Run pods as non-root user
[sdc.git] / catalog-be / src / main / resources / config / configuration.yaml
index 36cb54c..8dfe646 100644 (file)
@@ -7,7 +7,7 @@ identificationHeaderFields:
 
 # catalog backend hostname
 beFqdn: localhost
-# sdccatalog.att.com
+# sdccatalog.com
 
 # catalog backend http port
 beHttpPort: 8080
@@ -23,9 +23,22 @@ beSslPort: 8443
 
 version: 1.1.0
 released: 2012-11-30
-toscaConformanceLevel: 9.0
+toscaConformanceLevel: 12.0
 minToscaConformanceLevel: 3.0
 
+# access restriction
+authCookie:
+  securityKey: "AGLDdG4D04BKm2IxIWEr8o=="
+  maxSessionTimeOut: 24*60*60*1000
+  sessionIdleTimeOut: 2*60*60*1000
+  cookieName: "AuthenticationCookie"
+  path: /
+  domain: ""
+  isHttpOnly: true
+  # redirect variable name from portal.properties file
+  redirectURL: "ecomp_redirect_url"
+  excludedUrls: ['/config', '/configmgr', '/kibanaProxy', '/healthcheck', '/v1/catalog', '/v1/catalog/archive', '/v1/followed', '/v1/catalog/upload.*', '/v1/consumers', '/v1/screen', '/v1/catalogUpdateTimea', '/v1/user.*']
+
 # These values are necessary for running upgrade migration 1710.0 process
 enableAutoHealing: false
 appVersion: 1.1.0
@@ -43,18 +56,16 @@ supportAllottedResourcesAndProxy: true
 deleteLockTimeoutInSeconds: 60
 maxDeleteComponents: 10
 
-titanCfgFile: /home/vagrant/catalog-be/config/catalog-be/titan.properties
-titanInMemoryGraph: false
-titanLockTimeout: 1800
+janusGraphCfgFile: /home/vagrant/catalog-be/config/catalog-be/janusgraph.properties
+janusGraphInMemoryGraph: false
+janusGraphLockTimeout: 1800
 
-# The interval to try and reconnect to titan DB when it is down during ASDC startup:
-titanReconnectIntervalInSeconds: 3
+# The interval to try and reconnect to janusGraph DB when it is down during ASDC startup:
+janusGraphReconnectIntervalInSeconds: 3
 
-# The read timeout towards Titan DB when health check is invoked:
-titanHealthCheckReadTimeout: 1
+# The read timeout towards Janus Graph DB when health check is invoked:
+janusGraphHealthCheckReadTimeout: 1
 
-# The interval to try and reconnect to Elasticsearch when it is down during ASDC startup:
-esReconnectIntervalInSeconds: 3
 uebHealthCheckReconnectIntervalInSeconds: 15
 uebHealthCheckReadTimeout: 4
 
@@ -93,45 +104,22 @@ neo4j:
 
 cassandraConfig:
     cassandraHosts: [192.168.33.10]
+    cassandraPort: 9042
     localDataCenter: DC-sdc-iltlv650
     reconnectTimeout : 30000
     authenticate: true
     username: asdc_user
     password: Aa1234%^!
     ssl: true
-    truststorePath : /opt/app/jetty/base/be/config/.truststore
+    truststorePath : /var/lib/jetty/opt/base/be/config/.truststore
     truststorePassword : Aa123456
     keySpaces:
         - { name: dox, replicationStrategy: NetworkTopologyStrategy, replicationInfo: ['DC-sdc-iltlv650', '1']}
         - { name: sdcaudit, replicationStrategy: NetworkTopologyStrategy, replicationInfo: ['DC-sdc-iltlv650', '1']}
         - { name: sdcartifact, replicationStrategy: NetworkTopologyStrategy, replicationInfo: ['DC-sdc-iltlv650', '1']}
-        - { name: sdccomponent, replicationStrategy: NetworkTopologyStrategy, replicationInfo: ['DC-sdc-iltlv650', '1']}       
+        - { name: sdccomponent, replicationStrategy: NetworkTopologyStrategy, replicationInfo: ['DC-sdc-iltlv650', '1']}
         - { name: sdcrepository, replicationStrategy: NetworkTopologyStrategy, replicationInfo: ['DC-sdc-iltlv650', '1']}
 
-
-#Application-specific settings of ES
-elasticSearch:
-    # Mapping of index prefix to time-based frame. For example, if below is configured:
-    #
-    # - indexPrefix: auditingevents
-    #    creationPeriod: minute
-    #
-    # then ES object of type which is mapped to "auditingevents-*" template, and created on 2015-12-23 13:24:54, will enter "auditingevents-2015-12-23-13-24" index.
-    # Another object created on 2015-12-23 13:25:54, will enter "auditingevents-2015-12-23-13-25" index.
-    # If creationPeriod: month, both of the above will enter "auditingevents-2015-12" index.
-    #
-    # PLEASE NOTE: the timestamps are created in UTC/GMT timezone! This is needed so that timestamps will be correctly presented in Kibana.
-    #
-    # Legal values for creationPeriod - year, month, day, hour, minute, none (meaning no time-based behaviour).
-    #
-    # If no creationPeriod is configured for indexPrefix, default behavour is creationPeriod: month.
-    
-    indicesTimeFrequency:
-      - indexPrefix: auditingevents
-        creationPeriod: month
-      - indexPrefix: monitoring_events
-        creationPeriod: month
-
 artifactTypes:
    - CHEF
    - PUPPET
@@ -154,6 +142,8 @@ artifactTypes:
    - SNMP_POLL
    - SNMP_TRAP
    - GUIDE
+   - CONTROLLER_BLUEPRINT_ARCHIVE
+   - PNF_SW_INFORMATION
 
 licenseTypes:
    - User
@@ -314,9 +304,15 @@ systemMonitoring:
     isProxy: false
     probeIntervalInSeconds: 15
 
-defaultHeatArtifactTimeoutMinutes: 60
+heatArtifactDeploymentTimeout:
+  defaultMinutes: 30
+  minMinutes: 1
+  maxMinutes: 120
 
 serviceDeploymentArtifacts:
+    CONTROLLER_BLUEPRINT_ARCHIVE:
+        acceptedTypes:
+            - zip
     YANG_XML:
         acceptedTypes:
             - xml
@@ -342,7 +338,12 @@ serviceDeploymentArtifacts:
             - xml
     AAI_VF_INSTANCE_MODEL:
         acceptedTypes:
-            - xml 
+            - xml
+    CLOUD_TECHNOLOGY_SPECIFIC_ARTIFACT:
+        acceptedTypes:
+            - zip
+            - tgz
+            - csar
     OTHER:
         acceptedTypes:
 
@@ -370,6 +371,10 @@ resourceDeploymentArtifacts:
     HEAT_ARTIFACT:
         acceptedTypes:
         validForResourceTypes: *allResourceTypes
+    CLOUD_TECHNOLOGY_SPECIFIC_ARTIFACT:
+        acceptedTypes:
+            - zip
+        validForResourceTypes: *allResourceTypes
     YANG_XML:
         acceptedTypes:
             - xml
@@ -405,7 +410,16 @@ resourceDeploymentArtifacts:
         acceptedTypes:
             - yaml
             - yml
-        validForResourceTypes: *allResourceTypes
+        validForResourceTypes:
+            - VFC
+            - CP
+            - VL
+            - VF
+            - CR
+            - VFCMT
+            - Abstract
+            - CVFC
+            - PNF
     PERFORMANCE_COUNTER:
         acceptedTypes:
             - csv
@@ -437,7 +451,7 @@ resourceDeploymentArtifacts:
         acceptedTypes:
         validForResourceTypes:
             - VF
-            - VFCMT       
+            - VFCMT
     DCAE_EVENT:
         acceptedTypes:
         validForResourceTypes:
@@ -455,13 +469,54 @@ resourceDeploymentArtifacts:
             - VF
     OTHER:
         acceptedTypes:
-        validForResourceTypes: *allResourceTypes
+        validForResourceTypes:
+          - VFC
+          - CP
+          - VL
+          - VF
+          - VFCMT
+          - Abstract
+          - CVFC
+          - PNF
     SNMP_POLL:
         acceptedTypes:
         validForResourceTypes: *allResourceTypes
     SNMP_TRAP:
         acceptedTypes:
         validForResourceTypes: *allResourceTypes
+    PM_DICTIONARY:
+        acceptedTypes:
+            - yaml
+            - yml
+        validForResourceTypes:
+            - VF
+            - PNF
+    YANG_MODULE:
+        acceptedTypes:
+            - yang
+        validForResourceTypes:
+            - VF
+            - PNF
+    ANSIBLE_PLAYBOOK:
+        acceptedTypes:
+            - yaml
+            - yml
+        validForResourceTypes:
+            - VF
+            - PNF
+    ONBOARDED_PACKAGE:
+        acceptedTypes:
+            - csar
+        validForResourceTypes:
+            - VF
+            - PNF
+    CONTROLLER_BLUEPRINT_ARCHIVE:
+        acceptedTypes:
+            - zip
+        validForResourceTypes:
+            - VF
+            - PNF
+
 
 resourceInstanceDeploymentArtifacts:
     HEAT_ENV:
@@ -530,7 +585,7 @@ resourceInformationalArtifacts:
         validForResourceTypes: *allResourceTypes
     OTHER:
         acceptedTypes:
-        validForResourceTypes: 
+        validForResourceTypes:
             - VFC
             - CVFC
             - CP
@@ -540,6 +595,12 @@ resourceInformationalArtifacts:
             - VFCMT
             - Abstract
             - PNF
+    PNF_SW_INFORMATION:
+        acceptedTypes:
+            - yml
+            - yaml
+        validForResourceTypes:
+            - PNF
     SNMP_POLL:
         acceptedTypes:
         validForResourceTypes: *allResourceTypes
@@ -553,12 +614,6 @@ resourceInformationalArtifacts:
             - VFC
             - CVFC
 
-resourceInformationalDeployedArtifacts:
-
-requirementsToFulfillBeforeCert:
-
-capabilitiesToConsumeBeforeCert:
-
 unLoggedUrls:
    - /sdc2/rest/healthCheck
 
@@ -586,6 +641,12 @@ dcae:
     port: 8080
     healthCheckUri: "/dcae/healthCheck"
 
+ecompPortal:
+    protocol: https
+    host: ecomp-portal-web-tdevn2.mtn23a.ecomp.cci.att.com
+    port: 8443
+    healthCheckUri: "/ecompui/portalApi/healthCheck"
+
 switchoverDetector:
     gBeFqdn: AIO-BE.ecomp.idns.cip.com
     gFeFqdn: AIO-FE.ecomp.idns.cip.com
@@ -627,6 +688,7 @@ toscaValidators:
     stringMaxLength: 2500
 
 disableAudit: false
+consumerBusinessLogic: false
 
 vfModuleProperties:
     min_vf_module_instances:
@@ -669,18 +731,74 @@ environmentContext:
        - Useful_Non-Revenue
        - General_Non-Revenue
 
+gabConfig:
+  - artifactType: 'VES_EVENTS'
+    pathsandnames:
+      -
+        friendlyName: "Action"
+        path: "event.action[2]"
+        searchable: true
+      -
+        friendlyName: "Comment"
+        path: "event.comment"
+        searchable: true
+      -
+        friendlyName: "Alarm Additional Information"
+        path: "event.structure.faultFields.structure.alarmAdditionalInformation.comment"
+        searchable: true
+  - artifactType: 'PM_DICTIONARY'
+    pathsandnames:
+      -
+        friendlyName: "measType"
+        path: "pmMetaData.pmFields.measType"
+        searchable: true
+      -
+        friendlyName: "measDescription"
+        path: "pmMetaData.pmFields.measDescription"
+        searchable: true
+      -
+        friendlyName: "measCondition"
+        path: "pmMetaData.pmFields.measCondition"
+        searchable: false
+      -
+        friendlyName: "measResultUnits"
+        path: "pmMetaData.pmFields.measResultUnits"
+        searchable: false
+      -
+        friendlyName: "measResultRange"
+        path: "pmMetaData.pmFields.measResultRange"
+        searchable: false
+      -
+        friendlyName: "measObjClass"
+        path: "pmMetaData.pmFields.measObjClass"
+        searchable: true
+      -
+        friendlyName: "measCollectionMethod"
+        path: "pmMetaData.pmFields.measCollectionMethod"
+        searchable: false
+      -
+        friendlyName: "measInfoId"
+        path: "pmMetaData.pmFields.measInfoId"
+        searchable: true
+      -
+        friendlyName: "iMeasInfoId"
+        path: "pmMetaData.pmFields.iMeasInfoId"
+        searchable: false
+
+#Tenant isolation consumer
 dmaapConsumerConfiguration:
-    hosts: olsd004.wnsnet.attws.com:3905
+    active: true
+    hosts: olsd004.wnsnet.ws.com:3905
     consumerGroup: asdc
     consumerId: mama #mama - in Order To Consume Remove This String And Replace It With -> mama
     timeoutMs: 15000
     limit: 1
     pollingInterval: 2
-    topic: com.att.sdc.23911-SDCforTestDev-v001
+    topic: com.sdc.23911-SDCforTestDev-v001
     latitude: 32.109333
     longitude: 34.855499
     version: 1.0
-    serviceName: dmaap-v1.dev.dmaap.dt.saat.acsi.att.com/events
+    serviceName: dmaap-v1.dev.dmaap.dt.saat.acsi.com/events
     environment: TEST
     partner: BOT_R
     routeOffer: MR1
@@ -694,15 +812,52 @@ dmaapConsumerConfiguration:
     dme2preferredRouterFilePath: DME2preferredRouter.txt
     timeLimitForNotificationHandleMs: 120000
     credential:
-        username: m09875@sdc.att.com
-        password: hmXYcznAljMSisdy8zgcag==
+        username: sdc@sdc.com
+        password: XyCUPhFx9u70aklYGo6OiA==
+    aftDme2SslEnable: true
+    aftDme2ClientIgnoreSslConfig: false
+    aftDme2ClientKeystore: /var/lib/jetty/opt/base/be/config/.truststore
+    aftDme2ClientKeystorePassword: XyCUPhFx9u70aklYGo6OiA==
+    aftDme2ClientSslCertAlias: certman
+
+#Performence microservice dmaap producer
+dmaapProducerConfiguration:
+    active: false
+    consumerGroup: asdc
+    consumerId: mama #mama - in Order To Consume Remove This String And Replace It With -> mama
+    timeoutMs: 15000
+    limit: 1
+    pollingInterval: 2
+    topic: com.sdc.23911-SDCforTestDev-v001
+    latitude: 32.109333
+    longitude: 34.855499
+    version: 1.0
+    serviceName: dmaap-v1.dev.dmaap.dt.saat.acsi.com/events
+    environment: TEST
+    partner: BOT_R
+    routeOffer: MR1
+    protocol: http
+    contenttype: application/json
+    dme2TraceOn: true
+    aftEnvironment: AFTUAT
+    aftDme2ConnectionTimeoutMs: 15000
+    aftDme2RoundtripTimeoutMs: 240000
+    aftDme2ReadTimeoutMs: 50000
+    dme2preferredRouterFilePath: DME2preferredRouter.txt
+    timeLimitForNotificationHandleMs: 120000
+    credential:
+        username: sdc@sdc.com
+        password: XyCUPhFx9u70aklYGo6OiA==
+        aftDme2SslEnable: true
+    aftDme2ClientIgnoreSslConfig: false
+    aftDme2ClientKeystore: /var/lib/jetty/opt/jetty/base/be/config/.truststore
+    aftDme2ClientKeystorePassword: XyCUPhFx9u70aklYGo6OiA==
+    aftDme2ClientSslCertAlias: certman
 
 
-        
-dmeConfiguration:
-    dme2Search: DME2SEARCH
-    dme2Resolve: DME2RESOLVE
 
+dmeConfiguration:
+    lookupUriFormat: "http://DME2RESOLVE/service=%s/version=1.0.0/envContext=%s/routeOffer=DEFAULT"
 
 excludedPolicyTypesMapping:
    # VF:
@@ -715,21 +870,52 @@ excludedGroupTypesMapping:
     CR:
        - org.openecomp.groups.VfModule
        - org.openecomp.groups.heat.HeatStack
+       - org.openecomp.groups.Group
        - tosca.groups.Root
     PNF:
        - org.openecomp.groups.VfModule
        - org.openecomp.groups.heat.HeatStack
+       - org.openecomp.groups.Group
        - tosca.groups.Root
     VF:
        - org.openecomp.groups.VfModule
        - org.openecomp.groups.heat.HeatStack
+       - org.openecomp.groups.Group
        - tosca.groups.Root
     Service:
        - org.openecomp.groups.VfModule
        - org.openecomp.groups.heat.HeatStack
+       - org.openecomp.groups.Group
        - tosca.groups.Root
 
 healthStatusExclude:
    - DE
-   - ES
    - DMAAP
+   - DMAAP_PRODUCER
+   - ECOMP_PORTAL
+
+aafNamespace: com.att.sdc
+
+aafAuthNeeded: false
+
+cadiFilterParams:
+    hostname: 192.168.33.10
+    csp_domain: PROD
+    cadi_keyfile: /var/lib/jetty/opt/base/be/config/catalog-be/keyfile
+    cadi_loglevel: DEBUG
+    cadi_truststore: /var/lib/jetty/opt/base/be/config/.truststore
+    cadi_truststore_password: enc:XyCUPhFx9u70aklYGo6OiA==
+    #aaf_url: https://aaf.onap.org/service=?
+    aaf_id: aaf@sdc.onap.org
+    aaf_password: enc:XyCUPhFx9u70aklYGo6OiA==
+    aaf_env: DEV
+    aafLocateUrl: https://aaf.api.simpledemo.onap.org:8095
+    aaf_url: https://AAF_LOCATE_URL/AAF_NS.service:2.0
+    AFT_LATITUDE: "32.780140"
+    AFT_LONGITUDE: "-96.800451"
+    AFT_ENVIRONMENT: AFTUAT
+    cadiX509Issuers: "CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US"
+
+# This configuration entry lists all node type names prefix that shall be allowed on SDC.
+definedResourceNamespace:
+  - org.openecomp.resource.