2 # Copyright © 2020 Samsung Electronics
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
8 # http://www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
19 {{- define "common.certInitializer._aafConfigVolumeName" -}}
20 {{ include "common.fullname" . }}-aaf-config
23 {{- define "common.certInitializer._aafAddConfigVolumeName" -}}
24 {{ print "aaf-add-config" }}
28 common templates to enable cert initialization for applictaions
30 In deployments/jobs/stateful include:
32 {{ include "common.certInitializer.initContainer" . | nindent XX }}
36 {{- include "common.certInitializer.volumeMount" . | nindent XX }}
38 {{- include "common.certInitializer.volume" . | nindent XX}}
40 {{- define "common.certInitializer._initContainer" -}}
41 {{- $dot := default . .dot -}}
42 {{- $initRoot := default $dot.Values.certInitializer .initRoot -}}
43 {{- $initName := default "certInitializer" -}}
44 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
45 {{ include "common.readinessCheck.waitFor" $subchartDot }}
46 - name: {{ include "common.name" $dot }}-aaf-config
47 image: {{ include "common.repository" $subchartDot }}/{{ $subchartDot.Values.global.aafAgentImage }}
48 imagePullPolicy: {{ $subchartDot.Values.global.pullPolicy | default $subchartDot.Values.pullPolicy }}
50 - mountPath: {{ $initRoot.mountPath }}
51 name: {{ include "common.certInitializer._aafConfigVolumeName" $dot }}
52 - mountPath: /opt/app/aaf_config/cert/truststoreONAPall.jks.b64
54 subPath: truststoreONAPall.jks.b64
55 - mountPath: /opt/app/aaf_config/cert/truststoreONAP.p12.b64
57 subPath: truststoreONAP.p12.b64
58 {{- if $initRoot.aaf_add_config }}
59 - name: {{ include "common.certInitializer._aafAddConfigVolumeName" $dot }}
60 mountPath: /opt/app/aaf_config/bin/aaf-add-config.sh
61 subPath: aaf-add-config.sh
68 /opt/app/aaf_config/bin/agent.sh
69 {{- if $initRoot.aaf_add_config }}
70 /opt/app/aaf_config/bin/aaf-add-config.sh
74 value: "{{ $initRoot.fqi }}"
75 - name: aaf_locate_url
76 value: "https://aaf-locate.{{ $dot.Release.Namespace}}:8095"
77 - name: aaf_locator_container
79 - name: aaf_locator_container_ns
80 value: "{{ $dot.Release.Namespace }}"
81 - name: aaf_locator_fqdn
82 value: "{{ $initRoot.fqdn }}"
83 - name: aaf_locator_app_ns
84 value: "{{ $initRoot.app_ns }}"
86 {{- include "common.secret.envFromSecretFast" (dict "global" $subchartDot "uid" "deployer-creds" "key" "login") | indent 6 }}
87 - name: DEPLOY_PASSWORD
88 {{- include "common.secret.envFromSecretFast" (dict "global" $subchartDot "uid" "deployer-creds" "key" "password") | indent 6 }}
89 #Note: want to put this on Nodes, eventually
90 - name: cadi_longitude
91 value: "{{ default "52.3" $initRoot.cadi_longitude }}"
93 value: "{{ default "13.2" $initRoot.cadi_latitude }}"
94 #Hello specific. Clients don't don't need this, unless Registering with AAF Locator
95 - name: aaf_locator_public_fqdn
96 value: "{{ $initRoot.public_fqdn | default "" }}"
99 {{- define "common.certInitializer._volumeMount" -}}
100 {{- $dot := default . .dot -}}
101 {{- $initRoot := default $dot.Values.certInitializer .initRoot -}}
102 - mountPath: {{ $initRoot.mountPath }}
103 name: {{ include "common.certInitializer._aafConfigVolumeName" $dot }}
106 {{- define "common.certInitializer._volumes" -}}
107 {{- $dot := default . .dot -}}
108 {{- $initRoot := default $dot.Values.certInitializer .initRoot -}}
109 {{- $subchartDot := mergeOverwrite (deepCopy (omit $dot "Values")) (dict "Chart" (set (fromJson (toJson $dot.Chart)) "Name" $initRoot.nameOverride) "Values" (mergeOverwrite (deepCopy $initRoot) (dict "global" $dot.Values.global))) }}
110 - name: {{ include "common.certInitializer._aafConfigVolumeName" $dot }}
113 - name: aaf-agent-certs
115 name: {{ include "common.fullname" $subchartDot }}-certs
118 {{- if $initRoot.aaf_add_config }}
119 - name: {{ include "common.certInitializer._aafAddConfigVolumeName" $dot }}
121 name: {{ include "common.fullname" $subchartDot }}-add-config
126 {{- define "common.certInitializer.initContainer" -}}
127 {{- $dot := default . .dot -}}
128 {{- if $dot.Values.global.aafEnabled }}
129 {{ include "common.certInitializer._initContainer" . }}
133 {{- define "common.certInitializer.volumeMount" -}}
134 {{- $dot := default . .dot -}}
135 {{- if $dot.Values.global.aafEnabled }}
136 {{- include "common.certInitializer._volumeMount" . }}
140 {{- define "common.certInitializer.volumes" -}}
141 {{- $dot := default . .dot -}}
142 {{- if $dot.Values.global.aafEnabled }}
143 {{- include "common.certInitializer._volumes" . }}