image.yaml

schema_version: 1

name: "rhpam-7/rhpam70-kieserver-openshift"
description: "Red Hat Process Automation Manager Kie Server 7.0 container image"
version: "1.1"
from: "rhpam-7/rhpam70-kieserver:latest"
labels:
    - name: "com.redhat.component"
      value: "rhpam-7-rhpam70-kieserver-openshift-container"
    - name: "io.k8s.description"
      value: "Platform for running Red Hat Process Automation Manager Execution Server"
    - name: "io.k8s.display-name"
      value: "Red Hat Process Automation Manager Execution Server 7.0"
    - name: "io.openshift.expose-services"
      value: "8080:http,8443:https"
    - name: "io.openshift.tags"
      value: "builder,javaee,eap,eap7,rhpam,rhpam7"
    - name: "io.openshift.s2i.scripts-url"
      value: "image:///usr/local/s2i"
envs:
    - name: "STI_BUILDER"
      value: "jee"
    - name: "JBOSS_MODULES_SYSTEM_PKGS"
      value: "org.jboss.logmanager,jdk.nashorn.api"
    - name: "DEFAULT_ADMIN_USERNAME"
      value: "eapadmin"
    - name: "HTTPS_ENABLE_HTTP2"
      value: "true"
    - name: "JAVA_OPTS_APPEND"
      example: "-Dfoo=bar"
      description: "Server startup options."
    - name: "JBOSS_MODULES_SYSTEM_PKGS_APPEND"
      example: "org.jboss.byteman"
      description: "Comma-separated list of package names that will be appended to the JBOSS_MODULES_SYSTEM_PKGS environment variable."
    - name: "MQ_SIMPLE_DEFAULT_PHYSICAL_DESTINATION"
      example: "false"
      description: "For backwards compatability, set to true to use 'MyQueue' and 'MyTopic' as physical destination name defaults instead of 'queue/MyQueue' and 'topic/MyTopic'."
    - name: "DEFAULT_JMS_CONNECTION_FACTORY"
      example: "java:jboss/DefaultJMSConnectionFactory"
      description: "Specify the default JNDI binding for the JMS connection factory (jms-connection-factory='java:jboss/DefaultJMSConnectionFactory')."
    - name: "CLI_GRACEFUL_SHUTDOWN"
      example: "true"
      description: "If set to any non zero length value then the image will prevent shutdown with the TERM signal and will require execution of the shutdown command through jboss-cli."
    - name: "SCRIPT_DEBUG"
      description: "If set to true, ensurses that the bash scripts are executed with the -x option, printing the commands and their arguments as they are executed."
      example: "true"
    - name: "JAVA_MAX_MEM_RATIO"
      description: "This is used to calculate a default maximal heap memory based on a containers restriction. If used in a Docker container without any memory constraints for the container then this option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio of the container available memory as set here. The default is `50` which means 50% of the available memory is used as an upper boundary. You can skip this mechanism by setting this value to `0` in which case no `-Xmx` option is added."
      example: "50"
    - name: "JAVA_INITIAL_MEM_RATIO"
      description: "This is used to calculate a default initial heap memory based the maximumal heap memory.  The default is `100` which means 100% of the maximal heap is used for the initial heap size.  You can skip this mechanism by setting this value to `0` in which case no `-Xms` option is added."
      example: "100"
    - name: "JAVA_MAX_INITIAL_MEM"
      description: "The maximum size of the initial heap memory, if the calculated default initial heap is larger then it will be capped at this value.  The default is 4096 MB."
      example: "4096"
    - name: "JAVA_CORE_LIMIT"
      description: "Core limit as described in https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt.  Used to configure the number of GC threads and parallelism for ForkJoinPool.  Defaults to container core limit."
      example: "2"
    - name: "JAVA_DIAGNOSTICS"
      description: "Set this to get some diagnostics information to standard output when things are happening. **Disabled by default.**"
      example: "true"
    - name: "GC_MIN_HEAP_FREE_RATIO"
      description: "Minimum percentage of heap free after GC to avoid expansion."
      example: "20"
    - name: "GC_MAX_HEAP_FREE_RATIO"
      description: "Maximum percentage of heap free after GC to avoid shrinking."
      example: "40"
    - name: "GC_TIME_RATIO"
      description: "Specifies the ratio of the time spent outside the garbage collection (for example, the time spent for application execution) to the time spent in the garbage collection."
      example: "4"
    - name: "GC_ADAPTIVE_SIZE_POLICY_WEIGHT"
      description: "The weighting given to the current GC time versus previous GC times."
      example: "90"
    - name: "GC_MAX_METASPACE_SIZE"
      description: "The maximum metaspace size."
      example: "100"
    - name: "CUSTOM_INSTALL_DIRECTORIES"
      description: "A list of comma-separated directories used for installation and configuration of artifacts for the image during the S2I process."
      example: "custom,shared"
    - name: "CONTAINER_HEAP_PERCENT"
      example: "0.5"
      description: "Deprecated.  See JAVA_MAX_MEM_RATIO."
    - name: "INITIAL_HEAP_PERCENT"
      example: "0.5"
      description: "Deprecated.  See JAVA_INITIAL_MEM_RATIO."
    - name: "PROBE_DISABLE_BOOT_ERRORS_CHECK"
      example: "true"
      description: "Disable the boot errors check in the probes."
    - name: "ENABLE_ACCESS_LOG"
      example: "true"
      description: "Enable the Access Log."
    - name: "ENABLE_JSON_LOGGING"
      example: "true"
      description: "Enable JSON-formatted logging"
    - name: "KIE_SERVER_PROTOCOL"
      example: "http"
      description: "KIE execution server protocol (Used to set the org.kie.server.location system property)"
    - name: "KIE_SERVER_HOST"
      example: "localhost"
      description: "KIE execution server host (Used to set the org.kie.server.location system property)"
    - name: "EXECUTION_SERVER_ROUTE_NAME"
      example: "myapp-kieserver"
      description: "Route name that will be used to query its public address in the Kubernetes API to set KIE_SERVER_HOST. this env will only take effect if KIE_SERVER_HOST is empty or not set."
    - name: "EXECUTION_SERVER_USE_SECURE_ROUTE_NAME"
      example: "true"
      description: "If true, the https route will be used to set the KIE_SERVER_HOST, this env will only take effect if KIE_SERVER_HOST is empty or not set."
    - name: "KIE_SERVER_PORT"
      example: "8080"
      description: "KIE execution server port (Used to set the org.kie.server.location system property)"
    - name: "KIE_SERVER_TOKEN"
      example: "dasd373egds"
      description: "KIE server token for bearer authentication (Sets the org.kie.server.token system property)"
    - name: "KIE_SERVER_USER"
      example: "executionUser"
      description: "KIE execution server username for basic authentication (Sets the org.kie.server.user system property)"
    - name: "KIE_SERVER_PWD"
      example: "execution1!"
      description: "KIE execution server password for basic authentication (Sets the org.kie.server.pwd system property)"
    - name: "KIE_SERVER_ID"
      example: "business-server"
      description: "Business server identifier. Determines the template ID in Business Central or controller. If this parameter is left blank, it is set using the $HOSTNAME environment variable or a random value. (Sets the org.kie.server.id system property)."
    - name: "KIE_SERVER_DOMAIN"
      example: "other"
      description: "KIE execution server security domain (Sets the org.kie.server.domain system property)"
    - name: "KIE_SERVER_BYPASS_AUTH_USER"
      example: "false"
      description: "KIE execution server bypass auth user (Sets the org.kie.server.bypass.auth.user system property)"
    - name: "KIE_SERVER_CONTAINER_DEPLOYMENT"
      example: "containerId=groupId:artifactId:version|c2=g2:a2:v2'"
      description: "KIE Server Container deployment configuration in format: containerId=groupId:artifactId:version|c2=g2:a2:v2"
    - name: "KIE_SERVER_CONTAINER_DEPLOYMENT_OVERRIDE"
      example: "containerId=groupId:artifactId:version|c2=g2:a2:v2'"
      description: "Used to override application template KIE_SERVER_CONTAINER_DEPLOYMENT from .sti/environment. (optional)"
    - name: "KIE_SERVER_SYNC_DEPLOY"
      example: "false"
      description: "KIE execution server sync startup with containers; hold the startup until containers are loaded (Sets the org.kie.server.sync.deploy system property)"
    - name: "KIE_SERVER_CONTROLLER_PROTOCOL"
      example: "http"
      description: "KIE server controller protocol (Used to set the org.kie.server.controller system property)"
    - name: "KIE_SERVER_CONTROLLER_SERVICE"
      example: "buscentr-myapp"
      description: "KIE server controller service (Used to set the org.kie.server.controller system property if host and port aren't set)"
    - name: "KIE_SERVER_CONTROLLER_HOST"
      example: "my-app-controller.os.mycloud.com"
      description: "KIE server controller host (Used to set the org.kie.server.controller system property)"
    - name: "KIE_SERVER_CONTROLLER_PORT"
      example: "8080"
      description: "KIE server controller port (Used to set the org.kie.server.controller system property)"
    - name: "KIE_SERVER_CONTROLLER_TOKEN"
      example: "dasd373egds"
      description: "KIE server controller token for bearer authentication (Sets the org.kie.server.controller.token system property)"
    - name: "KIE_SERVER_CONTROLLER_USER"
      example: "controllerUser"
      description: "KIE server controller username for basic authentication (Sets the org.kie.server.controller.user system property)"
    - name: "KIE_SERVER_CONTROLLER_PWD"
      example: "controller1!"
      description: "KIE server controller password for basic authentication (Sets the org.kie.server.controller.pwd system property)"
    - name: "KIE_SERVER_PERSISTENCE_DIALECT"
      example: "org.hibernate.dialect.H2Dialect"
      description: "KIE execution server persistence dialect (Sets the org.kie.server.persistence.dialect system property)"
    - name: "KIE_SERVER_PERSISTENCE_DS"
      example: "java:/jboss/datasources/ExampleDS"
      description: "KIE execution server persistence datasource (Sets the org.kie.server.persistence.ds system property)"
    - name: "KIE_SERVER_PERSISTENCE_TM"
      example: "org.hibernate.engine.transaction.jta.platform.internal.JBossAppServerJtaPlatform"
      description: "KIE execution server persistence transaction manager (Sets the org.kie.server.persistence.tm system property)"
    - name: "KIE_SERVER_PERSISTENCE_SCHEMA"
      example: ""
      description: "KIE execution server persistence default schema (Sets the org.kie.server.persistence.schema system property)"
    - name: "KIE_SERVER_ROUTER_PROTOCOL"
      example: "http"
      description: "KIE server router protocol (Used to set the org.kie.server.router system property)"
    - name: "KIE_SERVER_ROUTER_SERVICE"
      example: "smartrouter-myapp"
      description: "KIE server router service (Used to set the org.kie.server.router system property if host and port aren't set)"
    - name: "KIE_SERVER_ROUTER_HOST"
      example: "my-app-router.os.mycloud.com"
      description: "KIE server router host (Used to set the org.kie.server.router system property)"
    - name: "KIE_SERVER_ROUTER_PORT"
      example: "9000"
      description: "KIE server router port (Used to set the org.kie.server.router system property)"
    - name: "KIE_EXECUTOR_RETRIES"
      example: "3"
      description: "KIE execution server default executor number of retries (Sets the org.kie.executor.retry.count system property)"
    - name: "KIE_MBEANS"
      example: "enabled"
      description: "KIE execution server mbeans enabled/disabled (Sets the kie.mbeans and kie.scanner.mbeans system properties)"
    - name: "JBPM_HT_CALLBACK_METHOD"
      example: "custom"
      description: "Method used to resolve the user roles when operating with human tasks (Sets the org.jbpm.ht.callback system property)"
    - name: "JBPM_HT_CALLBACK_CLASS"
      example: "com.example.MyUserTaskCallback"
      description: "Java class that resolves the user roles when operating with human tasks, when method is 'custom' (Sets the org.jbpm.ht.custom.callback system property)"
    - name: "JBPM_LOOP_LEVEL_DISABLED"
      value: "true"
      example: "true"
      description: "Disable the count of node instance iterations in process instance (Sets the jbpm.loop.level.disabled system property)"
    - name: "DROOLS_SERVER_FILTER_CLASSES"
      example: "true"
      description: "KIE execution server class filtering (Sets the org.drools.server.filter.classes system property)"
    - name: "AUTO_CONFIGURE_EJB_TIMER"
      example: "false"
      description: "Set if the EJB timer datasources should be auto configured, if false, user will need to define the default and the ejb datasources using the DATASOURCES or DB_SERVICE_PREFIX_MAPPING environment variables manually. Default is true"
    - name: "KIE_SERVER_MGMT_DISABLED"
      example: "true"
      description: "Turn the Execution server immutable, this setting prevents the controllers to execute tasks like add or remove kie containers."
    - name: "KIE_SERVER_STARTUP_STRATEGY"
      description: "When set to LocalContainersStartupStrategy, allows KIE server to start up and function with local config, even when a controller is configured and unavailable"
      example: "LocalContainersStartupStrategy"
    - name: "KIE_AUTH_LDAP_ALLOW_EMPTY_PASSWORDS"
      description: "Whether to allow empty passwords. Most LDAP servers treat empty passwords as anonymous login attempts. To reject empty passwords, set this to false."
      example: "false"
    - name: "KIE_AUTH_LDAP_BASE_CTX_DN"
      description: "The fixed DN of the top-level context to begin the user search."
      example: "ou=users,ou=example,ou=com"
    - name: "KIE_AUTH_LDAP_BASE_FILTER"
      description: "A search filter used to locate the context of the user to authenticate. The input username or userDN obtained from the login module callback is substituted into the filter anywhere a {0} expression is used. A common example for the search filter is (uid={0})."
      example: "(uid={0})"
    - name: "KIE_AUTH_LDAP_BIND_CREDENTIAL"
      description: "Used to store the credentials for the DN. "
      example: "Passw0rd"
    - name: "KIE_AUTH_LDAP_BIND_DN"
      description: "The DN used to bind against the LDAP server for the user and roles queries. This DN needs read and search permissions on the baseCtxDN and rolesCtxDN values."
      example: "uid=admin,ou=users,ou=exmample,ou=com"
    - name: "KIE_AUTH_LDAP_DEFAULT_ROLE"
      description: "A role included for all authenticated users"
      example: "guest"
    - name: "KIE_AUTH_LDAP_DISTINGUISHED_NAME_ATTRIBUTE"
      description: "The name of the attribute in the user entry that contains the DN of the user. This may be necessary if the DN of the user itself contains special characters, backslash for example, that prevent correct user mapping. If the attribute does not exist, the entry’s DN is used."
      example: "distinguishedName"
    - name: "KIE_AUTH_LDAP_JAAS_SECURITY_DOMAIN"
      description: "he JMX ObjectName of the JaasSecurityDomain used to decrypt the password."
    - name: "KIE_AUTH_LDAP_PARSE_ROLE_NAME_FROM_DN"
      description: "A flag indicating if the DN returned by a query contains the roleNameAttributeID. If set to true, the DN is checked for the roleNameAttributeID. If set to false, the DN is not checked for the roleNameAttributeID. This flag can improve the performance of LDAP queries."
      example: "false"
    - name: "KIE_AUTH_LDAP_PARSE_USERNAME"
      description: "A flag indicating if the DN is to be parsed for the username. If set to true, the DN is parsed for the username. If set to false the DN is not parsed for the username. This option is used together with usernameBeginString and usernameEndString."
      example: "true"
    - name: "KIE_AUTH_LDAP_REFERRAL_USER_ATTRIBUTE_ID_TO_CHECK"
      description: "If you are not using referrals, this option can be ignored. When using referrals, this option denotes the attribute name which contains users defined for a certain role, for example member, if the role object is inside the referral. Users are checked against the content of this attribute name. If this option is not set, the check will always fail, so role objects cannot be stored in a referral tree."
    - name: "KIE_AUTH_LDAP_ROLE_ATTRIBUTE_ID"
      description: "Name of the attribute containing the user roles."
      example: "memberOf"
    - name: "KIE_AUTH_LDAP_ROLE_ATTRIBUTE_IS_DN"
      description: "Whether or not the roleAttributeID contains the fully-qualified DN of a role object. If false, the role name is taken from the value of the roleNameAttributeId attribute of the context name. Certain directory schemas, such as Microsoft Active Directory, require this attribute to be set to true."
      example: "true"
    - name: "KIE_AUTH_LDAP_ROLE_FILTER"
      description: "A search filter used to locate the roles associated with the authenticated user. The input username or userDN obtained from the login module callback is substituted into the filter anywhere a {0} expression is used. The authenticated userDN is substituted into the filter anywhere a {1} is used. An example search filter that matches on the input username is (member={0}). An alternative that matches on the authenticated userDN is (member={1})."
      example: "(memberOf={1})"
    - name: "KIE_AUTH_LDAP_ROLE_NAME_ATTRIBUTE_ID"
      description: "Name of the attribute within the roleCtxDN context which contains the role name. If the roleAttributeIsDN property is set to true, this property is used to find the role object’s name attribute."
      example: "name"
    - name: "KIE_AUTH_LDAP_ROLE_RECURSION"
      description: "The numbers of levels of recursion the role search will go below a matching context. Disable recursion by setting this to 0."
      example: "1"
    - name: "KIE_AUTH_LDAP_ROLES_CTX_DN"
      description: "The fixed DN of the context to search for user roles. This is not the DN where the actual roles are, but the DN where the objects containing the user roles are. For example, in a Microsoft Active Directory server, this is the DN where the user account is."
      example: "ou=groups,ou=example,ou=com"
    - name: "KIE_AUTH_LDAP_SEARCH_SCOPE"
      description: "The search scope to use."
      example: "SUBTREE_SCOPE"
    - name: "KIE_AUTH_LDAP_SEARCH_TIME_LIMIT"
      description: "The timeout in milliseconds for user or role searches."
      example: "10000"
    - name: "KIE_AUTH_LDAP_URL"
      description: "LDAP Endpoint to connect to"
      example: "ldap://myldap.example.com"
    - name: "KIE_AUTH_LDAP_USERNAME_BEGIN_STRING"
      description: "Defines the String which is to be removed from the start of the DN to reveal the username. This option is used together with usernameEndString and only taken into account if parseUsername is set to true."
    - name: "KIE_AUTH_LDAP_USERNAME_END_STRING"
      description: "Defines the String which is to be removed from the end of the DN to reveal the username. This option is used together with usernameBeginString and only taken into account if parseUsername is set to true."
    - name: "KIE_AUTH_LDAP_BASE_CTX_DN"
      description: "The fixed DN of the top-level context to begin the user search."
      example: "ou=users,ou=example,ou=com"
    - name: "KIE_AUTH_LDAP_BASE_FILTER"
      description: "A search filter used to locate the context of the user to authenticate. The input username or userDN obtained from the login module callback is substituted into the filter anywhere a {0} expression is used. A common example for the search filter is (uid={0})."
      example: "(uid={0})"
    - name: "KIE_AUTH_LDAP_BIND_CREDENTIAL"
      description: "Used to store the credentials for the DN. "
      example: "Passw0rd"
    - name: "KIE_AUTH_LDAP_BIND_DN"
      description: "The DN used to bind against the LDAP server for the user and roles queries. This DN needs read and search permissions on the baseCtxDN and rolesCtxDN values."
      example: "uid=admin,ou=users,ou=exmample,ou=com"
    - name: "KIE_AUTH_LDAP_DEFAULT_ROLE"
      description: "A role included for all authenticated users"
      example: "guest"
    - name: "KIE_AUTH_LDAP_DISTINGUISHED_NAME_ATTRIBUTE"
      description: "The name of the attribute in the user entry that contains the DN of the user. This may be necessary if the DN of the user itself contains special characters, backslash for example, that prevent correct user mapping. If the attribute does not exist, the entry’s DN is used."
      example: "distinguishedName"
    - name: "KIE_AUTH_LDAP_JAAS_SECURITY_DOMAIN"
      description: "he JMX ObjectName of the JaasSecurityDomain used to decrypt the password."
    - name: "KIE_AUTH_LDAP_PARSE_ROLE_NAME_FROM_DN"
      description: "A flag indicating if the DN returned by a query contains the roleNameAttributeID. If set to true, the DN is checked for the roleNameAttributeID. If set to false, the DN is not checked for the roleNameAttributeID. This flag can improve the performance of LDAP queries."
      example: "false"
    - name: "KIE_AUTH_LDAP_PARSE_USERNAME"
      description: "A flag indicating if the DN is to be parsed for the username. If set to true, the DN is parsed for the username. If set to false the DN is not parsed for the username. This option is used together with usernameBeginString and usernameEndString."
      example: "true"
    - name: "KIE_AUTH_LDAP_REFERRAL_USER_ATTRIBUTE_ID_TO_CHECK"
      description: "If you are not using referrals, this option can be ignored. When using referrals, this option denotes the attribute name which contains users defined for a certain role, for example member, if the role object is inside the referral. Users are checked against the content of this attribute name. If this option is not set, the check will always fail, so role objects cannot be stored in a referral tree."
    - name: "KIE_AUTH_LDAP_ROLE_ATTRIBUTE_ID"
      description: "Name of the attribute containing the user roles."
      example: "memberOf"
    - name: "KIE_AUTH_LDAP_ROLE_ATTRIBUTE_IS_DN"
      description: "Whether or not the roleAttributeID contains the fully-qualified DN of a role object. If false, the role name is taken from the value of the roleNameAttributeId attribute of the context name. Certain directory schemas, such as Microsoft Active Directory, require this attribute to be set to true."
      example: "true"
    - name: "KIE_AUTH_LDAP_ROLE_FILTER"
      description: "A search filter used to locate the roles associated with the authenticated user. The input username or userDN obtained from the login module callback is substituted into the filter anywhere a {0} expression is used. The authenticated userDN is substituted into the filter anywhere a {1} is used. An example search filter that matches on the input username is (member={0}). An alternative that matches on the authenticated userDN is (member={1})."
      example: "(memberOf={1})"
    - name: "KIE_AUTH_LDAP_ROLE_NAME_ATTRIBUTE_ID"
      description: "Name of the attribute within the roleCtxDN context which contains the role name. If the roleAttributeIsDN property is set to true, this property is used to find the role object’s name attribute."
      example: "name"
    - name: "KIE_AUTH_LDAP_ROLE_RECURSION"
      description: "The numbers of levels of recursion the role search will go below a matching context. Disable recursion by setting this to 0."
      example: "1"
    - name: "KIE_AUTH_LDAP_ROLES_CTX_DN"
      description: "The fixed DN of the context to search for user roles. This is not the DN where the actual roles are, but the DN where the objects containing the user roles are. For example, in a Microsoft Active Directory server, this is the DN where the user account is."
      example: "ou=groups,ou=example,ou=com"
    - name: "KIE_AUTH_LDAP_SEARCH_SCOPE"
      description: "The search scope to use."
      example: "SUBTREE_SCOPE"
    - name: "KIE_AUTH_LDAP_SEARCH_TIME_LIMIT"
      description: "The timeout in milliseconds for user or role searches."
      example: "10000"
    - name: "KIE_AUTH_LDAP_URL"
      description: "LDAP Endpoint to connect to"
      example: "ldap://myldap.example.com"
    - name: "KIE_AUTH_LDAP_USERNAME_BEGIN_STRING"
      description: "Defines the String which is to be removed from the start of the DN to reveal the username. This option is used together with usernameEndString and only taken into account if parseUsername is set to true."
    - name: "KIE_AUTH_LDAP_USERNAME_END_STRING"
      description: "Defines the String which is to be removed from the end of the DN to reveal the username. This option is used together with usernameBeginString and only taken into account if parseUsername is set to true."      
ports:
    - value: 8080
    - value: 8443
    - value: 8778
modules:
      repositories:
          - git:
              url: https://github.com/jboss-openshift/cct_module.git
              ref: sprint-18
          - git:
              url: https://github.com/jboss-container-images/jboss-kie-modules.git
              ref: 7.0.x
      install:
          - name: dynamic-resources
          - name: s2i-common
          - name: java-alternatives
          - name: os-eap-s2i
          - name: os-java-jolokia
          - name: jolokia
          - name: os-eap7-openshift
          - name: os-eap71-openshift
          - name: os-eap7-modules
          - name: os-eap71-modules
          - name: os-eap7-ping
          - name: os-eap-activemq-rar
          - name: os-java-run
          - name: os-eap-launch
          - name: os-eap7-launch
          - name: os-eap-logging
          - name: os-eap-probes
          - name: jboss-maven
          - name: os-eap-db-drivers
          - name: os-eap-sso
          - name: os-eap70-sso
          - name: os-java-hawkular
          - name: os-eap70-hawkular
          - name: os-eap-hawkular
          - name: os-eap-deployment-scanner
          - name: os-eap-extensions
          - name: openshift-layer
          - name: openshift-passwd
          - name: os-logging
          - name: os.bpmsuite.common
          - name: os.bpmsuite.executionserver
packages:
      repositories:
          - jboss-os
          - jboss-rhscl
      install:
          - rh-mongodb32-mongo-java-driver
          - postgresql-jdbc
          - mysql-connector-java
          - hostname
          - python-requests
          - python-enum34
          - PyYAML
artifacts:
    - path: javax.json-1.0.4.jar
      md5: 569870f975deeeb6691fcb9bc02a9555
    - path: jboss-logmanager-ext-1.0.0.Alpha5-redhat-1.jar
      md5: 3c84f54725ea5657913cf6d1610798b0
    - path: oauth-20100527.jar
      md5: 91c7c70579f95b7ddee95b2143a49b41
    - path: activemq-rar-5.11.0.redhat-630329.rar
      md5: 76ed338d86bb3dbba2d4bd48daff7dbb
    - path: rh-sso-7.1.0-eap7-adapter.zip
      description: "Artifact is available on Customer Portal: https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=44831&product=core.service.rhsso&version=7.0&downloadType=distributions"
      sha256: 3d12e310a9b15f79cd46255819a0198acd569921797204c0936772e71dec8d23
    - path: rh-sso-7.1.2-saml-eap7-adapter.zip
      description: "Artifact is available on Customer Portal: https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=44801&product=core.service.rhsso&version=7.0&downloadType=distributions"
      sha256: f48b2b15ccfd17589f5a424c689697b8cfefbe95a553ba589c14eaba4978a823
    - url: slf4j-simple-1.7.22.redhat-1.jar
      md5: 51c319582c16a07c21e41737e45cb03a
run:
      user: 185
      cmd:
          - "/opt/eap/bin/openshift-launch.sh"
osbs:
      repository:
          name: containers/rhpam-7-kieserver-openshift
          branch: jb-rhpam-7.0-kieserver-openshift-rhel-7