cockpit-cloud.yml.in

---
apiVersion: v1
kind: List
items:
- kind: Secret
  apiVersion: v1
  metadata:
    name: cockpit-cloud-@INSTANCE@-keys
    namespace: @PROJECT@
  data:
    server.key: @SERVER_KEY@
    server.crt: @SERVER_CRT@
    client.crt: @CLIENT_CRT@

- kind: Pod
  apiVersion: v1
  metadata:
    name: cockpit-cloud-@INSTANCE@
    namespace: @PROJECT@
    labels:
      infra: cockpit-cloud
  spec:
    containers:
      - name: cockpit-cloud
        image: quay.io/lis/cockpit-cloud
        ports:
          - name: session
            containerPort: 8080
          - name: cockpit
            containerPort: 9090
        volumeMounts:
          - name: secrets
            mountPath: /container/secrets
            readOnly: true
    volumes:
      - name: secrets
        secret:
          secretName: cockpit-cloud-@INSTANCE@-keys
    restartPolicy: Never

- kind: Service
  apiVersion: v1
  metadata:
    name: cockpit-cloud-service-@INSTANCE@
  spec:
    ports:
    - name: session
      targetPort: 8080
      port: 8080
      protocol: TCP
    - name: cockpit
      targetPort: 9090
      port: 9090
      protocol: TCP
    selector:
      infra: cockpit-cloud

- kind: Route
  apiVersion: route.openshift.io/v1
  metadata:
    name: cockpit-cloud-session-@INSTANCE@
  spec:
    to:
      kind: Service
      name: cockpit-cloud-service-@INSTANCE@
    port:
      targetPort: 8080
    tls:
      termination: passthrough

- kind: Route
  apiVersion: route.openshift.io/v1
  metadata:
    name: cockpit-cloud-@INSTANCE@
  spec:
    to:
      kind: Service
      name: cockpit-cloud-service-@INSTANCE@
    port:
      targetPort: 9090
    tls:
      termination: edge