Code Review
/
oom.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
[OOM] Fixing k8s resources and limits
[oom.git]
/
kubernetes
/
aai
/
components
/
aai-schema-service
/
values.yaml
diff --git
a/kubernetes/aai/components/aai-schema-service/values.yaml
b/kubernetes/aai/components/aai-schema-service/values.yaml
index
252df40
..
24e4fa3
100644
(file)
--- a/
kubernetes/aai/components/aai-schema-service/values.yaml
+++ b/
kubernetes/aai/components/aai-schema-service/values.yaml
@@
-1,5
+1,6
@@
# Copyright © 2018 Amdocs, Bell Canada, AT&T
# Modifications Copyright © 2020 Orange
# Copyright © 2018 Amdocs, Bell Canada, AT&T
# Modifications Copyright © 2020 Orange
+# Modifications Copyright © 2023 Nordix Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@
-40,11
+41,11
@@
global: # global defaults
version:
# Current version of the REST API
api:
version:
# Current version of the REST API
api:
- default: v2
4
+ default: v2
7
# Specifies which version the depth parameter is configurable
depth: v11
# List of all the supported versions of the API
# Specifies which version the depth parameter is configurable
depth: v11
# List of all the supported versions of the API
- list: v11,v12,v13,v14,v15,v16,v17,v18,v19,v20,v21,v22,v23,v24
+ list: v11,v12,v13,v14,v15,v16,v17,v18,v19,v20,v21,v22,v23,v24
,v25,v26,v27
# Specifies from which version related link should appear
related:
link: v11
# Specifies from which version related link should appear
related:
link: v11
@@
-58,29
+59,19
@@
global: # global defaults
edge:
label: v12
edge:
label: v12
- # Keystore configuration password and filename
- keystore:
- filename: aai_keystore
- passwd: OBF:1vn21ugu1saj1v9i1v941sar1ugw1vo0
-
- # Truststore configuration password and filename
- truststore:
- filename: aai_keystore
- passwd: OBF:1vn21ugu1saj1v9i1v941sar1ugw1vo0
-
- # Specifies a list of files to be included in auth volume
- auth:
- files:
- - aai_keystore
-
# application image
# application image
-image: onap/aai-schema-service:1.
9.2
+image: onap/aai-schema-service:1.
11.0
pullPolicy: Always
restartPolicy: Always
flavorOverride: small
# default number of instances
replicaCount: 1
pullPolicy: Always
restartPolicy: Always
flavorOverride: small
# default number of instances
replicaCount: 1
+updateStrategy:
+ type: RollingUpdate
+ maxUnavailable: 0
+ maxSurge: 1
+
nodeSelector: {}
affinity: {}
nodeSelector: {}
affinity: {}
@@
-107,6
+98,13
@@
service:
ingress:
enabled: false
ingress:
enabled: false
+serviceMesh:
+ authorizationPolicy:
+ authorizedPrincipals:
+ - serviceAccount: aai-graphadmin-read
+ - serviceAccount: aai-resources-read
+ - serviceAccount: aai-traversal-read
+
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
@@
-127,14
+125,14
@@
ingress:
resources:
small:
limits:
resources:
small:
limits:
- cpu:
2
+ cpu:
999
memory: 4Gi
requests:
cpu: 1
memory: 3Gi
large:
limits:
memory: 4Gi
requests:
cpu: 1
memory: 3Gi
large:
limits:
- cpu:
4
+ cpu:
999
memory: 8Gi
requests:
cpu: 2
memory: 8Gi
requests:
cpu: 2
@@
-146,3
+144,13
@@
serviceAccount:
nameOverride: aai-schema-service
roles:
- read
nameOverride: aai-schema-service
roles:
- read
+
+# Not fully used for now
+securityContext:
+ user_id: 1000
+ group_id: 1000
+
+#Log configuration
+log:
+ path: /var/log/onap
+logConfigMapNamePrefix: '{{ include "common.fullname" . }}'