Pick up new tls init container
[oom.git] / kubernetes / dcaegen2 / components / dcae-deployment-handler / templates / deployment.yaml
1 #============LICENSE_START========================================================
2 # ================================================================================
3 # Copyright (c) 2019 AT&T Intellectual Property. All rights reserved.
4 # ================================================================================
5 # Licensed under the Apache License, Version 2.0 (the "License");
6 # you may not use this file except in compliance with the License.
7 # You may obtain a copy of the License at
8 #
9 #     http://www.apache.org/licenses/LICENSE-2.0
10 #
11 # Unless required by applicable law or agreed to in writing, software
12 # distributed under the License is distributed on an "AS IS" BASIS,
13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 # See the License for the specific language governing permissions and
15 # limitations under the License.
16 # ============LICENSE_END=========================================================
17
18 apiVersion: extensions/v1beta1
19 kind: Deployment
20 metadata:
21   name: {{ include "common.fullname" . }}
22   namespace: {{ include "common.namespace" . }}
23   labels:
24     app: {{ include "common.name" . }}
25     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
26     release: {{ include "common.release" . }}
27     heritage: {{ .Release.Service }}
28 spec:
29   replicas: 1
30   template:
31     metadata:
32       labels:
33         app: {{ include "common.name" . }}
34         release: {{ include "common.release" . }}
35     spec:
36       initContainers:
37         - name: {{ include "common.name" . }}-readiness
38           image: {{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}
39           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
40           command:
41             - /root/ready.py
42           args:
43           - --container-name
44           - dcae-cloudify-manager
45           - --container-name
46           - consul-server
47           - --container-name
48           - dcae-inventory-api
49           - "-t"
50           - "45"
51           env:
52           - name: NAMESPACE
53             valueFrom:
54               fieldRef:
55                 apiVersion: v1
56                 fieldPath: metadata.namespace
57         - name: init-tls
58           env:
59           - name: POD_IP
60             valueFrom:
61               fieldRef:
62                 apiVersion: v1
63                 fieldPath: status.podIP
64           - name: aaf_locator_fqdn
65             value: dcae
66           image: {{ .Values.global.tlsRepository }}/{{ .Values.global.tlsImage }}
67           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
68           resources: {}
69           volumeMounts:
70             - mountPath: /opt/app/osaaf
71               name: tls-info
72         - name: init-consul
73           image: {{ .Values.global.consulLoaderRepository }}/{{ .Values.global.consulLoaderImage }}
74           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
75           args:
76           - --service
77           - "cloudify_manager|dcae-cloudify-manager.{{ include "common.namespace" . }}|443"
78           - --service
79           - "inventory|inventory.{{ include "common.namespace" . }}|8080"
80           - --key
81           - deployment_handler|/dhconfig/config.json
82           resources: {}
83           volumeMounts:
84             - mountPath: /dhconfig
85               name: dh-config
86       containers:
87         - name: {{ include "common.name" . }}
88           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
89           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
90           resources:
91 {{ include "common.resources" . | indent 12 }}
92           ports:
93           - containerPort: {{ .Values.service.internalPort }}
94           # disable liveness probe when breakpoints set in debugger
95           # so K8s doesn't restart unresponsive container
96           {{- if eq .Values.liveness.enabled true }}
97           livenessProbe:
98             tcpSocket:
99               port: {{ .Values.service.internalPort }}
100             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
101             periodSeconds: {{ .Values.liveness.periodSeconds }}
102           {{ end }}
103           readinessProbe:
104             httpGet:
105               path: {{ .Values.readiness.path }}
106               port: {{ .Values.service.internalPort }}
107               scheme: {{ .Values.readiness.scheme }}
108             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
109             periodSeconds: {{ .Values.readiness.periodSeconds }}
110           volumeMounts:
111             - mountPath: /opt/app/dh/log
112               name: component-log
113             - mountPath: /opt/app/dh/etc/cert/
114               name: tls-info
115           env:
116             - name: CONSUL_HOST
117               value: consul-server.{{ include "common.namespace" . }}
118             - name: CLOUDIFY_USER
119               value: admin
120             - name: CLOUDIFY_PASSWORD
121               value: admin
122             - name: CONFIG_BINDING_SERVICE
123               value: config-binding-service
124             - name: NODE_EXTRA_CA_CERTS
125               value: /opt/app/dh/etc/cert/cacert.pem
126             - name: POD_IP
127               valueFrom:
128                 fieldRef:
129                   apiVersion: v1
130                   fieldPath: status.podIP
131         - name: {{ include "common.name" . }}-filebeat
132           env:
133             - name: POD_IP
134               valueFrom:
135                 fieldRef:
136                   apiVersion: v1
137                   fieldPath: status.podIP
138           image: {{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}
139           imagePullPolicy: IfNotPresent
140           resources: {}
141           volumeMounts:
142           - mountPath: /var/log/onap/deployment-handler
143             name: component-log
144           - mountPath: /usr/share/filebeat/data
145             name: filebeat-data
146           - mountPath: /usr/share/filebeat/filebeat.yml
147             name: filebeat-conf
148             subPath: filebeat.yml
149       volumes:
150         - emptyDir: {}
151           name: component-log
152         - emptyDir: {}
153           name: filebeat-data
154         - configMap:
155             defaultMode: 420
156             name: {{ include "common.fullname" . }}-filebeat-configmap
157           name: filebeat-conf
158         - emptyDir: {}
159           name: tls-info
160         - configMap:
161             defaultMode: 422
162             name: {{ include "common.fullname" . }}-configmap
163           name: dh-config
164       imagePullSecrets:
165       - name: "{{ include "common.namespace" . }}-docker-registry-key"