1 # Copyright © 2018 Amdocs, AT&T
2 # Modifications Copyright © 2018 Bell Canada
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
8 # http://www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
16 apiVersion: extensions/v1beta1
19 name: {{ include "common.fullname" . }}
20 namespace: {{ include "common.namespace" . }}
22 app: {{ include "common.name" . }}
23 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
24 release: {{ .Release.Name }}
25 heritage: {{ .Release.Service }}
27 replicas: {{ .Values.replicaCount }}
31 app: {{ include "common.name" . }}
32 release: {{ .Release.Name }}
45 fieldPath: metadata.namespace
46 image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
47 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
48 name: {{ include "common.name" . }}-readiness
49 {{ if .Values.global.installSidecarSecurity }}
50 - name: {{ .Values.global.tproxyConfig.name }}
51 image: "{{ include "common.repository" . }}/{{ .Values.global.tproxyConfig.image }}"
52 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
57 - name: {{ include "common.name" . }}
58 image: "{{ include "common.repository" . }}/{{ .Values.image }}"
59 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
61 - containerPort: {{ .Values.service.internalPort }}
62 # disable liveness probe when breakpoints set in debugger
63 # so K8s doesn't restart unresponsive container
64 {{ if .Values.liveness.enabled }}
67 port: {{ .Values.service.internalPort }}
68 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
69 periodSeconds: {{ .Values.liveness.periodSeconds }}
73 port: {{ .Values.service.internalPort }}
74 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
75 periodSeconds: {{ .Values.readiness.periodSeconds }}
78 value: "/opt/app/champ-service/appconfig"
81 - name: KEY_STORE_PASSWORD
84 name: {{ template "common.fullname" . }}-pass
85 key: KEY_STORE_PASSWORD
86 - name: KEY_MANAGER_PASSWORD
89 name: {{ template "common.fullname" . }}-pass
90 key: KEY_MANAGER_PASSWORD
92 value: "/opt/app/champ-service/dynamic/conf"
94 - mountPath: /etc/localtime
97 - mountPath: /opt/app/champ-service/appconfig/champ-api.properties
98 name: {{ include "common.fullname" . }}-config
99 subPath: champ-api.properties
100 - mountPath: /opt/app/champ-service/appconfig/auth
101 name: {{ include "common.fullname" . }}-secrets
102 - mountPath: /opt/app/champ-service/dynamic/conf/champ-beans.xml
103 name: {{ include "common.fullname" . }}-dynamic-config
104 subPath: champ-beans.xml
105 - mountPath: /opt/app/champ-service/bundleconfig/etc/logback.xml
106 name: {{ include "common.fullname" . }}-logback-config
108 - mountPath: /var/log/onap
109 name: {{ include "common.fullname" . }}-logs
111 {{ include "common.resources" . | indent 12 }}
112 {{- if .Values.nodeSelector }}
114 {{ toYaml .Values.nodeSelector | indent 10 }}
116 {{- if .Values.affinity }}
118 {{ toYaml .Values.affinity | indent 10 }}
121 # side car containers
122 - name: filebeat-onap
123 image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
124 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
126 - mountPath: /usr/share/filebeat/filebeat.yml
127 subPath: filebeat.yml
129 - mountPath: /var/log/onap
130 name: {{ include "common.fullname" . }}-logs
131 - mountPath: /usr/share/filebeat/data
133 {{ if .Values.global.installSidecarSecurity }}
134 - name: {{ .Values.global.rproxy.name }}
135 image: "{{ include "common.repository" . }}/{{ .Values.global.rproxy.image }}"
136 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
139 value: "/opt/app/rproxy/config"
140 - name: KEY_STORE_PASSWORD
141 value: {{ .Values.config.keyStorePassword }}
142 - name: spring_profiles_active
143 value: {{ .Values.global.rproxy.activeSpringProfiles }}
145 - name: {{ include "common.fullname" . }}-rproxy-config
146 mountPath: /opt/app/rproxy/config/forward-proxy.properties
147 subPath: forward-proxy.properties
148 - name: {{ include "common.fullname" . }}-rproxy-config
149 mountPath: /opt/app/rproxy/config/primary-service.properties
150 subPath: primary-service.properties
151 - name: {{ include "common.fullname" . }}-rproxy-config
152 mountPath: /opt/app/rproxy/config/reverse-proxy.properties
153 subPath: reverse-proxy.properties
154 - name: {{ include "common.fullname" . }}-rproxy-config
155 mountPath: /opt/app/rproxy/config/cadi.properties
156 subPath: cadi.properties
157 - name: {{ include "common.fullname" . }}-rproxy-log-config
158 mountPath: /opt/app/rproxy/config/logback-spring.xml
159 subPath: logback-spring.xml
160 - name: {{ include "common.fullname" . }}-rproxy-auth-certs
161 mountPath: /opt/app/rproxy/config/auth/tomcat_keystore
162 subPath: tomcat_keystore
163 - name: {{ include "common.fullname" . }}-rproxy-auth-certs
164 mountPath: /opt/app/rproxy/config/auth/client-cert.p12
165 subPath: client-cert.p12
166 - name: {{ include "common.fullname" . }}-rproxy-auth-certs
167 mountPath: /opt/app/rproxy/config/auth/org.onap.aai.p12
168 subPath: org.onap.aai.p12
169 - name: {{ include "common.fullname" . }}-rproxy-auth-config
170 mountPath: /opt/app/rproxy/config/auth/uri-authorization.json
171 subPath: uri-authorization.json
172 - name: {{ include "common.fullname" . }}-rproxy-security-config
173 mountPath: /opt/app/rproxy/config/security/keyfile
177 - containerPort: {{ .Values.global.rproxy.port }}
179 - name: {{ .Values.global.fproxy.name }}
180 image: "{{ include "common.repository" . }}/{{ .Values.global.fproxy.image }}"
181 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
184 value: "/opt/app/fproxy/config"
185 - name: KEY_STORE_PASSWORD
186 value: {{ .Values.config.keyStorePassword }}
187 - name: TRUST_STORE_PASSWORD
188 value: {{ .Values.config.trustStorePassword }}
189 - name: spring_profiles_active
190 value: {{ .Values.global.fproxy.activeSpringProfiles }}
192 - name: {{ include "common.fullname" . }}-fproxy-config
193 mountPath: /opt/app/fproxy/config/fproxy.properties
194 subPath: fproxy.properties
195 - name: {{ include "common.fullname" . }}-fproxy-log-config
196 mountPath: /opt/app/fproxy/config/logback-spring.xml
197 subPath: logback-spring.xml
198 - name: {{ include "common.fullname" . }}-fproxy-auth-certs
199 mountPath: /opt/app/fproxy/config/auth/tomcat_keystore
200 subPath: tomcat_keystore
201 - name: {{ include "common.fullname" . }}-fproxy-auth-certs
202 mountPath: /opt/app/fproxy/config/auth/fproxy_truststore
203 subPath: fproxy_truststore
204 - name: {{ include "common.fullname" . }}-fproxy-auth-certs
205 mountPath: /opt/app/fproxy/config/auth/client-cert.p12
206 subPath: client-cert.p12
208 - containerPort: {{ .Values.global.fproxy.port }}
215 - name: {{ include "common.fullname" . }}-config
217 name: {{ include "common.fullname" . }}
219 - key: champ-api.properties
220 path: champ-api.properties
221 - name: {{ include "common.fullname" . }}-secrets
223 secretName: {{ include "common.fullname" . }}-champ
224 - name: {{ include "common.fullname" . }}-dynamic-config
226 name: {{ include "common.fullname" . }}-dynamic
228 - key: champ-beans.xml
229 path: champ-beans.xml
230 - name: {{ include "common.fullname" . }}-logs
232 - name: {{ include "common.fullname" . }}-logback-config
234 name: {{ include "common.fullname" . }}-log-configmap
238 - name: filebeat-conf
243 {{ if .Values.global.installSidecarSecurity }}
244 - name: {{ include "common.fullname" . }}-rproxy-config
246 name: {{ include "common.fullname" . }}-rproxy-config
247 - name: {{ include "common.fullname" . }}-rproxy-log-config
249 name: {{ include "common.fullname" . }}-rproxy-log-config
250 - name: {{ include "common.fullname" . }}-rproxy-auth-config
252 secretName: {{ include "common.fullname" . }}-rproxy-auth-config
253 - name: {{ include "common.fullname" . }}-rproxy-auth-certs
255 secretName: aai-rproxy-auth-certs
256 - name: {{ include "common.fullname" . }}-rproxy-security-config
258 secretName: aai-rproxy-security-config
259 - name: {{ include "common.fullname" . }}-fproxy-config
261 name: {{ include "common.fullname" . }}-fproxy-config
262 - name: {{ include "common.fullname" . }}-fproxy-log-config
264 name: {{ include "common.fullname" . }}-fproxy-log-config
265 - name: {{ include "common.fullname" . }}-fproxy-auth-certs
267 secretName: aai-fproxy-auth-certs
270 - name: "{{ include "common.namespace" . }}-docker-registry-key"