From c6559a91495469d62d73761c022bba47a245d9fc Mon Sep 17 00:00:00 2001
From: Taka Cho <takamune.cho@att.com>
Date: Tue, 31 Mar 2020 13:52:56 -0400
Subject: move AAF cert to APPC helm chart

move AAF cert out of APPC docker to
APPC helm chart
new AAF cert:
        Validity
            Not Before: Mar 27 18:03:32 2020 GMT
            Not After : Mar 27 18:03:32 2021 GMT


Issue-ID: APPC-1857
Change-Id: I25adc3fce2bed234c6748a87d975c46f1e607260
Signed-off-by: Taka Cho <takamune.cho@att.com>
---
 kubernetes/appc/templates/secrets.yaml     | 14 ++++++++++++++
 kubernetes/appc/templates/statefulset.yaml | 12 ++++++++++++
 2 files changed, 26 insertions(+)

(limited to 'kubernetes/appc/templates')

diff --git a/kubernetes/appc/templates/secrets.yaml b/kubernetes/appc/templates/secrets.yaml
index 075c24a064..c6aeb1e102 100644
--- a/kubernetes/appc/templates/secrets.yaml
+++ b/kubernetes/appc/templates/secrets.yaml
@@ -13,3 +13,17 @@
 # limitations under the License.
 
 {{ include "common.secretFast" . }}
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "common.fullname" . }}-certs
+  namespace: {{ include "common.namespace" . }}
+  labels:
+    app: {{ include "common.name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+type: Opaque
+data:
+{{ tpl (.Files.Glob "resources/config/certs/*").AsSecrets . | indent 2 }}
diff --git a/kubernetes/appc/templates/statefulset.yaml b/kubernetes/appc/templates/statefulset.yaml
index 68e108d9b7..5fd34ece79 100644
--- a/kubernetes/appc/templates/statefulset.yaml
+++ b/kubernetes/appc/templates/statefulset.yaml
@@ -190,6 +190,12 @@ spec:
           - mountPath: /opt/onap/appc/data/org.ops4j.pax.logging.cfg
             name: log-config
             subPath: org.ops4j.pax.logging.cfg
+          - mountPath: /opt/onap/appc/data/stores/org.onap.appc.p12
+            name: p12-certs
+            subPath: org.onap.appc.p12
+          - mountPath: /opt/onap/appc/data/stores/org.onap.appc.keyfile
+            name: keyfile-certs
+            subPath: org.onap.appc.keyfile
           resources:
 {{ include "common.resources" . | indent 12 }}
 	{{- if .Values.nodeSelector }}
@@ -214,6 +220,12 @@ spec:
           - mountPath: /usr/share/filebeat/data
             name: data-filebeat
       volumes:
+        - name: keyfile-certs
+          secret:
+            secretName: {{ include "common.fullname" . }}-certs
+        - name: p12-certs
+          secret:
+            secretName: {{ include "common.fullname" . }}-certs
         - name: localtime
           hostPath:
             path: /etc/localtime
-- 
cgit 1.2.3-korg