kubernetes/dmaap/components/message-router/templates/statefulset.yaml

   1 {{/*
   2 # Copyright © 2017 Amdocs, Bell Canada
   3 # Modifications Copyright © 2018 AT&T
   4 # Modifications Copyright © 2021-2022 Nordix Foundation
   5 #
   6 # Licensed under the Apache License, Version 2.0 (the "License");
   7 # you may not use this file except in compliance with the License.
   8 # You may obtain a copy of the License at
   9 #
  10 #       http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 # Unless required by applicable law or agreed to in writing, software
  13 # distributed under the License is distributed on an "AS IS" BASIS,
  14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 # See the License for the specific language governing permissions and
  16 # limitations under the License.
  17 */}}
  18
  19 apiVersion: apps/v1
  20 kind: StatefulSet
  21 metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
  22 spec:
  23   selector: {{- include "common.selectors" . | nindent 4 }}
  24   serviceName: {{ include "common.servicename" . }}
  25   replicas: 1
  26   template:
  27     metadata: {{- include "common.templateMetadata" . | nindent 6 }}
  28     spec:
  29       containers:
  30         - name: {{ include "common.name" . }}
  31           image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
  32           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  33           ports: {{ include "common.containerPorts" . | nindent 10  }}
  34           {{- if eq .Values.liveness.enabled true }}
  35           livenessProbe:
  36             tcpSocket:
  37               port: {{ .Values.liveness.port }}
  38             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  39             periodSeconds: {{ .Values.liveness.periodSeconds }}
  40             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
  41             successThreshold: {{ .Values.liveness.successThreshold }}
  42             failureThreshold: {{ .Values.liveness.failureThreshold }}
  43           {{ end }}
  44           readinessProbe:
  45             tcpSocket:
  46               port: {{ .Values.readiness.port }}
  47             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  48             periodSeconds: {{ .Values.readiness.periodSeconds }}
  49             timeoutSeconds: {{ .Values.readiness.timeoutSeconds }}
  50             successThreshold: {{ .Values.readiness.successThreshold }}
  51             failureThreshold: {{ .Values.readiness.failureThreshold }}
  52           startupProbe:
  53             tcpSocket:
  54                 port: {{ .Values.startup.port }}
  55             initialDelaySeconds: {{ .Values.startup.initialDelaySeconds }}
  56             periodSeconds: {{ .Values.startup.periodSeconds }}
  57             timeoutSeconds: {{ .Values.startup.timeoutSeconds }}
  58             successThreshold: {{ .Values.startup.successThreshold }}
  59             failureThreshold: {{ .Values.startup.failureThreshold }}
  60           env:
  61           - name: JAASLOGIN
  62             valueFrom:
  63               secretKeyRef:
  64                 name: strimzi-kafka-admin
  65                 key: sasl.jaas.config
  66           - name: SASLMECH
  67             value: scram-sha-512
  68           - name: enableCadi
  69             value: "true"
  70           - name: useZkTopicStore
  71             value: "false"
  72           volumeMounts:
  73             - mountPath: /etc/localtime
  74               name: localtime
  75               readOnly: true
  76             - mountPath: /appl/dmaapMR1/bundleconfig/etc/appprops/MsgRtrApi.properties
  77               subPath: MsgRtrApi.properties
  78               name: appprops
  79             - mountPath: /appl/dmaapMR1/bundleconfig/etc/logback.xml
  80               subPath: logback.xml
  81               name: logback
  82           resources:
  83 {{ include "common.resources" . }}
  84         - name: {{ .Values.zkTunnelService.name }}
  85           image: {{ include "repositoryGenerator.dockerHubRepository" . }}/{{ .Values.zkTunnelService.image }}
  86           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  87           command:
  88             - /opt/stunnel/stunnel_run.sh
  89           ports:
  90             - containerPort: {{ .Values.zkTunnelService.internalPort }}
  91               name: {{ .Values.zkTunnelService.portName }}
  92               protocol: {{ .Values.zkTunnelService.protocol }}
  93           env:
  94             - name: LOG_LEVEL
  95               value: {{ .Values.zkTunnelService.logLevel }}
  96             - name: STRIMZI_ZOOKEEPER_CONNECT
  97               value: '{{ include "common.release" . }}-strimzi-zookeeper-client:{{ .Values.zkTunnelService.internalPort }}'
  98           livenessProbe:
  99             exec:
 100               command:
 101                 - /opt/stunnel/stunnel_healthcheck.sh
 102                 - '{{ .Values.zkTunnelService.internalPort }}'
 103             failureThreshold: 3
 104             initialDelaySeconds: 15
 105             periodSeconds: 10
 106             successThreshold: 1
 107             timeoutSeconds: 5
 108           readinessProbe:
 109             exec:
 110               command:
 111                 - /opt/stunnel/stunnel_healthcheck.sh
 112                 - '{{ .Values.zkTunnelService.internalPort }}'
 113             failureThreshold: 3
 114             initialDelaySeconds: 15
 115             periodSeconds: 10
 116             successThreshold: 1
 117             timeoutSeconds: 5
 118           volumeMounts:
 119             - mountPath: /etc/cluster-operator-certs/
 120               name: cluster-operator-certs
 121             - mountPath: /etc/cluster-ca-certs/
 122               name: cluster-ca-certs
 123       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 124       volumes:
 125         - name: localtime
 126           hostPath:
 127             path: /etc/localtime
 128         - name: appprops
 129           configMap:
 130             name: {{ include "common.fullname" . }}-msgrtrapi-prop-configmap
 131         - name: logback
 132           configMap:
 133             name: {{ include "common.fullname" . }}-logback-xml-configmap
 134         - name: cluster-operator-certs
 135           secret:
 136             defaultMode: 288
 137             secretName: {{ include "common.release" . }}-strimzi-cluster-operator-certs
 138         - name: cluster-ca-certs
 139           secret:
 140             defaultMode: 288
 141             secretName: {{ include "common.release" . }}-strimzi-cluster-ca-cert
 142       imagePullSecrets:
 143       - name: "{{ include "common.namespace" . }}-docker-registry-key"
 144 ---
 145 apiVersion: networking.k8s.io/v1
 146 kind: NetworkPolicy
 147 metadata:
 148   name: {{ include "common.fullname" . }}-zk-network-policy
 149   namespace: {{ include "common.namespace" . }}
 150 spec:
 151   podSelector:
 152     matchLabels:
 153       strimzi.io/name: {{ include "common.release" . }}-strimzi-zookeeper
 154   ingress:
 155   - from:
 156     - podSelector:
 157         matchLabels:
 158           app.kubernetes.io/name: {{ include "common.name" . }}
 159     ports:
 160     - port: {{ .Values.zkTunnelService.internalPort }}
 161       protocol: {{ .Values.zkTunnelService.protocol }}
 162   policyTypes:
 163   - Ingress