template.yml

apiVersion: v1
kind: Template
metadata:
  name: openwhisk-ephemeral
  annotations:
    openshift.io/display-name: Apache OpenWhisk (Ephemeral)
    description: Apache OpenWhisk serverless platform, without persistent storage. You can leave all parameters blank and sensible defaults will be used.
    iconClass: icon-apache
    tags: serverless, openwhisk
    openshift.io/long-description: This template provides a small OpenWhisk installation. Data is not stored on persistent storage, so any restart of the service will result in all data being lost.
    openshift.io/provider-display-name: Red Hat, Inc.
    openshift.io/documentation-url: https://github.com/projectodd/openwhisk-openshift/
    openshift.io/support-url: https://github.com/projectodd/openwhisk-openshift/issues
message: "To get started download the `wsk` CLI from https://github.com/apache/incubator-openwhisk-cli/releases/\n\nYour OpenWhisk authentication token: ${WHISK_SYSTEM_AUTH}\n\nYour OpenWhisk api endpoint can be found in the console UI after closing the template wizard.\n\nConfigure your `wsk` client with `wsk property set --auth <your_auth> --apihost <your_apihost>`"
labels:
  template: openwhisk-ephemeral-template

parameters:
- name: CONTROLLER_INSTANCES
  description: The desired number of controllers
  value: "1"
  required: true
- name: CONTROLLER_MEMORY_REQUEST
  description: The minimum container memory for each Controller
  value: "512Mi"
  required: true
- name: CONTROLLER_MEMORY_LIMIT
  description: The maximum container memory for each Controller
  value: "512Mi"
  required: true
- name: CONTROLLER_JAVA_OPTS
  description: JVM options to pass to the Controller - recommended to set at least Xmx here
  value: "-Xmx256m"
  required: true
- name: CONTROLLER_HA
  description: Boolean denoting whether HA mode
  value: "FALSE"
  required: true
- name: CONTROLLER_LOCALBOOKKEEPING
  description: Boolean denoting whether load balancer data is local or shared
  value: "TRUE"
  required: true
- name: CONTROLLER_INVOKER_BUSYTHRESHOLD
  description: Value that controllers when the Controller(s) considers the Invoker(s) to be full. This should be less than or equal to INVOKER_MAX_CONTAINERS. Making them equal will give the highest function density but setting it a bit less than INVOKER_MAX_CONTAINERS can improve overall system throughput and reduce Invoker function container thrashing.
  value: "8"
  required: true
- name: CONTROLLER_INVOKER_BLACKBOXFRACTION
  description: What percent of Invokers should be used for blackbox (user-provider container image) actions. At least one Invoker will be dedicated for blackbox actions as long as 2 or more Invokers are deployed no matter what percentage is set here.
  value: "10%"
  required: true
- name: AKKA_CLUSTER_SEED_NODES
  description: Hostnames of akka seed nodes
  value: "controller-0.controller:2551"
  required: true
- name: INVOKER_INSTANCES
  description: The desired number of invokers
  value: "1"
  required: true
- name: INVOKER_CPU_REQUEST
  description: The minimum cpu cores for each Invoker
  value: "500m"
  required: true
- name: INVOKER_MEMORY_REQUEST
  description: The minimum container memory for each Invoker
  value: "1Gi"
  required: true
- name: INVOKER_MEMORY_LIMIT
  description: The maximum container memory for each Invoker
  value: "1Gi"
  required: true
- name: INVOKER_JAVA_OPTS
  description: JVM options to pass to the Invoker - recommended to set at least Xmx here
  value: "-Xmx512m"
  required: true
- name: INVOKER_MAX_CONTAINERS
  description: Maximum function containers per Invoker
  value: "8"
  required: true
- name : INVOKER_CONTAINER_TIMEOUT
  description: Maximum time an idle function container should stick around before the Invoker deletes it. The longer the timeout, the longer functions stay warm. The shorter the timeout, the less resources consumed by idle function containers. Example values - "5 minutes", "30 seconds", etc.
  value: "2 minutes"
  required: true
- name: INVOKER_CONTAINER_PAUSE_TIMEOUT
  description: Maximum time an idle function container should stick around before the Invoker marks it as paused. Example values - "5 seconds", "500 milliseconds", etc.
  value: "5 seconds"
  required: true
- name: INVOKER_CONTAINER_CONCURRENT_STARTS
  description: Maximum number of action containers each Invoker will attempt to start at once. Raise or lower this number depending on your throughput requirements, cold start rate, number of Invokers you deploy, and how quickly your cluster can spin up new pods.
  value: "10"
  required: true
- name: INVOKER_LOGSTORE_PROVIDER
  description: Apache OpenWhisk LogStoreProvider implementation. Setting this to whisk.core.containerpool.logging.LogDriverLogStoreProvider will increase throughput but users will have to find logs another way, like via Kibana.
  value: "whisk.core.containerpool.logging.DockerToActivationLogStoreProvider"
  required: true
- name: COUCHDB_INSTANCES
  description: The desired number of CouchDB nodes
  value: "1"
  required: true
- name: COUCHDB_CPU_REQUEST
  description: The minimum cpu cores for each CouchDB
  value: "500m"
  required: true
- name: COUCHDB_MEMORY_REQUEST
  description: The minimum container memory for each CouchDB
  value: "256Mi"
  required: true
- name: COUCHDB_MEMORY_LIMIT
  description: The maximum container memory for each CouchDB
  value: "512Mi"
  required: true
- name: COUCHDB_USER
  description: CouchDB Username
  generate: expression
  from: "user[A-Z0-9]{3}"
  required: true
- name: COUCHDB_PASSWORD
  description: CouchDB Password
  generate: expression
  from: "[a-zA-Z0-9]{16}"
  required: true
- name: COUCHDB_SECRET
  description: CouchDB Replication Secret
  generate: expression
  from: "[a-zA-Z0-9]{16}"
  required: true
- name: ZOOKEEPER_NODE_COUNT
  description: Number of Zookeper cluster nodes which will be deployed (odd number of nodes is recomended)
  displayName: Number of Zookeper cluster nodes (odd number of nodes is recomended)
  required: true
  value: "1"
- name: KAFKA_NODE_COUNT
  description: Number of Kafka cluster nodes which will be deployed
  displayName: Number of Kafka cluster nodes
  required: true
  value: "1"
- name: WHISK_SYSTEM_AUTH
  description: OpenWhisk Auth token for whisk.system account
  generate: expression
  from: "789c46b1-71f6-4ed5-8c54-816aa4f8c502:[a-zA-Z0-9]{64}"
  required: true
- name: WHISK_GUEST_AUTH
  description: OpenWhisk Auth token for guest account
  generate: expression
  from: "23bc46b1-71f6-4ed5-8c54-816aa4f8c502:[a-zA-Z0-9]{64}"
  required: true
- name: WHISK_ACTIONS_INVOKES_CONCURRENT
  description: Default number of concurrenct actions per user
  value: "30"
  required: true
- name: WHISK_ACTIONS_INVOKES_CONCURRENT_IN_SYSTEM
  description: Number of concurrent actions allowed across the entire system
  value: "1000"
  required: true
- name: WHISK_ACTIONS_INVOKES_PER_MINUTE
  description: Default number of action invocations per minute per user
  value: "60"
  required: true
- name: WHISK_TRIGGERS_FIRES_PER_MINUTE
  description: Default number of triggers that can fire per minute per user
  value: "60"
  required: true
- name: WHISK_DAYS_TO_KEEP_LOGS
  description: Number of days to keep activation logs before pruning them from the database
  value: "7"
  required: true
- name: WHISK_DAYS_TO_KEEP_ACTIVATIONS
  description: Number of days to keep activation records before pruning them from the database
  value: "30"
  required: true
- name: WHISK_ACTIONS_MEMORY_MAX
  description: Maximum memory an action is allowed to request.
  value: "1024 m"
  required: true
- name: WHISK_ACTIONS_MEMORY_MIN
  description: Minimum memory an action is allowed to request.
  value: "128 m"
  required: true
- name: WHISK_ACTIONS_MEMORY_STD
  description: Default memory an action requests if unspecified.
  value: "256 m"
  required: true
- name: WHISK_KAFKA_REPLICATION_FACTOR
  description: Replication factor for all OpenWhisk topics
  value: "1"
  required: true
- name: WHISK_KAFKA_TOPICS_COMPLETED_RETENTION_BYTES
  description: Maximum bytes to retain for the completed activations topic for each Controller. Each kafka node will consume this many bytes times the number of Controllers just for the completed topics. So, if this is set to 1GB and you have 3 Controllers then expect up to 3GB of disk space used by the Controller topics.
  value: "268435456"
  required: true
- name: WHISK_KAFKA_TOPICS_INVOKER_RETENTION_BYTES
  description: Maximum bytes to retain for each Invoker topic. Each Kafka node will consume this many bytes times the number of Invokers just for the Invoker topics. So, if this is set to 1GB and you have 10 Invokers then expect up to 10GB of disk space used by the Invoker topics.
  value: "268435456"
  required: true
- name: OPENWHISK_VERSION
  description: The DockerHub tag for openwhisk/{controller,invoker}
  value: "rhdemo-9717f07a"
  required: true
- name: PROJECTODD_VERSION
  description: The DockerHub tag for projectodd images
  value: "8ee5579"
  required: true
- name: STRIMZI_VERSION
  description: The DockerHub tag for strimzi images
  value: "0.3.1"
  required: true

objects:

- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: whisk.config
  data:
    whisk_system_namespace: /whisk.system
    whisk_version_date: 2018-01-01T00:00:00Z
    whisk_version_name: OpenWhisk
    whisk_version_tag: latest
- apiVersion: v1
  kind: ConfigMap
  metadata:
    creationTimestamp: null
    name: whisk.limits
  data:
    actions_invokes_concurrent: "${WHISK_ACTIONS_INVOKES_CONCURRENT}"
    actions_invokes_concurrentInSystem: "${WHISK_ACTIONS_INVOKES_CONCURRENT_IN_SYSTEM}"
    actions_invokes_perMinute: "${WHISK_ACTIONS_INVOKES_PER_MINUTE}"
    actions_sequence_maxLength: "50"
    triggers_fires_perMinute: "${WHISK_TRIGGERS_FIRES_PER_MINUTE}"
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: whisk.runtimes
  data:
    runtimes: |
      {
          "bypassPullForLocalImages": false,
          "defaultImagePrefix": "openwhisk",
          "defaultImageTag": "latest",
          "runtimes": {
              "nodejs": [
                  {
                      "kind": "nodejs",
                      "image": {
                          "name": "action-nodejs-6"
                      },
                      "deprecated": true
                  },
                  {
                      "kind": "nodejs:6",
                      "default": true,
                      "image": {
                          "name": "action-nodejs-6"
                      },
                      "deprecated": false
                  },
                  {
                      "kind": "nodejs:8",
                      "default": false,
                      "image": {
                          "name": "action-nodejs-8"
                      },
                      "deprecated": false
                  }
              ],
              "python": [
                  {
                      "kind": "python",
                      "image": {
                          "name": "action-python-2"
                      },
                      "deprecated": false
                  },
                  {
                      "kind": "python:2",
                      "default": true,
                      "image": {
                          "name": "action-python-2"
                      },
                      "deprecated": false
                  },
                  {
                      "kind": "python:3",
                      "image": {
                          "name": "action-python-3"
                      },
                      "deprecated": false
                  }
              ],
              "swift": [
                  {
                      "kind": "swift",
                      "image": {
                          "name": "action-swift-3"
                      },
                      "deprecated": true
                  },
                  {
                      "kind": "swift:3",
                      "image": {
                          "name": "action-swift-3"
                      },
                      "deprecated": true
                  },
                  {
                      "kind": "swift:3.1.1",
                      "default": true,
                      "image": {
                          "name": "action-swift-3"
                      },
                      "deprecated": false
                  }
              ],
              "java": [
                  {
                      "kind": "java",
                      "default": true,
                      "image": {
                          "name": "action-java-8"
                      },
                      "deprecated": false,
                      "attached": {
                          "attachmentName": "jarfile",
                          "attachmentType": "application/java-archive"
                      },
                      "sentinelledLogs": false,
                      "requireMain": true
                  }
              ],
              "php": [
                  {
                      "kind": "php:7.1",
                      "default": true,
                      "deprecated": false,
                      "image": {
                          "name": "action-php-7"
                      }
                  }
              ]
          },
          "blackboxes": [
              {
                  "name": "dockerskeleton"
              }
          ]
      }
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: strimzi-openwhisk
    labels:
      strimzi.io/type: kafka
      strimzi.io/kind: cluster
  data:
    kafka-nodes: "${KAFKA_NODE_COUNT}"
    kafka-image: "strimzi/kafka:${STRIMZI_VERSION}"
    kafka-healthcheck-delay: "60"
    kafka-healthcheck-timeout: "5"
    zookeeper-nodes: "${ZOOKEEPER_NODE_COUNT}"
    zookeeper-image: "strimzi/zookeeper:${STRIMZI_VERSION}"
    zookeeper-healthcheck-delay: "30"
    zookeeper-healthcheck-timeout: "5"
    KAFKA_DEFAULT_REPLICATION_FACTOR: "${KAFKA_NODE_COUNT}"
    KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: "${KAFKA_NODE_COUNT}"
    KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: "${KAFKA_NODE_COUNT}"
    kafka-storage: |-
      { "type": "ephemeral" }
    zookeeper-storage: |-
      { "type": "ephemeral" }
- apiVersion: v1
  kind: Service
  metadata:
    name: controller
    labels:
      name: controller
  spec:
    selector:
      name: controller
    clusterIP: None
    ports:
      - port: 8080
        targetPort: 8080
        name: http
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: controller.config
  data:
    controller_opts: "-Dwhisk.spi.LoadBalancerProvider=whisk.core.loadBalancer.ShardingContainerPoolBalancer"
    java_opts: "${CONTROLLER_JAVA_OPTS}"
- apiVersion: apps/v1beta1
  kind: StatefulSet
  metadata:
    name: controller
    annotations:
      template.alpha.openshift.io/wait-for-ready: "true"
    labels:
      name: controller
  spec:
    replicas: ${CONTROLLER_INSTANCES}
    serviceName: "controller"
    template:
      metadata:
        labels:
          name: controller
      spec:
        restartPolicy: Always
        containers:
        - name: controller
          imagePullPolicy: IfNotPresent
          image: projectodd/controller:${OPENWHISK_VERSION}
          command: ["/bin/bash", "-c", "COMPONENT_NAME=$(hostname | cut -d'-' -f2) CONFIG_akka_remote_netty_tcp_hostname=$(hostname).controller /init.sh `hostname | cut -d'-' -f2`"]
          ports:
          - name: controller
            containerPort: 8080
          - name: akka
            containerPort: 2551
          resources:
            requests:
              memory: ${CONTROLLER_MEMORY_REQUEST}
            limits:
              memory: ${CONTROLLER_MEMORY_LIMIT}
          env:
          # Properties for controller HA configuration
          # Must change these if changing number of replicas
          - name: "CONTROLLER_LOCALBOOKKEEPING"
            value: ${CONTROLLER_LOCALBOOKKEEPING}
          - name: "CONTROLLER_HA"
            value: ${CONTROLLER_HA}
          - name: "CONTROLLER_INSTANCES"
            value: ${CONTROLLER_INSTANCES}
          - name: "AKKA_CLUSTER_SEED_NODES"
            value: ${AKKA_CLUSTER_SEED_NODES}
          - name: "CONFIG_akka_actor_provider"
            value: "cluster"
          - name: "CONFIG_akka_remote_netty_tcp_bindPort"
            value: "2551"
          - name: "CONFIG_akka_remote_netty_tcp_port"
            value: "2551"
          - name: "CONFIG_whisk_loadbalancer_invokerBusyThreshold"
            value: "${CONTROLLER_INVOKER_BUSYTHRESHOLD}"
          - name: "CONFIG_whisk_loadbalancer_blackboxFraction"
            value: "${CONTROLLER_INVOKER_BLACKBOXFRACTION}"
          - name: "CONFIG_whisk_memory_max"
            value: "${WHISK_ACTIONS_MEMORY_MAX}"
          - name: "CONFIG_whisk_memory_min"
            value: "${WHISK_ACTIONS_MEMORY_MIN}"
          - name: "CONFIG_whisk_memory_std"
            value: "${WHISK_ACTIONS_MEMORY_STD}"
          - name: "CONFIG_whisk_kafka_replicationFactor"
            value: "${WHISK_KAFKA_REPLICATION_FACTOR}"
          - name: "CONFIG_whisk_kafka_topics_completed_retentionBytes"
            value: "${WHISK_KAFKA_TOPICS_COMPLETED_RETENTION_BYTES}"
  
          # extra JVM arguments
          - name: "JAVA_OPTS"
            valueFrom:
              configMapKeyRef:
                name: controller.config
                key: java_opts
  
          # extra controller arguments
          - name: "CONTROLLER_OPTS"
            valueFrom:
              configMapKeyRef:
                name: controller.config
                key: controller_opts
  
          # action runtimes
          - name: "RUNTIMES_MANIFEST"
            valueFrom:
              configMapKeyRef:
                name: whisk.runtimes
                key: runtimes
  
          # deployment version information
          - name:  "WHISK_VERSION_NAME"
            valueFrom:
              configMapKeyRef:
                name: whisk.config
                key: whisk_version_name
          - name:  "WHISK_VERSION_DATE"
            valueFrom:
              configMapKeyRef:
                name: whisk.config
                key: whisk_version_date
          - name: "WHISK_VERSION_BUILDNO"
            valueFrom:
              configMapKeyRef:
                name: whisk.config
                key: whisk_version_tag
  
          # specify limits
          - name: "LIMITS_ACTIONS_INVOKES_PERMINUTE"
            valueFrom:
              configMapKeyRef:
                name: whisk.limits
                key: actions_invokes_perMinute
          - name: "LIMITS_ACTIONS_INVOKES_CONCURRENT"
            valueFrom:
              configMapKeyRef:
                name: whisk.limits
                key: actions_invokes_concurrent
          - name: "LIMITS_ACTIONS_INVOKES_CONCURRENTINSYSTEM"
            valueFrom:
              configMapKeyRef:
                name: whisk.limits
                key: actions_invokes_concurrentInSystem
          - name: "LIMITS_TRIGGERS_FIRES_PERMINUTE"
            valueFrom:
              configMapKeyRef:
                name: whisk.limits
                key: triggers_fires_perMinute
          - name: "LIMITS_ACTIONS_SEQUENCE_MAXLENGTH"
            valueFrom:
              configMapKeyRef:
                name: whisk.limits
                key: actions_sequence_maxLength
  
          # properties for Kafka connection
          - name: "KAFKA_HOSTS"
            value: "$(STRIMZI_OPENWHISK_KAFKA_SERVICE_HOST):$(STRIMZI_OPENWHISK_KAFKA_SERVICE_PORT_CLIENTS)"
  
          # properties for DB connection
          - name: "CONFIG_whisk_couchdb_username"
            valueFrom:
              secretKeyRef:
                name: db.auth
                key: db_username
          - name: "CONFIG_whisk_couchdb_password"
            valueFrom:
              secretKeyRef:
                name: db.auth
                key: db_password
          - name:  "CONFIG_whisk_couchdb_protocol"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_protocol
          - name: "CONFIG_whisk_couchdb_host"
            value: "$(COUCHDB_SERVICE_HOST)"
          - name: "CONFIG_whisk_couchdb_port"
            value: "$(COUCHDB_SERVICE_PORT_COUCHDB)"
          - name: "CONFIG_whisk_couchdb_provider"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_provider
          - name: "CONFIG_whisk_couchdb_databases_WhiskActivation"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_whisk_activations
          - name: "CONFIG_whisk_couchdb_databases_WhiskEntity"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_whisk_actions
          - name: "CONFIG_whisk_couchdb_databases_WhiskAuth"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_whisk_auths
  
          # must match port used in livenessProbe below
          - name: "PORT"
            value: "8080"
  
          livenessProbe:
            httpGet:
              path: "/ping"
              port: 8080
              scheme: "HTTP"
            initialDelaySeconds: 10
            periodSeconds: 10
            timeoutSeconds: 10
            failureThreshold: 5
          readinessProbe:
            httpGet:
              path: "/ping"
              port: 8080
              scheme: "HTTP"
            initialDelaySeconds: 10
            periodSeconds: 5
            timeoutSeconds: 10
            failureThreshold: 5
        initContainers:
        - name: wait-for-services
          image: busybox
          command: ['sh', '-cu', 'until nslookup couchdb && nslookup strimzi-openwhisk-kafka; do echo waiting for services; sleep 1; done']
        - name: wait-for-couchdb
          image: busybox
          command: ['sh', '-c', 'until wget -T 5 --spider http://${COUCHDB_SERVICE_HOST}:${COUCHDB_SERVICE_PORT}/${DB_WHISK_ACTIVATIONS}; do echo waiting for couchdb; sleep 2; done;']
          env:
          - name: "DB_WHISK_ACTIVATIONS"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_whisk_activations
- apiVersion: batch/v1
  kind: Job
  metadata:
    name: install-catalog
  spec:
    activeDeadlineSeconds: 600
    template:
      metadata:
        name: install-catalog
      spec:
        containers:
        - name: catalog
          image: projectodd/whisk_catalog:${PROJECTODD_VERSION}
          env:
            - name: "WHISK_AUTH"
              valueFrom:
                secretKeyRef:
                  name: whisk.auth
                  key: system
            - name: "WHISK_API_HOST_NAME"
              value: "http://controller:8080"
        initContainers:
        - name: wait-for-controller
          image: busybox
          command: ['sh', '-c', 'until wget -T 5 --spider http://controller:8080/ping; do echo waiting for controller; sleep 2; done;']
        restartPolicy: Never
- apiVersion: v1
  kind: Service
  metadata:
    name: couchdb
    labels:
      name: couchdb
  spec:
    selector:
      name: couchdb
    ports:
      - port: 5984
        targetPort: 5984
        name: couchdb
- apiVersion: v1
  kind: Service
  metadata:
    name: couchdb-headless
    labels:
      name: couchdb-headless
  spec:
    selector:
      name: couchdb
    ports:
    - name: couchdb
      port: 5984
    clusterIP: None
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: db.config
  data:
    db_prefix: test_
    db_protocol: http
    db_provider: CouchDB
    db_whisk_actions: test_whisks
    db_whisk_activations: test_activations
    db_whisk_auths: test_subjects
    db_days_to_keep_logs: "${WHISK_DAYS_TO_KEEP_LOGS}"
    db_days_to_keep_activations: "${WHISK_DAYS_TO_KEEP_ACTIVATIONS}"
- apiVersion: apps/v1beta1
  kind: StatefulSet
  metadata:
    name: couchdb
    labels:
      name: couchdb
  spec:
    replicas: ${COUCHDB_INSTANCES}
    serviceName: couchdb-headless
    template:
      metadata:
        labels:
          name: couchdb
      spec:
        restartPolicy: Always
        volumes:
        - name: couchdb-data
          emptyDir: {}
        containers:
        - name: couchdb
          imagePullPolicy: IfNotPresent
          image: projectodd/whisk_couchdb:${PROJECTODD_VERSION}
          command: ["/init.sh"]
          ports:
          - name: couchdb
            containerPort: 5984
          - name: epmd
            containerPort: 4369
          - containerPort: 9100
          resources:
            requests:
              cpu: "${COUCHDB_CPU_REQUEST}"
              memory: ${COUCHDB_MEMORY_REQUEST}
            limits:
              memory: ${COUCHDB_MEMORY_LIMIT}
          env:
          - name: "DB_PREFIX"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_prefix
          - name: "DB_HOST"
            value: "127.0.0.1"
          - name: "DB_PORT"
            value: "$(COUCHDB_SERVICE_PORT_COUCHDB)"
          - name: "COUCHDB_USER"
            valueFrom:
              secretKeyRef:
                name: db.auth
                key: db_username
          - name: "COUCHDB_PASSWORD"
            valueFrom:
              secretKeyRef:
                name: db.auth
                key: db_password
          - name: "COUCHDB_SECRET"
            valueFrom:
              secretKeyRef:
                name: db.auth
                key: db_secret
          - name: "NODENAME_HOSTNAME"
            valueFrom:
              fieldRef:
                fieldPath: metadata.name
          - name: "NODENAME_SUBDOMAIN"
            value: "couchdb-headless"
          - name: "COUCHDB_NODE_COUNT"
            value: "${COUCHDB_INSTANCES}"
          - name: "AUTH_WHISK_SYSTEM"
            valueFrom:
              secretKeyRef:
                name: whisk.auth
                key: system
          - name: "AUTH_GUEST"
            valueFrom:
              secretKeyRef:
                name: whisk.auth
                key: guest
          volumeMounts:
          - name: couchdb-data
            mountPath: "/opt/couchdb/data"
          readinessProbe:
            httpGet:
              port: 5984
              path: "/_utils/"
            initialDelaySeconds: 10
            periodSeconds: 15
            failureThreshold: 10
            timeoutSeconds: 3
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: invoker.config
  data:
    docker_image_prefix: "projectodd"
    docker_image_tag: ${PROJECTODD_VERSION}
    docker_registry: ""
    invoker_container_dns: ""
    invoker_container_network: bridge
    invoker_logs_dir: ""
    invoker_opts: "-Dwhisk.spi.ContainerFactoryProvider=whisk.core.containerpool.kubernetes.KubernetesContainerFactoryProvider"
    invoker_use_runc: "false"
    java_opts: "${INVOKER_JAVA_OPTS}"
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: invoker
  data:
    init: |
      export COMPONENT_NAME=$(hostname | cut -d'-' -f2)
      # Dynamically determine API gateway host
      export TOKEN="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)"
      export NAMESPACE="$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)"
      export APIGW_HOST=$(curl -s --cacert /var/run/secrets/kubernetes.io/serviceaccount/ca.crt -H "Authorization: Bearer ${TOKEN}" "https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT}/oapi/v1/namespaces/${NAMESPACE}/routes/openwhisk?pretty=true" | grep '"host":' | head -n 1 | awk -F '"' '{print $4}')
      export APIGW_HOST_V2=${APIGW_HOST}
      export WHISK_API_HOST_NAME=${APIGW_HOST}
      exec /init.sh
- apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: openwhisk
- apiVersion: v1
  kind: RoleBinding
  metadata:
    name: openwhisk
  roleRef:
    name: edit
  subjects:
    - kind: ServiceAccount
      name: openwhisk
- apiVersion: apps/v1beta1
  kind: StatefulSet
  metadata:
    name: invoker
    labels:
      name: invoker
  spec:
    replicas: ${INVOKER_INSTANCES}
    serviceName: "invoker"
    template:
      metadata:
        labels:
          name: invoker
      spec:
        restartPolicy: Always
        volumes:
        - name: invoker-config
          configMap:
            name: invoker
        serviceAccountName: openwhisk
  
        initContainers:
        - name: wait-for-services
          image: busybox
          command: ['sh', '-cu', 'until nslookup couchdb && nslookup strimzi-openwhisk-zookeeper && nslookup strimzi-openwhisk-kafka; do echo waiting for services; sleep 1; done']
        - name: wait-for-controller
          image: busybox
          command: ['sh', '-c', 'until wget -T 5 --spider http://controller:8080/ping; do echo waiting for controller; sleep 2; done;']
  
        containers:
        - name: invoker
          imagePullPolicy: IfNotPresent
          image: projectodd/invoker:${OPENWHISK_VERSION}
          command: [ "/bin/bash", "-o", "allexport", "/invoker_config/init" ]
          ports:
          - name: invoker
            containerPort: 8080
          resources:
            requests:
              cpu: "${INVOKER_CPU_REQUEST}"
              memory: ${INVOKER_MEMORY_REQUEST}
            limits:
              memory: ${INVOKER_MEMORY_LIMIT}
          volumeMounts:
          - name: invoker-config
            mountPath: "/invoker_config"
          env:
            - name: "PORT"
              value: "8080"
  
            # Generate stable invoker names from the StatefulSet names
            - name: "INVOKER_NAME"
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
  
            # Docker-related options
            - name: "INVOKER_CONTAINER_NETWORK"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: invoker_container_network
            - name: "INVOKER_CONTAINER_DNS"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: invoker_container_dns
            - name: "INVOKER_USE_RUNC"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: invoker_use_runc
            - name: "INVOKER_CORESHARE"
              value: "1"
            - name: "INVOKER_NUMCORE"
              value: "${INVOKER_MAX_CONTAINERS}"
            - name: "CONFIG_whisk_containerProxy_timeouts_idleContainer"
              value: "${INVOKER_CONTAINER_TIMEOUT}"
            - name: "CONFIG_whisk_containerProxy_timeouts_pauseGrace"
              value: "${INVOKER_CONTAINER_PAUSE_TIMEOUT}"
            - name: "CONFIG_whisk_kubernetes_concurrentStarts"
              value: "${INVOKER_CONTAINER_CONCURRENT_STARTS}"
            - name: "CONFIG_whisk_memory_max"
              value: "${WHISK_ACTIONS_MEMORY_MAX}"
            - name: "CONFIG_whisk_memory_min"
              value: "${WHISK_ACTIONS_MEMORY_MIN}"
            - name: "CONFIG_whisk_memory_std"
              value: "${WHISK_ACTIONS_MEMORY_STD}"
            - name: "CONFIG_whisk_kafka_replicationFactor"
              value: "${WHISK_KAFKA_REPLICATION_FACTOR}"
            - name: "CONFIG_whisk_kafka_topics_invoker_retentionBytes"
              value: "${WHISK_KAFKA_TOPICS_INVOKER_RETENTION_BYTES}"
            - name: "DOCKER_IMAGE_PREFIX"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: docker_image_prefix
            - name: "DOCKER_IMAGE_TAG"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: docker_image_tag
            - name: "DOCKER_REGISTRY"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: docker_registry
  
            # action runtimes
            - name: "RUNTIMES_MANIFEST"
              valueFrom:
                configMapKeyRef:
                  name: whisk.runtimes
                  key: runtimes
  
            # extra JVM arguments
            - name: "JAVA_OPTS"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: java_opts
  
            # extra Invoker arguments
            - name: "INVOKER_OPTS"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: invoker_opts
  
            # Recommend using "" because logs should go to stdout on kube
            - name: "WHISK_LOGS_DIR"
              valueFrom:
                configMapKeyRef:
                  name: invoker.config
                  key: invoker_logs_dir
  
            # properties for Kafka connection
            - name: "KAFKA_HOSTS"
              value: "$(STRIMZI_OPENWHISK_KAFKA_SERVICE_HOST):$(STRIMZI_OPENWHISK_KAFKA_SERVICE_PORT_CLIENTS)"
  
            # properties for zookeeper connection
            - name: "ZOOKEEPER_HOSTS"
              value: "$(STRIMZI_OPENWHISK_ZOOKEEPER_SERVICE_HOST):$(STRIMZI_OPENWHISK_ZOOKEEPER_SERVICE_PORT_CLIENTS)"
  
            # properties for DB connection
            - name: "CONFIG_whisk_couchdb_username"
              valueFrom:
                secretKeyRef:
                  name: db.auth
                  key: db_username
            - name: "CONFIG_whisk_couchdb_password"
              valueFrom:
                secretKeyRef:
                  name: db.auth
                  key: db_password
            - name:  "CONFIG_whisk_couchdb_protocol"
              valueFrom:
                configMapKeyRef:
                  name: db.config
                  key: db_protocol
            - name: "CONFIG_whisk_couchdb_host"
              value: "$(COUCHDB_SERVICE_HOST)"
            - name: "CONFIG_whisk_couchdb_port"
              value: "$(COUCHDB_SERVICE_PORT_COUCHDB)"
            - name: "CONFIG_whisk_couchdb_provider"
              valueFrom:
                configMapKeyRef:
                  name: db.config
                  key: db_provider
            - name: "CONFIG_whisk_couchdb_databases_WhiskActivation"
              valueFrom:
                configMapKeyRef:
                  name: db.config
                  key: db_whisk_activations
            - name: "CONFIG_whisk_couchdb_databases_WhiskEntity"
              valueFrom:
                configMapKeyRef:
                  name: db.config
                  key: db_whisk_actions
            - name: "CONFIG_whisk_couchdb_databases_WhiskAuth"
              valueFrom:
                configMapKeyRef:
                  name: db.config
                  key: db_whisk_auths
            - name: CONFIG_whisk_kubernetes_namespace
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace

            # Increase Kube API timeouts until we handle timeouts nicer
            - name: "CONFIG_whisk_kubernetes_timeouts_run"
              value: "10 minutes"
            - name: "CONFIG_whisk_kubernetes_timeouts_rm"
              value: "10 minutes"
            - name: "CONFIG_whisk_kubernetes_timeouts_logs"
              value: "10 minutes"
            - name: "CONFIG_whisk_spi_LogStoreProvider"
              value: "${INVOKER_LOGSTORE_PROVIDER}"
- apiVersion: batch/v1
  kind: Job
  metadata:
    name: preload-openwhisk-runtimes
    labels:
      name: preload-openwhisk-runtimes
  spec:
    completions: 1
    serviceAccountName: openwhisk
    template:
      metadata:
        labels:
          name: preload-openwhisk-runtimes
      spec:
        restartPolicy: Never
        initContainers:
        - name: preload-openwhisk-nodejs6
          image: projectodd/action-nodejs-6:${PROJECTODD_VERSION}
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh", "-c", "echo", "success"]
        - name: preload-openwhisk-java8
          image: projectodd/action-java-8:${PROJECTODD_VERSION}
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh", "-c", "echo", "success"]
        - name: preload-openwhisk-python3
          image: projectodd/action-python-3:${PROJECTODD_VERSION}
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh", "-c", "echo", "success"]
        - name: preload-openwhisk-python2
          image: projectodd/action-python-2:${PROJECTODD_VERSION}
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh", "-c", "echo", "success"]
        - name: preload-openwhisk-php7
          image: projectodd/action-php-7:${PROJECTODD_VERSION}
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh", "-c", "echo", "success"]
        containers:
        - name: preload-openwhisk-nodejs8
          image: projectodd/action-nodejs-8:${PROJECTODD_VERSION}
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh", "-c", "echo", "success"]
- apiVersion: v1
  kind: Service
  metadata:
    name: nginx
    labels:
      name: nginx
  spec:
    type: NodePort
    selector:
      name: nginx
    ports:
      - port: 80
        targetPort: 8080
        name: http
      - port: 8443
        targetPort: 8443
        name: https-admin
- apiVersion: v1
  kind: Route
  metadata:
    name: openwhisk
    annotations:
      template.openshift.io/expose-apihost: "{.spec.host}"
    labels:
      name: nginx
  spec:
    port:
      targetPort: http
    to:
      kind: Service
      name: nginx
      weight: 100
    wildcardPolicy: None
    tls:
      termination: edge
      insecureEdgeTerminationPolicy: Redirect
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: nginx
  data:
    init: |
      cp /nginx_config/nginx.conf /tmp/nginx.conf
      sed -i "s/<kubernetes_service_host>/$(grep nameserver /etc/resolv.conf | head -1 | awk '{print $2}')/" /tmp/nginx.conf
      sed -i "s/<kubernetes_namespace>/${KUBERNETES_NAMESPACE}/" /tmp/nginx.conf
      exec nginx -c /tmp/nginx.conf -g "daemon off;"
    nginx.conf: |
      worker_rlimit_nofile 4096;
  
      events {
          worker_connections  4096;
      }
  
      http {
          client_max_body_size 50M;
  
          rewrite_log on;
          log_format combined-upstream '$remote_addr - $remote_user [$time_local] '
              '$request $status $body_bytes_sent '
              '$http_referer $http_user_agent $upstream_addr';
          access_log /logs/nginx_access.log combined-upstream;
          error_log /logs/nginx_error.log;

          proxy_http_version 1.1;
          proxy_set_header Connection "";
  
          server {
              listen 8080 default;

              # Make sure nginx dynamically resolves dns entries
              # instead of resolving once and caching that result
              # forever
              resolver <kubernetes_service_host>;
              set $controller controller.<kubernetes_namespace>.svc.cluster.local;
  
              # match namespace, note while OpenWhisk allows a richer character set for a
              # namespace, not all those characters are permitted in the (sub)domain name;
              # if namespace does not match, no vanity URL rewriting takes place.
              server_name ~^(?<namespace>[0-9a-zA-Z-]+)\.localhost$;
  
              # proxy to the web action path
              location / {
                  if ($namespace) {
                    rewrite    /(.*) /api/v1/web/${namespace}/$1 break;
                  }
                  proxy_pass http://$controller:8080;
                  proxy_read_timeout 75s; # 70+5 additional seconds to allow controller to terminate request
              }
  
              # proxy to 'public/html' web action by convention
              location = / {
                  if ($namespace) {
                    rewrite    ^ /api/v1/web/${namespace}/public/index.html break;
                  }
                  proxy_pass http://$controller:8080;
                  proxy_read_timeout 75s; # 70+5 additional seconds to allow controller to terminate request
              }
  
              location /blackbox.tar.gz {
                  return 301 https://github.com/apache/incubator-openwhisk-runtime-docker/releases/download/sdk%400.1.0/blackbox-0.1.0.tar.gz;
              }
              # leaving this for a while for clients out there to update to the new endpoint
              location /blackbox-0.1.0.tar.gz {
                  return 301 /blackbox.tar.gz;
              }
  
              location /OpenWhiskIOSStarterApp.zip {
                  return 301 https://github.com/openwhisk/openwhisk-client-swift/releases/download/0.2.3/starterapp-0.2.3.zip;
              }
  
              # redirect requests for specific binaries to the matching one from the latest openwhisk-cli release.
              location /cli/go/download/linux/amd64 {
                  return 301 https://github.com/projectodd/openwhisk-openshift/releases/download/latest/OpenWhisk_CLI-latest-linux-amd64.tgz;
              }
              location /cli/go/download/linux/386 {
                  return 301 https://github.com/projectodd/openwhisk-openshift/releases/download/latest/OpenWhisk_CLI-latest-linux-386.tgz;
              }
              location /cli/go/download/mac/amd64 {
                  return 301 https://github.com/projectodd/openwhisk-openshift/releases/download/latest/OpenWhisk_CLI-latest-mac-amd64.zip;
              }
              location /cli/go/download/mac/386 {
                  return 301 https://github.com/projectodd/openwhisk-openshift/releases/download/latest/OpenWhisk_CLI-latest-mac-386.zip;
              }
              location /cli/go/download/windows/amd64 {
                  return 301 https://github.com/projectodd/openwhisk-openshift/releases/download/latest/OpenWhisk_CLI-latest-windows-amd64.zip;
              }
              location /cli/go/download/windows/386 {
                  return 301 https://github.com/projectodd/openwhisk-openshift/releases/download/latest/OpenWhisk_CLI-latest-windows-386.zip;
              }
  
              # redirect top-level cli downloads to the latest openwhisk-cli release.
              location /cli/go/download {
                  return 301 https://github.com/projectodd/openwhisk-openshift/releases/latest;
               }
          }
      }
- apiVersion: extensions/v1beta1
  kind: Deployment
  metadata:
    name: nginx
    annotations:
      template.alpha.openshift.io/wait-for-ready: "true"
    labels:
      name: nginx
  spec:
    replicas: 1
    template:
      metadata:
        labels:
          name: nginx
      spec:
        restartPolicy: Always
        volumes:
        - name: nginx-conf
          configMap:
            name: nginx
        - name: logs
          emptyDir: {}
        containers:
        - name: nginx
          imagePullPolicy: IfNotPresent
          # Image from Mar 22nd
          image: centos/nginx-112-centos7@sha256:42330f7f29ba1ad67819f4ff3ae2472f62de13a827a74736a5098728462212e7
          command: [ "/bin/bash", "-o", "allexport", "/nginx_config/init" ]
          env:
          - name: KUBERNETES_NAMESPACE
            valueFrom:
              fieldRef:
                fieldPath: metadata.namespace
          ports:
          - name: http
            containerPort: 8080
          - name: https-admin
            containerPort: 8443
          volumeMounts:
          - name: nginx-conf
            mountPath: "/nginx_config"
          - name: logs
            mountPath: "/logs"
        initContainers:
        - name: wait-for-controller
          image: busybox
          command: ['sh', '-c', 'until wget -T 5 --spider http://controller:8080/ping; do echo waiting for controller; sleep 2; done;']
- apiVersion: v1
  kind: Secret
  metadata:
    name: whisk.auth
    annotations:
      template.openshift.io/expose-auth: "{.data['system']}"
  stringData:
    guest: "${WHISK_GUEST_AUTH}"
    system: "${WHISK_SYSTEM_AUTH}"
- apiVersion: v1
  kind: Secret
  metadata:
    name: db.auth
  stringData:
    db_username: "${COUCHDB_USER}"
    db_password: "${COUCHDB_PASSWORD}"
    db_secret: "${COUCHDB_SECRET}"
- apiVersion: extensions/v1beta1
  kind: Deployment
  metadata:
    name: strimzi-cluster-controller
  spec:
    replicas: 1
    template:
      metadata:
        labels:
          name: strimzi-cluster-controller
      spec:
        serviceAccountName: openwhisk
        containers:
        - name: strimzi-cluster-controller
          image: strimzi/cluster-controller:${STRIMZI_VERSION}
          env:
          - name: STRIMZI_CONFIGMAP_LABELS
            value: "strimzi.io/kind=cluster"
          - name: STRIMZI_NAMESPACE
            valueFrom:
              fieldRef:
                fieldPath: metadata.namespace
          - name: STRIMZI_OPERATION_TIMEOUT_MS
            value: "600000"
          livenessProbe:
            httpGet:
              path: /healthy
              port: 8080
            initialDelaySeconds: 10
            periodSeconds: 30
          readinessProbe:
            httpGet:
              path: /ready
              port: 8080
            initialDelaySeconds: 10
            periodSeconds: 30
        initContainers:
        - name: preload-strimzi-zookeeper
          image: strimzi/zookeeper:${STRIMZI_VERSION}
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh", "-c", "echo", "success"]
        - name: preload-strimzi-kafka
          image: strimzi/kafka:${STRIMZI_VERSION}
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh", "-c", "echo", "success"]
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: alarmprovider
  data:
    PORT: "8080"
    DB_PREFIX: "whisk_alarms_"
    CONTROLLER_HOST: "controller"
    CONTROLLER_PORT: "8080"
    env: |
      export TOKEN="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)"
      export NAMESPACE="$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)"
      export ROUTER_HOST=$(curl -s --cacert /var/run/secrets/kubernetes.io/serviceaccount/ca.crt -H "Authorization: Bearer ${TOKEN}" "https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT}/oapi/v1/namespaces/${NAMESPACE}/routes/openwhisk?pretty=true" | grep '"host":' | head -n 1 | awk -F '"' '{print $4}')
- apiVersion: extensions/v1beta1
  kind: Deployment
  metadata:
    name: alarmprovider
    labels:
      name: alarmprovider
  spec:
    replicas: 1
    template:
      metadata:
        labels:
          name: alarmprovider
      spec:
        restartPolicy: Always
        serviceAccountName: openwhisk
        volumes:
        - name: alarmprovider-config
          configMap:
            name: alarmprovider
        containers:
        - name: alarmprovider
          imagePullPolicy: IfNotPresent
          image: openwhisk/alarmprovider:1.9.0
          command: [ "/bin/bash", "-c", "source /alarmprovider_config/env; node /alarmsTrigger/app.js" ]
          envFrom:
          - configMapRef:
              name: alarmprovider
          env:
          - name: "DB_HOST"
            value: "$(COUCHDB_SERVICE_HOST):$(COUCHDB_SERVICE_PORT_COUCHDB)"
          - name:  "DB_PROTOCOL"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_protocol
          - name: "DB_USERNAME"
            valueFrom:
              secretKeyRef:
                name: db.auth
                key: db_username
          - name: "DB_PASSWORD"
            valueFrom:
              secretKeyRef:
                name: db.auth
                key: db_password
          volumeMounts:
          - name: alarmprovider-config
            mountPath: "/alarmprovider_config"
        initContainers:
        - name: wait-for-couchdb
          image: busybox
          command: ['sh', '-cu', 'echo "$COUCHDB_SERVICE_HOST"']
        - name: install-alarms-catalog
          imagePullPolicy: IfNotPresent
          image: projectodd/whisk_alarms:${PROJECTODD_VERSION}
          envFrom:
          - configMapRef:
              name: alarmprovider
          env:
          - name: "DB_HOST"
            value: "$(COUCHDB_SERVICE_HOST):$(COUCHDB_SERVICE_PORT_COUCHDB)"
          - name:  "DB_PROTOCOL"
            valueFrom:
              configMapKeyRef:
                name: db.config
                key: db_protocol
          - name: "AUTH_WHISK_SYSTEM"
            valueFrom:
              secretKeyRef:
                name: whisk.auth
                key: system
          volumeMounts:
          - name: alarmprovider-config
            mountPath: "/alarmprovider_config"
- apiVersion: batch/v2alpha1
  kind: CronJob
  metadata:
    name: refresh-activations
    labels:
      name: refresh-activations
  spec:
    schedule: "*/5 * * * *"
    concurrencyPolicy: Forbid
    successfulJobsHistoryLimit: 1
    failedJobsHistoryLimit: 1
    jobTemplate:
      spec:
        template:
          metadata:
            labels:
              parent: "cronjob-refresh-activations"
          spec:
            serviceAccountName: openwhisk
            restartPolicy: Never
            containers:
            - name: refresh-activations
              image: projectodd/whisk_alarms:${PROJECTODD_VERSION}
              command: ["/bin/bash", "-c", "/openwhisk/bin/wsk --auth $AUTH_GUEST --apihost http://controller:8080 -i activation list"]
              env:
              - name: "AUTH_GUEST"
                valueFrom:
                  secretKeyRef:
                    name: whisk.auth
                    key: guest
            initContainers:
            - name: wait-for-controller
              image: busybox
              command: ['sh', '-c', 'until wget -T 5 --spider http://controller:8080/ping; do echo waiting for controller; sleep 2; done;']
              restartPolicy: Never
- apiVersion: batch/v2alpha1
  kind: CronJob
  metadata:
    name: prune-activations
    labels:
      name: prune-activations
  spec:
    schedule: "0 0 * * *"
    concurrencyPolicy: Forbid
    successfulJobsHistoryLimit: 1
    failedJobsHistoryLimit: 1
    jobTemplate:
      spec:
        template:
          metadata:
            labels:
              parent: "cronjob-prune-activations"
          spec:
            restartPolicy: Never
            containers:
            - name: prune-activations
              image: projectodd/whisk_couchdb:${PROJECTODD_VERSION}
              command: ["/bin/bash", "-c", "set -x; curl -H \"Content-Type: application/json\" -X PUT -d \"100\" \"http://$DB_USERNAME:$DB_PASSWORD@$COUCHDB_SERVICE_HOST:$COUCHDB_SERVICE_PORT_COUCHDB/$DB_ACTIONS/_revs_limit\"; curl -H \"Content-Type: application/json\" -X PUT -d \"5\" \"http://$DB_USERNAME:$DB_PASSWORD@$COUCHDB_SERVICE_HOST:$COUCHDB_SERVICE_PORT_COUCHDB/$DB_ACTIVATIONS/_revs_limit\"; /openwhisk/tools/db/deleteLogsFromActivations.py --dbUrl http://$DB_USERNAME:$DB_PASSWORD@$COUCHDB_SERVICE_HOST:$COUCHDB_SERVICE_PORT_COUCHDB --dbName $DB_ACTIVATIONS --days $DB_DAYS_TO_KEEP_LOGS; /openwhisk/tools/db/cleanUpActivations.py --dbUrl http://$DB_USERNAME:$DB_PASSWORD@$COUCHDB_SERVICE_HOST:$COUCHDB_SERVICE_PORT_COUCHDB --dbName $DB_ACTIVATIONS --days $DB_DAYS_TO_KEEP_ACTIVATIONS"]
              env:
              - name: "DB_USERNAME"
                valueFrom:
                  secretKeyRef:
                    name: db.auth
                    key: db_username
              - name: "DB_PASSWORD"
                valueFrom:
                  secretKeyRef:
                    name: db.auth
                    key: db_password
              - name: "DB_ACTIVATIONS"
                valueFrom:
                  configMapKeyRef:
                    name: db.config
                    key: db_whisk_activations
              - name: "DB_ACTIONS"
                valueFrom:
                  configMapKeyRef:
                    name: db.config
                    key: db_whisk_actions
              - name: "DB_DAYS_TO_KEEP_LOGS"
                valueFrom:
                  configMapKeyRef:
                    name: db.config
                    key: db_days_to_keep_logs
              - name: "DB_DAYS_TO_KEEP_ACTIVATIONS"
                valueFrom:
                  configMapKeyRef:
                    name: db.config
                    key: db_days_to_keep_activations
            initContainers:
            - name: wait-for-couchdb
              image: busybox
              command: ['sh', '-c', 'until wget -T 5 --spider http://${COUCHDB_SERVICE_HOST}:${COUCHDB_SERVICE_PORT}/${DB_WHISK_ACTIVATIONS}; do echo waiting for couchdb; sleep 2; done;']
              env:
              - name: "DB_WHISK_ACTIVATIONS"
                valueFrom:
                  configMapKeyRef:
                    name: db.config
                    key: db_whisk_activations