1 apiVersion: extensions/v1beta1
4 name: {{ include "common.fullname" . }}
5 namespace: {{ include "common.namespace" . }}
7 app: {{ include "common.name" . }}
8 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
9 release: {{ include "common.release" . }}
10 heritage: {{ .Release.Service }}
12 replicas: {{ .Values.replicaCount }}
16 app: {{ include "common.name" . }}
17 release: {{ include "common.release" . }}
24 - {{ include "common.release" . }}-galera-config
30 fieldPath: metadata.namespace
31 image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
32 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
33 name: {{ include "common.name" . }}-readiness
38 - "cd /config-input && for PFILE in `ls -1 .`; do envsubst <${PFILE} >/config/${PFILE}; done"
40 - name: RESTSERVER_USER
41 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-creds" "key" "login") | indent 10 }}
42 - name: RESTSERVER_PASSWORD
43 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-creds" "key" "password") | indent 10 }}
45 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "api-creds" "key" "login") | indent 10 }}
47 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "api-creds" "key" "password") | indent 10 }}
49 - mountPath: /config-input
52 name: pdpxconfig-processed
53 image: "{{ .Values.global.envsubstImage }}"
54 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
55 name: {{ include "common.name" . }}-update-config
57 - name: {{ include "common.name" . }}
58 image: "{{ include "common.repository" . }}/{{ .Values.image }}"
59 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
60 command: ["/opt/app/policy/pdpx/bin/policy-pdpx.sh"]
61 args: ["/opt/app/policy/pdpx/etc/mounted/config.json"]
64 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "login") | indent 12 }}
66 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "password") | indent 12 }}
68 - containerPort: {{ .Values.service.internalPort }}
69 # disable liveness probe when breakpoints set in debugger
70 # so K8s doesn't restart unresponsive container
71 {{- if eq .Values.liveness.enabled true }}
74 port: {{ .Values.service.internalPort }}
75 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
76 periodSeconds: {{ .Values.liveness.periodSeconds }}
80 port: {{ .Values.service.internalPort }}
81 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
82 periodSeconds: {{ .Values.readiness.periodSeconds }}
84 - mountPath: /etc/localtime
87 - mountPath: /opt/app/policy/pdpx/etc/mounted
88 name: pdpxconfig-processed
92 {{ include "common.resources" . | indent 12 }}
93 {{- if .Values.nodeSelector }}
95 {{ toYaml .Values.nodeSelector | indent 10 }}
97 {{- if .Values.affinity }}
99 {{ toYaml .Values.affinity | indent 10 }}
107 name: {{ include "common.fullname" . }}-configmap
109 - name: pdpxconfig-processed
113 - name: "{{ include "common.namespace" . }}-docker-registry-key"