adding templates

appstore/tycho/template/cluster/jupyter-ds/clusterrole.yaml

@@ -0,0 +1,10 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ system.system_name }}
+  labels:
+    name: {{ system.system_name }}
+rules:
+- apiGroups: [""]
+  resources: ["pods", "deployments"]
+  verbs: ["get", "watch", "list"]

appstore/tycho/template/cluster/nextflow/clusterrole.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ system.system_name }}
+  labels:
+    name: {{ system.system_name }}
+    tycho-guid: {{ system.identifier }}
+rules:
+- apiGroups: [""]
+  resources: ["pods", "deployments"]
+  verbs: ["get", "watch", "list"]

appstore/tycho/template/cluster/nginx/clusterrole.yaml

@@ -0,0 +1,10 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ system.system_name }}
+  labels:
+    name: {{ system.system_name }}
+rules:
+- apiGroups: [""]
+  resources: ["pods", "deployments"]
+  verbs: ["get", "watch", "list"]

appstore/tycho/template/clusterrole.yaml

@@ -0,0 +1,10 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ system.system_name }}
+  labels:
+    name: {{ system.system_name }}
+rules:
+- apiGroups: [""]
+  resources: ["pods", "deployments"]
+  verbs: ["get", "watch", "list"]

appstore/tycho/template/clusterrolebinding.yaml

@@ -0,0 +1,14 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ system.system_name }}-global-2
+  labels:
+    name: {{ system.system_name }}
+#subjects:
+#- kind: Group
+#  name: manager
+#  apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: {{ system.system_name }}
+  apiGroup: rbac.authorization.k8s.io

appstore/tycho/template/jupyter-ds/clusterrolebinding.yaml

@@ -0,0 +1,14 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ system.system_name }}-global-2
+  labels:
+    name: {{ system.system_name }}
+#subjects:
+#- kind: Group
+#  name: manager
+#  apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: {{ system.system_name }}
+  apiGroup: rbac.authorization.k8s.io

appstore/tycho/template/mapping.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: ambassador/v1
+kind:  Mapping
+name: {{system.name}}-mapping  
+host: helx-app-commonsshare-org
+prefix: {{system.system_name}}/{{system.username}}/{{system.identifier}}
+headers:
+  remote_user: {{system.username}}
+service: {{system.name}}:{{system.system_port}}
+bypass_auth: true
+timeout_ms: 300000

appstore/tycho/template/nextflow/clusterrolebinding.yaml

@@ -0,0 +1,32 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: view-global
+  labels:
+    name: {{ system.system_name }}
+    tycho-guid: {{ system.identifier }}
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: default
+roleRef:
+  kind: ClusterRole
+  name: view
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: edit-global
+  labels:
+    name: {{ system.system_name }}
+    tycho-guid: {{ system.identifier }}
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: default
+roleRef:
+  kind: ClusterRole
+  name: edit
+  apiGroup: rbac.authorization.k8s.io
+

appstore/tycho/template/nginx/clusterrolebinding.yaml

@@ -0,0 +1,14 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ system.system_name }}-global
+  labels:
+    name: {{ system.system_name }}
+#subjects:
+#- kind: Group
+#  name: manager
+#  apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: {{ system.system_name }}
+  apiGroup: rbac.authorization.k8s.io

appstore/tycho/template/patch.yaml

@@ -0,0 +1,28 @@
+{% if system_modify.patch %}
+spec:
+  template:
+    {% if system_modify.labels|length > 0 %}
+    metadata:
+      labels:
+    {% for key, value in system_modify.labels.items() %}
+        {{ key }}: {{ value }}
+    {% endfor %}
+    {% endif %}
+    {% if system_modify.resources|length > 0 %}
+    spec:
+      containers:
+      {% for container in system_modify.containers %}
+      - resources:
+          limits:
+          {% for key, value in system_modify.resources.items() %}
+            {{ key }}: {{ value }}
+          {% endfor %}
+          requests:
+          {% for key, value in system_modify.resources.items() %}
+            {{ key }}: {{ value }}
+          {% endfor %}
+        name: {{ container.name }}
+        image: {{ container.image }}
+      {% endfor %}
+    {% endif %}
+{% endif %}