1 # Copyright © 2018 Amdocs, AT&T
2 # Modifications Copyright © 2018 Bell Canada
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
8 # http://www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
16 apiVersion: extensions/v1beta1
19 name: {{ include "common.fullname" . }}
20 namespace: {{ include "common.namespace" . }}
22 app: {{ include "common.name" . }}
23 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
24 release: {{ .Release.Name }}
25 heritage: {{ .Release.Service }}
27 replicas: {{ .Values.replicaCount }}
31 app: {{ include "common.name" . }}
32 release: {{ .Release.Name }}
39 {{- if .Values.global.cassandra.localCluster }}
49 fieldPath: metadata.namespace
50 image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
51 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
52 name: {{ include "common.name" . }}-readiness
53 {{ if .Values.global.installSidecarSecurity }}
54 - name: {{ .Values.global.tproxyConfig.name }}
55 image: "{{ include "common.repository" . }}/{{ .Values.global.tproxyConfig.image }}"
56 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
61 - name: {{ include "common.name" . }}
62 image: "{{ include "common.repository" . }}/{{ .Values.image }}"
63 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
65 - containerPort: {{ .Values.service.internalPort }}
66 # disable liveness probe when breakpoints set in debugger
67 # so K8s doesn't restart unresponsive container
68 {{ if .Values.liveness.enabled }}
71 port: {{ .Values.service.internalPort }}
72 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
73 periodSeconds: {{ .Values.liveness.periodSeconds }}
77 port: {{ .Values.service.internalPort }}
78 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
79 periodSeconds: {{ .Values.readiness.periodSeconds }}
82 value: "/opt/app/champ-service/appconfig"
85 - name: KEY_STORE_PASSWORD
88 name: {{ template "common.fullname" . }}-pass
89 key: KEY_STORE_PASSWORD
90 - name: KEY_MANAGER_PASSWORD
93 name: {{ template "common.fullname" . }}-pass
94 key: KEY_MANAGER_PASSWORD
96 value: "/opt/app/champ-service/dynamic/conf"
98 - mountPath: /etc/localtime
101 - mountPath: /opt/app/champ-service/appconfig/champ-api.properties
102 name: {{ include "common.fullname" . }}-config
103 subPath: champ-api.properties
104 - mountPath: /opt/app/champ-service/appconfig/auth
105 name: {{ include "common.fullname" . }}-secrets
106 - mountPath: /opt/app/champ-service/dynamic/conf/champ-beans.xml
107 name: {{ include "common.fullname" . }}-dynamic-config
108 subPath: champ-beans.xml
109 - mountPath: /opt/app/champ-service/bundleconfig/etc/logback.xml
110 name: {{ include "common.fullname" . }}-logback-config
112 - mountPath: /var/log/onap
113 name: {{ include "common.fullname" . }}-logs
115 {{ include "common.resources" . }}
116 {{- if .Values.nodeSelector }}
118 {{ toYaml .Values.nodeSelector | indent 8 }}
120 {{- if .Values.affinity }}
122 {{ toYaml .Values.affinity | indent 8 }}
125 # side car containers
126 - name: filebeat-onap
127 image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
128 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
130 - mountPath: /usr/share/filebeat/filebeat.yml
131 subPath: filebeat.yml
133 - mountPath: /var/log/onap
134 name: {{ include "common.fullname" . }}-logs
135 - mountPath: /usr/share/filebeat/data
137 {{ if .Values.global.installSidecarSecurity }}
138 - name: {{ .Values.global.rproxy.name }}
139 image: "{{ include "common.repository" . }}/{{ .Values.global.rproxy.image }}"
140 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
143 value: "/opt/app/rproxy/config"
144 - name: KEY_STORE_PASSWORD
145 value: {{ .Values.config.keyStorePassword }}
146 - name: spring_profiles_active
147 value: {{ .Values.global.rproxy.activeSpringProfiles }}
149 - name: {{ include "common.fullname" . }}-rproxy-config
150 mountPath: /opt/app/rproxy/config/forward-proxy.properties
151 subPath: forward-proxy.properties
152 - name: {{ include "common.fullname" . }}-rproxy-config
153 mountPath: /opt/app/rproxy/config/primary-service.properties
154 subPath: primary-service.properties
155 - name: {{ include "common.fullname" . }}-rproxy-config
156 mountPath: /opt/app/rproxy/config/reverse-proxy.properties
157 subPath: reverse-proxy.properties
158 - name: {{ include "common.fullname" . }}-rproxy-config
159 mountPath: /opt/app/rproxy/config/cadi.properties
160 subPath: cadi.properties
161 - name: {{ include "common.fullname" . }}-rproxy-log-config
162 mountPath: /opt/app/rproxy/config/logback-spring.xml
163 subPath: logback-spring.xml
164 - name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
165 mountPath: /opt/app/rproxy/config/auth/uri-authorization.json
166 subPath: uri-authorization.json
167 - name: {{ include "common.fullname" . }}-rproxy-auth-certs
168 mountPath: /opt/app/rproxy/config/auth/tomcat_keystore
169 subPath: tomcat_keystore
170 - name: {{ include "common.fullname" . }}-rproxy-auth-certs
171 mountPath: /opt/app/rproxy/config/auth/client-cert.p12
172 subPath: client-cert.p12
173 - name: {{ include "common.fullname" . }}-rproxy-auth-certs
174 mountPath: /opt/app/rproxy/config/auth/org.onap.aai.p12
175 subPath: org.onap.aai.p12
176 - name: {{ include "common.fullname" . }}-rproxy-security-config
177 mountPath: /opt/app/rproxy/config/security/keyfile
181 - containerPort: {{ .Values.global.rproxy.port }}
183 - name: {{ .Values.global.fproxy.name }}
184 image: "{{ include "common.repository" . }}/{{ .Values.global.fproxy.image }}"
185 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
188 value: "/opt/app/fproxy/config"
189 - name: KEY_STORE_PASSWORD
190 value: {{ .Values.config.keyStorePassword }}
191 - name: TRUST_STORE_PASSWORD
192 value: {{ .Values.config.trustStorePassword }}
193 - name: spring_profiles_active
194 value: {{ .Values.global.fproxy.activeSpringProfiles }}
196 - name: {{ include "common.fullname" . }}-fproxy-config
197 mountPath: /opt/app/fproxy/config/fproxy.properties
198 subPath: fproxy.properties
199 - name: {{ include "common.fullname" . }}-fproxy-log-config
200 mountPath: /opt/app/fproxy/config/logback-spring.xml
201 subPath: logback-spring.xml
202 - name: {{ include "common.fullname" . }}-fproxy-auth-certs
203 mountPath: /opt/app/fproxy/config/auth/tomcat_keystore
204 subPath: tomcat_keystore
205 - name: {{ include "common.fullname" . }}-fproxy-auth-certs
206 mountPath: /opt/app/fproxy/config/auth/fproxy_truststore
207 subPath: fproxy_truststore
208 - name: {{ include "common.fullname" . }}-fproxy-auth-certs
209 mountPath: /opt/app/fproxy/config/auth/client-cert.p12
210 subPath: client-cert.p12
212 - containerPort: {{ .Values.global.fproxy.port }}
219 - name: {{ include "common.fullname" . }}-config
221 name: {{ include "common.fullname" . }}
223 - key: champ-api.properties
224 path: champ-api.properties
225 - name: {{ include "common.fullname" . }}-secrets
227 secretName: {{ include "common.fullname" . }}-champ
228 - name: {{ include "common.fullname" . }}-dynamic-config
230 name: {{ include "common.fullname" . }}-dynamic
232 - key: champ-beans.xml
233 path: champ-beans.xml
234 - name: {{ include "common.fullname" . }}-logs
236 - name: {{ include "common.fullname" . }}-logback-config
238 name: {{ include "common.fullname" . }}-log-configmap
242 - name: filebeat-conf
247 {{ if .Values.global.installSidecarSecurity }}
248 - name: {{ include "common.fullname" . }}-rproxy-config
250 name: {{ include "common.fullname" . }}-rproxy-config
251 - name: {{ include "common.fullname" . }}-rproxy-log-config
253 name: {{ include "common.fullname" . }}-rproxy-log-config
254 - name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
256 name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
257 - name: {{ include "common.fullname" . }}-rproxy-auth-config
259 secretName: {{ include "common.fullname" . }}-rproxy-auth-config
260 - name: {{ include "common.fullname" . }}-rproxy-auth-certs
262 secretName: aai-rproxy-auth-certs
263 - name: {{ include "common.fullname" . }}-rproxy-security-config
265 secretName: aai-rproxy-security-config
266 - name: {{ include "common.fullname" . }}-fproxy-config
268 name: {{ include "common.fullname" . }}-fproxy-config
269 - name: {{ include "common.fullname" . }}-fproxy-log-config
271 name: {{ include "common.fullname" . }}-fproxy-log-config
272 - name: {{ include "common.fullname" . }}-fproxy-auth-certs
274 secretName: aai-fproxy-auth-certs
277 - name: "{{ include "common.namespace" . }}-docker-registry-key"