
              resources: {}
              volumeMounts:
                - name: shared
                  mountPath: /var/run/workshop

            - name: console
              image: ${CONSOLE_IMAGE}
              command:
                - /var/run/workshop/start-console.sh
              env:
                - name: BRIDGE_K8S_MODE
                  value: in-cluster
                - name: BRIDGE_LISTEN
                  value: http://0.0.0.0:10083
                - name: BRIDGE_BASE_PATH
                  value: /console/
                - name: BRIDGE_PUBLIC_DIR
                  value: /opt/bridge/static
                - name: BRIDGE_USER_AUTH
                  value: disabled
                - name: BRIDGE_BRANDING
                  value: ${CONSOLE_BRANDING}
              volumeMounts:
                - name: shared
                  mountPath: /var/run/workshop
          volumes:
            - name: shared
              emptyDir: {}

  - apiVersion: v1
    kind: ServiceAccount
    metadata:
      labels:
        app: ${NAME}
      name: ${NAME}

  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata:
      name: ${NAME}
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: ClusterRole
      name: ${ROLE}
    subjects:
    - kind: ServiceAccount
      name: ${NAME}

  - apiVersion: v1
    kind: Service
    metadata:
      labels:
        app: ${NAME}
      name: ${NAME}
    spec:
      ports:
      - name: 10080-tcp
        port: 10080
        protocol: TCP
        targetPort: 10080
      selector:
        name: ${NAME}
      type: ClusterIP

  - apiVersion: route.openshift.io/v1
    kind: Route
    metadata:
      labels:
        app: ${NAME}
      name: ${NAME}
    spec:
      port:
        targetPort: 10080-tcp
      to:
        kind: Service
        name: ${NAME}
      tls:
        termination: edge
        insecureEdgeTerminationPolicy: Redirect