Merge "[SDC] Change default access mode for cert PVC"
[oom.git] / kubernetes / oof / templates / deployment.yaml
1 # Copyright © 2017 Amdocs, Bell Canada
2 # Modifications Copyright © 2018 AT&T,VMware
3 #
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
7 #
8 #       http://www.apache.org/licenses/LICENSE-2.0
9 #
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15
16 apiVersion: extensions/v1beta1
17 kind: Deployment
18 metadata:
19   name: {{ include "common.fullname" . }}
20   namespace: {{ include "common.namespace" . }}
21   labels:
22     app: {{ include "common.name" . }}
23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
24     release: {{ include "common.release" . }}
25     heritage: {{ .Release.Service }}
26 spec:
27   replicas: {{ .Values.replicaCount }}
28   template:
29     metadata:
30       labels:
31         app: {{ include "common.name" . }}
32         release: {{ include "common.release" . }}
33     spec:
34       initContainers:
35       - command:
36         - /root/ready.py
37         args:
38         - --container-name
39         - pdp
40         env:
41         - name: NAMESPACE
42           valueFrom:
43             fieldRef:
44               apiVersion: v1
45               fieldPath: metadata.namespace
46         image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
47         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
48         name: {{ include "common.name" . }}-readiness
49       - command:
50         - sh
51         - -c
52         - resp="FAILURE";
53           until [ $resp = "200" ]; do
54           resp=$(curl -s -o /dev/null -k --write-out %{http_code} https://aaf-sms.{{ include "common.namespace" . }}:10443/v1/sms/domain/osdf/secret);
55           echo $resp;
56           sleep 2;
57           done
58         env:
59         - name: NAMESPACE
60           valueFrom:
61             fieldRef:
62               apiVersion: v1
63               fieldPath: metadata.namespace
64         image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
65         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
66         name: {{ include "common.name" . }}-osdf-sms-readiness
67       containers:
68         - name: {{ include "common.name" . }}
69           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
70           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
71           ports:
72           - containerPort: {{ .Values.service.internalPort }}
73           # disable liveness probe when breakpoints set in debugger
74           # so K8s doesn't restart unresponsive container
75           {{- if .Values.liveness.enabled }}
76           livenessProbe:
77             tcpSocket:
78               port: {{ .Values.service.internalPort }}
79             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
80             periodSeconds: {{ .Values.liveness.periodSeconds }}
81           {{ end -}}
82           readinessProbe:
83             tcpSocket:
84               port: {{ .Values.service.internalPort }}
85             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
86             periodSeconds: {{ .Values.readiness.periodSeconds }}
87           env:
88           volumeMounts:
89           - mountPath: /etc/localtime
90             name: localtime
91             readOnly: true
92           - mountPath: /opt/app/config/osdf_config.yaml
93             name: {{ include "common.fullname" . }}-config
94             subPath: osdf_config.yaml
95           - mountPath: /opt/app/ssl_cert/aaf_root_ca.cer
96             name: {{ include "common.fullname" . }}-config
97             subPath: aaf_root_ca.cer
98           - mountPath: /opt/app/ssl_cert/org.onap.oof.crt
99             name: {{ include "common.fullname" . }}-config
100             subPath: org.onap.oof.crt
101           - mountPath: /opt/app/ssl_cert/org.onap.oof.key
102             name: {{ include "common.fullname" . }}-config
103             subPath: org.onap.oof.key
104           - mountPath: /opt/osdf/config/common_config.yaml
105             name: {{ include "common.fullname" . }}-config
106             subPath: common_config.yaml
107           resources:
108 {{ include "common.resources" . | indent 12 }}
109         {{- if .Values.nodeSelector }}
110         nodeSelector:
111 {{ toYaml .Values.nodeSelector | indent 10 }}
112         {{- end -}}
113         {{- if .Values.affinity }}
114         affinity:
115 {{ toYaml .Values.affinity | indent 10 }}
116         {{- end }}
117
118       volumes:
119         - name: localtime
120           hostPath:
121             path: /etc/localtime
122         - name: {{ include "common.fullname" . }}-config
123           configMap:
124             name: {{ include "common.fullname" . }}-configmap
125             items:
126             - key: osdf_config.yaml
127               path: osdf_config.yaml
128             - key: aaf_root_ca.cer
129               path: aaf_root_ca.cer
130             - key: common_config.yaml
131               path: common_config.yaml
132             - key: org.onap.oof.crt
133               path: org.onap.oof.crt
134             - key: org.onap.oof.key
135               path: org.onap.oof.key
136       imagePullSecrets:
137       - name: "{{ include "common.namespace" . }}-docker-registry-key"