1 {{- define "so.certificate.container_importer" -}}
2 {{- $dot := default . .dot -}}
3 {{- $initRoot := default $dot.Values.soHelpers .initRoot -}}
4 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
5 {{ include "common.certInitializer.initContainer" $subchartDot }}
6 {{- if $dot.Values.global.aafEnabled }}
7 - name: {{ include "common.name" $dot }}-msb-cert-importer
8 image: "{{ include "common.repository" $subchartDot }}/{{ $dot.Values.global.aafAgentImage }}"
9 imagePullPolicy: {{ $dot.Values.global.pullPolicy | default $subchartDot.Values.pullPolicy }}
15 export $(grep '^c' {{ $subchartDot.Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
16 keytool -import -trustcacerts -alias msb_root -file \
17 /certificates/msb-ca.crt -keystore \
18 "{{ $subchartDot.Values.certInitializer.credsPath }}/{{ $subchartDot.Values.aaf.trustore }}" \
19 -storepass $cadi_truststore_password -noprompt
20 keytool -importkeystore -srckeystore "{{ $subchartDot.Values.certInitializer.credsPath }}/truststoreONAPall.jks" \
21 -srcstorepass {{ $subchartDot.Values.certInitializer.trustStoreAllPass }} \
22 -destkeystore "{{ $subchartDot.Values.certInitializer.credsPath }}/{{ $subchartDot.Values.aaf.trustore }}" \
23 -deststorepass $cadi_truststore_password -noprompt
25 {{ include "common.certInitializer.volumeMount" $subchartDot | indent 2 | trim }}
26 - name: {{ include "common.name" $dot }}-msb-certificate
27 mountPath: /certificates
31 {{- define "so.certificate.volumes" -}}
32 {{- $dot := default . .dot -}}
33 {{- $initRoot := default $dot.Values.soHelpers .initRoot -}}
34 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
35 {{ include "common.certInitializer.volumes" $subchartDot }}
36 {{- if $dot.Values.global.aafEnabled }}
37 - name: {{ include "common.name" $dot }}-msb-certificate
39 secretName: {{ include "common.secret.getSecretNameFast" (dict "global" $subchartDot "uid" "so-onap-certs") }}
43 {{- define "so.certificate.volumeMount" -}}
44 {{- $dot := default . .dot -}}
45 {{- $initRoot := default $dot.Values.soHelpers .initRoot -}}
46 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
47 {{ include "common.certInitializer.volumeMount" $subchartDot }}
50 {{- define "so.certificates.env" -}}
51 {{- $dot := default . .dot -}}
52 {{- $initRoot := default $dot.Values.soHelpers .initRoot -}}
53 {{- $subchartDot := fromJson (include "common.subChartDot" (dict "dot" $dot "initRoot" $initRoot)) }}
54 {{- if $dot.Values.global.aafEnabled }}
56 value: {{ $subchartDot.Values.certInitializer.credsPath }}/{{ $subchartDot.Values.aaf.trustore }}
57 {{- if $dot.Values.global.security.aaf.enabled }}
59 value: {{ $subchartDot.Values.certInitializer.credsPath }}/org.onap.so.p12