Chapter 1. Customizing sample software templates Learn how to customize ready-to-use software templates for your on-prem environment. As a cluster administrators, you have full control over modifying metadata and specifications to align with your deployment needs. Prerequisites Before making changes, ensure that following: You have used the forked repository URL from tssc-sample-templates during RHTAP installation. You have forked and cloned the tssc-sample-jenkins pipeline template. You forked repository is up to date and synced with the upstream repository. Procedure Clone your forked tssc-sample-templates repository, and then open it in your preferred text editor, such as Visual Studio Code. Locate the properties file within your project directory. This file stores the default values that you can customize. Open it for editing and update the following key-value pairs according to your environment. Key Description export GITHUB_DEFAULT_HOST Set this to your on-prem GitHub host fully qualified domain name. That is, the URL without the HTTP protocol and without the .git extension. For example github-github.apps.cluster-ljg9z.sandbox219.opentlc.com. Default is github.com . export GITLAB_DEFAULT_HOST Set this to your on-prem GitLab host host fully qualified domain name. That is, the URL without the HTTP protocol and without the .git extension. For example gitlab-gitlab.apps.cluster-ljg9z.sandbox219.opentlc.com. Default is gitlab.com . export QUAY_DEFAULT_HOST The default Quay URL corresponds to your specific on-prem image registry URL without the HTTP protocol. For example, quay-tv2pb.apps.cluster-tv2pb.sandbox1194.opentlc.com. The default quay host is quay.io . export DEFAULT_DEPLOYMENT_NAMESPACE_PREFIX The namespace prefix for deployments within RHTAP. Default is rhtap-app . Note Update this if you have modified the default trusted-application-pipeline: namespace during the RHTAP installation process. export PIPELINE_REPO_URL The URL of the forked pipeline repository. For example, https://github.com/redhat-appstudio/tssc-sample-pipelines . export PIPELINE_REPO_BRANCH The branch of the forked pipeline repository to which you want to point. For example, main . export GITHUB_DEFAULT_ORG The name of your GitHub organization that you want to set as default. export QUAY_DEFAULT_ORG The name of your Quay organization that you want to set as default. Figure 1.1. The properties file Run the generate.sh script in your terminal. This action adjusts the software templates, replacing default host values with your specified inputs. ./generate.sh Figure 1.2. The generate.sh script For Jenkins only: To customize your Jenkins library, navigate to skeleton > ci > gitops-template > jenkins , and open Jenkinsfile . Replace the remote URL with the URL of your forked repository. For example, remote: 'https://github.com/<username>/tssc-sample-jenkins.git'. Additionally, if your Jenkins is on a non-local OpenShift instance, and your Rekor and TUF services are on different clusters, update the REKOR_HOST and TUF_MIRROR environment variables. You can configure these variables in the env.sh file within the component repository or set them as environment variables or secrets in Jenkins . This configuration ensures that your external Jenkins server can communicate with Rekor and TUF installed with RHTAP. Without this, RHTAP might not sign container images correctly in the Jenkins pipeline. To update the REKOR_HOST and TUF_MIRROR variables: Open the env.sh file via skeleton > ci > gitops-template > jenkins > rhtap . The second env.sh file is located at skeleton > ci > source-repo > jenkins > rhtap . Pick the one that suits your needs or update both. In env.sh , review the default values for REKOR_HOST and TUF_MIRROR : Replace .svc with your OpenShift cluster URL. The .svc domain refers to the local cluster, and internal services can access other services with .svc in their routes, but an external Jenkins cannot. The correct routes of the Rekor and TUF services are printed as part of the installation process of RHTAP. If these data aren't available to you, run this command in your CLI and select the Rekor and TUF routes in the output: An example of a Rekor server URL: http://rekor-server.rhtap-tas.apps.rosa.j6ufg-t3htv-ts6.z797.p3.openshiftapps.com. Note To configure environment variables or secrets in Jenkins see, Adding secrets to Jenkins for secure integration with external tools . By default, RHTAP uses dynamically loaded Jenkins libraries. If you need to configure RHTAP to use built-in Jenkins libraries instead of dynamic loading, you must modify the Jenkins provisioning setup. This change can improve traceability and Red Hat Enterprise Contract (Enterprise Contract) attestations. For detailed instructions, see Configuring RHTAP to use built-in Jenkins libraries . For RHACS only: To enable RHACS scans, set the export DISABLE_ACS to false in the env.sh file. Commit and push the changes to your repository. This automatically updates the template in RHDH. Alternatively, you can import and refresh a single or all customized templates directly in RHDH. Go to your forked sample template repository on your Git provider. For a single template, from the templates directory, select template.yaml . Copy its URL from the browser address bar. For example, https://github.com/<username>/tssc-sample-templates/blob/main/templates/devfile-sample-code-with-quarkus-dance/template.yaml. Otherwise, for all the templates, select all.yaml and copy its URL from the browser address bar. For example, https://github.com/<username>/tssc-sample-templates/blob/main/all.yaml. Switch back to RHDH platform. Select Create > Register Existing Component . In the Select URL field, paste the appropriate URL that you copied in Step 4b. Select Analyze and then select Import to update the templates in RHDH. Verification Consider creating an application to explore the impact of your template customization. Additional resources To customize pipelines, see Customizing sample pipeline templates

Commands:
./generate.sh
REKOR_HOST=http://rekor-server.rhtap-tas.svc TUF_MIRROR=http://tuf.rhtap-tas.svc
oc get routes -n rhtap-tas