blob: 76a11fad54797d5ee4c1df7bafbbf49b63e0fbfb [file] [log] [blame]
Sylvain Desbureaux47eb4d22020-12-10 12:15:27 +01001{{/*
Sylvain Desbureaux70070412020-11-09 21:58:48 +01002#
3# ============LICENSE_START=======================================================
4# org.onap.aai
5# ================================================================================
6# Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
7# Copyright (c) 2020 Nokia Intellectual Property. All rights reserved.
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +01008# Copyright (c) 2020-2021 Orange Intellectual Property. All rights reserved.
Sylvain Desbureaux70070412020-11-09 21:58:48 +01009# ================================================================================
10# Licensed under the Apache License, Version 2.0 (the "License");
11# you may not use this file except in compliance with the License.
12# You may obtain a copy of the License at
13#
14# http://www.apache.org/licenses/LICENSE-2.0
15#
16# Unless required by applicable law or agreed to in writing, software
17# distributed under the License is distributed on an "AS IS" BASIS,
18# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19# See the License for the specific language governing permissions and
20# limitations under the License.
21# ============LICENSE_END=========================================================
22
23# In ONAP, the following job will always be run on each installation
24# The following job will go through the latest oxm and
25# create properties based on the data type defined in the oxm
26# and create the required indexes for the appropriate properties
27# This can be run multiple times as the code if the index or property already exists
28# then the index or property won't be created again
29# NOTE - During the execution of the createSchema job, there should
30# be no other janusgraph connection to the graph as its the reason
31# that resources traversal and graphadmin wait until this job is done
32# If you are using an existing cassandra cluster not coming from oom
33# then it is your job to ensure that there are no connections to the database
Sylvain Desbureaux47eb4d22020-12-10 12:15:27 +010034*/}}
Sylvain Desbureaux70070412020-11-09 21:58:48 +010035
36{{- if and ( not .Values.global.jobs.migration.enabled ) ( .Values.global.jobs.createSchema.enabled ) }}
37apiVersion: batch/v1
38kind: Job
39metadata:
40 name: {{ include "common.fullname" . }}-create-db-schema
41 namespace: {{ include "common.namespace" . }}
42 labels:
43 app: {{ include "common.name" . }}-job
44 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
45 release: {{ include "common.release" . }}
46 heritage: {{ .Release.Service }}
47spec:
48 backoffLimit: 20
49 template:
50 metadata:
51 labels:
52 app: {{ include "common.name" . }}-job
53 release: {{ include "common.release" . }}
54 name: {{ include "common.name" . }}
55 spec:
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +010056 initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }}
57 {{- if .Values.global.aafEnabled }}
58 - command:
59 - sh
60 args:
61 - -c
62 - |
63 echo "*** retrieve Truststore and Keystore password"
64 export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
65 echo "*** obfuscate them "
Radoslaw Chmiel88534f12022-02-28 21:33:01 +010066 export JETTY_UTIL_JAR=$(find /usr/local/jetty/lib/ -regextype sed -regex ".*jetty-util-[0-9].*.jar")
67 export KEYSTORE_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${KEYSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
68 export KEYSTORE_JKS_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${KEYSTORE_JKS_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
69 export TRUSTSTORE_PASSWORD=`java -cp ${JETTY_UTIL_JAR} org.eclipse.jetty.util.security.Password ${TRUSTSTORE_PLAIN_PASSWORD} 2>&1 | grep "OBF:"`
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +010070 echo "KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
71 echo "KEYSTORE_JKS_PASSWORD=${KEYSTORE_JKS_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
72 echo "TRUSTSTORE_PASSWORD=${TRUSTSTORE_PASSWORD}" >> {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop
73 image: {{ include "repositoryGenerator.image.jetty" . }}
74 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
75 name: {{ include "common.name" . }}-obfuscate
76 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
77 securityContext:
78 runAsUser: {{ .Values.securityContext.user_id }}
79 - command:
80 - sh
81 args:
82 - -c
83 - |
84 echo "*** Set obfuscated Truststore and Keystore password into configuration file"
85 export $(cat {{ .Values.certInitializer.appMountPath }}/local/mycreds.prop | xargs -0)
86 cd /config-input
87 for PFILE in `ls -1`
88 do
89 envsubst <${PFILE} >/config/${PFILE}
90 done
91 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
92 - mountPath: /config-input
93 name: properties-input
94 - mountPath: /config
95 name: properties
96 image: {{ include "repositoryGenerator.image.envsubst" . }}
97 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
98 name: {{ include "common.name" . }}-update-config
99 {{- end }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100100 - command:
101 - /app/ready.py
102 args:
103 - --container-name
104 {{- if .Values.global.cassandra.localCluster }}
105 - aai-cassandra
106 {{- else }}
107 - cassandra
108 {{- end }}
109 - --container-name
110 - aai-schema-service
111 env:
112 - name: NAMESPACE
113 valueFrom:
114 fieldRef:
115 apiVersion: v1
116 fieldPath: metadata.namespace
Sylvain Desbureaux5b651322020-12-07 15:34:15 +0100117 image: {{ include "repositoryGenerator.image.readiness" . }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100118 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
119 name: {{ include "common.name" . }}-readiness
120 containers:
121 - name: {{ include "common.name" . }}-job
Sylvain Desbureaux5b651322020-12-07 15:34:15 +0100122 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100123 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
124 command:
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100125 - sh
126 args:
osk1146127fd7d82021-06-18 00:51:17 +0200127 - -c
128 - |
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100129 bash docker-entrypoint.sh createDBSchema.sh
othman touijer51176672021-12-01 16:21:18 +0100130 {{ include "common.serviceMesh.killSidecar" . | indent 11 | trim }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100131 env:
132 - name: LOCAL_USER_ID
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100133 value: {{ .Values.securityContext.user_id | quote }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100134 - name: LOCAL_GROUP_ID
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100135 value: {{ .Values.securityContext.group_id | quote }}
136 volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100137 - mountPath: /etc/localtime
138 name: localtime
139 readOnly: true
140 - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/janusgraph-realtime.properties
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100141 name: config
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100142 subPath: janusgraph-realtime.properties
143 - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/janusgraph-cached.properties
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100144 name: config
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100145 subPath: janusgraph-cached.properties
146 - mountPath: /opt/app/aai-graphadmin/resources/etc/appprops/aaiconfig.properties
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100147 name: properties
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100148 subPath: aaiconfig.properties
149 - mountPath: /opt/aai/logroot/AAI-GA
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100150 name: logs
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100151 - mountPath: /opt/app/aai-graphadmin/resources/logback.xml
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100152 name: config
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100153 subPath: logback.xml
154 - mountPath: /opt/app/aai-graphadmin/resources/localhost-access-logback.xml
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100155 name: config
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100156 subPath: localhost-access-logback.xml
157 - mountPath: /opt/app/aai-graphadmin/resources/application.properties
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100158 name: properties
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100159 subPath: application.properties
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100160 resources: {{ include "common.resources" . | nindent 10 }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100161 {{- if .Values.nodeSelector }}
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100162 nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100163 {{- end }}
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100164 {{- if .Values.affinity }}
165 affinity: {{ toYaml .Values.affinity | nindent 8 }}
166 {{- end }}
167 volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }}
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100168 - name: localtime
169 hostPath:
170 path: /etc/localtime
Maciej Wereskid523d122021-09-21 11:22:13 +0200171 {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }}
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100172 - name: logs
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100173 emptyDir: {}
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100174 - name: config
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100175 configMap:
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100176 name: {{ include "common.fullname" . }}
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100177 - name: properties
othman touijer51176672021-12-01 16:21:18 +0100178 {{- if .Values.global.aafEnabled }}
Sylvain Desbureauxc57b58d2021-02-23 18:07:34 +0100179 emptyDir:
180 medium: Memory
othman touijer51176672021-12-01 16:21:18 +0100181 - name: properties-input
182 {{- end }}
183 configMap:
184 name: {{ include "common.fullname" . }}-properties
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100185 restartPolicy: Never
186 imagePullSecrets:
osk1146127fd7d82021-06-18 00:51:17 +0200187 - name: {{ include "common.namespace" . }}-docker-registry-key
Sylvain Desbureaux70070412020-11-09 21:58:48 +0100188{{ end }}