Sylvain Desbureaux | 47eb4d2 | 2020-12-10 12:15:27 +0100 | [diff] [blame] | 1 | {{/* |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 2 | # Copyright (c) 2017 Amdocs, Bell Canada |
| 3 | # Modifications Copyright (c) 2018 AT&T |
| 4 | # Modifications Copyright (c) 2020 Nokia |
Sylvain Desbureaux | 331f004 | 2021-01-18 11:38:49 +0100 | [diff] [blame] | 5 | # Modifications Copyright (c) 2021 Orange |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 6 | # |
| 7 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 8 | # you may not use this file except in compliance with the License. |
| 9 | # You may obtain a copy of the License at |
| 10 | # |
| 11 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 12 | # |
| 13 | # Unless required by applicable law or agreed to in writing, software |
| 14 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 15 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 16 | # See the License for the specific language governing permissions and |
| 17 | # limitations under the License. |
Sylvain Desbureaux | 47eb4d2 | 2020-12-10 12:15:27 +0100 | [diff] [blame] | 18 | */}} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 19 | |
| 20 | apiVersion: apps/v1 |
| 21 | kind: Deployment |
| 22 | metadata: |
| 23 | name: {{ include "common.fullname" . }} |
| 24 | namespace: {{ include "common.namespace" . }} |
| 25 | labels: |
| 26 | app: {{ include "common.name" . }} |
| 27 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} |
| 28 | release: {{ include "common.release" . }} |
| 29 | heritage: {{ .Release.Service }} |
| 30 | spec: |
| 31 | replicas: {{ .Values.replicaCount }} |
M.Hosnidokht | 09523be | 2021-08-24 09:00:42 -0400 | [diff] [blame] | 32 | minReadySeconds: {{ .Values.minReadySeconds }} |
| 33 | strategy: |
| 34 | type: {{ .Values.updateStrategy.type }} |
| 35 | rollingUpdate: |
| 36 | maxUnavailable: {{ .Values.updateStrategy.maxUnavailable }} |
| 37 | maxSurge: {{ .Values.updateStrategy.maxSurge }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 38 | selector: |
| 39 | matchLabels: |
| 40 | app: {{ include "common.name" . }} |
| 41 | template: |
| 42 | metadata: |
| 43 | labels: |
| 44 | app: {{ include "common.name" . }} |
| 45 | release: {{ include "common.release" . }} |
| 46 | name: {{ include "common.name" . }} |
| 47 | annotations: |
| 48 | checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }} |
Sylvain Desbureaux | 331f004 | 2021-01-18 11:38:49 +0100 | [diff] [blame] | 49 | {{- if .Values.global.msbEnabled }} |
| 50 | {{ $values := .Values }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 51 | msb.onap.org/service-info: '[ |
Sylvain Desbureaux | 331f004 | 2021-01-18 11:38:49 +0100 | [diff] [blame] | 52 | {{- range $api_endpoint := $values.aai_enpoints -}} |
| 53 | {{- range $api_version := $values.api_list }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 54 | { |
Sylvain Desbureaux | 331f004 | 2021-01-18 11:38:49 +0100 | [diff] [blame] | 55 | "serviceName": "_{{ $api_endpoint.name }}", |
| 56 | "version": "v{{ $api_version }}", |
| 57 | "url": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}", |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 58 | "protocol": "REST", |
| 59 | "port": "8447", |
| 60 | "enable_ssl": true, |
| 61 | "lb_policy":"ip_hash", |
| 62 | "visualRange": "1", |
Sylvain Desbureaux | 331f004 | 2021-01-18 11:38:49 +0100 | [diff] [blame] | 63 | "path": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}" |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 64 | }, |
| 65 | { |
Sylvain Desbureaux | 331f004 | 2021-01-18 11:38:49 +0100 | [diff] [blame] | 66 | "serviceName": "{{ $api_endpoint.name }}", |
| 67 | "version": "v{{ $api_version }}", |
| 68 | "url": "/aai/v{{ $api_version }}/{{ $api_endpoint.url }}", |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 69 | "protocol": "REST", |
| 70 | "port": "8447", |
| 71 | "enable_ssl": true, |
| 72 | "lb_policy":"ip_hash", |
| 73 | "visualRange": "1" |
| 74 | }, |
Sylvain Desbureaux | 331f004 | 2021-01-18 11:38:49 +0100 | [diff] [blame] | 75 | {{- end }} |
| 76 | {{- end }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 77 | ]' |
Sylvain Desbureaux | 331f004 | 2021-01-18 11:38:49 +0100 | [diff] [blame] | 78 | {{- end }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 79 | spec: |
| 80 | hostname: aai-resources |
M.Hosnidokht | 09523be | 2021-08-24 09:00:42 -0400 | [diff] [blame] | 81 | terminationGracePeriodSeconds: {{ .Values.service.terminationGracePeriodSeconds }} |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 82 | initContainers: {{ include "common.certInitializer.initContainer" . | nindent 6 }} |
| 83 | - name: {{ include "common.name" . }}-readiness |
| 84 | command: |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 85 | - /app/ready.py |
| 86 | args: |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 87 | {{- if .Values.global.jobs.migration.enabled }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 88 | - --job-name |
| 89 | - {{ include "common.release" . }}-aai-graphadmin-migration |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 90 | {{- else }} |
| 91 | {{- if .Values.global.jobs.createSchema.enabled }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 92 | - --job-name |
| 93 | - {{ include "common.release" . }}-aai-graphadmin-create-db-schema |
Sylvain Desbureaux | 6212bb2 | 2021-01-18 11:43:33 +0100 | [diff] [blame] | 94 | {{- else }} |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 95 | - --container-name |
| 96 | {{- if .Values.global.cassandra.localCluster }} |
| 97 | - aai-cassandra |
| 98 | {{- else }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 99 | - cassandra |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 100 | {{- end }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 101 | - --container-name |
| 102 | - aai-schema-service |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 103 | {{- end }} |
Sylvain Desbureaux | 6212bb2 | 2021-01-18 11:43:33 +0100 | [diff] [blame] | 104 | {{- end }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 105 | env: |
| 106 | - name: NAMESPACE |
| 107 | valueFrom: |
| 108 | fieldRef: |
| 109 | apiVersion: v1 |
| 110 | fieldPath: metadata.namespace |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 111 | image: {{ include "repositoryGenerator.image.readiness" . }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 112 | imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 113 | containers: |
| 114 | - name: {{ include "common.name" . }} |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 115 | image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 116 | imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 117 | command: |
| 118 | - sh |
| 119 | args: |
| 120 | - -c |
| 121 | - | |
| 122 | echo "*** retrieve Truststore and Keystore password" |
| 123 | export $(cat {{ .Values.certInitializer.credsPath }}/mycreds.prop | xargs -0) |
| 124 | echo "*** actual launch of AAI Resources" |
| 125 | /bin/bash /opt/app/aai-resources/docker-entrypoint.sh |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 126 | env: |
| 127 | - name: LOCAL_USER_ID |
| 128 | value: {{ .Values.global.config.userId | quote }} |
| 129 | - name: LOCAL_GROUP_ID |
| 130 | value: {{ .Values.global.config.groupId | quote }} |
Harish Venkata Kajur | b06c9af | 2021-02-01 08:59:46 -0500 | [diff] [blame] | 131 | - name: POST_JAVA_OPTS |
Harish Venkata Kajur | 95b39b1 | 2021-06-15 11:49:16 -0400 | [diff] [blame] | 132 | value: '-Djavax.net.ssl.trustStore={{ .Values.certInitializer.credsPath }}/truststoreONAPall.jks -Djavax.net.ssl.trustStorePassword={{ .Values.certInitializer.truststorePassword }}' |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 133 | - name: TRUSTORE_ALL_PASSWORD |
Sylvain Desbureaux | 6b83dab | 2021-02-23 16:03:21 +0100 | [diff] [blame] | 134 | value: {{ .Values.certInitializer.truststorePassword }} |
M.Hosnidokht | 09523be | 2021-08-24 09:00:42 -0400 | [diff] [blame] | 135 | - name: INTERNAL_PORT_1 |
| 136 | value: {{ .Values.service.internalPort | quote }} |
| 137 | - name: INTERNAL_PORT_2 |
| 138 | value: {{ .Values.service.internalPort2 | quote }} |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 139 | volumeMounts: {{ include "common.certInitializer.volumeMount" . | nindent 8 }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 140 | - mountPath: /etc/localtime |
| 141 | name: localtime |
| 142 | readOnly: true |
| 143 | - mountPath: /opt/app/aai-resources/resources/etc/appprops/janusgraph-realtime.properties |
| 144 | name: {{ include "common.fullname" . }}-config |
| 145 | subPath: janusgraph-realtime.properties |
| 146 | - mountPath: /opt/app/aai-resources/resources/etc/appprops/janusgraph-cached.properties |
| 147 | name: {{ include "common.fullname" . }}-config |
| 148 | subPath: janusgraph-cached.properties |
| 149 | - mountPath: /opt/app/aai-resources/resources/etc/appprops/aaiconfig.properties |
| 150 | name: {{ include "common.fullname" . }}-config |
| 151 | subPath: aaiconfig.properties |
| 152 | - mountPath: /opt/aai/logroot/AAI-RES |
Maciej Wereski | d523d12 | 2021-09-21 11:22:13 +0200 | [diff] [blame] | 153 | name: logs |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 154 | - mountPath: /opt/app/aai-resources/resources/logback.xml |
| 155 | name: {{ include "common.fullname" . }}-config |
| 156 | subPath: logback.xml |
| 157 | - mountPath: /opt/app/aai-resources/resources/localhost-access-logback.xml |
| 158 | name: {{ include "common.fullname" . }}-config |
| 159 | subPath: localhost-access-logback.xml |
| 160 | - mountPath: /opt/app/aai-resources/resources/etc/auth/realm.properties |
| 161 | name: {{ include "common.fullname" . }}-config |
| 162 | subPath: realm.properties |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 163 | - mountPath: /opt/app/aai-resources/resources/aaf/bath_config.csv |
| 164 | name: {{ include "common.fullname" . }}-aaf-certs |
| 165 | subPath: bath_config.csv |
| 166 | - mountPath: /opt/app/aai-resources/resources/aaf/org.onap.aai.props |
| 167 | name: {{ include "common.fullname" . }}-aaf-properties |
| 168 | subPath: org.onap.aai.props |
| 169 | - mountPath: /opt/app/aai-resources/resources/aaf/org.osaaf.location.props |
| 170 | name: {{ include "common.fullname" . }}-aaf-properties |
| 171 | subPath: org.osaaf.location.props |
| 172 | - mountPath: /opt/app/aai-resources/resources/aaf/permissions.properties |
| 173 | name: {{ include "common.fullname" . }}-aaf-properties |
| 174 | subPath: permissions.properties |
| 175 | - mountPath: /opt/app/aai-resources/resources/cadi.properties |
| 176 | name: {{ include "common.fullname" . }}-aaf-properties |
| 177 | subPath: cadi.properties |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 178 | - mountPath: /opt/app/aai-resources/resources/application.properties |
| 179 | name: {{ include "common.fullname" . }}-config |
| 180 | subPath: application.properties |
| 181 | - mountPath: /opt/app/aai-resources/resources/application-keycloak.properties |
| 182 | name: {{ include "common.fullname" . }}-config |
| 183 | subPath: application-keycloak.properties |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 184 | ports: |
| 185 | - containerPort: {{ .Values.service.internalPort }} |
| 186 | - containerPort: {{ .Values.service.internalPort2 }} |
M.Hosnidokht | 09523be | 2021-08-24 09:00:42 -0400 | [diff] [blame] | 187 | lifecycle: |
| 188 | # wait for active requests (long-running tasks) to be finished |
| 189 | # Before the SIGTERM is invoked, Kubernetes exposes a preStop hook in the Pod. |
| 190 | preStop: |
| 191 | exec: |
| 192 | command: |
| 193 | - sh |
| 194 | - -c |
| 195 | - | |
| 196 | while (netstat -an | grep ESTABLISHED | grep -e $INTERNAL_PORT_1 -e $INTERNAL_PORT_2) |
| 197 | do sleep 10 |
| 198 | done |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 199 | # disable liveness probe when breakpoints set in debugger |
| 200 | # so K8s doesn't restart unresponsive container |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 201 | {{- if .Values.liveness.enabled }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 202 | livenessProbe: |
| 203 | tcpSocket: |
| 204 | port: {{ .Values.service.internalPort }} |
| 205 | initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }} |
| 206 | periodSeconds: {{ .Values.liveness.periodSeconds }} |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 207 | {{- end }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 208 | readinessProbe: |
| 209 | tcpSocket: |
| 210 | port: {{ .Values.service.internalPort }} |
| 211 | initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }} |
| 212 | periodSeconds: {{ .Values.readiness.periodSeconds }} |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 213 | resources: {{ include "common.resources" . | nindent 12 }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 214 | {{- if .Values.nodeSelector }} |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 215 | nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 216 | {{- end }} |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 217 | {{- if .Values.affinity }} |
| 218 | affinity: {{ toYaml .Values.affinity | nindent 8 }} |
| 219 | {{- end }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 220 | # side car containers |
Maciej Wereski | d523d12 | 2021-09-21 11:22:13 +0200 | [diff] [blame] | 221 | {{ include "common.log.sidecar" . | nindent 6 }} |
farida azmy | d893733 | 2021-03-09 12:20:42 +0200 | [diff] [blame] | 222 | serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}} |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 223 | volumes: {{ include "common.certInitializer.volumes" . | nindent 6 }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 224 | - name: localtime |
| 225 | hostPath: |
| 226 | path: /etc/localtime |
Maciej Wereski | d523d12 | 2021-09-21 11:22:13 +0200 | [diff] [blame] | 227 | - name: logs |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 228 | emptyDir: {} |
Maciej Wereski | d523d12 | 2021-09-21 11:22:13 +0200 | [diff] [blame] | 229 | {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 230 | - name: {{ include "common.fullname" . }}-config |
| 231 | configMap: |
Sylvain Desbureaux | b4e038d | 2020-12-15 12:00:26 +0100 | [diff] [blame] | 232 | name: {{ include "common.fullname" . }} |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 233 | - name: {{ include "common.fullname" . }}-aaf-properties |
| 234 | configMap: |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 235 | name: {{ include "common.fullname" . }}-aaf-props |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 236 | - name: {{ include "common.fullname" . }}-aaf-certs |
| 237 | secret: |
Sylvain Desbureaux | 5b65132 | 2020-12-07 15:34:15 +0100 | [diff] [blame] | 238 | secretName: {{ include "common.fullname" . }}-aaf-keys |
Sylvain Desbureaux | 7007041 | 2020-11-09 21:58:48 +0100 | [diff] [blame] | 239 | restartPolicy: {{ .Values.restartPolicy }} |
| 240 | imagePullSecrets: |
| 241 | - name: "{{ include "common.namespace" . }}-docker-registry-key" |