commit 554bc6b6d540810be1fd2c4fa1117719c21527de
author Sylvain Desbureaux <sylvain.desbureaux@orange.com> Thu Feb 25 18:13:19 2021 +0100
committer Sylvain Desbureaux <sylvain.desbureaux@orange.com> Sat Mar 20 19:41:45 2021 +0000
tree e8e503ed7c29217a5bd4951a222681f3d64d8c00
parent fde94076e689727e8a2c3c5147ce1242dc225f87

[VNFSDK] Automatically retrieve certificates

Instead of using hardcoded certificates, let's use certInitializer in
order to retrieve them.

Issue-ID: OOM-2696
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I6ed12dda660647cd0990c34f51e6c05ed533774a

kubernetes/vnfsdk/templates/deployment.yaml

diff --git a/kubernetes/vnfsdk/templates/deployment.yaml b/kubernetes/vnfsdk/templates/deployment.yaml
index 7e4ad5b..89eba2f 100644
--- a/kubernetes/vnfsdk/templates/deployment.yaml
+++ b/kubernetes/vnfsdk/templates/deployment.yaml
@@ -35,7 +35,7 @@
         release: {{ include "common.release" . }}
       name: {{ include "common.name" . }}
     spec:
-      initContainers:
+      initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
       - command:
         - sh
         args:
@@ -75,10 +75,13 @@
         name: {{ include "common.name" . }}
         resources:
 {{ include "common.resources" . | indent 12 }}
-        volumeMounts:
+        volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
         - mountPath: /service/webapps/ROOT/WEB-INF/classes/mybatis/configuration/configuration.xml
           name: init-data
           subPath: configuration.xml
+        - mountPath: /etc/nginx/nginx.conf
+          name: nginx
+          subPath: nginx.conf
         readinessProbe:
           tcpSocket:
             port: {{ .Values.service.internalPort }}
@@ -86,10 +89,13 @@
           periodSeconds: {{ .Values.readiness.periodSeconds }}
       imagePullSecrets:
       - name: "{{ include "common.namespace" . }}-docker-registry-key"
-      volumes:
+      volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
       - name: init-data-input
         configMap:
           name: {{ include "common.fullname" . }}
+      - name: nginx
+        configMap:
+          name: {{ include "common.fullname" . }}-nginx
       - name: init-data
         emptyDir:
           medium: Memory