deployment.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ template "alfresco-share.fullname" . }}
  labels:
    {{- include "alfresco-share.labels" . | nindent 4 }}
  annotations:
    checkov.io/skip1: CKV_K8S_20=Requires APPS-1832
    checkov.io/skip2: CKV_K8S_23=Requires APPS-1832
    checkov.io/skip3: CKV_K8S_40=Requires APPS-1832
spec:
  replicas: {{ .Values.replicaCount }}
  selector:
    matchLabels:
      {{- include "alfresco-share.selectorLabels" . | nindent 6 }}
  strategy:
    {{- toYaml (.Values.strategy | default .Values.global.strategy) | nindent 4 }}
  template:
    metadata:
      annotations:
        {{- with .Values.podAnnotations }}
          {{- toYaml . | nindent 8 }}
        {{- end }}
      labels:
        {{- include "alfresco-share.labels" . | nindent 8 }}
        {{- with .Values.podLabels }}
          {{- toYaml . | nindent 8 }}
        {{- end }}
    spec:
      serviceAccountName: {{ include "alfresco-share.serviceAccountName" . }}
      {{- include "component-pod-security-context" .Values | indent 4 }}
      {{- include "alfresco-common.imagePullSecrets" . | indent 6 }}
      containers:
        - name: alfresco-share
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          {{- include "alfresco-common.component-security-context" .Values | indent 8 }}
          {{- if .Values.command }}
          command:
            {{- toYaml .Values.command | nindent 12 }}
          args:
            {{- toYaml .Values.args | nindent 12 }}
          {{- end }}
          ports:
            - name: tomcat-shutdown
              containerPort: 8005
              protocol: TCP
            - name: http
              containerPort: {{ .Values.image.port }}
              protocol: TCP
            {{- if gt (int .Values.replicaCount) 1 }}
            - name: hz
              containerPort: {{ .Values.hazelcast.port }}
              protocol: TCP
            {{- end }}
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          {{- $repo_details_cm := coalesce .Values.repository.existingConfigMap.name (include "alfresco-share.fullname" .) }}
          env:
            - name: CSRF_FILTER_REFERER
              value: {{ include "alfresco-common.csrf.referer" . }}
            - name: CSRF_FILTER_ORIGIN
              value: {{ include "alfresco-common.csrf.origin" . }}
            - name: BASEURL
              value: {{ include "alfresco-common.external.url" . }}
            - name: JAVA_OPTS
              value: >-
                {{ (printf "%s %s" (.Values.environment.JAVA_OPTS | default "") "-Dalfresco.proxy=$BASEURL") }}
            - name: REPO_HOST
              valueFrom:
                configMapKeyRef:
                  name: {{ $repo_details_cm }}
                  key: {{ .Values.repository.existingConfigMap.keys.host }}
            - name: REPO_PORT
              valueFrom:
                configMapKeyRef:
                  name: {{ $repo_details_cm }}
                  key: {{ .Values.repository.existingConfigMap.keys.port }}
            {{- range $key, $value := (omit .Values.environment "JAVA_OPTS") }}
            - name: {{ $key }}
              value: {{ $value }}
            {{- end }}
          volumeMounts:
            {{- if and (gt (int .Values.replicaCount) 1) .Values.managedApplicationContext.enabled }}
            - name: custom-application-context-volume
              mountPath: /usr/local/tomcat/shared/classes/alfresco/web-extension/custom-slingshot-application-context.xml
              subPath: custom-slingshot-application-context.xml
            {{- end }}
            {{- with .Values.extraVolumeMounts }}
            {{- toYaml . | nindent 12 }}
            {{- end }}
          readinessProbe:
            httpGet:
              path: /share
              port: {{ .Values.image.port }}
            initialDelaySeconds: {{ .Values.readinessProbe.initialDelaySeconds }}
            periodSeconds: {{ .Values.readinessProbe.periodSeconds }}
            timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }}
          livenessProbe:
            httpGet:
              path: /share
              port: {{ .Values.image.port }}
            initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
            periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
            timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
        {{- if .Values.extraSideContainers }}
        {{- toYaml .Values.extraSideContainers | nindent 8 }}
        {{- end }}
      initContainers:
        {{- toYaml .Values.extraInitContainers | nindent 8 }}
      volumes:
        {{- if and (gt (int .Values.replicaCount) 1) .Values.managedApplicationContext.enabled }}
        - name: custom-application-context-volume
          configMap:
            name: {{ template "alfresco-share.custom-application-context.name" . }}
        {{- end }}
        {{- if .Values.extraVolumes }}
        {{- toYaml .Values.extraVolumes | nindent 8 }}
        {{- end }}
      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.affinity }}
      affinity:
        {{- tpl . $ | nindent 8 }}
      {{- end }}
      {{- with .Values.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}