X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=test%2Fsimulator-group%2Fics%2Fapp.yaml;h=b8bf0b7b0b6a7f8c52c3d815d6479ef50f7b9e19;hb=2c5af88869ce0fa702b011dbc6cb8a272273f70e;hp=ceb74c70c57ad0ce20509967c1b44909d4cb4a8b;hpb=05bfe48a83b1d7bf719eb94444ffc1377b998273;p=nonrtric.git diff --git a/test/simulator-group/ics/app.yaml b/test/simulator-group/ics/app.yaml index ceb74c70..b8bf0b7b 100644 --- a/test/simulator-group/ics/app.yaml +++ b/test/simulator-group/ics/app.yaml @@ -1,3 +1,20 @@ +# ============LICENSE_START======================================================= +# Copyright (C) 2020-2022 Nordix Foundation +# ================================================================================ +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# SPDX-License-Identifier: Apache-2.0 +# ============LICENSE_END========================================================= apiVersion: apps/v1 kind: Deployment metadata: @@ -17,6 +34,9 @@ spec: run: $ICS_APP_NAME autotest: ICS spec: + securityContext: + runAsUser: 0 +# Need to run as root to be able to store files in dir mounted as a hostPath volume containers: - name: $ICS_APP_NAME image: $ICS_IMAGE @@ -32,6 +52,29 @@ spec: name: ics-conf-name - mountPath: $ICS_CONTAINER_MNT_DIR name: ics-data-name +#ICS_JWT_START + - mountPath: $ICS_SIDECAR_MOUNT + name: token-cache-volume +#ICS_JWT_STOP +#ICS_JWT_START + - name: $AUTHSIDECAR_APP_NAME + image: $AUTHSIDECAR_IMAGE + imagePullPolicy: $KUBE_IMAGE_PULL_POLICY + env: + - name: CREDS_GRANT_TYPE + value: $ICS_CREDS_GRANT_TYPE + - name: CREDS_CLIENT_SECRET + value: $ICS_CREDS_CLIENT_SECRET + - name: CREDS_CLIENT_ID + value: $ICS_CREDS_CLIENT_ID + - name: OUTPUT_FILE + value: $ICS_SIDECAR_JWT_FILE + - name: AUTH_SERVICE_URL + value: $ICS_AUTH_SERVICE_URL + volumeMounts: + - mountPath: $ICS_SIDECAR_MOUNT + name: token-cache-volume +#ICS_JWT_STOP volumes: - configMap: defaultMode: 420 @@ -40,6 +83,11 @@ spec: - persistentVolumeClaim: claimName: $ICS_DATA_PVC_NAME name: ics-data-name +#ICS_JWT_START + - name: token-cache-volume + emptyDir: {} +#ICS_JWT_STOP + # Selector will be set when pod is started first time nodeSelector: