[SDNC] Add readiness check for sdnc-dbinit job
[oom.git] / kubernetes / sdnc / templates / statefulset.yaml
1 {{/*
2 # Copyright © 2020 Samsung Electronics
3 # Copyright © 2017 Amdocs, Bell Canada
4 # Copyright © 2021 Nokia
5 #
6 # Licensed under the Apache License, Version 2.0 (the "License");
7 # you may not use this file except in compliance with the License.
8 # You may obtain a copy of the License at
9 #
10 #       http://www.apache.org/licenses/LICENSE-2.0
11 #
12 # Unless required by applicable law or agreed to in writing, software
13 # distributed under the License is distributed on an "AS IS" BASIS,
14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 # See the License for the specific language governing permissions and
16 # limitations under the License.
17 */}}
18
19 apiVersion: apps/v1
20 kind: StatefulSet
21 metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
22 spec:
23   selector:
24     matchLabels:
25       app: {{ include "common.name" . }}
26   serviceName: {{ include "common.servicename" . }}-cluster
27   replicas: {{ .Values.replicaCount }}
28   selector: {{- include "common.selectors" . | nindent 4 }}
29   podManagementPolicy: Parallel
30   template:
31     metadata: {{- include "common.templateMetadata" . | nindent 6 }}
32     spec:
33       initContainers:
34       - command:
35         - sh
36         args:
37         - -c
38         - "cd /config-input && for PFILE in `ls -1 .`; do envsubst <${PFILE} >/config/${PFILE}; done"
39         env:
40         - name: AAI_CLIENT_NAME
41           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "aai-user-creds" "key" "login") | indent 10 }}
42         - name: AAI_CLIENT_PASSWORD
43           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "aai-user-creds" "key" "password") | indent 10 }}
44         - name: AAI_TRUSTSTORE_PASSWORD
45           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "aai-truststore-password" "key" "password") | indent 10 }}
46         - name: ANSIBLE_TRUSTSTORE_PASSWORD
47           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "ansible-truststore-password" "key" "password") | indent 10 }}
48         - name: SO_USER
49           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "so-user-creds" "key" "login") | indent 10 }}
50         - name: SO_PASSWORD
51           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "so-user-creds" "key" "password") | indent 10 }}
52         - name: NENG_USER
53           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "neng-user-creds" "key" "login") | indent 10 }}
54         - name: NENG_PASSWORD
55           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "neng-user-creds" "key" "password") | indent 10 }}
56         - name: CDS_USER
57           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cds-user-creds" "key" "login") | indent 10 }}
58         - name: CDS_PASSWORD
59           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cds-user-creds" "key" "password") | indent 10 }}
60         - name: HONEYCOMB_USER
61           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "honeycomb-user-creds" "key" "login") | indent 10 }}
62         - name: HONEYCOMB_PASSWORD
63           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "honeycomb-user-creds" "key" "password") | indent 10 }}
64         - name: TRUSTSTORE_PASSWORD
65           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "truststore-password" "key" "password") | indent 10 }}
66         - name: KEYSTORE_PASSWORD
67           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "keystore-password" "key" "password") | indent 10 }}
68         - name: DMAAP_USER
69           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "dmaap-user-creds" "key" "login") | indent 10 }}
70         - name: DMAAP_PASSWORD
71           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "dmaap-user-creds" "key" "password") | indent 10 }}
72         - name: DMAAP_AUTHKEY
73           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "dmaap-authkey" "key" "password") | indent 10 }}
74         - name: MODELSERVICE_USER
75           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "modeling-user-creds" "key" "login") | indent 10 }}
76         - name: MODELSERVICE_PASSWORD
77           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "modeling-user-creds" "key" "password") | indent 10 }}
78         - name: RESTCONF_USER
79           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restconf-creds" "key" "login") | indent 10 }}
80         - name: RESTCONF_PASSWORD
81           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restconf-creds" "key" "password") | indent 10 }}
82         - name: ANSIBLE_USER
83           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "ansible-creds" "key" "login") | indent 10 }}
84         - name: ANSIBLE_PASSWORD
85           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "ansible-creds" "key" "password") | indent 10 }}
86         - name: SCALEOUT_USER
87           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "scaleout-creds" "key" "login") | indent 10 }}
88         - name: SCALEOUT_PASSWORD
89           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "scaleout-creds" "key" "password") | indent 10 }}
90         - name: NETBOX_APIKEY
91           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "netbox-apikey" "key" "password") | indent 10 }}
92         - name: SDNC_DB_USER
93           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "login") | indent 10 }}
94         - name: SDNC_DB_PASSWORD
95           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "password") | indent 10 }}
96         - name: MYSQL_USER
97           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "login") | indent 10 }}
98         - name: MYSQL_PASSWORD
99           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "password") | indent 10 }}
100         - name: ODL_ADMIN_USERNAME
101           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "odl-creds" "key" "login") | indent 10 }}
102         - name: ODL_USER
103           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "odl-creds" "key" "login") | indent 10 }}
104         - name: ODL_ADMIN_PASSWORD
105           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "odl-creds" "key" "password") | indent 10 }}
106         - name: ODL_PASSWORD
107           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "odl-creds" "key" "password") | indent 10 }}
108         {{ if and .Values.config.sdnr.dmaapProxy.enabled  .Values.config.sdnr.dmaapProxy.usepwd }}
109         - name: DMAAP_HTTP_PROXY_USERNAME
110           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "dmaap-proxy-creds" "key" "login") | indent 10 }}
111         - name: DMAAP_HTTP_PROXY_PASSWORD
112           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "dmaap-proxy-creds" "key" "password") | indent 10 }}
113         {{- end }}
114
115
116         volumeMounts:
117         - mountPath: /config-input
118           name: config-input
119         - mountPath: /config
120           name: properties
121         image: {{ include "repositoryGenerator.image.envsubst" . }}
122         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
123         name: {{ include "common.name" . }}-update-config
124       {{ if .Values.dgbuilder.enabled -}}
125       - command:
126         - /app/ready.py
127         args:
128         {{ if or .Values.dgbuilder.enabled .Values.config.sdnr.enabled -}}
129         - --container-name
130         - {{ include "common.mariadbService" . }}
131         - --job-name
132         - {{ include "common.fullname" . }}-dbinit-job
133         {{ end -}}
134         {{ if .Values.config.sdnr.enabled -}}
135         - --container-name
136         - {{ include "common.name" . }}-sdnrdb-init-job
137         {{ end -}}
138         env:
139         - name: NAMESPACE
140           valueFrom:
141             fieldRef:
142               apiVersion: v1
143               fieldPath: metadata.namespace
144         image: {{ include "repositoryGenerator.image.readiness" . }}
145         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
146         name: {{ include "common.name" . }}-readiness
147         {{ end -}}
148 {{ include "common.certInitializer.initContainer" . | indent 6 }}
149 {{ include "common.certServiceClient.initContainer" . | indent 6 }}
150       - name: {{ include "common.name" . }}-chown
151         image: {{ include "repositoryGenerator.image.busybox" . }}
152         command:
153         - sh
154         args:
155         - -c
156         - |
157            mkdir {{ .Values.persistence.mdsalPath }}/journal
158            mkdir {{ .Values.persistence.mdsalPath }}/snapshots
159            mkdir {{ .Values.persistence.mdsalPath }}/daexim
160            chown -R {{ .Values.config.odlUid }}:{{ .Values.config.odlGid}} {{ .Values.persistence.mdsalPath }}
161 {{- if .Values.global.aafEnabled }}
162            chown -R {{ .Values.config.odlUid }}:{{ .Values.config.odlGid}} {{ .Values.certInitializer.credsPath }}
163 {{- end }}
164         volumeMounts:
165 {{ include "common.certInitializer.volumeMount" . | indent 10 }}
166           - mountPath: {{ .Values.persistence.mdsalPath }}
167             name: {{ include "common.fullname" . }}-data
168       containers:
169         - name: {{ include "common.name" . }}
170           image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
171           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
172           {{- if and .Values.global.cmpv2Enabled .Values.global.CMPv2CertManagerIntegration }}
173           {{- $linkCommand := include "common.certManager.linkVolumeMounts" . }}
174           lifecycle:
175             postStart:
176               exec:
177                 command: ["sh", "-c", {{$linkCommand | quote}} ]
178           {{- end }}
179           command: ["/bin/bash"]
180           args: ["-c", "/opt/onap/sdnc/bin/createLinks.sh ; /opt/onap/sdnc/bin/startODL.sh"]
181           ports:
182           - containerPort: {{ .Values.service.internalPort }}
183           - containerPort: {{ .Values.service.internalPort2 }}
184           - containerPort: {{ .Values.service.internalPort3 }}
185           - containerPort: {{ .Values.service.clusterPort }}
186           readinessProbe:
187             tcpSocket:
188               port: {{ .Values.service.internalPort }}
189             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
190             periodSeconds: {{ .Values.readiness.periodSeconds }}
191           env:
192           - name: MYSQL_ROOT_PASSWORD
193             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-root-password" "key" "password") | indent 12 }}
194           - name: ODL_ADMIN_USERNAME
195             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "odl-creds" "key" "login") | indent 12 }}
196           - name: ODL_USER
197             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "odl-creds" "key" "login") | indent 12 }}
198           - name: ODL_ADMIN_PASSWORD
199             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "odl-creds" "key" "password") | indent 12 }}
200           - name: ODL_PASSWORD
201             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "odl-creds" "key" "password") | indent 12 }}
202           - name: SDNC_DB_USER
203             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "login") | indent 12 }}
204           - name: SDNC_DB_PASSWORD
205             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "password") | indent 12 }}
206           - name: MYSQL_USER
207             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "login") | indent 12 }}
208           - name: MYSQL_PASSWORD
209             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "password") | indent 12 }}
210           - name: MYSQL_DATABASE
211             value: "{{ .Values.config.dbSdnctlDatabase }}"
212           - name: SDNC_CONFIG_DIR
213             value: "{{ .Values.config.configDir }}"
214           - name: AAI_CLIENT_NAME
215             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "aai-user-creds" "key" "login") | indent 12 }}
216           - name: AAI_CLIENT_PASSWORD
217             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "aai-user-creds" "key" "password") | indent 12 }}
218           - name: AAI_TRUSTSTORE_PASSWORD
219             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "aai-truststore-password" "key" "password") | indent 12 }}
220           - name: ANSIBLE_TRUSTSTORE_PASSWORD
221             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "ansible-truststore-password" "key" "password") | indent 12 }}
222           - name: SO_USER
223             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "so-user-creds" "key" "login") | indent 12 }}
224           - name: SO_PASSWORD
225             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "so-user-creds" "key" "password") | indent 12 }}
226           - name: NENG_USER
227             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "neng-user-creds" "key" "login") | indent 12 }}
228           - name: NENG_PASSWORD
229             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "neng-user-creds" "key" "password") | indent 12 }}
230           - name: CDS_USER
231             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cds-user-creds" "key" "login") | indent 12 }}
232           - name: CDS_PASSWORD
233             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cds-user-creds" "key" "password") | indent 12 }}
234           - name: HONEYCOMB_USER
235             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "honeycomb-user-creds" "key" "login") | indent 12 }}
236           - name: HONEYCOMB_PASSWORD
237             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "honeycomb-user-creds" "key" "password") | indent 12 }}
238           - name: TRUSTSTORE_PASSWORD
239             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "truststore-password" "key" "password") | indent 12 }}
240           - name: KEYSTORE_PASSWORD
241             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "keystore-password" "key" "password") | indent 12 }}
242           - name: DMAAP_USER
243             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "dmaap-user-creds" "key" "login") | indent 12 }}
244           - name: DMAAP_PASSWORD
245             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "dmaap-user-creds" "key" "password") | indent 12 }}
246           - name: DMAAP_AUTHKEY
247             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "dmaap-authkey" "key" "password") | indent 12 }}
248           - name: ENABLE_ODL_CLUSTER
249             value: "{{ .Values.config.enableClustering }}"
250           - name: MY_ODL_CLUSTER
251             value: "{{ .Values.config.myODLCluster }}"
252           - name: PEER_ODL_CLUSTER
253             value: "{{ .Values.config.peerODLCluster }}"
254           - name: IS_PRIMARY_CLUSTER
255             value: "{{ .Values.config.isPrimaryCluster }}"
256           - name: GEO_ENABLED
257             value: "{{ .Values.config.geoEnabled}}"
258           - name: SDNC_AAF_ENABLED
259             value: "{{ .Values.global.aafEnabled}}"
260           - name: SDNC_REPLICAS
261             value: "{{ .Values.replicaCount }}"
262           - name: MYSQL_HOST
263             value: {{ include "common.mariadbService" . }}
264           - name: MDSAL_PATH
265             value: {{ .Values.persistence.mdsalPath }}
266           - name: DAEXIM_PATH
267             value: {{ .Values.persistence.daeximPath }}
268           - name: JOURNAL_PATH
269             value: {{ .Values.persistence.journalPath }}
270           - name: SNAPSHOTS_PATH
271             value: {{ .Values.persistence.snapshotsPath }}
272           - name: JAVA_HOME
273             value: "{{ .Values.config.javaHome}}"
274           - name: JAVA_OPTS
275             value: "-Xms{{.Values.config.odl.javaOptions.minMemory}} -Xmx{{.Values.config.odl.javaOptions.maxMemory}}"
276           - name: KARAF_CONSOLE_LOG_LEVEL
277             value: "{{ include "common.log.level" . }}"
278           - name: SDNRWT
279             value: "{{ .Values.config.sdnr.enabled | default "false"}}"
280           {{- if eq .Values.config.sdnr.mode "web" }}
281           - name: SDNRDM
282             value: "true"
283           {{- end }}
284           - name: SDNRONLY
285             value: "{{ .Values.config.sdnr.sdnronly | default "false" }}"
286           - name: SDNRDBURL
287             {{- $prefix := ternary "https" "http" .Values.global.aafEnabled}}
288             value: "{{$prefix}}://{{ .Values.elasticsearch.service.name | default "sdnrdb"}}.{{.Release.Namespace}}:{{.Values.elasticsearch.service.port | default "9200"}}"
289           {{- if .Values.config.sdnr.sdnrdbTrustAllCerts }}
290           - name: SDNRDBTRUSTALLCERTS
291             value: "true"
292           {{- end }}
293           {{- if .Values.global.cmpv2Enabled }}
294           - name: ODL_CERT_DIR
295             value: {{ (mustFirst (.Values.certificates)).mountPath }}
296           {{- end }}
297
298           volumeMounts:
299 {{ include "common.certInitializer.volumeMount" . | indent 10 }}
300 {{ include "common.certServiceClient.volumeMounts" . | indent 10 }}
301 {{- if and .Values.global.cmpv2Enabled .Values.global.CMPv2CertManagerIntegration }}
302 {{ include "common.certManager.volumeMounts" . | indent 10 }}
303 {{- end }}
304           - mountPath: /etc/localtime
305             name: localtime
306             readOnly: true
307           - mountPath: /opt/opendaylight/current/etc/org.ops4j.pax.logging.cfg
308             name: sdnc-logging-cfg-config
309             subPath: org.ops4j.pax.logging.cfg
310           - mountPath: {{ .Values.config.binDir }}/installSdncDb.sh
311             name: bin
312             subPath: installSdncDb.sh
313           - mountPath: {{ .Values.config.binDir }}/createLinks.sh
314             name: bin
315             subPath: createLinks.sh
316           - mountPath: {{ .Values.config.ccsdkConfigDir }}/aaiclient.properties
317             name: properties
318             subPath: aaiclient.properties
319           - mountPath: {{ .Values.config.configDir }}/aaiclient.properties
320             name: properties
321             subPath: aaiclient.properties
322           - mountPath: {{ .Values.config.configDir }}/dblib.properties
323             name: properties
324             subPath: dblib.properties
325           - mountPath: {{ .Values.config.configDir }}/lcm-dg.properties
326             name: properties
327             subPath: lcm-dg.properties
328           - mountPath: {{ .Values.config.configDir }}/svclogic.properties
329             name: properties
330             subPath: svclogic.properties
331           - mountPath: /opt/onap/sdnc/svclogic/config/svclogic.properties
332             name: properties
333             subPath: svclogic.properties
334           - mountPath: {{ .Values.config.configDir }}/netbox.properties
335             name: properties
336             subPath: netbox.properties
337           - mountPath: {{ .Values.config.configDir }}/blueprints-processor-adaptor.properties
338             name: properties
339             subPath: blueprints-processor-adaptor.properties
340           - mountPath: {{ .Values.persistence.mdsalPath }}
341             name: {{ include "common.fullname" . }}-data
342           - mountPath: /var/log/onap
343             name: logs
344           - mountPath: {{ .Values.config.odl.salConfigDir }}/{{ .Values.config.odl.salConfigVersion}}/sal-clustering-config-{{ .Values.config.odl.salConfigVersion}}-akkaconf.xml
345             name: properties
346             subPath: akka.conf
347           - mountPath: {{ .Values.config.odl.etcDir }}/org.opendaylight.controller.cluster.datastore.cfg
348             name: properties
349             subPath: org.opendaylight.controller.cluster.datastore.cfg
350           - mountPath: {{ .Values.config.odl.etcDir }}/org.opendaylight.aaa.filterchain.cfg
351             name: properties
352             subPath: org.opendaylight.aaa.filterchain.cfg
353           - mountPath: {{ .Values.config.odl.binDir }}/setenv
354             name: properties
355             subPath: setenv
356           - mountPath: {{ .Values.config.odl.etcDir }}/mountpoint-registrar.properties
357             name: properties
358             subPath: mountpoint-registrar.properties
359           - mountPath: {{ .Values.config.odl.etcDir }}/mountpoint-state-provider.properties
360             name: properties
361             subPath: mountpoint-state-provider.properties
362           - mountPath: {{ .Values.config.odl.etcDir }}/org.opendaylight.daexim.cfg
363             name: properties
364             subPath: org.opendaylight.daexim.cfg
365           resources:
366 {{ include "common.resources" . | indent 12 }}
367         {{- if .Values.nodeSelector }}
368         nodeSelector:
369 {{ toYaml .Values.nodeSelector | indent 10 }}
370         {{- end -}}
371         {{- if .Values.affinity }}
372         affinity:
373 {{ toYaml .Values.affinity | indent 10 }}
374         {{- end }}
375
376         # side car containers
377         - name: filebeat-onap
378           image: {{ include "repositoryGenerator.image.logging" . }}
379           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
380           volumeMounts:
381           - mountPath: /usr/share/filebeat/filebeat.yml
382             name: filebeat-conf
383             subPath: filebeat.yml
384           - mountPath: /var/log/onap
385             name: logs
386           - mountPath: /usr/share/filebeat/data
387             name: data-filebeat
388       imagePullSecrets:
389       - name: "{{ include "common.namespace" . }}-docker-registry-key"
390       volumes:
391         - name: localtime
392           hostPath:
393             path: /etc/localtime
394         - name: logs
395           emptyDir: {}
396         - name: data-filebeat
397           emptyDir: {}
398         - name: filebeat-conf
399           configMap:
400             name: {{ include "common.fullname" . }}-filebeat-configmap
401         - name: sdnc-logging-cfg-config
402           configMap:
403             name: {{ include "common.fullname" . }}-log-configmap
404         - name: bin
405           configMap:
406             name: {{ include "common.fullname" . }}-bin
407             defaultMode: 0755
408         - name: config-input
409           configMap:
410             name: {{ include "common.fullname" . }}-properties
411             defaultMode: 0644
412         - name: properties
413           emptyDir:
414             medium: Memory
415   {{ if not .Values.persistence.enabled }}
416         - name: {{ include "common.fullname" . }}-data
417           emptyDir: {}
418   {{ else }}
419 {{ include "common.certInitializer.volumes" . | nindent 8 }}
420 {{ include "common.certServiceClient.volumes" . | nindent 8 }}
421 {{- if and .Values.global.cmpv2Enabled .Values.global.CMPv2CertManagerIntegration }}
422 {{ include "common.certManager.volumes" . | nindent 8 }}
423 {{- end }}
424   volumeClaimTemplates:
425   - metadata:
426       name: {{ include "common.fullname" . }}-data
427       labels:
428         name: {{ include "common.fullname" . }}
429         chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
430         release: "{{ include "common.release" . }}"
431         heritage: "{{ .Release.Service }}"
432     spec:
433       accessModes:
434       - {{ .Values.persistence.accessMode }}
435       storageClassName: {{ include "common.storageClass" . }}
436       resources:
437         requests:
438           storage: {{ .Values.persistence.size }}
439   {{- end }}