X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=ric-infra%2F10-Nexus%2Fhelm%2Fnexus%2Ftemplates%2Fjob-save-certs.yaml;fp=ric-infra%2F10-Nexus%2Fhelm%2Fnexus%2Ftemplates%2Fjob-save-certs.yaml;h=91f72efe32b54f86c3c0fef6eb3e2a2e6427eb87;hb=6f157d7b84f5c957c068146a300f25fd0983375f;hp=0000000000000000000000000000000000000000;hpb=b0d610ef0ba334c963cac6e2f3423657fda803dd;p=it%2Fdep.git

diff --git a/ric-infra/10-Nexus/helm/nexus/templates/job-save-certs.yaml b/ric-infra/10-Nexus/helm/nexus/templates/job-save-certs.yaml
new file mode 100644
index 00000000..91f72efe
--- /dev/null
+++ b/ric-infra/10-Nexus/helm/nexus/templates/job-save-certs.yaml
@@ -0,0 +1,56 @@
+################################################################################
+#   Copyright (c) 2019 AT&T Intellectual Property.                             #
+#   Copyright (c) 2019 Nokia.                                                  #
+#                                                                              #
+#   Licensed under the Apache License, Version 2.0 (the "License");            #
+#   you may not use this file except in compliance with the License.           #
+#   You may obtain a copy of the License at                                    #
+#                                                                              #
+#       http://www.apache.org/licenses/LICENSE-2.0                             #
+#                                                                              #
+#   Unless required by applicable law or agreed to in writing, software        #
+#   distributed under the License is distributed on an "AS IS" BASIS,          #
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.   #
+#   See the License for the specific language governing permissions and        #
+#   limitations under the License.                                             #
+################################################################################
+
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: job-{{ include "common.fullname.nexus" . }}-save-certs
+spec:
+  template:
+    spec:
+      containers:
+      - name: cert-copy
+        image: alpine
+        command: [ "/bin/sh","-c","cp -rL /var/run/dockercerts/..data/tls.crt /var/run/certs-copy/dockertls.crt && cp -rL /var/run/helmcerts/..data/tls.crt /var/run/certs-copy/helmtls.crt && cp -rL /var/run/nexuscerts/..data/tls.crt /var/run/certs-copy/nexustls.crt"]
+        #        command: ["tail", "-f", "/dev/null"]
+        volumeMounts:
+        - name: dockercerts
+          mountPath: /var/run/dockercerts
+          readOnly: true
+        - name: helmcerts
+          mountPath: /var/run/helmcerts
+          readOnly: true
+        - name: nexuscerts
+          mountPath: /var/run/nexuscerts
+          readOnly: true
+        - name:  write-to-volume
+          mountPath: /var/run/certs-copy
+      volumes:
+      - name: dockercerts
+        secret:
+          secretName: secret-{{ include "common.name.nexus" . }}-docker
+      - name: helmcerts
+        secret:
+          secretName: secret-{{ include "common.name.nexus" . }}-helm
+      - name: nexuscerts
+        secret:
+          secretName: secret-{{ include "common.name.nexus" . }}-nexus
+      - name: write-to-volume
+        hostPath:
+          path: /tmp
+      restartPolicy: Never
+  backoffLimit: 4