2 # Copyright (c) 2017 Amdocs, Bell Canada
3 # Modifications Copyright (c) 2018 AT&T
4 # Modifications Copyright (c) 2020 Nokia, Orange
5 # Modifications Copyright (c) 2021 Orange
7 # Licensed under the Apache License, Version 2.0 (the "License");
8 # you may not use this file except in compliance with the License.
9 # You may obtain a copy of the License at
11 # http://www.apache.org/licenses/LICENSE-2.0
13 # Unless required by applicable law or agreed to in writing, software
14 # distributed under the License is distributed on an "AS IS" BASIS,
15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 # See the License for the specific language governing permissions and
17 # limitations under the License.
23 name: {{ include "common.fullname" . }}
24 namespace: {{ include "common.namespace" . }}
26 app: {{ include "common.name" . }}
27 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
28 release: {{ include "common.release" . }}
29 heritage: {{ .Release.Service }}
31 replicas: {{ .Values.replicaCount }}
32 minReadySeconds: {{ .Values.minReadySeconds }}
34 type: {{ .Values.updateStrategy.type }}
36 maxUnavailable: {{ .Values.updateStrategy.maxUnavailable }}
37 maxSurge: {{ .Values.updateStrategy.maxSurge }}
40 app: {{ include "common.name" . }}
44 app: {{ include "common.name" . }}
45 release: {{ include "common.release" . }}
46 name: {{ include "common.name" . }}
48 checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
49 {{- if .Values.global.msbEnabled }}
50 {{ $values := .Values }}
51 msb.onap.org/service-info: '[
52 {{- range $api_endpoint := $values.aai_enpoints -}}
53 {{- range $api_version := $values.api_list }}
55 "serviceName": "_{{ $api_endpoint.name }}",
56 "version": "v{{ $api_version }}",
57 "url": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}",
61 "lb_policy":"ip_hash",
63 "path": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}"
66 "serviceName": "{{ $api_endpoint.name }}",
67 "version": "v{{ $api_version }}",
68 "url": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}",
72 "lb_policy":"ip_hash",
78 "serviceName": "_aai-named-query",
83 "lb_policy":"ip_hash",
88 "serviceName": "aai-named-query",
93 "lb_policy":"ip_hash",
99 hostname: aai-traversal
100 terminationGracePeriodSeconds: {{ .Values.service.terminationGracePeriodSeconds }}
101 initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
105 {{- if .Values.global.jobs.migration.enabled }}
107 - {{ include "common.release" . }}-aai-graphadmin-migration
109 {{- if .Values.global.jobs.createSchema.enabled }}
111 - {{ include "common.release" . }}-aai-graphadmin-create-db-schema
114 {{- if .Values.global.cassandra.localCluster }}
128 fieldPath: metadata.namespace
129 image: {{ include "repositoryGenerator.image.readiness" . }}
130 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
131 name: {{ include "common.name" . }}-readiness
133 - name: {{ include "common.name" . }}
134 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
135 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
141 echo "*** retrieve Truststore and Keystore password"
142 export $(cat {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
143 echo "*** actual launch of AAI Resources"
144 /bin/bash /opt/app/aai-traversal/docker-entrypoint.sh
146 - name: TRUSTORE_ALL_PASSWORD
147 value: {{ .Values.certInitializer.truststorePassword }}
148 - name: DISABLE_UPDATE_QUERY
149 value: {{ .Values.config.disableUpdateQuery | quote }}
150 - name: LOCAL_USER_ID
151 value: {{ .Values.global.config.userId | quote }}
152 - name: LOCAL_GROUP_ID
153 value: {{ .Values.global.config.groupId | quote }}
154 - name: INTERNAL_PORT_1
155 value: {{ .Values.service.internalPort | quote }}
156 - name: INTERNAL_PORT_2
157 value: {{ .Values.service.internalPort2 | quote }}
158 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
159 - mountPath: /etc/localtime
162 - mountPath: /opt/app/aai-traversal/resources/etc/appprops/janusgraph-realtime.properties
163 name: {{ include "common.fullname" . }}-config
164 subPath: janusgraph-realtime.properties
165 - mountPath: /opt/app/aai-traversal/resources/etc/appprops/janusgraph-cached.properties
166 name: {{ include "common.fullname" . }}-config
167 subPath: janusgraph-cached.properties
168 - mountPath: /opt/app/aai-traversal/resources/etc/appprops/aaiconfig.properties
169 name: {{ include "common.fullname" . }}-config
170 subPath: aaiconfig.properties
171 - mountPath: /opt/aai/logroot/AAI-GQ
173 - mountPath: /opt/aai/logroot/AAI-GQ/misc
174 name: {{ include "common.fullname" . }}-logs-misc
175 - mountPath: /opt/app/aai-traversal/resources/logback.xml
176 name: {{ include "common.fullname" . }}-config
178 - mountPath: /opt/app/aai-traversal/resources/localhost-access-logback.xml
179 name: {{ include "common.fullname" . }}-config
180 subPath: localhost-access-logback.xml
181 - mountPath: /opt/app/aai-traversal/resources/etc/auth/realm.properties
182 name: {{ include "common.fullname" . }}-config
183 subPath: realm.properties
184 - mountPath: /opt/app/aai-traversal/resources/aaf/bath_config.csv
185 name: {{ include "common.fullname" . }}-aaf-certs
186 subPath: bath_config.csv
187 - mountPath: /opt/app/aai-traversal/resources/aaf/org.onap.aai.props
188 name: {{ include "common.fullname" . }}-aaf-properties
189 subPath: org.onap.aai.props
190 - mountPath: /opt/app/aai-traversal/resources/aaf/org.osaaf.location.props
191 name: {{ include "common.fullname" . }}-aaf-properties
192 subPath: org.osaaf.location.props
193 - mountPath: /opt/app/aai-traversal/resources/aaf/permissions.properties
194 name: {{ include "common.fullname" . }}-aaf-properties
195 subPath: permissions.properties
196 - mountPath: /opt/app/aai-traversal/resources/cadi.properties
197 name: {{ include "common.fullname" . }}-aaf-properties
198 subPath: cadi.properties
199 - mountPath: /opt/app/aai-traversal/resources/application.properties
200 name: {{ include "common.fullname" . }}-config
201 subPath: application.properties
202 - mountPath: /opt/app/aai-traversal/resources/application-keycloak.properties
203 name: {{ include "common.fullname" . }}-config
204 subPath: application-keycloak.properties
206 - containerPort: {{ .Values.service.internalPort }}
207 - containerPort: {{ .Values.service.internalPort2 }}
209 # wait for active requests (long-running tasks) to be finished
210 # Before the SIGTERM is invoked, Kubernetes exposes a preStop hook in the Pod.
217 while (netstat -an | grep ESTABLISHED | grep -e $INTERNAL_PORT_1 -e $INTERNAL_PORT_2)
220 # disable liveness probe when breakpoints set in debugger
221 # so K8s doesn't restart unresponsive container
222 {{ if .Values.liveness.enabled }}
225 port: {{ .Values.service.internalPort }}
226 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
227 periodSeconds: {{ .Values.liveness.periodSeconds }}
231 port: {{ .Values.service.internalPort }}
232 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
233 periodSeconds: {{ .Values.readiness.periodSeconds }}
235 {{ include "common.resources" . }}
236 {{- if .Values.nodeSelector }}
238 {{ toYaml .Values.nodeSelector | indent 8 }}
240 {{- if .Values.affinity }}
242 {{ toYaml .Values.affinity | indent 8 }}
245 # side car containers
246 {{ include "common.log.sidecar" . | nindent 6 }}
247 serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
248 volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
254 - name: {{ include "common.fullname" . }}-logs-misc
256 {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }}
257 - name: {{ include "common.fullname" . }}-config
259 name: {{ include "common.fullname" . }}
260 - name: {{ include "common.fullname" . }}-aaf-properties
262 name: {{ include "common.fullname" . }}-aaf-props
263 - name: {{ include "common.fullname" . }}-aaf-certs
265 secretName: {{ include "common.fullname" . }}-aaf
266 - name: aai-common-aai-auth-mount
268 secretName: aai-common-aai-auth
269 restartPolicy: {{ .Values.global.restartPolicy | default .Values.restartPolicy }}
271 - name: "{{ include "common.namespace" . }}-docker-registry-key"