171 lines
8.5 KiB
YAML
171 lines
8.5 KiB
YAML
{{- if .Values.apiportal.enabled -}}
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: "{{ include "gateway.fullname" . }}-apiportal"
|
|
labels:
|
|
{{- include "gateway.labels" . | nindent 4 }}
|
|
app.kubernetes.io/component: apiportal
|
|
spec:
|
|
replicas: {{ .Values.apiportal.replicaCount }}
|
|
strategy:
|
|
{{- if eq (default .Values.global.updateStrategy.type .Values.apiportal.updateStrategy.type) "RollingUpdate" }}
|
|
rollingUpdate:
|
|
maxSurge: {{ default .Values.global.updateStrategy.rollingUpdate.maxSurge .Values.apiportal.updateStrategy.rollingUpdate.maxSurge }}
|
|
maxUnavailable: {{ default .Values.global.updateStrategy.rollingUpdate.maxUnavailable .Values.apiportal.updateStrategy.rollingUpdate.maxUnavailable }}
|
|
{{- end }}
|
|
type: {{ default .Values.global.updateStrategy.type .Values.apiportal.updateStrategy.type }}
|
|
selector:
|
|
matchLabels:
|
|
{{- include "gateway.selectorLabels" . | nindent 6 }}
|
|
app.kubernetes.io/component: apiportal
|
|
{{- with .Values.apiportal.podLabels }}
|
|
{{- toYaml . | nindent 6 }}
|
|
{{- end }}
|
|
template:
|
|
metadata:
|
|
{{- with .Values.apiportal.podAnnotations }}
|
|
annotations:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
labels:
|
|
{{- include "gateway.selectorLabels" . | nindent 8 }}
|
|
app.kubernetes.io/component: apiportal
|
|
{{- with .Values.apiportal.podLabels }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
spec:
|
|
{{- with .Values.global.imagePullSecrets }}
|
|
imagePullSecrets:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
serviceAccountName: {{ include "gateway.apiportal.serviceAccountName" . }}
|
|
securityContext:
|
|
{{- toYaml .Values.apiportal.podSecurityContext | nindent 8 }}
|
|
containers:
|
|
- name: "{{ include "gateway.fullname" . }}-apiportal"
|
|
securityContext:
|
|
{{- toYaml .Values.apiportal.securityContext | nindent 12 }}
|
|
command: ["/usr/local/bin/entrypoint.sh", "apiportal"]
|
|
{{- with .Values.apiportal.livenessProbe }}
|
|
livenessProbe:
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
{{- with .Values.apiportal.readinessProbe }}
|
|
readinessProbe:
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
resources:
|
|
{{- toYaml .Values.apiportal.resources | nindent 12 }}
|
|
env:
|
|
- name: MYSQL_HOST
|
|
value: {{ default .Values.global.database.host .Values.apiportal.mysql.host | quote }}
|
|
- name: MYSQL_PORT
|
|
value: {{ tpl .Values.apiportal.mysql.port . | quote }}
|
|
- name: MYSQL_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ include "gateway.apiportal.secretName" . }}
|
|
key: {{ with .Values.apiportal.mysql.existingSecret.keyMapping }}{{- default "username" .username }}{{- else -}}"username"{{- end }}
|
|
- name: MYSQL_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ include "gateway.apiportal.secretName" . }}
|
|
key: {{ with .Values.apiportal.mysql.existingSecret.keyMapping }}{{- default "password" .password }}{{- else -}}"password"{{- end }}
|
|
- name: MYSQL_DATABASE
|
|
value: {{ .Values.apiportal.mysql.databaseName | quote }}
|
|
- name: MYSQL_SSL_ON
|
|
value: {{ .Values.apiportal.mysql.sslOn | quote }}
|
|
- name: MYSQL_SSL_VERIFY_CERT
|
|
value: {{ .Values.apiportal.mysql.sslVerifyCert | quote }}
|
|
{{- if .Values.apiportal.redis.enabled }}
|
|
- name: REDIS_CONFIGURED
|
|
value: "1"
|
|
- name: REDIS_ON
|
|
value: "1"
|
|
- name: REDIS_HOST
|
|
value: {{ required "A redis host should be specified" .Values.apiportal.redis.host | quote }}
|
|
- name: REDIS_PORT
|
|
value: {{ default "6379" .Values.apiportal.redis.port | quote }}
|
|
- name: REDIS_CACHE_TIMEOUT_SEC
|
|
value: {{ default "600" .Values.apiportal.redis.cacheTimeout | quote }}
|
|
{{- end }}
|
|
- name: APACHE_SSL_ON
|
|
value: {{ .Values.apiportal.apache.sslOn | quote }}
|
|
- name: APIMANAGER_CONFIGURED
|
|
value: {{ default "1" .Values.apiportal.apiManager.configured | quote }}
|
|
- name: API_WHITELIST_CONFIGURED
|
|
value: "1"
|
|
- name: API_WHITELIST
|
|
value: "apitraffic.{{ .Values.global.domainName }}"
|
|
- name: APIMANAGER_NAME
|
|
value: {{ .Values.apiportal.apiManager.name | quote }}
|
|
- name: APIMANAGER_HOST
|
|
value: "{{ include "gateway.fullname" . }}-apimgr"
|
|
- name: APIMANAGER_PORT
|
|
value: {{ .Values.apimgr.service.ports.ui.port | quote }}
|
|
- name: HTTP_PORT
|
|
value: {{ .Values.apiportal.service.ports.http.port | quote }}
|
|
- name: HTTPS_PORT
|
|
value: {{ .Values.apiportal.service.ports.https.port | quote }}
|
|
- name: HTTPS_FORCE_PORT
|
|
value: {{ .Values.apiportal.service.ports.force.port | quote }}
|
|
- name: T4_DOWNLOADED
|
|
value: {{ .Values.apiportal.t4_downloaded | quote }}
|
|
{{- if .Values.apiportal.extraEnvVars }}
|
|
{{- toYaml .Values.apiportal.extraEnvVars | nindent 12 }}
|
|
{{- end }}
|
|
image: "{{ default .Values.global.defaultRegistry .Values.apiportal.image.registry }}/{{ .Values.apiportal.image.repository }}:{{ .Values.apiportal.image.tag | default .Chart.AppVersion }}"
|
|
imagePullPolicy: {{ .Values.global.imagePullPolicy }}
|
|
ports:
|
|
- name: "apiportal"
|
|
containerPort: {{ .Values.apiportal.service.ports.force.port }}
|
|
protocol: TCP
|
|
volumeMounts:
|
|
{{- $mounts := list }}
|
|
{{- if .Values.apiportal.mysql.sslOn }}
|
|
{{- $mounts = append $mounts (dict "name" "mysql-certs" "mountPath" "/opt/axway/apiportal/certs/mysql/mysql-ca.pem" "subPath" "mysql-ca.pem") }}
|
|
{{- end }}
|
|
{{- if .Values.apiportal.apache.sslOn }}
|
|
{{- $mounts = append $mounts (dict "name" "apache" "mountPath" "/opt/axway/apiportal/certs/apache/") }}
|
|
{{- end }}
|
|
{{- include "gateway.volumeMounts" (dict "component" "portal" "storage" (dict "volumes" (.Values.global.storage.volumes | concat .Values.apiportal.storage.volumes))) | fromYamlArray | concat $mounts | default list | toYaml | nindent 12 }}
|
|
initContainers:
|
|
- name: init-mysql
|
|
image: {{ .Values.global.initContainers.image | quote }}
|
|
command: [ 'sh', '-c', 'until nc -w 3 -v {{ tpl .Values.global.database.host . }} {{ .Values.global.database.port }}; do echo waiting for MySQL; sleep 2; done;' ]
|
|
{{- with .Values.global.initContainers.resources }}
|
|
resources:
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
{{- with .Values.global.initContainers.securityContext }}
|
|
securityContext:
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
{{- if .Values.apiportal.apiManager.configured }}
|
|
- name: init-apimanager
|
|
image: {{ .Values.global.initContainers.image | quote }}
|
|
command: [ 'sh', '-c', 'until nc -w 3 -v {{ include "gateway.fullname" . }}-apimgr 8075; do echo waiting for API Manager; sleep 2; done;' ]
|
|
{{- with .Values.global.initContainers.resources }}
|
|
resources:
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
{{- with .Values.global.initContainers.securityContext }}
|
|
securityContext:
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- with .Values.apiportal.extraInitContainers }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
volumes:
|
|
{{- $vols := list }}
|
|
{{- if .Values.apiportal.mysql.sslOn }}
|
|
{{- $vols = append $vols (dict "name" "mysql-certs" "secret" (dict "secretName" "mysql-ca-cert" "items" (list (dict "key" "mysql-ca.pem" "path" "mysql-ca.pem")))) }}
|
|
{{- end }}
|
|
{{- if .Values.apiportal.apache.sslOn }}
|
|
{{- $vols = append $vols (dict "name" "apache" "secret" (dict "secretName" "apache" "items" (list (dict "key" "tls.key" "path" "apache.key") (dict "key" "tls.crt" "path" "apache.crt")))) }}
|
|
{{- end }}
|
|
{{- include "gateway.volumes" (dict "component" "portal" "storage" (dict "volumes" (.Values.global.storage.volumes | concat .Values.apiportal.storage.volumes))) | fromYamlArray | concat $vols | default list | toYaml | nindent 8 }}
|
|
{{- end }}
|