Merge "[AUTHENTICATION] Restructured keycloak and Oauth2-proxy"

[oom.git] / kubernetes / aai / components / aai-traversal / values.yaml

diff --git a/kubernetes/aai/components/aai-traversal/values.yaml b/kubernetes/aai/components/aai-traversal/values.yaml
index ca41b76..b860b81 100644 (file)
--- a/kubernetes/aai/components/aai-traversal/values.yaml
+++ b/kubernetes/aai/components/aai-traversal/values.yaml
@@ -20,7 +20,8 @@
 # Declare variables to be passed into your templates.
 global: # global defaults
   nodePortPrefix: 302
 # Declare variables to be passed into your templates.
 global: # global defaults
   nodePortPrefix: 302

-
+  kafkaBootstrap: strimzi-kafka-bootstrap
+  aaiTravKafkaUser: aai-trav-kafka-user

   cassandra:
     #Service Name of the cassandra cluster to connect to.
     #Override it to aai-cassandra if localCluster is enabled.
   cassandra:
     #Service Name of the cassandra cluster to connect to.
     #Override it to aai-cassandra if localCluster is enabled.


@@ -59,7 +60,7 @@ global: # global defaults
 
     # Active spring profiles for the resources microservice
     profiles:
 
     # Active spring profiles for the resources microservice
     profiles:

-      active: production,dmaap
+      active: production,kafka

 
     # Notification event specific properties
     notification:
 
     # Notification event specific properties
     notification:


@@ -84,11 +85,11 @@ global: # global defaults
       version:
         # Current version of the REST API
         api:
       version:
         # Current version of the REST API
         api:

-          default: v27
+          default: v29

         # Specifies which version the depth parameter is configurable
         depth: v11
         # List of all the supported versions of the API
         # Specifies which version the depth parameter is configurable
         depth: v11
         # List of all the supported versions of the API

-        list: v11,v12,v13,v14,v15,v16,v17,v18,v19,v20,v21,v22,v23,v24,v25,v26,v27
+        list: v11,v12,v13,v14,v15,v16,v17,v18,v19,v20,v21,v22,v23,v24,v25,v26,v27,v28,v29

         # Specifies from which version related link should appear
         related:
           link: v11
         # Specifies from which version related link should appear
         related:
           link: v11


@@ -105,9 +106,13 @@ global: # global defaults
     # Specifies which clients should always default to realtime graph connection
     realtime:
       clients: SDNC,MSO,SO,robot-ete
     # Specifies which clients should always default to realtime graph connection
     realtime:
       clients: SDNC,MSO,SO,robot-ete

+    kafkaBootstrap: strimzi-kafka-bootstrap
+    jaasConfExternalSecret: '{{ include "common.release" . }}-{{ .Values.global.aaiTravKafkaUser }}'
+    someConfig: random
+    aaiTopic: AAI-EVENT

 
 # application image
 
 # application image

-image: onap/aai-traversal:1.11.2
+image: onap/aai-traversal:1.13.5

 pullPolicy: Always
 restartPolicy: Always
 flavor: small
 pullPolicy: Always
 restartPolicy: Always
 flavor: small


@@ -142,7 +147,6 @@ aai_enpoints:
 
 # application configuration
 config:
 
 # application configuration
 config:

-

   # configure keycloak according to your environment.
   # don't forget to add keycloak in active profiles above (global.config.profiles)
   keycloak:
   # configure keycloak according to your environment.
   # don't forget to add keycloak in active profiles above (global.config.profiles)
   keycloak:


@@ -156,6 +160,18 @@ config:
     # the data-owner property with the given role to the user in keycloak
     multiTenancy:
       enabled: true
     # the data-owner property with the given role to the user in keycloak
     multiTenancy:
       enabled: true

+  janusgraph:
+    caching:
+      # enable when running read-heavy workloads
+      # modifications to graph done by this service/janusgraph instance will immediately invalidate the cache
+      # modifications to graph done by other services (resources) will only be visible
+      # after time specified in db-cache-time
+      enabled: false
+      # Documentation: https://docs.janusgraph.org/operations/cache/#database-level-caching
+      dbCacheTime: 180000 # in milliseconds
+      dbCacheSize: 0.1 # percentage (expressed as a decimal between 0 and 1) of the total heap space available to the JVM running
+      dbCacheCleanWait: 20 # in milliseconds
+

 
   # Specifies timeout information such as application specific and limits
   timeout:
 
   # Specifies timeout information such as application specific and limits
   timeout:


@@ -166,6 +182,29 @@ config:
     # Specifies how long should it wait before timing out the REST request
     limit: 180000
 
     # Specifies how long should it wait before timing out the REST request
     limit: 180000
 

+  # environment variables added to the launch of the image in deployment
+  env:
+    MIN_HEAP_SIZE: "512m"
+    MAX_HEAP_SIZE: "1024m"
+    MAX_METASPACE_SIZE: "512m"
+
+  # adds jvm args for remote debugging the application
+  debug:
+    enabled: false
+    args: "-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=5005"
+
+  # adds jvm args for remote profiling the application
+  profiling:
+    enabled: false
+    args:
+      - "-Dcom.sun.management.jmxremote"
+      - "-Dcom.sun.management.jmxremote.ssl=false"
+      - "-Dcom.sun.management.jmxremote.authenticate=false"
+      - "-Dcom.sun.management.jmxremote.local.only=false"
+      - "-Dcom.sun.management.jmxremote.port=9999"
+      - "-Dcom.sun.management.jmxremote.rmi.port=9999"
+      - "-Djava.rmi.server.hostname=127.0.0.1"
+

   # Disables the updateQueryData script to run as part of traversal
   disableUpdateQuery: true
 
   # Disables the updateQueryData script to run as part of traversal
   disableUpdateQuery: true
 


@@ -220,7 +259,7 @@ service:
   internalPort: 8446
   portName2: tcp-5005
   internalPort2: 5005
   internalPort: 8446
   portName2: tcp-5005
   internalPort2: 5005

-  portName3: http-aai-traversal
+  portName3: http-traversal

   internalPort3: 8448
   terminationGracePeriodSeconds: 120
   sessionAffinity: None
   internalPort3: 8448
   terminationGracePeriodSeconds: 120
   sessionAffinity: None


@@ -236,13 +275,14 @@ serviceMesh:
 
 # To make logback capping values configurable
 logback:
 
 # To make logback capping values configurable
 logback:

-  logToFileEnabled: true
+  logToFileEnabled: false

   maxHistory: 7
   totalSizeCap: 6GB
   queueSize: 1000
 
 accessLogback:
   maxHistory: 7
   totalSizeCap: 6GB
   queueSize: 1000
 
 accessLogback:

-  logToFileEnabled: true
+  livenessAccessLogEnabled: false # false: do not log kubernetes liveness probes
+  logToFileEnabled: false

   maxHistory: 7
   totalSizeCap: 6GB
 
   maxHistory: 7
   totalSizeCap: 6GB
 


@@ -251,25 +291,32 @@ accessLogback:
 resources:
   small:
     limits:
 resources:
   small:
     limits:

-      cpu: 999
-      memory: 4Gi
+      cpu: "2"
+      memory: "4Gi"

     requests:
     requests:

-      cpu: 1
-      memory: 3Gi
+      cpu: "1"
+      memory: "3Gi"

   large:
     limits:
   large:
     limits:

-      cpu: 999
-      memory: 8Gi
+      cpu: "4"
+      memory: "8Gi"

     requests:
     requests:

-      cpu: 2
-      memory: 4Gi
+      cpu: "2"
+      memory: "4Gi"

   unlimited: {}
 
   unlimited: {}
 

+endpoints:
+  enabled: true
+  health:
+    enabled: true
+  info:
+    enabled: true
+

 metrics:
   serviceMonitor:
     enabled: false
     targetPort: 8448
 metrics:
   serviceMonitor:
     enabled: false
     targetPort: 8448

-    path: /prometheus
+    path: /actuator/prometheus

     basicAuth:
       enabled: false
       externalSecretName: mysecretname
     basicAuth:
       enabled: false
       externalSecretName: mysecretname


@@ -326,4 +373,24 @@ serviceAccount:
 #Log configuration
 log:
   path: /var/log/onap
 #Log configuration
 log:
   path: /var/log/onap

+  level:
+    root: DEBUG
+    base: DEBUG # base package (org.onap.aai)

 logConfigMapNamePrefix: '{{ include "common.fullname" . }}'
 logConfigMapNamePrefix: '{{ include "common.fullname" . }}'

+#################################################################
+# Secrets metaconfig
+#################################################################
+secrets:
+  - uid: aai-trav-kafka-user
+    externalSecret: '{{ tpl (default "" .Values.config.jaasConfExternalSecret) . }}'
+    type: genericKV
+    envs:
+      - name: sasl.jaas.config
+        value: '{{ .Values.config.someConfig }}'
+        policy: generate
+kafkaUser:
+  authenticationType: scram-sha-512
+  acls:
+    - name: AAI-EVENT
+      type: topic
+      operations: [Read, Write]