kubernetes/aai/components/aai-graphadmin/templates/job-create-db.yaml

   1 {{/*
   2 #
   3 # ============LICENSE_START=======================================================
   4 # org.onap.aai
   5 # ================================================================================
   6 # Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
   7 # Copyright (c) 2020 Nokia Intellectual Property. All rights reserved.
   8 # Copyright (c) 2020-2021 Orange Intellectual Property. All rights reserved.
   9 # ================================================================================
  10 # Licensed under the Apache License, Version 2.0 (the "License");
  11 # you may not use this file except in compliance with the License.
  12 # You may obtain a copy of the License at
  13 #
  14 #    http://www.apache.org/licenses/LICENSE-2.0
  15 #
  16 # Unless required by applicable law or agreed to in writing, software
  17 # distributed under the License is distributed on an "AS IS" BASIS,
  18 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  19 # See the License for the specific language governing permissions and
  20 # limitations under the License.
  21 # ============LICENSE_END=========================================================
  22
  23 # In ONAP, the following job will always be run on each installation
  24 # The following job will go through the latest oxm and
  25 # create properties based on the data type defined in the oxm
  26 # and create the required indexes for the appropriate properties
  27 # This can be run multiple times as the code if the index or property already exists
  28 # then the index or property won't be created again
  29 # NOTE - During the execution of the createSchema job, there should
  30 # be no other janusgraph connection to the graph as its the reason
  31 # that resources traversal and graphadmin wait until this job is done
  32 # If you are using an existing cassandra cluster not coming from oom
  33 # then it is your job to ensure that there are no connections to the database
  34 */}}
  35
  36 {{- if and ( not .Values.global.jobs.migration.enabled ) ( .Values.global.jobs.createSchema.enabled ) }}
  37 apiVersion: batch/v1
  38 kind: Job
  39 metadata:
  40   name: {{ include "common.fullname" . }}-create-db-schema
  41   namespace: {{ include "common.namespace" . }}
  42   labels:
  43     app: {{ include "common.name" . }}-job
  44     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  45     release: {{ include "common.release" . }}
  46     heritage: {{ .Release.Service }}
  47 spec:
  48   backoffLimit: 20
  49   template:
  50     metadata:
  51       labels:
  52         app: {{ include "common.name" . }}-job
  53         release: {{ include "common.release" . }}
  54       name: {{ include "common.name" . }}
  55     spec:
  56       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
  57       {{- if .Values.global.aafEnabled }}
  58       - command:
  59         - sh
  60         args:
  61         - -c
  62         - |
  63           echo "*** retrieve Truststore and Keystore password"
  64           export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
  65           echo "*** obfuscate them "
  66           export JETTY_UTIL_JAR=$(find /usr/local/jetty/lib/ -regextype sed -regex ".*jetty-util-[0-9].*.jar")
  67           export KEYSTORE_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${KEYSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
  68           export KEYSTORE_JKS_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${KEYSTORE_JKS_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
  69           export TRUSTSTORE_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${TRUSTSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
  70           echo "KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
  71           echo "KEYSTORE_JKS_PASSWORD=${KEYSTORE_JKS_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
  72           echo "TRUSTSTORE_PASSWORD=${TRUSTSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
  73         image: {{ include "repositoryGenerator.image.jetty" . }}
  74         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  75         name: {{ include "common.name" . }}-obfuscate
  76         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
  77         securityContext:
  78           runAsUser: {{ .Values.securityContext.user_id }}
  79       - command:
  80         - sh
  81         args:
  82         - -c
  83         - |
  84           echo "*** Set obfuscated Truststore and Keystore password into configuration file"
  85           export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
  86           cd /config-input
  87           for PFILE in `ls -1`
  88           do
  89             envsubst <${PFILE} >/config/${PFILE}
  90           done
  91         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
  92         - mountPath: /config-input
  93           name: properties-input
  94         - mountPath: /config
  95           name: properties
  96         image: {{ include "repositoryGenerator.image.envsubst" . }}
  97         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  98         name: {{ include "common.name" . }}-update-config
  99       {{- end }}
 100       - command:
 101         - /app/ready.py
 102         args:
 103         - --container-name
 104         {{- if .Values.global.cassandra.localCluster }}
 105         - aai-cassandra
 106         {{- else }}
 107         - cassandra
 108         {{- end }}
 109         - --container-name
 110         - aai-schema-service
 111         env:
 112         - name: NAMESPACE
 113           valueFrom:
 114             fieldRef:
 115               apiVersion: v1
 116               fieldPath: metadata.namespace
 117         image: {{ include "repositoryGenerator.image.readiness" . }}
 118         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 119         name: {{ include "common.name" . }}-readiness
 120       containers:
 121       - name: {{ include "common.name" . }}-job
 122         image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
 123         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 124         command:
 125         - sh
 126         args:
 127         - -c
 128         - |
 129            {{- if include "common.onServiceMesh" . }}
 130            echo "waiting 15s for istio side cars to be up"; sleep 15s;{{- end }}
 131            bash docker-entrypoint.sh createDBSchema.sh;
 132            {{ include "common.serviceMesh.killSidecar" . | indent 11 | trim }}
 133         env:
 134         - name: LOCAL_USER_ID
 135           value: {{ .Values.securityContext.user_id | quote }}
 136         - name: LOCAL_GROUP_ID
 137           value: {{ .Values.securityContext.group_id | quote }}
 138         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
 139         - mountPath: /etc/localtime
 140           name: localtime
 141           readOnly: true
 142         - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/janusgraph-realtime.properties
 143           name: config
 144           subPath: janusgraph-realtime.properties
 145         - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/janusgraph-cached.properties
 146           name: config
 147           subPath: janusgraph-cached.properties
 148         - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/aaiconfig.properties
 149           name: properties
 150           subPath: aaiconfig.properties
 151         - mountPath: /opt/aai/logroot/AAI-GA
 152           name: logs
 153         - mountPath: /opt/app/aai-graphadmin/resources/logback.xml
 154           name: config
 155           subPath: logback.xml
 156         - mountPath: /opt/app/aai-graphadmin/resources/localhost-access-logback.xml
 157           name: config
 158           subPath: localhost-access-logback.xml
 159         - mountPath: /opt/app/aai-graphadmin/resources/application.properties
 160           name: properties
 161           subPath: application.properties
 162         resources: {{ include "common.resources" . | nindent 10 }}
 163       {{- if .Values.nodeSelector }}
 164       nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
 165       {{- end }}
 166       {{- if .Values.affinity }}
 167       affinity: {{ toYaml .Values.affinity | nindent 8 }}
 168       {{- end }}
 169       volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
 170       - name: localtime
 171         hostPath:
 172           path: /etc/localtime
 173       {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }}
 174       - name: logs
 175         emptyDir: {}
 176       - name: config
 177         configMap:
 178           name: {{ include "common.fullname" . }}
 179       - name: properties
 180       {{- if .Values.global.aafEnabled }}
 181         emptyDir:
 182           medium: Memory
 183       - name: properties-input
 184       {{- end }}
 185         configMap:
 186           name: {{ include "common.fullname" . }}-properties
 187       restartPolicy: Never
 188       imagePullSecrets:
 189       - name: {{ include "common.namespace" . }}-docker-registry-key
 190 {{ end }}