blob: 1bd94eed0bb58878ac3fe1741d64b7121d95155d [file] [log] [blame]
Jakub Latusekd71d26c2020-10-21 13:36:29 +02001{{/*
jhhd4258672020-08-09 12:08:08 -05002# ============LICENSE_START=======================================================
3# Copyright (C) 2020 AT&T Intellectual Property.
4# ================================================================================
5# Licensed under the Apache License, Version 2.0 (the "License");
6# you may not use this file except in compliance with the License.
7# You may obtain a copy of the License at
8#
9# http://www.apache.org/licenses/LICENSE-2.0
10#
11# Unless required by applicable law or agreed to in writing, software
12# distributed under the License is distributed on an "AS IS" BASIS,
13# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14# See the License for the specific language governing permissions and
15# limitations under the License.
16#
17# SPDX-License-Identifier: Apache-2.0
18# ============LICENSE_END=========================================================
Jakub Latusekd71d26c2020-10-21 13:36:29 +020019*/}}
jhhd4258672020-08-09 12:08:08 -050020
Grzegorz-Lis4fad3022020-07-31 10:18:21 +020021apiVersion: apps/v1
Michael Mokryafae9972019-03-11 14:46:34 -050022kind: Deployment
Andreas Geisslerf10c5552023-03-21 18:09:46 +010023metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
Michael Mokryafae9972019-03-11 14:46:34 -050024spec:
Andreas Geisslerf10c5552023-03-21 18:09:46 +010025 selector: {{- include "common.selectors" . | nindent 4 }}
Michael Mokryafae9972019-03-11 14:46:34 -050026 replicas: {{ .Values.replicaCount }}
27 template:
Andreas Geisslerf10c5552023-03-21 18:09:46 +010028 metadata: {{- include "common.templateMetadata" . | nindent 6 }}
Michael Mokryafae9972019-03-11 14:46:34 -050029 spec:
Michael Mokry3b2647a2019-04-14 20:24:43 -050030 initContainers:
31 - command:
Sylvain Desbureaux1694e1d2020-08-21 09:58:25 +020032 - /app/ready.py
Michael Mokry3b2647a2019-04-14 20:24:43 -050033 args:
jhhd4258672020-08-09 12:08:08 -050034 - --job-name
35 - {{ include "common.release" . }}-policy-galera-config
Michael Mokry3b2647a2019-04-14 20:24:43 -050036 env:
37 - name: NAMESPACE
38 valueFrom:
39 fieldRef:
40 apiVersion: v1
41 fieldPath: metadata.namespace
Sylvain Desbureaux7c8c6862020-11-19 18:02:37 +010042 image: {{ include "repositoryGenerator.image.readiness" . }}
Michael Mokry3b2647a2019-04-14 20:24:43 -050043 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
44 name: {{ include "common.name" . }}-readiness
Dominik Mizync88bcc92020-04-14 18:20:20 +020045 - command:
46 - sh
47 args:
48 - -c
Taka Choebd62952020-10-08 13:50:09 -040049 - "cd /config-input && for PFILE in `ls -1`; do envsubst <${PFILE} >/config/${PFILE}; done"
Dominik Mizync88bcc92020-04-14 18:20:20 +020050 env:
51 - name: RESTSERVER_USER
52 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-creds" "key" "login") | indent 10 }}
53 - name: RESTSERVER_PASSWORD
54 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-creds" "key" "password") | indent 10 }}
55 - name: API_USER
56 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "api-creds" "key" "login") | indent 10 }}
57 - name: API_PASSWORD
58 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "api-creds" "key" "password") | indent 10 }}
jhhed6839f2020-05-08 12:28:27 -050059 - name: SQL_USER
60 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "login") | indent 10 }}
61 - name: SQL_PASSWORD
62 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "db-secret" "key" "password") | indent 10 }}
Dominik Mizync88bcc92020-04-14 18:20:20 +020063 volumeMounts:
64 - mountPath: /config-input
65 name: pdpxconfig
66 - mountPath: /config
67 name: pdpxconfig-processed
Sylvain Desbureaux7c8c6862020-11-19 18:02:37 +010068 image: {{ include "repositoryGenerator.image.envsubst" . }}
Dominik Mizync88bcc92020-04-14 18:20:20 +020069 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
70 name: {{ include "common.name" . }}-update-config
Michael Mokryafae9972019-03-11 14:46:34 -050071 containers:
72 - name: {{ include "common.name" . }}
Sylvain Desbureaux7c8c6862020-11-19 18:02:37 +010073 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
Michael Mokryafae9972019-03-11 14:46:34 -050074 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
75 command: ["/opt/app/policy/pdpx/bin/policy-pdpx.sh"]
jhhbf7fb4d2019-08-07 16:54:41 -050076 args: ["/opt/app/policy/pdpx/etc/mounted/config.json"]
Andreas Geisslerb3f16b92023-04-03 12:19:48 +020077 ports: {{ include "common.containerPorts" . | nindent 12 }}
Michael Mokryafae9972019-03-11 14:46:34 -050078 # disable liveness probe when breakpoints set in debugger
79 # so K8s doesn't restart unresponsive container
80 {{- if eq .Values.liveness.enabled true }}
81 livenessProbe:
82 tcpSocket:
83 port: {{ .Values.service.internalPort }}
84 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
85 periodSeconds: {{ .Values.liveness.periodSeconds }}
86 {{ end -}}
87 readinessProbe:
88 tcpSocket:
89 port: {{ .Values.service.internalPort }}
90 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
91 periodSeconds: {{ .Values.readiness.periodSeconds }}
92 volumeMounts:
93 - mountPath: /etc/localtime
94 name: localtime
95 readOnly: true
96 - mountPath: /opt/app/policy/pdpx/etc/mounted
Dominik Mizync88bcc92020-04-14 18:20:20 +020097 name: pdpxconfig-processed
miroslavmasaryka7ac7f02023-03-01 14:12:26 +010098 resources: {{ include "common.resources" . | nindent 12 }}
Michael Mokryafae9972019-03-11 14:46:34 -050099 {{- if .Values.nodeSelector }}
100 nodeSelector:
101{{ toYaml .Values.nodeSelector | indent 10 }}
102 {{- end -}}
103 {{- if .Values.affinity }}
104 affinity:
105{{ toYaml .Values.affinity | indent 10 }}
106 {{- end }}
farida azmyc1178372021-04-11 12:55:33 +0200107 serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
Michael Mokryafae9972019-03-11 14:46:34 -0500108 volumes:
109 - name: localtime
110 hostPath:
111 path: /etc/localtime
112 - name: pdpxconfig
113 configMap:
114 name: {{ include "common.fullname" . }}-configmap
115 defaultMode: 0755
Dominik Mizync88bcc92020-04-14 18:20:20 +0200116 - name: pdpxconfig-processed
117 emptyDir:
118 medium: Memory
Michael Mokryafae9972019-03-11 14:46:34 -0500119 imagePullSecrets:
120 - name: "{{ include "common.namespace" . }}-docker-registry-key"