1 # Copyright © 2020 Bitnami, AT&T, Amdocs, Bell Canada, highstreet technologies
3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
7 # http://www.apache.org/licenses/LICENSE-2.0
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 # See the License for the specific language governing permissions and
13 # limitations under the License.
15 #################################################################
16 # Global configuration defaults.
17 #################################################################
21 readinessImage: onap/oom/readiness:3.0.1
22 loggingRepository: docker.elastic.co
23 loggingImage: beats/filebeat:5.5.0
24 busyboxRepository: registry.hub.docker.com
25 busyboxImage: library/busybox:latest
26 clusterName: cluster.local
29 mountPath: /dockerdata-nfs
31 mountPath: /dockerdata-nfs/backup
33 repositoryOverride: docker.io
35 #################################################################
36 # Application configuration defaults.
37 #################################################################
38 ## Init containers parameters:
44 imageName: bitnami/elasticsearch
45 tag: 6.8.6-debian-9-r23
46 ## Specify a imagePullPolicy
47 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
48 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
50 pullPolicy: IfNotPresent
51 ## Optionally specify an array of imagePullSecrets.
52 ## Secrets must be manually created in the namespace.
53 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
56 # - myRegistryKeySecretName
57 ## Set to true if you would like to see extra information on logs
58 ## ref: https://github.com/bitnami/minideb-extras/#turn-on-bash-debugging
62 ## String to partially override common.fullname template (will maintain the release name)
66 ## String to fully override common.fullname template
69 ## updateStrategy for ElasticSearch coordinating deployment
70 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
75 ## Provide annotations for the coordinating-only pods.
78 ## Pod Security Context for coordinating-only pods.
79 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
85 ## Affinity for pod assignment.
86 ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
89 ## Node labels for pod assignment. Evaluated as a template.
90 ## Ref: https://kubernetes.io/docs/user-guide/node-selection/
93 ## Tolerations for pod assignment. Evaluated as a template.
94 ## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
97 ## Elasticsearch coordinating-only container's resource requests and limits
98 ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
101 ## We usually recommend not to specify default resources and to leave this as a conscious
102 ## choice for the user. This also increases chances charts run on environments with little
103 ## resources, such as Minikube.
110 ## Elasticsearch coordinating-only container's liveness and readiness probes
111 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
115 # initialDelaySeconds: 90
118 # successThreshold: 1
119 # failureThreshold: 5
122 # initialDelaySeconds: 90
125 # successThreshold: 1
126 # failureThreshold: 5
127 ## Service parameters for coordinating-only node(s)
130 ## Specifies whether a ServiceAccount should be created for the coordinating node
133 ## The name of the ServiceAccount to use.
134 ## If not set and create is true, a name is generated using the fullname template
138 ## Bitnami Minideb image version
139 ## ref: https://hub.docker.com/r/bitnami/minideb/tags/
143 imageName: bitnami/minideb
145 ## Specify a imagePullPolicy
146 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
147 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
150 ## Optionally specify an array of imagePullSecrets.
151 ## Secrets must be manually created in the namespace.
152 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
155 # - myRegistryKeySecretName
159 imageName: bitnami/nginx
161 pullPolicy: IfNotPresent
165 - name: elasticsearch
167 ## Custom server block to be added to NGINX configuration
168 ## PHP-FPM example server block:
174 # auth_basic "server auth";
175 # auth_basic_user_file /etc/nginx/passwords;
176 ssl_certificate /opt/app/osaaf/local/certs/cert.pem;
177 ssl_certificate_key /opt/app/osaaf/local/certs/key.pem;
179 # deny node shutdown api
180 if ($request_filename ~ "_shutdown") {
185 proxy_pass http://localhost:9000;
186 proxy_http_version 1.1;
187 proxy_set_header Connection "Keep-Alive";
188 proxy_set_header Proxy-Connection "Keep-Alive";
189 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
190 proxy_set_header X-Forwarded-Proto $scheme;
191 proxy_set_header X-Real-IP $remote_addr;
192 proxy_set_header Host $http_host;
197 proxy_pass http://localhost:9000;
198 proxy_http_version 1.1;
199 proxy_set_header Connection "Keep-Alive";
200 proxy_set_header Proxy-Connection "Keep-Alive";
210 # deny node shutdown api
211 if ($request_filename ~ "_shutdown") {
216 proxy_pass http://localhost:9000;
217 proxy_http_version 1.1;
218 proxy_set_header Connection "Keep-Alive";
219 proxy_set_header Proxy-Connection "Keep-Alive";
220 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
221 proxy_set_header X-Forwarded-Proto $scheme;
222 proxy_set_header X-Real-IP $remote_addr;
223 proxy_set_header Host $http_host;
228 proxy_pass http://localhost:9000;
229 proxy_http_version 1.1;
230 proxy_set_header Connection "Keep-Alive";
231 proxy_set_header Proxy-Connection "Keep-Alive";
236 #################################################################
237 # coordinating service configuration defaults.
238 #################################################################
243 ## coordinating-only service type
247 - name: http-transport
252 service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
253 publishNotReadyAddresses: true
254 ## Elasticsearch tREST API port
257 - name: elasticsearch
261 ## Specify the nodePort value for the LoadBalancer and NodePort service types.
262 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
265 ## Provide any additional annotations which may be required. This can be used to
266 ## set the LoadBalancer service type to internal only.
267 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
270 ## Set the LoadBalancer service type to internal only.
271 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
274 ## Provide functionality to use RBAC
277 #################################################################
278 # Certificate configuration
279 #################################################################
281 nameOverride: elasticsearch-cert-initializer
282 aafDeployFqi: deployer@people.osaaf.org
283 aafDeployPass: demo123456!
284 # aafDeployCredsExternalSecret: some secret
286 app_ns: "org.osaaf.aaf"
287 fqi_namespace: "org.onap.elastic"
288 fqi: "elastic@elastic.onap.org"
289 public_fqdn: "aaf.osaaf.org"
290 cadi_longitude: "0.0"
292 credsPath: /opt/app/osaaf/local
294 cd {{ .Values.credsPath }};
296 export $(/opt/app/aaf_config/bin/agent.sh local showpass | grep '^c' | xargs -0);
297 keytool -exportcert -rfc -file certs/cacert.pem -keystore {{ .Values.fqi_namespace }}.trust.jks -alias ca_local_0 -storepass $cadi_truststore_password;
298 openssl pkcs12 -in {{ .Values.fqi_namespace }}.p12 -out certs/cert.pem -passin pass:$cadi_keystore_password_p12 -passout pass:$cadi_keystore_password_p12;
299 cp {{ .Values.fqi_namespace }}.key certs/key.pem;
302 #################################################################
303 # subcharts configuration defaults.
304 #################################################################
313 ## Change nameOverride to be consistent accross all elasticsearch (sub)-charts
317 # dedicatednode: "yes"
318 # working as master node only, in this case increase replicaCount for elasticsearch-data
319 # dedicatednode: "no"
320 # handles master and data node functionality