-
Notifications
You must be signed in to change notification settings - Fork 0
/
image.yaml
247 lines (246 loc) · 13.1 KB
/
image.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
schema_version: 1
name: "jboss-eap-7/eap71-openshift"
description: "Red Hat JBoss Enterprise Application Platform 7.1 OpenShift container image"
version: "1.2"
from: "jboss-eap-7/eap71:latest"
labels:
- name: "io.k8s.description"
value: "Platform for building and running JavaEE applications on JBoss EAP 7.1"
- name: "io.k8s.display-name"
value: "JBoss EAP 7.1"
- name: "io.openshift.expose-services"
value: "8080:http"
- name: "io.openshift.tags"
value: "builder,javaee,eap,eap7"
- name: "io.openshift.s2i.scripts-url"
value: "image:///usr/local/s2i"
envs:
- name: "STI_BUILDER"
value: "jee"
- name: "JBOSS_MODULES_SYSTEM_PKGS"
value: "org.jboss.logmanager,jdk.nashorn.api"
- name: "DEFAULT_ADMIN_USERNAME"
value: "eapadmin"
- name: HTTPS_ENABLE_HTTP2
value: "true"
- name: "JAVA_OPTS_APPEND"
example: "-Dfoo=bar"
description: "Server startup options."
- name: "JBOSS_MODULES_SYSTEM_PKGS_APPEND"
example: "org.jboss.byteman"
description: "Comma-separated list of package names that will be appended to the JBOSS_MODULES_SYSTEM_PKGS environment variable."
- name: "MQ_SIMPLE_DEFAULT_PHYSICAL_DESTINATION"
example: "false"
description: "For backwards compatability, set to true to use 'MyQueue' and 'MyTopic' as physical destination name defaults instead of 'queue/MyQueue' and 'topic/MyTopic'."
- name: "DEFAULT_JMS_CONNECTION_FACTORY"
example: "java:jboss/DefaultJMSConnectionFactory"
description: "Specify the default JNDI binding for the JMS connection factory (jms-connection-factory='java:jboss/DefaultJMSConnectionFactory')."
- name: "CLI_GRACEFUL_SHUTDOWN"
example: "true"
description: "If set to any non zero length value then the image will prevent shutdown with the TERM signal and will require execution of the shutdown command through jboss-cli."
- name: AB_HAWKULAR_REST_URL
description: The url of the Hawkular REST service to which the Hawkular agent will emit metrics. This must be set to configure the Hawkular agent.
example: "http://myhawkularservice.example.com/hawkular"
- name: AB_HAWKULAR_REST_USER
description: The username used for basic authentication with the Hawkular REST service.
example: hawkW1nd
- name: AB_HAWKULAR_REST_PASSWORD
description: The password used for basic authentication with the Hawkular REST service.
example: QSandC
- name: AB_HAWKULAR_REST_FEED_ID
description: The feed-id for this agent. Must be globally unique to the Hawkular REST service.
example: autogenerate
- name: AB_HAWKULAR_REST_TENANT_ID
description: The tenant-id for this agent.
example: hawkular
- name: AB_HAWKULAR_REST_KEYSTORE
description: The name of the keystore JKS file used to verify the identity of the Hawkular REST service when using https.
example: keystore.jks
- name: AB_HAWKULAR_REST_KEYSTORE_DIR
description: The location of the keystore JKS file used to verify the identity of the Hawkular REST service when using https.
example: /etc/hawkular-agent-volume
- name: AB_HAWKULAR_REST_KEYSTORE_PASSWORD
description: The password for the keystore JKS file used to verify the identity of the Hawkular REST service when using https.
example: tru5tM3
- name: AB_HAWKULAR_REST_KEYSTORE_TYPE
description: The type of the keystore file used to verify the identity of the Hawkular REST service when using https. Defaults to the JVM default, jks.
example: jks
- name: AB_HAWKULAR_REST_KEY_MANAGER_ALGORITHM
description: The key manager algorithm to use when verifying the identity of the Hawkular REST service. Defaults to the JVM default.
example: X509
- name: AB_HAWKULAR_REST_TRUST_MANAGER_ALGORITHM
description: The trust manager algorithm to use when verifying the identity of the Hawkular REST service. Defaults to the JVM default.
example: X509
- name: AB_HAWKULAR_REST_SSL_PROTOCOL
description: The SSL protocol to use when verifying the identity of the Hawkular REST service. Defaults to TLSv1.
example: TLSv1
- name: AB_HAWKULAR_AGENT_OPTS
description: Additional options to add to the -javaagent parameter, e.g. delay=10.
- name: AB_HAWKULAR_AGENT_CONFIG
description: The location of the Hawkular agent configuration file, in yaml. Defaults to /opt/hawkular/etc/hawkular-javaagent-config.yaml.
example: /opt/eap/standalone/configuration/hawkular-javaagent-config.yaml
- name: AB_JOLOKIA_OFF
description: If set disables activation of Joloka (i.e. echos an empty value). By default, Jolokia is enabled.
example: "true"
- name: AB_JOLOKIA_CONFIG
description: If set uses this file (including path) as Jolokia JVM agent properties (as described in Jolokia's link:https://www.jolokia.org/reference/html/agents.html#agents-jvm[reference manual]). If not set, the `/opt/jolokia/etc/jolokia.properties` will be created using the settings as defined in the manual. Otherwise the rest of the settings in this document are ignored.
example: "/opt/jolokia/custom.properties"
- name: AB_JOLOKIA_HOST
description: Host address to bind to. Defaults to **0.0.0.0**.
example: "127.0.0.1"
- name: AB_JOLOKIA_PORT
description: Port to listen to. Defaults to **8778**.
example: "5432"
- name: AB_JOLOKIA_USER
description: User for basic authentication. Defaults to **jolokia**.
example: "myusername"
- name: AB_JOLOKIA_PASSWORD
description: Password for basic authentication. By default authentication is switched off.
example: "mypassword"
- name: AB_JOLOKIA_PASSWORD_RANDOM
description: Determines if a random AB_JOLOKIA_PASSWORD be generated. Set to **true** to generate random password. Generated value will be written to `/opt/jolokia/etc/jolokia.pw`.
example: "true"
- name: AB_JOLOKIA_HTTPS
description: Switch on secure communication with https. By default self signed server certificates are generated if no `serverCert` configuration is given in **AB_JOLOKIA_OPTS**.
example: "true"
- name: AB_JOLOKIA_ID
description: Agent ID to use (`$HOSTNAME` by default, which is the container id).
example: "openjdk-app-1-xqlsj"
- name: AB_JOLOKIA_DISCOVERY_ENABLED
description: Enable Jolokia discovery. Defaults to **false**.
example: "true"
- name: AB_JOLOKIA_OPTS
description: Additional options to be appended to the agent configuration. They should be given in the format `key=value,key=value,...`.
example: "backlog=20"
- name: AB_JOLOKIA_AUTH_OPENSHIFT
description: Switch on client authentication for OpenShift TLS communication. The value of this parameter can be a relative distinguished name which must be contained in a presented client's certificate. Enabling this parameter will automatically switch Jolokia into https communication mode. The default CA cert is set to `/var/run/secrets/kubernetes.io/serviceaccount/ca.crt`.
example: "true"
- name: SCRIPT_DEBUG
description: If set to true, ensurses that the bash scripts are executed with the -x option, printing the commands and their arguments as they are executed.
example: "true"
- name: JAVA_MAX_MEM_RATIO
description: This is used to calculate a default maximal heap memory based on a containers restriction. If used in a Docker container without any memory constraints for the container then this option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio of the container available memory as set here. The default is `50` which means 50% of the available memory is used as an upper boundary. You can skip this mechanism by setting this value to `0` in which case no `-Xmx` option
is added.
example: "50"
- name: JAVA_INITIAL_MEM_RATIO
description: This is used to calculate a default initial heap memory based the maximumal heap memory. The default is `100` which means 100% of the maximal heap is used for the initial heap size. You can skip this mechanism by setting this value to `0` in which case no `-Xms` option is added.
example: "100"
- name: JAVA_MAX_INITIAL_MEM
description: The maximum size of the initial heap memory, if the calculated default initial heap is larger then it will be capped at this value. The default is 4096 MB.
example: "4096"
- name: JAVA_CORE_LIMIT
description: Core limit as described in https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. Used to configure the number of GC threads and parallelism for ForkJoinPool. Defaults to container core limit.
example: "2"
- name: JAVA_DIAGNOSTICS
description: Set this to get some diagnostics information to standard output when things are happening. **Disabled by default.**
example: "true"
- name: GC_MIN_HEAP_FREE_RATIO
description: Minimum percentage of heap free after GC to avoid expansion.
example: "20"
- name: GC_MAX_HEAP_FREE_RATIO
description: Maximum percentage of heap free after GC to avoid shrinking.
example: "40"
- name: GC_TIME_RATIO
description: Specifies the ratio of the time spent outside the garbage collection (for example, the time spent for application execution) to the time spent in the garbage collection.
example: "4"
- name: GC_ADAPTIVE_SIZE_POLICY_WEIGHT
description: The weighting given to the current GC time versus previous GC times.
example: "90"
- name: GC_MAX_METASPACE_SIZE
description: The maximum metaspace size.
example: "100"
- name: CUSTOM_INSTALL_DIRECTORIES
description: A list of comma-separated directories used for installation and configuration of artifacts for the image during the S2I process.
example: "custom,shared"
- name: "CONTAINER_HEAP_PERCENT"
example: 0.5
description: Deprecated. See JAVA_MAX_MEM_RATIO.
- name: "INITIAL_HEAP_PERCENT"
example: 0.5
description: Deprecated. See JAVA_INITIAL_MEM_RATIO.
- name: "PROBE_DISABLE_BOOT_ERRORS_CHECK"
example: "true"
description: Disable the boot errors check in the probes.
- name: "ENABLE_ACCESS_LOG"
example: "true"
description: Enable the Access Log.
- name: "ENABLE_JSON_LOGGING"
example: "true"
description: Enable JSON-formatted logging
ports:
- value: 8443
- value: 8778
modules:
repositories:
- name: cct_module
git:
url: https://github.com/jboss-openshift/cct_module.git
ref: master
install:
- name: dynamic-resources
- name: s2i-common
- name: java-alternatives
- name: os-eap7-openshift
- name: os-eap-s2i
- name: os-java-jolokia
- name: jolokia
- name: os-eap7-openshift
- name: os-eap71-openshift
- name: os-eap7-modules
- name: os-eap71-modules
- name: os-eap7-ping
- name: os-eap-activemq-rar
- name: os-java-run
- name: os-eap-launch
- name: os-eap7-launch
- name: os-eap-logging
- name: os-eap-probes
- name: jboss-maven
- name: os-eap-db-drivers
- name: os-eap-sso
- name: os-eap70-sso
- name: os-java-hawkular
- name: os-eap70-hawkular
- name: os-eap-hawkular
- name: os-eap-deployment-scanner
- name: os-eap-extensions
- name: openshift-layer
- name: openshift-passwd
- name: os-logging
packages:
repositories:
- jboss-os
- jboss-rhscl
install:
- rh-mongodb32-mongo-java-driver
- postgresql-jdbc
- mysql-connector-java
- hostname
- python-requests
- python-enum34
- PyYAML
artifacts:
- url: https://maven.repository.redhat.com/ga/org/jolokia/jolokia-jvm/1.3.6.redhat-1/jolokia-jvm-1.3.6.redhat-1-agent.jar
md5: 75e5b5ba0b804cd9def9f20a70af649f
- path: javax.json-1.0.4.jar
md5: 569870f975deeeb6691fcb9bc02a9555
- path: jboss-logmanager-ext-1.0.0.Alpha2-redhat-1.jar
md5: 7c743e35463db5f55f415dd666d705c5
- path: oauth-20100527.jar
md5: 91c7c70579f95b7ddee95b2143a49b41
- path: activemq-rar-5.11.0.redhat-621084.rar
md5: 207e17ac8102c93233fe2764d1fe8499
- path: rh-sso-7.1.0-eap7-adapter.zip
description: "Artifact is available on Customer Portal: https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=44831&product=core.service.rhsso&version=7.0&downloadType=distributions"
sha256: 3d12e310a9b15f79cd46255819a0198acd569921797204c0936772e71dec8d23
- path: rh-sso-7.1.2-saml-eap7-adapter.zip
description: "Artifact is available on Customer Portal: https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=44801&product=core.service.rhsso&version=7.0&downloadType=distributions"
sha256: f48b2b15ccfd17589f5a424c689697b8cfefbe95a553ba589c14eaba4978a823
run:
user: 185
cmd:
- "/opt/eap/bin/openshift-launch.sh"
osbs:
repository:
name: jboss-eap-7-docker
branch: jb-eap-7.1-openshift-rhel-7