aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKeren Joseph <keren.joseph@amdocs.com>2017-09-12 10:13:15 +0300
committerKeren Joseph <keren.joseph@amdocs.com>2017-09-12 13:24:47 +0300
commitee3a4e13af7f21fb34c84e6d8dbf94f4964c2202 (patch)
tree6aa3832dc4766cc802225141088e0acbe3c2b771
parentfbd41401cccb8881789ef94e7b610d323f76ecb4 (diff)
moving certs and keys to k8s secrets
changed location of used certs and keys files, updated deploy yamls and create/delete all Issue-ID: OOM-293 Change-Id: I53766b7028d6b725bf381875105b196246ff2ee1 Signed-off-by: Keren Joseph <keren.joseph@amdocs.com>
-rw-r--r--templates/data-router-deployment.yaml10
-rw-r--r--templates/modelloader-deployment.yaml5
-rw-r--r--templates/search-data-service-deployment.yaml5
-rw-r--r--templates/sparky-be-deployment.yaml15
4 files changed, 35 insertions, 0 deletions
diff --git a/templates/data-router-deployment.yaml b/templates/data-router-deployment.yaml
index f823061..0033208 100644
--- a/templates/data-router-deployment.yaml
+++ b/templates/data-router-deployment.yaml
@@ -35,6 +35,10 @@ spec:
volumeMounts:
- mountPath: /opt/app/data-router/config/
name: data-router-config
+ - mountPath: /opt/app/data-router/config/auth/tomcat_keystore
+ name: data-router-tomcat-key
+ - mountPath: /opt/app/data-router/config/auth/client-cert-onap.p12
+ name: data-router-client-cert
- mountPath: /opt/app/data-router/dynamic/
name: data-router-dynamic
- mountPath: /logs/
@@ -56,6 +60,12 @@ spec:
- name: data-router-logs
hostPath:
path: "/dockerdata-nfs/{{ .Values.nsPrefix }}/aai/data-router/logs/"
+ - name: data-router-tomcat-key
+ secret:
+ secretName: secret-{{ .Values.nsPrefix }}-aai
+ - name: data-router-client-cert
+ secret:
+ secretName: secret-{{ .Values.nsPrefix }}-aai
restartPolicy: Always
imagePullSecrets:
- name: "{{ .Values.nsPrefix }}-docker-registry-key"
diff --git a/templates/modelloader-deployment.yaml b/templates/modelloader-deployment.yaml
index 5391273..ec6a917 100644
--- a/templates/modelloader-deployment.yaml
+++ b/templates/modelloader-deployment.yaml
@@ -20,6 +20,8 @@ spec:
volumeMounts:
- mountPath: /opt/app/model-loader/config/
name: aai-model-loader-config
+ - mountPath: /opt/app/model-loader/config/auth/aai-os-cert.p12
+ name: aai-os-cert
- mountPath: /logs/
name: aai-model-loader-logs
image: "{{ .Values.image.modelLoaderImage }}:{{ .Values.image.modelLoaderVersion }}"
@@ -35,6 +37,9 @@ spec:
- name: aai-model-loader-logs
hostPath:
path: "/dockerdata-nfs/{{ .Values.nsPrefix }}/aai/model-loader/logs/"
+ - name: aai-os-cert
+ secret:
+ secretName: secret-{{ .Values.nsPrefix }}-aai
restartPolicy: Always
imagePullSecrets:
- name: "{{ .Values.nsPrefix }}-docker-registry-key"
diff --git a/templates/search-data-service-deployment.yaml b/templates/search-data-service-deployment.yaml
index f2db937..8f4acef 100644
--- a/templates/search-data-service-deployment.yaml
+++ b/templates/search-data-service-deployment.yaml
@@ -27,6 +27,8 @@ spec:
volumeMounts:
- mountPath: /opt/app/search-data-service/config/
name: aai-search-data-service-config
+ - mountPath: /opt/app/search-data-service/config/auth/tomcat_keystore
+ name: aai-tomcat-key
- mountPath: /logs/
name: aai-search-data-service-logs
ports:
@@ -40,6 +42,9 @@ spec:
- name: aai-search-data-service-config
hostPath:
path: "/dockerdata-nfs/{{ .Values.nsPrefix }}/aai/search-data-service/appconfig/"
+ - name: aai-tomcat-key
+ secret:
+ secretName: secret-{{ .Values.nsPrefix }}-aai
- name: aai-search-data-service-logs
hostPath:
path: "/dockerdata-nfs/{{ .Values.nsPrefix }}/aai/search-data-service/logs/"
diff --git a/templates/sparky-be-deployment.yaml b/templates/sparky-be-deployment.yaml
index 6a8ff93..f4c44e2 100644
--- a/templates/sparky-be-deployment.yaml
+++ b/templates/sparky-be-deployment.yaml
@@ -27,6 +27,12 @@ spec:
volumeMounts:
- mountPath: /opt/app/sparky/config/
name: aai-sparky-be-config
+ - mountPath: /opt/app/sparky/config/auth/client-cert-onap.p12
+ name: aai-sparky-be-client-cert
+ - mountPath: /opt/app/sparky/config/auth/aai-os-cert.p12
+ name: aai-sparky-be-aai-os-cert
+ - mountPath: /opt/app/sparky/config/auth/inventory-ui-keystore
+ name: aai-sparky-be-inventory-key
- mountPath: /logs/
name: aai-sparky-be-logs
ports:
@@ -43,6 +49,15 @@ spec:
- name: aai-sparky-be-logs
hostPath:
path: "/dockerdata-nfs/{{ .Values.nsPrefix }}/aai/sparky-be/logs/"
+ - name: aai-sparky-be-client-cert
+ secret:
+ secretName: secret-{{ .Values.nsPrefix }}-aai
+ - name: aai-sparky-be-aai-os-cert
+ secret:
+ secretName: secret-{{ .Values.nsPrefix }}-aai
+ - name: aai-sparky-be-inventory-key
+ secret:
+ secretName: secret-{{ .Values.nsPrefix }}-aai
restartPolicy: Always
imagePullSecrets:
- name: "{{ .Values.nsPrefix }}-docker-registry-key"