updated deployment.yaml

Author: SupriyaPamulpati

metro-ai-suite/metro-vision-ai-app-recipe/smart-intersection/chart/templates/dlstreamer-pipeline-server/deployment.yaml

@@ -14,18 +14,8 @@ spec:
       labels:
         app: {{ .Release.Name }}-dlstreamer-pipeline-server
     spec:
-      securityContext:
-        supplementalGroups: [109,110,992]
+      runtimeClassName: kata-qemu
       volumes:
-      - name: dev
-        hostPath:
-          path: /dev
-      - name: dev-shm
-        hostPath:
-          path: /dev/shm
-      - name: run-udev
-        hostPath:
-          path: /run/udev
       - name: dlstreamer-pipeline-server-videos-data
         persistentVolumeClaim:
           claimName: {{ .Release.Name }}-dlstreamer-pipeline-server-videos-pvc
@@ -47,17 +37,11 @@ spec:
         configMap:
           name: {{ .Release.Name }}-dlstreamer-pipeline-server-udf
       - name: {{ .Release.Name }}-dlstreamer-pipeline-server-rootcert
-        projected:
-          sources:
-          - secret:
-              name: {{ .Release.Name }}-ca-secret
-              items:
-              - key: tls.crt
-                path: root-cert
+        secret:
+          secretName: {{ .Release.Name }}-dlstreamer-pipeline-server-rootcert
       initContainers:
       - name: init-dlstreamer-pipeline-server-videos
-        image: "{{ .Values.images.alpine.repository }}:{{ .Values.images.alpine.tag }}"
-        imagePullPolicy: {{ .Values.imagePullPolicy }}
+        image: alpine:latest
         env:
           - name: http_proxy
             value: {{ .Values.http_proxy | quote }}
@@ -69,13 +53,29 @@ spec:
         - /bin/sh
         - -c
         - |
-          {{- tpl (include "dlstreamer-pipeline-server.init-videos-script" .) . | nindent 10 }}
+          if [ -f /data/videos/.done ]; then
+              echo ".done file exists in /data/videos"
+          else
+              echo ".done file does NOT exist in /data/videos"
+              echo "Downloading videos from GitHub..."
+              apk add --no-cache wget
+              mkdir -p /data/videos
+              VIDEO_URL="https://github.com/intel/metro-ai-suite/raw/refs/heads/videos/videos"
+              VIDEOS="1122east.ts 1122west.ts 1122north.ts 1122south.ts"
+              for video in $VIDEOS; do
+                  echo "Downloading $video..."
+                  wget -O "/data/videos/$video" "$VIDEO_URL/$video"
+              done
+              echo "Videos downloaded successfully"
+              touch /data/videos/.done
+          fi
+          chown -R 1000:1000 /data
+          echo "Initializing..."
         volumeMounts:
         - mountPath: /data/videos
           name: dlstreamer-pipeline-server-videos-data
       - name: init-dlstreamer-pipeline-server-models
-        image: "{{ .Values.images.alpine.repository }}:{{ .Values.images.alpine.tag }}"
-        imagePullPolicy: {{ .Values.imagePullPolicy }}
+        image: alpine:latest
         env:
           - name: http_proxy
             value: {{ .Values.http_proxy | quote }}
@@ -87,7 +87,22 @@ spec:
         - /bin/sh
         - -c
         - |
-          {{- tpl (include "dlstreamer-pipeline-server.init-models-script" .) . | nindent 10 }}
+          if [ -f /data/models/.done ]; then
+            echo ".done file exists in /data/models"
+          else
+            echo ".done file does NOT exist in /data/models"
+            echo "Downloading models from GitHub..."
+            apk add --no-cache wget tar
+            cd /tmp
+            wget -O models.tar.gz https://github.com/open-edge-platform/edge-ai-suites/archive/refs/tags/v1.2.0-20250624.tar.gz
+            tar -xzf models.tar.gz
+            mkdir -p /data/models
+            cp -r edge-ai-suites-1.2.0-20250624/metro-ai-suite/smart-intersection/src/dlstreamer-pipeline-server/models/* /data/models/
+            echo "Models downloaded successfully"
+            touch /data/models/.done
+          fi 
+          chown -R 1000:1000 /data
+          echo "Initializing..."
         volumeMounts:
         - mountPath: /data/models
           name: dlstreamer-pipeline-server-models-data
@@ -102,33 +117,33 @@ spec:
           value: {{ .Values.https_proxy | quote }}
         - name: no_proxy
           value: "{{ .Values.no_proxy }},influxdb2, ntpserv,smart-intersection-broker,smart-intersection-dlstreamer-pipeline-server,smart-intersection-grafana,smart-intersection-nodered,smart-intersection-pgserver,smart-intersection-scene,smart-intersection-web"
-        - name: ZE_ENABLE_ALT_DRIVERS
-          value: "libze_intel_npu.so"
         image: {{ .Values.dlstreamerPipelineServer.repository }}:{{ .Values.dlstreamerPipelineServer.tag }}
         name: {{ .Release.Name }}-dlstreamer-pipeline-server
-        imagePullPolicy: {{ .Values.imagePullPolicy }}
-        {{- if or .Values.dlstreamerPipelineServer.gpuWorkload .Values.dlstreamerPipelineServer.npuWorkload }}
+        resources:
+          requests:
+            memory: "16Gi"
+            cpu: "4"
+          limits:
+            memory: "16Gi"
+            cpu: "4"
+        imagePullPolicy: {{ .Values.dlstreamerPipelineServer.imagePullPolicy }}
         securityContext:
-          privileged: true
           runAsUser: 0
           runAsGroup: 0
-        {{- else }}
-        securityContext:
-          runAsUser: 0
-          runAsGroup: 0
-        {{- end }}
-        terminationMessagePath: /tmp/termination-log
         command: ["/bin/bash", "-c"]
         args:
           - |
-            {{- tpl (include "dlstreamer-pipeline-server.startup-script" .) . | nindent 12 }}
+            mkdir -p /run/secrets/certs &&
+            cp /home/pipeline-server/certs/root-cert /run/secrets/certs/scenescape-ca.pem &&
+            cp /tmp/pipeline/config.json . &&
+            mkdir -p /home/pipeline-server/user_scripts/gvapython/sscape &&
+            cp /tmp/udf/config.json /home/pipeline-server/user_scripts/gvapython/sscape/sscape_adapter.py &&
+            chmod a+rwx /home/pipeline-server/user_scripts/gvapython/sscape/sscape_adapter.py &&
+            chown -R intelmicroserviceuser:intelmicroserviceuser /home/pipeline-server/models &&
+            chown -R intelmicroserviceuser:intelmicroserviceuser /home/pipeline-server/videos &&
+            echo "$SMART_INTERSECTION_BROKER_SERVICE_HOST    $MQTT_HOST" >> /etc/hosts &&
+            runuser -u intelmicroserviceuser ./run.sh
         volumeMounts:
-        - name: dev
-          mountPath: /dev
-        - name: dev-shm
-          mountPath: /dev/shm
-        - name: run-udev
-          mountPath: /run/udev
         - mountPath: /home/pipeline-server/videos
           name: dlstreamer-pipeline-server-videos-data
         - mountPath: /home/pipeline-server/models/object_detection
@@ -151,4 +166,4 @@ spec:
       {{- with .Values.imagePullSecrets }}
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
-      {{- end }}
+      {{- end }}