blob: 038b137dd519f531d482e13b287e457ae1ad654a [file] [log] [blame]
rameshiyer2701b8cc02021-09-21 15:07:50 +01001{{/*
2# ============LICENSE_START=======================================================
efiacor6910bbe2023-03-03 14:53:16 +00003# Copyright (C) 2021-2023 Nordix Foundation.
rameshiyer2701b8cc02021-09-21 15:07:50 +01004# ================================================================================
5# Licensed under the Apache License, Version 2.0 (the "License");
6# you may not use this file except in compliance with the License.
7# You may obtain a copy of the License at
8#
9# http://www.apache.org/licenses/LICENSE-2.0
10#
11# Unless required by applicable law or agreed to in writing, software
12# distributed under the License is distributed on an "AS IS" BASIS,
13# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14# See the License for the specific language governing permissions and
15# limitations under the License.
16#
17# SPDX-License-Identifier: Apache-2.0
18# ============LICENSE_END=========================================================
19*/}}
20
21apiVersion: apps/v1
22kind: Deployment
23metadata: {{- include "common.resourceMetadata" . | nindent 2 }}
24spec:
25 selector: {{- include "common.selectors" . | nindent 4 }}
26 replicas: {{ .Values.replicaCount }}
27 template:
28 metadata: {{- include "common.templateMetadata" . | nindent 6 }}
29 spec:
30 initContainers:
31 - command:
32 - sh
33 args:
34 - -c
35 - "cd /config-input && for PFILE in `ls -1`; do envsubst <${PFILE} >/config/${PFILE}; done"
36 env:
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000037 - name: API_USER
38 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "api-secret" "key" "login") | indent 10 }}
39 - name: API_PASSWORD
40 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "api-secret" "key" "password") | indent 10 }}
41 - name: PAP_USER
42 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "pap-secret" "key" "login") | indent 10 }}
43 - name: PAP_PASSWORD
44 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "pap-secret" "key" "password") | indent 10 }}
rameshiyer2701b8cc02021-09-21 15:07:50 +010045 - name: RESTSERVER_USER
46 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-secret" "key" "login") | indent 10 }}
47 - name: RESTSERVER_PASSWORD
48 {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "restserver-secret" "key" "password") | indent 10 }}
efiacor6910bbe2023-03-03 14:53:16 +000049 - name: SASL_JAAS_CONFIG
50 valueFrom:
51 secretKeyRef:
52 name: {{ include "common.name" . }}-ku
53 key: sasl.jaas.config
rameshiyer2701b8cc02021-09-21 15:07:50 +010054 volumeMounts:
55 - mountPath: /config-input
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000056 name: ac-pf-ppnt-config
rameshiyer2701b8cc02021-09-21 15:07:50 +010057 - mountPath: /config
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000058 name: ac-pf-ppnt-config-processed
rameshiyer2701b8cc02021-09-21 15:07:50 +010059 image: {{ include "repositoryGenerator.image.envsubst" . }}
60 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
61 name: {{ include "common.name" . }}-update-config
rameshiyer2701b8cc02021-09-21 15:07:50 +010062 containers:
63 - name: {{ include "common.name" . }}
64 image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}
65 imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000066 command: ["/opt/app/policy/clamp/bin/policy-participant.sh"]
67 args: ["/opt/app/policy/clamp/etc/mounted/PolicyParticipantParameters.yaml"]
rameshiyer2701b8cc02021-09-21 15:07:50 +010068 ports: {{ include "common.containerPorts" . | nindent 12 }}
69 # disable liveness probe when breakpoints set in debugger
70 # so K8s doesn't restart unresponsive container
71 {{- if eq .Values.liveness.enabled true }}
72 livenessProbe:
73 tcpSocket:
74 port: {{ .Values.liveness.port }}
75 initialDelaySeconds: {{ .Values.liveness.initialDelaySeconds }}
76 periodSeconds: {{ .Values.liveness.periodSeconds }}
77 {{ end -}}
78 readinessProbe:
79 tcpSocket:
80 port: {{ .Values.readiness.port }}
81 initialDelaySeconds: {{ .Values.readiness.initialDelaySeconds }}
82 periodSeconds: {{ .Values.readiness.periodSeconds }}
83 volumeMounts:
rameshiyer2701b8cc02021-09-21 15:07:50 +010084 - mountPath: /etc/localtime
85 name: localtime
86 readOnly: true
87 - mountPath: /opt/app/policy/clamp/etc/mounted
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000088 name: ac-pf-ppnt-config-processed
miroslavmasaryka7ac7f02023-03-01 14:12:26 +010089 resources: {{ include "common.resources" . | nindent 12 }}
rameshiyer2701b8cc02021-09-21 15:07:50 +010090 {{- if .Values.nodeSelector }}
91 nodeSelector:
92{{ toYaml .Values.nodeSelector | indent 10 }}
93 {{- end -}}
94 {{- if .Values.affinity }}
95 affinity:
96{{ toYaml .Values.affinity | indent 10 }}
97 {{- end }}
FrancescoFioraEst9c79e262022-02-22 13:12:19 +000098 serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
rameshiyer2701b8cc02021-09-21 15:07:50 +010099 volumes:
rameshiyer2701b8cc02021-09-21 15:07:50 +0100100 - name: localtime
101 hostPath:
102 path: /etc/localtime
FrancescoFioraEst9c79e262022-02-22 13:12:19 +0000103 - name: ac-pf-ppnt-config
rameshiyer2701b8cc02021-09-21 15:07:50 +0100104 configMap:
105 name: {{ include "common.fullname" . }}-configmap
106 defaultMode: 0755
FrancescoFioraEst9c79e262022-02-22 13:12:19 +0000107 - name: ac-pf-ppnt-config-processed
rameshiyer2701b8cc02021-09-21 15:07:50 +0100108 emptyDir:
109 medium: Memory
Andreas Geisslerbd0d31a2024-03-20 09:51:32 +0100110 {{- include "common.imagePullSecrets" . | nindent 6 }}