diff options
| author | Jeff Cantrill <jcantrill@users.noreply.github.com> | 2017-01-17 11:42:23 -0500 |
|---|---|---|
| committer | Jeff Cantrill <jcantril@redhat.com> | 2017-01-17 13:49:11 -0500 |
| commit | 65eb7e43faf38698b22b90ad3c743d1fecdc0961 (patch) | |
| tree | bb690323269d929c9582756b4a77c8189217dcf4 /roles/openshift_metrics/templates | |
| parent | e96de3d7eb0b0ce6a8df96d4e3afa02f0859b94b (diff) | |
| download | openshift-65eb7e43faf38698b22b90ad3c743d1fecdc0961.tar.gz openshift-65eb7e43faf38698b22b90ad3c743d1fecdc0961.tar.bz2 openshift-65eb7e43faf38698b22b90ad3c743d1fecdc0961.tar.xz openshift-65eb7e43faf38698b22b90ad3c743d1fecdc0961.zip | |
use pod to generate keystores (#14)
Diffstat (limited to 'roles/openshift_metrics/templates')
| -rw-r--r-- | roles/openshift_metrics/templates/jks_pod.j2 | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/roles/openshift_metrics/templates/jks_pod.j2 b/roles/openshift_metrics/templates/jks_pod.j2 new file mode 100644 index 000000000..e86fe38a4 --- /dev/null +++ b/roles/openshift_metrics/templates/jks_pod.j2 @@ -0,0 +1,38 @@ +apiVersion: v1 +kind: Pod +metadata: + labels: + metrics-infra: support + generateName: jks-cert-gen- +spec: + containers: + - name: jks-cert-gen + image: {{openshift_metrics_image_prefix}}metrics-deployer:{{openshift_metrics_image_version}} + imagePullPolicy: Always + command: ["sh", "{{openshift_metrics_certs_dir}}/import_jks_certs.sh"] + securityContext: + runAsUser: 0 + volumeMounts: + - mountPath: {{openshift_metrics_certs_dir}} + name: certmount + env: + - name: CERT_DIR + value: {{openshift_metrics_certs_dir}} + - name: METRICS_KEYSTORE_PASSWD + value: {{metrics_keystore_passwd}} + - name: CASSANDRA_KEYSTORE_PASSWD + value: {{cassandra_keystore_passwd}} + - name: METRICS_TRUSTSTORE_PASSWD + value: {{metrics_truststore_passwd}} + - name: CASSANDRA_TRUSTSTORE_PASSWD + value: {{cassandra_truststore_passwd}} + - name: hawkular_cassandra_alias + value: {{cassandra_keystore_passwd}} + - name: JGROUPS_PASSWD + value: {{jgroups_passwd}} + restartPolicy: Never + serviceAccount: jks-generator + volumes: + - hostPath: + path: "{{openshift_metrics_certs_dir}}" + name: certmount |