+++ /dev/null
-{{/*
-#============LICENSE_START========================================================
-# ================================================================================
-# Copyright (c) 2018-2020 AT&T Intellectual Property. All rights reserved.
-# Modifications Copyright © 2018 Amdocs, Bell Canada
-# Copyright (c) 2020-2021 J. F. Lucas. All rights reserved.
-# ================================================================================
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-# ============LICENSE_END=========================================================
-*/}}
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: {{ include "common.fullname" . }}
- namespace: {{ include "common.namespace" . }}
- labels:
- app: {{ include "common.name" . }}
- chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
- release: {{ include "common.release" . }}
- heritage: {{ .Release.Service }}
-spec:
- replicas: 1
- selector:
- matchLabels:
- app: {{ include "common.name" . }}
- template:
- metadata:
- labels:
- app: {{ include "common.name" . }}
- release: {{ include "common.release" . }}
- spec:
- # host alias allows local 'cfy' command to use https and match
- # the host name in the certificate
- hostAliases:
- - ip: "127.0.0.1"
- hostnames:
- - "dcae-cloudify-manager"
- # Cloudify requires a fixed hostname across restarts
- hostname: dcae-cloudify-manager
- initContainers:
- - name: {{ include "common.name" . }}-readiness
- image: {{ include "repositoryGenerator.image.readiness" . }}
- imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
- command:
- - /app/ready.py
- args:
- - --container-name
- - aaf-cm
- - --container-name
- - consul-server
- - "-t"
- - "15"
- env:
- - name: NAMESPACE
- valueFrom:
- fieldRef:
- apiVersion: v1
- fieldPath: metadata.namespace
- - name: {{ include "common.name" . }}-multisite-init
- image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.multisiteInitImage }}
- imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
- args:
- - --namespace
- - {{ include "common.namespace" . }}
- - --configmap
- - {{ .Values.multisiteConfigMapName }}
- - name: init-consul
- image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.consulLoaderImage }}
- imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
- args:
- - --key
- - k8s-plugin|/plugin-configs/k8s-plugin.json
- - --key
- - dmaap-plugin|/plugin-configs/dmaap-plugin.json
- resources: {}
- volumeMounts:
- - mountPath: /plugin-configs
- name: plugin-configs
- - name: init-tls
- env:
- - name: POD_IP
- valueFrom:
- fieldRef:
- apiVersion: v1
- fieldPath: status.podIP
- - name: aaf_locator_fqdn
- value: dcae
- image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.global.tlsImage }}
- imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
- resources: {}
- volumeMounts:
- - mountPath: /opt/app/osaaf
- name: tls-info
- {{- if .Values.persistence.enabled }}
- - name: remove-lost-found
- image: {{ include "repositoryGenerator.image.busybox" . }}
- imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
- volumeMounts:
- - mountPath: /cfy-persist
- name: cm-persistent
- command:
- - /bin/sh
- args:
- - -c
- - "rm -rf '/cfy-persist/lost+found';"
- {{- end }}
- containers:
- - name: {{ include "common.name" . }}
- image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
- imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
- env:
- - name: REQUESTS_CA_BUNDLE
- value: "/opt/onap/certs/cacert.pem"
- resources:
-{{ include "common.resources" . | indent 12 }}
- ports:
- - containerPort: {{ .Values.service.internalPort }}
- # disable liveness probe when breakpoints set in debugger
- # so K8s doesn't restart unresponsive container
- {{- if eq .Values.liveness.enabled true }}
- livenessProbe:
- tcpSocket:
- port: {{ .Values.service.internalPort }}
- initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
- periodSeconds: {{ .Values.liveness.periodSeconds }}
- timeoutSeconds: {{ .Values.liveness.timeoutSeconds }}
- {{ end }}
- readinessProbe:
- exec:
- command:
- - /scripts/readiness-check.sh
- initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
- periodSeconds: {{ .Values.readiness.periodSeconds }}
- timeoutSeconds: {{ .Values.readiness.timeoutSeconds }}
- volumeMounts:
- - mountPath: /opt/onap/config.txt
- subPath: config.txt
- name: {{ include "common.fullname" .}}-config
- readOnly: true
- - mountPath: /opt/onap/kube
- name: {{ include "common.fullname" .}}-kubeconfig
- readOnly: true
- - mountPath: /secret
- name: dcae-token
- readOnly: true
- - mountPath: /sys/fs/cgroup
- name: {{ include "common.fullname" . }}-cgroup
- readOnly: true
- - mountPath: /etc/localtime
- name: localtime
- readOnly: true
- - mountPath: /cfy-persist
- name: cm-persistent
- - mountPath: /opt/onap/certs
- name: tls-info
- - mountPath: /opt/onap/cm-secrets
- name: cm-secrets
- readOnly: true
- securityContext:
- privileged: True
- serviceAccountName: {{ include "common.fullname" (dict "suffix" "create" "dot" . )}}
- volumes:
- - name: {{ include "common.fullname" . }}-config
- configMap:
- name: {{ include "common.fullname" . }}-configmap
- - name: {{ include "common.fullname" .}}-kubeconfig
- configMap:
- name: {{ .Values.multisiteConfigMapName }}
- - name: plugin-configs
- configMap:
- name: {{ include "common.fullname" . }}-plugins
- - name: dcae-token
- secret:
- secretName: dcae-token
- - name: {{ include "common.fullname" . }}-cgroup
- hostPath:
- path: /sys/fs/cgroup
- - name: localtime
- hostPath:
- path: /etc/localtime
- - name: cm-persistent
- {{- if .Values.persistence.enabled }}
- persistentVolumeClaim:
- claimName: {{ include "common.fullname" . }}-data
- {{- else }}
- emptyDir: {}
- {{- end }}
- - emptyDir: {}
- name: tls-info
- - name: cm-secrets
- secret:
- secretName: {{ include "common.secret.getSecretNameFast" (dict "global" . "uid" "cm-pass") }}
- imagePullSecrets:
- - name: "{{ include "common.namespace" . }}-docker-registry-key"
Code Review / oom.git / blobdiff