Manifests for important services (like OpenShift CI cluster and the CI service components that run on it) are present in this directory. The services configured here are critical for some part of the OpenShift project development workflow, must meet basic quality criteria and must be deployed to the cluster automatically by a postsubmit job.
Create a new directory for your service, containing all necessary files.
You may copy the _TEMPLATE
directory and start using the files there. Add
manifests and other configuration as needed.
- All directories should contain
OWNERS
andREADME.md
files. This is enforced bymake check
locally and by theci/prow/core-valid
check on pull requests. - Config is applied to the cluster using the
applyconfig
tool. The tool applies all YAML files under your service subdirectory. Subdirectories are searched recursively and directories with names starting with _ are skipped. All YAML filenames should follow the following convention:- All admin resources should be in
admin_*.yaml
files - Names of YAML files that should not be applied to the cluster should start
with
_
. - The remaining YAML files are considered "standard" resources.
- All admin resources should be in
applyconfig
applies files in lexicographical order. In the case when some resources need to be created before others, this needs to be reflected by the naming of the files (e.g. by including a numerical component).- The
config-updater
service account in theci
namespace must have permissions to apply all standard resources. - Destination namespaces should always be specified within a manifest, never rely on a currently set OpenShift project.
- All ConfigMaps need to be set up for automated updates by the
config-updater
Prow plugin.
There are three types of configuration: admin resources, other resources and ConfigMaps.
- Admin resources are not automatically applied to the cluster.
- Other resources are automatically applied to the cluster by a Prow postsubmit after each PR is merged, and also periodically.
- ConfigMaps are automatically updated by the
config-updater
Prow plugin, configured in its config.yaml file. Additionally, they are periodically synced by a Prow job.
- Admin resources can be created by users with
--as=system:admin
rights bymake core-admin
. - Other resources can be created by
make core
, provided the user has rights to perform all necessary actions - ConfigMaps can be manually created by the config-bootstrapper tool.
Additionally, the applyconfig
can be used directly.
See its README.md for more details.