kubernetes/pomba/charts/pomba-validation-service/templates/deployment.yaml

   1 # Copyright © 2017 Amdocs, Bell Canada
   2 #
   3 # Licensed under the Apache License, Version 2.0 (the "License");
   4 # you may not use this file except in compliance with the License.
   5 # You may obtain a copy of the License at
   6 #
   7 #       http://www.apache.org/licenses/LICENSE-2.0
   8 #
   9 # Unless required by applicable law or agreed to in writing, software
  10 # distributed under the License is distributed on an "AS IS" BASIS,
  11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12 # See the License for the specific language governing permissions and
  13 # limitations under the License.
  14
  15 apiVersion: extensions/v1beta1
  16 kind: Deployment
  17 metadata:
  18   name: {{ include "common.fullname" . }}
  19   namespace: {{ include "common.namespace" . }}
  20   labels:
  21     app: {{ include "common.name" . }}
  22     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  23     release: {{ include "common.release" . }}
  24     heritage: {{ .Release.Service }}
  25 spec:
  26   replicas: {{ .Values.replicaCount }}
  27   template:
  28     metadata:
  29       labels:
  30         app: {{ include "common.name" . }}
  31         release: {{ include "common.release" . }}
  32     spec:
  33       containers:
  34         - name: {{ include "common.name" . }}
  35           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  36           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  37           ports:
  38           - containerPort: {{ .Values.service.internalPort }}
  39           # disable liveness probe when breakpoints set in debugger
  40           # so K8s doesn't restart unresponsive container
  41           {{ if .Values.liveness.enabled }}
  42           livenessProbe:
  43             tcpSocket:
  44               port: {{ .Values.service.internalPort }}
  45             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  46             periodSeconds: {{ .Values.liveness.periodSeconds }}
  47           {{ end }}
  48           {{ if .Values.readiness.enabled }}
  49           readinessProbe:
  50             tcpSocket:
  51               port: {{ .Values.service.internalPort }}
  52             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  53             periodSeconds: {{ .Values.readiness.periodSeconds }}
  54           {{ end }}
  55           env:
  56             - name: APP_HOME
  57               value: "{{ .Values.config.appDir }}"
  58             - name: CONFIG_HOME
  59               value: "{{ .Values.config.configDir }}"
  60             - name: MAX_HEAP
  61               value: "{{ .Values.config.maxHeap }}"
  62           volumeMounts:
  63           - mountPath: /etc/localtime
  64             name: localtime
  65             readOnly: true
  66           - mountPath: {{ .Values.config.appDir }}/application.properties
  67             name: root-config-app-prop
  68             subPath: application.properties
  69           - mountPath: {{ .Values.config.configDir }}/
  70             name: properties
  71           - mountPath: {{ .Values.config.configAuthDir }}/
  72             name: config-auth
  73           - mountPath: {{ .Values.config.configTopicsDir }}/
  74             name: config-topics
  75           - mountPath: {{ .Values.config.rulesDir }}/
  76             name: rules
  77           resources:
  78 {{ include "common.resources" . | indent 12 }}
  79         {{- if .Values.nodeSelector }}
  80         nodeSelector:
  81 {{ toYaml .Values.nodeSelector | indent 10 }}
  82         {{- end -}}
  83         {{- if .Values.affinity }}
  84         affinity:
  85 {{ toYaml .Values.affinity | indent 10 }}
  86         {{- end }}
  87
  88         # Filebeat sidecar container
  89         - name: {{ include "common.name" . }}-filebeat-onap
  90           image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
  91           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  92           volumeMounts:
  93           - name: {{ include "common.fullname" . }}-filebeat-conf
  94             mountPath: /usr/share/filebeat/filebeat.yml
  95             subPath: filebeat.yml
  96           - name: {{ include "common.fullname" . }}-data-filebeat
  97             mountPath: /usr/share/filebeat/data
  98           - name: {{ include "common.fullname" . }}-logs
  99             mountPath: /opt/app/logs
 100
 101       volumes:
 102         - name: localtime
 103           hostPath:
 104             path: /etc/localtime
 105         - name: {{ include "common.fullname" . }}-filebeat-conf
 106           configMap:
 107             name: {{ include "common.release" . }}-pomba-filebeat-configmap
 108         - name: {{ include "common.fullname" . }}-data-filebeat
 109           emptyDir: {}
 110         - name: root-config-app-prop
 111           configMap:
 112             name: {{ include "common.fullname" . }}-root-config
 113             defaultMode: 0644
 114         - name:  {{ include "common.fullname" . }}-logs
 115           emptyDir: {}
 116         - name: properties
 117           configMap:
 118             name: {{ include "common.fullname" . }}-config-properties
 119             defaultMode: 0644
 120             items:
 121             - key: validation-service.properties
 122               path: validation-service.properties
 123             - key: validation-service-auth.properties
 124               path: validation-service-auth.properties
 125             - key: rule-indexing.properties
 126               path: rule-indexing.properties
 127             - key: rule-data-dictionary.properties
 128               path: rule-data-dictionary.properties
 129             - key: aai-environment.properties
 130               path: aai-environment.properties
 131             - key: schemaIngest.properties
 132               path: schemaIngest.properties
 133             - key: auth_policy.json
 134               path: auth_policy.json
 135         - name: config-auth
 136           secret:
 137             secretName: {{ include "common.fullname" . }}-config-auth-secret
 138             items:
 139             - key: tomcat_keystore
 140               path: tomcat_keystore
 141             - key: client-cert-onap.p12
 142               path: client-cert-onap.p12
 143         - name: config-topics
 144           configMap:
 145             name: {{ include "common.fullname" . }}-config-topics
 146             defaultMode: 0644
 147             items:
 148             - key: topic-poa-audit-result.properties
 149               path: topic-poa-audit-result.properties
 150             - key: topic-poa-rule-validation.properties
 151               path: topic-poa-rule-validation.properties
 152         - name: rules
 153           configMap:
 154             name: {{ include "common.fullname" . }}-rules
 155             defaultMode: 0644
 156             items:
 157             - key: default-rules.groovy
 158               path: default-rules.groovy
 159       imagePullSecrets:
 160       - name: "{{ include "common.namespace" . }}-docker-registry-key"