blob: 550957b717727bba03174187c1e74021672cd81c [file] [log] [blame]
rameshiyer2701b8cc02021-09-21 15:07:50 +01001{{/*
2# ============LICENSE_START=======================================================
efiacor6910bbe2023-03-03 14:53:16 +00003# Copyright (C) 2021-2023 Nordix Foundation.
rameshiyer2701b8cc02021-09-21 15:07:50 +01004# ================================================================================
5# Licensed under the Apache License, Version 2.0 (the "License");
6# you may not use this file except in compliance with the License.
7# You may obtain a copy of the License at
8#
9# http://www.apache.org/licenses/LICENSE-2.0
10#
11# Unless required by applicable law or agreed to in writing, software
12# distributed under the License is distributed on an "AS IS" BASIS,
13# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14# See the License for the specific language governing permissions and
15# limitations under the License.
16#
17# SPDX-License-Identifier: Apache-2.0
18# ============LICENSE_END=========================================================
19*/}}
20
21apiVersion: apps/v1
22kind: Deployment
23metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
24spec:
25 selector: {{- include "common.selectors" . | nindent 4 }}
26 replicas: {{ .Values.replicaCount }}
27 template:
28 metadata: {{- include "common.templateMetadata" . | nindent 6 }}
29 spec:
30 initContainers:
efiacor6910bbe2023-03-03 14:53:16 +000031{{- if not .Values.global.useStrimziKafka }}
32{{ include "common.readinessCheck.waitFor" . | nindent 6 }}
saul.gill5e611402023-03-02 11:49:23 +000033{{- end }}
rameshiyer2701b8cc02021-09-21 15:07:50 +010034 - command:
35 - sh
36 args:
37 - -c
38 - "cd /config-input && for PFILE in `ls -1`; do envsubst <${PFILE} >/config/${PFILE}; done"
39 env:
40 - name: RESTSERVER_USER
41 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-secret" "key" "login") | indent 10 }}
42 - name: RESTSERVER_PASSWORD
43 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-secret" "key" "password") | indent 10 }}
efiacor6910bbe2023-03-03 14:53:16 +000044{{- if .Values.global.useStrimziKafka }}
45 - name: SASL_JAAS_CONFIG
46 valueFrom:
47 secretKeyRef:
48 name: {{ include "common.name" . }}-ku
49 key: sasl.jaas.config
Sirisha_Manchikanti73c5f002022-07-25 17:04:45 +010050{{- end }}
rameshiyer2701b8cc02021-09-21 15:07:50 +010051 volumeMounts:
52 - mountPath: /config-input
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000053 name: ac-http-ppnt-config
rameshiyer2701b8cc02021-09-21 15:07:50 +010054 - mountPath: /config
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000055 name: ac-http-ppnt-config-processed
rameshiyer2701b8cc02021-09-21 15:07:50 +010056 image: {{ include "repositoryGenerator.image.envsubst" . }}
57 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
58 name: {{ include "common.name" . }}-update-config
59{{ include "common.certInitializer.initContainer" . | indent 6 }}
60 containers:
61 - name: {{ include "common.name" . }}
62 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
63 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
64{{- if .Values.global.aafEnabled }}
65 command: ["sh","-c"]
66 args: ["source {{ .Values.certInitializer.credsPath }}/.ci;\
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000067 /opt/app/policy/clamp/bin/http-participant.sh /opt/app/policy/clamp/etc/mounted/HttpParticipantParameters.yaml"]
rameshiyer2701b8cc02021-09-21 15:07:50 +010068{{- else }}
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000069 command: ["/opt/app/policy/clamp/bin/http-participant.sh"]
70 args: ["/opt/app/policy/clamp/etc/mounted/HttpParticipantParameters.yaml"]
rameshiyer2701b8cc02021-09-21 15:07:50 +010071 env:
72 - name: KEYSTORE_PASSWD
73 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "keystore-password" "key" "password") | indent 12 }}
74 - name: TRUSTSTORE_PASSWD
75 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "truststore-password" "key" "password") | indent 12 }}
76{{- end }}
77 ports: {{ include "common.containerPorts" . | nindent 12 }}
78 # disable liveness probe when breakpoints set in debugger
79 # so K8s doesn't restart unresponsive container
80 {{- if eq .Values.liveness.enabled true }}
81 livenessProbe:
82 tcpSocket:
83 port: {{ .Values.liveness.port }}
84 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
85 periodSeconds: {{ .Values.liveness.periodSeconds }}
86 {{ end -}}
87 readinessProbe:
88 tcpSocket:
89 port: {{ .Values.readiness.port }}
90 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
91 periodSeconds: {{ .Values.readiness.periodSeconds }}
92 volumeMounts:
93{{ include "common.certInitializer.volumeMount" . | indent 10 }}
94 - mountPath: /etc/localtime
95 name: localtime
96 readOnly: true
97 - mountPath: /opt/app/policy/clamp/etc/mounted
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000098 name: ac-http-ppnt-config-processed
miroslavmasaryka7ac7f02023-03-01 14:12:26 +010099 resources: {{ include "common.resources" . | nindent 12 }}
rameshiyer2701b8cc02021-09-21 15:07:50 +0100100 {{- if .Values.nodeSelector }}
101 nodeSelector:
102{{ toYaml .Values.nodeSelector | indent 10 }}
103 {{- end -}}
104 {{- if .Values.affinity }}
105 affinity:
106{{ toYaml .Values.affinity | indent 10 }}
107 {{- end }}
FrancescoFioraEst9c79e262022-02-22 13:12:19 +0000108 serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
rameshiyer2701b8cc02021-09-21 15:07:50 +0100109 volumes:
110{{ include "common.certInitializer.volumes" . | indent 8 }}
111 - name: localtime
112 hostPath:
113 path: /etc/localtime
FrancescoFioraEst9c79e262022-02-22 13:12:19 +0000114 - name: ac-http-ppnt-config
rameshiyer2701b8cc02021-09-21 15:07:50 +0100115 configMap:
116 name: {{ include "common.fullname" . }}-configmap
117 defaultMode: 0755
FrancescoFioraEst9c79e262022-02-22 13:12:19 +0000118 - name: ac-http-ppnt-config-processed
rameshiyer2701b8cc02021-09-21 15:07:50 +0100119 emptyDir:
120 medium: Memory
121 imagePullSecrets:
122 - name: "{{ include "common.namespace" . }}-docker-registry-key"