Merge "Improved readability of Hardcoded Certs list doc"
[oom.git] / kubernetes / policy / templates / deployment.yaml
1 # Copyright © 2017 Amdocs, Bell Canada
2 # Modifications Copyright © 2018 AT&T
3 #
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
7 #
8 #       http://www.apache.org/licenses/LICENSE-2.0
9 #
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15
16 apiVersion: apps/v1
17 kind: Deployment
18 metadata:
19   name: {{ include "common.fullname" . }}
20   namespace: {{ include "common.namespace" . }}
21   labels:
22     app: {{ include "common.name" . }}
23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
24     release: {{ include "common.release" . }}
25     heritage: {{ .Release.Service }}
26 spec:
27   selector:
28     matchLabels:
29       app: {{ include "common.name" . }}
30   replicas: {{ .Values.replicaCount }}
31   template:
32     metadata:
33       labels:
34         app: {{ include "common.name" . }}
35         release: {{ include "common.release" . }}
36     spec:
37       initContainers:
38       - command:
39         - sh
40         args:
41         - -c
42         - "cd /config-input && for PFILE in `ls -1 *.conf`; do envsubst <${PFILE} >/config/${PFILE}; done"
43         env:
44         - name: JDBC_USER
45           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "login") | indent 10 }}
46         - name: JDBC_PASSWORD
47           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "password") | indent 10 }}
48         volumeMounts:
49         - mountPath: /config-input
50           name: pe
51         - mountPath: /config
52           name: pe-processed
53         image: "{{ .Values.global.envsubstImage }}"
54         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
55         name: {{ include "common.name" . }}-update-config
56       - command:
57         - /root/ready.py
58         args:
59         - --container-name
60         - {{ include "common.release" . }}-galera-config
61         env:
62         - name: NAMESPACE
63           valueFrom:
64             fieldRef:
65               apiVersion: v1
66               fieldPath: metadata.namespace
67         image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
68         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
69         name: {{ include "common.name" . }}-readiness
70       containers:
71         - command:
72           - /bin/bash
73           - ./do-start.sh
74           - pap
75           name: {{ include "common.name" . }}
76           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
77           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
78           resources:
79 {{ include "common.resources" . | indent 12 }}
80           ports:
81           - containerPort: {{ .Values.service.externalPort }}
82           - containerPort: {{ .Values.service.externalPort2 }}
83           {{- if eq .Values.liveness.enabled true }}
84           livenessProbe:
85             tcpSocket:
86               port: {{ .Values.service.externalPort }}
87             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
88             periodSeconds: {{ .Values.liveness.periodSeconds }}
89           {{ end -}}
90           readinessProbe:
91             tcpSocket:
92               port: {{ .Values.service.externalPort }}
93             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
94             periodSeconds: {{ .Values.readiness.periodSeconds }}
95           env:
96           - name: PRELOAD_POLICIES
97             value: "{{ .Values.config.preloadPolicies }}"
98           volumeMounts:
99           - mountPath: /etc/localtime
100             name: localtime
101             readOnly: true
102           - mountPath: /tmp/policy-install/config/pap-tweaks.sh
103             name: pe-pap
104             subPath: pap-tweaks.sh
105           - mountPath: /tmp/policy-install/config/paplp.conf
106             name: pe-pap
107             subPath: paplp.conf
108           - mountPath: /tmp/policy-install/config/pap.conf
109             name: pe-pap
110             subPath: pap.conf
111           - mountPath: /tmp/policy-install/config/mysql.conf
112             name: pe-pap
113             subPath: mysql.conf
114           - mountPath: /tmp/policy-install/config/elk.conf
115             name: pe-pap
116             subPath: elk.conf
117           - mountPath: /tmp/policy-install/config/console.conf
118             name: pe-pap
119             subPath: console.conf
120           - mountPath: /tmp/policy-install/config/base.conf
121             name: pe-processed
122             subPath: base.conf
123           - mountPath: /tmp/policy-install/do-start.sh
124             name: pe-scripts
125             subPath: do-start.sh
126           - mountPath: /var/log/onap
127             name: policy-logs
128           - mountPath: /tmp/policy-install/logback.xml
129             name: policy-sdk-logback
130             subPath: logback.xml
131           - mountPath: /tmp/logback.xml
132             name: policy-logback
133             subPath: logback.xml
134           lifecycle:
135             postStart:
136               exec:
137                 command: ["/bin/sh", "-c", "export LOG=wait_logback.log; touch $LOG; export SRC=/tmp/logback.xml; export DST=/opt/app/policy/servers/pap/webapps/pap/WEB-INF/classes/; while [ ! -e $DST ]; do echo 'Waiting for $DST...' >> $LOG; sleep 5; done; sleep 2; /bin/cp -f $SRC $DST; export SRC=/tmp/policy-install/logback.xml; export DST=/opt/app/policy/servers/console/webapps/onap/WEB-INF/classes/; while [ ! -e $DST ]; do echo 'Waiting for $DST...' >> $LOG; sleep 5; done; sleep 2; /bin/cp -f $SRC $DST; echo 'Done' >> $LOG"]
138         - image: "{{ .Values.global.loggingRepository | default .Values.loggingRepository }}/{{ .Values.global.loggingImage | default .Values.loggingImage }}"
139           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
140           name: filebeat-onap
141           volumeMounts:
142           - mountPath: /usr/share/filebeat/filebeat.yml
143             name: filebeat-conf
144             subPath: filebeat.yml
145           - mountPath: /var/log/onap
146             name: policy-logs
147           - mountPath: /usr/share/filebeat/data
148             name: policy-data-filebeat
149       volumes:
150         - name: localtime
151           hostPath:
152             path: /etc/localtime
153         - name: filebeat-conf
154           configMap:
155             name: {{ include "common.release" . }}-filebeat-configmap
156         - name: policy-logs
157           emptyDir: {}
158         - name: policy-data-filebeat
159           emptyDir: {}
160         - name: policy-logback
161           configMap:
162             name: {{ include "common.fullname" . }}-log-configmap
163         - name: policy-sdk-logback
164           configMap:
165             name: {{ include "common.fullname" . }}-sdk-log-configmap
166         - name: pe
167           configMap:
168             name: {{ include "common.release" . }}-pe-configmap
169             defaultMode: 0755
170         - name: pe-scripts
171           configMap:
172             name: {{ include "common.release" . }}-pe-scripts-configmap
173             defaultMode: 0777
174         - name: pe-pap
175           configMap:
176             name: {{ include "common.fullname" . }}-pe-configmap
177             defaultMode: 0755
178         - name: pe-processed
179           emptyDir:
180             medium: Memory
181       imagePullSecrets:
182       - name: "{{ include "common.namespace" . }}-docker-registry-key"