1 # Copyright © 2020 Bitnami, AT&T, Amdocs, Bell Canada, highstreet technologies
3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
7 # http://www.apache.org/licenses/LICENSE-2.0
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 # See the License for the specific language governing permissions and
13 # limitations under the License.
15 #################################################################
16 # Global configuration defaults.
17 #################################################################
20 aafAgentImage: onap/aaf/aaf_agent:2.1.15
22 readinessRepository: oomk8s
23 readinessImage: readiness-check:2.0.2
24 loggingRepository: docker.elastic.co
25 loggingImage: beats/filebeat:5.5.0
26 busyboxRepository: registry.hub.docker.com
27 busyboxImage: library/busybox:latest
28 clusterName: cluster.local
31 mountPath: /dockerdata-nfs
33 mountPath: /dockerdata-nfs/backup
35 repositoryOverride: docker.io
37 #################################################################
38 # Application configuration defaults.
39 #################################################################
40 ## Init containers parameters:
46 imageName: bitnami/elasticsearch
47 tag: 6.8.6-debian-9-r23
48 ## Specify a imagePullPolicy
49 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
50 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
52 pullPolicy: IfNotPresent
53 ## Optionally specify an array of imagePullSecrets.
54 ## Secrets must be manually created in the namespace.
55 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
58 # - myRegistryKeySecretName
59 ## Set to true if you would like to see extra information on logs
60 ## ref: https://github.com/bitnami/minideb-extras/#turn-on-bash-debugging
64 ## String to partially override common.fullname template (will maintain the release name)
68 ## String to fully override common.fullname template
71 ## updateStrategy for ElasticSearch coordinating deployment
72 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
77 ## Provide annotations for the coordinating-only pods.
80 ## Pod Security Context for coordinating-only pods.
81 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
87 ## Affinity for pod assignment.
88 ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
91 ## Node labels for pod assignment. Evaluated as a template.
92 ## Ref: https://kubernetes.io/docs/user-guide/node-selection/
95 ## Tolerations for pod assignment. Evaluated as a template.
96 ## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
99 ## Elasticsearch coordinating-only container's resource requests and limits
100 ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
103 ## We usually recommend not to specify default resources and to leave this as a conscious
104 ## choice for the user. This also increases chances charts run on environments with little
105 ## resources, such as Minikube.
112 ## Elasticsearch coordinating-only container's liveness and readiness probes
113 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
117 # initialDelaySeconds: 90
120 # successThreshold: 1
121 # failureThreshold: 5
124 # initialDelaySeconds: 90
127 # successThreshold: 1
128 # failureThreshold: 5
129 ## Service parameters for coordinating-only node(s)
132 ## Specifies whether a ServiceAccount should be created for the coordinating node
135 ## The name of the ServiceAccount to use.
136 ## If not set and create is true, a name is generated using the fullname template
140 ## Bitnami Minideb image version
141 ## ref: https://hub.docker.com/r/bitnami/minideb/tags/
145 imageName: bitnami/minideb
147 ## Specify a imagePullPolicy
148 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
149 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
152 ## Optionally specify an array of imagePullSecrets.
153 ## Secrets must be manually created in the namespace.
154 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
157 # - myRegistryKeySecretName
161 imageName: bitnami/nginx
163 pullPolicy: IfNotPresent
167 - name: elasticsearch
169 ## Custom server block to be added to NGINX configuration
170 ## PHP-FPM example server block:
176 # auth_basic "server auth";
177 # auth_basic_user_file /etc/nginx/passwords;
178 ssl_certificate /opt/app/osaaf/local/certs/cert.pem;
179 ssl_certificate_key /opt/app/osaaf/local/certs/key.pem;
181 # deny node shutdown api
182 if ($request_filename ~ "_shutdown") {
187 proxy_pass http://localhost:9000;
188 proxy_http_version 1.1;
189 proxy_set_header Connection "Keep-Alive";
190 proxy_set_header Proxy-Connection "Keep-Alive";
191 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
192 proxy_set_header X-Forwarded-Proto $scheme;
193 proxy_set_header X-Real-IP $remote_addr;
194 proxy_set_header Host $http_host;
199 proxy_pass http://localhost:9000;
200 proxy_http_version 1.1;
201 proxy_set_header Connection "Keep-Alive";
202 proxy_set_header Proxy-Connection "Keep-Alive";
212 # deny node shutdown api
213 if ($request_filename ~ "_shutdown") {
218 proxy_pass http://localhost:9000;
219 proxy_http_version 1.1;
220 proxy_set_header Connection "Keep-Alive";
221 proxy_set_header Proxy-Connection "Keep-Alive";
222 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
223 proxy_set_header X-Forwarded-Proto $scheme;
224 proxy_set_header X-Real-IP $remote_addr;
225 proxy_set_header Host $http_host;
230 proxy_pass http://localhost:9000;
231 proxy_http_version 1.1;
232 proxy_set_header Connection "Keep-Alive";
233 proxy_set_header Proxy-Connection "Keep-Alive";
238 #################################################################
239 # coordinating service configuration defaults.
240 #################################################################
245 ## coordinating-only service type
249 - name: http-transport
254 service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
255 publishNotReadyAddresses: true
256 ## Elasticsearch tREST API port
259 - name: elasticsearch
263 ## Specify the nodePort value for the LoadBalancer and NodePort service types.
264 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
267 ## Provide any additional annotations which may be required. This can be used to
268 ## set the LoadBalancer service type to internal only.
269 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
272 ## Set the LoadBalancer service type to internal only.
273 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
276 ## Provide functionality to use RBAC
278 #################################################################
280 #################################################################
282 - uid: &aaf_secret_uid elasticsearch-aaf-deploy-creds
284 externalSecret: '{{ ternary (tpl (default "" .Values.aafConfig.aafDeployCredsExternalSecret) .) "aafIsDisabled" .Values.global.aafEnabled }}'
285 login: '{{ .Values.aafConfig.aafDeployFqi }}'
286 password: '{{ .Values.aafConfig.aafDeployPass }}'
287 passwordPolicy: required
288 #################################################################
289 # aaf configuration defaults.
290 #################################################################
294 image: onap/aaf/aaf_agent:2.1.15
295 app_ns: "org.osaaf.aaf"
296 fqi_namespace: org.onap.elastic
297 fqi: "elastic@elastic.onap.org"
298 public_fqdn: "aaf.osaaf.org"
299 deploy_fqi: "deployer@people.osaaf.org"
300 aafDeployFqi: "deployer@people.osaaf.org"
301 aafDeployPass: demo123456!
302 #aafDeployCredsExternalSecret: some secret
303 #cadi_latitude: "52.5"
304 #cadi_longitude: "13.4"
305 secret_uid: *aaf_secret_uid
306 #################################################################
307 # subcharts configuration defaults.
308 #################################################################
317 ## Change nameOverride to be consistent accross all elasticsearch (sub)-charts
321 # dedicatednode: "yes"
322 # working as master node only, in this case increase replicaCount for elasticsearch-data
323 # dedicatednode: "no"
324 # handles master and data node functionality