Merge "[COMMON] Add custom certs into AAF truststore"
[oom.git] / kubernetes / oof / components / oof-cmso / components / oof-cmso-service / templates / deployment.yaml
1 {{/*
2 # Copyright (c) 2018 AT&T
3 # Copyright (C) 2020 Wipro Limited.
4 #
5 # Licensed under the Apache License, Version 2.0 (the "License");
6 # you may not use this file except in compliance with the License.
7 # You may obtain a copy of the License at
8 #
9 #       http://www.apache.org/licenses/LICENSE-2.0
10 #
11 # Unless required by applicable law or agreed to in writing, software
12 # distributed under the License is distributed on an "AS IS" BASIS,
13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 # See the License for the specific language governing permissions and
15 # limitations under the License.
16 */}}
17
18 apiVersion: apps/v1
19 kind: Deployment
20 metadata:
21   name: {{ include "common.fullname" . }}
22   namespace: {{ include "common.namespace" . }}
23   labels:
24     app: {{ include "common.name" . }}
25     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
26     release: {{ include "common.release" . }}
27     heritage: {{ .Release.Service }}
28 spec:
29   selector:
30     matchLabels:
31       app: {{ include "common.name" . }}
32   replicas: {{ .Values.replicaCount }}
33   template:
34     metadata:
35       labels:
36         app: {{ include "common.name" . }}
37         release: {{ include "common.release" . }}
38     spec:
39       initContainers:
40       - command:
41         - /app/ready.py
42         args:
43         - --container-name
44         - {{ .Values.config.db.container }}
45         env:
46         - name: NAMESPACE
47           valueFrom:
48             fieldRef:
49               apiVersion: v1
50               fieldPath: metadata.namespace
51         image: {{ include "repositoryGenerator.image.readiness" . }}
52         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
53         name: {{ include "common.name" . }}-readiness
54       - name: {{ include "common.name" . }}-db-config-readiness
55         command:
56         - /app/ready.py
57         args:
58         - -j
59         - "{{ include "common.release" . }}-cmso-db-config-config-job"
60         env:
61         - name: NAMESPACE
62           valueFrom:
63             fieldRef:
64               apiVersion: v1
65               fieldPath: metadata.namespace
66         image: {{ include "repositoryGenerator.image.readiness" . }}
67         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
68       - name: {{ include "common.name" . }}-chown
69         command: ["/bin/sh", "-c", "chown -Rf 1000:1000 /share/"]
70         image: {{ include "repositoryGenerator.image.busybox" . }}
71         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
72         volumeMounts:
73         - name: {{ include "common.fullname" . }}-logs
74           mountPath: /share/logs
75       - name: db-init
76         image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.dbinit.image }}
77         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
78         env:
79         - name: DB_HOST
80           value: {{ .Values.config.db.host }}.{{.Release.Namespace}}
81         - name: DB_PORT
82           value: {{ .Values.config.db.port | quote}}
83         - name: DB_USERNAME
84           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cmso-db-user-secret" "key" "login") | indent 10}}
85         - name: DB_SCHEMA
86           value: {{ .Values.config.db.mysqlDatabase }}
87         - name: DB_PASSWORD
88           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cmso-db-user-secret" "key" "password") | indent 10}}
89         terminationMessagePolicy: File
90         volumeMounts:
91         - name: {{ include "common.fullname" . }}-config
92           mountPath: /share/etc/config
93         - name: {{ include "common.fullname" . }}-logs
94           mountPath: /share/logs
95 {{ include "common.certInitializer.initContainer" . | indent 6 }}
96       containers:
97       # side car containers
98       - name: filebeat-onap
99         image: {{ include "repositoryGenerator.image.logging" . }}
100         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
101         volumeMounts:
102         - mountPath: /usr/share/filebeat/filebeat.yml
103           subPath: filebeat.yml
104           name: filebeat-conf
105         - mountPath: /var/log/onap
106           name: {{ include "common.fullname" . }}-logs
107         - mountPath: /usr/share/filebeat/data
108           name: {{ include "common.fullname" . }}-filebeat
109         resources:
110 {{ include "common.resources" . }}
111       - name: {{ include "common.name" . }}
112         image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
113         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
114         env:
115         - name: DB_HOST
116           value: {{ .Values.config.db.host }}.{{.Release.Namespace}}
117         - name: DB_PORT
118           value: {{ .Values.config.db.port | quote}}
119         - name: DB_USERNAME
120           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cmso-db-user-secret" "key" "login") | indent 10}}
121         - name: DB_SCHEMA
122           value: {{ .Values.config.db.mysqlDatabase }}
123         - name: DB_PASSWORD
124           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cmso-db-user-secret" "key" "password") | indent 10}}
125         - name: JAVA_TRUSTSTORE
126           value: /share/etc/osaaf/local/{{ .Values.global.truststoreFile }}
127         - name: SSL_KEYSTORE
128           value: /share/etc/osaaf/local/{{ .Values.global.keystoreFile }}
129         - name: JAVA_TRUSTSTORE_PASSWORD
130           value: {{ .Values.global.truststorePassword }}
131         - name: AUTHENTICATION
132           value: {{ .Values.global.authentication }}
133         - name: AAF_USER
134           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cmso-aaf-creds" "key" "login") | indent 10}}
135         - name: AAF_PASSWORD
136           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cmso-aaf-creds" "key" "password") | indent 10}}
137         - name: VM_ARGS
138           value: "-Dcom.att.eelf.logging.file=logback.xml -Dcom.att.eelf.logging.path=/share/etc/config"
139         command:
140         - /bin/sh
141         args:
142         - "-c"
143         - |
144           export SSL_KEYSTORE_PASSWORD=$(cat /share/etc/osaaf/local/.pass)
145           ./startService.sh
146         ports:
147         - containerPort: {{ .Values.service.internalPort }}
148         # disable liveness probe when breakpoints set in debugger
149         # so K8s doesn't restart unresponsive container
150         {{- if eq .Values.liveness.enabled true }}
151         livenessProbe:
152           tcpSocket:
153             port: {{ .Values.service.internalPort }}
154           initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
155           periodSeconds: {{ .Values.liveness.periodSeconds }}
156         {{ end -}}
157         readinessProbe:
158           tcpSocket:
159             port: {{ .Values.service.internalPort }}
160           initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
161           periodSeconds: {{ .Values.readiness.periodSeconds }}
162         volumeMounts:
163 {{ include "common.certInitializer.volumeMount" . | indent 8 }}
164         - name: {{ include "common.fullname" . }}-logs
165           mountPath: /share/logs
166         - name: {{ include "common.fullname" . }}-logs
167           mountPath: /share/debug-logs
168         - name: {{ include "common.fullname" . }}-config
169           mountPath: /share/etc/config
170         - name: {{ include "common.fullname" . }}-certs
171           mountPath: /share/etc/certs
172         - name: {{ include "common.fullname" . }}-certs
173           mountPath: /opt/app/cmso/src/main/resources/aaf
174         resources:
175 {{ include "common.resources" . | indent 12 }}
176         {{- if .Values.nodeSelector }}
177         nodeSelector:
178 {{ toYaml .Values.nodeSelector | indent 10 }}
179         {{- end -}}
180         {{- if .Values.affinity }}
181         affinity:
182 {{ toYaml .Values.affinity | indent 10 }}
183         {{- end }}
184       volumes:
185         {{ include "common.certInitializer.volumes" . | nindent 8 }}
186         - name: {{ include "common.fullname" . }}-config
187           configMap:
188             name: {{ include "common.fullname" . }}
189             items:
190             - key: logback.xml
191               path: logback.xml
192             - key: cmso.properties
193               path: cmso.properties
194             - key: cadi.properties
195               path: cadi.properties
196             - key: optimizer.properties
197               path: optimizer.properties
198             - key: ticketmgt.properties
199               path: ticketmgt.properties
200             - key: liquibase.properties
201               path: liquibase.properties
202         - name:  {{ include "common.fullname" . }}-logs
203           emptyDir: {}
204         - name: {{ include "common.fullname" . }}-filebeat
205           emptyDir: {}
206         - name: filebeat-conf
207           configMap:
208             name: {{ include "common.release" . }}-cmso-filebeat-configmap
209         - name: {{ include "common.fullname" . }}-certs
210           secret:
211             secretName: {{ include "common.release" . }}-{{ .Values.global.commonConfigPrefix }}-certs
212       imagePullSecrets:
213       - name: "{{ include "common.namespace" . }}-docker-registry-key"