Merge "New test profile"

[nonrtric.git] / test / simulator-group / ics / app.yaml

diff --git a/test/simulator-group/ics/app.yaml b/test/simulator-group/ics/app.yaml
index ceb74c7..b8bf0b7 100644 (file)
--- a/test/simulator-group/ics/app.yaml
+++ b/test/simulator-group/ics/app.yaml
@@ -1,3 +1,20 @@
+#  ============LICENSE_START=======================================================
+#  Copyright (C) 2020-2022 Nordix Foundation
+#  ================================================================================
+#  Licensed under the Apache License, Version 2.0 (the "License");
+#  you may not use this file except in compliance with the License.
+#  You may obtain a copy of the License at
+#
+#        http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS,
+#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+#
+#  SPDX-License-Identifier: Apache-2.0
+#  ============LICENSE_END=========================================================
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -17,6 +34,9 @@ spec:
         run: $ICS_APP_NAME
         autotest: ICS
     spec:
+      securityContext:
+        runAsUser: 0
+# Need to run as root to be able to store files in dir mounted as a hostPath volume
       containers:
       - name: $ICS_APP_NAME
         image: $ICS_IMAGE
@@ -32,6 +52,29 @@ spec:
           name: ics-conf-name
         - mountPath: $ICS_CONTAINER_MNT_DIR
           name: ics-data-name
+#ICS_JWT_START
+        - mountPath: $ICS_SIDECAR_MOUNT
+          name: token-cache-volume
+#ICS_JWT_STOP
+#ICS_JWT_START
+      - name: $AUTHSIDECAR_APP_NAME
+        image: $AUTHSIDECAR_IMAGE
+        imagePullPolicy: $KUBE_IMAGE_PULL_POLICY
+        env:
+        - name: CREDS_GRANT_TYPE
+          value: $ICS_CREDS_GRANT_TYPE
+        - name: CREDS_CLIENT_SECRET
+          value: $ICS_CREDS_CLIENT_SECRET
+        - name: CREDS_CLIENT_ID
+          value: $ICS_CREDS_CLIENT_ID
+        - name: OUTPUT_FILE
+          value: $ICS_SIDECAR_JWT_FILE
+        - name: AUTH_SERVICE_URL
+          value: $ICS_AUTH_SERVICE_URL
+        volumeMounts:
+        - mountPath: $ICS_SIDECAR_MOUNT
+          name: token-cache-volume
+#ICS_JWT_STOP
       volumes:
       - configMap:
           defaultMode: 420
@@ -40,6 +83,11 @@ spec:
       - persistentVolumeClaim:
           claimName: $ICS_DATA_PVC_NAME
         name: ics-data-name
+#ICS_JWT_START
+      - name: token-cache-volume
+        emptyDir: {}
+#ICS_JWT_STOP
+
 # Selector will be set when pod is started first time
       nodeSelector: