add openshift resources to chart

charts/localstack/templates/NOTES.txt

@@ -17,6 +17,11 @@
 {{- else if contains "ClusterIP" .Values.service.type }}
   export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace | quote }} -l "app.kubernetes.io/name={{ include "localstack.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
   export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace | quote }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
-  echo "Visit http://127.0.0.1:8080 to use your application"
+  echo "visit http://127.0.0.1:8080 to use your application"
   kubectl --namespace {{ .Release.Namespace | quote }} port-forward $POD_NAME 8080:$CONTAINER_PORT
 {{- end }}
+{{- if and .Values.openshift .Values.route.enabled }}
+  export ROUTE_URL=$(oc get route localstack-fork --namespace "localstack" -o jsonpath="{.spec.host}")
+  echo http://$ROUTE_URL
+  echo "visit http://$ROUTE_URL to use your application"
+{{- end }}

charts/localstack/templates/role.yaml

@@ -19,4 +19,10 @@ rules:
 - apiGroups: [""]
   resources: ["services"]
   verbs: ["get", "list"]
+{{- if .Values.openshift }}
+- apiGroups: ["security.openshift.io"]
+  resources: ["securitycontextconstraints"]
+  resourceNames: ["anyuid"]
+  verbs: ["use"]
+{{- end }}
 {{- end }}

charts/localstack/templates/route.yaml

@@ -0,0 +1,21 @@
+{{- if and .Values.openshift .Values.route.enabled -}}
+kind: Route
+apiVersion: route.openshift.io/v1
+metadata:
+  name: {{ template "localstack.fullname" . }}
+  namespace: {{ .Release.Namespace | quote }}
+  labels:
+    {{- include "localstack.labels" . | nindent 4 }}
+spec:
+  host: {{ .Values.route.host }}
+  to:
+    kind: Service
+    name: {{ include "localstack.fullname" . }}
+    weight: 100
+  port:
+    targetPort: {{ .Values.route.port }}
+  wildcardPolicy: None
+  tls:
+    {{- toYaml .Values.route.tls | nindent  4 }}
+{{- end }}
+

charts/localstack/values.yaml

@@ -19,6 +19,10 @@ imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""
 
+## OpenShift.  When set to 'true' it will add SecurityContextConstraings (SCC)
+## to the role
+openshift: false
+
 ## @param extraDeploy Extra objects to deploy (value evaluated as a template)
 ##
 extraDeploy: []
@@ -155,6 +159,12 @@ ingress:
   #    hosts:
   #      - chart-example.local
 
+## Create a Route resource if using OpenShift
+## Defaults to the 'edge' port of the service on 4566
+route:
+  enabled: false
+  port: edge
+
 persistence:
   ## @param persistence.enabled Enable persistence using Persistent Volume Claims
   ##