2 # Copyright © 2017 Amdocs, Bell Canada
3 # Modifications Copyright © 2018 AT&T
4 # Modifications Copyright © 2020 Orange
6 # Licensed under the Apache License, Version 2.0 (the "License");
7 # you may not use this file except in compliance with the License.
8 # You may obtain a copy of the License at
10 # http://www.apache.org/licenses/LICENSE-2.0
12 # Unless required by applicable law or agreed to in writing, software
13 # distributed under the License is distributed on an "AS IS" BASIS,
14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 # See the License for the specific language governing permissions and
16 # limitations under the License.
22 name: {{ include "common.fullname" . }}
23 namespace: {{ include "common.namespace" . }}
25 app: {{ include "common.name" . }}
26 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
27 release: {{ include "common.release" . }}
28 heritage: {{ .Release.Service }}
30 replicas: {{ .Values.replicaCount }}
33 app: {{ include "common.name" . }}
37 app: {{ include "common.name" . }}
38 release: {{ include "common.release" . }}
39 name: {{ include "common.name" . }}
41 checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
43 {{- if .Values.global.aafEnabled }}
44 initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
50 echo "*** retrieve Truststore and Keystore password"
51 export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
52 echo "*** obfuscate them "
53 export KEYSTORE_PLAIN_PASSWORD=${KEYSTORE_PLAIN_PASSWORD}
54 export TRUSTSTORE_PLAIN_PASSWORD=${TRUSTSTORE_PLAIN_PASSWORD}
55 ls -l /usr/local/jetty/lib
56 export KEYSTORE_PASSWORD=`java -cp /usr/local/jetty/lib/jetty-util-9.4.45.v20220203.jar org.eclipse.jetty.util.security.Password ${KEYSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
57 export TRUSTSTORE_PASSWORD=`java -cp /usr/local/jetty/lib/jetty-util-9.4.45.v20220203.jar org.eclipse.jetty.util.security.Password ${TRUSTSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
58 echo "KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
59 echo "TRUSTSTORE_PASSWORD=${TRUSTSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
60 image: {{ include "repositoryGenerator.image.jetty" . }}
61 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
62 name: {{ include "common.name" . }}-obfuscate
63 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
65 runAsUser: {{ .Values.securityContext.user_id }}
68 - name: {{ include "common.name" . }}
69 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
70 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
71 {{- if .Values.global.aafEnabled }}
77 echo "*** retrieve Truststore and Keystore password"
78 export $(cat {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
79 echo "*** actual launch of AAI Schema Service"
80 /bin/bash /opt/app/aai-schema-service/docker-entrypoint.sh
84 value: {{ .Values.securityContext.user_id | quote }}
85 - name: LOCAL_GROUP_ID
86 value: {{ .Values.securityContext.group_id | quote }}
87 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
88 - mountPath: /etc/localtime
91 - mountPath: /opt/app/aai-schema-service/resources/etc/appprops/aaiconfig.properties
93 subPath: aaiconfig.properties
94 - mountPath: /opt/aai/logroot/AAI-SS
96 - mountPath: /opt/app/aai-schema-service/resources/logback.xml
99 - mountPath: /opt/app/aai-schema-service/resources/localhost-access-logback.xml
100 name: localhost-access-log-conf
101 subPath: localhost-access-logback.xml
102 - mountPath: /opt/app/aai-schema-service/resources/etc/auth/realm.properties
104 subPath: realm.properties
105 - mountPath: /opt/app/aai-schema-service/resources/application.properties
107 subPath: application.properties
109 - containerPort: {{ .Values.service.internalPort }}
110 - containerPort: {{ .Values.service.internalPort2 }}
111 # disable liveness probe when breakpoints set in debugger
112 # so K8s doesn't restart unresponsive container
113 {{ if .Values.liveness.enabled }}
116 port: {{ .Values.service.internalPort }}
117 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
118 periodSeconds: {{ .Values.liveness.periodSeconds }}
122 port: {{ .Values.service.internalPort }}
123 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
124 periodSeconds: {{ .Values.readiness.periodSeconds }}
126 {{ include "common.resources" . | indent 12 }}
127 {{- if .Values.nodeSelector }}
129 {{ toYaml .Values.nodeSelector | indent 8 }}
131 {{- if .Values.affinity }}
133 {{ toYaml .Values.affinity | indent 8 }}
136 # side car containers
137 {{ include "common.log.sidecar" . | nindent 6 }}
138 serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
139 volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
140 - name: aai-common-aai-auth-mount
142 secretName: aai-common-aai-auth
148 {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }}
151 name: {{ include "common.fullname" . }}-log
152 - name: localhost-access-log-conf
154 name: {{ include "common.fullname" . }}-localhost-access-log
155 - name: springapp-conf
157 name: {{ include "common.fullname" . }}-springapp
158 - name: aaiconfig-conf
160 name: {{ include "common.fullname" . }}-aaiconfig
163 name: {{ include "common.fullname" . }}-realm
164 restartPolicy: {{ .Values.restartPolicy }}
166 - name: "{{ include "common.namespace" . }}-docker-registry-key"