Support HTTPS and SSL Cassandra in workflow
[oom.git] / kubernetes / sdc / charts / sdc-wfd-be / templates / deployment.yaml
1 # Copyright © 2017 Amdocs, AT&T, Bell Canada
2 # Modifications Copyright © 2018  ZTE
3 #
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
7 #
8 #       http://www.apache.org/licenses/LICENSE-2.0
9 #
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15
16 apiVersion: extensions/v1beta1
17 kind: Deployment
18 metadata:
19   name: {{ include "common.fullname" . }}
20   namespace: {{ include "common.namespace" . }}
21   labels:
22     app: {{ include "common.name" . }}
23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
24     release: {{ .Release.Name }}
25     heritage: {{ .Release.Service }}
26 spec:
27   replicas: {{ .Values.replicaCount }}
28   template:
29     metadata:
30       labels:
31         app: {{ include "common.name" . }}
32         release: {{ .Release.Name }}
33     spec:
34       initContainers:
35       {{- if .Values.initJob.enabled }}
36       - name: {{ include "common.name" . }}-job-completion
37         image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}"
38         imagePullPolicy: "{{ .Values.global.pullPolicy | default .Values.pullPolicy }}"
39         command:
40         - /root/job_complete.py
41         args:
42         - --job-name
43         - {{ include "common.fullname" . }}-workflow-init
44         env:
45         - name: NAMESPACE
46           valueFrom:
47             fieldRef:
48               apiVersion: v1
49               fieldPath: metadata.namespace
50       {{ end }}
51       containers:
52         - name: {{ include "common.name" . }}
53           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
54           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
55           ports:
56           - containerPort: {{ .Values.service.internalPort }}
57           - containerPort: {{ .Values.service.internalPort2 }}
58           # disable liveness probe when breakpoints set in debugger
59           # so K8s doesn't restart unresponsive container
60           {{ if .Values.liveness.enabled }}
61           livenessProbe:
62             tcpSocket:
63               port: {{ .Values.service.internalPort }}
64             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
65             periodSeconds: {{ .Values.liveness.periodSeconds }}
66           {{ end }}
67           readinessProbe:
68             tcpSocket:
69               port: {{ .Values.service.internalPort }}
70             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
71             periodSeconds: {{ .Values.readiness.periodSeconds }}
72           env:
73           - name: JAVA_OPTIONS
74             value: {{ .Values.config.javaOptions }}
75           - name: CS_HOSTS
76             value: "{{ .Values.config.cassandraHosts }}"
77           - name: CS_PORT
78             value: "{{ .Values.config.cassandraClientPort }}"
79           - name: CS_AUTHENTICATE
80             value: "{{ .Values.config.cassandraAuthenticationEnabled }}"
81           - name: CS_USER
82             valueFrom:
83               secretKeyRef: {name: {{ .Release.Name }}-sdc-cs-secrets, key: sdc_user}
84           - name: CS_PASSWORD
85             valueFrom:
86               secretKeyRef: {name: {{ .Release.Name }}-sdc-cs-secrets, key: sdc_password}
87           - name: CS_SSL_ENABLED
88             value: "{{ .Values.config.cassandraSSLEnabled }}"
89           - name: CS_TRUST_STORE_PATH
90             value: "{{ .Values.config.cassandraTrustStorePath }}"
91           - name: CS_TRUST_STORE_PASSWORD
92             value: "{{ .Values.config.cassandraTrustStorePassword }}"
93           - name: SDC_PROTOCOL
94             value: "{{ .Values.config.sdcProtocol }}"
95           - name: SDC_ENDPOINT
96             value: "{{ .Values.config.sdcEndpoint }}"
97           - name: SDC_USER
98             value: "{{ .Values.config.sdcExternalUser }}"
99           - name: SDC_PASSWORD
100             value: "{{ .Values.config.sdcExternalUserPassword }}"
101           - name: SERVER_SSL_ENABLED
102             value: "{{ .Values.config.serverSSLEnabled }}"
103           - name: SERVER_SSL_KEYSTORE_TYPE
104             value: "{{ .Values.config.ser }}"
105           - name: SERVER_SSL_KEYSTORE_PATH
106             value: "{{ .Values.config.serverSSLKeyStorePath }}"
107           - name: SERVER_SSL_KEY_PASSWORD
108             value: "{{ .Values.config.serverSSLKeyPassword }}"
109           volumeMounts:
110           {{ if .Values.config.cassandraSSLEnabled }}
111           - name: {{ include "common.fullname" . }}-cassandra-client-truststore
112             mountPath: /config/cassandra-client-truststore
113             subPath: truststore
114             readOnly: true
115           {{- end }}
116           {{ if .Values.config.serverSSLEnabled }}
117           - name: {{ include "common.fullname" . }}-server-https-keystore
118             mountPath: /config/server-https-keystore
119             subPath: keystore
120             readOnly: true
121           {{- end }}
122       volumes:
123       {{ if .Values.config.cassandraSSLEnabled }}
124       - name: {{ include "common.fullname" . }}-cassandra-client-truststore
125         hostPath:
126           path: /config/cassandra-client-truststore
127       {{- end }}
128       {{ if .Values.config.serverSSLEnabled }}
129       - name: {{ include "common.fullname" . }}-server-https-keystore
130         hostPath:
131           path: /config/server-https-keystore
132       {{- end }}
133       imagePullSecrets:
134       - name: "{{ include "common.namespace" . }}-docker-registry-key"