1 # Copyright © 2018 Amdocs, AT&T
2 # Modifications Copyright © 2018 Bell Canada
3 # Modifications Copyright © 2020 Orange
5 # Licensed under the Apache License, Version 2.0 (the "License");
6 # you may not use this file except in compliance with the License.
7 # You may obtain a copy of the License at
9 # http://www.apache.org/licenses/LICENSE-2.0
11 # Unless required by applicable law or agreed to in writing, software
12 # distributed under the License is distributed on an "AS IS" BASIS,
13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 # See the License for the specific language governing permissions and
15 # limitations under the License.
20 name: {{ include "common.fullname" . }}
21 namespace: {{ include "common.namespace" . }}
23 app: {{ include "common.name" . }}
24 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
25 release: {{ include "common.release" . }}
26 heritage: {{ .Release.Service }}
30 app: {{ include "common.name" . }}
31 replicas: {{ .Values.replicaCount }}
35 app: {{ include "common.name" . }}
36 release: {{ include "common.release" . }}
38 {{ if .Values.global.installSidecarSecurity }}
40 - ip: {{ .Values.global.aaf.serverIp }}
42 - {{ .Values.global.aaf.serverHostname }}
45 - name: {{ .Values.global.tproxyConfig.name }}
46 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.tproxyConfig.image }}
47 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
52 - name: {{ include "common.name" . }}
53 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
54 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
56 - containerPort: {{ .Values.service.internalPort }}
57 # disable liveness probe when breakpoints set in debugger
58 # so K8s doesn't restart unresponsive container
59 {{ if .Values.liveness.enabled }}
62 port: {{ .Values.service.internalPort }}
63 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
64 periodSeconds: {{ .Values.liveness.periodSeconds }}
68 port: {{ .Values.service.internalPort }}
69 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
70 periodSeconds: {{ .Values.readiness.periodSeconds }}
73 value: /opt/app/babel/config
74 - name: KEY_STORE_PASSWORD
77 name: {{ template "common.fullname" . }}-pass
78 key: KEY_STORE_PASSWORD
79 - name: KEY_MANAGER_PASSWORD
82 name: {{ template "common.fullname" . }}-pass
83 key: KEY_MANAGER_PASSWORD
85 - mountPath: /etc/localtime
88 - mountPath: /opt/app/babel/config/artifact-generator.properties
89 name: {{ include "common.fullname" . }}-config
90 subPath: artifact-generator.properties
91 - mountPath: /opt/app/babel/config/tosca-mappings.json
92 name: {{ include "common.fullname" . }}-config
93 subPath: tosca-mappings.json
94 - mountPath: /opt/app/babel/config/babel-auth.properties
95 name: {{ include "common.fullname" . }}-config
96 subPath: babel-auth.properties
97 - mountPath: /opt/app/babel/config/auth
98 name: {{ include "common.fullname" . }}-secrets
99 - mountPath: /var/log/onap
100 name: {{ include "common.fullname" . }}-logs
101 - mountPath: /opt/app/babel/config/logback.xml
102 name: {{ include "common.fullname" . }}-config
105 {{ include "common.resources" . }}
106 {{- if .Values.nodeSelector }}
108 {{ toYaml .Values.nodeSelector | indent 8 }}
110 {{- if .Values.affinity }}
112 {{ toYaml .Values.affinity | indent 8 }}
115 # side car containers
116 - name: filebeat-onap
117 image: {{ include "repositoryGenerator.image.logging" . }}
118 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
120 - mountPath: /usr/share/filebeat/filebeat.yml
121 subPath: filebeat.yml
123 - mountPath: /var/log/onap
124 name: {{ include "common.fullname" . }}-logs
125 - mountPath: /usr/share/filebeat/data
128 {{ if .Values.global.installSidecarSecurity }}
129 - name: {{ .Values.global.rproxy.name }}
130 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.rproxy.image }}
131 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
134 value: "/opt/app/rproxy/config"
135 - name: KEY_STORE_PASSWORD
136 value: {{ .Values.config.keyStorePassword }}
137 - name: spring_profiles_active
138 value: {{ .Values.global.rproxy.activeSpringProfiles }}
140 - name: {{ include "common.fullname" . }}-rproxy-config
141 mountPath: /opt/app/rproxy/config/forward-proxy.properties
142 subPath: forward-proxy.properties
143 - name: {{ include "common.fullname" . }}-rproxy-config
144 mountPath: /opt/app/rproxy/config/primary-service.properties
145 subPath: primary-service.properties
146 - name: {{ include "common.fullname" . }}-rproxy-config
147 mountPath: /opt/app/rproxy/config/reverse-proxy.properties
148 subPath: reverse-proxy.properties
149 - name: {{ include "common.fullname" . }}-rproxy-config
150 mountPath: /opt/app/rproxy/config/cadi.properties
151 subPath: cadi.properties
152 - name: {{ include "common.fullname" . }}-rproxy-log-config
153 mountPath: /opt/app/rproxy/config/logback-spring.xml
154 subPath: logback-spring.xml
155 - name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
156 mountPath: /opt/app/rproxy/config/auth/uri-authorization.json
157 subPath: uri-authorization.json
158 - name: {{ include "common.fullname" . }}-rproxy-auth-config
159 mountPath: /opt/app/rproxy/config/auth/tomcat_keystore
160 subPath: tomcat_keystore
161 - name: {{ include "common.fullname" . }}-rproxy-auth-config
162 mountPath: /opt/app/rproxy/config/auth/client-cert.p12
163 subPath: client-cert.p12
164 - name: {{ include "common.fullname" . }}-rproxy-auth-config
165 mountPath: /opt/app/rproxy/config/auth/aaf_truststore.jks
166 subPath: aaf_truststore.jks
167 - name: {{ include "common.fullname" . }}-rproxy-security-config
168 mountPath: /opt/app/rproxy/config/security/keyfile
172 - containerPort: {{ .Values.global.rproxy.port }}
174 - name: {{ .Values.global.fproxy.name }}
175 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.fproxy.image }}
176 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
179 value: "/opt/app/fproxy/config"
180 - name: KEY_STORE_PASSWORD
181 value: {{ .Values.config.keyStorePassword }}
182 - name: spring_profiles_active
183 value: {{ .Values.global.fproxy.activeSpringProfiles }}
185 - name: {{ include "common.fullname" . }}-fproxy-config
186 mountPath: /opt/app/fproxy/config/fproxy.properties
187 subPath: fproxy.properties
188 - name: {{ include "common.fullname" . }}-fproxy-log-config
189 mountPath: /opt/app/fproxy/config/logback-spring.xml
190 subPath: logback-spring.xml
191 - name: {{ include "common.fullname" . }}-fproxy-auth-config
192 mountPath: /opt/app/fproxy/config/auth/tomcat_keystore
193 subPath: tomcat_keystore
194 - name: {{ include "common.fullname" . }}-fproxy-auth-config
195 mountPath: /opt/app/fproxy/config/auth/client-cert.p12
196 subPath: client-cert.p12
198 - containerPort: {{ .Values.global.fproxy.port }}
205 - name: {{ include "common.fullname" . }}-config
207 name: {{ include "common.fullname" . }}-configmap
209 - key: artifact-generator.properties
210 path: artifact-generator.properties
211 - key: tosca-mappings.json
212 path: tosca-mappings.json
213 - key: babel-auth.properties
214 path: babel-auth.properties
217 - name: {{ include "common.fullname" . }}-secrets
219 secretName: {{ include "common.fullname" . }}-babel-secrets
220 - name: filebeat-conf
223 - name: {{ include "common.fullname" . }}-logs
227 {{ if .Values.global.installSidecarSecurity }}
228 - name: {{ include "common.fullname" . }}-rproxy-config
230 name: {{ include "common.fullname" . }}-rproxy-config
231 - name: {{ include "common.fullname" . }}-rproxy-log-config
233 name: {{ include "common.fullname" . }}-rproxy-log-config
234 - name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
236 name: {{ include "common.fullname" . }}-rproxy-uri-auth-config
237 - name: {{ include "common.fullname" . }}-rproxy-auth-config
239 secretName: {{ include "common.fullname" . }}-rproxy-auth-config
240 - name: {{ include "common.fullname" . }}-rproxy-security-config
242 secretName: {{ include "common.fullname" . }}-rproxy-security-config
243 - name: {{ include "common.fullname" . }}-fproxy-config
245 name: {{ include "common.fullname" . }}-fproxy-config
246 - name: {{ include "common.fullname" . }}-fproxy-log-config
248 name: {{ include "common.fullname" . }}-fproxy-log-config
249 - name: {{ include "common.fullname" . }}-fproxy-auth-config
251 secretName: {{ include "common.fullname" . }}-fproxy-auth-config
255 - name: "{{ include "common.namespace" . }}-docker-registry-key"