kubernetes/sdc/components/sdc-be/templates/deployment.yaml

   1 # Copyright © 2017 Amdocs, AT&T, Bell Canada
   2 # Modifications Copyright © 2018 ZTE
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 apiVersion: apps/v1
  17 kind: Deployment
  18 metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
  19 spec:
  20   selector: {{- include "common.selectors" . | nindent 4 }}
  21   replicas: {{ .Values.replicaCount }}
  22   template:
  23     metadata: {{- include "common.templateMetadata" . | nindent 6 }}
  24     spec:
  25       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
  26       - name: {{ include "common.name" . }}-readiness
  27         command:
  28         - /app/ready.py
  29         args:
  30         - --container-name
  31         - "sdc-onboarding-be"
  32         env:
  33         - name: NAMESPACE
  34           valueFrom:
  35             fieldRef:
  36               apiVersion: v1
  37               fieldPath: metadata.namespace
  38         image: "{{ include "common.repository" . }}/{{ .Values.global.readinessImage }}"
  39         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  40         resources:
  41           limits:
  42             cpu: 100m
  43             memory: 100Mi
  44           requests:
  45             cpu: 3m
  46             memory: 20Mi
  47       - name: {{ include "common.name" . }}-job-completion
  48         image: "{{ include "common.repository" . }}/{{ .Values.global.readinessImage }}"
  49         imagePullPolicy: "{{ .Values.global.pullPolicy | default .Values.pullPolicy }}"
  50         command:
  51         - /app/ready.py
  52         args:
  53         - --job-name
  54         - {{ include "common.release" . }}-sdc-onboarding-be-cassandra-init
  55         env:
  56         - name: NAMESPACE
  57           valueFrom:
  58             fieldRef:
  59               apiVersion: v1
  60               fieldPath: metadata.namespace
  61         resources:
  62           limits:
  63             cpu: 100m
  64             memory: 100Mi
  65           requests:
  66             cpu: 3m
  67             memory: 20Mi
  68       {{- if .Values.global.aafEnabled }}
  69       - name: {{ include "common.name" . }}-update-config
  70         image: "{{ .Values.global.envsubstImage }}"
  71         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  72         command:
  73         - sh
  74         args:
  75         - "-c"
  76         - |
  77           export $(grep '^c' {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
  78           export KEYSTORE_PASS=$cadi_keystore_password_p12
  79           export KEYMANAGER_PASS=$cadi_keystore_password_p12
  80           export TRUSTSTORE_PASS=$cadi_truststore_password
  81           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.keystoreFile }} /config-output
  82           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.truststoreFile }} /config-output
  83           cd /config-input && \
  84           for PFILE in `find . -not -type d | grep -v -F ..`
  85           do
  86             envsubst <${PFILE} >/config-output/${PFILE}
  87             chmod 0755 /config-output/${PFILE}
  88           done
  89         resources:
  90           limits:
  91             cpu: 100m
  92             memory: 100Mi
  93           requests:
  94             cpu: 3m
  95             memory: 20Mi
  96         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
  97         - name: {{ include "common.fullname" . }}-environments
  98           mountPath: /config-input/
  99         - name: sdc-environments-output
 100           mountPath: /config-output/
 101       {{- end }}
 102       containers:
 103         - name: {{ include "common.name" . }}
 104           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
 105           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 106           {{- if .Values.global.aafEnabled }}
 107           command:
 108           - sh
 109           args:
 110           - "-c"
 111           - |
 112             sed -i '/trustStorePassword/d' ${JETTY_BASE}/startup.sh
 113             ${JETTY_BASE}/startup.sh
 114           {{- end }}
 115           ports: {{ include "common.containerPorts" . | nindent 10  }}
 116           {{ if eq .Values.liveness.enabled true }}
 117           livenessProbe:
 118             httpGet:
 119               path: /sdc2/rest/healthCheck
 120               port: {{ .Values.liveness.port }}
 121               scheme: {{ if (include "common.needTLS" .) }}HTTPS{{ else }}HTTP{{ end }}
 122             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 123             periodSeconds: {{ .Values.liveness.periodSeconds }}
 124             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
 125           {{ end }}
 126           readinessProbe:
 127             exec:
 128               command:
 129               - "/var/lib/jetty/ready-probe.sh"
 130             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 131             periodSeconds: {{ .Values.readiness.periodSeconds }}
 132             timeoutSeconds: {{ .Values.readiness.timeoutSeconds }}
 133           resources: {{ include "common.resources" . | nindent 12 }}
 134           env:
 135           - name: ENVNAME
 136             value: {{ .Values.env.name }}
 137           - name: JAVA_OPTIONS
 138             value: {{ .Values.config.javaOptions }}
 139           - name: cassandra_ssl_enabled
 140             value: {{ .Values.config.cassandraSslEnabled | quote }}
 141           - name: HOST_IP
 142             valueFrom:
 143               fieldRef:
 144                 fieldPath: status.podIP
 145           volumeMounts:
 146           - name: sdc-environments-output
 147             mountPath: /var/lib/jetty/chef-solo/environments/
 148           - name: sdc-environments-output
 149             mountPath: /var/lib/jetty/chef-solo/cookbooks/sdc-catalog-be/files/default/org.onap.sdc.p12
 150             subPath: org.onap.sdc.p12
 151           - name: sdc-environments-output
 152             mountPath: /var/lib/jetty/chef-solo/cookbooks/sdc-catalog-be/files/default/org.onap.sdc.trust.jks
 153             subPath: org.onap.sdc.trust.jks
 154           - name: {{ include "common.fullname" . }}-localtime
 155             mountPath: /etc/localtime
 156             readOnly: true
 157           - name: {{ include "common.fullname" . }}-logs
 158             mountPath: /var/log/onap
 159           - name: {{ include "common.fullname" . }}-logback
 160             mountPath: /tmp/logback.xml
 161             subPath: logback.xml
 162           lifecycle:
 163             postStart:
 164               exec:
 165                 command: ["/bin/sh", "-c", "export LOG=wait_logback.log; touch $LOG; export SRC=/tmp/logback.xml; export DST=/var/lib/jetty/config/catalog-be/; while [ ! -e $DST ]; do echo 'Waiting for $DST...' >> $LOG; sleep 5; done; sleep 2; /bin/cp -f $SRC $DST; echo 'Done' >> $LOG"]
 166         # side car containers
 167         - name: {{ include "common.name" . }}-filebeat-onap
 168           image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
 169           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 170           volumeMounts:
 171           - name: {{ include "common.fullname" . }}-filebeat-conf
 172             mountPath: /usr/share/filebeat/filebeat.yml
 173             subPath: filebeat.yml
 174           - name: {{ include "common.fullname" . }}-logs
 175             mountPath: /var/log/onap
 176           - name: {{ include "common.fullname" . }}-data-filebeat
 177             mountPath: /usr/share/filebeat/data
 178           resources:
 179             limits:
 180               cpu: 100m
 181               memory: 100Mi
 182             requests:
 183               cpu: 3m
 184               memory: 20Mi
 185       volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
 186       - name: {{ include "common.fullname" . }}-localtime
 187         hostPath:
 188           path: /etc/localtime
 189       - name: {{ include "common.fullname" . }}-filebeat-conf
 190         configMap:
 191           name: {{ include "common.release" . }}-sdc-filebeat-configmap
 192       - name: {{ include "common.fullname" . }}-data-filebeat
 193         emptyDir: {}
 194       - name: {{ include "common.fullname" . }}-logback
 195         configMap:
 196           name : {{ include "common.fullname" . }}-logging-configmap
 197       - name: {{ include "common.fullname" . }}-environments
 198         configMap:
 199           name: {{ include "common.release" . }}-sdc-environments-configmap
 200           defaultMode: 0755
 201       - name: sdc-environments-output
 202         emptyDir: { medium: "Memory" }
 203       - name: {{ include "common.fullname" . }}-logs
 204         emptyDir: {}
 205       imagePullSecrets:
 206       - name: "{{ include "common.namespace" . }}-docker-registry-key"