workshop.yaml

apiVersion: training.eduk8s.io/v1alpha2
kind: Workshop
metadata:
  name: lab-springone-tour-devops
spec:
  title: Main Branch
  description: SpringOne Tour 2021 Workshop 3
  vendor: eduk8s.io
  difficulty: beginner
  duration: 120m
  url: https://github.com/springone-tour-2021/lab-workshop-3
  content:
    image: quay.io/eduk8s/jdk11-environment:latest
    files: github.com/springone-tour-2021/lab-workshop-3?ref=main
  session:
    resources:
      memory: 2.5Gi
#    ingresses:
#      - name: argocd-grpc
#        protocol: https
#        host: argocd-server-grpc.argocd.svc.cluster.local
#        port: 443
    namespaces:
      budget: large
    applications:
      terminal:
        enabled: true
        layout: split
      console:
        enabled: true
      editor:
        enabled: true
      registry:
        enabled: true
      docker:
        enabled: true
    objects:
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRoleBinding
      metadata:
        name: $(session_namespace)-kpack-ro
      roleRef:
        apiGroup: rbac.authorization.k8s.io
        kind: ClusterRole
        name: $(workshop_namespace)-kpack-ro
      subjects:
        - kind: ServiceAccount
          namespace: $(workshop_namespace)
          name: $(service_account)
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: RoleBinding
      metadata:
        name: $(session_namespace)-kpack-rw
        namespace: $(session_namespace)
      roleRef:
        apiGroup: rbac.authorization.k8s.io
        kind: ClusterRole
        name: $(workshop_namespace)-kpack-rw
      subjects:
        - kind: ServiceAccount
          namespace: $(workshop_namespace)
          name: $(service_account)
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRoleBinding
      metadata:
        name: $(session_namespace)-argocd-ro
      roleRef:
        apiGroup: rbac.authorization.k8s.io
        kind: ClusterRole
        name: $(workshop_namespace)-argocd-ro
      subjects:
        - kind: ServiceAccount
          namespace: $(workshop_namespace)
          name: $(service_account)
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: RoleBinding
      metadata:
        name: $(session_namespace)-argocd-rw
        namespace: $(session_namespace)
      roleRef:
        apiGroup: rbac.authorization.k8s.io
        kind: ClusterRole
        name: $(workshop_namespace)-argocd-rw
      subjects:
        - kind: ServiceAccount
          namespace: $(workshop_namespace)
          name: $(service_account)
    - kind: RoleBinding
      apiVersion: rbac.authorization.k8s.io/v1
      metadata:
        name: $(session_namespace)-argocd-secret
        namespace: argocd
      roleRef:
        apiGroup: rbac.authorization.k8s.io
        kind: ClusterRole
        name: $(workshop_namespace)-argocd-secret
      subjects:
        - kind: ServiceAccount
          name: $(service_account)
          namespace: $(workshop_namespace)
    - kind: RoleBinding
      apiVersion: rbac.authorization.k8s.io/v1
      metadata:
        name: $(session_namespace)-argocd-server
        namespace: argocd
      roleRef:
        apiGroup: rbac.authorization.k8s.io
        kind: ClusterRole
        name: $(workshop_namespace)-argocd-server
      subjects:
        - kind: ServiceAccount
          name: $(service_account)
          namespace: $(workshop_namespace)
    - kind: RoleBinding
      apiVersion: rbac.authorization.k8s.io/v1
      metadata:
        name: $(session_namespace)-argocd-portforward
        namespace: argocd
      roleRef:
        apiGroup: rbac.authorization.k8s.io
        kind: ClusterRole
        name: $(workshop_namespace)-argocd-portforward
      subjects:
        - kind: ServiceAccount
          name: $(service_account)
          namespace: $(workshop_namespace)
  environment:
    objects:
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRole
      metadata:
        name: $(workshop_namespace)-kpack-ro
      rules:
        - apiGroups:
            - kpack.io
          resources:
            - clusterbuilders
            - clusterstacks
            - clusterstores
          verbs:
            - get
            - list
            - watch
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRole
      metadata:
        name: $(workshop_namespace)-kpack-rw
      rules:
        - apiGroups:
            - kpack.io
          resources:
            - builders
            - builds
            - images
            - sourceresolvers
          verbs:
            - get
            - list
            - watch
            - create
            - delete
            - patch
            - update
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRole
      metadata:
        name: $(workshop_namespace)-argocd-ro
      rules:
        - apiGroups:
            - ""
          resources:
            - pods
            - services
          verbs:
            - get
            - list
            - watch
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRole
      metadata:
        name: $(workshop_namespace)-argocd-rw
      rules:
        - apiGroups:
            - argoproj.io
          resources:
            - applications
            - appprojects
          verbs:
            - get
            - list
            - watch
            - create
            - delete
            - patch
            - update
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRole
      metadata:
        name: $(workshop_namespace)-argocd-secret
      rules:
        - apiGroups:
            - ""
          resources:
            - secrets
          resourceNames:
            - argocd-initial-admin-secret
          verbs:
            - get
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRole
      metadata:
        name: $(workshop_namespace)-argocd-server
      rules:
        - apiGroups:
            - ""
          resources:
            - services
          resourceNames:
            - argocd-server
          verbs:
            - get
    - apiVersion: rbac.authorization.k8s.io/v1
      kind: ClusterRole
      metadata:
        name: $(workshop_namespace)-argocd-portforward
      rules:
        - apiGroups:
            - ""
          resources:
            - pods/portforward
          verbs:
            - get
            - list
            - watch
            - create
            - delete
            - patch
            - update
    - apiVersion: kpack.io/v1alpha1
      kind: ClusterStore
      metadata:
        name: $(workshop_namespace)-store
      spec:
        sources:
          - image: paketobuildpacks/builder:base
    - apiVersion: kpack.io/v1alpha1
      kind: ClusterStack
      metadata:
        name: $(workshop_namespace)-stack
      spec:
        id: "io.buildpacks.stacks.bionic"
        buildImage:
          image: "paketobuildpacks/build:base-cnb"
        runImage:
          image: "paketobuildpacks/run:base-cnb"
    - apiVersion: extensions/v1beta1
      kind: Ingress
      metadata:
        name: $(workshop_namespace)-argocd-server-http
        namespace: argocd
      spec:
        rules:
          - host: $(workshop_namespace)-argocd.$(ingress_domain)
            http:
              paths:
                - backend:
                    serviceName: argocd-server
                    servicePort: http
#    - apiVersion: extensions/v1beta1
#      kind: Ingress
#      metadata:
#        name: $(workshop_namespace)-argocd-server-grpc
#        namespace: argocd
#      spec:
#        rules:
#          - host: $(workshop_namespace)-argocd-grpc.$(ingress_domain)
#            http:
#              paths:
#                - backend:
#                    serviceName: argocd-server
#                    servicePort: https