Updated to 7.7.0.20250830-3-BN0276-ubi
Updated ANM destinationCertCA for 7.7.0.20250830-3-BN0276-ubi
This commit is contained in:
12
apigateway/templates/apimgr/apimgr-configmap.yaml
Normal file
12
apigateway/templates/apimgr/apimgr-configmap.yaml
Normal file
@@ -0,0 +1,12 @@
|
||||
{{- if and .Values.apimgr.enabled .Values.apimgr.license }}
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: {{ .Release.Name }}-apimgr-license-config
|
||||
data:
|
||||
{{- range $path, $config := .Values.apimgr.license }}
|
||||
{{ $path }}: |
|
||||
{{ $config | indent 4 -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
225
apigateway/templates/apimgr/apimgr-deployment.yaml
Normal file
225
apigateway/templates/apimgr/apimgr-deployment.yaml
Normal file
@@ -0,0 +1,225 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-apimgr"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apimgr
|
||||
spec:
|
||||
{{- if not .Values.apimgr.autoscaling.enabled }}
|
||||
replicas: {{ .Values.apimgr.replicaCount }}
|
||||
{{- end }}
|
||||
strategy:
|
||||
{{- if eq (default .Values.global.updateStrategy.type .Values.apimgr.updateStrategy.type) "RollingUpdate" }}
|
||||
rollingUpdate:
|
||||
maxSurge: {{ default .Values.global.updateStrategy.rollingUpdate.maxSurge .Values.apimgr.updateStrategy.rollingUpdate.maxSurge }}
|
||||
maxUnavailable: {{ default .Values.global.updateStrategy.rollingUpdate.maxUnavailable .Values.apimgr.updateStrategy.rollingUpdate.maxUnavailable }}
|
||||
{{- end }}
|
||||
type: {{ default .Values.global.updateStrategy.type .Values.apimgr.updateStrategy.type }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "gateway.selectorLabels" . | nindent 6 }}
|
||||
app.kubernetes.io/component: apimgr
|
||||
{{- with .Values.apimgr.podLabels }}
|
||||
{{- toYaml . | nindent 6 }}
|
||||
{{- end }}
|
||||
template:
|
||||
metadata:
|
||||
{{- with .Values.apimgr.podAnnotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "gateway.selectorLabels" . | nindent 8 }}
|
||||
app.kubernetes.io/component: apimgr
|
||||
{{- with .Values.apimgr.podLabels }}
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- with .Values.global.imagePullSecrets }}
|
||||
imagePullSecrets:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "gateway.apimgr.serviceAccountName" . }}
|
||||
securityContext:
|
||||
{{- toYaml .Values.apimgr.podSecurityContext | nindent 8 }}
|
||||
initContainers:
|
||||
{{- if .Values.global.cassandra.enabled }}
|
||||
- name: init-cassandra
|
||||
image: {{ .Values.global.initContainers.image | quote }}
|
||||
command: ["sh", "-c", "c=0; x={{ len .Values.global.cassandra.hosts }}; until [ $(( c * 100 / x )) -ge 50 ]; do c=0; for host in {{- range .Values.global.cassandra.hosts }} {{ .hostname }} {{- end }}; do echo waiting for ${host}; if nc -w 3 -v ${host} {{ .Values.global.cassandra.port }};then c=$((c+1)); fi done; sleep 2; done;"]
|
||||
{{- with .Values.global.initContainers.resources }}
|
||||
resources:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.securityContext }}
|
||||
securityContext:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.global.database.metrics.enabled }}
|
||||
- name: init-mysql
|
||||
image: {{ .Values.global.initContainers.image | quote }}
|
||||
command: ["sh", "-c", "until nc -w 3 -v {{ tpl .Values.global.database.host . }} {{ .Values.global.database.port | int }}; do echo waiting for mysql; sleep 2; done;"]
|
||||
{{- with .Values.global.initContainers.resources }}
|
||||
resources:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.securityContext }}
|
||||
securityContext:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
- name: init-anm
|
||||
image: {{ .Values.global.initContainers.image | quote }}
|
||||
{{- if .Values.anm.hostname }}
|
||||
command: ["sh", "-c", "until nc -w 3 -v {{ .Values.anm.hostname }}; do echo waiting for anm; sleep 2; done;"]
|
||||
{{- else }}
|
||||
command: ["sh", "-c", "until nc -w 3 -v {{ include "gateway.fullname" . }}-anm 8090; do echo waiting for anm; sleep 2; done;"]
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.resources }}
|
||||
resources:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.global.initContainers.securityContext }}
|
||||
securityContext:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apimgr.extraInitContainers }}
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
securityContext:
|
||||
{{- toYaml .Values.apimgr.securityContext | nindent 12 }}
|
||||
image: "{{ default .Values.global.defaultRegistry .Values.apimgr.image.registry }}/{{ .Values.apimgr.image.repository }}:{{ .Values.apimgr.image.tag | default .Chart.AppVersion }}"
|
||||
imagePullPolicy: {{ .Values.global.imagePullPolicy }}
|
||||
ports:
|
||||
- containerPort: {{ .Values.apimgr.service.ports.ui.port }}
|
||||
protocol: {{ .Values.apimgr.service.ports.ui.protocol }}
|
||||
{{- with .Values.apimgr.livenessProbe }}
|
||||
livenessProbe:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apimgr.readinessProbe }}
|
||||
readinessProbe:
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.apimgr.resources | nindent 12 }}
|
||||
env:
|
||||
{{- with .Values.apimgr.extraEnvVars }}
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.FIPS.enabled }}
|
||||
- name: EMT_FIPS_MODE
|
||||
value: {{ .Values.apimgr.FIPS.enabled | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.jvmHeapSize }}
|
||||
- name: EMT_HEAP_SIZE_MB
|
||||
value: {{ .Values.apimgr.jvmHeapSize | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.logs.trace.level }}
|
||||
- name: EMT_TRACE_LEVEL
|
||||
value: {{ .Values.apimgr.logs.trace.level | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.logs.trace.disk }}
|
||||
- name: APIGW_LOG_TRACE_TO_FILE
|
||||
value: {{ .Values.apimgr.logs.trace.disk | quote }}
|
||||
{{- end }}
|
||||
- name: APIGW_LOG_TRACE_JSON_TO_STDOUT
|
||||
value: {{ default .Values.apimgr.logs.trace.stdoutJSON false | quote }}
|
||||
{{- if .Values.apimgr.logs.opentraffic.output | quote }}
|
||||
- name: APIGW_LOG_OPENTRAFFIC_OUTPUT
|
||||
value: {{ .Values.apimgr.logs.opentraffic.output | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.global.domainkeypassphrase }}
|
||||
- name: DOMAIN_KEY_PASSPHRASE
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.domainkeypassphrase.secretName" . }}
|
||||
key: passphrase
|
||||
{{- end }}
|
||||
{{- if .Values.global.database.metrics.enabled }}
|
||||
- name: METRICS_DB_URL
|
||||
value: {{ tpl .Values.global.database.metrics.url . | quote }}
|
||||
- name: METRICS_DB_USERNAME
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.metrics-db.secretName" . }}
|
||||
key: {{ with .Values.global.database.metrics.existingSecret.keyMapping }}{{- default "username" .username }}{{- else -}}"username"{{- end }}
|
||||
- name: METRICS_DB_PASS
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.metrics-db.secretName" . }}
|
||||
key: {{ with .Values.global.database.metrics.existingSecret.keyMapping }}{{- default "password" .password }}{{- else -}}"password"{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.anm.hostname }}
|
||||
- name: EMT_ANM_HOSTS
|
||||
value: {{ .Values.anm.hostname | quote }}
|
||||
{{- else }}
|
||||
- name: EMT_ANM_HOSTS
|
||||
value: "{{ include "gateway.fullname" . }}-anm:8090"
|
||||
{{- end }}
|
||||
- name: GROUP_ID
|
||||
value: {{ .Values.apimgr.groupId }}
|
||||
{{- if .Values.global.domainId }}
|
||||
- name: DOMAIN_ID
|
||||
value: {{ .Values.global.domainId }}
|
||||
{{- end }}
|
||||
{{- if .Values.global.cassandra.enabled }}
|
||||
{{- range .Values.global.cassandra.hosts }}
|
||||
- name: {{ .variable }}
|
||||
value: {{ .hostname | quote }}
|
||||
{{- end }}
|
||||
- name: CASS_PORT
|
||||
value: {{ .Values.global.cassandra.port | quote }}
|
||||
- name: CASS_KEYSPACE
|
||||
value: {{ tpl .Values.global.cassandra.keyspace . | quote }}
|
||||
- name: CASS_TKEYSPACE
|
||||
value: {{ tpl .Values.global.cassandra.tkeyspace . | quote }}
|
||||
- name: CASS_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.cassandra.secretName" . }}
|
||||
key: {{ with .Values.global.cassandra.existingSecret.keyMapping }}{{- default "password" .password }}{{- else -}}"password"{{- end }}
|
||||
- name: CASS_USERNAME
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "gateway.cassandra.secretName" . }}
|
||||
key: {{ with .Values.global.cassandra.existingSecret.keyMapping }}{{- default "username" .username }}{{- else -}}"username"{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.image.generalConditions }}
|
||||
- name: ACCEPT_GENERAL_CONDITIONS
|
||||
value: {{ .Values.apimgr.image.generalConditions.accept | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.extraVolumeMounts }}
|
||||
volumeMounts:
|
||||
{{- if .Values.apimgr.license }}
|
||||
- name: license
|
||||
mountPath: "/opt/Axway/apigateway/conf/licenses/license.lic"
|
||||
subPath: "license.lic"
|
||||
{{- end }}
|
||||
{{- toYaml ( .Values.apimgr.extraVolumeMounts ) | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.extraVolumes }}
|
||||
volumes:
|
||||
{{- if .Values.apimgr.license }}
|
||||
- name: license
|
||||
configMap:
|
||||
name: {{ .Release.Name }}-apimgr-license-config
|
||||
{{- end }}
|
||||
{{ toYaml ( .Values.apimgr.extraVolumes ) | indent 8 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apimgr.nodeSelector }}
|
||||
nodeSelector:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apimgr.affinity }}
|
||||
affinity:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- with .Values.apimgr.tolerations }}
|
||||
tolerations:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
33
apigateway/templates/apimgr/apimgr-hpa.yaml
Normal file
33
apigateway/templates/apimgr/apimgr-hpa.yaml
Normal file
@@ -0,0 +1,33 @@
|
||||
{{- if .Values.apimgr.autoscaling.enabled }}
|
||||
apiVersion: autoscaling/v2
|
||||
kind: HorizontalPodAutoscaler
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-apimgr"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apimgr
|
||||
spec:
|
||||
scaleTargetRef:
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
name: "{{ include "gateway.fullname" . }}-apimgr"
|
||||
minReplicas: {{ .Values.apimgr.autoscaling.minReplicas }}
|
||||
maxReplicas: {{ .Values.apimgr.autoscaling.maxReplicas }}
|
||||
metrics:
|
||||
{{- if .Values.apimgr.autoscaling.targetCPUUtilizationPercentage }}
|
||||
- type: Resource
|
||||
resource:
|
||||
name: cpu
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: {{ .Values.apimgr.autoscaling.targetCPUUtilizationPercentage }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.autoscaling.targetMemoryUtilizationPercentage }}
|
||||
- type: Resource
|
||||
resource:
|
||||
name: memory
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: {{ .Values.apimgr.autoscaling.targetMemoryUtilizationPercentage }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
97
apigateway/templates/apimgr/apimgr-ingress.yaml
Normal file
97
apigateway/templates/apimgr/apimgr-ingress.yaml
Normal file
@@ -0,0 +1,97 @@
|
||||
{{- if .Values.apimgr.ingress.enabled -}}
|
||||
{{- $fullName := include "gateway.fullname" . -}}
|
||||
{{- $svcPort := .Values.apimgr.service.ports.ui.port -}}
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: {{ $fullName }}-apimgr
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
{{- with .Values.apimgr.ingress.annotations }}
|
||||
annotations:
|
||||
{{- tpl (toYaml .) $ | nindent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- if .Values.apimgr.ingress.className }}
|
||||
ingressClassName: {{ .Values.apimgr.ingress.className }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.ingress.tls }}
|
||||
tls:
|
||||
{{- range .Values.apimgr.ingress.tls }}
|
||||
- hosts:
|
||||
{{- range .hosts }}
|
||||
- {{ tpl . $ | quote }}
|
||||
{{- end }}
|
||||
{{- if .secretName }}
|
||||
secretName: {{ tpl (.secretName) $ }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
rules:
|
||||
{{- range .Values.apimgr.ingress.hosts }}
|
||||
- host: {{ tpl .host $ | quote }}
|
||||
http:
|
||||
paths:
|
||||
{{- range .paths }}
|
||||
- path: {{ .path }}
|
||||
{{- if .pathType }}
|
||||
pathType: {{ .pathType }}
|
||||
{{- end }}
|
||||
backend:
|
||||
service:
|
||||
name: {{ $fullName }}-apimgr
|
||||
port:
|
||||
number: {{ $svcPort }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
---
|
||||
|
||||
{{- if .Values.apimgr.extraIngress.enabled -}}
|
||||
{{- $fullName := include "gateway.fullname" . -}}
|
||||
{{- $svcPort := .Values.apimgr.service.ports.ui.port -}}
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: {{ $fullName }}-apimgr-extra
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
{{- with .Values.apimgr.extraIngress.annotations }}
|
||||
annotations:
|
||||
{{- tpl (toYaml .) $ | nindent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- if .Values.apimgr.extraIngress.className }}
|
||||
ingressClassName: {{ .Values.apimgr.extraIngress.className }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.extraIngress.tls }}
|
||||
tls:
|
||||
{{- range .Values.apimgr.extraIngress.tls }}
|
||||
- hosts:
|
||||
{{- range .hosts }}
|
||||
- {{ tpl . $ | quote }}
|
||||
{{- end }}
|
||||
{{- if .secretName }}
|
||||
secretName: {{ tpl (.secretName) $ }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
rules:
|
||||
{{- range .Values.apimgr.extraIngress.hosts }}
|
||||
- host: {{ tpl .host $ | quote }}
|
||||
http:
|
||||
paths:
|
||||
{{- range .paths }}
|
||||
- path: {{ .path }}
|
||||
{{- if .pathType }}
|
||||
pathType: {{ .pathType }}
|
||||
{{- end }}
|
||||
backend:
|
||||
service:
|
||||
name: {{ $fullName }}-apimgr
|
||||
port:
|
||||
number: {{ $svcPort }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
40
apigateway/templates/apimgr/apimgr-routes.yaml
Normal file
40
apigateway/templates/apimgr/apimgr-routes.yaml
Normal file
@@ -0,0 +1,40 @@
|
||||
{{- if .Values.apimgr.route.enabled -}}
|
||||
kind: Route
|
||||
apiVersion: route.openshift.io/v1
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-apimgr"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apimgr
|
||||
spec:
|
||||
{{- if .Values.global.domainName }}
|
||||
host: apimgr.{{ .Values.global.domainName }}
|
||||
{{- end }}
|
||||
to:
|
||||
kind: Service
|
||||
name: "{{ include "gateway.fullname" . }}-apimgr"
|
||||
port:
|
||||
targetPort: {{ tpl .Values.apimgr.route.targetPort . }}
|
||||
{{- if .Values.apimgr.route.tls.enabled }}
|
||||
tls:
|
||||
termination: {{ .Values.apimgr.route.tls.termination }}
|
||||
insecureEdgeTerminationPolicy: {{ .Values.apimgr.route.tls.insecureEdgeTerminationPolicy }}
|
||||
{{- if .Values.apimgr.route.tls.key }}
|
||||
key: |-
|
||||
{{- .Values.apimgr.route.tls.key | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.route.tls.destinationCACertificate }}
|
||||
destinationCACertificate: |-
|
||||
{{- .Values.apimgr.route.tls.destinationCACertificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.route.tls.caCertificate }}
|
||||
caCertificate: |-
|
||||
{{- .Values.apimgr.route.tls.caCertificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.apimgr.route.tls.certificate }}
|
||||
certificate: |-
|
||||
{{- .Values.apimgr.route.tls.certificate | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
wildcardPolicy: None
|
||||
{{- end }}
|
||||
17
apigateway/templates/apimgr/apimgr-service.yaml
Normal file
17
apigateway/templates/apimgr/apimgr-service.yaml
Normal file
@@ -0,0 +1,17 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: "{{ include "gateway.fullname" . }}-apimgr"
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apimgr
|
||||
spec:
|
||||
type: {{ .Values.apimgr.service.type }}
|
||||
ports:
|
||||
- port: {{ .Values.apimgr.service.ports.ui.port }}
|
||||
targetPort: {{ .Values.apimgr.service.ports.ui.port }}
|
||||
protocol: {{ .Values.apimgr.service.ports.ui.protocol }}
|
||||
name: apimanagerui
|
||||
selector:
|
||||
{{- include "gateway.selectorLabels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apimgr
|
||||
13
apigateway/templates/apimgr/apimgr-serviceaccount.yaml
Normal file
13
apigateway/templates/apimgr/apimgr-serviceaccount.yaml
Normal file
@@ -0,0 +1,13 @@
|
||||
{{- if .Values.apimgr.serviceAccount.create -}}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: {{ include "gateway.apimgr.serviceAccountName" . }}
|
||||
labels:
|
||||
{{- include "gateway.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apimgr
|
||||
{{- with .Values.apimgr.serviceAccount.annotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
Reference in New Issue
Block a user