|
@@ -11,6 +11,8 @@ items:
|
|
|
openshift.io/description: "ICHP Namespace Requested For {{ role.requester }}"
|
|
openshift.io/description: "ICHP Namespace Requested For {{ role.requester }}"
|
|
|
openshift.io/display-name: "{{ role.displayname | default(role.name) }}"
|
|
openshift.io/display-name: "{{ role.displayname | default(role.name) }}"
|
|
|
openshift.io/requester: {{ role.requester }}
|
|
openshift.io/requester: {{ role.requester }}
|
|
|
|
|
+ labels:
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
{% endif %}
|
|
{% endif %}
|
|
|
name: {{ role.name }}
|
|
name: {{ role.name }}
|
|
|
spec: {}
|
|
spec: {}
|
|
@@ -22,6 +24,7 @@ items:
|
|
|
namespace: {{ role.name }}
|
|
namespace: {{ role.name }}
|
|
|
labels:
|
|
labels:
|
|
|
ichp.ing.net/requester-rolebinding: ''
|
|
ichp.ing.net/requester-rolebinding: ''
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
roleRef:
|
|
roleRef:
|
|
|
apiGroup: rbac.authorization.k8s.io
|
|
apiGroup: rbac.authorization.k8s.io
|
|
|
kind: ClusterRole
|
|
kind: ClusterRole
|
|
@@ -35,6 +38,8 @@ items:
|
|
|
metadata:
|
|
metadata:
|
|
|
name: allow-from-ichp-infra
|
|
name: allow-from-ichp-infra
|
|
|
namespace: {{ role.name }}
|
|
namespace: {{ role.name }}
|
|
|
|
|
+ labels:
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
spec:
|
|
spec:
|
|
|
ingress:
|
|
ingress:
|
|
|
- from:
|
|
- from:
|
|
@@ -49,6 +54,8 @@ items:
|
|
|
metadata:
|
|
metadata:
|
|
|
name: allow-from-openshift-ingress
|
|
name: allow-from-openshift-ingress
|
|
|
namespace: {{ role.name }}
|
|
namespace: {{ role.name }}
|
|
|
|
|
+ labels:
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
spec:
|
|
spec:
|
|
|
ingress:
|
|
ingress:
|
|
|
- from:
|
|
- from:
|
|
@@ -63,6 +70,8 @@ items:
|
|
|
metadata:
|
|
metadata:
|
|
|
name: allow-from-same-namespace
|
|
name: allow-from-same-namespace
|
|
|
namespace: {{ role.name }}
|
|
namespace: {{ role.name }}
|
|
|
|
|
+ labels:
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
spec:
|
|
spec:
|
|
|
ingress:
|
|
ingress:
|
|
|
- from:
|
|
- from:
|
|
@@ -75,6 +84,8 @@ items:
|
|
|
metadata:
|
|
metadata:
|
|
|
name: deny-from-all
|
|
name: deny-from-all
|
|
|
namespace: {{ role.name }}
|
|
namespace: {{ role.name }}
|
|
|
|
|
+ labels:
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
spec:
|
|
spec:
|
|
|
podSelector: {}
|
|
podSelector: {}
|
|
|
policyTypes:
|
|
policyTypes:
|
|
@@ -84,6 +95,8 @@ items:
|
|
|
metadata:
|
|
metadata:
|
|
|
name: compute-quota
|
|
name: compute-quota
|
|
|
namespace: {{ role.name }}
|
|
namespace: {{ role.name }}
|
|
|
|
|
+ labels:
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
spec:
|
|
spec:
|
|
|
hard:
|
|
hard:
|
|
|
requests.cpu: {{ role.quota.requests.cpu | default("1500m") }}
|
|
requests.cpu: {{ role.quota.requests.cpu | default("1500m") }}
|
|
@@ -95,6 +108,8 @@ items:
|
|
|
metadata:
|
|
metadata:
|
|
|
name: storage-quota
|
|
name: storage-quota
|
|
|
namespace: {{ role.name }}
|
|
namespace: {{ role.name }}
|
|
|
|
|
+ labels:
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
spec:
|
|
spec:
|
|
|
hard:
|
|
hard:
|
|
|
persistentvolumeclaims: 0
|
|
persistentvolumeclaims: 0
|
|
@@ -106,6 +121,8 @@ items:
|
|
|
metadata:
|
|
metadata:
|
|
|
name: limit-ranges
|
|
name: limit-ranges
|
|
|
namespace: {{ role.name }}
|
|
namespace: {{ role.name }}
|
|
|
|
|
+ labels:
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
spec:
|
|
spec:
|
|
|
limits:
|
|
limits:
|
|
|
- type: Container
|
|
- type: Container
|
|
@@ -131,6 +148,7 @@ items:
|
|
|
name: egress-ns-{{ role.name }}
|
|
name: egress-ns-{{ role.name }}
|
|
|
labels:
|
|
labels:
|
|
|
egress.for.namespace: {{ role.name }}
|
|
egress.for.namespace: {{ role.name }}
|
|
|
|
|
+ ichp.ing.net/generated: ''
|
|
|
{% if (role.state | default("present")) == "present" %}
|
|
{% if (role.state | default("present")) == "present" %}
|
|
|
spec:
|
|
spec:
|
|
|
egressIPs:
|
|
egressIPs:
|
