2 # Copyright (c) 2017 Amdocs, Bell Canada
3 # Modifications Copyright (c) 2018 AT&T
4 # Modifications Copyright (c) 2020 Nokia
6 # Licensed under the Apache License, Version 2.0 (the "License");
7 # you may not use this file except in compliance with the License.
8 # You may obtain a copy of the License at
10 # http://www.apache.org/licenses/LICENSE-2.0
12 # Unless required by applicable law or agreed to in writing, software
13 # distributed under the License is distributed on an "AS IS" BASIS,
14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 # See the License for the specific language governing permissions and
16 # limitations under the License.
22 name: {{ include "common.fullname" . }}
23 namespace: {{ include "common.namespace" . }}
25 app: {{ include "common.name" . }}
26 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
27 release: {{ include "common.release" . }}
28 heritage: {{ .Release.Service }}
30 replicas: {{ .Values.replicaCount }}
33 app: {{ include "common.name" . }}
37 app: {{ include "common.name" . }}
38 release: {{ include "common.release" . }}
39 name: {{ include "common.name" . }}
41 checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
42 msb.onap.org/service-info: '[
44 "serviceName": "_aai-cloudInfrastructure",
46 "url": "/aai/v11/cloud-infrastructure",
50 "lb_policy":"ip_hash",
52 "path": "/aai/v11/cloud-infrastructure"
55 "serviceName": "_aai-cloudInfrastructure",
57 "url": "/aai/v12/cloud-infrastructure",
61 "lb_policy":"ip_hash",
63 "path": "/aai/v12/cloud-infrastructure"
66 "serviceName": "_aai-cloudInfrastructure",
68 "url": "/aai/v13/cloud-infrastructure",
72 "lb_policy":"ip_hash",
74 "path": "/aai/v13/cloud-infrastructure"
77 "serviceName": "_aai-cloudInfrastructure",
79 "url": "/aai/v14/cloud-infrastructure",
83 "lb_policy":"ip_hash",
85 "path": "/aai/v14/cloud-infrastructure"
88 "serviceName": "_aai-cloudInfrastructure",
90 "url": "/aai/v15/cloud-infrastructure",
94 "lb_policy":"ip_hash",
96 "path": "/aai/v15/cloud-infrastructure"
99 "serviceName": "_aai-cloudInfrastructure",
101 "url": "/aai/v16/cloud-infrastructure",
105 "lb_policy":"ip_hash",
107 "path": "/aai/v16/cloud-infrastructure"
110 "serviceName": "_aai-cloudInfrastructure",
112 "url": "/aai/v17/cloud-infrastructure",
116 "lb_policy":"ip_hash",
118 "path": "/aai/v17/cloud-infrastructure"
121 "serviceName": "_aai-cloudInfrastructure",
123 "url": "/aai/v18/cloud-infrastructure",
127 "lb_policy":"ip_hash",
129 "path": "/aai/v18/cloud-infrastructure"
132 "serviceName": "_aai-cloudInfrastructure",
134 "url": "/aai/v19/cloud-infrastructure",
138 "lb_policy":"ip_hash",
140 "path": "/aai/v19/cloud-infrastructure"
143 "serviceName": "_aai-business",
145 "url": "/aai/v11/business",
149 "lb_policy":"ip_hash",
151 "path": "/aai/v11/business"
154 "serviceName": "_aai-business",
156 "url": "/aai/v12/business",
160 "lb_policy":"ip_hash",
162 "path": "/aai/v12/business"
165 "serviceName": "_aai-business",
167 "url": "/aai/v13/business",
171 "lb_policy":"ip_hash",
173 "path": "/aai/v13/business"
176 "serviceName": "_aai-business",
178 "url": "/aai/v14/business",
182 "lb_policy":"ip_hash",
184 "path": "/aai/v14/business"
187 "serviceName": "_aai-business",
189 "url": "/aai/v15/business",
193 "lb_policy":"ip_hash",
195 "path": "/aai/v15/business"
198 "serviceName": "_aai-business",
200 "url": "/aai/v16/business",
204 "lb_policy":"ip_hash",
206 "path": "/aai/v16/business"
209 "serviceName": "_aai-business",
211 "url": "/aai/v17/business",
215 "lb_policy":"ip_hash",
217 "path": "/aai/v17/business"
220 "serviceName": "_aai-business",
222 "url": "/aai/v18/business",
226 "lb_policy":"ip_hash",
228 "path": "/aai/v18/business"
231 "serviceName": "_aai-business",
233 "url": "/aai/v19/business",
237 "lb_policy":"ip_hash",
239 "path": "/aai/v19/business"
242 "serviceName": "_aai-actions",
244 "url": "/aai/v11/actions",
248 "lb_policy":"ip_hash",
250 "path": "/aai/v11/actions"
253 "serviceName": "_aai-actions",
255 "url": "/aai/v12/actions",
259 "lb_policy":"ip_hash",
261 "path": "/aai/v12/actions"
264 "serviceName": "_aai-actions",
266 "url": "/aai/v13/actions",
270 "lb_policy":"ip_hash",
272 "path": "/aai/v13/actions"
275 "serviceName": "_aai-actions",
277 "url": "/aai/v14/actions",
281 "lb_policy":"ip_hash",
283 "path": "/aai/v14/actions"
286 "serviceName": "_aai-actions",
288 "url": "/aai/v15/actions",
292 "lb_policy":"ip_hash",
294 "path": "/aai/v15/actions"
297 "serviceName": "_aai-actions",
299 "url": "/aai/v16/actions",
303 "lb_policy":"ip_hash",
305 "path": "/aai/v16/actions"
308 "serviceName": "_aai-actions",
310 "url": "/aai/v17/actions",
314 "lb_policy":"ip_hash",
316 "path": "/aai/v17/actions"
319 "serviceName": "_aai-actions",
321 "url": "/aai/v18/actions",
325 "lb_policy":"ip_hash",
327 "path": "/aai/v18/actions"
330 "serviceName": "_aai-actions",
332 "url": "/aai/v19/actions",
336 "lb_policy":"ip_hash",
338 "path": "/aai/v19/actions"
341 "serviceName": "_aai-service-design-and-creation",
343 "url": "/aai/v11/service-design-and-creation",
347 "lb_policy":"ip_hash",
349 "path": "/aai/v11/service-design-and-creation"
352 "serviceName": "_aai-service-design-and-creation",
354 "url": "/aai/v12/service-design-and-creation",
358 "lb_policy":"ip_hash",
360 "path": "/aai/v12/service-design-and-creation"
363 "serviceName": "_aai-service-design-and-creation",
365 "url": "/aai/v13/service-design-and-creation",
369 "lb_policy":"ip_hash",
371 "path": "/aai/v13/service-design-and-creation"
374 "serviceName": "_aai-service-design-and-creation",
376 "url": "/aai/v14/service-design-and-creation",
380 "lb_policy":"ip_hash",
382 "path": "/aai/v14/service-design-and-creation"
385 "serviceName": "_aai-service-design-and-creation",
387 "url": "/aai/v15/service-design-and-creation",
391 "lb_policy":"ip_hash",
393 "path": "/aai/v15/service-design-and-creation"
396 "serviceName": "_aai-service-design-and-creation",
398 "url": "/aai/v16/service-design-and-creation",
402 "lb_policy":"ip_hash",
404 "path": "/aai/v16/service-design-and-creation"
407 "serviceName": "_aai-service-design-and-creation",
409 "url": "/aai/v17/service-design-and-creation",
413 "lb_policy":"ip_hash",
415 "path": "/aai/v17/service-design-and-creation"
418 "serviceName": "_aai-service-design-and-creation",
420 "url": "/aai/v18/service-design-and-creation",
424 "lb_policy":"ip_hash",
426 "path": "/aai/v18/service-design-and-creation"
429 "serviceName": "_aai-service-design-and-creation",
431 "url": "/aai/v19/service-design-and-creation",
435 "lb_policy":"ip_hash",
437 "path": "/aai/v19/service-design-and-creation"
440 "serviceName": "_aai-network",
442 "url": "/aai/v11/network",
446 "lb_policy":"ip_hash",
448 "path": "/aai/v11/network"
451 "serviceName": "_aai-network",
453 "url": "/aai/v12/network",
457 "lb_policy":"ip_hash",
459 "path": "/aai/v12/network"
462 "serviceName": "_aai-network",
464 "url": "/aai/v13/network",
468 "lb_policy":"ip_hash",
470 "path": "/aai/v13/network"
473 "serviceName": "_aai-network",
475 "url": "/aai/v14/network",
479 "lb_policy":"ip_hash",
481 "path": "/aai/v14/network"
484 "serviceName": "_aai-network",
486 "url": "/aai/v15/network",
490 "lb_policy":"ip_hash",
492 "path": "/aai/v15/network"
495 "serviceName": "_aai-network",
497 "url": "/aai/v16/network",
501 "lb_policy":"ip_hash",
503 "path": "/aai/v16/network"
506 "serviceName": "_aai-network",
508 "url": "/aai/v17/network",
512 "lb_policy":"ip_hash",
514 "path": "/aai/v17/network"
517 "serviceName": "_aai-network",
519 "url": "/aai/v18/network",
523 "lb_policy":"ip_hash",
525 "path": "/aai/v18/network"
528 "serviceName": "_aai-network",
530 "url": "/aai/v19/network",
534 "lb_policy":"ip_hash",
536 "path": "/aai/v19/network"
539 "serviceName": "_aai-externalSystem",
541 "url": "/aai/v11/external-system",
545 "lb_policy":"ip_hash",
547 "path": "/aai/v11/external-system"
550 "serviceName": "_aai-externalSystem",
552 "url": "/aai/v12/external-system",
556 "lb_policy":"ip_hash",
558 "path": "/aai/v12/external-system"
561 "serviceName": "_aai-externalSystem",
563 "url": "/aai/v13/external-system",
567 "lb_policy":"ip_hash",
569 "path": "/aai/v13/external-system"
572 "serviceName": "_aai-externalSystem",
574 "url": "/aai/v14/external-system",
578 "lb_policy":"ip_hash",
580 "path": "/aai/v14/external-system"
583 "serviceName": "_aai-externalSystem",
585 "url": "/aai/v15/external-system",
589 "lb_policy":"ip_hash",
591 "path": "/aai/v15/external-system"
594 "serviceName": "_aai-externalSystem",
596 "url": "/aai/v16/external-system",
600 "lb_policy":"ip_hash",
602 "path": "/aai/v16/external-system"
605 "serviceName": "_aai-externalSystem",
607 "url": "/aai/v17/external-system",
611 "lb_policy":"ip_hash",
613 "path": "/aai/v17/external-system"
616 "serviceName": "_aai-externalSystem",
618 "url": "/aai/v18/external-system",
622 "lb_policy":"ip_hash",
624 "path": "/aai/v18/external-system"
627 "serviceName": "_aai-externalSystem",
629 "url": "/aai/v19/external-system",
633 "lb_policy":"ip_hash",
635 "path": "/aai/v19/external-system"
638 "serviceName": "aai-cloudInfrastructure",
640 "url": "/aai/v11/cloud-infrastructure",
644 "lb_policy":"ip_hash",
648 "serviceName": "aai-cloudInfrastructure",
650 "url": "/aai/v12/cloud-infrastructure",
654 "lb_policy":"ip_hash",
658 "serviceName": "aai-cloudInfrastructure",
660 "url": "/aai/v13/cloud-infrastructure",
664 "lb_policy":"ip_hash",
668 "serviceName": "aai-cloudInfrastructure",
670 "url": "/aai/v14/cloud-infrastructure",
674 "lb_policy":"ip_hash",
678 "serviceName": "aai-cloudInfrastructure",
680 "url": "/aai/v15/cloud-infrastructure",
684 "lb_policy":"ip_hash",
688 "serviceName": "aai-cloudInfrastructure",
690 "url": "/aai/v16/cloud-infrastructure",
694 "lb_policy":"ip_hash",
698 "serviceName": "aai-cloudInfrastructure",
700 "url": "/aai/v17/cloud-infrastructure",
704 "lb_policy":"ip_hash",
708 "serviceName": "aai-cloudInfrastructure",
710 "url": "/aai/v18/cloud-infrastructure",
714 "lb_policy":"ip_hash",
718 "serviceName": "aai-cloudInfrastructure",
720 "url": "/aai/v19/cloud-infrastructure",
724 "lb_policy":"ip_hash",
728 "serviceName": "aai-business",
730 "url": "/aai/v11/business",
734 "lb_policy":"ip_hash",
738 "serviceName": "aai-business",
740 "url": "/aai/v12/business",
744 "lb_policy":"ip_hash",
748 "serviceName": "aai-business",
750 "url": "/aai/v13/business",
754 "lb_policy":"ip_hash",
758 "serviceName": "aai-business",
760 "url": "/aai/v14/business",
764 "lb_policy":"ip_hash",
768 "serviceName": "aai-business",
770 "url": "/aai/v15/business",
774 "lb_policy":"ip_hash",
778 "serviceName": "aai-business",
780 "url": "/aai/v16/business",
784 "lb_policy":"ip_hash",
788 "serviceName": "aai-business",
790 "url": "/aai/v17/business",
794 "lb_policy":"ip_hash",
798 "serviceName": "aai-business",
800 "url": "/aai/v18/business",
804 "lb_policy":"ip_hash",
808 "serviceName": "aai-business",
810 "url": "/aai/v19/business",
814 "lb_policy":"ip_hash",
818 "serviceName": "aai-actions",
820 "url": "/aai/v11/actions",
824 "lb_policy":"ip_hash",
828 "serviceName": "aai-actions",
830 "url": "/aai/v12/actions",
834 "lb_policy":"ip_hash",
838 "serviceName": "aai-actions",
840 "url": "/aai/v13/actions",
844 "lb_policy":"ip_hash",
848 "serviceName": "aai-actions",
850 "url": "/aai/v14/actions",
854 "lb_policy":"ip_hash",
858 "serviceName": "aai-actions",
860 "url": "/aai/v15/actions",
864 "lb_policy":"ip_hash",
868 "serviceName": "aai-actions",
870 "url": "/aai/v16/actions",
874 "lb_policy":"ip_hash",
878 "serviceName": "aai-actions",
880 "url": "/aai/v17/actions",
884 "lb_policy":"ip_hash",
888 "serviceName": "aai-actions",
890 "url": "/aai/v18/actions",
894 "lb_policy":"ip_hash",
898 "serviceName": "aai-actions",
900 "url": "/aai/v19/actions",
904 "lb_policy":"ip_hash",
908 "serviceName": "aai-service-design-and-creation",
910 "url": "/aai/v11/service-design-and-creation",
914 "lb_policy":"ip_hash",
918 "serviceName": "aai-service-design-and-creation",
920 "url": "/aai/v12/service-design-and-creation",
924 "lb_policy":"ip_hash",
928 "serviceName": "aai-service-design-and-creation",
930 "url": "/aai/v13/service-design-and-creation",
934 "lb_policy":"ip_hash",
938 "serviceName": "aai-service-design-and-creation",
940 "url": "/aai/v14/service-design-and-creation",
944 "lb_policy":"ip_hash",
948 "serviceName": "aai-service-design-and-creation",
950 "url": "/aai/v15/service-design-and-creation",
954 "lb_policy":"ip_hash",
958 "serviceName": "aai-service-design-and-creation",
960 "url": "/aai/v16/service-design-and-creation",
964 "lb_policy":"ip_hash",
968 "serviceName": "aai-service-design-and-creation",
970 "url": "/aai/v17/service-design-and-creation",
974 "lb_policy":"ip_hash",
978 "serviceName": "aai-service-design-and-creation",
980 "url": "/aai/v18/service-design-and-creation",
984 "lb_policy":"ip_hash",
988 "serviceName": "aai-service-design-and-creation",
990 "url": "/aai/v19/service-design-and-creation",
994 "lb_policy":"ip_hash",
998 "serviceName": "aai-network",
1000 "url": "/aai/v11/network",
1004 "lb_policy":"ip_hash",
1008 "serviceName": "aai-network",
1010 "url": "/aai/v12/network",
1014 "lb_policy":"ip_hash",
1018 "serviceName": "aai-network",
1020 "url": "/aai/v13/network",
1024 "lb_policy":"ip_hash",
1028 "serviceName": "aai-network",
1030 "url": "/aai/v14/network",
1034 "lb_policy":"ip_hash",
1038 "serviceName": "aai-network",
1040 "url": "/aai/v15/network",
1044 "lb_policy":"ip_hash",
1048 "serviceName": "aai-network",
1050 "url": "/aai/v16/network",
1054 "lb_policy":"ip_hash",
1058 "serviceName": "aai-network",
1060 "url": "/aai/v17/network",
1064 "lb_policy":"ip_hash",
1068 "serviceName": "aai-network",
1070 "url": "/aai/v18/network",
1074 "lb_policy":"ip_hash",
1078 "serviceName": "aai-network",
1080 "url": "/aai/v19/network",
1084 "lb_policy":"ip_hash",
1088 "serviceName": "aai-externalSystem",
1090 "url": "/aai/v11/external-system",
1094 "lb_policy":"ip_hash",
1098 "serviceName": "aai-externalSystem",
1100 "url": "/aai/v12/external-system",
1104 "lb_policy":"ip_hash",
1108 "serviceName": "aai-externalSystem",
1110 "url": "/aai/v13/external-system",
1114 "lb_policy":"ip_hash",
1118 "serviceName": "aai-externalSystem",
1120 "url": "/aai/v14/external-system",
1124 "lb_policy":"ip_hash",
1128 "serviceName": "aai-externalSystem",
1130 "url": "/aai/v15/external-system",
1134 "lb_policy":"ip_hash",
1138 "serviceName": "aai-externalSystem",
1140 "url": "/aai/v16/external-system",
1144 "lb_policy":"ip_hash",
1148 "serviceName": "aai-externalSystem",
1150 "url": "/aai/v17/external-system",
1154 "lb_policy":"ip_hash",
1158 "serviceName": "aai-externalSystem",
1160 "url": "/aai/v18/external-system",
1164 "lb_policy":"ip_hash",
1168 "serviceName": "aai-externalSystem",
1170 "url": "/aai/v19/external-system",
1174 "lb_policy":"ip_hash",
1179 hostname: aai-resources
1180 {{- if .Values.global.initContainers.enabled }}
1181 {{- if .Values.global.installSidecarSecurity }}
1183 - ip: {{ .Values.global.aaf.serverIp }}
1185 - {{ .Values.global.aaf.serverHostname }}
1189 {{- if .Values.global.jobs.migration.enabled }}
1193 - {{ include "common.release" . }}-aai-graphadmin-migration
1194 {{- else if .Values.global.jobs.createSchema.enabled }}
1198 - {{ include "common.release" . }}-aai-graphadmin-create-db-schema
1203 {{- if .Values.global.cassandra.localCluster }}
1209 - aai-schema-service
1216 fieldPath: metadata.namespace
1217 image: {{ include "repositoryGenerator.image.readiness" . }}
1218 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
1219 name: {{ include "common.name" . }}-readiness
1220 {{- if .Values.global.installSidecarSecurity }}
1221 - name: {{ .Values.global.tproxyConfig.name }}
1222 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.tproxyConfig.image }}
1223 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
1229 - name: {{ include "common.name" . }}
1230 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
1231 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
1233 - name: LOCAL_USER_ID
1234 value: {{ .Values.global.config.userId | quote }}
1235 - name: LOCAL_GROUP_ID
1236 value: {{ .Values.global.config.groupId | quote }}
1237 - name: POST_JAVA_OPTS
1238 value: '-Djavax.net.ssl.trustStore=/opt/app/aai-resources/resources/aaf/truststoreONAPall.jks -Djavax.net.ssl.trustStorePassword=changeit'
1240 - mountPath: /etc/localtime
1243 - mountPath: /opt/app/aai-resources/resources/etc/appprops/janusgraph-realtime.properties
1244 name: {{ include "common.fullname" . }}-config
1245 subPath: janusgraph-realtime.properties
1246 - mountPath: /opt/app/aai-resources/resources/etc/appprops/janusgraph-cached.properties
1247 name: {{ include "common.fullname" . }}-config
1248 subPath: janusgraph-cached.properties
1249 - mountPath: /opt/app/aai-resources/resources/etc/appprops/aaiconfig.properties
1250 name: {{ include "common.fullname" . }}-config
1251 subPath: aaiconfig.properties
1252 - mountPath: /opt/aai/logroot/AAI-RES
1253 name: {{ include "common.fullname" . }}-logs
1254 - mountPath: /opt/app/aai-resources/resources/logback.xml
1255 name: {{ include "common.fullname" . }}-config
1256 subPath: logback.xml
1257 - mountPath: /opt/app/aai-resources/resources/localhost-access-logback.xml
1258 name: {{ include "common.fullname" . }}-config
1259 subPath: localhost-access-logback.xml
1260 - mountPath: /opt/app/aai-resources/resources/etc/auth/realm.properties
1261 name: {{ include "common.fullname" . }}-config
1262 subPath: realm.properties
1263 {{- if .Values.global.installSidecarSecurity }}
1264 - mountPath: /opt/app/aai-resources/resources/etc/auth/aai_policy.json
1265 name: {{ include "common.fullname" . }}-aai-policy
1266 subPath: aai_policy.json
1268 - mountPath: /opt/app/aai-resources/resources/aaf/org.onap.aai.keyfile
1269 name: {{ include "common.fullname" . }}-aaf-certs
1270 subPath: org.onap.aai.keyfile
1271 - mountPath: /opt/app/aai-resources/resources/aaf/bath_config.csv
1272 name: {{ include "common.fullname" . }}-aaf-certs
1273 subPath: bath_config.csv
1274 - mountPath: /opt/app/aai-resources/resources/aaf/org.onap.aai.props
1275 name: {{ include "common.fullname" . }}-aaf-properties
1276 subPath: org.onap.aai.props
1277 - mountPath: /opt/app/aai-resources/resources/aaf/org.osaaf.location.props
1278 name: {{ include "common.fullname" . }}-aaf-properties
1279 subPath: org.osaaf.location.props
1280 - mountPath: /opt/app/aai-resources/resources/aaf/permissions.properties
1281 name: {{ include "common.fullname" . }}-aaf-properties
1282 subPath: permissions.properties
1283 - mountPath: /opt/app/aai-resources/resources/cadi.properties
1284 name: {{ include "common.fullname" . }}-aaf-properties
1285 subPath: cadi.properties
1286 - mountPath: /opt/app/aai-resources/resources/aaf/org.onap.aai.p12
1287 name: {{ include "common.fullname" . }}-aaf-certs
1288 subPath: org.onap.aai.p12
1289 - mountPath: /opt/app/aai-resources/resources/aaf/truststoreONAPall.jks
1290 name: aai-common-aai-auth-mount
1291 subPath: truststoreONAPall.jks
1292 - mountPath: /opt/app/aai-resources/resources/application.properties
1293 name: {{ include "common.fullname" . }}-config
1294 subPath: application.properties
1295 - mountPath: /opt/app/aai-resources/resources/application-keycloak.properties
1296 name: {{ include "common.fullname" . }}-config
1297 subPath: application-keycloak.properties
1299 {{- range $job := .Values.global.config.auth.files }}
1300 - mountPath: /opt/app/aai-resources/resources/etc/auth/{{ . }}
1301 name: {{ include "common.fullname" $global }}-auth-truststore-sec
1305 - containerPort: {{ .Values.service.internalPort }}
1306 - containerPort: {{ .Values.service.internalPort2 }}
1307 # disable liveness probe when breakpoints set in debugger
1308 # so K8s doesn't restart unresponsive container
1309 {{- if .Values.liveness.enabled }}
1312 port: {{ .Values.service.internalPort }}
1313 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
1314 periodSeconds: {{ .Values.liveness.periodSeconds }}
1318 port: {{ .Values.service.internalPort }}
1319 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
1320 periodSeconds: {{ .Values.readiness.periodSeconds }}
1321 resources: {{ include "common.resources" . | nindent 12 }}
1322 {{- if .Values.nodeSelector }}
1323 nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
1325 {{- if .Values.affinity }}
1326 affinity: {{ toYaml .Values.affinity | nindent 8 }}
1328 # side car containers
1329 - name: filebeat-onap
1330 image: {{ include "repositoryGenerator.image.logging" . }}
1331 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
1333 - mountPath: /usr/share/filebeat/filebeat.yml
1334 subPath: filebeat.yml
1336 - mountPath: /var/log/onap
1337 name: {{ include "common.fullname" . }}-logs
1338 - mountPath: /usr/share/filebeat/data
1339 name: {{ include "common.fullname" . }}-filebeat
1340 resources: {{ include "common.resources" . | nindent 12 }}
1341 {{- if .Values.global.installSidecarSecurity }}
1342 - name: {{ .Values.global.rproxy.name }}
1343 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.rproxy.image }}
1344 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
1347 value: "/opt/app/rproxy/config"
1348 - name: KEY_STORE_PASSWORD
1349 value: {{ .Values.sidecar.keyStorePassword }}
1350 - name: spring_profiles_active
1351 value: {{ .Values.global.rproxy.activeSpringProfiles }}
1353 - name: {{ include "common.fullname" . }}-rproxy-config
1354 mountPath: /opt/app/rproxy/config/forward-proxy.properties
1355 subPath: forward-proxy.properties
1356 - name: {{ include "common.fullname" . }}-rproxy-config
1357 mountPath: /opt/app/rproxy/config/primary-service.properties
1358 subPath: primary-service.properties
1359 - name: {{ include "common.fullname" . }}-rproxy-config
1360 mountPath: /opt/app/rproxy/config/reverse-proxy.properties
1361 subPath: reverse-proxy.properties
1362 - name: {{ include "common.fullname" . }}-rproxy-config
1363 mountPath: /opt/app/rproxy/config/cadi.properties
1364 subPath: cadi.properties
1365 - name: {{ include "common.fullname" . }}-rproxy-log-config
1366 mountPath: /opt/app/rproxy/config/logback-spring.xml
1367 subPath: logback-spring.xml
1368 - name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
1369 mountPath: /opt/app/rproxy/config/auth/uri-authorization.json
1370 subPath: uri-authorization.json
1371 - name: {{ include "common.fullname" . }}-rproxy-auth-config
1372 mountPath: /opt/app/rproxy/config/auth/tomcat_keystore
1373 subPath: tomcat_keystore
1374 - name: {{ include "common.fullname" . }}-rproxy-auth-config
1375 mountPath: /opt/app/rproxy/config/auth/client-cert.p12
1376 subPath: client-cert.p12
1377 - name: {{ include "common.fullname" . }}-rproxy-auth-config
1378 mountPath: /opt/app/rproxy/config/auth/aaf_truststore.jks
1379 subPath: aaf_truststore.jks
1380 - name: {{ include "common.fullname" . }}-rproxy-security-config
1381 mountPath: /opt/app/rproxy/config/security/keyfile
1383 - name: {{ include "common.fullname" . }}-rproxy-auth-config
1384 mountPath: /opt/app/rproxy/config/auth/org.onap.aai.p12
1385 subPath: org.onap.aai.p12
1387 - containerPort: {{ .Values.global.rproxy.port }}
1388 - name: {{ .Values.global.fproxy.name }}
1389 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.fproxy.image }}
1390 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
1393 value: "/opt/app/fproxy/config"
1394 - name: KEY_STORE_PASSWORD
1395 value: {{ .Values.sidecar.keyStorePassword }}
1396 - name: TRUST_STORE_PASSWORD
1397 value: {{ .Values.sidecar.trustStorePassword }}
1398 - name: spring_profiles_active
1399 value: {{ .Values.global.fproxy.activeSpringProfiles }}
1401 - name: {{ include "common.fullname" . }}-fproxy-config
1402 mountPath: /opt/app/fproxy/config/fproxy.properties
1403 subPath: fproxy.properties
1404 - name: {{ include "common.fullname" . }}-fproxy-log-config
1405 mountPath: /opt/app/fproxy/config/logback-spring.xml
1406 subPath: logback-spring.xml
1407 - name: {{ include "common.fullname" . }}-fproxy-auth-config
1408 mountPath: /opt/app/fproxy/config/auth/fproxy_truststore
1409 subPath: fproxy_truststore
1410 - name: {{ include "common.fullname" . }}-fproxy-auth-config
1411 mountPath: /opt/app/fproxy/config/auth/tomcat_keystore
1412 subPath: tomcat_keystore
1413 - name: {{ include "common.fullname" . }}-fproxy-auth-config
1414 mountPath: /opt/app/fproxy/config/auth/client-cert.p12
1415 subPath: client-cert.p12
1417 - containerPort: {{ .Values.global.fproxy.port }}
1420 - name: aai-common-aai-auth-mount
1422 secretName: aai-common-aai-auth
1425 path: /etc/localtime
1426 - name: filebeat-conf
1429 - name: {{ include "common.fullname" . }}-logs
1431 - name: {{ include "common.fullname" . }}-filebeat
1433 - name: {{ include "common.fullname" . }}-config
1435 name: {{ include "common.fullname" . }}-configmap
1436 - name: {{ include "common.fullname" . }}-aaf-properties
1438 name: {{ include "common.fullname" . }}-aaf-props
1439 - name: {{ include "common.fullname" . }}-aaf-certs
1441 secretName: {{ include "common.fullname" . }}-aaf-keys
1442 - name: {{ include "common.fullname" . }}-auth-truststore-sec
1444 secretName: aai-common-truststore
1446 {{- range $job := .Values.global.config.auth.files }}
1450 {{- if .Values.global.installSidecarSecurity }}
1451 - name: {{ include "common.fullname" . }}-aai-policy
1453 name: {{ include "common.fullname" . }}-aai-policy-configmap
1454 - name: {{ include "common.fullname" . }}-rproxy-config
1456 name: {{ include "common.fullname" . }}-rproxy-config
1457 - name: {{ include "common.fullname" . }}-rproxy-log-config
1459 name: {{ include "common.fullname" . }}-rproxy-log-config
1460 - name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
1462 name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
1463 - name: {{ include "common.fullname" . }}-rproxy-auth-config
1465 secretName: {{ include "common.fullname" . }}-rproxy-auth-config
1466 - name: {{ include "common.fullname" . }}-rproxy-security-config
1468 secretName: {{ include "common.fullname" . }}-rproxy-security-config
1469 - name: {{ include "common.fullname" . }}-fproxy-config
1471 name: {{ include "common.fullname" . }}-fproxy-config
1472 - name: {{ include "common.fullname" . }}-fproxy-log-config
1474 name: {{ include "common.fullname" . }}-fproxy-log-config
1475 - name: {{ include "common.fullname" . }}-fproxy-auth-config
1477 secretName: {{ include "common.fullname" . }}-fproxy-auth-config
1479 restartPolicy: {{ .Values.restartPolicy }}
1481 - name: "{{ include "common.namespace" . }}-docker-registry-key"