2 # Copyright 2018 Intel Corporation, Inc
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
8 # http://www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
17 {{- if and .Values.global.tpm.enabled .Values.global.abrmd.enabled -}}
21 metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
25 metadata: {{- include "common.templateMetadata" . | nindent 6 }}
29 - name: {{ include "common.name" . }}-job
30 image: "{{ include "common.repository" . }}/{{ .Values.image }}"
31 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
32 command: ["/abrmd/bin/initialize_tpm.sh"]
33 workingDir: /abrmd/bin
40 fieldPath: spec.nodeName
44 - name: {{ include "common.fullname" . }}-data
45 mountPath: /abrmd/data
46 - name: {{ include "common.fullname" . }}-tpm-device
48 - name: {{ include "common.fullname" . }}-tpmconfig
49 mountPath: "/abrmd/cred/"
51 resources: {{ include "common.resources" . | nindent 10 }}
52 {{- if .Values.nodeSelector }}
53 nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
54 {{- if .Values.global.tpm.enabled }}
55 {{ (printf "%s: \"%s\"" .Values.global.tpm.nodeLabel .Values.global.tpm.nodeLabelValue) }}
58 {{- if .Values.affinity }}
59 affinity: {{ toYaml .Values.affinity | nindent 8 }}
62 - name: {{ include "common.fullname" . }}-data
63 persistentVolumeClaim:
64 claimName: {{ include "common.release" . }}-aaf-sshsm-data
65 - name: {{ include "common.fullname" . }}-tpm-device
68 - name: {{ include "common.fullname" . }}-tpmconfig
70 secretName: {{ include "common.release" . }}-aaf-sshsm
72 - name: "{{ include "common.namespace" . }}-docker-registry-key"