1 # Copyright © 2019 Amdocs, Bell Canada
3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
7 # http://www.apache.org/licenses/LICENSE-2.0
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 # See the License for the specific language governing permissions and
13 # limitations under the License.
15 #################################################################
16 # Global configuration overrides.
18 # These overrides will affect all helm charts (ie. applications)
19 # that are listed below and are 'enabled'.
20 #################################################################
22 # Change to an unused port prefix range to prevent port conflicts
23 # with other instances running within the same k8s cluster
25 nodePortPrefixExt: 304
28 # Install test components
29 # test components are out of the scope of ONAP but allow to have a entire
30 # environment to test the different features of ONAP
31 # Current tests environments provided:
32 # - netbox (needed for CDS IPAM)
33 # - AWX (needed for XXX)
34 # - EJBCA Server (needed for CMPv2 tests)
35 # Today, "contrib" chart that hosting these components must also be enabled
36 # in order to make it work. So `contrib.enabled` must have the same value than
37 # addTestingComponents
38 addTestingComponents: &testing false
41 # Uncomment the following to enable the use of a single docker
42 # repository but ONLY if your repository mirrors all ONAP
43 # docker images. This includes all images from dockerhub and
44 # any other repository that hosts images for ONAP components.
45 #repository: nexus3.onap.org:10001
49 dockerHubRepository: docker.io
51 # readiness check - temporary repo until images migrated to nexus3
52 readinessRepository: oomk8s
53 readinessImage: readiness-check:2.2.1
56 curlImage: curlimages/curl:7.69.1
58 # logging agent - temporary repo until images migrated to nexus3
59 loggingRepository: docker.elastic.co
65 # {{ template "common.fullname" . }}.{{ template "common.namespace" . }}.svc.{{ .Values.global.clusterName }}
66 clusterName: cluster.local
68 # default mount path root directory referenced
69 # by persistent volumes and log files
71 mountPath: /dockerdata-nfs
72 enableDefaultStorageclass: false
74 storageclassProvisioner: kubernetes.io/no-provisioner
75 volumeReclaimPolicy: Retain
77 # override default resource limit flavor for all charts
80 # flag to enable debugging - application support required
83 #Global ingress configuration
88 baseurl: "simpledemo.onap.org"
90 # Global Service Mesh configuration
91 # POC Mode, don't use it in production
97 # POC Mode, only for use in development environment
98 # Keep it enabled in production
100 aafAgentImage: onap/aaf/aaf_agent:2.1.20
106 image: onap/org.onap.aaf.certservice.aaf-certservice-client:1.0.0
108 name: aaf-cert-service-client-tls-secret
109 mountPath: /etc/onap/aaf/certservice/certs/
111 # Certificate related
112 cmpv2Organization: "Linux-Foundation"
113 cmpv2OrganizationalUnit: "ONAP"
114 cmpv2Location: "San-Francisco"
115 cmpv2State: "California"
117 # Client configuration related
119 requestURL: "https://aaf-cert-service:8443/v1/certificate/"
120 requestTimeout: "20000"
121 keystorePath: "/etc/onap/aaf/certservice/certs/certServiceClient-keystore.jks"
122 keystorePassword: "secret"
123 truststorePath: "/etc/onap/aaf/certservice/certs/truststore.jks"
124 truststorePassword: "secret"
127 # Set to false if you want to disable TLS for NodePorts. Be aware that this
128 # will loosen your security.
129 # if set this element will force or not tls even if serviceMesh.tls is set.
133 # Currently, centralized logging is not in best shape so it's disabled by
135 centralizedLoggingEnabled: ¢ralizedLogging false
138 # Example of specific for the components where you want to disable TLS only for
140 # if set this element will force or not tls even if global.serviceMesh.tls and
141 # global.tlsEnabled is set otherwise.
145 # Global storage configuration
146 # Set to "-" for default, or with the name of the storage class
147 # Please note that if you use AAF, CDS, SDC, Netbox or Robot, you need a
148 # storageclass with RWX capabilities (or set specific configuration for these
153 # Example of specific for the components which requires RWX:
156 # storageClassOverride: "My_RWX_Storage_Class"
161 # storageClassOverride: "My_RWX_Storage_Class"
163 # cds-blueprints-processor:
165 # storageClassOverride: "My_RWX_Storage_Class"
169 # storageClassOverride: "My_RWX_Storage_Class"
171 #################################################################
172 # Enable/disable and configure helm charts (ie. applications)
173 # to customize the ONAP deployment.
174 #################################################################
182 openStackType: OpenStackProvider
183 openStackName: OpenStack
184 openStackKeyStoneUrl: http://localhost:8181/apidoc/explorer/index.html
185 openStackServiceTenantName: default
186 openStackDomain: default
187 openStackUserName: admin
188 openStackEncryptedPassword: admin
199 # Today, "contrib" chart that hosting these components must also be enabled
200 # in order to make it work. So `contrib.enabled` must have the same value than
201 # addTestingComponents
214 # Today, "logging" chart that perform the central part of logging must also be
215 # enabled in order to make it work. So `logging.enabled` must have the same
216 # value than centralizedLoggingEnabled
218 enabled: *centralizedLogging
232 # openstack configuration
233 openStackRegion: "Yolo"
234 openStackVNFTenantId: "1234"
244 # openStackEncryptedPasswordHere should match the encrypted string used in SO and APPC and overridden per environment
245 openStackEncryptedPasswordHere: "c124921a3a0efbe579782cde8227681e"
261 # necessary to disable liveness probe when setting breakpoints
262 # in debugger so K8s doesn't restart unresponsive container
265 # so server configuration
267 # message router configuration
269 # openstack configuration
270 openStackUserName: "vnf_user"
271 openStackRegion: "RegionOne"
272 openStackKeyStoneUrl: "http://1.2.3.4:5000"
273 openStackServiceTenantName: "service"
274 openStackEncryptedPasswordHere: "c124921a3a0efbe579782cde8227681e"
276 # configure embedded mariadb
279 mariadbRootPassword: password