spec:
  replicas: 1
  strategy:
    type: Recreate
    resources:
      limits:
        cpu: "500m"
        memory: "512Mi"
  template:
    metadata:
        project: demo
        provider: fabric8
    spec:
      initContainers:
        - args:
            - '-source-keystore'
            - /applicationtrust/existing.jks
            - '-source-keystore-password'
            - changeit
            - '-keystore'
            - /modifiedtrust/new.jks
            - '-ca-file'
            - /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
          image: 'openshift/pemtokeystore:v0.2.0'
          imagePullPolicy: IfNotPresent
          name: openshift-trust-importer
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
            - mountPath: /applicationtrust
              name: application-truststore
            - mountPath: /modifiedtrust
              name: modified-truststore
      containers:
      - args:
         - /usr/local/s2i/run
#         - "${appargs}"
        name: demo
        volumeMounts:
          - name: sample
            mountPath: /sample
          - name: jolokia
            mountPath: /opt/jolokia/etc
          - mountPath: /modifiedtrust
            name: modified-truststore
        ports:
          -
            name: https
            containerPort: 8443
            protocol: TCP
          -
            name: managementhttp
            containerPort: 8081
            protocol: TCP
          -
            name: prometheus
            containerPort: 9779
            protocol: TCP
          -
            name: jolokia
            containerPort: 8778
            protocol: TCP
        env:
          - name: TMPDIR
            value: "/sample"
          - name: JAEGER_SERVICE_NAME
            value: "demoapp"
          - name: JAEGER_SAMPLER_TYPE
            value: "const"
          - name: JAEGER_SAMPLER_PARAM
            value: "1.0"
          - name: JAVA_OPTIONS
            value: "-Djava.io.tmpdir=/sample -Djavax.net.ssl.trustStore=/modifiedtrust/new.jks -Djava.net.ssl.trustStorePassword=changeit -agentlib:jdwp=transport=dt_socket,address=5005,server=y,suspend=n" #-Djavax.net.debug=all,trustmanager
          - name: JAEGER_ENDPOINT
            valueFrom:
              secretKeyRef:
                key: JAEGER_ENDPOINT_INTERNAL
                name: tracing-secret
          - name: JAEGER_USER
            valueFrom:
              secretKeyRef:
                key: JAEGER_USER
                name: tracing-secret
          - name: JAEGER_PASSWORD
            valueFrom:
              secretKeyRef:
                key: JAEGER_PASSWORD
                name: tracing-secret
          - name: SPLUNK_TOKEN
            valueFrom:
              configMapKeyRef:
                name: splunk
                key: token
        resources:
            requests:
              cpu: "0.1"
              memory: 200Mi
            limits:
              cpu: "0.5"
              memory: 550Mi
        livenessProbe:
          httpGet:
            path: /health
            port: 8081
            scheme: HTTPS
          initialDelaySeconds: 1
          timeoutSeconds: 30
          periodSeconds: 60
          successThreshold: 1
          failureThreshold: 150
        readinessProbe:
          httpGet:
            path: /health
            port: 8081
            scheme: HTTPS
          initialDelaySeconds: 1
          timeoutSeconds: 30
          periodSeconds: 1
          successThreshold: 1
          failureThreshold: 500
      - image: xxxx/xxxx:x.x.x
        volumeMounts:
          - name: sample
            mountPath: /sample
          - mountPath: /xxxxx/xxxxx
            name: xxxx
            subPath: xxxxx
          - mountPath: xxxxx
            name: xxxx
            subPath: xxxxx
        imagePullPolicy: Always
        name: xxxxx
        ports:
          - containerPort: 48000
            protocol: TCP
          - containerPort: 48001
            protocol: TCP
          - containerPort: 48002
            protocol: TCP
        env:
          - name: HUB_IP
            valueFrom:
               secretKeyRef:
                 key: HUB-IP
                 name: xxxx-secret
          - name: HUB_DOMAIN
            valueFrom:
              secretKeyRef:
                 key: HUB-DOMAIN
                 name: xxxxx-secret
          - name: HUB_USER
            valueFrom:
              secretKeyRef:
                key: HUB-USER
                name: xxxx-secret
          - name: HUB_PASSWORD
            valueFrom:
              secretKeyRef:
                key: HUB-PASSWORD
                name: xxxx-secret
        resources:
            requests:
              cpu: "0.1"
              memory: 50Mi
            limits:
              cpu: "0.2"
              memory: 150Mi
        readinessProbe:
          failureThreshold: 500
          initialDelaySeconds: 1
          periodSeconds: 10
          successThreshold: 1
          tcpSocket:
            port: 48000
          timeoutSeconds: 1
        livenessProbe:
          failureThreshold: 500
          initialDelaySeconds: 1
          periodSeconds: 10
          successThreshold: 1
          tcpSocket:
            port: 48000
          timeoutSeconds: 1
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File