1 # Copyright (c) 2020 Bitnami, AT&T, Amdocs, Bell Canada, highstreet technologies
2 # Modification Copyright (c) 2020 Nokia
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
8 # http://www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
16 #################################################################
17 # Global configuration defaults.
18 #################################################################
22 readinessImage: onap/oom/readiness:3.0.1
23 loggingRepository: docker.elastic.co
24 loggingImage: beats/filebeat:5.5.0
25 busyboxRepository: docker.io
26 busyboxImage: library/busybox:latest
27 clusterName: cluster.local
30 mountPath: /dockerdata-nfs
32 mountPath: /dockerdata-nfs/backup
34 repositoryOverride: docker.io
36 #################################################################
37 # Application configuration defaults.
38 #################################################################
39 ## Init containers parameters:
44 image: bitnami/elasticsearch:7.9.3
45 ## Specify a imagePullPolicy
46 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
47 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
49 pullPolicy: IfNotPresent
50 ## Optionally specify an array of imagePullSecrets.
51 ## Secrets must be manually created in the namespace.
52 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
55 # - myRegistryKeySecretName
56 ## Set to true if you would like to see extra information on logs
57 ## ref: https://github.com/bitnami/minideb-extras/#turn-on-bash-debugging
61 ## String to partially override common.fullname template (will maintain the release name)
65 ## String to fully override common.fullname template
68 ## updateStrategy for ElasticSearch coordinating deployment
69 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
74 ## Provide annotations for the coordinating-only pods.
77 ## Pod Security Context for coordinating-only pods.
78 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
84 ## Affinity for pod assignment.
85 ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
88 ## Node labels for pod assignment. Evaluated as a template.
89 ## Ref: https://kubernetes.io/docs/user-guide/node-selection/
92 ## Tolerations for pod assignment. Evaluated as a template.
93 ## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
96 ## Elasticsearch coordinating-only container's resource requests and limits
97 ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
100 ## We usually recommend not to specify default resources and to leave this as a conscious
101 ## choice for the user. This also increases chances charts run on environments with little
102 ## resources, such as Minikube.
109 ## Elasticsearch coordinating-only container's liveness and readiness probes
110 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
114 # initialDelaySeconds: 90
117 # successThreshold: 1
118 # failureThreshold: 5
121 # initialDelaySeconds: 90
124 # successThreshold: 1
125 # failureThreshold: 5
126 ## Service parameters for coordinating-only node(s)
129 ## Specifies whether a ServiceAccount should be created for the coordinating node
132 ## The name of the ServiceAccount to use.
133 ## If not set and create is true, a name is generated using the fullname template
137 ## Bitnami Minideb image version
138 ## ref: https://hub.docker.com/r/bitnami/minideb/tags/
142 imageName: bitnami/minideb
144 ## Specify a imagePullPolicy
145 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
146 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
149 ## Optionally specify an array of imagePullSecrets.
150 ## Secrets must be manually created in the namespace.
151 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
154 # - myRegistryKeySecretName
158 imageName: bitnami/nginx
160 pullPolicy: IfNotPresent
164 - name: elasticsearch
166 ## Custom server block to be added to NGINX configuration
167 ## PHP-FPM example server block:
173 # auth_basic "server auth";
174 # auth_basic_user_file /etc/nginx/passwords;
175 ssl_certificate /opt/app/osaaf/local/certs/cert.pem;
176 ssl_certificate_key /opt/app/osaaf/local/certs/key.pem;
178 # deny node shutdown api
179 if ($request_filename ~ "_shutdown") {
184 proxy_pass http://localhost:9000;
185 proxy_http_version 1.1;
186 proxy_set_header Connection "Keep-Alive";
187 proxy_set_header Proxy-Connection "Keep-Alive";
188 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
189 proxy_set_header X-Forwarded-Proto $scheme;
190 proxy_set_header X-Real-IP $remote_addr;
191 proxy_set_header Host $http_host;
196 proxy_pass http://localhost:9000;
197 proxy_http_version 1.1;
198 proxy_set_header Connection "Keep-Alive";
199 proxy_set_header Proxy-Connection "Keep-Alive";
209 # deny node shutdown api
210 if ($request_filename ~ "_shutdown") {
215 proxy_pass http://localhost:9000;
216 proxy_http_version 1.1;
217 proxy_set_header Connection "Keep-Alive";
218 proxy_set_header Proxy-Connection "Keep-Alive";
219 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
220 proxy_set_header X-Forwarded-Proto $scheme;
221 proxy_set_header X-Real-IP $remote_addr;
222 proxy_set_header Host $http_host;
227 proxy_pass http://localhost:9000;
228 proxy_http_version 1.1;
229 proxy_set_header Connection "Keep-Alive";
230 proxy_set_header Proxy-Connection "Keep-Alive";
235 #################################################################
236 # coordinating service configuration defaults.
237 #################################################################
242 ## coordinating-only service type
246 - name: http-transport
251 service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
252 publishNotReadyAddresses: true
253 ## Elasticsearch tREST API port
256 - name: elasticsearch
260 ## Specify the nodePort value for the LoadBalancer and NodePort service types.
261 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
264 ## Provide any additional annotations which may be required. This can be used to
265 ## set the LoadBalancer service type to internal only.
266 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
269 ## Set the LoadBalancer service type to internal only.
270 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
273 ## Provide functionality to use RBAC
276 #################################################################
277 # Certificate configuration
278 #################################################################
280 nameOverride: elasticsearch-cert-initializer
281 aafDeployFqi: deployer@people.osaaf.org
282 aafDeployPass: demo123456!
283 # aafDeployCredsExternalSecret: some secret
285 app_ns: "org.osaaf.aaf"
286 fqi_namespace: "org.onap.elastic"
287 fqi: "elastic@elastic.onap.org"
288 public_fqdn: "aaf.osaaf.org"
289 cadi_longitude: "0.0"
291 credsPath: /opt/app/osaaf/local
293 cd {{ .Values.credsPath }};
295 export $(/opt/app/aaf_config/bin/agent.sh local showpass | grep '^c' | xargs -0);
296 keytool -exportcert -rfc -file certs/cacert.pem -keystore {{ .Values.fqi_namespace }}.trust.jks -alias ca_local_0 -storepass $cadi_truststore_password;
297 openssl pkcs12 -in {{ .Values.fqi_namespace }}.p12 -out certs/cert.pem -passin pass:$cadi_keystore_password_p12 -passout pass:$cadi_keystore_password_p12;
298 cp {{ .Values.fqi_namespace }}.key certs/key.pem;
301 #################################################################
302 # subcharts configuration defaults.
303 #################################################################
312 ## Change nameOverride to be consistent accross all elasticsearch (sub)-charts
316 # dedicatednode: "yes"
317 # working as master node only, in this case increase replicaCount for elasticsearch-data
318 # dedicatednode: "no"
319 # handles master and data node functionality