kubernetes/so/components/so-monitoring/templates/deployment.yaml

   1 {{/*
   2 #  ============LICENSE_START=======================================================
   3 #   Copyright (C) 2018 Ericsson. All rights reserved.
   4 #   Modifications Copyright © 2020 Nokia
   5 #  ================================================================================
   6 #  Licensed under the Apache License, Version 2.0 (the "License");
   7 #  you may not use this file except in compliance with the License.
   8 #  You may obtain a copy of the License at
   9 #
  10 #       http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 #  Unless required by applicable law or agreed to in writing, software
  13 #  distributed under the License is distributed on an "AS IS" BASIS,
  14 #  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 #  See the License for the specific language governing permissions and
  16 #  limitations under the License.
  17 #
  18 #  SPDX-License-Identifier: Apache-2.0
  19 #  ============LICENSE_END=========================================================
  20 #  @author: gareth.roper@ericsson.com
  21 */}}
  22 apiVersion: apps/v1
  23 kind: Deployment
  24 metadata:
  25   name: {{ include "common.fullname" . }}
  26   namespace: {{ include "common.namespace" . }}
  27   labels:
  28     app: {{ include "common.fullname" . }}
  29     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
  30     release: {{ include "common.release" . }}
  31 spec:
  32   selector:
  33     matchLabels:
  34       app: {{ include "common.name" . }}
  35   replicas: {{ index .Values.replicaCount }}
  36   minReadySeconds: {{ index .Values.minReadySeconds }}
  37   strategy:
  38     type: {{ index .Values.updateStrategy.type }}
  39     rollingUpdate:
  40       maxUnavailable: {{ index .Values.updateStrategy.maxUnavailable }}
  41       maxSurge: {{ index .Values.updateStrategy.maxSurge }}
  42   template:
  43     metadata:
  44       labels:
  45         app: {{ include "common.name" . }}
  46         release: {{ include "common.release" . }}
  47     spec:
  48       initContainers: {{ include "so.certificate.container_importer" . | nindent 6 }}
  49       - name: so-chown
  50         image: alpine:3.6
  51         volumeMounts:
  52         - name: logs
  53           mountPath: /app/logs
  54         imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
  55         command: ["/bin/sh", "-c", "chown -Rf 1000:1000 /app/logs"]
  56       restartPolicy: Always
  57       containers:
  58       - name: {{ include "common.name" . }}
  59         image: {{ include "common.repository" . }}/{{ .Values.image }}
  60         resources: {{ include "common.resources" . | nindent 12 }}
  61         command:
  62         - /bin/sh
  63         args:
  64         - -c
  65         - |
  66           export SO_MONITORING_PASSWORD=`htpasswd -bnBC 10 "" $SO_MON_PASS | tr -d ':\n' | sed 's/\$2y/\$2a/'`
  67           {{- if .Values.global.aafEnabled }}
  68           export $(grep '^c' {{ .Values.soHelpers.certInitializer.credsPath }}/org.onap.so.cred.props | xargs -0)
  69           export $(grep '^c' {{ .Values.soHelpers.certInitializer.credsPath }}/mycreds.prop | xargs -0)
  70           export KEYSTORE=file://$cadi_keystore
  71           export KEYSTORE_PASSWORD=$cadi_keystore_password_p12
  72           export TRUSTSTORE=file://$cadi_truststore
  73           export TRUSTSTORE_PASSWORD=$cadi_truststore_password
  74           {{- end }}
  75           /app/start-app.sh
  76         env:
  77         - name: DB_HOST
  78           valueFrom:
  79             secretKeyRef:
  80               name: {{ include "common.release" . }}-so-db-secrets
  81               key: mariadb.readwrite.host
  82         - name: DB_PORT
  83           valueFrom:
  84             secretKeyRef:
  85               name: {{ include "common.release" . }}-so-db-secrets
  86               key: mariadb.readwrite.port
  87         - name: DB_USERNAME
  88           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-user-creds" "key" "login") | indent 10 }}
  89         - name: DB_PASSWORD
  90           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-user-creds" "key" "password") | indent 10 }}
  91         - name: DB_ADMIN_USERNAME
  92           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-admin-creds" "key" "login") | indent 10 }}
  93         - name: DB_ADMIN_PASSWORD
  94           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-admin-creds" "key" "password") | indent 10 }}
  95         - name: SO_MONITORING_USERNAME
  96           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "app-user-creds" "key" "login") | indent 10 }}
  97         - name: SO_MON_PASS
  98           {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "app-user-creds" "key" "password") | indent 10 }}
  99
 100         envFrom:
 101         - configMapRef:
 102             name: {{ include "common.fullname" . }}-configmap
 103         imagePullPolicy:  {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
 104         volumeMounts: {{ include "so.certificate.volumeMount" . | nindent 8 }}
 105         - name: logs
 106           mountPath: /app/logs
 107         - name: config
 108           mountPath: /app/config
 109           readOnly: true
 110         readinessProbe:
 111           tcpSocket:
 112             port: {{ index .Values.readinessProbe.port }}
 113           initialDelaySeconds: {{ index .Values.readinessProbe.initialDelaySeconds}}
 114           periodSeconds: {{ index .Values.readinessProbe.periodSeconds}}
 115         livenessProbe:
 116           tcpSocket:
 117             port: {{ index .Values.livenessProbe.port }}
 118           initialDelaySeconds: {{ index .Values.livenessProbe.initialDelaySeconds}}
 119           periodSeconds: {{ index .Values.livenessProbe.periodSeconds}}
 120           successThreshold: {{ index .Values.livenessProbe.successThreshold}}
 121           failureThreshold: {{ index .Values.livenessProbe.failureThreshold}}
 122
 123         ports:
 124         - containerPort: {{ index .Values.containerPort }}
 125           name: {{ .Values.service.portName }}
 126           protocol: TCP
 127       volumes: {{ include "so.certificate.volumes" . | nindent 6 }}
 128       - name: logs
 129         emptyDir: {}
 130       - name: config
 131         configMap:
 132             name: {{ include "common.fullname" . }}-app-configmap
 133       imagePullSecrets:
 134         - name: "{{ include "common.namespace" . }}-docker-registry-key"