[damned-lies/oscp] Add initial OSCP template

[Bartłomiej Piotrowski <bpiotrowski src gnome org>]

commit f01977f57cb57ef636357ff587451c106320cc1d
Author: Bartłomiej Piotrowski <bpiotrowski gnome org>
Date:   Mon Sep 9 13:59:46 2019 +0200

    Add initial OSCP template

 oscp.yaml | 266 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 266 insertions(+)
---
diff --git a/oscp.yaml b/oscp.yaml
new file mode 100644
index 00000000..5f64b73e
--- /dev/null
+++ b/oscp.yaml
@@ -0,0 +1,266 @@
+---
+kind: Template
+apiVersion: v1
+metadata:
+  name: damned-lies
+  annotations:
+    openshift.io/display-name: "Damned Lies"
+    description:  >-
+      Openshift template for Damned Lies.
+
+parameters:
+- name: IS_NAME
+  displayName: Image Stream
+  description: The OpenShift ImageStream name.
+  name: damnedlies
+
+- name: IS_VERSION
+  displayName: Image version
+  description: Version of image to use
+  value: latest
+
+- name: DB_NAME
+  displayName: Database name
+  description: Name of MySQl database
+  required: true
+
+- name: DB_USER
+  displayName: Database user
+  description: Database username
+  required: true
+
+- name: DB_PASSWORD
+  displayName: Database password
+  description: Password for database user
+  required: true
+
+- name: SECRET_KEY
+  displayName: Secret key
+  description: Secret key for Django
+  required: true
+
+- name: SENTRY_DSN
+  displayName: Sentry DSN
+  description: Sentry configuration URL
+  required: true
+
+- name: GITLAB_TOKEN
+  displayName: GitLab token
+  description: Token used to fetch repositories from GitLab
+  required: true
+
+objects:
+- kind: BuildConfig
+  apiVersion: build.openshift.io/v1
+  metadata:
+    name: damnedlies
+  spec:
+    runPolicy: "Serial"
+    source:
+      git:
+        uri: https://gitlab.gnome.org/Infrastructure/damned-lies.git
+        ref: oscp
+    strategy:
+      dockerStrategy:
+        dockerfilePath: Dockerfile
+    output:
+      to:
+        kind: "ImageStreamTag"
+        name: ${IS_NAME}:${IS_VERSION}
+
+- kind: ImageStream
+  apiVersion: image.openshift.io/v1
+  metadata:
+    generation: 2
+    labels:
+      name: damnedlies
+  spec:
+    lookupPolicy:
+      local: false
+    tags:
+    - annotations: null
+      from:
+        kind: DockerImage
+        name: ${IS_NAME}:${IS_VERSION}
+      generation: 2
+      importPolicy: {}
+      name: ${IS_VERSION}
+      referencePolicy:
+        type: Source
+
+- kind: Secret
+  apiVersion: v1
+  metadata:
+    name: damnedlies
+    labels:
+      app: damnedlies
+    annotations:
+      description: Damned Lies secrets
+      template.openshift.io/expose-database-name: "{.data['database-name']}"
+      template.openshift.io/expose-database-password: "{.data['database-password']}"
+      template.openshift.io/expose-database-user: "{.data['database-user']}"
+      template.openshift.io/expose-database-host: "{.data['database-host']}"
+      template.openshift.io/expose-secret-key: "{.data['secret-key']}"
+      template.openshift.io/expose-sentry-dsn: "{.data['sentry-dsn']}"
+      template.openshift.io/expose-gitlab-token: "{.data['gitlab-token']}"
+  stringData:
+    database-name: "${DB_NAME}"
+    database-user: "${DB_USER}"
+    database-host: "${DB_HOST}"
+    database-password: "${DB_PASSWORD}"
+    secret-key: "${SECRET_KEY}"
+    sentry-dsn: "${SENTRY_DSN}"
+    gitlab-token: "${GITLAB_TOKEN}"
+
+- kind: DeploymentConfig
+  apiVersion: v1
+  metadata:
+    name: damnedlies
+    generation: 1
+    labels:
+      app: damnedlies
+    annotations: {}
+  spec:
+    strategy:
+      type: Rolling
+      rollingParams:
+        updatePeriodSeconds: 1
+        intervalSeconds: 1
+        timeoutSeconds: 180
+        maxUnavailable: 25%
+        maxSurge: 25%
+      resources: {}
+      activeDeadlineSeconds: 21600
+    triggers:
+    - type: ConfigChange
+    - type: ImageChange
+      imageChangeParams:
+        automatic: true
+        containerNames:
+          - damnedlies
+        from:
+          kind: ImageStreamTag
+          namespace: "${IS_NAMESPACE}"
+          name: "${IS_NAME}:${IS_VERSION}"
+    replicas: 1
+    revisionHistoryLimit: 10
+    test: false
+    selector:
+      app: damnedlies
+      deploymentconfig: damnedlies
+    template:
+      metadata:
+        labels:
+          app: damnedlies
+          deploymentconfig: damnedlies
+        annotations: {}
+      spec:
+        containers:
+        - name: damnedlies
+          ports:
+          - containerPort: 8000
+            protocol: TCP
+          env:
+          - name: DB_NAME
+            valueFrom:
+              secretKeyRef:
+                name: damnedlies
+                key: databasename
+          - name: DB_USER
+            valueFrom:
+              secretKeyRef:
+                name: damnedlies
+                key: database-user
+          - name: DB_HOST
+            valueFrom:
+              secretKeyRef:
+                name: damnedlies
+                key: database-host
+          - name: DB_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: damnedlies
+                key: database-password
+          - name: SECRET_KEY
+            valueFrom:
+              secretKeyRef:
+                name: damnedlies
+                key: secret-key
+          - name: SENTRY_DSN
+            valueFrom:
+              secretKeyRef:
+                name: damnedlies
+                key: sentry-dsn
+          - name: GITLAB_TOKEN
+            valueFrom:
+              secretKeyRef:
+                name: damnedlies
+                key: gitlab-token
+          resources: {}
+          livenessProbe:
+            httpGet:
+              path: "/"
+              port: 8000
+              scheme: HTTP
+            initialDelaySeconds: 60
+            timeoutSeconds: 5
+            periodSeconds: 10
+            successThreshold: 1
+            failureThreshold: 6
+          readinessProbe:
+            httpGet:
+              path: "/"
+              port: 8000
+              scheme: HTTP
+            initialDelaySeconds: 10
+            timeoutSeconds: 2
+            periodSeconds: 10
+            successThreshold: 1
+            failureThreshold: 10
+          terminationMessagePath: "/dev/termination-log"
+          terminationMessagePolicy: File
+          imagePullPolicy: Always
+        restartPolicy: Always
+        terminationGracePeriodSeconds: 30
+        dnsPolicy: ClusterFirst
+        securityContext: {}
+        schedulerName: default-scheduler
+
+- kind: Service
+  apiVersion: v1
+  metadata:
+    name: damnedlies
+    labels:
+      app: damnedlies
+  spec:
+    ports:
+    - name: web
+      protocol: TCP
+      port: 8000
+      targetPort: 8000
+    selector:
+      app: damnedlies
+      deploymentconfig: damnedlies
+    type: ClusterIP
+    sessionAffinity: None
+  status:
+    loadBalancer: {}
+
+- kind: Route
+  apiVersion: v1
+  metadata:
+    name: damnedlies
+    creationTimestamp:
+    labels:
+      app: damnedlies
+  spec:
+    host: l10n.gnome.org
+    to:
+      kind: Service
+      name: damnedlies
+      weight: 100
+    port:
+      targetPort: web
+    tls:
+      termination: edge
+      insecureEdgeTerminationPolicy: "Redirect"