kubernetes/aai/charts/aai-traversal/templates/deployment.yaml

   1 # Copyright © 2017 Amdocs, Bell Canada
   2 # Modifications Copyright © 2018 AT&T
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 apiVersion: extensions/v1beta1
  17 kind: Deployment
  18 metadata:
  19   name: {{ include "common.fullname" . }}
  20   namespace: {{ include "common.namespace" . }}
  21   labels:
  22     app: {{ include "common.name" . }}
  23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  24     release: {{ .Release.Name }}
  25     heritage: {{ .Release.Service }}
  26 spec:
  27   replicas: {{ .Values.replicaCount }}
  28   selector:
  29     matchLabels:
  30       app: {{ include "common.name" . }}
  31   template:
  32     metadata:
  33       labels:
  34         app: {{ include "common.name" . }}
  35         release: {{ .Release.Name }}
  36       name: {{ include "common.name" . }}
  37       annotations:
  38         checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
  39         msb.onap.org/service-info: '[
  40           {
  41               "serviceName": "_aai-generic-query",
  42               "version": "v11",
  43               "url": "/aai/v11/search/generic-query",
  44               "protocol": "REST",
  45               "port": "8446",
  46               "enable_ssl": true,
  47               "lb_policy":"ip_hash",
  48               "visualRange": "1",
  49               "path": "/aai/v11/search/generic-query"
  50           },
  51           {
  52               "serviceName": "_aai-generic-query",
  53               "version": "v12",
  54               "url": "/aai/v12/search/generic-query",
  55               "protocol": "REST",
  56               "port": "8446",
  57               "enable_ssl": true,
  58               "lb_policy":"ip_hash",
  59               "visualRange": "1",
  60               "path": "/aai/v12/search/generic-query"
  61           },
  62           {
  63               "serviceName": "_aai-generic-query",
  64               "version": "v13",
  65               "url": "/aai/v13/search/generic-query",
  66               "protocol": "REST",
  67               "port": "8446",
  68               "enable_ssl": true,
  69               "lb_policy":"ip_hash",
  70               "visualRange": "1",
  71               "path": "/aai/v13/search/generic-query"
  72           },
  73           {
  74               "serviceName": "_aai-generic-query",
  75               "version": "v14",
  76               "url": "/aai/v14/search/generic-query",
  77               "protocol": "REST",
  78               "port": "8446",
  79               "enable_ssl": true,
  80               "lb_policy":"ip_hash",
  81               "visualRange": "1",
  82               "path": "/aai/v14/search/generic-query"
  83           },
  84           {
  85               "serviceName": "_aai-nodes-query",
  86               "version": "v11",
  87               "url": "/aai/v11/search/nodes-query",
  88               "protocol": "REST",
  89               "port": "8446",
  90               "enable_ssl": true,
  91               "lb_policy":"ip_hash",
  92               "visualRange": "1",
  93               "path": "/aai/v11/search/nodes-query"
  94           },
  95           {
  96               "serviceName": "_aai-nodes-query",
  97               "version": "v12",
  98               "url": "/aai/v12/search/nodes-query",
  99               "protocol": "REST",
 100               "port": "8446",
 101               "enable_ssl": true,
 102               "lb_policy":"ip_hash",
 103               "visualRange": "1",
 104               "path": "/aai/v12/search/nodes-query"
 105           },
 106           {
 107               "serviceName": "_aai-nodes-query",
 108               "version": "v13",
 109               "url": "/aai/v13/search/nodes-query",
 110               "protocol": "REST",
 111               "port": "8446",
 112               "enable_ssl": true,
 113               "lb_policy":"ip_hash",
 114               "visualRange": "1",
 115               "path": "/aai/v13/search/nodes-query"
 116           },
 117           {
 118               "serviceName": "_aai-nodes-query",
 119               "version": "v14",
 120               "url": "/aai/v14/search/nodes-query",
 121               "protocol": "REST",
 122               "port": "8446",
 123               "enable_ssl": true,
 124               "lb_policy":"ip_hash",
 125               "visualRange": "1",
 126               "path": "/aai/v14/search/nodes-query"
 127           },
 128           {
 129               "serviceName": "_aai-query",
 130               "version": "v11",
 131               "url": "/aai/v11/query",
 132               "protocol": "REST",
 133               "port": "8446",
 134               "enable_ssl": true,
 135               "lb_policy":"ip_hash",
 136               "visualRange": "1",
 137               "path": "/aai/v11/query"
 138           },
 139           {
 140               "serviceName": "_aai-query",
 141               "version": "v12",
 142               "url": "/aai/v12/query",
 143               "protocol": "REST",
 144               "port": "8446",
 145               "enable_ssl": true,
 146               "lb_policy":"ip_hash",
 147               "visualRange": "1",
 148               "path": "/aai/v12/query"
 149           },
 150           {
 151               "serviceName": "_aai-query",
 152               "version": "v13",
 153               "url": "/aai/v13/query",
 154               "protocol": "REST",
 155               "port": "8446",
 156               "enable_ssl": true,
 157               "lb_policy":"ip_hash",
 158               "visualRange": "1",
 159               "path": "/aai/v13/query"
 160           },
 161           {
 162               "serviceName": "_aai-query",
 163               "version": "v14",
 164               "url": "/aai/v14/query",
 165               "protocol": "REST",
 166               "port": "8446",
 167               "enable_ssl": true,
 168               "lb_policy":"ip_hash",
 169               "visualRange": "1",
 170               "path": "/aai/v14/query"
 171           },
 172           {
 173               "serviceName": "_aai-named-query",
 174               "url": "/aai/search",
 175               "protocol": "REST",
 176               "port": "8446",
 177               "enable_ssl": true,
 178               "lb_policy":"ip_hash",
 179               "visualRange": "1",
 180               "path": "/aai/search"
 181           },
 182           {
 183               "serviceName": "aai-generic-query",
 184               "version": "v11",
 185               "url": "/aai/v11/search/generic-query",
 186               "protocol": "REST",
 187               "port": "8446",
 188               "enable_ssl": true,
 189               "lb_policy":"ip_hash",
 190               "visualRange": "1"
 191           },
 192           {
 193               "serviceName": "aai-generic-query",
 194               "version": "v12",
 195               "url": "/aai/v12/search/generic-query",
 196               "protocol": "REST",
 197               "port": "8446",
 198               "enable_ssl": true,
 199               "lb_policy":"ip_hash",
 200               "visualRange": "1"
 201           },
 202           {
 203               "serviceName": "aai-generic-query",
 204               "version": "v13",
 205               "url": "/aai/v13/search/generic-query",
 206               "protocol": "REST",
 207               "port": "8446",
 208               "enable_ssl": true,
 209               "lb_policy":"ip_hash",
 210               "visualRange": "1"
 211           },
 212           {
 213               "serviceName": "aai-generic-query",
 214               "version": "v14",
 215               "url": "/aai/v14/search/generic-query",
 216               "protocol": "REST",
 217               "port": "8446",
 218               "enable_ssl": true,
 219               "lb_policy":"ip_hash",
 220               "visualRange": "1"
 221           },
 222           {
 223               "serviceName": "aai-nodes-query",
 224               "version": "v11",
 225               "url": "/aai/v11/search/nodes-query",
 226               "protocol": "REST",
 227               "port": "8446",
 228               "enable_ssl": true,
 229               "lb_policy":"ip_hash",
 230               "visualRange": "1"
 231           },
 232           {
 233               "serviceName": "aai-nodes-query",
 234               "version": "v12",
 235               "url": "/aai/v12/search/nodes-query",
 236               "protocol": "REST",
 237               "port": "8446",
 238               "enable_ssl": true,
 239               "lb_policy":"ip_hash",
 240               "visualRange": "1"
 241           },
 242           {
 243               "serviceName": "aai-nodes-query",
 244               "version": "v13",
 245               "url": "/aai/v13/search/nodes-query",
 246               "protocol": "REST",
 247               "port": "8446",
 248               "enable_ssl": true,
 249               "lb_policy":"ip_hash",
 250               "visualRange": "1"
 251           },
 252           {
 253               "serviceName": "aai-nodes-query",
 254               "version": "v14",
 255               "url": "/aai/v14/search/nodes-query",
 256               "protocol": "REST",
 257               "port": "8446",
 258               "enable_ssl": true,
 259               "lb_policy":"ip_hash",
 260               "visualRange": "1"
 261           },
 262           {
 263               "serviceName": "aai-query",
 264               "version": "v11",
 265               "url": "/aai/v11/query",
 266               "protocol": "REST",
 267               "port": "8446",
 268               "enable_ssl": true,
 269               "lb_policy":"ip_hash",
 270               "visualRange": "1"
 271           },
 272           {
 273               "serviceName": "aai-query",
 274               "version": "v12",
 275               "url": "/aai/v12/query",
 276               "protocol": "REST",
 277               "port": "8446",
 278               "enable_ssl": true,
 279               "lb_policy":"ip_hash",
 280               "visualRange": "1"
 281           },
 282           {
 283               "serviceName": "aai-query",
 284               "version": "v13",
 285               "url": "/aai/v13/query",
 286               "protocol": "REST",
 287               "port": "8446",
 288               "enable_ssl": true,
 289               "lb_policy":"ip_hash",
 290               "visualRange": "1"
 291           },
 292           {
 293               "serviceName": "aai-query",
 294               "version": "v14",
 295               "url": "/aai/v14/query",
 296               "protocol": "REST",
 297               "port": "8446",
 298               "enable_ssl": true,
 299               "lb_policy":"ip_hash",
 300               "visualRange": "1"
 301           },
 302           {
 303               "serviceName": "aai-named-query",
 304               "url": "/aai/search",
 305               "protocol": "REST",
 306               "port": "8446",
 307               "enable_ssl": true,
 308               "lb_policy":"ip_hash",
 309               "visualRange": "1"
 310           }
 311           ]'
 312     spec:
 313       hostname: aai-traversal
 314     {{ if .Values.global.initContainers.enabled }}
 315       initContainers:
 316       - command:
 317       {{  if .Values.global.jobs.createSchema.enabled  }}
 318         - /root/job_complete.py
 319         args:
 320         - --job-name
 321         - {{ .Release.Name }}-aai-graphadmin-create-db-schema
 322       {{  else }}
 323         - /root/ready.py
 324         args:
 325         - --container-name
 326         - aai-cassandra
 327         - --container-name
 328         - aai-schema-service
 329       {{  end  }}
 330         env:
 331         - name: NAMESPACE
 332           valueFrom:
 333             fieldRef:
 334               apiVersion: v1
 335               fieldPath: metadata.namespace
 336         image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
 337         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 338         name: {{ include "common.name" . }}-readiness
 339     {{ end }}
 340       containers:
 341       - name: {{ include "common.name" . }}
 342         image: "{{ include "common.repository" . }}/{{ .Values.image }}"
 343         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 344         env:
 345         - name: DISABLE_UPDATE_QUERY
 346           value: {{ .Values.config.disableUpdateQuery | quote }}
 347         - name: LOCAL_USER_ID
 348           value: {{ .Values.global.config.userId | quote }}
 349         - name: LOCAL_GROUP_ID
 350           value: {{ .Values.global.config.groupId | quote }}
 351         volumeMounts:
 352         - mountPath: /etc/localtime
 353           name: localtime
 354           readOnly: true
 355         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/janusgraph-realtime.properties
 356           name: {{ include "common.fullname" . }}-db-real-conf
 357           subPath: janusgraph-realtime.properties
 358         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/janusgraph-cached.properties
 359           name: {{ include "common.fullname" . }}-db-cached-conf
 360           subPath: janusgraph-cached.properties
 361         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/aaiconfig.properties
 362           name: {{ include "common.fullname" . }}-aaiconfig-conf
 363           subPath: aaiconfig.properties
 364         - mountPath: /opt/aai/logroot/AAI-GQ
 365           name: {{ include "common.fullname" . }}-logs
 366         - mountPath: /opt/app/aai-traversal/resources/logback.xml
 367           name: {{ include "common.fullname" . }}-log-conf
 368           subPath: logback.xml
 369         - mountPath: /opt/app/aai-traversal/resources/localhost-access-logback.xml
 370           name: {{ include "common.fullname" . }}-localhost-access-log-conf
 371           subPath: localhost-access-logback.xml
 372         - mountPath: /opt/app/aai-traversal/resources/etc/auth/realm.properties
 373           name: {{ include "common.fullname" . }}-realm-conf
 374           subPath: realm.properties
 375         - mountPath: /opt/app/aai-traversal/resources/aaf/org.onap.aai.keyfile
 376           name: {{ include "common.fullname" . }}-aaf-certs
 377           subPath: org.onap.aai.keyfile
 378         - mountPath: /opt/app/aai-traversal/resources/aaf/bath_config.csv
 379           name: {{ include "common.fullname" . }}-aaf-certs
 380           subPath: bath_config.csv
 381         - mountPath: /opt/app/aai-traversal/resources/aaf/org.onap.aai.props
 382           name: {{ include "common.fullname" . }}-aaf-properties
 383           subPath: org.onap.aai.props
 384         - mountPath: /opt/app/aai-traversal/resources/aaf/org.osaaf.location.props
 385           name: {{ include "common.fullname" . }}-aaf-properties
 386           subPath: org.osaaf.location.props
 387         - mountPath: /opt/app/aai-traversal/resources/aaf/permissions.properties
 388           name: {{ include "common.fullname" . }}-aaf-properties
 389           subPath: permissions.properties
 390         - mountPath: /opt/app/aai-traversal/resources/cadi.properties
 391           name: {{ include "common.fullname" . }}-aaf-properties
 392           subPath: cadi.properties
 393         - mountPath: /opt/app/aai-traversal/resources/aaf/org.onap.aai.p12
 394           name: {{ include "common.fullname" . }}-aaf-certs
 395           subPath: org.onap.aai.p12
 396         - mountPath: /opt/app/aai-traversal/resources/aaf/truststoreONAPall.jks
 397           name: aai-common-aai-auth-mount
 398           subPath: truststoreONAPall.jks
 399         - mountPath: /opt/app/aai-traversal/resources/application.properties
 400           name: {{ include "common.fullname" . }}-springapp-conf
 401           subPath: application.properties
 402           {{ $global := . }}
 403           {{ range $job := .Values.global.config.auth.files }}
 404         - mountPath: /opt/app/aai-traversal/resources/etc/auth/{{ . }}
 405           name: {{ include "common.fullname" $global }}-auth-truststore-sec
 406           subPath: {{ . }}
 407           {{ end }}
 408         ports:
 409         - containerPort: {{ .Values.service.internalPort }}
 410         - containerPort: {{ .Values.service.internalPort2 }}
 411         # disable liveness probe when breakpoints set in debugger
 412         # so K8s doesn't restart unresponsive container
 413         {{ if .Values.liveness.enabled }}
 414         livenessProbe:
 415           tcpSocket:
 416             port: {{ .Values.service.internalPort }}
 417           initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 418           periodSeconds: {{ .Values.liveness.periodSeconds }}
 419         {{ end }}
 420         readinessProbe:
 421           tcpSocket:
 422             port: {{ .Values.service.internalPort }}
 423           initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 424           periodSeconds: {{ .Values.readiness.periodSeconds }}
 425         resources:
 426 {{ include "common.resources" . }}
 427       {{- if .Values.nodeSelector }}
 428       nodeSelector:
 429 {{ toYaml .Values.nodeSelector | indent 8 }}
 430       {{- end -}}
 431       {{- if .Values.affinity }}
 432       affinity:
 433 {{ toYaml .Values.affinity | indent 8 }}
 434       {{- end }}
 435
 436       # side car containers
 437       - name: filebeat-onap
 438         image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
 439         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 440         volumeMounts:
 441         - mountPath: /usr/share/filebeat/filebeat.yml
 442           subPath: filebeat.yml
 443           name: filebeat-conf
 444         - mountPath: /var/log/onap
 445           name: {{ include "common.fullname" . }}-logs
 446         - mountPath: /usr/share/filebeat/data
 447           name: {{ include "common.fullname" . }}-filebeat
 448         resources:
 449 {{ include "common.resources" . }}
 450       volumes:
 451       - name: localtime
 452         hostPath:
 453           path: /etc/localtime
 454       - name: filebeat-conf
 455         configMap:
 456           name: aai-filebeat
 457       - name: {{ include "common.fullname" . }}-logs
 458         emptyDir: {}
 459       - name: {{ include "common.fullname" . }}-filebeat
 460         emptyDir: {}
 461       - name: {{ include "common.fullname" . }}-log-conf
 462         configMap:
 463          name: {{ include "common.fullname" . }}-log
 464       - name: {{ include "common.fullname" . }}-localhost-access-log-conf
 465         configMap:
 466          name: {{ include "common.fullname" . }}-localhost-access-log-configmap
 467       - name: {{ include "common.fullname" . }}-db-real-conf
 468         configMap:
 469          name: {{ include "common.fullname" . }}-db-real-configmap
 470       - name: {{ include "common.fullname" . }}-db-cached-conf
 471         configMap:
 472          name: {{ include "common.fullname" . }}-db-cached-configmap
 473       - name: {{ include "common.fullname" . }}-aaiconfig-conf
 474         configMap:
 475          name: {{ include "common.fullname" . }}-aaiconfig-configmap
 476       - name: {{ include "common.fullname" . }}-aaf-properties
 477         configMap:
 478          name: {{ include "common.fullname" . }}-aaf-props
 479       - name: {{ include "common.fullname" . }}-aaf-certs
 480         secret:
 481          secretName: {{ include "common.fullname" . }}-aaf-keys
 482       - name: aai-common-aai-auth-mount
 483         secret:
 484           secretName: aai-common-aai-auth
 485       - name: {{ include "common.fullname" . }}-springapp-conf
 486         configMap:
 487          name: {{ include "common.fullname" . }}-springapp-configmap
 488       - name: {{ include "common.fullname" . }}-realm-conf
 489         configMap:
 490          name: {{ include "common.fullname" . }}-realm-configmap
 491       - name: {{ include "common.fullname" . }}-auth-truststore-sec
 492         secret:
 493          secretName: aai-common-truststore
 494          items:
 495           {{ range $job := .Values.global.config.auth.files }}
 496            - key: {{ . }}
 497              path: {{ . }}
 498           {{ end }}
 499       restartPolicy: {{ .Values.global.restartPolicy | default .Values.restartPolicy }}
 500       imagePullSecrets:
 501       - name: "{{ include "common.namespace" . }}-docker-registry-key"