Merge "[DCAEMOD] Uses new tpls for repos / images"
[oom.git] / kubernetes / sdc / components / sdc-onboarding-be / templates / deployment.yaml
1 {{/*
2 # Copyright © 2017 Amdocs, AT&T, Bell Canada
3 # Modifications Copyright © 2018  ZTE
4 #
5 # Licensed under the Apache License, Version 2.0 (the "License");
6 # you may not use this file except in compliance with the License.
7 # You may obtain a copy of the License at
8 #
9 #       http://www.apache.org/licenses/LICENSE-2.0
10 #
11 # Unless required by applicable law or agreed to in writing, software
12 # distributed under the License is distributed on an "AS IS" BASIS,
13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 # See the License for the specific language governing permissions and
15 # limitations under the License.
16 */}}
17
18 apiVersion: apps/v1
19 kind: Deployment
20 metadata:
21   name: {{ include "common.fullname" . }}
22   namespace: {{ include "common.namespace" . }}
23   labels:
24     app: {{ include "common.name" . }}
25     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
26     release: {{ include "common.release" . }}
27     heritage: {{ .Release.Service }}
28 spec:
29   selector:
30     matchLabels:
31       app: {{ include "common.name" . }}
32   replicas: {{ .Values.replicaCount }}
33   template:
34     metadata:
35       labels:
36         app: {{ include "common.name" . }}
37         release: {{ include "common.release" . }}
38     spec:
39       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
40       - name: {{ include "common.name" . }}-job-completion
41         image: {{ include "repositoryGenerator.image.readiness" . }}
42         imagePullPolicy: "{{ .Values.global.pullPolicy | default .Values.pullPolicy }}"
43         command:
44         - /app/ready.py
45         args:
46         - --job-name
47         - {{ include "common.release" . }}-sdc-onboarding-be-cassandra-init
48         env:
49         - name: NAMESPACE
50           valueFrom:
51             fieldRef:
52               apiVersion: v1
53               fieldPath: metadata.namespace
54         resources:
55           limits:
56             cpu: 100m
57             memory: 100Mi
58           requests:
59             cpu: 3m
60             memory: 20Mi
61       {{- if .Values.global.aafEnabled }}
62       - name: {{ include "common.name" . }}-update-config
63         image: {{ include "repositoryGenerator.image.envsubst" . }}
64         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
65         command:
66         - sh
67         args:
68         - "-c"
69         - |
70           export $(grep '^c' {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
71           export KEYSTORE_PASS=$cadi_keystore_password_p12
72           export KEYMANAGER_PASS=$cadi_keystore_password_p12
73           export TRUSTSTORE_PASS=$cadi_truststore_password
74           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.keystoreFile }} /config-output
75           cp {{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.truststoreFile }} /config-output
76           cd /config-input && \
77           for PFILE in `find . -not -type d | grep -v -F ..`
78           do
79             envsubst <${PFILE} >/config-output/${PFILE}
80             chmod 0755 /config-output/${PFILE}
81           done
82         volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 10 }}
83           - name: {{ include "common.fullname" . }}-environments
84             mountPath: /config-input/
85           - name: sdc-environments-output
86             mountPath: /config-output/
87         resources:
88           limits:
89             cpu: 100m
90             memory: 100Mi
91           requests:
92             cpu: 3m
93             memory: 20Mi
94       {{- end }}
95       - name: volume-permissions
96         image: {{ .Values.global.busyboxRepository | default .Values.busyboxRepository }}/{{ .Values.global.busyboxImage | default .Values.busyboxImage }}
97         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
98         command:
99           - sh
100         args:
101           - "-c"
102           - |
103             chown -R {{ .Values.securityContext.runAsUser }}:{{ .Values.securityContext.fsGroup }} //onboard/cert
104         securityContext:
105           runAsUser: 0
106         volumeMounts:
107           - name: {{ include "common.fullname" . }}-cert-storage
108             mountPath: "/onboard/cert"
109         resources:
110           limits:
111             cpu: 100m
112             memory: 100Mi
113           requests:
114             cpu: 3m
115             memory: 20Mi
116       containers:
117         - name: {{ include "common.name" . }}
118           image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
119           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
120           ports:
121           - containerPort: {{ .Values.service.internalPort }}
122           - containerPort: {{ .Values.service.internalPort2 }}
123           {{ if eq .Values.liveness.enabled true }}
124           livenessProbe:
125             exec:
126               command:
127               - "/var/lib/jetty/ready-probe.sh"
128             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
129             periodSeconds: {{ .Values.liveness.periodSeconds }}
130             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
131           {{ end }}
132           readinessProbe:
133             exec:
134               command:
135               - "/var/lib/jetty/ready-probe.sh"
136             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
137             periodSeconds: {{ .Values.readiness.periodSeconds }}
138             timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
139           resources: {{ include "common.resources" . | nindent 12 }}
140           env:
141           - name: ENVNAME
142             value: {{ .Values.env.name }}
143           - name: JAVA_OPTIONS
144             value: {{ .Values.config.javaOptions }}
145           - name: SDC_CLUSTER_NAME
146             value: "SDC-CS-{{ .Values.env.name }}"
147           - name: cassandra_ssl_enabled
148             value: {{ .Values.config.cassandraSslEnabled | quote }}
149           - name: HOST_IP
150             valueFrom:
151               fieldRef:
152                 fieldPath: status.podIP
153           - name: SDC_USER
154             valueFrom:
155               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_user}
156           - name: SDC_PASSWORD
157             valueFrom:
158               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_password}
159           - name: SDC_CERT_DIR
160             value: {{ .Values.cert.certDir }}
161           volumeMounts:
162           - name: sdc-environments-output
163             mountPath: /var/lib/jetty/chef-solo/environments/
164           - name: sdc-environments-output
165             mountPath: /var/lib/jetty/chef-solo/cookbooks/sdc-onboard-backend/files/default/org.onap.sdc.p12
166             subPath: org.onap.sdc.p12
167           - name: sdc-environments-output
168             mountPath: /var/lib/jetty/chef-solo/cookbooks/sdc-onboard-backend/files/default/org.onap.sdc.trust.jks
169             subPath: org.onap.sdc.trust.jks
170           - name: {{ include "common.fullname" . }}-localtime
171             mountPath: /etc/localtime
172             readOnly: true
173           - name: {{ include "common.fullname" . }}-logs
174             mountPath: /var/log/onap
175           - name: {{ include "common.fullname" . }}-cert-storage
176             mountPath: "{{ .Values.cert.certDir }}"
177           - name: {{ include "common.fullname" . }}-logback
178             mountPath: /tmp/logback.xml
179             subPath: logback.xml
180           lifecycle:
181             postStart:
182               exec:
183                 command: ["/bin/sh", "-c", "export LOG=wait_logback.log; touch $LOG; export SRC=/tmp/logback.xml; export DST=/var/lib/jetty/config/onboarding-be/; while [ ! -e $DST ]; do echo 'Waiting for $DST...' >> $LOG; sleep 5; done; sleep 2; /bin/cp -f $SRC $DST; echo 'Done' >> $LOG"]
184         # side car containers
185         - name: {{ include "common.name" . }}-filebeat-onap
186           image: {{ include "repositoryGenerator.image.logging" . }}
187           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
188           volumeMounts:
189           - name: {{ include "common.fullname" . }}-filebeat-conf
190             mountPath: /usr/share/filebeat/filebeat.yml
191             subPath: filebeat.yml
192           - name: {{ include "common.fullname" . }}-logs
193             mountPath: /var/log/onap
194           - name: {{ include "common.fullname" . }}-data-filebeat
195             mountPath: /usr/share/filebeat/data
196           resources:
197             limits:
198               cpu: 100m
199               memory: 100Mi
200             requests:
201               cpu: 3m
202               memory: 20Mi
203       volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
204       - name: {{ include "common.fullname" . }}-localtime
205         hostPath:
206           path: /etc/localtime
207       - name: {{ include "common.fullname" . }}-filebeat-conf
208         configMap:
209           name: {{ include "common.release" . }}-sdc-filebeat-configmap
210       - name: {{ include "common.fullname" . }}-data-filebeat
211         emptyDir: {}
212       - name: {{ include "common.fullname" . }}-logback
213         configMap:
214           name : {{ include "common.fullname" . }}-logging-configmap
215       - name: {{ include "common.fullname" . }}-environments
216         configMap:
217           name: {{ include "common.release" . }}-sdc-environments-configmap
218           defaultMode: 0755
219       - name: sdc-environments-output
220         emptyDir: { medium: "Memory" }
221       - name:  {{ include "common.fullname" . }}-logs
222         emptyDir: {}
223       - name:  {{ include "common.fullname" . }}-cert-storage
224         persistentVolumeClaim:
225           claimName: {{ include "common.fullname" . }}-cert
226       imagePullSecrets:
227       - name: "{{ include "common.namespace" . }}-docker-registry-key"