kubernetes/portal/components/portal-sdk/templates/deployment.yaml

   1 # Copyright © 2017 Amdocs, Bell Canada
   2 # Modifications Copyright © 2018,2020 AT&T
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 apiVersion: apps/v1
  17 kind: Deployment
  18 metadata:
  19   name: {{ include "common.fullname" . }}
  20   namespace: {{ include "common.namespace" . }}
  21   labels:
  22     app: {{ include "common.name" . }}
  23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  24     release: {{ include "common.release" . }}
  25     heritage: {{ .Release.Service }}
  26 spec:
  27   selector:
  28     matchLabels:
  29       app: {{ include "common.name" . }}
  30   replicas: {{ .Values.replicaCount }}
  31   template:
  32     metadata:
  33       labels:
  34         app: {{ include "common.name" . }}
  35         release: {{ include "common.release" . }}
  36     spec:
  37       initContainers:
  38       - name: {{ include "common.name" . }}-readiness
  39         image: "{{ include "common.repository" . }}/{{ .Values.global.readinessImage }}"
  40         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  41         command:
  42         - /app/ready.py
  43         args:
  44         - --container-name
  45         - "portal-db"
  46         env:
  47         - name: NAMESPACE
  48           valueFrom:
  49             fieldRef:
  50               apiVersion: v1
  51               fieldPath: metadata.namespace
  52       - name: {{ include "common.name" . }}-portalsdk-config
  53         image: "{{ .Values.global.envsubstImage }}"
  54         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  55         command: ["/bin/sh"]
  56         args: [ "-c", "cd /config-input && for PFILE in `ls -1 .`; do envsubst <${PFILE} >/config/${PFILE}; done"]
  57         env:
  58           - name: CASSA_USER
  59             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "portal-cass" "key" "login") | indent 12 }}
  60           - name: CASSA_PASSWORD
  61             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "portal-cass" "key" "password") | indent 12 }}
  62           - name: CIPHER_ENC_KEY
  63             {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cipher-enc-key" "key" "password") | indent 12 }}
  64         volumeMounts:
  65         - mountPath: /config-input
  66           name: properties-onapportalsdk-scrubbed
  67         - mountPath: /config
  68           name: properties-onapportalsdk
  69 {{ include "common.certInitializer.initContainer" . | indent 6 }}
  70       containers:
  71       - name: {{ include "common.name" . }}
  72         image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  73         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  74         command: ["bash","-c"]
  75         {{- if .Values.global.aafEnabled }}
  76         args: ["export $(grep '^c' {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0);\
  77         export _JAVA_OPTIONS=\"-Djavax.net.ssl.trustStorePassword=$cadi_truststore_password \
  78         -Djavax.net.ssl.keyStorePassword=$cadi_keystore_password_p12\";\
  79         /start-apache-tomcat.sh -b {{ .Values.global.env.tomcatDir }}"]
  80         env:
  81           - name: CATALINA_OPTS
  82             value: >
  83               -Djavax.net.ssl.keyStore="{{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.keystoreFile }}"
  84               -Djavax.net.ssl.trustStore="{{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.truststoreFile }}"
  85         {{- else }}
  86         args: ["/start-apache-tomcat.sh -b {{ .Values.global.env.tomcatDir }}"]
  87         {{- end }}
  88         ports:
  89         - containerPort: {{ .Values.service.internalPort }}
  90         {{- if eq .Values.liveness.enabled true }}
  91         livenessProbe:
  92           tcpSocket:
  93             port: {{ .Values.service.internalPort }}
  94           initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  95           periodSeconds: {{ .Values.liveness.periodSeconds }}
  96         {{ end -}}
  97         readinessProbe:
  98           tcpSocket:
  99             port: {{ .Values.service.internalPort }}
 100           initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 101           periodSeconds: {{ .Values.readiness.periodSeconds }}
 102         volumeMounts:
 103 {{ include "common.certInitializer.volumeMount" . | indent 8 }}
 104         - name: properties-onapportalsdk
 105           mountPath: "{{ .Values.global.env.tomcatDir }}/conf/server.xml"
 106           subPath: server.xml
 107         - mountPath: /etc/localtime
 108           name: localtime
 109           readOnly: true
 110         - name: properties-onapportalsdk
 111           mountPath: "{{ .Values.global.env.tomcatDir }}/webapps/ONAPPORTALSDK/WEB-INF/fusion/conf/fusion.properties"
 112           subPath: fusion.properties
 113         - name: properties-onapportalsdk
 114           mountPath: "{{ .Values.global.env.tomcatDir }}/webapps/ONAPPORTALSDK/WEB-INF/conf/system.properties"
 115           subPath: system.properties
 116         - name: properties-onapportalsdk
 117           mountPath: "{{ .Values.global.env.tomcatDir }}/webapps/ONAPPORTALSDK/WEB-INF/classes/portal.properties"
 118           subPath: portal.properties
 119         - name: properties-onapportalsdk
 120           mountPath: "{{ .Values.global.env.tomcatDir }}/webapps/ONAPPORTAL/WEB-INF/classes/key.properties"
 121           subPath: key.properties
 122         - name: properties-onapportalsdk
 123           mountPath: "{{ .Values.global.env.tomcatDir }}/webapps/ONAPPORTALSDK/WEB-INF/classes/music.properties"
 124           subPath: music.properties
 125         - name: properties-onapportalsdk
 126           mountPath: "{{ .Values.global.env.tomcatDir }}/webapps/ONAPPORTALSDK/WEB-INF/classes/logback.xml"
 127           subPath: logback.xml
 128         - name: portal-tomcat-logs
 129           mountPath: "{{ .Values.global.env.tomcatDir }}/logs"
 130         - name: var-log-onap
 131           mountPath: /var/log/onap
 132         resources:
 133 {{ include "common.resources" . }}
 134       {{- if .Values.nodeSelector }}
 135       nodeSelector:
 136 {{ toYaml .Values.nodeSelector | indent 10 }}
 137       {{- end -}}
 138       {{- if .Values.affinity }}
 139       affinity:
 140 {{ toYaml .Values.affinity | indent 10 }}
 141       {{- end }}
 142       - name: filebeat-onap
 143         image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
 144         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 145         volumeMounts:
 146         - mountPath: /usr/share/filebeat/filebeat.yml
 147           name: filebeat-conf
 148           subPath: filebeat.yml
 149         - name: portal-data-filebeat
 150           mountPath: /usr/share/filebeat/data
 151         - name: var-log-onap
 152           mountPath: /var/log/onap
 153       volumes:
 154         - name: localtime
 155           hostPath:
 156             path: /etc/localtime
 157         - name: properties-onapportalsdk
 158           emptyDir:
 159             medium: Memory
 160         - name: properties-onapportalsdk-scrubbed
 161           configMap:
 162             name: {{ include "common.fullname" . }}-onapportalsdk
 163             defaultMode: 0755
 164         - name: filebeat-conf
 165           configMap:
 166             name: portal-filebeat
 167         - name: var-log-onap
 168           emptyDir: {}
 169         - name: portal-data-filebeat
 170           emptyDir: {}
 171         - name: portal-tomcat-logs
 172           emptyDir: {}
 173 {{ include "common.certInitializer.volumes" . | indent 8 }}
 174       imagePullSecrets:
 175       - name: "{{ include "common.namespace" . }}-docker-registry-key"