nodePortPrefixExt: 304
persistence:
mountPath: /dockerdata-nfs
- security:
- aaf:
- enabled: false
- aaf:
- auth:
- header: Basic c29Ac28ub25hcC5vcmc6ZGVtbzEyMzQ1Ngo=
mariadbGalera:
- serviceName: mariadb-galera
+ service: mariadb-galera
servicePort: '3306'
+ soSdcListenerKafkaUser: so-sdc-list-user
readinessCheck:
wait_for:
#################################################################
# Application configuration defaults.
#################################################################
-image: onap/so/sdc-controller:1.9.0
+image: onap/so/sdc-controller:1.12.2
pullPolicy: Always
db:
containerPort: &containerPort 8085
logPath: ./logs/sdc/
app: sdc-controller
+
service:
- type: ClusterIP
- internalPort: *containerPort
- externalPort: *containerPort
- portName: so-sdc-port
+ type: ClusterIP
+ ports:
+ - name: http
+ port: *containerPort
+
updateStrategy:
- type: RollingUpdate
- maxUnavailable: 1
- maxSurge: 1
+ type: RollingUpdate
+ maxUnavailable: 1
+ maxSurge: 1
#################################################################
# soHelpers part
#################################################################
soHelpers:
- nameOverride: so-sdc-cert-init
- certInitializer:
- nameOverride: so-sdc-cert-init
- credsPath: /opt/app/osaaf/local
- cadi:
- apiEnforcement: org.onap.so.sdcControllerPerm
containerPort: *containerPort
# Resource Limit flavor -By Default using small
resources:
small:
limits:
- memory: 4Gi
- cpu: 2000m
+ memory: 1.5Gi
+ cpu: 1
requests:
- memory: 1Gi
- cpu: 500m
+ memory: 1.5Gi
+ cpu: 0.5
large:
limits:
- memory: 8Gi
- cpu: 4000m
+ memory: 3Gi
+ cpu: 2
requests:
- memory: 2Gi
- cpu: 1000m
+ memory: 3Gi
+ cpu: 1
unlimited: {}
+
livenessProbe:
- path: /manage/health
- port: 8085
- scheme: HTTP
- initialDelaySeconds: 600
- periodSeconds: 60
- timeoutSeconds: 10
- successThreshold: 1
- failureThreshold: 3
+ path: /manage/health
+ port: 8085
+ scheme: HTTP
+ initialDelaySeconds: 600
+ periodSeconds: 60
+ timeoutSeconds: 10
+ successThreshold: 1
+ failureThreshold: 3
+
ingress:
enabled: false
+
+serviceMesh:
+ authorizationPolicy:
+ authorizedPrincipals:
+ - serviceAccount: robot-read
+ - serviceAccount: so-read
+
nodeSelector: {}
tolerations: []
affinity: {}
+# Strimzi KafkaUser config
+kafkaUser:
+ acls:
+ - name: SO
+ type: group
+ operations: [Read]
+ - name: SDC-DISTR
+ type: topic
+ patternType: prefix
+ operations: [Read, Write]
+
#Pods Service Account
serviceAccount:
nameOverride: so-sdc-controller
roles:
- read
+
+#Logs configuration
+log:
+ path: /var/log/onap
+logConfigMapNamePrefix: '{{ include "common.fullname" . }}'