kubernetes/aaf/components/aaf-sms/templates/deployment.yaml

   1 # Copyright 2018 Intel Corporation, Inc
   2 # Modifications © 2020 AT&T
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 apiVersion: apps/v1
  17 kind: Deployment
  18 metadata:
  19   name: {{ include "common.fullname" . }}
  20   namespace: {{ include "common.namespace" . }}
  21   labels:
  22     app: {{ include "common.name" . }}
  23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  24     release: {{ include "common.release" . }}
  25     heritage: {{ .Release.Service }}
  26 spec:
  27   replicas: {{ .Values.replicaCount }}
  28   selector:
  29     matchLabels:
  30       app: {{ include "common.name" . }}
  31   template:
  32     metadata:
  33       labels:
  34         app: {{ include "common.name" . }}
  35         release: {{ include "common.release" . }}
  36     spec:
  37       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 8 }}
  38         # Currently intermediate certificate is not given by AAF CM so we need
  39         # to give it "by hand"
  40         {{- if .Values.global.aafEnabled }}
  41         - name: {{ include "common.fullname" . }}-add-intermediate-cert
  42           command:
  43             - /bin/sh
  44           args:
  45             - -c
  46             - |
  47               cat /int-certs/intermediate_root_ca.pem >> {{ .Values.certInitializer.mountPath }}/local/org.onap.aaf-sms.crt
  48           image: "{{ .Values.global.busyboxRepository }}/{{ .Values.global.busyboxImage }}"
  49           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  50           volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 12 }}
  51             - mountPath: /int-certs
  52               name: {{ include "common.fullname" . }}-int-certs
  53               readOnly: true
  54         {{- end }}
  55         - name: {{ include "common.fullname" . }}-fix-permission
  56           command:
  57             - /bin/sh
  58           args:
  59             - -c
  60             - |
  61               chmod -R 775 /sms/auth
  62               chown -R 1000:1000 /sms/auth
  63           image: "{{ .Values.global.busyboxRepository }}/{{ .Values.global.busyboxImage }}"
  64           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  65           volumeMounts:
  66             - mountPath: /sms/auth
  67               name: {{ include "common.fullname" . }}-auth
  68         - name: {{ include "common.name" . }}-readiness
  69           image:  "{{ include "common.repository" . }}/{{ .Values.global.readinessImage }}"
  70           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  71           command:
  72           - /app/ready.py
  73           args:
  74           - --container-name
  75           - "aaf-sms-vault"
  76           - --container-name
  77           - "aaf-sms-vault-backend"
  78           env:
  79           - name: NAMESPACE
  80             valueFrom:
  81               fieldRef:
  82                 apiVersion: v1
  83                 fieldPath: metadata.namespace
  84       containers:
  85       - image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  86         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  87         name: {{ include "common.name" . }}
  88         command: ["/sms/bin/sms"]
  89         workingDir: /sms/
  90         ports:
  91         - containerPort: {{ .Values.service.internalPort }}
  92         {{- if eq .Values.liveness.enabled true }}
  93         livenessProbe:
  94           httpGet:
  95             port: {{ .Values.service.internalPort }}
  96             scheme: HTTPS
  97             path: /v1/sms/quorum/status
  98           initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  99           periodSeconds: {{ .Values.liveness.periodSeconds }}
 100         {{ end -}}
 101         readinessProbe:
 102           httpGet:
 103             port: {{ .Values.service.internalPort }}
 104             scheme: HTTPS
 105             path: /v1/sms/quorum/status
 106           initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 107           periodSeconds: {{ .Values.readiness.periodSeconds }}
 108         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 10 }}
 109           - mountPath: /etc/localtime
 110             name: localtime
 111             readOnly: true
 112           - mountPath: /sms/smsconfig.json
 113             name: {{ include "common.name" .}}
 114             subPath: smsconfig.json
 115           - mountPath: /sms/auth
 116             name: {{ include "common.fullname" . }}-auth
 117         resources:
 118 {{ include "common.resources" . | indent 10 }}
 119         {{- if .Values.nodeSelector }}
 120         nodeSelector:
 121 {{ toYaml .Values.nodeSelector | indent 10 }}
 122         {{- end -}}
 123         {{- if .Values.affinity }}
 124         affinity:
 125 {{ toYaml .Values.affinity | indent 10 }}
 126         {{- end }}
 127       volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
 128       - name: localtime
 129         hostPath:
 130           path: /etc/localtime
 131       - name : {{ include "common.name" . }}
 132         configMap:
 133           name: {{ include "common.fullname" . }}
 134       {{- if .Values.global.aafEnabled }}
 135       - name: {{ include "common.fullname" . }}-int-certs
 136         secret:
 137           secretName: {{ include "common.fullname" . }}-int-certs
 138       {{- end }}
 139       - name: {{ include "common.fullname" . }}-auth
 140       {{- if .Values.persistence.enabled }}
 141         persistentVolumeClaim:
 142           claimName: {{ include "common.fullname" . }}
 143       {{- else }}
 144         emptyDir: {}
 145       {{- end }}
 146       imagePullSecrets:
 147       - name: "{{ include "common.namespace" . }}-docker-registry-key"