kubernetes/dcaegen2/components/dcae-cloudify-manager/templates/deployment.yaml

   1 #============LICENSE_START========================================================
   2 # ================================================================================
   3 # Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
   4 # Modifications Copyright © 2018 Amdocs, Bell Canada
   5 # ================================================================================
   6 # Licensed under the Apache License, Version 2.0 (the "License");
   7 # you may not use this file except in compliance with the License.
   8 # You may obtain a copy of the License at
   9 #
  10 #     http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 # Unless required by applicable law or agreed to in writing, software
  13 # distributed under the License is distributed on an "AS IS" BASIS,
  14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 # See the License for the specific language governing permissions and
  16 # limitations under the License.
  17 # ============LICENSE_END=========================================================
  18
  19 apiVersion: apps/v1
  20 kind: Deployment
  21 metadata:
  22   name: {{ include "common.fullname" . }}
  23   namespace: {{ include "common.namespace" . }}
  24   labels:
  25     app: {{ include "common.name" . }}
  26     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  27     release: {{ include "common.release" . }}
  28     heritage: {{ .Release.Service }}
  29 spec:
  30   replicas: 1
  31   selector:
  32     matchLabels:
  33       app: {{ include "common.name" . }}
  34   template:
  35     metadata:
  36       labels:
  37         app: {{ include "common.name" . }}
  38         release: {{ include "common.release" . }}
  39     spec:
  40       # host alias allows local 'cfy' command to use https and match
  41       # the host name in the certificate
  42       hostAliases:
  43       - ip: "127.0.0.1"
  44         hostnames:
  45         - "dcae-cloudify-manager"
  46       initContainers:
  47       - name: {{ include "common.name" . }}-readiness
  48         image: {{ include "common.repository" . }}/{{ .Values.global.readinessImage }}
  49         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  50         command:
  51           - /app/ready.py
  52         args:
  53           - --container-name
  54           - aaf-cm
  55           - "-t"
  56           - "15"
  57         env:
  58           - name: NAMESPACE
  59             valueFrom:
  60               fieldRef:
  61                 apiVersion: v1
  62                 fieldPath: metadata.namespace
  63       - name: {{ include "common.name" . }}-multisite-init
  64         image: {{ include "common.repository" . }}/{{ .Values.multisiteInitImage }}
  65         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  66         args:
  67           - --namespace
  68           - {{ include "common.namespace" . }}
  69           - --configmap
  70           - {{ .Values.multisiteConfigMapName }}
  71         restartPolicy: Never
  72       - name: init-tls
  73         env:
  74           - name: POD_IP
  75             valueFrom:
  76               fieldRef:
  77                 apiVersion: v1
  78                 fieldPath: status.podIP
  79           - name: aaf_locator_fqdn
  80             value: dcae
  81         image: {{ .Values.global.tlsRepository }}/{{ .Values.global.tlsImage }}
  82         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  83         resources: {}
  84         volumeMounts:
  85             - mountPath: /opt/app/osaaf
  86               name: tls-info
  87       {{- if .Values.persistence.enabled }}
  88       - name: remove-lost-found
  89         image: "{{ .Values.global.busyboxRepository }}/{{ .Values.global.busyboxImage }}"
  90         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  91         volumeMounts:
  92         - mountPath: /cfy-persist
  93           name: cm-persistent
  94         command:
  95         - /bin/sh
  96         args:
  97         - -c
  98         - "rm -rf '/cfy-persist/lost+found';"
  99       {{- end }}
 100       containers:
 101         - name: {{ include "common.name" . }}
 102           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
 103           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 104           env:
 105             - name: REQUESTS_CA_BUNDLE
 106               value: "/opt/onap/certs/cacert.pem"
 107           resources:
 108 {{ include "common.resources" . | indent 12 }}
 109           ports:
 110           - containerPort: {{ .Values.service.internalPort }}
 111           # disable liveness probe when breakpoints set in debugger
 112           # so K8s doesn't restart unresponsive container
 113           {{- if eq .Values.liveness.enabled true }}
 114           livenessProbe:
 115             tcpSocket:
 116               port: {{ .Values.service.internalPort }}
 117             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 118             periodSeconds: {{ .Values.liveness.periodSeconds }}
 119           {{ end }}
 120           readinessProbe:
 121             exec:
 122               command:
 123               - /scripts/readiness-check.sh
 124             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 125             periodSeconds: {{ .Values.readiness.periodSeconds }}
 126           volumeMounts:
 127           - mountPath: /opt/onap/config.txt
 128             subPath: config.txt
 129             name: {{ include "common.fullname" .}}-config
 130             readOnly: true
 131           - mountPath: /opt/onap/kube
 132             name: {{ include "common.fullname" .}}-kubeconfig
 133             readOnly: true
 134           - mountPath: /secret
 135             name: dcae-token
 136             readOnly: true
 137           - mountPath: /sys/fs/cgroup
 138             name: {{ include "common.fullname" . }}-cgroup
 139             readOnly: true
 140           - mountPath: /etc/localtime
 141             name: localtime
 142             readOnly: true
 143           - mountPath: /cfy-persist
 144             name: cm-persistent
 145           - mountPath: /opt/onap/certs
 146             name: tls-info
 147           securityContext:
 148             privileged: True
 149       volumes:
 150         - name: {{ include "common.fullname" . }}-config
 151           configMap:
 152             name: {{ include "common.fullname" . }}-configmap
 153         - name: {{ include "common.fullname" .}}-kubeconfig
 154           configMap:
 155             name: {{ .Values.multisiteConfigMapName }}
 156         - name: dcae-token
 157           secret:
 158             secretName: dcae-token
 159         - name: {{ include "common.fullname" . }}-cgroup
 160           hostPath:
 161             path: /sys/fs/cgroup
 162         - name: localtime
 163           hostPath:
 164             path: /etc/localtime
 165         - name: cm-persistent
 166         {{- if .Values.persistence.enabled }}
 167           persistentVolumeClaim:
 168             claimName: {{ include "common.fullname" . }}-data
 169         {{- else }}
 170           emptyDir: {}
 171         {{- end }}
 172         - emptyDir: {}
 173           name: tls-info
 174       imagePullSecrets:
 175       - name: "{{ include "common.namespace" . }}-docker-registry-key"