blob: 28cf0e49e1d6ccc800f870b5f201ff5b2a155ee4 [file] [log] [blame]
Jeremy Ronquillo223db002020-06-05 10:28:22 -07001{{/*
Jeremy Ronquilloec2d3e42020-06-05 11:33:39 -07002# Copyright 2020-present Open Networking Foundation
Jeremy Ronquillo223db002020-06-05 10:28:22 -07003
Jeremy Ronquillo6046ce32020-06-18 11:06:29 -07004# SPDX-License-Identifier: LicenseRef-ONF-Member-Only-1.0
Jeremy Ronquillo223db002020-06-05 10:28:22 -07005*/}}
6
Hyunsun Moon33d85312020-08-20 00:55:31 -07007{{- $upfConfig := index .Values.config.upf.cfgFiles "upf.json" }}
8{{- $accessConfig := index $upfConfig "access" }}
9{{- $coreConfig := index $upfConfig "core" }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070010---
11apiVersion: apps/v1
12kind: StatefulSet
13metadata:
Hyunsun Moon33d85312020-08-20 00:55:31 -070014 name: upf
Jeremy Ronquillo223db002020-06-05 10:28:22 -070015 labels:
Hyunsun Moon33d85312020-08-20 00:55:31 -070016{{ tuple "upf" . | include "omec-user-plane.metadata_labels" | indent 4 }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070017spec:
18 replicas: 1
Hyunsun Moon33d85312020-08-20 00:55:31 -070019 serviceName: upf-headless
Jeremy Ronquillo223db002020-06-05 10:28:22 -070020 selector:
21 matchLabels:
Hyunsun Moon33d85312020-08-20 00:55:31 -070022{{ tuple "upf" . | include "omec-user-plane.metadata_labels" | indent 6 }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070023 template:
24 metadata:
25 labels:
Hyunsun Moon33d85312020-08-20 00:55:31 -070026{{ tuple "upf" . | include "omec-user-plane.metadata_labels" | indent 8 }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070027 annotations:
28 k8s.v1.cni.cncf.io/networks: '[
29 {
Hyunsun Moon33d85312020-08-20 00:55:31 -070030 "name": "access-net",
31 "interface": {{ index $accessConfig "ifname" | quote }},
Hyunsun Moon1905a6e2020-11-09 05:59:55 +000032 {{- if hasKey .Values.config.upf.access "mac" }}
33 "mac": {{ .Values.config.upf.access.mac | quote }},
34 {{- end }}
Hyunsun Moond457d182020-09-10 15:52:09 -070035 "ips": [{{ .Values.config.upf.access.ip | quote }}]
Jeremy Ronquillo223db002020-06-05 10:28:22 -070036 },
37 {
Hyunsun Moon33d85312020-08-20 00:55:31 -070038 "name": "core-net",
39 "interface": {{ index $coreConfig "ifname" | quote }},
Hyunsun Moon1905a6e2020-11-09 05:59:55 +000040 {{- if hasKey .Values.config.upf.core "mac" }}
41 "mac": {{ .Values.config.upf.core.mac | quote }},
42 {{- end }}
Hyunsun Moond457d182020-09-10 15:52:09 -070043 "ips": [{{ .Values.config.upf.core.ip | quote }}]
Jeremy Ronquillo223db002020-06-05 10:28:22 -070044 }
45 ]'
46 spec:
47 shareProcessNamespace: true
48 {{- if .Values.nodeSelectors.enabled }}
49 nodeSelector:
Hyunsun Moon33d85312020-08-20 00:55:31 -070050 {{ .Values.nodeSelectors.upf.label }}: {{ .Values.nodeSelectors.upf.value }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070051 {{- end }}
Hyunsun Moone3500a82021-05-08 18:12:08 -070052 {{- if hasKey .Values.images "pullSecrets" }}
Hyunsun Moon8da17882020-10-14 21:28:44 -050053 imagePullSecrets:
Hyunsun Moone3500a82021-05-08 18:12:08 -070054{{ toYaml .Values.images.pullSecrets | indent 8 }}
Hyunsun Moon8da17882020-10-14 21:28:44 -050055 {{- end }}
Hyunsun Moon918f26b2020-06-11 13:16:39 -070056 initContainers:
57 - name: bess-init
58 image: {{ .Values.images.tags.bess | quote }}
59 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
60 command: ["sh", "-xec"]
61 args:
Hyunsun Moon33d85312020-08-20 00:55:31 -070062 - ip route replace {{ .Values.config.upf.enb.subnet }} via {{ .Values.config.upf.access.gateway }};
63 ip route replace default via {{ .Values.config.upf.core.gateway }} metric 110;
Hyunsun Moon617dc052020-06-21 20:13:22 -050064 iptables -I OUTPUT -p icmp --icmp-type port-unreachable -j DROP;
Hyunsun Moon918f26b2020-06-11 13:16:39 -070065 securityContext:
66 capabilities:
67 add:
68 - NET_ADMIN
Jeremy Ronquillo223db002020-06-05 10:28:22 -070069 {{- if .Values.config.coreDump.enabled }}
Hyunsun Moon7f03a772020-09-27 23:23:50 -050070{{ tuple "upf" . | include "omec-user-plane.coredump_init" | indent 6 }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070071 {{- end }}
72 containers:
Jeremy Ronquillo223db002020-06-05 10:28:22 -070073 - name: bessd
74 image: {{ .Values.images.tags.bess | quote }}
75 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
76 securityContext:
Hyunsun Moon785d81b2020-11-06 05:56:21 +000077 {{- if .Values.config.upf.privileged }}
78 privileged: true
79 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070080 capabilities:
81 add:
82 - IPC_LOCK
Jeremy Ronquillo223db002020-06-05 10:28:22 -070083 stdin: true
84 tty: true
Hyunsun Moon617dc052020-06-21 20:13:22 -050085 command: ["/bin/bash", "-xc"]
86 args:
Hyunsun Moon33d85312020-08-20 00:55:31 -070087 {{- if .Values.config.upf.hugepage.enabled }}
Hyunsun Moon617dc052020-06-21 20:13:22 -050088 - bessd -f -grpc-url=0.0.0.0:10514
89 {{- else }}
90 - bessd -m 0 -f -grpc-url=0.0.0.0:10514
91 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070092 lifecycle:
93 postStart:
94 exec:
95 command: ["/etc/bess/conf/bessd-poststart.sh"]
96 livenessProbe:
97 tcpSocket:
98 port: 10514
99 initialDelaySeconds: 15
100 periodSeconds: 20
101 resources:
102 requests:
103 {{- if .Values.resources.enabled }}
104{{ toYaml .Values.resources.bess.requests | indent 12 }}
105 {{- end }}
Hyunsun Moon33d85312020-08-20 00:55:31 -0700106 {{- if .Values.config.upf.hugepage.enabled }}
Hyunsun Moon617dc052020-06-21 20:13:22 -0500107 hugepages-1Gi: 2Gi
108 {{- end }}
Hyunsun Moon33d85312020-08-20 00:55:31 -0700109 {{- if .Values.config.upf.sriov.enabled }}
Hyunsun Moon6575f7e2021-05-19 16:55:42 -0700110 intel.com/intel_sriov_vfio: 2
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700111 {{- end }}
112 limits:
113 {{- if .Values.resources.enabled }}
114{{ toYaml .Values.resources.bess.limits | indent 12 }}
115 {{- end }}
Hyunsun Moon33d85312020-08-20 00:55:31 -0700116 {{- if .Values.config.upf.hugepage.enabled }}
Hyunsun Moon617dc052020-06-21 20:13:22 -0500117 hugepages-1Gi: 2Gi
118 {{- end }}
Hyunsun Moon33d85312020-08-20 00:55:31 -0700119 {{- if .Values.config.upf.sriov.enabled }}
Hyunsun Moon6575f7e2021-05-19 16:55:42 -0700120 intel.com/intel_sriov_vfio: 2
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700121 {{- end }}
122 env:
123 - name: CONF_FILE
Hyunsun Moond60fcaf2020-07-14 16:09:13 -0700124 value: /etc/bess/conf/upf.json
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700125 volumeMounts:
Hyunsun Moon33d85312020-08-20 00:55:31 -0700126 {{- if .Values.config.upf.hugepage.enabled }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700127 - name: hugepages
128 mountPath: /dev/hugepages
Hyunsun Moon617dc052020-06-21 20:13:22 -0500129 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700130 - name: configs
131 mountPath: /etc/bess/conf
132 {{- if .Values.config.coreDump.enabled }}
133 - name: coredump
134 mountPath: /tmp/coredump
135 {{- end }}
Hyunsun Moon918f26b2020-06-11 13:16:39 -0700136 - name: routectl
137 image: {{ .Values.images.tags.bess | quote }}
138 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
139 env:
140 - name: PYTHONUNBUFFERED
141 value: "1"
142 command: ["/opt/bess/bessctl/conf/route_control.py"]
143 args:
144 - -i
Hyunsun Moon33d85312020-08-20 00:55:31 -0700145 - {{ index $accessConfig "ifname" }}
146 - {{ index $coreConfig "ifname" }}
Hyunsun Moon918f26b2020-06-11 13:16:39 -0700147 {{- if .Values.resources.enabled }}
148 resources:
149{{ toYaml .Values.resources.routectl | indent 10 }}
150 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700151 - name: web
152 image: {{ .Values.images.tags.bess | quote }}
153 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
154 command: ["/bin/bash", "-xc", "bessctl http 0.0.0.0 8000"]
155 {{- if .Values.resources.enabled }}
156 resources:
157{{ toYaml .Values.resources.web | indent 10 }}
158 {{- end }}
159 - name: cpiface
Hyunsun Moond60fcaf2020-07-14 16:09:13 -0700160 image: {{ .Values.images.tags.pfcpiface | quote }}
161 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
162 command: ["pfcpiface"]
163 args:
164 - -config
165 - /tmp/conf/upf.json
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700166 {{- if .Values.resources.enabled }}
167 resources:
168{{ toYaml .Values.resources.cpiface | indent 10 }}
169 {{- end }}
Hyunsun Moond60fcaf2020-07-14 16:09:13 -0700170 volumeMounts:
171 - name: configs
172 mountPath: /tmp/conf
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700173 volumes:
174 - name: configs
175 configMap:
Hyunsun Moon33d85312020-08-20 00:55:31 -0700176 name: upf
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700177 defaultMode: 493
Hyunsun Moon33d85312020-08-20 00:55:31 -0700178 {{- if .Values.config.upf.hugepage.enabled }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700179 - name: hugepages
180 emptyDir:
181 medium: HugePages
Hyunsun Moon617dc052020-06-21 20:13:22 -0500182 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700183 {{- if .Values.config.coreDump.enabled }}
184 - name: host-rootfs
185 hostPath:
186 path: /
187 - name: coredump
188 hostPath:
189 path: {{ .Values.config.coreDump.path }}
190 {{- end }}