1 # Modifications Copyright © 2018 AT&T
3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
7 # http://www.apache.org/licenses/LICENSE-2.0
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 # See the License for the specific language governing permissions and
13 # limitations under the License.
15 apiVersion: apps/v1beta1
18 name: {{ include "common.fullname" . }}
19 namespace: {{ include "common.namespace" . }}
21 app: {{ include "common.name" . }}
22 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
23 release: {{ include "common.release" . }}
24 heritage: {{ .Release.Service }}
26 serviceName: {{ .Values.service.name }}
27 replicas: {{ .Values.replicaCount }}
28 podManagementPolicy: Parallel
32 app: {{ include "common.name" . }}
33 release: {{ include "common.release" . }}
34 {{- if .Values.prometheus.jmx.enabled }}
36 prometheus.io/scrape: "true"
37 prometheus.io/port: {{ .Values.prometheus.jmx.port | quote }}
41 {{if eq .Values.podAntiAffinityType "hard" -}}
42 requiredDuringSchedulingIgnoredDuringExecution:
44 preferredDuringSchedulingIgnoredDuringExecution:
53 - {{ include "common.name" . }}
57 - {{ include "common.release" . }}
58 topologyKey: "kubernetes.io/hostname"
59 {{- if .Values.nodeAffinity }}
61 {{ toYaml .Values.nodeAffinity | indent 10 }}
64 - name: {{ include "common.name" . }}-initcontainer
65 image: "{{ .Values.global.ubuntuInitRepository }}/{{ .Values.ubuntuInitImage }}"
66 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
71 - {{ .Values.zookeeper.name }}
77 fieldPath: metadata.namespace
78 image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
79 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
80 name: {{ include "common.name" . }}-readiness
85 chown -R 1000:0 /var/lib/kafka/data;
86 image: "{{ .Values.busyBoxRepository }}/{{ .Values.busyBoxImage }}"
87 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
89 - mountPath: /var/lib/kafka/data
91 name: {{ include "common.name" . }}-permission-fixer
96 - "cd /config-input && for PFILE in `ls -1 .`; do envsubst <${PFILE} >/etc/kafka/secrets/jaas/${PFILE}; done"
99 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "zk-client" "key" "login") | indent 10 }}
101 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "zk-client" "key" "password") | indent 10 }}
103 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "kafka-admin" "key" "login") | indent 10 }}
105 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "kafka-admin" "key" "password") | indent 10 }}
107 - mountPath: /etc/kafka/secrets/jaas
109 - mountPath: /config-input
111 image: "{{ .Values.global.envsubstImage }}"
112 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
113 name: {{ include "common.name" . }}-update-config
115 {{- if .Values.prometheus.jmx.enabled }}
116 - name: prometheus-jmx-exporter
117 image: "{{ .Values.prometheus.jmx.imageRepository }}/{{ .Values.prometheus.jmx.image }}:{{ .Values.prometheus.jmx.imageTag }}"
118 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
121 - -XX:+UnlockExperimentalVMOptions
122 - -XX:+UseCGroupMemoryLimitForHeap
123 - -XX:MaxRAMFraction=1
126 - jmx_prometheus_httpserver.jar
127 - {{ .Values.prometheus.jmx.port | quote }}
128 - /etc/jmx-kafka/jmx-kafka-prometheus.yml
130 - containerPort: {{ .Values.prometheus.jmx.port }}
132 {{ toYaml .Values.prometheus.jmx.resources | indent 10 }}
135 mountPath: /etc/jmx-kafka
137 - name: {{ include "common.name" . }}
138 image: "{{ include "common.repository" . }}/{{ .Values.image }}"
139 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
144 export KAFKA_BROKER_ID=${HOSTNAME##*-} && \
145 {{- if .Values.global.aafEnabled }}
146 export KAFKA_ADVERTISED_LISTENERS=EXTERNAL_SASL_PLAINTEXT://$(HOST_IP):$(( $KAFKA_BROKER_ID + {{ .Values.service.baseNodePort }} )),INTERNAL_SASL_PLAINTEXT://:{{ .Values.service.internalPort }} && \
148 export KAFKA_ADVERTISED_LISTENERS=EXTERNAL_PLAINTEXT://$(HOST_IP):$(( $KAFKA_BROKER_ID + {{ .Values.service.baseNodePort }} )),INTERNAL_PLAINTEXT://:{{ .Values.service.internalPort }} && \
150 exec /etc/confluent/docker/run
152 {{ include "common.resources" . | indent 12 }}
154 - containerPort: {{ .Values.service.internalPort }}
155 - containerPort: {{ .Values.service.externalPort }}
156 {{- if .Values.prometheus.jmx.enabled }}
157 - containerPort: {{ .Values.jmx.port }}
160 {{ if eq .Values.liveness.enabled true }}
163 port: {{ .Values.service.internalPort }}
164 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
165 periodSeconds: {{ .Values.liveness.periodSeconds }}
166 timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
170 port: {{ .Values.service.internalPort }}
171 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
172 periodSeconds: {{ .Values.readiness.periodSeconds }}
173 timeoutSeconds: {{ .Values.readiness.timeoutSeconds }}
179 fieldPath: status.hostIP
180 - name: KAFKA_ZOOKEEPER_CONNECT
181 value: {{ include "common.release" . }}-{{.Values.zookeeper.name}}-0.{{.Values.zookeeper.name}}.{{.Release.Namespace}}.svc.cluster.local:{{.Values.zookeeper.port}},{{ include "common.release" . }}-{{.Values.zookeeper.name}}-1.{{.Values.zookeeper.name}}.{{.Release.Namespace}}.svc.cluster.local:{{.Values.zookeeper.port}},{{ include "common.release" . }}-{{.Values.zookeeper.name}}-2.{{.Values.zookeeper.name}}.{{.Release.Namespace}}.svc.cluster.local:{{.Values.zookeeper.port}}
182 - name: KAFKA_CONFLUENT_SUPPORT_METRICS_ENABLE
183 value: "{{ .Values.kafka.enableSupport }}"
185 value: "{{ .Values.kafka.jaasOptions }}"
186 {{- if .Values.global.aafEnabled }}
188 value: "{{ .Values.kafka.jaasOptionsAaf }}"
189 - name: aaf_locate_url
190 value: https://aaf-locate.{{ include "common.namespace" . }}:8095
191 - name: KAFKA_LISTENER_SECURITY_PROTOCOL_MAP
192 value: "{{ .Values.kafka.protocolMapAaf }}"
193 - name: KAFKA_LISTENERS
194 value: "{{ .Values.kafka.listenersAaf }}"
195 - name: KAFKA_SASL_ENABLED_MECHANISMS
196 value: "{{ .Values.kafka.saslMech }}"
197 - name: KAFKA_INTER_BROKER_LISTENER_NAME
198 value: "{{ .Values.kafka.interBrokerListernerAaf }}"
199 - name: KAFKA_SASL_MECHANISM_INTER_BROKER_PROTOCOL
200 value: "{{ .Values.kafka.saslInterBrokerProtocol }}"
201 - name: KAFKA_AUTHORIZER_CLASS_NAME
202 value: "{{ .Values.kafka.authorizer }}"
205 value: "{{ .Values.kafka.jaasOptions }}"
206 - name: KAFKA_LISTENER_SECURITY_PROTOCOL_MAP
207 value: "{{ .Values.kafka.protocolMap }}"
208 - name: KAFKA_LISTENERS
209 value: "{{ .Values.kafka.listeners }}"
210 - name: KAFKA_INTER_BROKER_LISTENER_NAME
211 value: "{{ .Values.kafka.interBrokerListerner }}"
213 {{- range $key, $value := .Values.configurationOverrides }}
214 - name: {{ printf "KAFKA_%s" $key | replace "." "_" | upper | quote }}
215 value: {{ $value | quote }}
217 {{- if .Values.jmx.port }}
218 - name: KAFKA_JMX_PORT
219 value: "{{ .Values.jmx.port }}"
222 value: "{{ .Values.global.aafEnabled }}"
224 - mountPath: /etc/localtime
227 - mountPath: /var/run/docker.sock
229 {{- if .Values.global.aafEnabled }}
230 - mountPath: /etc/kafka/data/cadi.properties
231 subPath: cadi.properties
235 mountPath: /etc/kafka/secrets/jaas
236 - mountPath: /var/lib/kafka/data
238 {{- if .Values.tolerations }}
240 {{ toYaml .Values.tolerations | indent 10 }}
249 - name: docker-socket
251 path: /var/run/docker.sock
252 {{- if .Values.global.aafEnabled }}
255 name: {{ include "common.fullname" . }}-cadi-prop-configmap
259 name: {{ include "common.fullname" . }}-jaas-configmap
260 {{- if .Values.prometheus.jmx.enabled }}
263 name: {{ include "common.fullname" . }}-prometheus-configmap
265 {{ if not .Values.persistence.enabled }}
269 volumeClaimTemplates:
273 app: {{ include "common.fullname" . }}
274 chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
275 release: "{{ include "common.release" . }}"
276 heritage: "{{ .Release.Service }}"
279 - {{ .Values.persistence.accessMode | quote }}
280 storageClassName: {{ include "common.storageClass" . }}
283 storage: {{ .Values.persistence.size | quote }}
286 - name: "{{ include "common.namespace" . }}-docker-registry-key"