1 {{- define "so.certificate.container_importer" -}}
2 {{- $dot := default . .dot -}}
3 {{- $initRoot := default $dot.Values.soHelpers .initRoot -}}
4 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
5 {{ include "common.certInitializer.initContainer" $subchartDot }}
6 {{- if $dot.Values.global.aafEnabled }}
7 - name: {{ include "common.name" $dot }}-msb-cert-importer
8 image: {{ include "repositoryGenerator.repository" $subchartDot }}/{{ $dot.Values.global.aafAgentImage }}
9 imagePullPolicy: {{ $dot.Values.global.pullPolicy | default $subchartDot.Values.pullPolicy }}
15 export $(grep '^c' {{ $subchartDot.Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
16 keytool -import -trustcacerts -alias msb_root -file \
17 /certificates/msb-ca.crt -keystore \
18 "{{ $subchartDot.Values.certInitializer.credsPath }}/{{ $subchartDot.Values.aaf.trustore }}" \
19 -storepass $cadi_truststore_password -noprompt
21 if [ "${EXIT_VALUE}" != "0" ]
23 echo "issue with password: $cadi_truststore_password"
24 ls -lh {{ $subchartDot.Values.certInitializer.credsPath }}/mycreds.prop
25 cat {{ $subchartDot.Values.certInitializer.credsPath }}/mycreds.prop
28 keytool -importkeystore -srckeystore "{{ $subchartDot.Values.certInitializer.credsPath }}/truststoreONAPall.jks" \
29 -srcstorepass {{ $subchartDot.Values.certInitializer.trustStoreAllPass }} \
30 -destkeystore "{{ $subchartDot.Values.certInitializer.credsPath }}/{{ $subchartDot.Values.aaf.trustore }}" \
31 -deststorepass $cadi_truststore_password -noprompt
36 {{ include "common.certInitializer.volumeMount" $subchartDot | indent 2 | trim }}
37 - name: {{ include "common.name" $dot }}-msb-certificate
38 mountPath: /certificates
42 {{- define "so.certificate.volumes" -}}
43 {{- $dot := default . .dot -}}
44 {{- $initRoot := default $dot.Values.soHelpers .initRoot -}}
45 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
46 {{ include "common.certInitializer.volumes" $subchartDot }}
47 {{- if $dot.Values.global.aafEnabled }}
48 - name: {{ include "common.name" $dot }}-msb-certificate
50 secretName: {{ include "common.secret.getSecretNameFast" (dict "global" $subchartDot "uid" "so-onap-certs") }}
54 {{- define "so.certificate.volumeMount" -}}
55 {{- $dot := default . .dot -}}
56 {{- $initRoot := default $dot.Values.soHelpers .initRoot -}}
57 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
58 {{ include "common.certInitializer.volumeMount" $subchartDot }}
61 {{- define "so.certificates.env" -}}
62 {{- $dot := default . .dot -}}
63 {{- $initRoot := default $dot.Values.soHelpers .initRoot -}}
64 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
65 {{- if $dot.Values.global.aafEnabled }}
67 value: {{ $subchartDot.Values.certInitializer.credsPath }}/{{ $subchartDot.Values.aaf.trustore }}
68 {{- if $dot.Values.global.security.aaf.enabled }}
70 value: {{ $subchartDot.Values.certInitializer.credsPath }}/org.onap.so.p12