blob: efb16a5a88ddbd014df5fc326e523255b184f411 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
appLabel: aaf-cert-service
replicaCount: 1
repository: nexus3.onap.org:10001
image: onap/org.onap.aaf.certservice.aaf-certservice-api:1.0.0
pullPolicy: Always
containerPort: 8443
service:
type: ClusterIP
liveness:
initialDelaySeconds: 60
periodSeconds: 10
command: curl https://localhost:$HTTPS_PORT/actuator/health --cacert $ROOT_CERT --cert-type p12 --cert $KEYSTORE_P12_PATH --pass $KEYSTORE_PASSWORD
readiness:
initialDelaySeconds: 30
periodSeconds: 10
command: curl https://localhost:$HTTPS_PORT/ready --cacert $ROOT_CERT --cert-type p12 --cert $KEYSTORE_P12_PATH --pass $KEYSTORE_PASSWORD
volume:
name: aaf-cert-service-volume
mountPath: /etc/onap/aaf/certservice
resources:
limits:
cpu: 2
memory: 2Gi
requests:
cpu: 1
memory: 1Gi
secret:
name: aaf-cert-service-secret
tls:
server:
secret:
name: aaf-cert-service-server-tls-secret
volume:
name: aaf-cert-service-server-tls-volume
mountPath: /etc/onap/aaf/certservice/certs/
client:
secret:
name: aaf-cert-service-client-tls-secret
envs:
keystore:
jksName: certServiceServer-keystore.jks
p12Name: certServiceServer-keystore.p12
password: secret
truststore:
jksName: truststore.jks
crtName: root.crt
password: secret
|