kubernetes/sdc/components/sdc-onboarding-be/templates/deployment.yaml

   1 {{/*
   2 # Copyright © 2017 Amdocs, AT&T, Bell Canada
   3 # Modifications Copyright © 2018  ZTE
   4 #
   5 # Licensed under the Apache License, Version 2.0 (the "License");
   6 # you may not use this file except in compliance with the License.
   7 # You may obtain a copy of the License at
   8 #
   9 #       http://www.apache.org/licenses/LICENSE-2.0
  10 #
  11 # Unless required by applicable law or agreed to in writing, software
  12 # distributed under the License is distributed on an "AS IS" BASIS,
  13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14 # See the License for the specific language governing permissions and
  15 # limitations under the License.
  16 */}}
  17
  18 apiVersion: apps/v1
  19 kind: Deployment
  20 metadata:
  21   name: {{ include "common.fullname" . }}
  22   namespace: {{ include "common.namespace" . }}
  23   labels:
  24     app: {{ include "common.name" . }}
  25     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  26     release: {{ include "common.release" . }}
  27     heritage: {{ .Release.Service }}
  28 spec:
  29   selector:
  30     matchLabels:
  31       app: {{ include "common.name" . }}
  32   replicas: {{ .Values.replicaCount }}
  33   template:
  34     metadata:
  35       labels:
  36         app: {{ include "common.name" . }}
  37         release: {{ include "common.release" . }}
  38     spec:
  39       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
  40       - name: {{ include "common.name" . }}-job-completion
  41         image: {{ include "repositoryGenerator.image.readiness" . }}
  42         imagePullPolicy: "{{ .Values.global.pullPolicy | default .Values.pullPolicy }}"
  43         command:
  44         - /app/ready.py
  45         args:
  46         - --job-name
  47         - {{ include "common.release" . }}-sdc-onboarding-be-cassandra-init
  48         env:
  49         - name: NAMESPACE
  50           valueFrom:
  51             fieldRef:
  52               apiVersion: v1
  53               fieldPath: metadata.namespace
  54         resources:
  55           limits:
  56             cpu: 100m
  57             memory: 100Mi
  58           requests:
  59             cpu: 3m
  60             memory: 20Mi
  61       {{- if .Values.global.aafEnabled }}
  62       - name: {{ include "common.name" . }}-update-config
  63         image: {{ include "repositoryGenerator.image.envsubst" . }}
  64         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  65         command:
  66         - sh
  67         args:
  68         - "-c"
  69         - |
  70           export $(grep '^c' {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
  71           export KEYSTORE_PASS=$cadi_keystore_password_p12
  72           export KEYMANAGER_PASS=$cadi_keystore_password_p12
  73           export TRUSTSTORE_PASS=$cadi_truststore_password
  74           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.keystoreFile }} /config-output
  75           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.truststoreFile }} /config-output
  76           cd /config-input && \
  77           for PFILE in `find . -not -type d | grep -v -F ..`
  78           do
  79             envsubst <${PFILE} >/config-output/${PFILE}
  80             chmod 0755 /config-output/${PFILE}
  81           done
  82         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 10 }}
  83           - name: {{ include "common.fullname" . }}-environments
  84             mountPath: /config-input/
  85           - name: sdc-environments-output
  86             mountPath: /config-output/
  87         resources:
  88           limits:
  89             cpu: 100m
  90             memory: 100Mi
  91           requests:
  92             cpu: 3m
  93             memory: 20Mi
  94       {{- end }}
  95       - name: volume-permissions
  96         image: {{ include "repositoryGenerator.image.busybox" . }}
  97         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  98         command:
  99           - sh
 100         args:
 101           - "-c"
 102           - |
 103             chown -R {{ .Values.securityContext.runAsUser }}:{{ .Values.securityContext.fsGroup }} //onboard/cert
 104         securityContext:
 105           runAsUser: 0
 106         volumeMounts:
 107           - name: {{ include "common.fullname" . }}-cert-storage
 108             mountPath: "/onboard/cert"
 109         resources:
 110           limits:
 111             cpu: 100m
 112             memory: 100Mi
 113           requests:
 114             cpu: 3m
 115             memory: 20Mi
 116       containers:
 117         - name: {{ include "common.name" . }}
 118           image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
 119           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 120           ports:
 121           - containerPort: {{ .Values.service.internalPort }}
 122           - containerPort: {{ .Values.service.internalPort2 }}
 123           {{ if eq .Values.liveness.enabled true }}
 124           livenessProbe:
 125             httpGet:
 126               path: /onboarding-api/v1.0/healthcheck
 127               port: {{ .Values.service.internalPort2 }}
 128             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
 129             periodSeconds: {{ .Values.liveness.periodSeconds }}
 130             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
 131             successThreshold: {{ .Values.liveness.successThreshold }}
 132             failureThreshold: {{ .Values.liveness.failureThreshold }}
 133           {{ end }}
 134           readinessProbe:
 135             httpGet:
 136               path: /onboarding-api/v1.0/healthcheck
 137               port: {{ .Values.service.internalPort2 }}
 138             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
 139             periodSeconds: {{ .Values.readiness.periodSeconds }}
 140             timeoutSeconds: {{ .Values.readiness.timeoutSeconds }}
 141             successThreshold: {{ .Values.readiness.successThreshold }}
 142             failureThreshold: {{ .Values.readiness.failureThreshold }}
 143           startupProbe:
 144             httpGet:
 145               path: /onboarding-api/v1.0/healthcheck
 146               port: {{ .Values.service.internalPort2 }}
 147             initialDelaySeconds: {{ .Values.startup.initialDelaySeconds }}
 148             periodSeconds: {{ .Values.startup.periodSeconds }}
 149             timeoutSeconds: {{ .Values.startup.timeoutSeconds }}
 150             successThreshold: {{ .Values.startup.successThreshold }}
 151             failureThreshold: {{ .Values.startup.failureThreshold }}
 152           resources: {{ include "common.resources" . | nindent 12 }}
 153           env:
 154           - name: ENVNAME
 155             value: {{ .Values.env.name }}
 156           - name: JAVA_OPTIONS
 157             value: {{ .Values.config.javaOptions }}
 158           - name: SDC_CLUSTER_NAME
 159             value: "SDC-CS-{{ .Values.env.name }}"
 160           - name: cassandra_ssl_enabled
 161             value: {{ .Values.config.cassandraSslEnabled | quote }}
 162           - name: HOST_IP
 163             valueFrom:
 164               fieldRef:
 165                 fieldPath: status.podIP
 166           - name: SDC_USER
 167             valueFrom:
 168               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_user}
 169           - name: SDC_PASSWORD
 170             valueFrom:
 171               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_password}
 172           - name: SDC_CERT_DIR
 173             value: {{ .Values.cert.certDir }}
 174           volumeMounts:
 175           - name: sdc-environments-output
 176             mountPath: /app/jetty/chef-solo/environments/
 177           - name: sdc-environments-output
 178             mountPath: /app/jetty/chef-solo/cookbooks/sdc-onboard-backend/files/default/org.onap.sdc.p12
 179             subPath: org.onap.sdc.p12
 180           - name: sdc-environments-output
 181             mountPath: /app/jetty/chef-solo/cookbooks/sdc-onboard-backend/files/default/org.onap.sdc.trust.jks
 182             subPath: org.onap.sdc.trust.jks
 183           - name: {{ include "common.fullname" . }}-localtime
 184             mountPath: /etc/localtime
 185             readOnly: true
 186           - name: {{ include "common.fullname" . }}-logs
 187             mountPath: /var/log/onap
 188           - name: {{ include "common.fullname" . }}-cert-storage
 189             mountPath: "{{ .Values.cert.certDir }}"
 190           - name: {{ include "common.fullname" . }}-logback
 191             mountPath: /tmp/logback.xml
 192             subPath: logback.xml
 193           lifecycle:
 194             postStart:
 195               exec:
 196                 command: ["/bin/sh", "-c", "export LOG=wait_logback.log; touch $LOG; export SRC=/tmp/logback.xml; export DST=/app/jetty/config/onboarding-be/; while [ ! -e $DST ]; do echo 'Waiting for $DST...' >> $LOG; sleep 5; done; sleep 2; /bin/cp -f $SRC $DST; echo 'Done' >> $LOG"]
 197         # side car containers
 198         - name: {{ include "common.name" . }}-filebeat-onap
 199           image: {{ include "repositoryGenerator.image.logging" . }}
 200           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 201           volumeMounts:
 202           - name: {{ include "common.fullname" . }}-filebeat-conf
 203             mountPath: /usr/share/filebeat/filebeat.yml
 204             subPath: filebeat.yml
 205           - name: {{ include "common.fullname" . }}-logs
 206             mountPath: /var/log/onap
 207           - name: {{ include "common.fullname" . }}-data-filebeat
 208             mountPath: /usr/share/filebeat/data
 209           resources:
 210             limits:
 211               cpu: 100m
 212               memory: 100Mi
 213             requests:
 214               cpu: 3m
 215               memory: 20Mi
 216       serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
 217       volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
 218       - name: {{ include "common.fullname" . }}-localtime
 219         hostPath:
 220           path: /etc/localtime
 221       - name: {{ include "common.fullname" . }}-filebeat-conf
 222         configMap:
 223           name: {{ include "common.release" . }}-sdc-filebeat-configmap
 224       - name: {{ include "common.fullname" . }}-data-filebeat
 225         emptyDir: {}
 226       - name: {{ include "common.fullname" . }}-logback
 227         configMap:
 228           name : {{ include "common.fullname" . }}-logging-configmap
 229       - name: {{ include "common.fullname" . }}-environments
 230         configMap:
 231           name: {{ include "common.release" . }}-sdc-environments-configmap
 232           defaultMode: 0755
 233       - name: sdc-environments-output
 234         emptyDir: { medium: "Memory" }
 235       - name:  {{ include "common.fullname" . }}-logs
 236         emptyDir: {}
 237       - name:  {{ include "common.fullname" . }}-cert-storage
 238         persistentVolumeClaim:
 239           claimName: {{ include "common.fullname" . }}-cert
 240       imagePullSecrets:
 241       - name: "{{ include "common.namespace" . }}-docker-registry-key"