kubernetes/dcaegen2/components/dcae-config-binding-service/templates/deployment.yaml

   1 #============LICENSE_START========================================================
   2 # ================================================================================
   3 # Copyright (c) 2019 AT&T Intellectual Property. All rights reserved.
   4 # ================================================================================
   5 # Licensed under the Apache License, Version 2.0 (the "License");
   6 # you may not use this file except in compliance with the License.
   7 # You may obtain a copy of the License at
   8 #
   9 #     http://www.apache.org/licenses/LICENSE-2.0
  10 #
  11 # Unless required by applicable law or agreed to in writing, software
  12 # distributed under the License is distributed on an "AS IS" BASIS,
  13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14 # See the License for the specific language governing permissions and
  15 # limitations under the License.
  16 # ============LICENSE_END=========================================================
  17
  18 apiVersion: extensions/v1beta1
  19 kind: Deployment
  20 metadata:
  21   name: {{ include "common.fullname" . }}
  22   namespace: {{ include "common.namespace" . }}
  23   labels:
  24     app: {{ include "common.name" . }}
  25     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  26     release: {{ include "common.release" . }}
  27     heritage: {{ .Release.Service }}
  28 spec:
  29   replicas: 1
  30   template:
  31     metadata:
  32       labels:
  33         app: {{ include "common.name" . }}
  34         release: {{ include "common.release" . }}
  35     spec:
  36       initContainers:
  37         - name: {{ include "common.name" . }}-readiness
  38           image: {{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}
  39           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  40           command:
  41             - /root/ready.py
  42           args:
  43             - --container-name
  44             - consul-server
  45             - "-t"
  46             - "15"
  47           env:
  48           - name: NAMESPACE
  49             valueFrom:
  50               fieldRef:
  51                 apiVersion: v1
  52                 fieldPath: metadata.namespace
  53           - name: aaf_locator_fqdn
  54             value: dcae
  55         {{- if .Values.service.secure.enabled }}
  56         - name: init-tls
  57           env:
  58           - name: POD_IP
  59             valueFrom:
  60               fieldRef:
  61                 apiVersion: v1
  62                 fieldPath: status.podIP
  63           image: {{ .Values.global.tlsRepository }}/{{ .Values.global.tlsImage }}
  64           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  65           resources: {}
  66           volumeMounts:
  67             - mountPath: /opt/app/osaaf
  68               name: tls-info
  69         {{ end  }}
  70       containers:
  71         {{- if .Values.service.secure.enabled }}
  72         - name: {{ include "common.name" . }}
  73           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  74           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  75           resources:
  76 {{ include "common.resources" . | indent 12 }}
  77           ports:
  78           - containerPort: {{ .Values.service.secure.internalPort }}
  79           # disable liveness probe when breakpoints set in debugger
  80           # so K8s doesn't restart unresponsive container
  81           {{- if eq .Values.liveness.enabled true }}
  82           livenessProbe:
  83             tcpSocket:
  84               port: {{ .Values.service.secure.internalPort }}
  85             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  86             periodSeconds: {{ .Values.liveness.periodSeconds }}
  87           {{ end -}}
  88           readinessProbe:
  89             httpGet:
  90               scheme: "HTTPS"
  91               path: {{ .Values.readiness.path }}
  92               port: {{ .Values.service.secure.internalPort }}
  93             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  94             periodSeconds: {{ .Values.readiness.periodSeconds }}
  95           volumeMounts:
  96           - name: {{ include "common.fullname" . }}-logs
  97             mountPath: /opt/logs
  98           - name: tls-info
  99             mountPath: /opt/tls
 100           env:
 101             - name: CONSUL_HOST
 102               value: consul.{{ include "common.namespace" . }}
 103             - name: USE_HTTPS
 104               value: "1"
 105             - name: HTTPS_CERT_PATH
 106               value: "/opt/tls/cert.pem"
 107             - name: HTTPS_KEY_PATH
 108               value: "/opt/tls/key.pem"
 109         - name: {{ include "common.name" . }}-fb-onap
 110           image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
 111           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 112           volumeMounts:
 113           - name: {{ include "common.fullname" . }}-fb-conf
 114             mountPath: /usr/share/filebeat/filebeat.yml
 115             subPath: filebeat.yml
 116           - name: {{ include "common.fullname" . }}-data-fb
 117             mountPath: /usr/share/filebeat/data
 118           - name: {{ include "common.fullname" . }}-logs
 119             mountPath: /var/log/onap/config-binding-service
 120         {{ end }}
 121         {{- if .Values.service.insecure.enabled }}
 122         - name: {{ include "common.name" . }}-insecure
 123           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
 124           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 125           resources:
 126 {{ include "common.resources" . | indent 12 }}
 127           ports:
 128           - containerPort: {{ .Values.service.insecure.internalPort }}
 129           # disable liveness probe when breakpoints set in debugger
 130           # so K8s doesn't restart unresponsive container
 131           {{- if eq .Values.liveness.enabled true }}
 132           livenessProbe:
 133             tcpSocket:
 134               port: {{ .Values.service.insecure.internalPort }}
 135             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 136             periodSeconds: {{ .Values.liveness.periodSeconds }}
 137           {{ end -}}
 138           readinessProbe:
 139             httpGet:
 140               scheme: "HTTP"
 141               path: {{ .Values.readiness.path }}
 142               port: {{ .Values.service.insecure.internalPort }}
 143             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 144             periodSeconds: {{ .Values.readiness.periodSeconds }}
 145           volumeMounts:
 146           - name: {{ include "common.fullname" . }}-logs-i
 147             mountPath: /opt/logs
 148           env:
 149             - name: CONSUL_HOST
 150               value: consul.{{ include "common.namespace" . }}
 151         - name: {{ include "common.name" . }}-fb-onap-i
 152           image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
 153           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 154           volumeMounts:
 155           - name: {{ include "common.fullname" . }}-fb-conf
 156             mountPath: /usr/share/filebeat/filebeat.yml
 157             subPath: filebeat.yml
 158           - name: {{ include "common.fullname" . }}-data-fb-i
 159             mountPath: /usr/share/filebeat/data
 160           - name: {{ include "common.fullname" . }}-logs-i
 161             mountPath: /var/log/onap/config-binding-service
 162         {{ end }}
 163       volumes:
 164         - name: {{ include "common.fullname" . }}-fb-conf
 165           configMap:
 166             name: {{ include "common.release" . }}-cbs-filebeat-configmap
 167         {{- if .Values.service.secure.enabled }}
 168         - name: {{ include "common.fullname" . }}-data-fb
 169           emptyDir: {}
 170         - name:  {{ include "common.fullname" . }}-logs
 171           emptyDir: {}
 172         - name: tls-info
 173           emptyDir: {}
 174         {{ end }}
 175         {{- if .Values.service.insecure.enabled }}
 176         - name: {{ include "common.fullname" . }}-data-fb-i
 177           emptyDir: {}
 178         - name:  {{ include "common.fullname" . }}-logs-i
 179           emptyDir: {}
 180         {{ end }}
 181
 182       imagePullSecrets:
 183       - name: "{{ include "common.namespace" . }}-docker-registry-key"