| {{/* |
| # Copyright (C) 2018 AT&T Intellectual Property. |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| */}} |
| |
| apiVersion: apps/v1 |
| kind: Deployment |
| metadata: {{- include "common.resourceMetadata" . | nindent 2 }} |
| spec: |
| selector: {{- include "common.selectors" . | nindent 4 }} |
| replicas: {{ .Values.replicaCount }} |
| template: |
| metadata: {{- include "common.templateMetadata" . | nindent 6 }} |
| spec: |
| initContainers: |
| - name: {{ include "common.name" . }}-readiness |
| command: |
| - /app/ready.py |
| args: |
| {{- if .Values.global.mariadbGalera.localCluster }} |
| - --app-name |
| - {{ index .Values "mariadb-galera" "nameOverride" }} |
| {{- else }} |
| - --job-name |
| - {{ include "common.release" . }}-{{ index .Values "mariadb-init" "nameOverride" }}-config-job |
| {{- end }} |
| env: |
| - name: NAMESPACE |
| valueFrom: |
| fieldRef: |
| apiVersion: v1 |
| fieldPath: metadata.namespace |
| image: {{ include "repositoryGenerator.image.readiness" . }} |
| imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} |
| resources: |
| limits: |
| cpu: "100m" |
| memory: "500Mi" |
| requests: |
| cpu: "3m" |
| memory: "20Mi" |
| containers: |
| - name: {{ include "common.name" . }} |
| command: |
| - bash |
| args: |
| - '-c' |
| - 'export POL_BASIC_AUTH=`echo -n $POL_BASIC_AUTH_USER:$POL_BASIC_AUTH_PASSWORD | base64`; /startService.sh' |
| image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }} |
| imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} |
| env: |
| - name: SPRING_PROFILE |
| value: "{{ .Values.config.springProfile }}" |
| - name: NENG_DB_USER |
| {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "neng-db-secret" "key" "login") | indent 10}} |
| - name: NENG_DB_PASS |
| {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "neng-db-secret" "key" "password") | indent 10}} |
| - name: NENG_DB_URL |
| value: jdbc:mysql://{{ include "common.mariadbService" . }}:{{ include "common.mariadbPort" . }}/{{ index .Values "mariadb-init" "config" "mysqlDatabase" }} |
| - name: POL_CLIENT_AUTH |
| value: "{{ .Values.config.polClientAuth }}" |
| - name: POL_BASIC_AUTH_USER |
| {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "pol-basic-auth-secret" "key" "login") | indent 10}} |
| - name: POL_BASIC_AUTH_PASSWORD |
| {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "pol-basic-auth-secret" "key" "password") | indent 10}} |
| - name: POL_URL |
| {{- if (include "common.needTLS" .) }} |
| value: "{{ .Values.config.polUrl.https }}" |
| {{- else }} |
| value: "{{ .Values.config.polUrl.http }}" |
| {{- end }} |
| - name: POL_ENV |
| value: "{{ .Values.config.polEnv }}" |
| - name: POL_REQ_ID |
| value: "{{ .Values.config.polReqId }}" |
| - name: AAI_CERT_PASS |
| value: "{{ .Values.config.aaiCertPass }}" |
| - name: AAI_CERT_PATH |
| value: "{{ .Values.config.aaiCertPath }}" |
| - name: AAI_URI |
| {{- if (include "common.needTLS" .) }} |
| value: "{{ .Values.config.aaiUri.https }}" |
| {{- else }} |
| value: "{{ .Values.config.aaiUri.http }}" |
| {{- end }} |
| - name: AAI_AUTH |
| value: "{{ .Values.config.aaiAuth }}" |
| - name: DISABLE_HOST_VERIFICATION |
| value: "{{ .Values.config.disableHostVerification }}" |
| volumeMounts: |
| - name: certs |
| mountPath: /opt/etc/config/aai_keystore |
| subPath: aai_keystore |
| readOnly: true |
| resources: {{ include "common.resources" . | nindent 10 }} |
| {{- if .Values.nodeSelector }} |
| nodeSelector: |
| {{ toYaml .Values.nodeSelector | indent 10 }} |
| {{- end -}} |
| {{- if .Values.affinity }} |
| affinity: |
| {{ toYaml .Values.affinity | indent 10 }} |
| {{- end }} |
| serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}} |
| volumes: |
| - name: certs |
| secret: |
| secretName: {{ include "common.release" . }}-aai-keystore |
| {{- include "common.imagePullSecrets" . | nindent 6 }} |