[SO] Use common secret template in so-catalog-db-adapter
[oom.git] / kubernetes / so / charts / so-sdnc-adapter / templates / deployment.yaml
1 # Copyright © 2018 AT&T USA
2 #
3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
6 #
7 #       http://www.apache.org/licenses/LICENSE-2.0
8 #
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 # See the License for the specific language governing permissions and
13 # limitations under the License.
14 apiVersion: extensions/v1beta1
15 kind: Deployment
16 metadata:
17   name: {{ include "common.fullname" . }}
18   namespace: {{ include "common.namespace" . }}
19   labels:
20     app: {{ include "common.fullname" . }}
21     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
22     release: {{ include "common.release" . }}
23 spec:
24   replicas: {{ index .Values.replicaCount }}
25   minReadySeconds: {{ index .Values.minReadySeconds }}
26   strategy:
27     type: {{ index .Values.updateStrategy.type }}
28     rollingUpdate:
29       maxUnavailable: {{ index .Values.updateStrategy.maxUnavailable }}
30       maxSurge: {{ index .Values.updateStrategy.maxSurge }}
31   template:
32     metadata:
33       labels:
34         app: {{ include "common.name" . }}
35         release: {{ include "common.release" . }}
36     spec:
37       containers:
38       - name: {{ include "common.name" . }}
39         image: {{ include "common.repository" . }}/{{ .Values.image }}
40         resources:
41 {{ include "common.resources" . | indent 12 }}
42         env:
43         - name: DB_HOST
44           valueFrom:
45             secretKeyRef:
46               name: {{ include "common.release" . }}-so-db-secrets
47               key: mariadb.readwrite.host
48         - name: DB_PORT
49           valueFrom:
50             secretKeyRef:
51               name: {{ include "common.release" . }}-so-db-secrets
52               key: mariadb.readwrite.port
53         - name: DB_USERNAME
54           valueFrom:
55             secretKeyRef:
56               name: {{ include "common.release" . }}-so-db-secrets
57               key: mariadb.readwrite.rolename
58         - name: DB_PASSWORD
59           valueFrom:
60             secretKeyRef:
61               name: {{ include "common.release" . }}-so-db-secrets
62               key: mariadb.readwrite.password
63         - name: DB_ADMIN_USERNAME
64           valueFrom:
65             secretKeyRef:
66               name: {{ include "common.release" . }}-so-db-secrets
67               key: mariadb.admin.rolename
68         - name: DB_ADMIN_PASSWORD
69           valueFrom:
70             secretKeyRef:
71               name: {{ include "common.release" . }}-so-db-secrets
72               key: mariadb.admin.password
73          {{- if eq .Values.global.security.aaf.enabled true }}
74         - name: TRUSTSTORE
75           value: /app/org.onap.so.trust.jks
76         - name: TRUSTSTORE_PASSWORD
77           valueFrom:
78             secretKeyRef:
79               name: {{ .Release.Name}}-so-client-certs-secret
80               key: trustStorePassword
81         - name: KEYSTORE
82           value: /app/org.onap.so.jks
83         - name: KEYSTORE_PASSWORD
84           valueFrom:
85             secretKeyRef:
86               name: {{ .Release.Name}}-so-client-certs-secret
87               key: keyStorePassword
88         {{- end }}
89         envFrom:
90         - configMapRef:
91             name: {{ include "common.fullname" . }}-configmap
92         imagePullPolicy:  {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
93         volumeMounts:
94         - name: logs
95           mountPath: /app/logs
96         - name: config
97           mountPath: /app/config
98           readOnly: true
99 {{ include "helpers.livenessProbe" .| indent 8 }}
100         ports:
101         - containerPort: {{ index .Values.containerPort }}
102           name: {{ .Values.service.portName }}
103           protocol: TCP
104       volumes:
105       - name: logs
106         emptyDir: {}
107       - name: config
108         configMap:
109             name: {{ include "common.fullname" . }}-app-configmap
110       imagePullSecrets:
111         - name: "{{ include "common.namespace" . }}-docker-registry-key"