{
   "kind": "Template",
   "apiVersion": "v1",
   "metadata": {
      "name": "cockpit-openshift-template"
   },
   "labels": {
      "createdBy": "cockpit-openshift-template"
   },
   "parameters": [
      {
         "description": "The public url for the Openshift OAuth Provider",
         "name": "OPENSHIFT_OAUTH_PROVIDER_URL",
         "required": true
      },
      {
         "description": "The public url for the Openshift OAuth Provider",
         "name": "COCKPIT_KUBE_URL",
         "required": true
      },
      {
         "description": "The public url for the Openshift OAuth Provider",
         "name": "COCKPIT_KUBE_INSECURE",
         "required": false
      },
      {
         "description": "Oauth client secret",
         "name": "OPENSHIFT_OAUTH_CLIENT_SECRET",
         "from": "user[a-zA-Z0-9]{64}",
         "generate": "expression"
      },
      {
         "description": "Oauth client id",
         "name": "OPENSHIFT_OAUTH_CLIENT_ID",
         "value": "cockpit-oauth-client"
      },
      {
         "description": "Skip kubernetes CA verification",
         "name": "KUBERNETES_INSECURE",
         "value": ""
      },
      {
         "description": "PEM Encoded certificate to use for CA verification",
         "name": "KUBERNETES_CA_DATA",
         "value": ""
      },
      {
         "description": "Host name that the registry is accessible at",
         "name": "REGISTRY_HOST",
         "value": ""
      },
      {
         "description": "Show only the registry interface",
         "name": "REGISTRY_ONLY",
         "value": "false"
      }
   ],
   "objects": [
      {
         "kind":"DeploymentConfig",
         "apiVersion":"v1",
         "metadata":{
            "name":"openshift-cockpit",
            "labels":{
               "name":"openshift-cockpit"
            }
         },
         "spec":{
            "replicas":1,
            "selector":{
               "name":"openshift-cockpit"
            },
            "template":{
               "metadata":{
                  "labels":{
                     "name":"openshift-cockpit"
                  }
               },
               "spec":{
                  "containers":[{
                    "name": "openshift-cockpit",
                    "image": "cockpit/kubernetes",
                    "ports":[{
                        "containerPort":9090,
                        "protocol":"TCP"
                     }],
                    "env":[
                      {
                        "name": "OPENSHIFT_OAUTH_PROVIDER_URL",
                        "value": "${OPENSHIFT_OAUTH_PROVIDER_URL}"
                      },
                      {
                        "name": "OPENSHIFT_OAUTH_CLIENT_ID",
                        "value": "${OPENSHIFT_OAUTH_CLIENT_ID}"
                      },
                      {
                        "name": "KUBERNETES_INSECURE",
                        "value": "${KUBERNETES_INSECURE}"
                      },
                      {
                        "name": "KUBERNETES_CA_DATA",
                        "value": "${KUBERNETES_CA_DATA}"
                      },
                      {
                        "name": "COCKPIT_KUBE_INSECURE",
                        "value": "${COCKPIT_KUBE_INSECURE}"
                      },
                      {
                        "name": "COCKPIT_KUBE_URL",
                        "value": "${COCKPIT_KUBE_URL}"
                      },
                      {
                        "name": "REGISTRY_HOST",
                        "value": "${REGISTRY_HOST}"
                      },
                      {
                        "name": "REGISTRY_ONLY",
                        "value": "${REGISTRY_ONLY}"
                      }]
                  }]
               }
            }
         }
      },
      {
         "kind":"Service",
         "apiVersion":"v1",
         "metadata":{
            "name":"openshift-cockpit",
            "labels":{
               "name":"openshift-cockpit"
            }
         },
         "spec":{
             "type": "ClusterIP",
             "ports": [{
                 "name": "legacy",
                 "protocol": "TCP",
                 "port": 9000,
                 "targetPort": 9090
             },
             {
                 "name": "http",
                 "protocol": "TCP",
                 "port": 80,
                 "targetPort": 9090
             },
             {
                 "name": "https",
                 "protocol": "TCP",
                 "port": 443,
                 "targetPort": 9090
             }],
            "selector":{
               "name":"openshift-cockpit"
            }
         }
      },
      {
        "kind": "OAuthClient",
        "apiVersion": "v1",
        "metadata": {
          "name": "${OPENSHIFT_OAUTH_CLIENT_ID}"
        },
        "respondWithChallenges": false,
        "secret": "${OPENSHIFT_OAUTH_CLIENT_SECRET}",
        "allowAnyScope": true,
        "redirectURIs": [
            "${COCKPIT_KUBE_URL}"
        ]
      }
   ]
}