blob: 20d05d6371d6e491c8bd91b5ad4ff1166564252a [file] [log] [blame]
Jeremy Ronquillo223db002020-06-05 10:28:22 -07001{{/*
Jeremy Ronquilloec2d3e42020-06-05 11:33:39 -07002# Copyright 2020-present Open Networking Foundation
Jeremy Ronquillo223db002020-06-05 10:28:22 -07003
Jeremy Ronquillo6046ce32020-06-18 11:06:29 -07004# SPDX-License-Identifier: LicenseRef-ONF-Member-Only-1.0
Jeremy Ronquillo223db002020-06-05 10:28:22 -07005*/}}
6
Hyunsun Moon33d85312020-08-20 00:55:31 -07007{{- $upfConfig := index .Values.config.upf.cfgFiles "upf.json" }}
8{{- $accessConfig := index $upfConfig "access" }}
9{{- $coreConfig := index $upfConfig "core" }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070010---
11apiVersion: apps/v1
12kind: StatefulSet
13metadata:
Hyunsun Moon33d85312020-08-20 00:55:31 -070014 name: upf
Jeremy Ronquillo223db002020-06-05 10:28:22 -070015 labels:
Hyunsun Moon33d85312020-08-20 00:55:31 -070016{{ tuple "upf" . | include "omec-user-plane.metadata_labels" | indent 4 }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070017spec:
18 replicas: 1
Hyunsun Moon33d85312020-08-20 00:55:31 -070019 serviceName: upf-headless
Jeremy Ronquillo223db002020-06-05 10:28:22 -070020 selector:
21 matchLabels:
Hyunsun Moon33d85312020-08-20 00:55:31 -070022{{ tuple "upf" . | include "omec-user-plane.metadata_labels" | indent 6 }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070023 template:
24 metadata:
25 labels:
Hyunsun Moon33d85312020-08-20 00:55:31 -070026{{ tuple "upf" . | include "omec-user-plane.metadata_labels" | indent 8 }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070027 annotations:
28 k8s.v1.cni.cncf.io/networks: '[
29 {
Hyunsun Moon33d85312020-08-20 00:55:31 -070030 "name": "access-net",
31 "interface": {{ index $accessConfig "ifname" | quote }},
Hyunsun Moon1905a6e2020-11-09 05:59:55 +000032 {{- if hasKey .Values.config.upf.access "mac" }}
33 "mac": {{ .Values.config.upf.access.mac | quote }},
34 {{- end }}
Hyunsun Moond457d182020-09-10 15:52:09 -070035 "ips": [{{ .Values.config.upf.access.ip | quote }}]
Jeremy Ronquillo223db002020-06-05 10:28:22 -070036 },
37 {
Hyunsun Moon33d85312020-08-20 00:55:31 -070038 "name": "core-net",
39 "interface": {{ index $coreConfig "ifname" | quote }},
Hyunsun Moon1905a6e2020-11-09 05:59:55 +000040 {{- if hasKey .Values.config.upf.core "mac" }}
41 "mac": {{ .Values.config.upf.core.mac | quote }},
42 {{- end }}
Hyunsun Moond457d182020-09-10 15:52:09 -070043 "ips": [{{ .Values.config.upf.core.ip | quote }}]
Jeremy Ronquillo223db002020-06-05 10:28:22 -070044 }
45 ]'
46 spec:
47 shareProcessNamespace: true
48 {{- if .Values.nodeSelectors.enabled }}
49 nodeSelector:
Hyunsun Moon33d85312020-08-20 00:55:31 -070050 {{ .Values.nodeSelectors.upf.label }}: {{ .Values.nodeSelectors.upf.value }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070051 {{- end }}
Hyunsun Moone3500a82021-05-08 18:12:08 -070052 {{- if hasKey .Values.images "pullSecrets" }}
Hyunsun Moon8da17882020-10-14 21:28:44 -050053 imagePullSecrets:
Hyunsun Moone3500a82021-05-08 18:12:08 -070054{{ toYaml .Values.images.pullSecrets | indent 8 }}
Hyunsun Moon8da17882020-10-14 21:28:44 -050055 {{- end }}
Hyunsun Moon918f26b2020-06-11 13:16:39 -070056 initContainers:
57 - name: bess-init
58 image: {{ .Values.images.tags.bess | quote }}
59 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
60 command: ["sh", "-xec"]
61 args:
Hyunsun Moon33d85312020-08-20 00:55:31 -070062 - ip route replace {{ .Values.config.upf.enb.subnet }} via {{ .Values.config.upf.access.gateway }};
63 ip route replace default via {{ .Values.config.upf.core.gateway }} metric 110;
Hyunsun Moon617dc052020-06-21 20:13:22 -050064 iptables -I OUTPUT -p icmp --icmp-type port-unreachable -j DROP;
Hyunsun Moonf2adb7f2021-06-15 02:18:24 -070065 ping {{ .Values.config.upf.access.gateway }} -c 5;
66 ping {{ .Values.config.upf.core.gateway }} -c 5;
Hyunsun Moon918f26b2020-06-11 13:16:39 -070067 securityContext:
68 capabilities:
69 add:
70 - NET_ADMIN
Jeremy Ronquillo223db002020-06-05 10:28:22 -070071 {{- if .Values.config.coreDump.enabled }}
Hyunsun Moon7f03a772020-09-27 23:23:50 -050072{{ tuple "upf" . | include "omec-user-plane.coredump_init" | indent 6 }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070073 {{- end }}
74 containers:
Jeremy Ronquillo223db002020-06-05 10:28:22 -070075 - name: bessd
76 image: {{ .Values.images.tags.bess | quote }}
77 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
78 securityContext:
Hyunsun Moon785d81b2020-11-06 05:56:21 +000079 {{- if .Values.config.upf.privileged }}
80 privileged: true
81 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070082 capabilities:
83 add:
84 - IPC_LOCK
Jeremy Ronquillo223db002020-06-05 10:28:22 -070085 stdin: true
86 tty: true
Hyunsun Moon617dc052020-06-21 20:13:22 -050087 command: ["/bin/bash", "-xc"]
88 args:
Hyunsun Moon33d85312020-08-20 00:55:31 -070089 {{- if .Values.config.upf.hugepage.enabled }}
Hyunsun Moon617dc052020-06-21 20:13:22 -050090 - bessd -f -grpc-url=0.0.0.0:10514
91 {{- else }}
92 - bessd -m 0 -f -grpc-url=0.0.0.0:10514
93 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -070094 lifecycle:
95 postStart:
96 exec:
97 command: ["/etc/bess/conf/bessd-poststart.sh"]
98 livenessProbe:
99 tcpSocket:
100 port: 10514
101 initialDelaySeconds: 15
102 periodSeconds: 20
103 resources:
104 requests:
105 {{- if .Values.resources.enabled }}
106{{ toYaml .Values.resources.bess.requests | indent 12 }}
107 {{- end }}
Hyunsun Moon33d85312020-08-20 00:55:31 -0700108 {{- if .Values.config.upf.hugepage.enabled }}
Hyunsun Moon617dc052020-06-21 20:13:22 -0500109 hugepages-1Gi: 2Gi
110 {{- end }}
Hyunsun Moon33d85312020-08-20 00:55:31 -0700111 {{- if .Values.config.upf.sriov.enabled }}
Hyunsun Moon6575f7e2021-05-19 16:55:42 -0700112 intel.com/intel_sriov_vfio: 2
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700113 {{- end }}
114 limits:
115 {{- if .Values.resources.enabled }}
116{{ toYaml .Values.resources.bess.limits | indent 12 }}
117 {{- end }}
Hyunsun Moon33d85312020-08-20 00:55:31 -0700118 {{- if .Values.config.upf.hugepage.enabled }}
Hyunsun Moon617dc052020-06-21 20:13:22 -0500119 hugepages-1Gi: 2Gi
120 {{- end }}
Hyunsun Moon33d85312020-08-20 00:55:31 -0700121 {{- if .Values.config.upf.sriov.enabled }}
Hyunsun Moon6575f7e2021-05-19 16:55:42 -0700122 intel.com/intel_sriov_vfio: 2
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700123 {{- end }}
124 env:
125 - name: CONF_FILE
Hyunsun Moond60fcaf2020-07-14 16:09:13 -0700126 value: /etc/bess/conf/upf.json
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700127 volumeMounts:
Hyunsun Moon33d85312020-08-20 00:55:31 -0700128 {{- if .Values.config.upf.hugepage.enabled }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700129 - name: hugepages
130 mountPath: /dev/hugepages
Hyunsun Moon617dc052020-06-21 20:13:22 -0500131 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700132 - name: configs
133 mountPath: /etc/bess/conf
134 {{- if .Values.config.coreDump.enabled }}
135 - name: coredump
136 mountPath: /tmp/coredump
137 {{- end }}
Hyunsun Moon918f26b2020-06-11 13:16:39 -0700138 - name: routectl
139 image: {{ .Values.images.tags.bess | quote }}
140 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
141 env:
142 - name: PYTHONUNBUFFERED
143 value: "1"
144 command: ["/opt/bess/bessctl/conf/route_control.py"]
145 args:
146 - -i
Hyunsun Moon33d85312020-08-20 00:55:31 -0700147 - {{ index $accessConfig "ifname" }}
148 - {{ index $coreConfig "ifname" }}
Hyunsun Moon918f26b2020-06-11 13:16:39 -0700149 {{- if .Values.resources.enabled }}
150 resources:
151{{ toYaml .Values.resources.routectl | indent 10 }}
152 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700153 - name: web
154 image: {{ .Values.images.tags.bess | quote }}
155 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
156 command: ["/bin/bash", "-xc", "bessctl http 0.0.0.0 8000"]
157 {{- if .Values.resources.enabled }}
158 resources:
159{{ toYaml .Values.resources.web | indent 10 }}
160 {{- end }}
161 - name: cpiface
Hyunsun Moond60fcaf2020-07-14 16:09:13 -0700162 image: {{ .Values.images.tags.pfcpiface | quote }}
163 imagePullPolicy: {{ .Values.images.pullPolicy | quote }}
164 command: ["pfcpiface"]
165 args:
166 - -config
167 - /tmp/conf/upf.json
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700168 {{- if .Values.resources.enabled }}
169 resources:
170{{ toYaml .Values.resources.cpiface | indent 10 }}
171 {{- end }}
Hyunsun Moond60fcaf2020-07-14 16:09:13 -0700172 volumeMounts:
173 - name: configs
174 mountPath: /tmp/conf
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700175 volumes:
176 - name: configs
177 configMap:
Hyunsun Moon33d85312020-08-20 00:55:31 -0700178 name: upf
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700179 defaultMode: 493
Hyunsun Moon33d85312020-08-20 00:55:31 -0700180 {{- if .Values.config.upf.hugepage.enabled }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700181 - name: hugepages
182 emptyDir:
183 medium: HugePages
Hyunsun Moon617dc052020-06-21 20:13:22 -0500184 {{- end }}
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700185 {{- if .Values.config.coreDump.enabled }}
186 - name: host-rootfs
187 hostPath:
188 path: /
189 - name: coredump
190 hostPath:
191 path: {{ .Values.config.coreDump.path }}
192 {{- end }}