1 # Copyright © 2017 Amdocs, Bell Canada
2 # Modifications Copyright © 2018-2020 AT&T Intellectual Property
3 # Modifications Copyright (C) 2021-2022 Nordix Foundation.
5 # Licensed under the Apache License, Version 2.0 (the "License");
6 # you may not use this file except in compliance with the License.
7 # You may obtain a copy of the License at
9 # http://www.apache.org/licenses/LICENSE-2.0
11 # Unless required by applicable law or agreed to in writing, software
12 # distributed under the License is distributed on an "AS IS" BASIS,
13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 # See the License for the specific language governing permissions and
15 # limitations under the License.
17 #################################################################
18 # Global configuration defaults.
19 #################################################################
23 # '&mariadbConfig' means we "store" the values for later use in the file
24 # with '*mariadbConfig' pointer.
25 config: &mariadbConfig
26 mysqlDatabase: policyadmin
27 service: &mariadbService
28 name: &policy-mariadb policy-mariadb
30 prometheusEnabled: false
32 #################################################################
34 #################################################################
36 - uid: db-root-password
37 name: &dbRootPassSecretName '{{ include "common.release" . }}-policy-db-root-password'
39 externalSecret: '{{ ternary "" (tpl (default "" (index .Values "mariadb-galera" "rootUser" "externalSecret")) .) (hasSuffix "policy-db-root-password" (index .Values "mariadb-galera" "rootUser" "externalSecret"))}}'
40 password: '{{ (index .Values "mariadb-galera" "rootUser" "password") }}'
43 name: &dbSecretName '{{ include "common.release" . }}-policy-db-secret'
45 externalSecret: '{{ ternary "" (tpl (default "" (index .Values "mariadb-galera" "db" "externalSecret")) .) (hasSuffix "policy-db-secret" (index .Values "mariadb-galera" "db" "externalSecret"))}}'
46 login: '{{ index .Values "mariadb-galera" "db" "user" }}'
47 password: '{{ index .Values "mariadb-galera" "db" "password" }}'
48 passwordPolicy: generate
49 - uid: policy-app-user-creds
50 name: &policyAppCredsSecret '{{ include "common.release" . }}-policy-app-user-creds'
52 externalSecret: '{{ tpl (default "" .Values.config.policyAppUserExternalSecret) . }}'
53 login: '{{ .Values.config.policyAppUserName }}'
54 password: '{{ .Values.config.policyAppUserPassword }}'
55 passwordPolicy: generate
56 - uid: policy-pap-user-creds
57 name: &policyPapCredsSecret '{{ include "common.release" . }}-policy-pap-user-creds'
59 externalSecret: '{{ tpl (default "" .Values.restServer.policyPapUserExternalSecret) . }}'
60 login: '{{ .Values.restServer.policyPapUserName }}'
61 password: '{{ .Values.restServer.policyPapUserPassword }}'
62 passwordPolicy: required
63 - uid: policy-api-user-creds
64 name: &policyApiCredsSecret '{{ include "common.release" . }}-policy-api-user-creds'
66 externalSecret: '{{ tpl (default "" .Values.restServer.policyApiUserExternalSecret) . }}'
67 login: '{{ .Values.restServer.policyApiUserName }}'
68 password: '{{ .Values.restServer.policyApiUserPassword }}'
69 passwordPolicy: required
72 credsExternalSecret: *dbSecretName
78 apiUserExternalSecret: *policyApiCredsSecret
83 papUserExternalSecret: *policyPapCredsSecret
84 apiUserExternalSecret: *policyApiCredsSecret
101 appUserExternalSecret: *policyAppCredsSecret
102 policy-clamp-ac-k8s-ppnt:
104 policy-clamp-ac-pf-ppnt:
107 apiUserExternalSecret: *policyApiCredsSecret
108 papUserExternalSecret: *policyPapCredsSecret
109 policy-clamp-ac-http-ppnt:
113 policy-clamp-runtime-acm:
117 appUserExternalSecret: *policyAppCredsSecret
121 #################################################################
122 # DB configuration defaults.
123 #################################################################
125 repository: nexus3.onap.org:10001
129 image: mariadb:10.5.8
132 image: onap/policy-db-migrator:2.4.2
134 policy_home: "/opt/app/policy"
139 # flag to enable debugging - application support required
142 # default number of instances
149 # probe configuration parameters
151 initialDelaySeconds: 10
153 # necessary to disable liveness probe when setting breakpoints
154 # in debugger so K8s doesn't restart unresponsive container
158 initialDelaySeconds: 10
163 policyAppUserName: runtimeUser
166 # mariadb-galera.config and global.mariadb.config must be equals
170 externalSecret: *dbSecretName
171 name: &mysqlDbName policyadmin
173 externalSecret: *dbRootPassSecretName
174 nameOverride: *policy-mariadb
175 # mariadb-galera.service and global.mariadb.service must be equals
176 service: *mariadbService
180 mountSubPath: policy/maria/data
182 nameOverride: *policy-mariadb
185 policyPapUserName: policyadmin
186 policyPapUserPassword: zb!XztG34
187 policyApiUserName: policyadmin
188 policyApiUserPassword: zb!XztG34
190 # Resource Limit flavor -By Default using small
191 # Segregation for Different environment (small, large, or unlimited)
210 #Pods Service Account