AAI Rolling upgrade using helm hooks
[oom.git] / kubernetes / aai / charts / aai-traversal / templates / deployment.yaml
1 # Copyright © 2017 Amdocs, Bell Canada
2 # Modifications Copyright © 2018 AT&T
3 #
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
7 #
8 #       http://www.apache.org/licenses/LICENSE-2.0
9 #
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15
16 apiVersion: extensions/v1beta1
17 kind: Deployment
18 metadata:
19   name: {{ include "common.fullname" . }}
20   namespace: {{ include "common.namespace" . }}
21   labels:
22     app: {{ include "common.name" . }}
23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
24     release: {{ .Release.Name }}
25     heritage: {{ .Release.Service }}
26 spec:
27   replicas: {{ .Values.replicaCount }}
28   selector:
29     matchLabels:
30       app: {{ include "common.name" . }}
31   template:
32     metadata:
33       labels:
34         app: {{ include "common.name" . }}
35         release: {{ .Release.Name }}
36       name: {{ include "common.name" . }}
37       annotations:
38         checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
39         msb.onap.org/service-info: '[
40           {
41               "serviceName": "_aai-generic-query",
42               "version": "v11",
43               "url": "/aai/v11/search/generic-query",
44               "protocol": "REST",
45               "port": "8446",
46               "enable_ssl": true,
47               "lb_policy":"ip_hash",
48               "visualRange": "1",
49               "path": "/aai/v11/search/generic-query"
50           },
51           {
52               "serviceName": "_aai-generic-query",
53               "version": "v12",
54               "url": "/aai/v12/search/generic-query",
55               "protocol": "REST",
56               "port": "8446",
57               "enable_ssl": true,
58               "lb_policy":"ip_hash",
59               "visualRange": "1",
60               "path": "/aai/v12/search/generic-query"
61           },
62           {
63               "serviceName": "_aai-generic-query",
64               "version": "v13",
65               "url": "/aai/v13/search/generic-query",
66               "protocol": "REST",
67               "port": "8446",
68               "enable_ssl": true,
69               "lb_policy":"ip_hash",
70               "visualRange": "1",
71               "path": "/aai/v13/search/generic-query"
72           },
73           {
74               "serviceName": "_aai-generic-query",
75               "version": "v14",
76               "url": "/aai/v14/search/generic-query",
77               "protocol": "REST",
78               "port": "8446",
79               "enable_ssl": true,
80               "lb_policy":"ip_hash",
81               "visualRange": "1",
82               "path": "/aai/v14/search/generic-query"
83           },
84           {
85               "serviceName": "_aai-generic-query",
86               "version": "v15",
87               "url": "/aai/v15/search/generic-query",
88               "protocol": "REST",
89               "port": "8446",
90               "enable_ssl": true,
91               "lb_policy":"ip_hash",
92               "visualRange": "1",
93               "path": "/aai/v15/search/generic-query"
94           },
95           {
96               "serviceName": "_aai-generic-query",
97               "version": "v16",
98               "url": "/aai/v16/search/generic-query",
99               "protocol": "REST",
100               "port": "8446",
101               "enable_ssl": true,
102               "lb_policy":"ip_hash",
103               "visualRange": "1",
104               "path": "/aai/v16/search/generic-query"
105           },
106           {
107               "serviceName": "_aai-nodes-query",
108               "version": "v11",
109               "url": "/aai/v11/search/nodes-query",
110               "protocol": "REST",
111               "port": "8446",
112               "enable_ssl": true,
113               "lb_policy":"ip_hash",
114               "visualRange": "1",
115               "path": "/aai/v11/search/nodes-query"
116           },
117           {
118               "serviceName": "_aai-nodes-query",
119               "version": "v12",
120               "url": "/aai/v12/search/nodes-query",
121               "protocol": "REST",
122               "port": "8446",
123               "enable_ssl": true,
124               "lb_policy":"ip_hash",
125               "visualRange": "1",
126               "path": "/aai/v12/search/nodes-query"
127           },
128           {
129               "serviceName": "_aai-nodes-query",
130               "version": "v13",
131               "url": "/aai/v13/search/nodes-query",
132               "protocol": "REST",
133               "port": "8446",
134               "enable_ssl": true,
135               "lb_policy":"ip_hash",
136               "visualRange": "1",
137               "path": "/aai/v13/search/nodes-query"
138           },
139           {
140               "serviceName": "_aai-nodes-query",
141               "version": "v14",
142               "url": "/aai/v14/search/nodes-query",
143               "protocol": "REST",
144               "port": "8446",
145               "enable_ssl": true,
146               "lb_policy":"ip_hash",
147               "visualRange": "1",
148               "path": "/aai/v14/search/nodes-query"
149           },
150           {
151               "serviceName": "_aai-nodes-query",
152               "version": "v15",
153               "url": "/aai/v15/search/nodes-query",
154               "protocol": "REST",
155               "port": "8446",
156               "enable_ssl": true,
157               "lb_policy":"ip_hash",
158               "visualRange": "1",
159               "path": "/aai/v15/search/nodes-query"
160           },
161           {
162               "serviceName": "_aai-nodes-query",
163               "version": "v16",
164               "url": "/aai/v16/search/nodes-query",
165               "protocol": "REST",
166               "port": "8446",
167               "enable_ssl": true,
168               "lb_policy":"ip_hash",
169               "visualRange": "1",
170               "path": "/aai/v16/search/nodes-query"
171           },
172           {
173               "serviceName": "_aai-query",
174               "version": "v11",
175               "url": "/aai/v11/query",
176               "protocol": "REST",
177               "port": "8446",
178               "enable_ssl": true,
179               "lb_policy":"ip_hash",
180               "visualRange": "1",
181               "path": "/aai/v11/query"
182           },
183           {
184               "serviceName": "_aai-query",
185               "version": "v12",
186               "url": "/aai/v12/query",
187               "protocol": "REST",
188               "port": "8446",
189               "enable_ssl": true,
190               "lb_policy":"ip_hash",
191               "visualRange": "1",
192               "path": "/aai/v12/query"
193           },
194           {
195               "serviceName": "_aai-query",
196               "version": "v13",
197               "url": "/aai/v13/query",
198               "protocol": "REST",
199               "port": "8446",
200               "enable_ssl": true,
201               "lb_policy":"ip_hash",
202               "visualRange": "1",
203               "path": "/aai/v13/query"
204           },
205           {
206               "serviceName": "_aai-query",
207               "version": "v14",
208               "url": "/aai/v14/query",
209               "protocol": "REST",
210               "port": "8446",
211               "enable_ssl": true,
212               "lb_policy":"ip_hash",
213               "visualRange": "1",
214               "path": "/aai/v14/query"
215           },
216           {
217               "serviceName": "_aai-query",
218               "version": "v15",
219               "url": "/aai/v15/query",
220               "protocol": "REST",
221               "port": "8446",
222               "enable_ssl": true,
223               "lb_policy":"ip_hash",
224               "visualRange": "1",
225               "path": "/aai/v15/query"
226           },
227           {
228               "serviceName": "_aai-query",
229               "version": "v16",
230               "url": "/aai/v16/query",
231               "protocol": "REST",
232               "port": "8446",
233               "enable_ssl": true,
234               "lb_policy":"ip_hash",
235               "visualRange": "1",
236               "path": "/aai/v16/query"
237           },
238           {
239               "serviceName": "_aai-named-query",
240               "url": "/aai/search",
241               "protocol": "REST",
242               "port": "8446",
243               "enable_ssl": true,
244               "lb_policy":"ip_hash",
245               "visualRange": "1",
246               "path": "/aai/search"
247           },
248           {
249               "serviceName": "aai-generic-query",
250               "version": "v11",
251               "url": "/aai/v11/search/generic-query",
252               "protocol": "REST",
253               "port": "8446",
254               "enable_ssl": true,
255               "lb_policy":"ip_hash",
256               "visualRange": "1"
257           },
258           {
259               "serviceName": "aai-generic-query",
260               "version": "v12",
261               "url": "/aai/v12/search/generic-query",
262               "protocol": "REST",
263               "port": "8446",
264               "enable_ssl": true,
265               "lb_policy":"ip_hash",
266               "visualRange": "1"
267           },
268           {
269               "serviceName": "aai-generic-query",
270               "version": "v13",
271               "url": "/aai/v13/search/generic-query",
272               "protocol": "REST",
273               "port": "8446",
274               "enable_ssl": true,
275               "lb_policy":"ip_hash",
276               "visualRange": "1"
277           },
278           {
279               "serviceName": "aai-generic-query",
280               "version": "v14",
281               "url": "/aai/v14/search/generic-query",
282               "protocol": "REST",
283               "port": "8446",
284               "enable_ssl": true,
285               "lb_policy":"ip_hash",
286               "visualRange": "1"
287           },
288           {
289               "serviceName": "aai-generic-query",
290               "version": "v15",
291               "url": "/aai/v15/search/generic-query",
292               "protocol": "REST",
293               "port": "8446",
294               "enable_ssl": true,
295               "lb_policy":"ip_hash",
296               "visualRange": "1"
297           },
298           {
299               "serviceName": "aai-generic-query",
300               "version": "v16",
301               "url": "/aai/v16/search/generic-query",
302               "protocol": "REST",
303               "port": "8446",
304               "enable_ssl": true,
305               "lb_policy":"ip_hash",
306               "visualRange": "1"
307           },
308           {
309               "serviceName": "aai-nodes-query",
310               "version": "v11",
311               "url": "/aai/v11/search/nodes-query",
312               "protocol": "REST",
313               "port": "8446",
314               "enable_ssl": true,
315               "lb_policy":"ip_hash",
316               "visualRange": "1"
317           },
318           {
319               "serviceName": "aai-nodes-query",
320               "version": "v12",
321               "url": "/aai/v12/search/nodes-query",
322               "protocol": "REST",
323               "port": "8446",
324               "enable_ssl": true,
325               "lb_policy":"ip_hash",
326               "visualRange": "1"
327           },
328           {
329               "serviceName": "aai-nodes-query",
330               "version": "v13",
331               "url": "/aai/v13/search/nodes-query",
332               "protocol": "REST",
333               "port": "8446",
334               "enable_ssl": true,
335               "lb_policy":"ip_hash",
336               "visualRange": "1"
337           },
338           {
339               "serviceName": "aai-nodes-query",
340               "version": "v14",
341               "url": "/aai/v14/search/nodes-query",
342               "protocol": "REST",
343               "port": "8446",
344               "enable_ssl": true,
345               "lb_policy":"ip_hash",
346               "visualRange": "1"
347           },
348           {
349               "serviceName": "aai-nodes-query",
350               "version": "v15",
351               "url": "/aai/v15/search/nodes-query",
352               "protocol": "REST",
353               "port": "8446",
354               "enable_ssl": true,
355               "lb_policy":"ip_hash",
356               "visualRange": "1"
357           },
358           {
359               "serviceName": "aai-nodes-query",
360               "version": "v16",
361               "url": "/aai/v16/search/nodes-query",
362               "protocol": "REST",
363               "port": "8446",
364               "enable_ssl": true,
365               "lb_policy":"ip_hash",
366               "visualRange": "1"
367           },
368           {
369               "serviceName": "aai-query",
370               "version": "v11",
371               "url": "/aai/v11/query",
372               "protocol": "REST",
373               "port": "8446",
374               "enable_ssl": true,
375               "lb_policy":"ip_hash",
376               "visualRange": "1"
377           },
378           {
379               "serviceName": "aai-query",
380               "version": "v12",
381               "url": "/aai/v12/query",
382               "protocol": "REST",
383               "port": "8446",
384               "enable_ssl": true,
385               "lb_policy":"ip_hash",
386               "visualRange": "1"
387           },
388           {
389               "serviceName": "aai-query",
390               "version": "v13",
391               "url": "/aai/v13/query",
392               "protocol": "REST",
393               "port": "8446",
394               "enable_ssl": true,
395               "lb_policy":"ip_hash",
396               "visualRange": "1"
397           },
398           {
399               "serviceName": "aai-query",
400               "version": "v14",
401               "url": "/aai/v14/query",
402               "protocol": "REST",
403               "port": "8446",
404               "enable_ssl": true,
405               "lb_policy":"ip_hash",
406               "visualRange": "1"
407           },
408           {
409               "serviceName": "aai-query",
410               "version": "v15",
411               "url": "/aai/v15/query",
412               "protocol": "REST",
413               "port": "8446",
414               "enable_ssl": true,
415               "lb_policy":"ip_hash",
416               "visualRange": "1"
417           },
418           {
419               "serviceName": "aai-query",
420               "version": "v16",
421               "url": "/aai/v16/query",
422               "protocol": "REST",
423               "port": "8446",
424               "enable_ssl": true,
425               "lb_policy":"ip_hash",
426               "visualRange": "1"
427           },
428           {
429               "serviceName": "aai-named-query",
430               "url": "/aai/search",
431               "protocol": "REST",
432               "port": "8446",
433               "enable_ssl": true,
434               "lb_policy":"ip_hash",
435               "visualRange": "1"
436           }
437           ]'
438     spec:
439       hostname: aai-traversal
440     {{ if .Values.global.initContainers.enabled }}
441       initContainers:
442       - command:
443       {{ if .Values.global.jobs.migration.enabled }}
444         - /root/job_complete.py
445         args:
446         - --job-name
447         - {{ .Release.Name }}-aai-graphadmin-migration
448       {{  else if .Values.global.jobs.createSchema.enabled  }}
449         - /root/job_complete.py
450         args:
451         - --job-name
452         - {{ .Release.Name }}-aai-graphadmin-create-db-schema
453       {{  else }}
454         - /root/ready.py
455         args:
456         - --container-name
457         {{- if .Values.global.cassandra.localCluster }}
458         - aai-cassandra
459         {{- else }}
460         - cassandra
461         {{- end }}
462         - --container-name
463         - aai-schema-service
464       {{  end  }}
465         env:
466         - name: NAMESPACE
467           valueFrom:
468             fieldRef:
469               apiVersion: v1
470               fieldPath: metadata.namespace
471         image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
472         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
473         name: {{ include "common.name" . }}-readiness
474     {{ end }}
475       containers:
476       - name: {{ include "common.name" . }}
477         image: "{{ include "common.repository" . }}/{{ .Values.image }}"
478         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
479         env:
480         - name: DISABLE_UPDATE_QUERY
481           value: {{ .Values.config.disableUpdateQuery | quote }}
482         - name: LOCAL_USER_ID
483           value: {{ .Values.global.config.userId | quote }}
484         - name: LOCAL_GROUP_ID
485           value: {{ .Values.global.config.groupId | quote }}
486         volumeMounts:
487         - mountPath: /etc/localtime
488           name: localtime
489           readOnly: true
490         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/janusgraph-realtime.properties
491           name: {{ include "common.fullname" . }}-config
492           subPath: janusgraph-realtime.properties
493         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/janusgraph-cached.properties
494           name: {{ include "common.fullname" . }}-config
495           subPath: janusgraph-cached.properties
496         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/aaiconfig.properties
497           name: {{ include "common.fullname" . }}-config
498           subPath: aaiconfig.properties
499         - mountPath: /opt/aai/logroot/AAI-GQ
500           name: {{ include "common.fullname" . }}-logs
501         - mountPath: /opt/app/aai-traversal/resources/logback.xml
502           name: {{ include "common.fullname" . }}-config
503           subPath: logback.xml
504         - mountPath: /opt/app/aai-traversal/resources/localhost-access-logback.xml
505           name: {{ include "common.fullname" . }}-config
506           subPath: localhost-access-logback.xml
507         - mountPath: /opt/app/aai-traversal/resources/etc/auth/realm.properties
508           name: {{ include "common.fullname" . }}-config
509           subPath: realm.properties
510         - mountPath: /opt/app/aai-traversal/resources/aaf/org.onap.aai.keyfile
511           name: {{ include "common.fullname" . }}-aaf-certs
512           subPath: org.onap.aai.keyfile
513         - mountPath: /opt/app/aai-traversal/resources/aaf/bath_config.csv
514           name: {{ include "common.fullname" . }}-aaf-certs
515           subPath: bath_config.csv
516         - mountPath: /opt/app/aai-traversal/resources/aaf/org.onap.aai.props
517           name: {{ include "common.fullname" . }}-aaf-properties
518           subPath: org.onap.aai.props
519         - mountPath: /opt/app/aai-traversal/resources/aaf/org.osaaf.location.props
520           name: {{ include "common.fullname" . }}-aaf-properties
521           subPath: org.osaaf.location.props
522         - mountPath: /opt/app/aai-traversal/resources/aaf/permissions.properties
523           name: {{ include "common.fullname" . }}-aaf-properties
524           subPath: permissions.properties
525         - mountPath: /opt/app/aai-traversal/resources/cadi.properties
526           name: {{ include "common.fullname" . }}-aaf-properties
527           subPath: cadi.properties
528         - mountPath: /opt/app/aai-traversal/resources/aaf/org.onap.aai.p12
529           name: {{ include "common.fullname" . }}-aaf-certs
530           subPath: org.onap.aai.p12
531         - mountPath: /opt/app/aai-traversal/resources/aaf/truststoreONAPall.jks
532           name: aai-common-aai-auth-mount
533           subPath: truststoreONAPall.jks
534         - mountPath: /opt/app/aai-traversal/resources/application.properties
535           name: {{ include "common.fullname" . }}-config
536           subPath: application.properties
537           {{ $global := . }}
538           {{ range $job := .Values.global.config.auth.files }}
539         - mountPath: /opt/app/aai-traversal/resources/etc/auth/{{ . }}
540           name: {{ include "common.fullname" $global }}-auth-truststore-sec
541           subPath: {{ . }}
542           {{ end }}
543         ports:
544         - containerPort: {{ .Values.service.internalPort }}
545         - containerPort: {{ .Values.service.internalPort2 }}
546         # disable liveness probe when breakpoints set in debugger
547         # so K8s doesn't restart unresponsive container
548         {{ if .Values.liveness.enabled }}
549         livenessProbe:
550           tcpSocket:
551             port: {{ .Values.service.internalPort }}
552           initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
553           periodSeconds: {{ .Values.liveness.periodSeconds }}
554         {{ end }}
555         readinessProbe:
556           tcpSocket:
557             port: {{ .Values.service.internalPort }}
558           initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
559           periodSeconds: {{ .Values.readiness.periodSeconds }}
560         resources:
561 {{ include "common.resources" . }}
562       {{- if .Values.nodeSelector }}
563       nodeSelector:
564 {{ toYaml .Values.nodeSelector | indent 8 }}
565       {{- end -}}
566       {{- if .Values.affinity }}
567       affinity:
568 {{ toYaml .Values.affinity | indent 8 }}
569       {{- end }}
570
571       # side car containers
572       - name: filebeat-onap
573         image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
574         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
575         volumeMounts:
576         - mountPath: /usr/share/filebeat/filebeat.yml
577           subPath: filebeat.yml
578           name: filebeat-conf
579         - mountPath: /var/log/onap
580           name: {{ include "common.fullname" . }}-logs
581         - mountPath: /usr/share/filebeat/data
582           name: {{ include "common.fullname" . }}-filebeat
583         resources:
584 {{ include "common.resources" . }}
585       volumes:
586       - name: localtime
587         hostPath:
588           path: /etc/localtime
589       - name: filebeat-conf
590         configMap:
591           name: aai-filebeat
592       - name: {{ include "common.fullname" . }}-logs
593         emptyDir: {}
594       - name: {{ include "common.fullname" . }}-filebeat
595         emptyDir: {}
596       - name: {{ include "common.fullname" . }}-config
597         configMap:
598          name: {{ include "common.fullname" . }}-configmap
599       - name: {{ include "common.fullname" . }}-aaf-properties
600         configMap:
601          name: {{ include "common.fullname" . }}-aaf-props
602       - name: {{ include "common.fullname" . }}-aaf-certs
603         secret:
604          secretName: {{ include "common.fullname" . }}-aaf-keys
605       - name: aai-common-aai-auth-mount
606         secret:
607           secretName: aai-common-aai-auth
608       - name: {{ include "common.fullname" . }}-auth-truststore-sec
609         secret:
610          secretName: aai-common-truststore
611          items:
612           {{ range $job := .Values.global.config.auth.files }}
613            - key: {{ . }}
614              path: {{ . }}
615           {{ end }}
616       restartPolicy: {{ .Values.global.restartPolicy | default .Values.restartPolicy }}
617       imagePullSecrets:
618       - name: "{{ include "common.namespace" . }}-docker-registry-key"