Skip to content

Instantly share code, notes, and snippets.

@jayunit100

jayunit100/-

Last active August 17, 2017 18:29
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save jayunit100/39693ec4a75da5cc22dd89e7fd7655a4 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save jayunit100/39693ec4a75da5cc22dd89e7fd7655a4 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
-
---
kind: List
apiVersion: v1
items:
### PRE SETUP
- apiVersion: v1
kind: ReplicationController
metadata:
name: cfssl
spec:
replicas: 1
template:
metadata:
name: cfssl
labels:
app: cfssl
tier: cfssl
spec:
volumes:
- emptyDir: {}
name: dir-1
containers:
- image: blackducksoftware/hub-cfssl:4.1.0
name: hub-cfssl
envFrom:
- configMapRef:
name: "hub-config"
volumeMounts:
- mountPath: /etc/cfssl
name: dir-1
ports:
- containerPort: 8888
resources:
terminationMessagePath: /dev/termination-log
imagePullPolicy: Always
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
- apiVersion: v1
kind: Service
metadata:
name: cfssl
spec:
ports:
- name: 8888-tcp
port: 8888
targetPort: 8888
selector:
app: cfssl
status:
loadBalancer: {}
### CONFIG MAPS
- apiVersion: v1
data:
HUB_POSTGRES_ADMIN_PASSWORD_FILE: |
blackduck
kind: ConfigMap
metadata:
name: hpup-admin
- apiVersion: v1
data:
HUB_POSTGRES_USER_PASSWORD_FILE: |
blackduck
kind: ConfigMap
metadata:
name: hpup-user
- apiVersion: v1
data:
HUB_POSTGRES_ADMIN: blackduck
HUB_POSTGRES_ENABLE_SSL: "false"
HUB_POSTGRES_HOST: blackduck.cirglt6ozchh.us-east-1.rds.amazonaws.com
HUB_POSTGRES_PORT: "5432"
HUB_POSTGRES_USER: blackduck_user
HUB_WEBSERVER_PORT: "8443"
IPV4_ONLY: "0"
PUBLIC_HUB_WEBSERVER_PORT: "443"
kind: ConfigMap
metadata:
name: hub-config
### SERVICES
- apiVersion: v1
kind: ReplicationController
metadata:
name: jobrunner
spec:
replicas: 1
template:
metadata:
name: jobrunner
labels:
app: jobrunner
tier: jobrunner
spec:
volumes:
- name: hpup-user
configMap:
name: hpup-user
- name: hpup-admin
configMap:
name: hpup-admin
containers:
- image: blackducksoftware/hub-jobrunner:4.1.0
name: jobrunner
volumeMounts:
- mountPath: "/run/secrets/HUB_POSTGRES_USER_PASSWORD_FILE"
name: hpup-user
subPath: HUB_POSTGRES_USER_PASSWORD_FILE
- mountPath: "/run/secrets/HUB_POSTGRES_ADMIN_PASSWORD_FILE"
name: hpup-admin
subPath: HUB_POSTGRES_ADMIN_PASSWORD_FILE
envFrom:
- configMapRef:
name: hub-config
env:
- name: HUB_POSTGRES_ENABLE_SSL
value: "false"
- name: HUB_PROXY_PASSWORD
- name: HUB_MAX_MEMORY
value: 4096m
- name: HUB_PROXY_DOMAIN
- name: HUB_PROXY_HOST
- name: HUB_PROXY_PORT
- name: HUB_PROXY_SCHEME
- name: HUB_PROXY_USER
- name: HUB_PROXY_WORKSTATION
- apiVersion: v1
kind: ReplicationController
metadata:
name: nginx-webapp-logstash
spec:
replicas: 1
template:
metadata:
name: nginx-webapp-logstashsh
labels:
app: nginx-webapp-logstash
tier: nginx-webapp-logstash
spec:
volumes:
- emptyDir: {}
name: dir-webapp
- emptyDir: {}
name: dir-logstash
- name: dir-webserver
emptyDir: {}
- name: hpup-user
configMap:
name: hpup-user
- name: hpup-admin
configMap:
name: hpup-admin
containers:
- name: webapp
resources:
requests:
cpu: "1"
memory: 5Gi
image: blackducksoftware/hub-webapp:4.1.0
envFrom:
- configMapRef:
name: hub-config
env:
- name: HUB_PROXY_PASSWORD
- name: HUB_PROXY_DOMAIN
- name: HUB_MAX_MEMORY
value: 3072m
- name: HUB_PROXY_HOST
- name: HUB_PROXY_PORT
- name: HUB_PROXY_SCHEME
- name: HUB_PROXY_USER
- name: HUB_PROXY_WORKSTATION
volumeMounts:
- mountPath: "/opt/blackduck/hub/logs"
name: dir-webapp
- mountPath: "/var/lib/logstash/data"
name: dir-logstash
- mountPath: "/run/secrets/HUB_POSTGRES_USER_PASSWORD_FILE"
name: hpup-user
subPath: HUB_POSTGRES_USER_PASSWORD_FILE
- mountPath: "/run/secrets/HUB_POSTGRES_ADMIN_PASSWORD_FILE"
name: hpup-admin
subPath: HUB_POSTGRES_ADMIN_PASSWORD_FILE
ports:
- containerPort: 8080
- image: blackducksoftware/hub-logstash:4.1.0
name: logstash
volumeMounts:
- mountPath: "/opt/blackduck/hub/logs"
name: dir-webapp
- mountPath: "/var/lib/logstash/data"
name: dir-logstash
ports:
- containerPort: 4560
- containerPort: 5044 # filebeat
- name: nginx
image: blackducksoftware/hub-nginx:4.1.0
ports:
- containerPort: 8443
volumes:
volumeMounts:
- mountPath: "/opt/blackduck/hub/webserver/security"
name: dir-webserver
- apiVersion: v1
kind: ReplicationController
metadata:
name: documentation
spec:
replicas: 1
template:
metadata:
labels:
app: documentation
name: documentation
spec:
containers:
- image: "blackducksoftware/hub-documentation:4.1.0"
name: documentation
ports:
-
containerPort: 8080
- apiVersion: v1
kind: ReplicationController
metadata:
name: solr
spec:
replicas: 1
template:
metadata:
name: solr
labels:
app: solr
tier: solr
spec:
containers:
- name: solr
image: blackducksoftware/hub-solr:4.1.0
envFrom:
- configMapRef:
name: hub-config
- apiVersion: v1
kind: ReplicationController
metadata:
name: registration
spec:
replicas: 1
template:
metadata:
name: registration
labels:
app: registration
tier: registration
spec:
containers:
- envFrom:
- configMapRef:
name: hub-config
env:
- name: HUB_PROXY_PASSWORD
- name: HUB_PROXY_DOMAIN
- name: HUB_PROXY_HOST
- name: HUB_PROXY_PORT
- name: HUB_PROXY_SCHEME
- name: HUB_PROXY_USER
- name: HUB_PROXY_WORKSTATION
image: blackducksoftware/hub-registration:4.1.0
name: registration
ports:
- containerPort: 8080
volumes:
- emptyDir: {}
name: dir-1
volumeMounts:
- mountPath: "/opt/blackduck/hub/registration/config"
name: dir-1
- apiVersion: v1
kind: ReplicationController
metadata:
name: zookeeper
spec:
replicas: 1
template:
metadata:
name: zookeeper
labels:
app: zookeeper
tier: zookeeper
spec:
containers:
- envFrom:
- configMapRef:
name: hub-config
env:
- name: HUB_PROXY_PASSWORD
- name: HUB_PROXY_DOMAIN
- name: HUB_MAX_MEMORY
value: 3072m
- name: HUB_PROXY_HOST
- name: HUB_PROXY_PORT
- name: HUB_PROXY_SCHEME
- name: HUB_PROXY_USER
- name: HUB_PROXY_WORKSTATION
image: blackducksoftware/hub-zookeeper:4.1.0
name: zookeeper
volumes:
- emptyDir: {}
name: dir-1
volumeMounts:
- mountPath: "/opt/blackduck/hub/logs"
name: dir-1
- apiVersion: v1
kind: Service
metadata:
name: zookeeper
spec:
ports:
- name: 2181-tcp
port: 2181
targetPort: 2181
selector:
app: zookeeper
status:
loadBalancer: {}
- apiVersion: v1
kind: Service
metadata:
name: nginx-webapp-logstash
spec:
ports:
- name: 443-tcp
port: 443
targetPort: 8443
selector:
app: nginx-webapp-logstash
status:
loadBalancer: {}
- apiVersion: v1
kind: Service
metadata:
name: webapp
spec:
ports:
- name: 8080-tcp
port: 8080
targetPort: 8080
selector:
app: nginx-webapp-logstash
status:
loadBalancer: {}
# Important to expose logstash for writing to logs. maybe for reading as well .
- apiVersion: v1
kind: Service
metadata:
name: logstash
spec:
ports:
- name: 4560-tcp
port: 4560
targetPort: 4560
- name: 5044-tcp-filebeat
port: 5044
targetPort: 5044
selector:
app: nginx-webapp-logstash
- apiVersion: v1
kind: Service
metadata:
name: solr
spec:
ports:
- name: 8080-tcp
port: 8080
targetPort: 8080
selector:
app: solr
- apiVersion: v1
kind: Service
metadata:
name: registration
spec:
ports:
- name: 8080-tcp
port: 8080
targetPort: 8080
selector:
app: registration
- apiVersion: v1
kind: Service
metadata:
name: documentation
spec:
ports:
- name: 9999-tcp
port: 9999
targetPort: 8080
selector:
app: nginx-webapp-logstash
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment