2 # Copyright © 2018 Amdocs, AT&T
3 # Modifications Copyright © 2018 Bell Canada
4 # Modifications Copyright © 2020 Orange
6 # Licensed under the Apache License, Version 2.0 (the "License");
7 # you may not use this file except in compliance with the License.
8 # You may obtain a copy of the License at
10 # http://www.apache.org/licenses/LICENSE-2.0
12 # Unless required by applicable law or agreed to in writing, software
13 # distributed under the License is distributed on an "AS IS" BASIS,
14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 # See the License for the specific language governing permissions and
16 # limitations under the License.
22 name: {{ include "common.fullname" . }}
23 namespace: {{ include "common.namespace" . }}
25 app: {{ include "common.name" . }}
26 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
27 release: {{ include "common.release" . }}
28 heritage: {{ .Release.Service }}
32 app: {{ include "common.name" . }}
33 replicas: {{ .Values.replicaCount }}
37 app: {{ include "common.name" . }}
38 release: {{ include "common.release" . }}
40 {{ if .Values.global.installSidecarSecurity }}
42 - ip: {{ .Values.global.aaf.serverIp }}
44 - {{ .Values.global.aaf.serverHostname }}
47 - name: {{ .Values.global.tproxyConfig.name }}
48 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.tproxyConfig.image }}
49 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
54 - name: {{ include "common.name" . }}
55 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
56 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
58 - containerPort: {{ .Values.service.internalPort }}
59 # disable liveness probe when breakpoints set in debugger
60 # so K8s doesn't restart unresponsive container
61 {{ if .Values.liveness.enabled }}
64 port: {{ .Values.service.internalPort }}
65 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
66 periodSeconds: {{ .Values.liveness.periodSeconds }}
70 port: {{ .Values.service.internalPort }}
71 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
72 periodSeconds: {{ .Values.readiness.periodSeconds }}
75 value: /opt/app/babel/config
76 - name: KEY_STORE_PASSWORD
79 name: {{ template "common.fullname" . }}-pass
80 key: KEY_STORE_PASSWORD
81 - name: KEY_MANAGER_PASSWORD
84 name: {{ template "common.fullname" . }}-pass
85 key: KEY_MANAGER_PASSWORD
87 - mountPath: /etc/localtime
90 - mountPath: /opt/app/babel/config/artifact-generator.properties
91 name: {{ include "common.fullname" . }}-config
92 subPath: artifact-generator.properties
93 - mountPath: /opt/app/babel/config/tosca-mappings.json
94 name: {{ include "common.fullname" . }}-config
95 subPath: tosca-mappings.json
96 - mountPath: /opt/app/babel/config/babel-auth.properties
97 name: {{ include "common.fullname" . }}-config
98 subPath: babel-auth.properties
99 - mountPath: /opt/app/babel/config/auth
100 name: {{ include "common.fullname" . }}-secrets
101 - mountPath: /var/log/onap
102 name: {{ include "common.fullname" . }}-logs
103 - mountPath: /opt/app/babel/config/logback.xml
104 name: {{ include "common.fullname" . }}-config
107 {{ include "common.resources" . }}
108 {{- if .Values.nodeSelector }}
110 {{ toYaml .Values.nodeSelector | indent 8 }}
112 {{- if .Values.affinity }}
114 {{ toYaml .Values.affinity | indent 8 }}
117 # side car containers
118 - name: filebeat-onap
119 image: {{ include "repositoryGenerator.image.logging" . }}
120 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
122 - mountPath: /usr/share/filebeat/filebeat.yml
123 subPath: filebeat.yml
125 - mountPath: /var/log/onap
126 name: {{ include "common.fullname" . }}-logs
127 - mountPath: /usr/share/filebeat/data
130 {{ if .Values.global.installSidecarSecurity }}
131 - name: {{ .Values.global.rproxy.name }}
132 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.rproxy.image }}
133 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
136 value: "/opt/app/rproxy/config"
137 - name: KEY_STORE_PASSWORD
138 value: {{ .Values.config.keyStorePassword }}
139 - name: spring_profiles_active
140 value: {{ .Values.global.rproxy.activeSpringProfiles }}
142 - name: {{ include "common.fullname" . }}-rproxy-config
143 mountPath: /opt/app/rproxy/config/forward-proxy.properties
144 subPath: forward-proxy.properties
145 - name: {{ include "common.fullname" . }}-rproxy-config
146 mountPath: /opt/app/rproxy/config/primary-service.properties
147 subPath: primary-service.properties
148 - name: {{ include "common.fullname" . }}-rproxy-config
149 mountPath: /opt/app/rproxy/config/reverse-proxy.properties
150 subPath: reverse-proxy.properties
151 - name: {{ include "common.fullname" . }}-rproxy-config
152 mountPath: /opt/app/rproxy/config/cadi.properties
153 subPath: cadi.properties
154 - name: {{ include "common.fullname" . }}-rproxy-log-config
155 mountPath: /opt/app/rproxy/config/logback-spring.xml
156 subPath: logback-spring.xml
157 - name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
158 mountPath: /opt/app/rproxy/config/auth/uri-authorization.json
159 subPath: uri-authorization.json
160 - name: {{ include "common.fullname" . }}-rproxy-auth-config
161 mountPath: /opt/app/rproxy/config/auth/tomcat_keystore
162 subPath: tomcat_keystore
163 - name: {{ include "common.fullname" . }}-rproxy-auth-config
164 mountPath: /opt/app/rproxy/config/auth/client-cert.p12
165 subPath: client-cert.p12
166 - name: {{ include "common.fullname" . }}-rproxy-auth-config
167 mountPath: /opt/app/rproxy/config/auth/aaf_truststore.jks
168 subPath: aaf_truststore.jks
169 - name: {{ include "common.fullname" . }}-rproxy-security-config
170 mountPath: /opt/app/rproxy/config/security/keyfile
174 - containerPort: {{ .Values.global.rproxy.port }}
176 - name: {{ .Values.global.fproxy.name }}
177 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.fproxy.image }}
178 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
181 value: "/opt/app/fproxy/config"
182 - name: KEY_STORE_PASSWORD
183 value: {{ .Values.config.keyStorePassword }}
184 - name: spring_profiles_active
185 value: {{ .Values.global.fproxy.activeSpringProfiles }}
187 - name: {{ include "common.fullname" . }}-fproxy-config
188 mountPath: /opt/app/fproxy/config/fproxy.properties
189 subPath: fproxy.properties
190 - name: {{ include "common.fullname" . }}-fproxy-log-config
191 mountPath: /opt/app/fproxy/config/logback-spring.xml
192 subPath: logback-spring.xml
193 - name: {{ include "common.fullname" . }}-fproxy-auth-config
194 mountPath: /opt/app/fproxy/config/auth/tomcat_keystore
195 subPath: tomcat_keystore
196 - name: {{ include "common.fullname" . }}-fproxy-auth-config
197 mountPath: /opt/app/fproxy/config/auth/client-cert.p12
198 subPath: client-cert.p12
200 - containerPort: {{ .Values.global.fproxy.port }}
207 - name: {{ include "common.fullname" . }}-config
209 name: {{ include "common.fullname" . }}-configmap
211 - key: artifact-generator.properties
212 path: artifact-generator.properties
213 - key: tosca-mappings.json
214 path: tosca-mappings.json
215 - key: babel-auth.properties
216 path: babel-auth.properties
219 - name: {{ include "common.fullname" . }}-secrets
221 secretName: {{ include "common.fullname" . }}-babel-secrets
222 - name: filebeat-conf
225 - name: {{ include "common.fullname" . }}-logs
229 {{ if .Values.global.installSidecarSecurity }}
230 - name: {{ include "common.fullname" . }}-rproxy-config
232 name: {{ include "common.fullname" . }}-rproxy-config
233 - name: {{ include "common.fullname" . }}-rproxy-log-config
235 name: {{ include "common.fullname" . }}-rproxy-log-config
236 - name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
238 name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
239 - name: {{ include "common.fullname" . }}-rproxy-auth-config
241 secretName: {{ include "common.fullname" . }}-rproxy-auth-config
242 - name: {{ include "common.fullname" . }}-rproxy-security-config
244 secretName: {{ include "common.fullname" . }}-rproxy-security-config
245 - name: {{ include "common.fullname" . }}-fproxy-config
247 name: {{ include "common.fullname" . }}-fproxy-config
248 - name: {{ include "common.fullname" . }}-fproxy-log-config
250 name: {{ include "common.fullname" . }}-fproxy-log-config
251 - name: {{ include "common.fullname" . }}-fproxy-auth-config
253 secretName: {{ include "common.fullname" . }}-fproxy-auth-config
257 - name: "{{ include "common.namespace" . }}-docker-registry-key"