Merge "[CONTRIB] Adjust EJBCA to issue certificates usable by servers."
[oom.git] / kubernetes / sdc / components / sdc-fe / templates / deployment.yaml
1 # Copyright © 2017 Amdocs, Bell Canada
2 # Modifications Copyright © 2018 AT&T, ZTE
3 #
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
7 #
8 #       http://www.apache.org/licenses/LICENSE-2.0
9 #
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15
16 apiVersion: apps/v1
17 kind: Deployment
18 metadata:
19   name: {{ include "common.fullname" . }}
20   namespace: {{ include "common.namespace" . }}
21   labels:
22     app: {{ include "common.name" . }}
23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
24     release: {{ include "common.release" . }}
25     heritage: {{ .Release.Service }}
26 spec:
27   selector:
28     matchLabels:
29       app: {{ include "common.name" . }}
30   replicas: {{ .Values.replicaCount }}
31   template:
32     metadata:
33       labels:
34         app: {{ include "common.name" . }}
35         release: {{ include "common.release" . }}
36     spec:
37       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
38       - name: {{ include "common.name" . }}-job-completion
39         image: "{{ include "common.repository" . }}/{{ .Values.global.readinessImage }}"
40         imagePullPolicy: "{{ .Values.global.pullPolicy | default .Values.pullPolicy }}"
41         command:
42         - /app/ready.py
43         args:
44         - --job-name
45         - {{ include "common.release" . }}-sdc-be-config-backend
46         env:
47         - name: NAMESPACE
48           valueFrom:
49             fieldRef:
50               apiVersion: v1
51               fieldPath: metadata.namespace
52       {{- if .Values.global.aafEnabled }}
53       - name: {{ include "common.name" . }}-update-config
54         image: "{{ .Values.global.envsubstImage }}"
55         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
56         command:
57         - sh
58         args:
59         - "-c"
60         - |
61           export $(grep '^c' {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
62           export KEYSTORE_PASS=$cadi_keystore_password_p12
63           export KEYMANAGER_PASS=$cadi_keystore_password_p12
64           export TRUSTSTORE_PASS=$cadi_truststore_password
65           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.keystoreFile }} /config-output
66           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.truststoreFile }} /config-output
67           cd /config-input && \
68           for PFILE in `find . -not -type d | grep -v -F ..`
69           do
70             envsubst <${PFILE} >/config-output/${PFILE}
71             chmod 0755 /config-output/${PFILE}
72           done
73         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 10 }}
74           - name: {{ include "common.fullname" . }}-environments
75             mountPath: /config-input/
76           - name: sdc-environments-output
77             mountPath: /config-output/
78       {{- end }}
79       containers:
80         - name: {{ include "common.name" . }}
81           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
82           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
83           {{- if .Values.global.aafEnabled }}
84           command:
85           - sh
86           args:
87           - "-c"
88           - |
89             sed -i '/trustStorePassword/d' ${JETTY_BASE}/startup.sh
90             ${JETTY_BASE}/startup.sh
91           {{- end }}
92           ports:
93           - containerPort: {{ .Values.service.internalPort }}
94           - containerPort: {{ .Values.service.internalPort2 }}
95           {{ if eq .Values.liveness.enabled true }}
96           livenessProbe:
97             tcpSocket:
98               port: {{ .Values.service.internalPort2 }}
99             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
100             periodSeconds: {{ .Values.liveness.periodSeconds }}
101             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
102           {{ end }}
103           readinessProbe:
104             tcpSocket:
105               port: {{ .Values.service.internalPort2 }}
106             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
107             periodSeconds: {{ .Values.readiness.periodSeconds }}
108             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
109           resources:
110 {{ include "common.resources" . | indent 12 }}
111           env:
112           - name: ENVNAME
113             value: {{ .Values.env.name }}
114           - name: HOST_IP
115             valueFrom:
116               fieldRef:
117                 fieldPath: status.podIP
118           - name: JAVA_OPTIONS
119             value: {{ .Values.config.javaOptions }}
120           volumeMounts:
121           - name: sdc-environments-output
122             mountPath: /var/lib/jetty/chef-solo/environments/
123           - name: sdc-environments-output
124             mountPath: /var/lib/jetty/chef-solo/cookbooks/sdc-catalog-fe/files/default/org.onap.sdc.p12
125             subPath: org.onap.sdc.p12
126           - name: sdc-environments-output
127             mountPath: /var/lib/jetty/chef-solo/cookbooks/sdc-catalog-fe/files/default/org.onap.sdc.trust.jks
128             subPath: org.onap.sdc.trust.jks
129           - name: {{ include "common.fullname" . }}-localtime
130             mountPath: /etc/localtime
131             readOnly: true
132           - name: {{ include "common.fullname" . }}-logs
133             mountPath: /var/log/onap
134           - name: {{ include "common.fullname" . }}-configs
135             mountPath: /var/lib/jetty/config/catalog-fe/plugins-configuration.yaml
136             subPath: plugins-configuration.yaml
137           - name: {{ include "common.fullname" . }}-logback
138             mountPath: /tmp/logback.xml
139             subPath: logback.xml
140           lifecycle:
141             postStart:
142               exec:
143                 command: ["/bin/sh", "-c", "export LOG=wait_logback.log; touch $LOG; export SRC=/tmp/logback.xml; export DST=/var/lib/jetty/config/catalog-fe/; while [ ! -e $DST ]; do echo 'Waiting for $DST...' >> $LOG; sleep 5; done; sleep 2; /bin/cp -f $SRC $DST; echo 'Done' >> $LOG"]
144         # side car containers
145         - name: {{ include "common.name" . }}-filebeat-onap
146           image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
147           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
148           volumeMounts:
149           - name: {{ include "common.fullname" . }}-filebeat-conf
150             mountPath: /usr/share/filebeat/filebeat.yml
151             subPath: filebeat.yml
152           - name: {{ include "common.fullname" . }}-logs
153             mountPath: /var/log/onap
154           - name: {{ include "common.fullname" . }}-data-filebeat
155             mountPath: /usr/share/filebeat/data
156       volumes: {{ include "common.certInitializer.volumes" . | nindent 8 }}
157         - name: {{ include "common.fullname" . }}-localtime
158           hostPath:
159             path: /etc/localtime
160         - name: {{ include "common.fullname" . }}-filebeat-conf
161           configMap:
162             name: {{ include "common.release" . }}-sdc-filebeat-configmap
163         - name: {{ include "common.fullname" . }}-data-filebeat
164           emptyDir: {}
165         - name: {{ include "common.fullname" . }}-configs
166           configMap:
167             name : {{ include "common.fullname" . }}-plugins-configmap
168             defaultMode: 0777
169         - name: {{ include "common.fullname" . }}-logback
170           configMap:
171             name : {{ include "common.fullname" . }}-logging-configmap
172         - name: {{ include "common.fullname" . }}-environments
173           configMap:
174             name: {{ include "common.release" . }}-sdc-environments-configmap
175             defaultMode: 0755
176         - name: sdc-environments-output
177           emptyDir: { medium: "Memory" }
178         - name: {{ include "common.fullname" . }}-logs
179           emptyDir: {}
180       imagePullSecrets:
181       - name: "{{ include "common.namespace" . }}-docker-registry-key"