kubernetes/sdc/components/sdc-wfd-be/templates/deployment.yaml

   1 # Copyright © 2017 Amdocs, AT&T, Bell Canada
   2 # Modifications Copyright © 2018  ZTE
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 apiVersion: apps/v1
  17 kind: Deployment
  18 metadata:
  19   name: {{ include "common.fullname" . }}
  20   namespace: {{ include "common.namespace" . }}
  21   labels:
  22     app: {{ include "common.name" . }}
  23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  24     release: {{ include "common.release" . }}
  25     heritage: {{ .Release.Service }}
  26 spec:
  27   selector:
  28     matchLabels:
  29       app: {{ include "common.name" . }}
  30   replicas: {{ .Values.replicaCount }}
  31   template:
  32     metadata:
  33       labels:
  34         app: {{ include "common.name" . }}
  35         release: {{ include "common.release" . }}
  36     spec:
  37       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
  38       {{- if .Values.initJob.enabled }}
  39       - name: {{ include "common.name" . }}-job-completion
  40         image: "{{ include "common.repository" . }}/{{ .Values.global.readinessImage }}"
  41         imagePullPolicy: "{{ .Values.global.pullPolicy | default .Values.pullPolicy }}"
  42         command:
  43         - /app/ready.py
  44         args:
  45         - --job-name
  46         - {{ include "common.fullname" . }}-workflow-init
  47         env:
  48         - name: NAMESPACE
  49           valueFrom:
  50             fieldRef:
  51               apiVersion: v1
  52               fieldPath: metadata.namespace
  53         resources:
  54           limits:
  55             cpu: 100m
  56             memory: 100Mi
  57           requests:
  58             cpu: 3m
  59             memory: 20Mi
  60       {{ end }}
  61       containers:
  62         - name: {{ include "common.name" . }}
  63           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  64           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  65           {{- if .Values.global.aafEnabled }}
  66           command:
  67           - sh
  68           args:
  69           - "-c"
  70           - |
  71             export $(grep '^c' {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
  72             export SERVER_SSL_KEY_PASSWORD=$cadi_keystore_password_p12
  73             export KEYMANAGER_PASS=$cadi_keystore_password_p12
  74             export SERVER_SSL_TRUST_PASSWORD=$cadi_truststore_password
  75             export SERVER_SSL_KEYSTORE_PATH={{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.keystoreFile }}
  76             export SERVER_SSL_TRUSTSTORE_PATH={{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.truststoreFile }}
  77             ./startup.sh
  78           {{- end }}
  79           ports:
  80           - containerPort: {{ template "wfd-be.internalPort" . }}
  81           # disable liveness probe when breakpoints set in debugger
  82           # so K8s doesn't restart unresponsive container
  83           {{ if .Values.liveness.enabled }}
  84           livenessProbe:
  85             tcpSocket:
  86               port: {{ template "wfd-be.internalPort" . }}
  87             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  88             periodSeconds: {{ .Values.liveness.periodSeconds }}
  89           {{ end }}
  90           readinessProbe:
  91             tcpSocket:
  92               port: {{ template "wfd-be.internalPort" . }}
  93             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  94             periodSeconds: {{ .Values.readiness.periodSeconds }}
  95           env:
  96           - name: JAVA_OPTIONS
  97             value: {{ .Values.config.javaOptions }}
  98           - name: CS_HOSTS
  99             value: "{{ .Values.global.cassandra.serviceName }}"
 100           - name: CS_PORT
 101             value: "{{ .Values.config.cassandraClientPort }}"
 102           - name: CS_AUTHENTICATE
 103             value: "{{ .Values.config.cassandraAuthenticationEnabled }}"
 104           - name: CS_USER
 105             valueFrom:
 106               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_user}
 107           - name: CS_PASSWORD
 108             valueFrom:
 109               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_password}
 110           - name: CS_SSL_ENABLED
 111             value: "{{ .Values.config.cassandraSSLEnabled }}"
 112           - name: CS_TRUST_STORE_PATH
 113             value: "{{ .Values.config.cassandraTrustStorePath }}"
 114           - name: CS_TRUST_STORE_PASSWORD
 115             valueFrom:
 116               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: cs_truststore_password}
 117           - name: SDC_PROTOCOL
 118             value: "{{ .Values.config.sdcProtocol }}"
 119           - name: SDC_ENDPOINT
 120             value: "{{ .Values.config.sdcEndpoint }}"
 121           - name: SDC_USER
 122             value: "{{ .Values.config.sdcExternalUser }}"
 123           - name: SDC_PASSWORD
 124             valueFrom:
 125               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: wf_external_user_password}
 126           - name: SERVER_SSL_ENABLED
 127             value: "{{ .Values.config.serverSSLEnabled }}"
 128           - name: SERVER_SSL_KEYSTORE_TYPE
 129             value: "{{ .Values.config.serverSSLKeyStoreType }}"
 130           - name: SERVER_SSL_TRUSTSTORE_TYPE
 131             value: "{{ .Values.config.serverSSLTrustStoreType }}"
 132           volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 10 }}
 133           resources: {{ include "common.resources" . | nindent 12 }}
 134       volumes: {{ include "common.certInitializer.volumes" . | nindent 8 }}
 135       imagePullSecrets:
 136       - name: "{{ include "common.namespace" . }}-docker-registry-key"