kubernetes/aai/components/aai-traversal/templates/deployment.yaml

   1 {{/*
   2 # Copyright (c) 2017 Amdocs, Bell Canada
   3 # Modifications Copyright (c) 2018 AT&T
   4 # Modifications Copyright (c) 2020 Nokia, Orange
   5 # Modifications Copyright (c) 2021 Orange
   6 # Modifications Copyright © 2023 Nordix Foundation
   7 #
   8 # Licensed under the Apache License, Version 2.0 (the "License");
   9 # you may not use this file except in compliance with the License.
  10 # You may obtain a copy of the License at
  11 #
  12 #       http://www.apache.org/licenses/LICENSE-2.0
  13 #
  14 # Unless required by applicable law or agreed to in writing, software
  15 # distributed under the License is distributed on an "AS IS" BASIS,
  16 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  17 # See the License for the specific language governing permissions and
  18 # limitations under the License.
  19 */}}
  20
  21 apiVersion: apps/v1
  22 kind: Deployment
  23 metadata:
  24   name: {{ include "common.fullname" . }}
  25   namespace: {{ include "common.namespace" . }}
  26   labels:
  27     app: {{ include "common.name" . }}
  28     app.kubernetes.io/name: {{ include "common.name" . }}
  29     {{- if .Chart.AppVersion }}
  30     version: "{{ .Chart.AppVersion | replace "+" "_" }}"
  31     {{- else }}
  32     version: "{{ .Chart.Version | replace "+" "_" }}"
  33     {{- end }}
  34     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  35     release: {{ include "common.release" . }}
  36     heritage: {{ .Release.Service }}
  37 spec:
  38   replicas: {{ .Values.replicaCount }}
  39   minReadySeconds: {{ .Values.minReadySeconds }}
  40   strategy:
  41     type: {{ .Values.updateStrategy.type }}
  42     rollingUpdate:
  43       maxUnavailable: {{ .Values.updateStrategy.maxUnavailable }}
  44       maxSurge: {{ .Values.updateStrategy.maxSurge }}
  45   selector:
  46     matchLabels:
  47       app: {{ include "common.name" . }}
  48   template:
  49     metadata:
  50       labels:
  51         app: {{ include "common.name" . }}
  52         release: {{ include "common.release" . }}
  53         app.kubernetes.io/name: {{ include "common.name" . }}
  54         {{- if .Chart.AppVersion }}
  55         version: "{{ .Chart.AppVersion | replace "+" "_" }}"
  56         {{- else }}
  57         version: "{{ .Chart.Version | replace "+" "_" }}"
  58         {{- end }}
  59       name: {{ include "common.name" . }}
  60       annotations:
  61         checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
  62       {{- if .Values.global.msbEnabled }}
  63         {{ $values := .Values }}
  64         msb.onap.org/service-info: '[
  65         {{- range $api_endpoint := $values.aai_enpoints -}}
  66           {{- range $api_version := $values.api_list }}
  67           {
  68               "serviceName": "_{{ $api_endpoint.name }}",
  69               "version": "v{{ $api_version }}",
  70               "url": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}",
  71               "protocol": "REST",
  72               "port": "8446",
  73               "enable_ssl": true,
  74               "lb_policy":"ip_hash",
  75               "visualRange": "1",
  76               "path": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}"
  77           },
  78           {
  79               "serviceName": "{{ $api_endpoint.name }}",
  80               "version": "v{{ $api_version }}",
  81               "url": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}",
  82               "protocol": "REST",
  83               "port": "8446",
  84               "enable_ssl": true,
  85               "lb_policy":"ip_hash",
  86               "visualRange": "1"
  87           },
  88           {{- end }}
  89         {{- end }}
  90           {
  91               "serviceName": "_aai-named-query",
  92               "url": "/aai/search",
  93               "protocol": "REST",
  94               "port": "8446",
  95               "enable_ssl": true,
  96               "lb_policy":"ip_hash",
  97               "visualRange": "1",
  98               "path": "/aai/search"
  99           },
 100           {
 101               "serviceName": "aai-named-query",
 102               "url": "/aai/search",
 103               "protocol": "REST",
 104               "port": "8446",
 105               "enable_ssl": true,
 106               "lb_policy":"ip_hash",
 107               "visualRange": "1"
 108           }
 109           ]'
 110       {{- end }}
 111     spec:
 112       hostname: aai-traversal
 113       terminationGracePeriodSeconds: {{ .Values.service.terminationGracePeriodSeconds }}
 114       initContainers:
 115       - command:
 116         - /app/ready.py
 117         args:
 118       {{- if .Values.global.jobs.migration.enabled }}
 119         - --job-name
 120         - {{ include "common.release" . }}-aai-graphadmin-migration
 121       {{- else  }}
 122         {{- if .Values.global.jobs.createSchema.enabled  }}
 123         - --job-name
 124         - {{ include "common.release" . }}-aai-graphadmin-create-db-schema
 125         {{- else }}
 126         - --app-name
 127           {{- if .Values.global.cassandra.localCluster }}
 128         - aai-cassandra
 129           {{- else }}
 130         - cassandra
 131           {{- end }}
 132         - --container-name
 133         - aai-schema-service
 134         {{- end }}
 135       {{- end }}
 136         env:
 137         - name: NAMESPACE
 138           valueFrom:
 139             fieldRef:
 140               apiVersion: v1
 141               fieldPath: metadata.namespace
 142         image: {{ include "repositoryGenerator.image.readiness" . }}
 143         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 144         name: {{ include "common.name" . }}-readiness
 145         resources:
 146           limits:
 147             cpu: "100m"
 148             memory: "0.5Gi"
 149           requests:
 150             cpu: "3m"
 151             memory: "0.02Gi"
 152       containers:
 153       - name: {{ include "common.name" . }}
 154         image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
 155         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 156         command:
 157         - sh
 158         args:
 159         - -c
 160         - |
 161           echo "*** actual launch of AAI Resources"
 162           /bin/bash /opt/app/aai-traversal/docker-entrypoint.sh
 163         env:
 164         {{- if .Values.config.env }}
 165         {{- range $key,$value := .Values.config.env }}
 166         - name: {{ $key | upper | quote}}
 167           value: {{ $value | quote}}
 168         {{- end }}
 169         {{- end }}
 170         {{- if .Values.config.profiling.enabled }}
 171         - name: PRE_JVM_ARGS
 172           value: '{{ join " " .Values.config.profiling.args }}'
 173         {{- end }}
 174         {{- if .Values.config.debug.enabled }}
 175         - name: POST_JVM_ARGS
 176           value: {{ .Values.config.debug.args | quote }}
 177         {{- end }}
 178         - name: DISABLE_UPDATE_QUERY
 179           value: {{ .Values.config.disableUpdateQuery | quote }}
 180         - name: LOCAL_USER_ID
 181           value: {{ .Values.global.config.userId | quote }}
 182         - name: LOCAL_GROUP_ID
 183           value: {{ .Values.global.config.groupId | quote }}
 184         - name: INTERNAL_PORT_1
 185           value: {{ .Values.service.internalPort | quote }}
 186         - name: INTERNAL_PORT_2
 187           value: {{ .Values.service.internalPort2 | quote }}
 188         - name: INTERNAL_PORT_3
 189           value: {{ .Values.service.internalPort3 | quote }}
 190         volumeMounts:
 191         - mountPath: /etc/localtime
 192           name: localtime
 193           readOnly: true
 194         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/janusgraph-realtime.properties
 195           name: {{ include "common.fullname" . }}-config
 196           subPath: janusgraph-realtime.properties
 197         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/janusgraph-cached.properties
 198           name: {{ include "common.fullname" . }}-config
 199           subPath: janusgraph-cached.properties
 200         - mountPath: /opt/app/aai-traversal/resources/etc/appprops/aaiconfig.properties
 201           name: {{ include "common.fullname" . }}-config
 202           subPath: aaiconfig.properties
 203         - mountPath: /opt/aai/logroot/AAI-GQ
 204           name: logs
 205         - mountPath: /opt/aai/logroot/AAI-GQ/misc
 206           name: {{ include "common.fullname" . }}-logs-misc
 207         - mountPath: /opt/app/aai-traversal/resources/logback.xml
 208           name: {{ include "common.fullname" . }}-config
 209           subPath: logback.xml
 210         - mountPath: /opt/app/aai-traversal/resources/localhost-access-logback.xml
 211           name: {{ include "common.fullname" . }}-config
 212           subPath: localhost-access-logback.xml
 213         - mountPath: /opt/app/aai-traversal/resources/etc/auth/realm.properties
 214           name: {{ include "common.fullname" . }}-config
 215           subPath: realm.properties
 216         - mountPath: /opt/app/aai-traversal/resources/application.properties
 217           name: {{ include "common.fullname" . }}-config
 218           subPath: application.properties
 219         - mountPath: /opt/app/aai-traversal/resources/application-keycloak.properties
 220           name: {{ include "common.fullname" . }}-config
 221           subPath: application-keycloak.properties
 222         ports:
 223         - containerPort: {{ .Values.service.internalPort }}
 224           name: {{ .Values.service.portName }}
 225
 226         {{- if .Values.config.debug.enabled }}
 227         - containerPort: {{ .Values.service.internalPort2 }}
 228           name: {{ .Values.service.portName2 }}
 229         {{- end }}
 230         - containerPort: {{ .Values.service.internalPort3 }}
 231           name: {{ .Values.service.portName3 }}
 232         {{- if .Values.config.profiling.enabled }}
 233         - containerPort: {{ .Values.service.internalPort4 }}
 234           name: {{ .Values.service.portName4 }}
 235         {{- end }}
 236
 237         lifecycle:
 238           # wait for active requests (long-running tasks) to be finished
 239           # Before the SIGTERM is invoked, Kubernetes exposes a preStop hook in the Pod.
 240           preStop:
 241             exec:
 242               command:
 243                 - sh
 244                 - -c
 245                 - |
 246                   while (netstat -an | grep ESTABLISHED | grep -e $INTERNAL_PORT_1 -e $INTERNAL_PORT_2)
 247                   do sleep 10
 248                   done
 249         # disable liveness probe when breakpoints set in debugger
 250         # so K8s doesn't restart unresponsive container
 251         {{ if .Values.liveness.enabled }}
 252         livenessProbe:
 253           httpGet:
 254             path: /aai/util/echo?action=checkDB
 255             port: {{ .Values.service.internalPort }}
 256             scheme: HTTP
 257             httpHeaders:
 258             - name: X-FromAppId
 259               value: LivenessCheck
 260             - name: X-TransactionId
 261               value: LiveCheck_TID
 262             - name: Accept
 263               value: application/json
 264           initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 265           periodSeconds: {{ .Values.liveness.periodSeconds }}
 266         {{ end }}
 267         readinessProbe:
 268           httpGet:
 269             path: /aai/util/echo?action=checkDB
 270             port: {{ .Values.service.internalPort }}
 271             scheme: HTTP
 272             httpHeaders:
 273             - name: X-FromAppId
 274               value: ReadinessCheck
 275             - name: X-TransactionId
 276               value: ReadinessCheck_TID
 277             - name: Accept
 278               value: application/json
 279           initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 280           periodSeconds: {{ .Values.readiness.periodSeconds }}
 281         resources: {{ include "common.resources" . | nindent 10 }}
 282       {{- if .Values.nodeSelector }}
 283       nodeSelector:
 284 {{ toYaml .Values.nodeSelector | indent 8 }}
 285       {{- end }}
 286       {{- if .Values.affinity }}
 287       affinity:
 288 {{ toYaml .Values.affinity | indent 8 }}
 289       {{- end }}
 290
 291       # side car containers
 292       {{ include "common.log.sidecar" . | nindent 6 }}
 293       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 294       volumes:
 295       - name: localtime
 296         hostPath:
 297           path: /etc/localtime
 298       - name: logs
 299         emptyDir: {}
 300       - name: {{ include "common.fullname" . }}-logs-misc
 301         emptyDir: {}
 302       {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }}
 303       - name: {{ include "common.fullname" . }}-config
 304         configMap:
 305           name: {{ include "common.fullname" . }}
 306       restartPolicy: {{ .Values.global.restartPolicy | default .Values.restartPolicy }}
 307       imagePullSecrets:
 308       - name: "{{ include "common.namespace" . }}-docker-registry-key"