kubernetes/sdc/components/sdc-wfd-be/templates/deployment.yaml

   1 # Copyright © 2017 Amdocs, AT&T, Bell Canada
   2 # Modifications Copyright © 2018  ZTE
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 apiVersion: apps/v1
  17 kind: Deployment
  18 metadata:
  19   name: {{ include "common.fullname" . }}
  20   namespace: {{ include "common.namespace" . }}
  21   labels:
  22     app: {{ include "common.name" . }}
  23     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  24     release: {{ include "common.release" . }}
  25     heritage: {{ .Release.Service }}
  26 spec:
  27   selector:
  28     matchLabels:
  29       app: {{ include "common.name" . }}
  30   replicas: {{ .Values.replicaCount }}
  31   template:
  32     metadata:
  33       labels:
  34         app: {{ include "common.name" . }}
  35         release: {{ include "common.release" . }}
  36     spec:
  37       initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
  38       {{- if .Values.initJob.enabled }}
  39       - name: {{ include "common.name" . }}-job-completion
  40         image: "{{ include "common.repository" . }}/{{ .Values.global.readinessImage }}"
  41         imagePullPolicy: "{{ .Values.global.pullPolicy | default .Values.pullPolicy }}"
  42         command:
  43         - /app/ready.py
  44         args:
  45         - --job-name
  46         - {{ include "common.fullname" . }}-workflow-init
  47         env:
  48         - name: NAMESPACE
  49           valueFrom:
  50             fieldRef:
  51               apiVersion: v1
  52               fieldPath: metadata.namespace
  53       {{ end }}
  54       containers:
  55         - name: {{ include "common.name" . }}
  56           image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  57           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  58           {{- if .Values.global.aafEnabled }}
  59           command:
  60           - sh
  61           args:
  62           - "-c"
  63           - |
  64             export $(grep '^c' {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0)
  65             export SERVER_SSL_KEY_PASSWORD=$cadi_keystore_password_p12
  66             export KEYMANAGER_PASS=$cadi_keystore_password_p12
  67             export SERVER_SSL_TRUST_PASSWORD=$cadi_truststore_password
  68             export SERVER_SSL_KEYSTORE_PATH={{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.keystoreFile }}
  69             export SERVER_SSL_TRUSTSTORE_PATH={{ .Values.certInitializer.credsPath }}/{{ .Values.certInitializer.truststoreFile }}
  70             ./startup.sh
  71           {{- end }}
  72           ports:
  73           - containerPort: {{ template "wfd-be.internalPort" . }}
  74           # disable liveness probe when breakpoints set in debugger
  75           # so K8s doesn't restart unresponsive container
  76           {{ if .Values.liveness.enabled }}
  77           livenessProbe:
  78             tcpSocket:
  79               port: {{ template "wfd-be.internalPort" . }}
  80             initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
  81             periodSeconds: {{ .Values.liveness.periodSeconds }}
  82           {{ end }}
  83           readinessProbe:
  84             tcpSocket:
  85               port: {{ template "wfd-be.internalPort" . }}
  86             initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
  87             periodSeconds: {{ .Values.readiness.periodSeconds }}
  88           env:
  89           - name: JAVA_OPTIONS
  90             value: {{ .Values.config.javaOptions }}
  91           - name: CS_HOSTS
  92             value: "{{ .Values.global.cassandra.serviceName }}"
  93           - name: CS_PORT
  94             value: "{{ .Values.config.cassandraClientPort }}"
  95           - name: CS_AUTHENTICATE
  96             value: "{{ .Values.config.cassandraAuthenticationEnabled }}"
  97           - name: CS_USER
  98             valueFrom:
  99               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_user}
 100           - name: CS_PASSWORD
 101             valueFrom:
 102               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: sdc_password}
 103           - name: CS_SSL_ENABLED
 104             value: "{{ .Values.config.cassandraSSLEnabled }}"
 105           - name: CS_TRUST_STORE_PATH
 106             value: "{{ .Values.config.cassandraTrustStorePath }}"
 107           - name: CS_TRUST_STORE_PASSWORD
 108             valueFrom:
 109               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: cs_truststore_password}
 110           - name: SDC_PROTOCOL
 111             value: "{{ .Values.config.sdcProtocol }}"
 112           - name: SDC_ENDPOINT
 113             value: "{{ .Values.config.sdcEndpoint }}"
 114           - name: SDC_USER
 115             value: "{{ .Values.config.sdcExternalUser }}"
 116           - name: SDC_PASSWORD
 117             valueFrom:
 118               secretKeyRef: {name: {{ include "common.release" . }}-sdc-cs-secrets, key: wf_external_user_password}
 119           - name: SERVER_SSL_ENABLED
 120             value: "{{ .Values.config.serverSSLEnabled }}"
 121           - name: SERVER_SSL_KEYSTORE_TYPE
 122             value: "{{ .Values.config.serverSSLKeyStoreType }}"
 123           - name: SERVER_SSL_TRUSTSTORE_TYPE
 124             value: "{{ .Values.config.serverSSLTrustStoreType }}"
 125           volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 10 }}
 126       volumes: {{ include "common.certInitializer.volumes" . | nindent 8 }}
 127       imagePullSecrets:
 128       - name: "{{ include "common.namespace" . }}-docker-registry-key"