1 # Copyright (c) 2019 IBM, Bell Canada
2 # Copyright (c) 2020 Samsung Electronics
3 # Modification Copyright © 2022 Nordix Foundation
5 # Licensed under the Apache License, Version 2.0 (the "License");
6 # you may not use this file except in compliance with the License.
7 # You may obtain a copy of the License at
9 # http://www.apache.org/licenses/LICENSE-2.0
11 # Unless required by applicable law or agreed to in writing, software
12 # distributed under the License is distributed on an "AS IS" BASIS,
13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 # See the License for the specific language governing permissions and
15 # limitations under the License.
17 #################################################################
18 # Global configuration defaults.
19 #################################################################
21 # Change to an unused port prefix range to prevent port conflicts
22 # with other instances running within the same k8s cluster
23 nodePortPrefixExt: 304
29 mountPath: /dockerdata-nfs
31 #This configuration specifies Service and port for SDNC OAM interface
32 sdncOamService: sdnc-oam
35 #AAF is enabled by default
38 #enable importCustomCerts to add custom CA to blueprint processor pod
39 #importCustomCertsEnabled: true
41 #use below configmap to add custom CA certificates
42 #certificates with *.pem will be added to JAVA truststore $JAVA_HOME/lib/security/cacerts in the pod
43 #certificates with *.crt will be added to /etc/ssl/certs/ca-certificates.crt in the pod
44 #customCertsConfigMap: onap-cds-blueprints-processor-configmap
46 #################################################################
48 #################################################################
50 - uid: 'cds-db-user-creds'
52 externalSecret: '{{ tpl (default "" .Values.config.cdsDB.dbCredsExternalSecret) . }}'
53 login: '{{ .Values.config.cdsDB.dbUser }}'
54 password: '{{ .Values.config.cdsDB.dbPassword }}'
55 passwordPolicy: required
56 - uid: 'sdnc-db-root-pass'
58 externalSecret: '{{ tpl (default "" .Values.config.sdncDB.dbRootPassExternalSecret) . }}'
59 password: '{{ .Values.config.sdncDB.dbRootPass }}'
60 passwordPolicy: required
61 - uid: cds-kafka-secret
62 externalSecret: '{{ tpl (default "" .Values.config.jaasConfExternalSecret) . }}'
66 value: '{{ .Values.config.someConfig }}'
69 #################################################################
71 #################################################################
73 nameOverride: cds-blueprints-processor-cert-initializer
74 aafDeployFqi: deployer@people.osaaf.org
75 aafDeployPass: demo123456!
76 # aafDeployCredsExternalSecret: some secret
78 fqi: sdnc-cds@sdnc-cds.onap.org
79 public_fqdn: sdnc-cds.onap.org
83 credsPath: /opt/app/osaaf/local
84 fqi_namespace: org.onap.sdnc-cds
85 #enable below if we need custom CA to be added to blueprint processor pod
86 #importCustomCertsEnabled: true
87 #truststoreMountpath: /opt/onap/cds
88 #truststoreOutputFileName: truststoreONAPall.jks
90 /opt/app/aaf_config/bin/agent.sh;
91 /opt/app/aaf_config/bin/agent.sh local showpass
92 {{.Values.fqi}} {{ .Values.fqdn }} > {{ .Values.credsPath }}/mycreds.prop
94 #################################################################
95 # Application configuration defaults.
96 #################################################################
98 image: onap/ccsdk-blueprintsprocessor:1.3.0
101 # flag to enable debugging - application support required
104 # application configuration
106 appConfigDir: /opt/app/onap/config
108 dbService: mariadb-galera
111 #dbRootPass: Custom root password
112 dbRootPassExternalSecret: '{{ include "common.mariadb.secret.rootPassSecretName" ( dict "dot" . "chartName" .Values.config.sdncDB.dbService ) }}'
119 # dbCredsExternalSecret: <some secret name>
120 # dbRootPassword: password
121 # dbRootPassExternalSecret
124 # default number of instances
131 # If useStrimziKafka is true, the following also applies:
132 # strimzi will create an associated kafka user and the topics defined for Request and Audit elements below.
133 # The connection type must be kafka-scram-plain-text-auth
134 # The bootstrapServers will target the strimzi kafka cluster by default
135 useStrimziKafka: false
136 cdsKafkaUser: cds-kafka-user
138 kafkaRequestConsumer:
140 type: kafka-scram-plain-text-auth
141 bootstrapServers: host:port
142 groupId: cds-consumer
143 topic: cds.blueprint-processor.self-service-api.request
144 clientId: request-receiver-client-id
146 kafkaRequestProducer:
147 type: kafka-scram-plain-text-auth
148 bootstrapServers: host:port
149 clientId: request-producer-client-id
150 topic: cds.blueprint-processor.self-service-api.response
151 enableIdempotence: false
154 type: kafka-scram-plain-text-auth
155 bootstrapServers: host:port
156 clientId: audit-request-producer-client-id
157 topic: cds.blueprint-processor.self-service-api.audit.request
158 enableIdempotence: false
160 type: kafka-scram-plain-text-auth
161 bootstrapServers: host:port
162 clientId: audit-response-producer-client-id
163 topic: cds.blueprint-processor.self-service-api.audit.response
164 enableIdempotence: false
166 # probe configuration parameters
168 initialDelaySeconds: 10
173 initialDelaySeconds: 0
176 # necessary to disable liveness probe when setting breakpoints
177 # in debugger so K8s doesn't restart unresponsive container
181 initialDelaySeconds: 120
188 portName: blueprints-processor-http
193 portName: blueprints-processor-grpc
198 portName: blueprints-processor-cluster
203 volumeReclaimPolicy: Retain
204 accessMode: ReadWriteMany
207 mountSubPath: cds/blueprints/deploy
208 deployedBlueprint: /opt/app/onap/blueprints/deploy
211 # Cannot have cluster enabled if the replicaCount is not at least 3
214 clusterName: cds-cluster
216 # Defines the number of node to be part of the CP subsystem/raft algorithm. This value should be
217 # between 3 and 7 only.
223 - baseaddr: "blueprintsprocessorhttp"
224 name: "cds-blueprints-processor-http"
232 springframework: INFO
233 springframeworkWeb: INFO
234 springframeworkSecurityWebauthentication: INFO
257 #Pods Service Account
259 nameOverride: cds-blueprints-processor
263 # workflow store flag