kubernetes/sdc/components/sdc-onboarding-be/templates/deployment.yaml

   1 {{/*
   2 # Copyright © 2017 Amdocs, AT&T, Bell Canada
   3 # Modifications Copyright © 2018  ZTE
   4 #
   5 # Licensed under the Apache License, Version 2.0 (the "License");
   6 # you may not use this file except in compliance with the License.
   7 # You may obtain a copy of the License at
   8 #
   9 #       http://www.apache.org/licenses/LICENSE-2.0
  10 #
  11 # Unless required by applicable law or agreed to in writing, software
  12 # distributed under the License is distributed on an "AS IS" BASIS,
  13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14 # See the License for the specific language governing permissions and
  15 # limitations under the License.
  16 */}}
  17
  18 apiVersion: apps/v1
  19 kind: Deployment
  20 metadata:
  21   name: {{ include "common.fullname" . }}
  22   namespace: {{ include "common.namespace" . }}
  23   labels:
  24     app: {{ include "common.name" . }}
  25     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  26     release: {{ include "common.release" . }}
  27     heritage: {{ .Release.Service }}
  28 spec:
  29   selector:
  30     matchLabels:
  31       app: {{ include "common.name" . }}
  32   replicas: {{ .Values.replicaCount }}
  33   template:
  34     metadata:
  35       labels:
  36         app: {{ include "common.name" . }}
  37         release: {{ include "common.release" . }}
  38     spec:
  39       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
  40       - name: {{ include "common.name" . }}-job-completion
  41         image: {{ include "repositoryGenerator.image.readiness" . }}
  42         imagePullPolicy: "{{ .Values.global.pullPolicy | default .Values.pullPolicy }}"
  43         command:
  44         - /app/ready.py
  45         args:
  46         - --job-name
  47         - {{ include "common.release" . }}-sdc-onboarding-be-cassandra-init
  48         env:
  49         - name: NAMESPACE
  50           valueFrom:
  51             fieldRef:
  52               apiVersion: v1
  53               fieldPath: metadata.namespace
  54         resources:
  55           limits:
  56             cpu: 100m
  57             memory: 100Mi
  58           requests:
  59             cpu: 3m
  60             memory: 20Mi
  61       {{- if .Values.global.aafEnabled }}
  62       - name: {{ include "common.name" . }}-update-config
  63         image: {{ include "repositoryGenerator.image.envsubst" . }}
  64         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  65         command:
  66         - sh
  67         args:
  68         - "-c"
  69         - |
  70           export $(grep '^c' {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
  71           export KEYSTORE_PASS=$cadi_keystore_password_p12
  72           export KEYMANAGER_PASS=$cadi_keystore_password_p12
  73           export TRUSTSTORE_PASS=$cadi_truststore_password
  74           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.keystoreFile }} /config-output
  75           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.truststoreFile }} /config-output
  76           cd /config-input && \
  77           for PFILE in `find . -not -type d | grep -v -F ..`
  78           do
  79             envsubst <${PFILE} >/config-output/${PFILE}
  80             chmod 0755 /config-output/${PFILE}
  81           done
  82         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 10 }}
  83           - name: {{ include "common.fullname" . }}-environments
  84             mountPath: /config-input/
  85           - name: sdc-environments-output
  86             mountPath: /config-output/
  87         resources:
  88           limits:
  89             cpu: 100m
  90             memory: 100Mi
  91           requests:
  92             cpu: 3m
  93             memory: 20Mi
  94       {{- end }}
  95       - name: volume-permissions
  96         image: {{ include "repositoryGenerator.image.busybox" . }}
  97         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  98         command:
  99           - sh
 100         args:
 101           - "-c"
 102           - |
 103             chown -R {{ .Values.securityContext.runAsUser }}:{{ .Values.securityContext.fsGroup }} //onboard/cert
 104         securityContext:
 105           runAsUser: 0
 106         volumeMounts:
 107           - name: {{ include "common.fullname" . }}-cert-storage
 108             mountPath: "/onboard/cert"
 109         resources:
 110           limits:
 111             cpu: 100m
 112             memory: 100Mi
 113           requests:
 114             cpu: 3m
 115             memory: 20Mi
 116       containers:
 117         - name: {{ include "common.name" . }}
 118           image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
 119           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 120           ports:
 121           - containerPort: {{ .Values.service.internalPort }}
 122           - containerPort: {{ .Values.service.internalPort2 }}
 123           {{ if eq .Values.liveness.enabled true }}
 124           livenessProbe:
 125             exec:
 126               command:
 127               - "/var/lib/jetty/ready-probe.sh"
 128             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 129             periodSeconds: {{ .Values.liveness.periodSeconds }}
 130             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
 131           {{ end }}
 132           readinessProbe:
 133             exec:
 134               command:
 135               - "/var/lib/jetty/ready-probe.sh"
 136             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 137             periodSeconds: {{ .Values.readiness.periodSeconds }}
 138             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
 139           resources: {{ include "common.resources" . | nindent 12 }}
 140           env:
 141           - name: ENVNAME
 142             value: {{ .Values.env.name }}
 143           - name: JAVA_OPTIONS
 144             value: {{ .Values.config.javaOptions }}
 145           - name: SDC_CLUSTER_NAME
 146             value: "SDC-CS-{{ .Values.env.name }}"
 147           - name: cassandra_ssl_enabled
 148             value: {{ .Values.config.cassandraSslEnabled | quote }}
 149           - name: HOST_IP
 150             valueFrom:
 151               fieldRef:
 152                 fieldPath: status.podIP
 153           - name: SDC_USER
 154             valueFrom:
 155               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_user}
 156           - name: SDC_PASSWORD
 157             valueFrom:
 158               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_password}
 159           - name: SDC_CERT_DIR
 160             value: {{ .Values.cert.certDir }}
 161           volumeMounts:
 162           - name: sdc-environments-output
 163             mountPath: /var/lib/jetty/chef-solo/environments/
 164           - name: sdc-environments-output
 165             mountPath: /var/lib/jetty/chef-solo/cookbooks/sdc-onboard-backend/files/default/org.onap.sdc.p12
 166             subPath: org.onap.sdc.p12
 167           - name: sdc-environments-output
 168             mountPath: /var/lib/jetty/chef-solo/cookbooks/sdc-onboard-backend/files/default/org.onap.sdc.trust.jks
 169             subPath: org.onap.sdc.trust.jks
 170           - name: {{ include "common.fullname" . }}-localtime
 171             mountPath: /etc/localtime
 172             readOnly: true
 173           - name: {{ include "common.fullname" . }}-logs
 174             mountPath: /var/log/onap
 175           - name: {{ include "common.fullname" . }}-cert-storage
 176             mountPath: "{{ .Values.cert.certDir }}"
 177           - name: {{ include "common.fullname" . }}-logback
 178             mountPath: /tmp/logback.xml
 179             subPath: logback.xml
 180           lifecycle:
 181             postStart:
 182               exec:
 183                 command: ["/bin/sh", "-c", "export LOG=wait_logback.log; touch $LOG; export SRC=/tmp/logback.xml; export DST=/var/lib/jetty/config/onboarding-be/; while [ ! -e $DST ]; do echo 'Waiting for $DST...' >> $LOG; sleep 5; done; sleep 2; /bin/cp -f $SRC $DST; echo 'Done' >> $LOG"]
 184         # side car containers
 185         - name: {{ include "common.name" . }}-filebeat-onap
 186           image: {{ include "repositoryGenerator.image.logging" . }}
 187           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 188           volumeMounts:
 189           - name: {{ include "common.fullname" . }}-filebeat-conf
 190             mountPath: /usr/share/filebeat/filebeat.yml
 191             subPath: filebeat.yml
 192           - name: {{ include "common.fullname" . }}-logs
 193             mountPath: /var/log/onap
 194           - name: {{ include "common.fullname" . }}-data-filebeat
 195             mountPath: /usr/share/filebeat/data
 196           resources:
 197             limits:
 198               cpu: 100m
 199               memory: 100Mi
 200             requests:
 201               cpu: 3m
 202               memory: 20Mi
 203       volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
 204       - name: {{ include "common.fullname" . }}-localtime
 205         hostPath:
 206           path: /etc/localtime
 207       - name: {{ include "common.fullname" . }}-filebeat-conf
 208         configMap:
 209           name: {{ include "common.release" . }}-sdc-filebeat-configmap
 210       - name: {{ include "common.fullname" . }}-data-filebeat
 211         emptyDir: {}
 212       - name: {{ include "common.fullname" . }}-logback
 213         configMap:
 214           name : {{ include "common.fullname" . }}-logging-configmap
 215       - name: {{ include "common.fullname" . }}-environments
 216         configMap:
 217           name: {{ include "common.release" . }}-sdc-environments-configmap
 218           defaultMode: 0755
 219       - name: sdc-environments-output
 220         emptyDir: { medium: "Memory" }
 221       - name:  {{ include "common.fullname" . }}-logs
 222         emptyDir: {}
 223       - name:  {{ include "common.fullname" . }}-cert-storage
 224         persistentVolumeClaim:
 225           claimName: {{ include "common.fullname" . }}-cert
 226       imagePullSecrets:
 227       - name: "{{ include "common.namespace" . }}-docker-registry-key"