kubernetes/aai/components/aai-sparky-be/templates/deployment.yaml

   1 {{/*
   2 # Copyright (c) 2017 Amdocs, Bell Canada
   3 # Modifications Copyright (c) 2018 AT&T
   4 # Modifications Copyright (c) 2020 Nokia
   5 #
   6 # Licensed under the Apache License, Version 2.0 (the "License");
   7 # you may not use this file except in compliance with the License.
   8 # You may obtain a copy of the License at
   9 #
  10 #       http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 # Unless required by applicable law or agreed to in writing, software
  13 # distributed under the License is distributed on an "AS IS" BASIS,
  14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 # See the License for the specific language governing permissions and
  16 # limitations under the License.
  17 */}}
  18
  19 apiVersion: apps/v1
  20 kind: Deployment
  21 metadata:
  22   name: {{ include "common.fullname" . }}
  23   namespace: {{ include "common.namespace" . }}
  24   labels:
  25     app: {{ include "common.name" . }}
  26     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  27     release: {{ include "common.release" . }}
  28     heritage: {{ .Release.Service }}
  29 spec:
  30   replicas: {{ .Values.replicaCount }}
  31   selector:
  32     matchLabels:
  33       app: {{ include "common.name" . }}
  34   template:
  35     metadata:
  36       annotations:
  37         sidecar.istio.io/rewriteAppHTTPProbers: "false"
  38       labels:
  39         app: {{ include "common.name" . }}
  40         release: {{ include "common.release" . }}
  41       name: {{ include "common.name" . }}
  42     spec:
  43       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
  44       {{- if ( include "common.needTLS" .) }}
  45       - command:
  46         - sh
  47         args:
  48         - -c
  49         - |
  50           echo "*** retrieve Truststore and Keystore password"
  51           export $(cat {{ .Values.certInitializer.credsPath }}/mycreds.prop \
  52             | xargs -0)
  53           if [ -z "$KEYSTORE_PASSWORD" ]
  54           then
  55             echo " /!\ certificates retrieval failed"
  56             exit 1
  57           fi
  58           echo "*** write them in portal part"
  59           cd /config-input
  60           for PFILE in `ls -1 .`
  61             do
  62               envsubst <${PFILE} >/config/${PFILE}
  63           done
  64         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
  65         - mountPath: /config-input
  66           name: portal-config-input
  67         - mountPath: /config
  68           name: portal-config
  69         image: {{ include "repositoryGenerator.image.envsubst" . }}
  70         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  71         name: {{ include "common.name" . }}-update-config
  72       {{- end }}
  73       - command:
  74         - /app/ready.py
  75         args:
  76         - --container-name
  77         - aai
  78         env:
  79         - name: NAMESPACE
  80           valueFrom:
  81             fieldRef:
  82               apiVersion: v1
  83               fieldPath: metadata.namespace
  84         image: {{ include "repositoryGenerator.image.readiness" . }}
  85         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  86         name: {{ include "common.name" . }}-readiness
  87       containers:
  88       - name: {{ include "common.name" . }}
  89         image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
  90         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  91         command:
  92         - sh
  93         args:
  94         - -c
  95         - |
  96           echo "*** retrieve Truststore and Keystore password"
  97           export $(cat {{ .Values.certInitializer.credsPath }}/mycreds.prop \
  98             | xargs -0)
  99           echo "*** actual launch of AAI Sparky BE"
 100           /opt/app/sparky/bin/start.sh
 101         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
 102         - mountPath: /etc/localtime
 103           name: localtime
 104           readOnly: true
 105         - mountPath: /opt/app/sparky/config/auth/csp-cookie-filter.properties
 106           name: auth-config
 107           subPath: csp-cookie-filter.properties
 108         - mountPath: /opt/app/sparky/config/portal/
 109           name: portal-config
 110         - mountPath: /opt/app/sparky/config/portal/BOOT-INF/classes/
 111           name: portal-config-props
 112         - mountPath: {{ .Values.log.path }}
 113           name: logs
 114         - mountPath:  /opt/app/sparky/config/application.properties
 115           name: config
 116           subPath: application.properties
 117         - mountPath:  /opt/app/sparky/config/application-resources.properties
 118           name: config
 119           subPath: application-resources.properties
 120         - mountPath:  /opt/app/sparky/config/application-ssl.properties
 121           name: config
 122           subPath: application-ssl.properties
 123         - mountPath:  /opt/app/sparky/config/application-oxm-default.properties
 124           name: config
 125           subPath: application-oxm-default.properties
 126         - mountPath:  /opt/app/sparky/config/application-oxm-override.properties
 127           name: config
 128           subPath: application-oxm-override.properties
 129         - mountPath:  /opt/app/sparky/config/application-oxm-schema-prod.properties
 130           name: config
 131           subPath: application-oxm-schema-prod.properties
 132         - mountPath:  /opt/app/sparky/config/roles.config
 133           name: config
 134           subPath: roles.config
 135         - mountPath:  /opt/app/sparky/config/users.config
 136           name: config
 137           subPath: users.config
 138         - mountPath:  /opt/app/sparky/config/logging/logback.xml
 139           name: config
 140           subPath: logback.xml
 141         ports:
 142         - containerPort: {{ .Values.service.internalPort }}
 143         # disable liveness probe when breakpoints set in debugger
 144         # so K8s doesn't restart unresponsive container
 145         {{- if eq .Values.liveness.enabled true }}
 146         livenessProbe:
 147           tcpSocket:
 148             port: {{ .Values.service.internalPort }}
 149           initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 150           periodSeconds: {{ .Values.liveness.periodSeconds }}
 151         {{ end -}}
 152         readinessProbe:
 153           tcpSocket:
 154             port: {{ .Values.service.internalPort }}
 155           initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 156           periodSeconds: {{ .Values.readiness.periodSeconds }}
 157         resources:
 158 {{ include "common.resources" . }}
 159       {{- if .Values.nodeSelector }}
 160       nodeSelector:
 161 {{ toYaml .Values.nodeSelector | indent 8 }}
 162       {{- end -}}
 163       {{- if .Values.affinity }}
 164       affinity:
 165 {{ toYaml .Values.affinity | indent 8 }}
 166       {{- end }}
 167
 168       # side car containers
 169       {{ include "common.log.sidecar" . | nindent 6 }}
 170       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 171       volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
 172       - name: localtime
 173         hostPath:
 174           path: /etc/localtime
 175       - name: config
 176         configMap:
 177           name: {{ include "common.fullname" . }}
 178       - name: portal-config
 179       {{- if .Values.global.aafEnabled }}
 180         emptyDir:
 181           medium: Memory
 182       - name: portal-config-input
 183       {{- end }}
 184         configMap:
 185           name: {{ include "common.fullname" . }}-portal
 186       - name: portal-config-props
 187         configMap:
 188           name: {{ include "common.fullname" . }}-portal-props
 189       - name: auth-config
 190         secret:
 191           secretName: {{ include "common.fullname" . }}
 192       - name: logs
 193         emptyDir: {}
 194         {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }}
 195       - name: modeldir
 196         emptyDir: {}
 197       restartPolicy: {{ .Values.global.restartPolicy | default .Values.restartPolicy }}
 198       imagePullSecrets:
 199       - name: "{{ include "common.namespace" . }}-docker-registry-key"