kubernetes/policy/charts/policy-api/templates/deployment.yaml

   1 apiVersion: extensions/v1beta1
   2 kind: Deployment
   3 metadata:
   4   name: {{ include "common.fullname" . }}
   5   namespace: {{ include "common.namespace" . }}
   6   labels:
   7     app: {{ include "common.name" . }}
   8     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
   9     release: {{ include "common.release" . }}
  10     heritage: {{ .Release.Service }}
  11 spec:
  12   replicas: {{ .Values.replicaCount }}
  13   template:
  14     metadata:
  15       labels:
  16         app: {{ include "common.name" . }}
  17         release: {{ include "common.release" . }}
  18     spec:
  19       initContainers:
  20         - command:
  21           - /root/ready.py
  22           args:
  23           - --container-name
  24           - {{ include "common.release" . }}-galera-config
  25           env:
  26           - name: NAMESPACE
  27             valueFrom:
  28               fieldRef:
  29                 apiVersion: v1
  30                 fieldPath: metadata.namespace
  31           image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
  32           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  33           name: {{ include "common.name" . }}-readiness
  34
  35         - command:
  36           - sh
  37           args:
  38           - -c
  39           - "export SQL_PASSWORD_BASE64=`echo -n ${SQL_PASSWORD} | base64`; cd /config-input && for PFILE in `ls -1 .`; do envsubst <${PFILE} >/config/${PFILE}; done"
  40           env:
  41           - name: SQL_USER
  42             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-creds" "key" "login") | indent 12 }}
  43           - name: SQL_PASSWORD
  44             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-creds" "key" "password") | indent 12 }}
  45           - name: RESTSERVER_USER
  46             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-creds" "key" "login") | indent 12 }}
  47           - name: RESTSERVER_PASSWORD
  48             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-creds" "key" "password") | indent 12 }}
  49           volumeMounts:
  50           - mountPath: /config-input
  51             name: apiconfig
  52           - mountPath: /config
  53             name: apiconfig-processed
  54           image: "{{ .Values.global.envsubstImage }}"
  55           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  56           name: {{ include "common.name" . }}-update-config
  57
  58       containers:
  59         - name: {{ include "common.name" . }}
  60           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  61           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  62           command: ["/opt/app/policy/api/bin/policy-api.sh"]
  63           args: ["/opt/app/policy/api/etc/mounted/config.json"]
  64           ports:
  65           - containerPort: {{ .Values.service.internalPort }}
  66           # disable liveness probe when breakpoints set in debugger
  67           # so K8s doesn't restart unresponsive container
  68           {{- if eq .Values.liveness.enabled true }}
  69           livenessProbe:
  70             tcpSocket:
  71               port: {{ .Values.service.internalPort }}
  72             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  73             periodSeconds: {{ .Values.liveness.periodSeconds }}
  74           {{ end -}}
  75           readinessProbe:
  76             tcpSocket:
  77               port: {{ .Values.service.internalPort }}
  78             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  79             periodSeconds: {{ .Values.readiness.periodSeconds }}
  80           volumeMounts:
  81           - mountPath: /etc/localtime
  82             name: localtime
  83             readOnly: true
  84           - mountPath: /opt/app/policy/api/etc/mounted
  85             name: apiconfig-processed
  86           resources:
  87 {{ include "common.resources" . | indent 12 }}
  88         {{- if .Values.nodeSelector }}
  89         nodeSelector:
  90 {{ toYaml .Values.nodeSelector | indent 10 }}
  91         {{- end -}}
  92         {{- if .Values.affinity }}
  93         affinity:
  94 {{ toYaml .Values.affinity | indent 10 }}
  95         {{- end }}
  96       volumes:
  97         - name: localtime
  98           hostPath:
  99              path: /etc/localtime
 100         - name: apiconfig
 101           configMap:
 102             name: {{ include "common.fullname" . }}-configmap
 103             defaultMode: 0755
 104         - name: apiconfig-processed
 105           emptyDir:
 106             medium: Memory
 107       imagePullSecrets:
 108       - name: "{{ include "common.namespace" . }}-docker-registry-key"