kubernetes/aai/charts/aai-resources/templates/deployment.yaml

   1 # Copyright © 2017 Amdocs, Bell Canada
   2 # Modifications Copyright © 2018 AT&T
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 apiVersion: extensions/v1beta1
  17 kind: Deployment
  18 metadata:
  19   name: {{ include "common.fullname" . }}
  20   namespace: {{ include "common.namespace" . }}
  21   labels:
  22     app: {{ include "common.name" . }}
  23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  24     release: {{ .Release.Name }}
  25     heritage: {{ .Release.Service }}
  26 spec:
  27   replicas: {{ .Values.replicaCount }}
  28   selector:
  29     matchLabels:
  30       app: {{ include "common.name" . }}
  31   template:
  32     metadata:
  33       labels:
  34         app: {{ include "common.name" . }}
  35         release: {{ .Release.Name }}
  36       name: {{ include "common.name" . }}
  37       annotations:
  38         checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
  39         msb.onap.org/service-info: '[
  40           {
  41               "serviceName": "_aai-cloudInfrastructure",
  42               "version": "v11",
  43               "url": "/aai/v11/cloud-infrastructure",
  44               "protocol": "REST",
  45               "port": "8447",
  46               "enable_ssl": true,
  47               "lb_policy":"ip_hash",
  48               "visualRange": "1",
  49               "path": "/aai/v11/cloud-infrastructure"
  50           },
  51           {
  52               "serviceName": "_aai-cloudInfrastructure",
  53               "version": "v12",
  54               "url": "/aai/v12/cloud-infrastructure",
  55               "protocol": "REST",
  56               "port": "8447",
  57               "enable_ssl": true,
  58               "lb_policy":"ip_hash",
  59               "visualRange": "1",
  60               "path": "/aai/v12/cloud-infrastructure"
  61           },
  62           {
  63               "serviceName": "_aai-cloudInfrastructure",
  64               "version": "v13",
  65               "url": "/aai/v13/cloud-infrastructure",
  66               "protocol": "REST",
  67               "port": "8447",
  68               "enable_ssl": true,
  69               "lb_policy":"ip_hash",
  70               "visualRange": "1",
  71               "path": "/aai/v13/cloud-infrastructure"
  72           },
  73           {
  74               "serviceName": "_aai-business",
  75               "version": "v11",
  76               "url": "/aai/v11/business",
  77               "protocol": "REST",
  78               "port": "8447",
  79               "enable_ssl": true,
  80               "lb_policy":"ip_hash",
  81               "visualRange": "1",
  82               "path": "/aai/v11/business"
  83           },
  84           {
  85               "serviceName": "_aai-business",
  86               "version": "v12",
  87               "url": "/aai/v12/business",
  88               "protocol": "REST",
  89               "port": "8447",
  90               "enable_ssl": true,
  91               "lb_policy":"ip_hash",
  92               "visualRange": "1",
  93               "path": "/aai/v12/business"
  94           },
  95           {
  96               "serviceName": "_aai-business",
  97               "version": "v13",
  98               "url": "/aai/v13/business",
  99               "protocol": "REST",
 100               "port": "8447",
 101               "enable_ssl": true,
 102               "lb_policy":"ip_hash",
 103               "visualRange": "1",
 104               "path": "/aai/v13/business"
 105           },
 106           {
 107               "serviceName": "_aai-actions",
 108               "version": "v11",
 109               "url": "/aai/v11/actions",
 110               "protocol": "REST",
 111               "port": "8447",
 112               "enable_ssl": true,
 113               "lb_policy":"ip_hash",
 114               "visualRange": "1",
 115               "path": "/aai/v11/actions"
 116           },
 117           {
 118               "serviceName": "_aai-actions",
 119               "version": "v12",
 120               "url": "/aai/v12/actions",
 121               "protocol": "REST",
 122               "port": "8447",
 123               "enable_ssl": true,
 124               "lb_policy":"ip_hash",
 125               "visualRange": "1",
 126               "path": "/aai/v12/actions"
 127           },
 128           {
 129               "serviceName": "_aai-actions",
 130               "version": "v13",
 131               "url": "/aai/v13/actions",
 132               "protocol": "REST",
 133               "port": "8447",
 134               "enable_ssl": true,
 135               "lb_policy":"ip_hash",
 136               "visualRange": "1",
 137               "path": "/aai/v13/actions"
 138           },
 139           {
 140               "serviceName": "_aai-service-design-and-creation",
 141               "version": "v11",
 142               "url": "/aai/v11/service-design-and-creation",
 143               "protocol": "REST",
 144               "port": "8447",
 145               "enable_ssl": true,
 146               "lb_policy":"ip_hash",
 147               "visualRange": "1",
 148               "path": "/aai/v11/service-design-and-creation"
 149           },
 150           {
 151               "serviceName": "_aai-service-design-and-creation",
 152               "version": "v12",
 153               "url": "/aai/v12/service-design-and-creation",
 154               "protocol": "REST",
 155               "port": "8447",
 156               "enable_ssl": true,
 157               "lb_policy":"ip_hash",
 158               "visualRange": "1",
 159               "path": "/aai/v12/service-design-and-creation"
 160           },
 161           {
 162               "serviceName": "_aai-service-design-and-creation",
 163               "version": "v13",
 164               "url": "/aai/v13/service-design-and-creation",
 165               "protocol": "REST",
 166               "port": "8447",
 167               "enable_ssl": true,
 168               "lb_policy":"ip_hash",
 169               "visualRange": "1",
 170               "path": "/aai/v13/service-design-and-creation"
 171           },
 172           {
 173               "serviceName": "_aai-network",
 174               "version": "v11",
 175               "url": "/aai/v11/network",
 176               "protocol": "REST",
 177               "port": "8447",
 178               "enable_ssl": true,
 179               "lb_policy":"ip_hash",
 180               "visualRange": "1",
 181               "path": "/aai/v11/network"
 182           },
 183           {
 184               "serviceName": "_aai-network",
 185               "version": "v12",
 186               "url": "/aai/v12/network",
 187               "protocol": "REST",
 188               "port": "8447",
 189               "enable_ssl": true,
 190               "lb_policy":"ip_hash",
 191               "visualRange": "1",
 192               "path": "/aai/v12/network"
 193           },
 194           {
 195               "serviceName": "_aai-network",
 196               "version": "v13",
 197               "url": "/aai/v13/network",
 198               "protocol": "REST",
 199               "port": "8447",
 200               "enable_ssl": true,
 201               "lb_policy":"ip_hash",
 202               "visualRange": "1",
 203               "path": "/aai/v13/network"
 204           },
 205           {
 206               "serviceName": "_aai-externalSystem",
 207               "version": "v11",
 208               "url": "/aai/v11/external-system",
 209               "protocol": "REST",
 210               "port": "8447",
 211               "enable_ssl": true,
 212               "lb_policy":"ip_hash",
 213               "visualRange": "1",
 214               "path": "/aai/v11/external-system"
 215           },
 216           {
 217               "serviceName": "_aai-externalSystem",
 218               "version": "v12",
 219               "url": "/aai/v12/external-system",
 220               "protocol": "REST",
 221               "port": "8447",
 222               "enable_ssl": true,
 223               "lb_policy":"ip_hash",
 224               "visualRange": "1",
 225               "path": "/aai/v12/external-system"
 226           },
 227           {
 228               "serviceName": "_aai-externalSystem",
 229               "version": "v13",
 230               "url": "/aai/v13/external-system",
 231               "protocol": "REST",
 232               "port": "8447",
 233               "enable_ssl": true,
 234               "lb_policy":"ip_hash",
 235               "visualRange": "1",
 236               "path": "/aai/v13/external-system"
 237           },
 238           {
 239               "serviceName": "aai-cloudInfrastructure",
 240               "version": "v11",
 241               "url": "/aai/v11/cloud-infrastructure",
 242               "protocol": "REST",
 243               "port": "8447",
 244               "enable_ssl": true,
 245               "lb_policy":"ip_hash",
 246               "visualRange": "1"
 247           },
 248           {
 249               "serviceName": "aai-cloudInfrastructure",
 250               "version": "v12",
 251               "url": "/aai/v12/cloud-infrastructure",
 252               "protocol": "REST",
 253               "port": "8447",
 254               "enable_ssl": true,
 255               "lb_policy":"ip_hash",
 256               "visualRange": "1"
 257           },
 258           {
 259               "serviceName": "aai-cloudInfrastructure",
 260               "version": "v13",
 261               "url": "/aai/v13/cloud-infrastructure",
 262               "protocol": "REST",
 263               "port": "8447",
 264               "enable_ssl": true,
 265               "lb_policy":"ip_hash",
 266               "visualRange": "1"
 267           },
 268           {
 269               "serviceName": "aai-business",
 270               "version": "v11",
 271               "url": "/aai/v11/business",
 272               "protocol": "REST",
 273               "port": "8447",
 274               "enable_ssl": true,
 275               "lb_policy":"ip_hash",
 276               "visualRange": "1"
 277           },
 278           {
 279               "serviceName": "aai-business",
 280               "version": "v12",
 281               "url": "/aai/v12/business",
 282               "protocol": "REST",
 283               "port": "8447",
 284               "enable_ssl": true,
 285               "lb_policy":"ip_hash",
 286               "visualRange": "1"
 287           },
 288           {
 289               "serviceName": "aai-business",
 290               "version": "v13",
 291               "url": "/aai/v13/business",
 292               "protocol": "REST",
 293               "port": "8447",
 294               "enable_ssl": true,
 295               "lb_policy":"ip_hash",
 296               "visualRange": "1"
 297           },
 298           {
 299               "serviceName": "aai-actions",
 300               "version": "v11",
 301               "url": "/aai/v11/actions",
 302               "protocol": "REST",
 303               "port": "8447",
 304               "enable_ssl": true,
 305               "lb_policy":"ip_hash",
 306               "visualRange": "1"
 307           },
 308           {
 309               "serviceName": "aai-actions",
 310               "version": "v12",
 311               "url": "/aai/v12/actions",
 312               "protocol": "REST",
 313               "port": "8447",
 314               "enable_ssl": true,
 315               "lb_policy":"ip_hash",
 316               "visualRange": "1"
 317           },
 318           {
 319               "serviceName": "aai-actions",
 320               "version": "v13",
 321               "url": "/aai/v13/actions",
 322               "protocol": "REST",
 323               "port": "8447",
 324               "enable_ssl": true,
 325               "lb_policy":"ip_hash",
 326               "visualRange": "1"
 327           },
 328           {
 329               "serviceName": "aai-service-design-and-creation",
 330               "version": "v11",
 331               "url": "/aai/v11/service-design-and-creation",
 332               "protocol": "REST",
 333               "port": "8447",
 334               "enable_ssl": true,
 335               "lb_policy":"ip_hash",
 336               "visualRange": "1"
 337           },
 338           {
 339               "serviceName": "aai-service-design-and-creation",
 340               "version": "v12",
 341               "url": "/aai/v12/service-design-and-creation",
 342               "protocol": "REST",
 343               "port": "8447",
 344               "enable_ssl": true,
 345               "lb_policy":"ip_hash",
 346               "visualRange": "1"
 347           },
 348           {
 349               "serviceName": "aai-service-design-and-creation",
 350               "version": "v13",
 351               "url": "/aai/v13/service-design-and-creation",
 352               "protocol": "REST",
 353               "port": "8447",
 354               "enable_ssl": true,
 355               "lb_policy":"ip_hash",
 356               "visualRange": "1"
 357           },
 358           {
 359               "serviceName": "aai-network",
 360               "version": "v11",
 361               "url": "/aai/v11/network",
 362               "protocol": "REST",
 363               "port": "8447",
 364               "enable_ssl": true,
 365               "lb_policy":"ip_hash",
 366               "visualRange": "1"
 367           },
 368           {
 369               "serviceName": "aai-network",
 370               "version": "v12",
 371               "url": "/aai/v12/network",
 372               "protocol": "REST",
 373               "port": "8447",
 374               "enable_ssl": true,
 375               "lb_policy":"ip_hash",
 376               "visualRange": "1"
 377           },
 378           {
 379               "serviceName": "aai-network",
 380               "version": "v13",
 381               "url": "/aai/v13/network",
 382               "protocol": "REST",
 383               "port": "8447",
 384               "enable_ssl": true,
 385               "lb_policy":"ip_hash",
 386               "visualRange": "1"
 387           },
 388           {
 389               "serviceName": "aai-externalSystem",
 390               "version": "v11",
 391               "url": "/aai/v11/external-system",
 392               "protocol": "REST",
 393               "port": "8447",
 394               "enable_ssl": true,
 395               "lb_policy":"ip_hash",
 396               "visualRange": "1"
 397           },
 398           {
 399               "serviceName": "aai-externalSystem",
 400               "version": "v12",
 401               "url": "/aai/v12/external-system",
 402               "protocol": "REST",
 403               "port": "8447",
 404               "enable_ssl": true,
 405               "lb_policy":"ip_hash",
 406               "visualRange": "1"
 407           },
 408           {
 409               "serviceName": "aai-externalSystem",
 410               "version": "v13",
 411               "url": "/aai/v13/external-system",
 412               "protocol": "REST",
 413               "port": "8447",
 414               "enable_ssl": true,
 415               "lb_policy":"ip_hash",
 416               "visualRange": "1"
 417           }
 418           ]'
 419     spec:
 420       hostname: aai-resources
 421     {{ if .Values.global.initContainers.enabled }}
 422       {{ if .Values.global.installSidecarSecurity }}
 423       hostAliases:
 424       - ip: {{ .Values.global.aaf.serverIp }}
 425         hostnames:
 426         - {{ .Values.global.aaf.serverHostname }}
 427       {{ end }}
 428       initContainers:
 429       - command:
 430       {{  if .Values.global.jobs.createSchema.enabled  }}
 431         - /root/job_complete.py
 432         args:
 433         - --job-name
 434         - {{ .Release.Name }}-aai-graphadmin-create-db-schema
 435       {{  else }}
 436         - /root/ready.py
 437         args:
 438         - --container-name
 439         - aai-cassandra
 440       {{  end  }}
 441         env:
 442         - name: NAMESPACE
 443           valueFrom:
 444             fieldRef:
 445               apiVersion: v1
 446               fieldPath: metadata.namespace
 447         image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
 448         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 449         name: {{ include "common.name" . }}-readiness
 450       {{ if .Values.global.installSidecarSecurity }}
 451       - name: {{ .Values.global.tproxyConfig.name }}
 452         image: "{{ include "common.repository" . }}/{{ .Values.global.tproxyConfig.image }}"
 453         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 454         securityContext:
 455           privileged: true
 456       {{ end }}
 457     {{ end }}
 458       containers:
 459       - name: {{ include "common.name" . }}
 460         image: "{{ include "common.repository" . }}/{{ .Values.image }}"
 461         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 462         env:
 463         - name: LOCAL_USER_ID
 464           value: {{ .Values.global.config.userId | quote }}
 465         - name: LOCAL_GROUP_ID
 466           value: {{ .Values.global.config.groupId | quote }}
 467         volumeMounts:
 468         - mountPath: /etc/localtime
 469           name: localtime
 470           readOnly: true
 471         - mountPath: /opt/app/aai-resources/resources/etc/appprops/janusgraph-realtime.properties
 472           name: {{ include "common.fullname" . }}-db-real-conf
 473           subPath: janusgraph-realtime.properties
 474         - mountPath: /opt/app/aai-resources/resources/etc/appprops/janusgraph-cached.properties
 475           name: {{ include "common.fullname" . }}-db-cached-conf
 476           subPath: janusgraph-cached.properties
 477         - mountPath: /opt/app/aai-resources/resources/etc/appprops/aaiconfig.properties
 478           name: {{ include "common.fullname" . }}-aaiconfig-conf
 479           subPath: aaiconfig.properties
 480         - mountPath: /opt/aai/logroot/AAI-RES
 481           name: {{ include "common.fullname" . }}-logs
 482         - mountPath: /opt/app/aai-resources/resources/logback.xml
 483           name: {{ include "common.fullname" . }}-log-conf
 484           subPath: logback.xml
 485         - mountPath: /opt/app/aai-resources/resources/localhost-access-logback.xml
 486           name: {{ include "common.fullname" . }}-localhost-access-log-conf
 487           subPath: localhost-access-logback.xml
 488         - mountPath: /opt/app/aai-resources/resources/etc/auth/realm.properties
 489           name: {{ include "common.fullname" . }}-realm-conf
 490           subPath: realm.properties
 491         {{ if .Values.global.installSidecarSecurity }}
 492         - mountPath: /opt/app/aai-resources/resources/etc/auth/aai_policy.json
 493           name: {{ include "common.fullname" . }}-aai-policy
 494           subPath: aai_policy.json
 495         {{ end }}
 496         - mountPath: /opt/app/aai-resources/resources/aaf/org.onap.aai.keyfile
 497           name: {{ include "common.fullname" . }}-aaf-certs
 498           subPath: org.onap.aai.keyfile
 499         - mountPath: /opt/app/aai-resources/resources/aaf/bath_config.csv
 500           name: {{ include "common.fullname" . }}-aaf-certs
 501           subPath: bath_config.csv
 502         - mountPath: /opt/app/aai-resources/resources/aaf/org.onap.aai.props
 503           name: {{ include "common.fullname" . }}-aaf-properties
 504           subPath: org.onap.aai.props
 505         - mountPath: /opt/app/aai-resources/resources/aaf/org.osaaf.location.props
 506           name: {{ include "common.fullname" . }}-aaf-properties
 507           subPath: org.osaaf.location.props
 508         - mountPath: /opt/app/aai-resources/resources/aaf/permissions.properties
 509           name: {{ include "common.fullname" . }}-aaf-properties
 510           subPath: permissions.properties
 511         - mountPath: /opt/app/aai-resources/resources/cadi.properties
 512           name: {{ include "common.fullname" . }}-aaf-properties
 513           subPath: cadi.properties
 514         - mountPath: /opt/app/aai-resources/resources/aaf/org.onap.aai.p12
 515           name: {{ include "common.fullname" . }}-aaf-certs
 516           subPath: org.onap.aai.p12
 517         - mountPath: /opt/app/aai-resources/resources/aaf/truststoreONAPall.jks
 518           name: {{ include "common.fullname" . }}-aaf-certs
 519           subPath: truststoreONAPall.jks
 520         - mountPath: /opt/app/aai-resources/resources/application.properties
 521           name: {{ include "common.fullname" . }}-springapp-conf
 522           subPath: application.properties
 523           {{ $global := . }}
 524           {{ range $job := .Values.global.config.auth.files }}
 525         - mountPath: /opt/app/aai-resources/resources/etc/auth/{{ . }}
 526           name: {{ include "common.fullname" $global }}-auth-truststore-sec
 527           subPath: {{ . }}
 528           {{ end }}
 529         ports:
 530         - containerPort: {{ .Values.service.internalPort }}
 531         - containerPort: {{ .Values.service.internalPort2 }}
 532         # disable liveness probe when breakpoints set in debugger
 533         # so K8s doesn't restart unresponsive container
 534         {{ if .Values.liveness.enabled }}
 535         livenessProbe:
 536           tcpSocket:
 537             port: {{ .Values.service.internalPort }}
 538           initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 539           periodSeconds: {{ .Values.liveness.periodSeconds }}
 540         {{ end }}
 541         readinessProbe:
 542           tcpSocket:
 543             port: {{ .Values.service.internalPort }}
 544           initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 545           periodSeconds: {{ .Values.readiness.periodSeconds }}
 546         resources:
 547 {{ include "common.resources" . | indent 12 }}
 548       {{- if .Values.nodeSelector }}
 549       nodeSelector:
 550 {{ toYaml .Values.nodeSelector | indent 8 }}
 551       {{- end -}}
 552       {{- if .Values.affinity }}
 553       affinity:
 554 {{ toYaml .Values.affinity | indent 8 }}
 555       {{- end }}
 556
 557       # side car containers
 558       - name: filebeat-onap
 559         image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
 560         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 561         volumeMounts:
 562         - mountPath: /usr/share/filebeat/filebeat.yml
 563           subPath: filebeat.yml
 564           name: filebeat-conf
 565         - mountPath: /var/log/onap
 566           name: {{ include "common.fullname" . }}-logs
 567         - mountPath: /usr/share/filebeat/data
 568           name: {{ include "common.fullname" . }}-filebeat
 569     {{ if .Values.global.installSidecarSecurity }}
 570       - name: {{ .Values.global.rproxy.name }}
 571         image: "{{ include "common.repository" . }}/{{ .Values.global.rproxy.image }}"
 572         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 573         env:
 574         - name: CONFIG_HOME
 575           value: "/opt/app/rproxy/config"
 576         - name: KEY_STORE_PASSWORD
 577           value: {{ .Values.sidecar.keyStorePassword }}
 578         - name: spring_profiles_active
 579           value: {{ .Values.global.rproxy.activeSpringProfiles }}
 580         volumeMounts:
 581         - name: {{ include "common.fullname" . }}-rproxy-config
 582           mountPath: /opt/app/rproxy/config/forward-proxy.properties
 583           subPath: forward-proxy.properties
 584         - name: {{ include "common.fullname" . }}-rproxy-config
 585           mountPath: /opt/app/rproxy/config/primary-service.properties
 586           subPath: primary-service.properties
 587         - name: {{ include "common.fullname" . }}-rproxy-config
 588           mountPath: /opt/app/rproxy/config/reverse-proxy.properties
 589           subPath: reverse-proxy.properties
 590         - name: {{ include "common.fullname" . }}-rproxy-config
 591           mountPath: /opt/app/rproxy/config/cadi.properties
 592           subPath: cadi.properties
 593         - name: {{ include "common.fullname" . }}-rproxy-log-config
 594           mountPath: /opt/app/rproxy/config/logback-spring.xml
 595           subPath: logback-spring.xml
 596         - name: {{ include "common.fullname" . }}-rproxy-auth-config
 597           mountPath: /opt/app/rproxy/config/auth/tomcat_keystore
 598           subPath: tomcat_keystore
 599         - name: {{ include "common.fullname" . }}-rproxy-auth-config
 600           mountPath: /opt/app/rproxy/config/auth/client-cert.p12
 601           subPath: client-cert.p12
 602         - name: {{ include "common.fullname" . }}-rproxy-auth-config
 603           mountPath: /opt/app/rproxy/config/auth/uri-authorization.json
 604           subPath: uri-authorization.json
 605         - name: {{ include "common.fullname" . }}-rproxy-auth-config
 606           mountPath: /opt/app/rproxy/config/auth/aaf_truststore.jks
 607           subPath: aaf_truststore.jks
 608         - name: {{ include "common.fullname" . }}-rproxy-security-config
 609           mountPath: /opt/app/rproxy/config/security/keyfile
 610           subPath: keyfile
 611         - name: {{ include "common.fullname" . }}-rproxy-auth-config
 612           mountPath: /opt/app/rproxy/config/auth/org.onap.aai.p12
 613           subPath: org.onap.aai.p12
 614         ports:
 615         - containerPort: {{ .Values.global.rproxy.port }}
 616
 617       - name: {{ .Values.global.fproxy.name }}
 618         image: "{{ include "common.repository" . }}/{{ .Values.global.fproxy.image }}"
 619         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 620         env:
 621         - name: CONFIG_HOME
 622           value: "/opt/app/fproxy/config"
 623         - name: KEY_STORE_PASSWORD
 624           value: {{ .Values.sidecar.keyStorePassword }}
 625         - name: TRUST_STORE_PASSWORD
 626           value: {{ .Values.sidecar.trustStorePassword }}
 627         - name: spring_profiles_active
 628           value: {{ .Values.global.fproxy.activeSpringProfiles }}
 629         volumeMounts:
 630         - name: {{ include "common.fullname" . }}-fproxy-config
 631           mountPath: /opt/app/fproxy/config/fproxy.properties
 632           subPath: fproxy.properties
 633         - name: {{ include "common.fullname" . }}-fproxy-log-config
 634           mountPath: /opt/app/fproxy/config/logback-spring.xml
 635           subPath: logback-spring.xml
 636         - name: {{ include "common.fullname" . }}-fproxy-auth-config
 637           mountPath: /opt/app/fproxy/config/auth/fproxy_truststore
 638           subPath: fproxy_truststore
 639         - name: {{ include "common.fullname" . }}-fproxy-auth-config
 640           mountPath: /opt/app/fproxy/config/auth/tomcat_keystore
 641           subPath: tomcat_keystore
 642         - name: {{ include "common.fullname" . }}-fproxy-auth-config
 643           mountPath: /opt/app/fproxy/config/auth/client-cert.p12
 644           subPath: client-cert.p12
 645         ports:
 646         - containerPort: {{ .Values.global.fproxy.port }}
 647     {{ end }}
 648
 649       volumes:
 650       - name: localtime
 651         hostPath:
 652           path: /etc/localtime
 653       - name: filebeat-conf
 654         configMap:
 655           name: aai-filebeat
 656       - name: {{ include "common.fullname" . }}-logs
 657         emptyDir: {}
 658       - name: {{ include "common.fullname" . }}-filebeat
 659         emptyDir: {}
 660       - name: {{ include "common.fullname" . }}-log-conf
 661         configMap:
 662          name: {{ include "common.fullname" . }}-log
 663       - name: {{ include "common.fullname" . }}-localhost-access-log-conf
 664         configMap:
 665          name: {{ include "common.fullname" . }}-localhost-access-log-configmap
 666       - name: {{ include "common.fullname" . }}-db-real-conf
 667         configMap:
 668          name: {{ include "common.fullname" . }}-db-real-configmap
 669       - name: {{ include "common.fullname" . }}-db-cached-conf
 670         configMap:
 671          name: {{ include "common.fullname" . }}-db-cached-configmap
 672       - name: {{ include "common.fullname" . }}-aaiconfig-conf
 673         configMap:
 674          name: {{ include "common.fullname" . }}-aaiconfig-configmap
 675       - name: {{ include "common.fullname" . }}-aaf-properties
 676         configMap:
 677          name: {{ include "common.fullname" . }}-aaf-props
 678       - name: {{ include "common.fullname" . }}-aaf-certs
 679         secret:
 680          secretName: {{ include "common.fullname" . }}-aaf-keys
 681       - name: {{ include "common.fullname" . }}-springapp-conf
 682         configMap:
 683          name: {{ include "common.fullname" . }}-springapp-configmap
 684       - name: {{ include "common.fullname" . }}-realm-conf
 685         configMap:
 686          name: {{ include "common.fullname" . }}-realm-configmap
 687       - name: {{ include "common.fullname" . }}-auth-truststore-sec
 688         secret:
 689          secretName: aai-auth-truststore-secret
 690          items:
 691           {{ range $job := .Values.global.config.auth.files }}
 692            - key: {{ . }}
 693              path: {{ . }}
 694           {{ end }}
 695     {{ if .Values.global.installSidecarSecurity }}
 696       - name: {{ include "common.fullname" . }}-aai-policy
 697         configMap:
 698          name: {{ include "common.fullname" . }}-aai-policy-configmap
 699       - name: {{ include "common.fullname" . }}-rproxy-config
 700         configMap:
 701          name: {{ include "common.fullname" . }}-rproxy-config
 702       - name: {{ include "common.fullname" . }}-rproxy-log-config
 703         configMap:
 704          name: {{ include "common.fullname" . }}-rproxy-log-config
 705       - name: {{ include "common.fullname" . }}-rproxy-auth-config
 706         secret:
 707          secretName: {{ include "common.fullname" . }}-rproxy-auth-config
 708       - name: {{ include "common.fullname" . }}-rproxy-security-config
 709         secret:
 710          secretName: {{ include "common.fullname" . }}-rproxy-security-config
 711       - name: {{ include "common.fullname" . }}-fproxy-config
 712         configMap:
 713          name: {{ include "common.fullname" . }}-fproxy-config
 714       - name: {{ include "common.fullname" . }}-fproxy-log-config
 715         configMap:
 716          name: {{ include "common.fullname" . }}-fproxy-log-config
 717       - name: {{ include "common.fullname" . }}-fproxy-auth-config
 718         secret:
 719          secretName: {{ include "common.fullname" . }}-fproxy-auth-config
 720     {{ end }}
 721       restartPolicy: {{ .Values.restartPolicy }}
 722       imagePullSecrets:
 723       - name: "{{ include "common.namespace" . }}-docker-registry-key"