charts/pulsar/templates/pulsar-manager-statefulset.yaml

#
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.
#

{{- if .Values.components.pulsar_manager }}
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}"
  namespace: {{ template "pulsar.namespace" . }}
  annotations: {{ .Values.pulsar_manager.appAnnotations | toYaml | nindent 4 }}
  labels:
    {{- include "pulsar.standardLabels" . | nindent 4 }}
    component: {{ .Values.pulsar_manager.component }}
spec:
  serviceName: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}"
  replicas: 1
  selector:
    matchLabels:
      {{- include "pulsar.matchLabels" . | nindent 6 }}
      component: {{ .Values.pulsar_manager.component }}
  template:
    metadata:
      labels:
        {{- include "pulsar.template.labels" . | nindent 8 }}
        component: {{ .Values.pulsar_manager.component }}
      annotations:
        {{- if .Values.pulsar_manager.restartPodsOnConfigMapChange }}
        checksum/config: {{ include (print $.Template.BasePath "/pulsar-manager-configmap.yaml") . | sha256sum }}
        {{- end }}
{{- with .Values.pulsar_manager.annotations }}
{{ toYaml . | indent 8 }}
{{- end }}
    spec:
    {{- if .Values.pulsar_manager.nodeSelector }}
      nodeSelector:
{{ toYaml .Values.pulsar_manager.nodeSelector | indent 8 }}
    {{- end }}
    {{- if .Values.pulsar_manager.tolerations }}
      tolerations:
{{ toYaml .Values.pulsar_manager.tolerations | indent 8 }}
    {{- end }}
    {{- if .Values.pulsar_manager.topologySpreadConstraints }}
      topologySpreadConstraints:
        {{- toYaml .Values.pulsar_manager.topologySpreadConstraints | nindent 8 }}
    {{- end }}
      terminationGracePeriodSeconds: {{ .Values.pulsar_manager.gracePeriod }}
      {{- if .Values.pulsar_manager.initContainers }}
      initContainers:
        {{- toYaml .Values.pulsar_manager.initContainers | nindent 6 }}
      {{- end }}
      containers:
        - name: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}"
          image: "{{ .Values.images.pulsar_manager.repository }}:{{ .Values.images.pulsar_manager.tag }}"
          imagePullPolicy: "{{ template "pulsar.imagePullPolicy" (dict "image" .Values.images.pulsar_manager "root" .) }}"
        {{- if .Values.pulsar_manager.resources }}
          resources:
{{ toYaml .Values.pulsar_manager.resources | indent 12 }}
        {{- end }}
          ports:
          - containerPort: {{ .Values.pulsar_manager.service.targetPort }}
          - containerPort: {{ .Values.pulsar_manager.adminService.targetPort }}
          volumeMounts:
          - name: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}-{{ .Values.pulsar_manager.volumes.data.name }}"
            mountPath: /data
          {{- if .Values.pulsar_manager.extraVolumeMounts }}
{{ toYaml .Values.pulsar_manager.extraVolumeMounts | indent 10 }}
          {{- end }}
        {{- if .Values.auth.authentication.enabled }}
        {{- if eq .Values.auth.authentication.provider "jwt" }}
          - name: pulsar-manager-keys
            mountPath: /pulsar-manager/keys
        {{- end }}
        {{- end }}
          envFrom:
          - configMapRef:
              name: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}"
          env:
          - name: USERNAME
            valueFrom:
              secretKeyRef:
                {{- if .Values.pulsar_manager.admin.existingSecret }}
                name: {{ .Values.pulsar_manager.admin.existingSecret | quote }}
                {{- else }}
                name: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}-secret"
                {{- end }}
                key: DB_USERNAME
          - name: PASSWORD
            valueFrom:
              secretKeyRef:
                {{- if .Values.pulsar_manager.admin.existingSecret }}
                name: {{ .Values.pulsar_manager.admin.existingSecret | quote }}
                {{- else }}
                name: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}-secret"
                {{- end }}
                key: DB_PASSWORD
        {{- if .Values.auth.authentication.enabled }}
        {{- if eq .Values.auth.authentication.provider "jwt" }}
        {{- if .Values.auth.superUsers.manager }}
          - name: JWT_TOKEN
            valueFrom:
              secretKeyRef:
                key: TOKEN
                name: "{{ .Release.Name }}-token-{{ .Values.auth.superUsers.manager }}"
        {{- end }}
        {{- end }}
        {{- end }}          
        {{- include "pulsar.imagePullSecrets" . | nindent 6}}
      volumes:
        {{- if .Values.pulsar_manager.extraVolumes }}
{{ toYaml .Values.pulsar_manager.extraVolumes | indent 8 }}
        {{- end }}
      {{- if .Values.auth.authentication.enabled }}
      {{- if eq .Values.auth.authentication.provider "jwt" }}
        - name: pulsar-manager-keys
          secret:
            defaultMode: 420
          {{- if .Values.auth.authentication.jwt.usingSecretKey }}
            secretName: "{{ .Release.Name }}-token-symmetric-key"
          {{- else }}
            secretName: "{{ .Release.Name }}-token-asymmetric-key"          
          {{- end }}
            items:
          {{- if .Values.auth.authentication.jwt.usingSecretKey }}
            - key: SECRETKEY
              path: token/secret.key
          {{- else }}
            - key: PRIVATEKEY
              path: token/private.key
            - key: PUBLICKEY
              path: token/public.key
          {{- end }}
      {{- end }}
      {{- end }}
      {{- if not (and (and .Values.persistence .Values.volumes.persistence) .Values.pulsar_manager.volumes.persistence) }}
        - name: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}-{{ .Values.pulsar_manager.volumes.data.name }}"
          emptyDir: {}
      {{- end }}
{{- if and (and .Values.persistence .Values.volumes.persistence) .Values.pulsar_manager.volumes.persistence }}
  volumeClaimTemplates:
  - metadata:
      name: "{{ template "pulsar.fullname" . }}-{{ .Values.pulsar_manager.component }}-{{ .Values.pulsar_manager.volumes.data.name }}"
    spec:
      accessModes: [ "ReadWriteOnce" ]
      resources:
        requests:
          storage: {{ .Values.pulsar_manager.volumes.data.size }}
    {{- if .Values.pulsar_manager.volumes.data.storageClassName }}
      storageClassName: "{{ .Values.pulsar_manager.volumes.data.storageClassName }}"
    {{- else if and .Values.volumes.local_storage .Values.pulsar_manager.volumes.data.local_storage }}
      storageClassName: "local-storage"
    {{- end }}
    {{- with .Values.pulsar_manager.volumes.data.selector }}
      selector:
        {{- toYaml . | nindent 8 }}
    {{- end }}
{{- end }}

{{- end }}