kubernetes/dmaap/components/message-router/templates/statefulset.yaml

   1 {{/*
   2 # Copyright © 2017 Amdocs, Bell Canada
   3 # Modifications Copyright © 2018 AT&T
   4 # Modifications Copyright © 2021-2022 Nordix Foundation
   5 # Modifications Copyright © 2023 DTAG
   6 #
   7 # Licensed under the Apache License, Version 2.0 (the "License");
   8 # you may not use this file except in compliance with the License.
   9 # You may obtain a copy of the License at
  10 #
  11 #       http://www.apache.org/licenses/LICENSE-2.0
  12 #
  13 # Unless required by applicable law or agreed to in writing, software
  14 # distributed under the License is distributed on an "AS IS" BASIS,
  15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16 # See the License for the specific language governing permissions and
  17 # limitations under the License.
  18 */}}
  19
  20 apiVersion: apps/v1
  21 kind: StatefulSet
  22 metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
  23 spec:
  24   selector: {{- include "common.selectors" . | nindent 4 }}
  25   serviceName: {{ include "common.servicename" . }}
  26   replicas: 1
  27   template:
  28     metadata: {{- include "common.templateMetadata" . | nindent 6 }}
  29     spec:
  30       containers:
  31         - name: {{ include "common.name" . }}
  32           image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
  33           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  34           ports: {{ include "common.containerPorts" . | nindent 10  }}
  35           {{- if eq .Values.liveness.enabled true }}
  36           livenessProbe:
  37             tcpSocket:
  38               port: {{ .Values.liveness.port }}
  39             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  40             periodSeconds: {{ .Values.liveness.periodSeconds }}
  41             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
  42             successThreshold: {{ .Values.liveness.successThreshold }}
  43             failureThreshold: {{ .Values.liveness.failureThreshold }}
  44           {{ end }}
  45           readinessProbe:
  46             tcpSocket:
  47               port: {{ .Values.readiness.port }}
  48             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  49             periodSeconds: {{ .Values.readiness.periodSeconds }}
  50             timeoutSeconds: {{ .Values.readiness.timeoutSeconds }}
  51             successThreshold: {{ .Values.readiness.successThreshold }}
  52             failureThreshold: {{ .Values.readiness.failureThreshold }}
  53           startupProbe:
  54             tcpSocket:
  55                 port: {{ .Values.startup.port }}
  56             initialDelaySeconds: {{ .Values.startup.initialDelaySeconds }}
  57             periodSeconds: {{ .Values.startup.periodSeconds }}
  58             timeoutSeconds: {{ .Values.startup.timeoutSeconds }}
  59             successThreshold: {{ .Values.startup.successThreshold }}
  60             failureThreshold: {{ .Values.startup.failureThreshold }}
  61           env:
  62           - name: JAASLOGIN
  63             valueFrom:
  64               secretKeyRef:
  65                 name: strimzi-kafka-admin
  66                 key: sasl.jaas.config
  67           - name: SASLMECH
  68             value: scram-sha-512
  69           - name: enableCadi
  70             value: "true"
  71           - name: useZkTopicStore
  72             value: "false"
  73           volumeMounts:
  74             - mountPath: /appl/dmaapMR1/bundleconfig/etc/appprops/MsgRtrApi.properties
  75               subPath: MsgRtrApi.properties
  76               name: appprops
  77             - mountPath: /appl/dmaapMR1/bundleconfig/etc/logback.xml
  78               subPath: logback.xml
  79               name: logback
  80           resources: {{ include "common.resources" . | nindent 12 }}
  81         - name: {{ .Values.zkTunnelService.name }}
  82           image: {{ include "repositoryGenerator.dockerHubRepository" . }}/{{ .Values.zkTunnelService.image }}
  83           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  84           command:
  85             - /opt/stunnel/stunnel_run.sh
  86           ports:
  87             - containerPort: {{ .Values.zkTunnelService.internalPort }}
  88               name: {{ .Values.zkTunnelService.portName }}
  89               protocol: {{ .Values.zkTunnelService.protocol }}
  90           env:
  91             - name: LOG_LEVEL
  92               value: {{ .Values.zkTunnelService.logLevel }}
  93             - name: STRIMZI_ZOOKEEPER_CONNECT
  94               value: '{{ include "common.release" . }}-strimzi-zookeeper-client:{{ .Values.zkTunnelService.internalPort }}'
  95           livenessProbe:
  96             exec:
  97               command:
  98                 - /opt/stunnel/stunnel_healthcheck.sh
  99                 - '{{ .Values.zkTunnelService.internalPort }}'
 100             failureThreshold: 3
 101             initialDelaySeconds: 15
 102             periodSeconds: 10
 103             successThreshold: 1
 104             timeoutSeconds: 5
 105           readinessProbe:
 106             exec:
 107               command:
 108                 - /opt/stunnel/stunnel_healthcheck.sh
 109                 - '{{ .Values.zkTunnelService.internalPort }}'
 110             failureThreshold: 3
 111             initialDelaySeconds: 15
 112             periodSeconds: 10
 113             successThreshold: 1
 114             timeoutSeconds: 5
 115           volumeMounts:
 116             - mountPath: /etc/cluster-operator-certs/
 117               name: cluster-operator-certs
 118             - mountPath: /etc/cluster-ca-certs/
 119               name: cluster-ca-certs
 120       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 121       volumes:
 122         - name: appprops
 123           configMap:
 124             name: {{ include "common.fullname" . }}-msgrtrapi-prop-configmap
 125         - name: logback
 126           configMap:
 127             name: {{ include "common.fullname" . }}-logback-xml-configmap
 128         - name: cluster-operator-certs
 129           secret:
 130             defaultMode: 288
 131             secretName: {{ include "common.release" . }}-strimzi-cluster-operator-certs
 132         - name: cluster-ca-certs
 133           secret:
 134             defaultMode: 288
 135             secretName: {{ include "common.release" . }}-strimzi-cluster-ca-cert
 136       {{- include "common.imagePullSecrets" . | nindent 6 }}
 137 ---
 138 apiVersion: networking.k8s.io/v1
 139 kind: NetworkPolicy
 140 metadata:
 141   name: {{ include "common.fullname" . }}-zk-network-policy
 142   namespace: {{ include "common.namespace" . }}
 143 spec:
 144   podSelector:
 145     matchLabels:
 146       strimzi.io/name: {{ include "common.release" . }}-strimzi-zookeeper
 147   ingress:
 148   - from:
 149     - podSelector:
 150         matchLabels:
 151           app.kubernetes.io/name: {{ include "common.name" . }}
 152     ports:
 153     - port: {{ .Values.zkTunnelService.internalPort }}
 154       protocol: {{ .Values.zkTunnelService.protocol }}
 155   policyTypes:
 156   - Ingress