From df28b0a551c8397d437d29453abcd2e26bcec9b2 Mon Sep 17 00:00:00 2001 From: "aravind.est" Date: Tue, 14 Feb 2023 09:29:14 +0000 Subject: Add kserve participant Issue-ID: POLICY-4525 Signed-off-by: aravind.est Change-Id: I00c3c9bc02eb7e424c459100517db90f5e8b738c --- packages/policy-clamp-docker/pom.xml | 38 +++++++++++++ .../main/docker/KserveParticipant-Suse.Dockerfile | 66 ++++++++++++++++++++++ .../src/main/docker/KserveParticipant.Dockerfile | 58 +++++++++++++++++++ .../src/main/docker/kserve-participant.sh | 59 +++++++++++++++++++ 4 files changed, 221 insertions(+) mode change 100644 => 100755 packages/policy-clamp-docker/pom.xml create mode 100755 packages/policy-clamp-docker/src/main/docker/KserveParticipant-Suse.Dockerfile create mode 100755 packages/policy-clamp-docker/src/main/docker/KserveParticipant.Dockerfile create mode 100755 packages/policy-clamp-docker/src/main/docker/kserve-participant.sh (limited to 'packages/policy-clamp-docker') diff --git a/packages/policy-clamp-docker/pom.xml b/packages/policy-clamp-docker/pom.xml old mode 100644 new mode 100755 index 576f3d057..1b9b5e1fd --- a/packages/policy-clamp-docker/pom.xml +++ b/packages/policy-clamp-docker/pom.xml @@ -69,6 +69,11 @@ policy-clamp-participant-impl-http ${project.version} + + org.onap.policy.clamp.participant + policy-clamp-participant-impl-kserve + ${project.version} + org.onap.policy.clamp.participant policy-clamp-participant-impl-a1pms @@ -281,6 +286,39 @@ + + onap/policy-clamp-ac-kserve-ppnt + onap-policy-clamp-ac-kserve-ppnt + + try + ${docker.clamp-ac-kserve-ppnt.dockerFile} + ${docker.clamp-ac-kserve-ppnt.contextDir} + + ${project.version} + ${project.version}-${maven.build.timestamp} + ${project.docker.latest.minmax.tag.version} + + + + + + + org.onap.policy.clamp:policy-clamp-tarball + + /lib + kserve-participant.tar.gz + + + + org.onap.policy.clamp.participant:policy-clamp-participant-impl-kserve + + policy-clamp-participant-impl-kserve.jar + + + + + + onap/policy-clamp-acm-element-impl onap-policy-clamp-acm-element-impl diff --git a/packages/policy-clamp-docker/src/main/docker/KserveParticipant-Suse.Dockerfile b/packages/policy-clamp-docker/src/main/docker/KserveParticipant-Suse.Dockerfile new file mode 100755 index 000000000..df8603d70 --- /dev/null +++ b/packages/policy-clamp-docker/src/main/docker/KserveParticipant-Suse.Dockerfile @@ -0,0 +1,66 @@ +#------------------------------------------------------------------------------- +# ============LICENSE_START======================================================= +# Copyright (C) 2023 Nordix Foundation. +# ================================================================================ +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# SPDX-License-Identifier: Apache-2.0 +# ============LICENSE_END========================================================= +#------------------------------------------------------------------------------- + +FROM busybox AS tarball +RUN mkdir /packages /extracted +COPY /maven/lib/kserve-participant.tar.gz /packages/ +RUN tar xvzf /packages/kserve-participant.tar.gz --directory /extracted/ + +FROM opensuse/leap:15.4 + +LABEL maintainer="Policy Team" +LABEL org.opencontainers.image.title="Policy CLAMP ACM KSERVE Participant" +LABEL org.opencontainers.image.description="Policy CLAMP ACM KSERVE Participant image based on OpenSuse" +LABEL org.opencontainers.image.url="https://github.com/onap/policy-clamp" +LABEL org.opencontainers.image.vendor="ONAP Policy Team" +LABEL org.opencontainers.image.licenses="Apache-2.0" +LABEL org.opencontainers.image.created="${git.build.time}" +LABEL org.opencontainers.image.version="${git.build.version}" +LABEL org.opencontainers.image.revision="${git.commit.id.abbrev}" + +ARG POLICY_LOGS=/var/log/onap/policy/kserve-participant + +ENV POLICY_LOGS=$POLICY_LOGS +ENV POLICY_HOME=/opt/app/policy/clamp +ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8 +ENV JAVA_HOME=/usr/lib64/jvm/java-11-openjdk-11 + +RUN zypper -n -q install --no-recommends gzip java-11-openjdk-headless netcat-openbsd tar wget && \ + zypper -n -q update && zypper -n -q clean --all && \ + groupadd --system policy && \ + useradd --system --shell /bin/sh -G policy policy && \ + mkdir -p /app $POLICY_HOME $POLICY_LOGS && \ + chown -R policy:policy /app $POLICY_HOME $POLICY_LOGS + +COPY --chown=policy:policy --from=tarball /extracted $POLICY_HOME + +WORKDIR $POLICY_HOME +COPY --chown=policy:policy kubernetes-participant.sh bin/ +COPY --chown=policy:policy /maven/policy-clamp-participant-impl-kserve.jar /app/app.jar + +RUN chmod 755 bin/*.sh + +EXPOSE 8087 + +USER policy +WORKDIR $POLICY_HOME/bin +ENTRYPOINT [ "./kserve-participant.sh" ] + + diff --git a/packages/policy-clamp-docker/src/main/docker/KserveParticipant.Dockerfile b/packages/policy-clamp-docker/src/main/docker/KserveParticipant.Dockerfile new file mode 100755 index 000000000..de60cc805 --- /dev/null +++ b/packages/policy-clamp-docker/src/main/docker/KserveParticipant.Dockerfile @@ -0,0 +1,58 @@ +#------------------------------------------------------------------------------- +# ============LICENSE_START======================================================= +# Copyright (C) 2023 Nordix Foundation. +# ================================================================================ +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# SPDX-License-Identifier: Apache-2.0 +# ============LICENSE_END========================================================= +#------------------------------------------------------------------------------- + +FROM busybox AS tarball +RUN mkdir /packages /extracted +COPY /maven/lib/kserve-participant.tar.gz /packages/ +RUN tar xvzf /packages/kserve-participant.tar.gz --directory /extracted/ + +FROM onap/policy-jre-alpine:2.5.2-SNAPSHOT + +LABEL maintainer="Policy Team" +LABEL org.opencontainers.image.title="Policy CLAMP ACM KSERVE Participant" +LABEL org.opencontainers.image.description="Policy CLAMP ACM Kserve Participant image based on Alpine" +LABEL org.opencontainers.image.url="https://github.com/onap/policy-clamp" +LABEL org.opencontainers.image.vendor="ONAP Policy Team" +LABEL org.opencontainers.image.licenses="Apache-2.0" +LABEL org.opencontainers.image.created="${git.build.time}" +LABEL org.opencontainers.image.version="${git.build.version}" +LABEL org.opencontainers.image.revision="${git.commit.id.abbrev}" + +ARG POLICY_LOGS=/var/log/onap/policy/kserve-participant + +ENV POLICY_LOGS=$POLICY_LOGS +ENV POLICY_HOME=$POLICY_HOME/clamp + +RUN mkdir -p $POLICY_HOME $POLICY_LOGS && \ + chown -R policy:policy $POLICY_HOME $POLICY_LOGS + +COPY --chown=policy:policy --from=tarball /extracted $POLICY_HOME + +WORKDIR $POLICY_HOME +COPY --chown=policy:policy kserve-participant.sh bin/ +COPY --chown=policy:policy /maven/policy-clamp-participant-impl-kserve.jar /app/app.jar + +RUN chmod 755 bin/*.sh + +EXPOSE 8087 + +USER policy +WORKDIR $POLICY_HOME/bin +ENTRYPOINT [ "./kserve-participant.sh" ] diff --git a/packages/policy-clamp-docker/src/main/docker/kserve-participant.sh b/packages/policy-clamp-docker/src/main/docker/kserve-participant.sh new file mode 100755 index 000000000..cb88db4be --- /dev/null +++ b/packages/policy-clamp-docker/src/main/docker/kserve-participant.sh @@ -0,0 +1,59 @@ +#!/usr/bin/env sh +# +# ============LICENSE_START======================================================= +# Copyright (C) 2023 Nordix Foundation. +# ================================================================================ +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# SPDX-License-Identifier: Apache-2.0 +# ============LICENSE_END========================================================= +# + +KEYSTORE="${KEYSTORE:-$POLICY_HOME/etc/ssl/policy-keystore}" +TRUSTSTORE="${TRUSTSTORE:-$POLICY_HOME/etc/ssl/policy-truststore}" +KEYSTORE_PASSWD="${KEYSTORE_PASSWD:-Pol1cy_0nap}" +TRUSTSTORE_PASSWD="${TRUSTSTORE_PASSWD:-Pol1cy_0nap}" + +if [ "$#" -eq 1 ]; then + CONFIG_FILE=$1 +fi + +if [ -z "$CONFIG_FILE" ]; then + CONFIG_FILE="${POLICY_HOME}/etc/KserveParticipantParameters.yaml" +fi + +echo "Policy clamp Kserve participant config file: $CONFIG_FILE" + +if [ -f "${POLICY_HOME}/etc/mounted/policy-truststore" ]; then + echo "overriding policy-truststore" + cp -f "${POLICY_HOME}"/etc/mounted/policy-truststore "${TRUSTSTORE}" +fi + +if [ -f "${POLICY_HOME}/etc/mounted/policy-keystore" ]; then + echo "overriding policy-keystore" + cp -f "${POLICY_HOME}"/etc/mounted/policy-keystore "${KEYSTORE}" +fi + +if [ -f "${POLICY_HOME}/etc/mounted/logback.xml" ]; then + echo "overriding logback xml file" + cp -f "${POLICY_HOME}"/etc/mounted/logback.xml "${POLICY_HOME}"/etc/ +fi + +$JAVA_HOME/bin/java \ + -Dlogging.config="${POLICY_HOME}/etc/logback.xml" \ + -Dserver.ssl.keyStore="${KEYSTORE}" \ + -Dserver.ssl.keyStorePassword="${KEYSTORE_PASSWD}" \ + -Djavax.net.ssl.trustStore="${TRUSTSTORE}" \ + -Djavax.net.ssl.trustStorePassword="${TRUSTSTORE_PASSWD}" \ + -jar /app/app.jar \ + --spring.config.location="${CONFIG_FILE}" -- cgit 1.2.3-korg