[SDC] Change default access mode for cert PVC
[oom.git] / kubernetes / aaf / charts / aaf-sshsm / charts / aaf-sshsm-distcenter / templates / job.yaml
1 {{/*
2 # Copyright 2018 Intel Corporation, Inc
3 #
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
7 #
8 #       http://www.apache.org/licenses/LICENSE-2.0
9 #
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15 */}}
16
17 {{- if .Values.global.distcenter.enabled -}}
18
19 apiVersion: batch/v1
20 kind: Job
21 metadata:
22   name: {{ include "common.fullname" . }}
23   namespace: {{ include "common.namespace" . }}
24   labels:
25     app: {{ include "common.name" . }}
26     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
27     release: {{ .Release.Name }}
28     heritage: {{ .Release.Service }}
29 spec:
30   replicas: {{ .Values.replicaCount }}
31   serviceName:
32   template:
33     metadata:
34       labels:
35         app: {{ include "common.name" . }}
36         release: {{ .Release.Name }}
37     spec:
38       restartPolicy: Never
39       initContainers:
40 {{- if .Values.global.tpm.enabled }}
41       - image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
42         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
43         name: {{ include "common.name" . }}-readiness
44         command:
45         - /root/job_complete.py
46         args:
47         - -j
48         - "{{ .Release.Name }}-aaf-sshsm-abrmd-init"
49         env:
50         - name: NAMESPACE
51           valueFrom:
52             fieldRef:
53               apiVersion: v1
54               fieldPath: metadata.namespace
55 {{ else }}
56       - image: "{{ include "common.repository" . }}/{{ .Values.image }}"
57         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
58         name: {{ include "common.name" . }}-gen-passphrase
59         command: ["sh", "-c", "/usr/bin/openssl rand -base64 12 >/distcenter/data/passphrase"]
60         env:
61         - name: NAMESPACE
62           valueFrom:
63             fieldRef:
64               apiVersion: v1
65               fieldPath: metadata.namespace
66         volumeMounts:
67         - mountPath: /etc/localtime
68           name: localtime
69           readOnly: true
70         - name: {{ include "common.fullname" . }}-data
71           mountPath: /distcenter/data
72 {{- end }}
73       containers:
74       - image: "{{ include "common.repository" . }}/{{ .Values.image }}"
75         name: {{ include "common.name" . }}
76         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
77         command: ["/entrypoint.sh"]
78         workingDir: /distcenter
79         volumeMounts:
80         - mountPath: /etc/localtime
81           name: localtime
82           readOnly: true
83         - name: {{ include "common.fullname" . }}-data
84           mountPath: /distcenter/data
85         resources:
86 {{ toYaml .Values.resources | indent 10 }}
87         {{- if .Values.nodeSelector }}
88         nodeSelector:
89 {{ toYaml .Values.nodeSelector | indent 8 }}
90         {{- end -}}
91         {{- if .Values.affinity }}
92         affinity:
93 {{ toYaml .Values.affinity | indent 8 }}
94         {{- end }}
95       volumes:
96       - name: localtime
97         hostPath:
98           path: /etc/localtime
99       - name: {{ include "common.fullname" . }}-data
100         persistentVolumeClaim:
101           claimName: {{ .Release.Name }}-aaf-sshsm-data
102       imagePullSecrets:
103       - name: "{{ include "common.namespace" . }}-docker-registry-key"
104
105 {{- end -}}