kud/demo/composite-firewall/firewall/templates/deployment.yaml

   1 apiVersion: kubevirt.io/v1alpha3
   2 kind: VirtualMachine
   3 metadata:
   4   name: {{ include "firewall.fullname" . }}
   5   labels:
   6     release: {{ .Release.Name }}
   7     app: {{ include "firewall.name" . }}
   8     chart: {{ .Chart.Name }}
   9 spec:
  10   running: true
  11   template:
  12     metadata:
  13       labels:
  14         app: {{ include "firewall.name" . }}
  15         release: {{ .Release.Name }}
  16     spec:
  17       domain:
  18         cpu:
  19           model: host-model
  20         devices:
  21           disks:
  22             - name: containerdisk
  23               disk:
  24                 bus: virtio
  25             - name: cloudinitdisk
  26               disk:
  27                 bus: virtio
  28           interfaces:
  29           - name: default
  30             bridge: {}
  31           - name: unprotected
  32             macAddress: 52:57:2b:7b:e4:27
  33             bridge: {}
  34           - name: protected
  35             macAddress: fa:d1:3a:a1:5c:67
  36             bridge: {}
  37           - name: emco
  38             macAddress: 86:31:ea:6a:ce:75
  39             bridge: {}
  40         resources:
  41           requests:
  42             memory: {{ .Values.resources.memory }}
  43       networks:
  44       - name: default
  45         pod: {}
  46       - name: unprotected
  47         multus:
  48           networkName: {{ .Values.global.unprotectedNetworkName }}
  49       - name: protected
  50         multus:
  51           networkName: {{ .Values.global.protectedNetworkName }}
  52       - name: emco
  53         multus:
  54           networkName: {{ .Values.global.emcoPrivateNetworkName }}
  55       volumes:
  56         - name: cloudinitdisk
  57           cloudInitNoCloud:
  58             networkData: |
  59               version: 2
  60               ethernets:
  61                 enp1s0:
  62                   dhcp4: true
  63                 eth1:
  64                   match:
  65                     macaddress: "52:57:2b:7b:e4:27"
  66                   set-name: eth1
  67                   dhcp4: true
  68                 eth2:
  69                   match:
  70                     macaddress: "fa:d1:3a:a1:5c:67"
  71                   set-name: eth2
  72                   dhcp4: true
  73                 eth3:
  74                   match:
  75                     macaddress: "86:31:ea:6a:ce:75"
  76                   set-name: eth3
  77                   dhcp4: true
  78             userData: |
  79               #cloud-config
  80               ssh_pwauth: True
  81               users:
  82               - name: admin
  83                 gecos: User
  84                 primary-group: admin
  85                 groups: users
  86                 sudo: ALL=(ALL) NOPASSWD:ALL
  87                 lock_passwd: false
  88                 passwd: "$6$rounds=4096$QA5OCKHTE41$jRACivoPMJcOjLRgxl3t.AMfU7LhCFwOWv2z66CQX.TSxBy50JoYtycJXSPr2JceG.8Tq/82QN9QYt3euYEZW/"
  89               runcmd:
  90                 - export demo_artifacts_version={{ .Values.global.demoArtifactsVersion }}
  91                 - export vfw_private_ip_0={{ .Values.global.vfwPrivateIp0 }}
  92                 - export vsn_private_ip_0={{ .Values.global.vsnPrivateIp0 }}
  93                 - export protected_net_cidr={{ .Values.global.protectedNetCidr }}
  94                 - export dcae_collector_ip={{ .Values.global.dcaeCollectorIp }}
  95                 - export dcae_collector_port={{ .Values.global.dcaeCollectorPort }}
  96                 - export protected_net_gw={{ .Values.global.protectedNetGw }}
  97                 - export protected_private_net_cidr={{ .Values.global.protectedPrivateNetCidr }}
  98                 - wget -O - https://git.onap.org/multicloud/k8s/plain/kud/tests/vFW/firewall | sudo -E bash
  99         - name: containerdisk
 100           containerDisk:
 101             image: integratedcloudnative/ubuntu:16.04
 102             imagePullPolicy: IfNotPresent