kubernetes/oof/templates/deployment.yaml

   1 {{/*
   2 # Copyright © 2017 Amdocs, Bell Canada
   3 # Modifications Copyright © 2018 AT&T,VMware
   4 # Modifications Copyright (C) 2020 Wipro Limited.
   5 #
   6 # Licensed under the Apache License, Version 2.0 (the "License");
   7 # you may not use this file except in compliance with the License.
   8 # You may obtain a copy of the License at
   9 #
  10 #       http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 # Unless required by applicable law or agreed to in writing, software
  13 # distributed under the License is distributed on an "AS IS" BASIS,
  14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 # See the License for the specific language governing permissions and
  16 # limitations under the License.
  17 */}}
  18
  19 apiVersion: apps/v1
  20 kind: Deployment
  21 metadata:
  22   name: {{ include "common.fullname" . }}
  23   namespace: {{ include "common.namespace" . }}
  24   labels:
  25     app: {{ include "common.name" . }}
  26     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  27     release: {{ include "common.release" . }}
  28     heritage: {{ .Release.Service }}
  29 spec:
  30   selector:
  31     matchLabels:
  32       app: {{ include "common.name" . }}
  33   replicas: {{ .Values.replicaCount }}
  34   template:
  35     metadata:
  36       labels:
  37         app: {{ include "common.name" . }}
  38         release: {{ include "common.release" . }}
  39     spec:
  40       initContainers:
  41       - command:
  42         - /app/ready.py
  43         args:
  44         - --container-name
  45         - policy-xacml-pdp
  46         env:
  47         - name: NAMESPACE
  48           valueFrom:
  49             fieldRef:
  50               apiVersion: v1
  51               fieldPath: metadata.namespace
  52         image: {{ include "repositoryGenerator.image.readiness" . }}
  53         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  54         name: {{ include "common.name" . }}-readiness
  55       - command:
  56         - sh
  57         - -c
  58         - resp="FAILURE";
  59           until [ $resp = "200" ]; do
  60           resp=$(curl -s -o /dev/null -k --write-out %{http_code} https://aaf-sms.{{ include "common.namespace" . }}:10443/v1/sms/domain/osdf/secret);
  61           echo $resp;
  62           sleep 2;
  63           done
  64         env:
  65         - name: NAMESPACE
  66           valueFrom:
  67             fieldRef:
  68               apiVersion: v1
  69               fieldPath: metadata.namespace
  70         image: {{ include "repositoryGenerator.image.curl" . }}
  71         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  72         name: {{ include "common.name" . }}-osdf-sms-readiness
  73 {{ include "common.certInitializer.initContainer" . | indent 6 }}
  74       containers:
  75         - name: {{ include "common.name" . }}
  76           image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
  77           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  78           command:
  79           - /bin/sh
  80           args:
  81           - "-c"
  82           - |
  83             grep -v '^$'  /opt/osdf/osaaf/local/org.onap.oof.crt > /tmp/oof.crt
  84             cat /tmp/oof.crt /opt/app/ssl_cert/intermediate_root_ca.pem /opt/app/ssl_cert/aaf_root_ca.cer >> /opt/osdf/org.onap.oof.crt
  85             python osdfapp.py
  86           ports:
  87           - containerPort: {{ .Values.service.internalPort }}
  88           # disable liveness probe when breakpoints set in debugger
  89           # so K8s doesn't restart unresponsive container
  90           {{- if .Values.liveness.enabled }}
  91           livenessProbe:
  92             tcpSocket:
  93               port: {{ .Values.service.internalPort }}
  94             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  95             periodSeconds: {{ .Values.liveness.periodSeconds }}
  96           {{ end -}}
  97           readinessProbe:
  98             tcpSocket:
  99               port: {{ .Values.service.internalPort }}
 100             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 101             periodSeconds: {{ .Values.readiness.periodSeconds }}
 102           env:
 103           volumeMounts:
 104 {{ include "common.certInitializer.volumeMount" . | indent 10 }}
 105           - mountPath: /etc/localtime
 106             name: localtime
 107             readOnly: true
 108           - mountPath: /opt/osdf/config/osdf_config.yaml
 109             name: {{ include "common.fullname" . }}-config
 110             subPath: osdf_config.yaml
 111           - mountPath: /opt/app/ssl_cert/aaf_root_ca.cer
 112             name: {{ include "common.fullname" . }}-onap-certs
 113             subPath: aaf_root_ca.cer
 114           - mountPath: /opt/app/ssl_cert/intermediate_root_ca.pem
 115             name: {{ include "common.fullname" . }}-onap-certs
 116             subPath: intermediate_root_ca.pem
 117           - mountPath: /opt/osdf/config/common_config.yaml
 118             name: {{ include "common.fullname" . }}-config
 119             subPath: common_config.yaml
 120           - mountPath: /opt/osdf/config/log.yml
 121             name: {{ include "common.fullname" . }}-config
 122             subPath: log.yml
 123           - mountPath: /opt/osdf/config/slicing_config.yaml
 124             name: {{ include "common.fullname" . }}-config
 125             subPath: slicing_config.yaml
 126           resources:
 127 {{ include "common.resources" . | indent 12 }}
 128         {{- if .Values.nodeSelector }}
 129         nodeSelector:
 130 {{ toYaml .Values.nodeSelector | indent 10 }}
 131         {{- end -}}
 132         {{- if .Values.affinity }}
 133         affinity:
 134 {{ toYaml .Values.affinity | indent 10 }}
 135         {{- end }}
 136       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 137       volumes:
 138        {{ include "common.certInitializer.volumes" . | nindent 8 }}
 139         - name: localtime
 140           hostPath:
 141             path: /etc/localtime
 142         - name: {{ include "common.fullname" . }}-config
 143           configMap:
 144             name: {{ include "common.fullname" . }}-configmap
 145             items:
 146             - key: osdf_config.yaml
 147               path: osdf_config.yaml
 148             - key: common_config.yaml
 149               path: common_config.yaml
 150             - key: log.yml
 151               path: log.yml
 152             - key: slicing_config.yaml
 153               path: slicing_config.yaml
 154 {{ include "oof.certificate.volume" . | indent 8 }}
 155       imagePullSecrets:
 156       - name: "{{ include "common.namespace" . }}-docker-registry-key"