How to create project template on OpenShift

An OpenShift project template is a predefined set of configurations and resources that can be automatically applied when a new project is created in OpenShift. It allows administrators to enforce policies, quotas, and other settings for projects based on organizational or team requirements. When users request a new project using oc new-project or the OpenShift Web Console, OpenShift applies the default project template to create the project and associated resources. This ensures consistency and compliance across all projects. Components of a Project Template A project template can include a variety of Kubernetes and OpenShift resources, such as: ResourceQuota: Limits the amount of compute and storage resources a project can consume. LimitRange: Defines default and maximum resource requests and limits for containers in the project. NetworkPolicy: Controls network access to pods within the project. RoleBinding: Assigns specific roles to users or groups in the project. ConfigMap/Secrets: Pre-configures settings or provides default data for applications. Default Project Template The default project template is configured in the projects.config.openshift.io/cluster resource and is applied to every new project unless overridden by other mechanisms. Create a new template manifest using command: oc adm create-bootstrap-project-template -o yaml [root@lb ~]# cat template.yaml apiVersion: template.openshift.io/v1 kind: Template metadata: creationTimestamp: null name: project-request objects: - apiVersion: project.openshift.io/v1 kind: Project metadata: annotations: openshift.io/description: ${PROJECT_DESCRIPTION} openshift.io/display-name: ${PROJECT_DISPLAYNAME} openshift.io/requester: ${PROJECT_REQUESTING_USER} creationTimestamp: null name: ${PROJECT_NAME} spec: {} status: {} - apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: creationTimestamp: null name: admin namespace: ${PROJECT_NAME} roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: admin subjects: - apiGroup: rbac.authorization.k8s.io kind: User name: ${PROJECT_ADMIN_USER} - apiVersion: v1 kind: ResourceQuota metadata: creationTimestamp: null name: ${PROJECT_NAME}-quota spec: hard: cpu: "1" memory: 1G persistentvolumeclaims: "10" pods: "2" replicationcontrollers: "2" resourcequotas: "1" secrets: "5" services: "3" - apiVersion: v1 kind: LimitRange metadata: name: ${PROJECT_NAME}-mem-limit namespace: default spec: limits: - default: memory: 512Mi defaultRequest: memory: 256Mi type: Container status: {} parameters: - name: PROJECT_NAME - name: PROJECT_DISPLAYNAME - name: PROJECT_DESCRIPTION - name: PROJECT_ADMIN_USER - name: PROJECT_REQUESTING_USER oc apply -f template.yaml -n openshift-config You can view and configure the default template using: oc edit projects.config.openshift.io/cluster apiVersion: config.openshift.io/v1 kind: Project metadata: annotations: include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" release.openshift.io/create-only: "true" creationTimestamp: "2025-01-15T08:05:55Z" generation: 4 name: cluster ownerReferences: - apiVersion: config.openshift.io/v1 kind: ClusterVersion name: version uid: b34e98b6-cf02-4a98-b054-5e1152d73cd5 resourceVersion: "354114" uid: 0c1a9b1a-972f-4278-bdd8-f39e94bdc558 spec: projectRequestTemplate: name: project-request Check the pods are restarted to apply the new changes: oc get po -n openshift-apiserver openshift how to create openshift catalog template & deploy an app? openshift commons red hat openshift openshift template openshift tutorial openshift templates templates in openshift openshift container platform openshift application deployment what is openshift template openshift for beginners create application into openshift using container registry openshift lecture openshift explained learn openshift #openshift #redhatopenshift