1 # Copyright © 2020 Bitnami, AT&T, Amdocs, Bell Canada, highstreet technologies
3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
7 # http://www.apache.org/licenses/LICENSE-2.0
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 # See the License for the specific language governing permissions and
13 # limitations under the License.
15 #################################################################
16 # Global configuration defaults.
17 #################################################################
21 readinessImage: onap/oom/readiness:3.0.1
22 loggingRepository: docker.elastic.co
23 loggingImage: beats/filebeat:5.5.0
24 busyboxRepository: registry.hub.docker.com
25 busyboxImage: library/busybox:latest
26 clusterName: cluster.local
29 mountPath: /dockerdata-nfs
31 mountPath: /dockerdata-nfs/backup
33 repositoryOverride: docker.io
35 #################################################################
36 # Application configuration defaults.
37 #################################################################
38 ## Init containers parameters:
43 image: bitnami/elasticsearch:7.6.1
44 ## Specify a imagePullPolicy
45 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
46 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
48 pullPolicy: IfNotPresent
49 ## Optionally specify an array of imagePullSecrets.
50 ## Secrets must be manually created in the namespace.
51 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
54 # - myRegistryKeySecretName
55 ## Set to true if you would like to see extra information on logs
56 ## ref: https://github.com/bitnami/minideb-extras/#turn-on-bash-debugging
60 ## String to partially override common.fullname template (will maintain the release name)
64 ## String to fully override common.fullname template
67 ## updateStrategy for ElasticSearch coordinating deployment
68 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
73 ## Provide annotations for the coordinating-only pods.
76 ## Pod Security Context for coordinating-only pods.
77 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
83 ## Affinity for pod assignment.
84 ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
87 ## Node labels for pod assignment. Evaluated as a template.
88 ## Ref: https://kubernetes.io/docs/user-guide/node-selection/
91 ## Tolerations for pod assignment. Evaluated as a template.
92 ## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
95 ## Elasticsearch coordinating-only container's resource requests and limits
96 ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
99 ## We usually recommend not to specify default resources and to leave this as a conscious
100 ## choice for the user. This also increases chances charts run on environments with little
101 ## resources, such as Minikube.
108 ## Elasticsearch coordinating-only container's liveness and readiness probes
109 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
113 # initialDelaySeconds: 90
116 # successThreshold: 1
117 # failureThreshold: 5
120 # initialDelaySeconds: 90
123 # successThreshold: 1
124 # failureThreshold: 5
125 ## Service parameters for coordinating-only node(s)
128 ## Specifies whether a ServiceAccount should be created for the coordinating node
131 ## The name of the ServiceAccount to use.
132 ## If not set and create is true, a name is generated using the fullname template
136 ## Bitnami Minideb image version
137 ## ref: https://hub.docker.com/r/bitnami/minideb/tags/
141 imageName: bitnami/minideb
143 ## Specify a imagePullPolicy
144 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
145 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
148 ## Optionally specify an array of imagePullSecrets.
149 ## Secrets must be manually created in the namespace.
150 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
153 # - myRegistryKeySecretName
157 imageName: bitnami/nginx
159 pullPolicy: IfNotPresent
163 - name: elasticsearch
165 ## Custom server block to be added to NGINX configuration
166 ## PHP-FPM example server block:
172 # auth_basic "server auth";
173 # auth_basic_user_file /etc/nginx/passwords;
174 ssl_certificate /opt/app/osaaf/local/certs/cert.pem;
175 ssl_certificate_key /opt/app/osaaf/local/certs/key.pem;
177 # deny node shutdown api
178 if ($request_filename ~ "_shutdown") {
183 proxy_pass http://localhost:9000;
184 proxy_http_version 1.1;
185 proxy_set_header Connection "Keep-Alive";
186 proxy_set_header Proxy-Connection "Keep-Alive";
187 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
188 proxy_set_header X-Forwarded-Proto $scheme;
189 proxy_set_header X-Real-IP $remote_addr;
190 proxy_set_header Host $http_host;
195 proxy_pass http://localhost:9000;
196 proxy_http_version 1.1;
197 proxy_set_header Connection "Keep-Alive";
198 proxy_set_header Proxy-Connection "Keep-Alive";
208 # deny node shutdown api
209 if ($request_filename ~ "_shutdown") {
214 proxy_pass http://localhost:9000;
215 proxy_http_version 1.1;
216 proxy_set_header Connection "Keep-Alive";
217 proxy_set_header Proxy-Connection "Keep-Alive";
218 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
219 proxy_set_header X-Forwarded-Proto $scheme;
220 proxy_set_header X-Real-IP $remote_addr;
221 proxy_set_header Host $http_host;
226 proxy_pass http://localhost:9000;
227 proxy_http_version 1.1;
228 proxy_set_header Connection "Keep-Alive";
229 proxy_set_header Proxy-Connection "Keep-Alive";
234 #################################################################
235 # coordinating service configuration defaults.
236 #################################################################
241 ## coordinating-only service type
245 - name: http-transport
250 service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
251 publishNotReadyAddresses: true
252 ## Elasticsearch tREST API port
255 - name: elasticsearch
259 ## Specify the nodePort value for the LoadBalancer and NodePort service types.
260 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
263 ## Provide any additional annotations which may be required. This can be used to
264 ## set the LoadBalancer service type to internal only.
265 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
268 ## Set the LoadBalancer service type to internal only.
269 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
272 ## Provide functionality to use RBAC
275 #################################################################
276 # Certificate configuration
277 #################################################################
279 nameOverride: elasticsearch-cert-initializer
280 aafDeployFqi: deployer@people.osaaf.org
281 aafDeployPass: demo123456!
282 # aafDeployCredsExternalSecret: some secret
284 app_ns: "org.osaaf.aaf"
285 fqi_namespace: "org.onap.elastic"
286 fqi: "elastic@elastic.onap.org"
287 public_fqdn: "aaf.osaaf.org"
288 cadi_longitude: "0.0"
290 credsPath: /opt/app/osaaf/local
292 cd {{ .Values.credsPath }};
294 export $(/opt/app/aaf_config/bin/agent.sh local showpass | grep '^c' | xargs -0);
295 keytool -exportcert -rfc -file certs/cacert.pem -keystore {{ .Values.fqi_namespace }}.trust.jks -alias ca_local_0 -storepass $cadi_truststore_password;
296 openssl pkcs12 -in {{ .Values.fqi_namespace }}.p12 -out certs/cert.pem -passin pass:$cadi_keystore_password_p12 -passout pass:$cadi_keystore_password_p12;
297 cp {{ .Values.fqi_namespace }}.key certs/key.pem;
300 #################################################################
301 # subcharts configuration defaults.
302 #################################################################
311 ## Change nameOverride to be consistent accross all elasticsearch (sub)-charts
315 # dedicatednode: "yes"
316 # working as master node only, in this case increase replicaCount for elasticsearch-data
317 # dedicatednode: "no"
318 # handles master and data node functionality