kubernetes/aai/components/aai-modelloader/templates/deployment.yaml

   1 {{/*
   2 # Copyright © 2018 Amdocs, AT&T
   3 # Modifications Copyright © 2018 Bell Canada
   4 # Modifications Copyright © 2020-2021 Orange
   5 #
   6 # Licensed under the Apache License, Version 2.0 (the "License");
   7 # you may not use this file except in compliance with the License.
   8 # You may obtain a copy of the License at
   9 #
  10 #       http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 # Unless required by applicable law or agreed to in writing, software
  13 # distributed under the License is distributed on an "AS IS" BASIS,
  14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 # See the License for the specific language governing permissions and
  16 # limitations under the License.
  17 */}}
  18
  19 apiVersion: apps/v1
  20 kind: Deployment
  21 metadata:
  22   name: {{ include "common.fullname" . }}
  23   namespace: {{ include "common.namespace" . }}
  24   labels:
  25     app: {{ include "common.name" . }}
  26     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  27     release: {{ include "common.release" . }}
  28     heritage: {{ .Release.Service }}
  29 spec:
  30   replicas: {{ .Values.replicaCount }}
  31   selector:
  32     matchLabels:
  33       app: {{ include "common.name" . }}
  34   template:
  35     metadata:
  36       labels:
  37         app: {{ include "common.name" . }}
  38         release: {{ include "common.release" . }}
  39       name: {{ include "common.name" . }}
  40     spec:
  41       {{- if .Values.nodeSelector }}
  42       nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
  43       {{- end -}}
  44       {{- if .Values.affinity }}
  45       affinity: {{ toYaml .Values.affinity | nindent 8 }}
  46       {{- end }}
  47       {{- if .Values.global.aafEnabled }}
  48       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
  49       - command:
  50         - sh
  51         args:
  52         - -c
  53         - |
  54           echo "*** retrieve Truststore and Keystore password"
  55           export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
  56           echo "*** obfuscate them "
  57           export KEYSTORE_PLAIN_PASSWORD=${KEYSTORE_PLAIN_PASSWORD}
  58           export TRUSTSTORE_PLAIN_PASSWORD=${TRUSTSTORE_PLAIN_PASSWORD}
  59           export KEYSTORE_PASSWORD=`java -cp /usr/local/jetty/lib/jetty-util-9.4.44.v20210927.jar org.eclipse.jetty.util.security.Password ${KEYSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
  60           export TRUSTSTORE_PASSWORD=`java -cp /usr/local/jetty/lib/jetty-util-9.4.44.v20210927.jar org.eclipse.jetty.util.security.Password ${TRUSTSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
  61           echo "KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
  62           echo "TRUSTSTORE_PASSWORD=${TRUSTSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
  63         image: {{ include "repositoryGenerator.image.jetty" . }}
  64         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  65         name: {{ include "common.name" . }}-obfuscate
  66         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
  67         securityContext:
  68           runAsUser: {{ .Values.securityContext.user_id }}
  69       - command:
  70         - sh
  71         args:
  72         - -c
  73         - |
  74           echo "*** Set obfuscated Truststore and Keystore password into configuration file"
  75           export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
  76           cd /config-input
  77           for PFILE in `ls -1`
  78           do
  79             envsubst <${PFILE} >/config/${PFILE}
  80           done
  81         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
  82         - mountPath: /config-input
  83           name: prop-config-input
  84         - mountPath: /config
  85           name: prop-config
  86         image: {{ include "repositoryGenerator.image.envsubst" . }}
  87         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  88         name: {{ include "common.name" . }}-update-config
  89       {{- end }}
  90       containers:
  91       - name: {{ include "common.name" . }}
  92         image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
  93         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  94         env:
  95         - name: CONFIG_HOME
  96           value: /opt/app/model-loader/config/
  97         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
  98         - mountPath: /etc/localtime
  99           name: localtime
 100           readOnly: true
 101         - mountPath: /opt/app/model-loader/config/model-loader.properties
 102           subPath: model-loader.properties
 103           name: prop-config
 104         - mountPath: /opt/app/model-loader/config/auth/
 105           name: auth-config
 106         - mountPath: {{ .Values.log.path }}
 107           name: logs
 108         - mountPath: /opt/app/model-loader/logback.xml
 109           name: log-config
 110           subPath: logback.xml
 111         resources: {{ include "common.resources" . | nindent 10 }}
 112       # side car containers
 113         {{ include "common.log.sidecar" . | nindent 6 }}
 114       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 115       volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
 116       - name: localtime
 117         hostPath:
 118           path: /etc/localtime
 119       - name: prop-config
 120       {{- if .Values.global.aafEnabled }}
 121         emptyDir:
 122           medium: Memory
 123       - name: prop-config-input
 124       {{- end }}
 125         configMap:
 126           name: {{ include "common.fullname" . }}-prop
 127       - name: auth-config
 128         secret:
 129           secretName: {{ include "common.fullname" . }}
 130       - name: logs
 131         emptyDir: {}
 132       {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }}
 133       - name: log-config
 134         configMap:
 135           name: {{ include "common.fullname" . }}-log
 136       restartPolicy: {{ .Values.global.restartPolicy | default .Values.restartPolicy }}
 137       imagePullSecrets:
 138       - name: "{{ include "common.namespace" . }}-docker-registry-key"