kubernetes/dcaegen2/components/dcae-cloudify-manager/templates/deployment.yaml

   1 #============LICENSE_START========================================================
   2 # ================================================================================
   3 # Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
   4 # Modifications Copyright © 2018 Amdocs, Bell Canada
   5 # ================================================================================
   6 # Licensed under the Apache License, Version 2.0 (the "License");
   7 # you may not use this file except in compliance with the License.
   8 # You may obtain a copy of the License at
   9 #
  10 #     http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 # Unless required by applicable law or agreed to in writing, software
  13 # distributed under the License is distributed on an "AS IS" BASIS,
  14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 # See the License for the specific language governing permissions and
  16 # limitations under the License.
  17 # ============LICENSE_END=========================================================
  18
  19 apiVersion: extensions/v1beta1
  20 kind: Deployment
  21 metadata:
  22   name: {{ include "common.fullname" . }}
  23   namespace: {{ include "common.namespace" . }}
  24   labels:
  25     app: {{ include "common.name" . }}
  26     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  27     release: {{ include "common.release" . }}
  28     heritage: {{ .Release.Service }}
  29 spec:
  30   replicas: 1
  31   template:
  32     metadata:
  33       labels:
  34         app: {{ include "common.name" . }}
  35         release: {{ include "common.release" . }}
  36     spec:
  37       # host alias allows local 'cfy' command to use https and match
  38       # the host name in the certificate
  39       hostAliases:
  40       - ip: "127.0.0.1"
  41         hostnames:
  42         - "dcae-cloudify-manager"
  43       initContainers:
  44       - name: {{ include "common.name" . }}-multisite-init
  45         image: {{ include "common.repository" . }}/{{ .Values.multisiteInitImage }}
  46         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  47         args:
  48           - --namespace
  49           - {{ include "common.namespace" . }}
  50           - --configmap
  51           - {{ .Values.multisiteConfigMapName }}
  52         restartPolicy: Never
  53       - name: init-tls
  54         env:
  55           - name: POD_IP
  56             valueFrom:
  57               fieldRef:
  58                 apiVersion: v1
  59                 fieldPath: status.podIP
  60           - name: aaf_locator_fqdn
  61             value: dcae
  62         image: {{ .Values.global.tlsRepository }}/{{ .Values.global.tlsImage }}
  63         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  64         resources: {}
  65         volumeMounts:
  66             - mountPath: /opt/app/osaaf
  67               name: tls-info
  68       containers:
  69         - name: {{ include "common.name" . }}
  70           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  71           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  72           env:
  73             - name: REQUESTS_CA_BUNDLE
  74               value: "/opt/onap/certs/cacert.pem"
  75           resources:
  76 {{ include "common.resources" . | indent 12 }}
  77           ports:
  78           - containerPort: {{ .Values.service.internalPort }}
  79           # disable liveness probe when breakpoints set in debugger
  80           # so K8s doesn't restart unresponsive container
  81           {{- if eq .Values.liveness.enabled true }}
  82           livenessProbe:
  83             tcpSocket:
  84               port: {{ .Values.service.internalPort }}
  85             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  86             periodSeconds: {{ .Values.liveness.periodSeconds }}
  87           {{ end }}
  88           readinessProbe:
  89             exec:
  90               command:
  91               - /scripts/readiness-check.sh
  92             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  93             periodSeconds: {{ .Values.readiness.periodSeconds }}
  94           volumeMounts:
  95           - mountPath: /opt/onap/config.txt
  96             subPath: config.txt
  97             name: {{ include "common.fullname" .}}-config
  98             readOnly: true
  99           - mountPath: /opt/onap/kube
 100             name: {{ include "common.fullname" .}}-kubeconfig
 101             readOnly: true
 102           - mountPath: /secret
 103             name: dcae-token
 104             readOnly: true
 105           - mountPath: /sys/fs/cgroup
 106             name: {{ include "common.fullname" . }}-cgroup
 107             readOnly: true
 108           - mountPath: /etc/localtime
 109             name: localtime
 110             readOnly: true
 111           - mountPath: /cfy-persist
 112             name: cm-persistent
 113           - mountPath: /opt/onap/certs
 114             name: tls-info
 115           securityContext:
 116             privileged: True
 117       volumes:
 118         - name: {{ include "common.fullname" . }}-config
 119           configMap:
 120             name: {{ include "common.fullname" . }}-configmap
 121         - name: {{ include "common.fullname" .}}-kubeconfig
 122           configMap:
 123             name: {{ .Values.multisiteConfigMapName }}
 124         - name: dcae-token
 125           secret:
 126             secretName: dcae-token
 127         - name: {{ include "common.fullname" . }}-cgroup
 128           hostPath:
 129             path: /sys/fs/cgroup
 130         - name: localtime
 131           hostPath:
 132             path: /etc/localtime
 133         - name: cm-persistent
 134         {{- if .Values.persistence.enabled }}
 135           persistentVolumeClaim:
 136             claimName: {{ include "common.fullname" . }}-data
 137         {{- else }}
 138           emptyDir: {}
 139         {{- end }}
 140         - emptyDir: {}
 141           name: tls-info
 142       imagePullSecrets:
 143       - name: "{{ include "common.namespace" . }}-docker-registry-key"