--- /dev/null
+################################################################################
+# Copyright (c) 2019 AT&T Intellectual Property. #
+# Copyright (c) 2019 Nokia. #
+# #
+# Licensed under the Apache License, Version 2.0 (the "License"); #
+# you may not use this file except in compliance with the License. #
+# You may obtain a copy of the License at #
+# #
+# http://www.apache.org/licenses/LICENSE-2.0 #
+# #
+# Unless required by applicable law or agreed to in writing, software #
+# distributed under the License is distributed on an "AS IS" BASIS, #
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #
+# See the License for the specific language governing permissions and #
+# limitations under the License. #
+################################################################################
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "ricapp.fullname" . }}
+ labels:
+ app.kubernetes.io/name: {{ include "ricapp.name" . }}
+ helm.sh/chart: {{ include "ricapp.chart" . }}
+ app.kubernetes.io/instance: {{ .Release.Name }}
+ app.kubernetes.io/managed-by: {{ .Release.Service }}
+spec:
+ replicas: {{ .Values.ricapp.replicaCount }}
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: {{ include "ricapp.name" . }}
+ app.kubernetes.io/instance: {{ .Release.Name }}
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/name: {{ include "ricapp.name" . }}
+ app.kubernetes.io/instance: {{ .Release.Name }}
+ spec:
+ imagePullSecrets:
+ - name: {{ .Release.Name }}-docker-registry-key
+ containers:
+ - name: {{ .Chart.Name }}
+ image: "{{ .Values.global.repository }}/{{ .Values.ricapp.image.name }}:{{ .Values.ricapp.image.tag }}"
+ imagePullPolicy: {{ .Values.global.image.pullPolicy }}
+ # enable the next two elements if wanting to test pod bypassing its own entrypoint
+ #command: ["sh"]
+ #args:
+ # - -c
+ # - "while sleep 2; do echo thinking; done"
+ ports:
+ - name: http
+ containerPort: 8080
+ protocol: TCP
+ volumeMounts:
+ - name: config-volume
+ mountPath: {{ .Values.ricapp.appconfigpath }}
+ - name: secret-volume
+ mountPath: {{ .Values.ricapp.appsecretpath }}
+ envFrom:
+ - configMapRef:
+ name: {{ .Release.Name }}-appenv
+ livenessProbe:
+ exec:
+ command:
+ - /bin/bash
+ - -c
+ - ps -ef | grep {{ .Values.ricapp.livenessprocessname }}| grep -v "grep"
+ initialDelaySeconds: 120
+ periodSeconds: 30
+ readinessProbe:
+ httpGet:
+ path: /
+ port: http
+ restartPolicy: Always
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ securityContext:
+ # ubuntu
+ runAsUser: 1000
+ allowPrivilegeEscalation: false
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+
+ volumes:
+ - name: config-volume
+ configMap:
+ name: {{ .Release.Name }}-appconfig
+ - name: secret-volume
+ secret:
+ secretName: {{ .Release.Name }}-appsecret