kubernetes/dmaap/components/message-router/templates/statefulset.yaml

   1 {{/*
   2 # Copyright © 2017 Amdocs, Bell Canada
   3 # Modifications Copyright © 2018 AT&T
   4 # Modifications Copyright © 2021-2022 Nordix Foundation
   5 #
   6 # Licensed under the Apache License, Version 2.0 (the "License");
   7 # you may not use this file except in compliance with the License.
   8 # You may obtain a copy of the License at
   9 #
  10 #       http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 # Unless required by applicable law or agreed to in writing, software
  13 # distributed under the License is distributed on an "AS IS" BASIS,
  14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 # See the License for the specific language governing permissions and
  16 # limitations under the License.
  17 */}}
  18
  19 apiVersion: apps/v1
  20 kind: StatefulSet
  21 metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
  22 spec:
  23   selector: {{- include "common.selectors" . | nindent 4 }}
  24   serviceName: {{ include "common.servicename" . }}
  25   replicas: 1
  26   template:
  27     metadata: {{- include "common.templateMetadata" . | nindent 6 }}
  28     spec:
  29       containers:
  30         - name: {{ include "common.name" . }}
  31           image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
  32           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  33           ports: {{ include "common.containerPorts" . | nindent 10  }}
  34           {{- if eq .Values.liveness.enabled true }}
  35           livenessProbe:
  36             tcpSocket:
  37               port: {{ .Values.liveness.port }}
  38             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  39             periodSeconds: {{ .Values.liveness.periodSeconds }}
  40             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
  41             successThreshold: {{ .Values.liveness.successThreshold }}
  42             failureThreshold: {{ .Values.liveness.failureThreshold }}
  43           {{ end }}
  44           readinessProbe:
  45             tcpSocket:
  46               port: {{ .Values.readiness.port }}
  47             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  48             periodSeconds: {{ .Values.readiness.periodSeconds }}
  49             timeoutSeconds: {{ .Values.readiness.timeoutSeconds }}
  50             successThreshold: {{ .Values.readiness.successThreshold }}
  51             failureThreshold: {{ .Values.readiness.failureThreshold }}
  52           startupProbe:
  53             tcpSocket:
  54                 port: {{ .Values.startup.port }}
  55             initialDelaySeconds: {{ .Values.startup.initialDelaySeconds }}
  56             periodSeconds: {{ .Values.startup.periodSeconds }}
  57             timeoutSeconds: {{ .Values.startup.timeoutSeconds }}
  58             successThreshold: {{ .Values.startup.successThreshold }}
  59             failureThreshold: {{ .Values.startup.failureThreshold }}
  60           env:
  61           - name: JAASLOGIN
  62             valueFrom:
  63               secretKeyRef:
  64                 name: strimzi-kafka-admin
  65                 key: sasl.jaas.config
  66           - name: SASLMECH
  67             value: scram-sha-512
  68           - name: enableCadi
  69             value: "true"
  70           - name: useZkTopicStore
  71             value: "false"
  72           volumeMounts:
  73             - mountPath: /etc/localtime
  74               name: localtime
  75               readOnly: true
  76             - mountPath: /appl/dmaapMR1/bundleconfig/etc/appprops/MsgRtrApi.properties
  77               subPath: MsgRtrApi.properties
  78               name: appprops
  79             - mountPath: /appl/dmaapMR1/bundleconfig/etc/logback.xml
  80               subPath: logback.xml
  81               name: logback
  82           resources: {{ include "common.resources" . | nindent 12 }}
  83         - name: {{ .Values.zkTunnelService.name }}
  84           image: {{ include "repositoryGenerator.dockerHubRepository" . }}/{{ .Values.zkTunnelService.image }}
  85           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  86           command:
  87             - /opt/stunnel/stunnel_run.sh
  88           ports:
  89             - containerPort: {{ .Values.zkTunnelService.internalPort }}
  90               name: {{ .Values.zkTunnelService.portName }}
  91               protocol: {{ .Values.zkTunnelService.protocol }}
  92           env:
  93             - name: LOG_LEVEL
  94               value: {{ .Values.zkTunnelService.logLevel }}
  95             - name: STRIMZI_ZOOKEEPER_CONNECT
  96               value: '{{ include "common.release" . }}-strimzi-zookeeper-client:{{ .Values.zkTunnelService.internalPort }}'
  97           livenessProbe:
  98             exec:
  99               command:
 100                 - /opt/stunnel/stunnel_healthcheck.sh
 101                 - '{{ .Values.zkTunnelService.internalPort }}'
 102             failureThreshold: 3
 103             initialDelaySeconds: 15
 104             periodSeconds: 10
 105             successThreshold: 1
 106             timeoutSeconds: 5
 107           readinessProbe:
 108             exec:
 109               command:
 110                 - /opt/stunnel/stunnel_healthcheck.sh
 111                 - '{{ .Values.zkTunnelService.internalPort }}'
 112             failureThreshold: 3
 113             initialDelaySeconds: 15
 114             periodSeconds: 10
 115             successThreshold: 1
 116             timeoutSeconds: 5
 117           volumeMounts:
 118             - mountPath: /etc/cluster-operator-certs/
 119               name: cluster-operator-certs
 120             - mountPath: /etc/cluster-ca-certs/
 121               name: cluster-ca-certs
 122       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 123       volumes:
 124         - name: localtime
 125           hostPath:
 126             path: /etc/localtime
 127         - name: appprops
 128           configMap:
 129             name: {{ include "common.fullname" . }}-msgrtrapi-prop-configmap
 130         - name: logback
 131           configMap:
 132             name: {{ include "common.fullname" . }}-logback-xml-configmap
 133         - name: cluster-operator-certs
 134           secret:
 135             defaultMode: 288
 136             secretName: {{ include "common.release" . }}-strimzi-cluster-operator-certs
 137         - name: cluster-ca-certs
 138           secret:
 139             defaultMode: 288
 140             secretName: {{ include "common.release" . }}-strimzi-cluster-ca-cert
 141       imagePullSecrets:
 142       - name: "{{ include "common.namespace" . }}-docker-registry-key"
 143 ---
 144 apiVersion: networking.k8s.io/v1
 145 kind: NetworkPolicy
 146 metadata:
 147   name: {{ include "common.fullname" . }}-zk-network-policy
 148   namespace: {{ include "common.namespace" . }}
 149 spec:
 150   podSelector:
 151     matchLabels:
 152       strimzi.io/name: {{ include "common.release" . }}-strimzi-zookeeper
 153   ingress:
 154   - from:
 155     - podSelector:
 156         matchLabels:
 157           app.kubernetes.io/name: {{ include "common.name" . }}
 158     ports:
 159     - port: {{ .Values.zkTunnelService.internalPort }}
 160       protocol: {{ .Values.zkTunnelService.protocol }}
 161   policyTypes:
 162   - Ingress