3 # ============LICENSE_START=======================================================
5 # ================================================================================
6 # Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
7 # Copyright (c) 2020 Nokia Intellectual Property. All rights reserved.
8 # Copyright (c) 2020-2021 Orange Intellectual Property. All rights reserved.
9 # ================================================================================
10 # Licensed under the Apache License, Version 2.0 (the "License");
11 # you may not use this file except in compliance with the License.
12 # You may obtain a copy of the License at
14 # http://www.apache.org/licenses/LICENSE-2.0
16 # Unless required by applicable law or agreed to in writing, software
17 # distributed under the License is distributed on an "AS IS" BASIS,
18 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19 # See the License for the specific language governing permissions and
20 # limitations under the License.
21 # ============LICENSE_END=========================================================
23 # In ONAP, the following job will always be run on each installation
24 # The following job will go through the latest oxm and
25 # create properties based on the data type defined in the oxm
26 # and create the required indexes for the appropriate properties
27 # This can be run multiple times as the code if the index or property already exists
28 # then the index or property won't be created again
29 # NOTE - During the execution of the createSchema job, there should
30 # be no other janusgraph connection to the graph as its the reason
31 # that resources traversal and graphadmin wait until this job is done
32 # If you are using an existing cassandra cluster not coming from oom
33 # then it is your job to ensure that there are no connections to the database
36 {{- if and ( not .Values.global.jobs.migration.enabled ) ( .Values.global.jobs.createSchema.enabled ) }}
40 name: {{ include "common.fullname" . }}-create-db-schema
41 namespace: {{ include "common.namespace" . }}
43 app: {{ include "common.name" . }}-job
44 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
45 release: {{ include "common.release" . }}
46 heritage: {{ .Release.Service }}
52 app: {{ include "common.name" . }}-job
53 release: {{ include "common.release" . }}
54 name: {{ include "common.name" . }}
56 initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
57 {{- if .Values.global.aafEnabled }}
63 echo "*** retrieve Truststore and Keystore password"
64 export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
65 echo "*** obfuscate them "
66 export JETTY_UTIL_JAR=$(find /usr/local/jetty/lib/ -regextype sed -regex ".*jetty-util-[0-9].*.jar")
67 export KEYSTORE_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${KEYSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
68 export KEYSTORE_JKS_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${KEYSTORE_JKS_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
69 export TRUSTSTORE_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${TRUSTSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
70 echo "KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
71 echo "KEYSTORE_JKS_PASSWORD=${KEYSTORE_JKS_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
72 echo "TRUSTSTORE_PASSWORD=${TRUSTSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
73 image: {{ include "repositoryGenerator.image.jetty" . }}
74 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
75 name: {{ include "common.name" . }}-obfuscate
76 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
78 runAsUser: {{ .Values.securityContext.user_id }}
84 echo "*** Set obfuscated Truststore and Keystore password into configuration file"
85 export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
89 envsubst <${PFILE} >/config/${PFILE}
91 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
92 - mountPath: /config-input
93 name: properties-input
96 image: {{ include "repositoryGenerator.image.envsubst" . }}
97 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
98 name: {{ include "common.name" . }}-update-config
104 {{- if .Values.global.cassandra.localCluster }}
116 fieldPath: metadata.namespace
117 image: {{ include "repositoryGenerator.image.readiness" . }}
118 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
119 name: {{ include "common.name" . }}-readiness
121 - name: {{ include "common.name" . }}-job
122 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
123 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
129 {{- if include "common.onServiceMesh" . }}
130 echo "waiting 15s for istio side cars to be up"; sleep 15s;{{- end }}
131 bash docker-entrypoint.sh createDBSchema.sh;
132 {{ include "common.serviceMesh.killSidecar" . | indent 11 | trim }}
134 - name: LOCAL_USER_ID
135 value: {{ .Values.securityContext.user_id | quote }}
136 - name: LOCAL_GROUP_ID
137 value: {{ .Values.securityContext.group_id | quote }}
138 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
139 - mountPath: /etc/localtime
142 - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/janusgraph-realtime.properties
144 subPath: janusgraph-realtime.properties
145 - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/janusgraph-cached.properties
147 subPath: janusgraph-cached.properties
148 - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/aaiconfig.properties
150 subPath: aaiconfig.properties
151 - mountPath: /opt/aai/logroot/AAI-GA
153 - mountPath: /opt/app/aai-graphadmin/resources/logback.xml
156 - mountPath: /opt/app/aai-graphadmin/resources/localhost-access-logback.xml
158 subPath: localhost-access-logback.xml
159 - mountPath: /opt/app/aai-graphadmin/resources/application.properties
161 subPath: application.properties
162 resources: {{ include "common.resources" . | nindent 10 }}
163 {{- if .Values.nodeSelector }}
164 nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
166 {{- if .Values.affinity }}
167 affinity: {{ toYaml .Values.affinity | nindent 8 }}
169 volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
173 {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }}
178 name: {{ include "common.fullname" . }}
180 {{- if .Values.global.aafEnabled }}
183 - name: properties-input
186 name: {{ include "common.fullname" . }}-properties
189 - name: {{ include "common.namespace" . }}-docker-registry-key