Add new fields for application config 56/77456/6
authorChengkai Yan <martin.c.yan@est.tech>
Mon, 21 Jan 2019 07:23:42 +0000 (08:23 +0100)
committerChengkai Yan <martin.c.yan@est.tech>
Fri, 1 Feb 2019 03:41:29 +0000 (04:41 +0100)
Change-Id: I9a814e71b5e7e559cfc8313d65ec5e15d2520a09
Issue-ID: DCAEGEN2-1096
Signed-off-by: Chengkai Yan <martin.c.yan@est.tech>
blueprints/k8s-datafile-collector.yaml-template

index 1f29df0..152c923 100644 (file)
@@ -71,6 +71,10 @@ inputs:
     type: integer\r
     description: secure port on Kubernetes host where datafile API will be exposed\r
     default: 30224\r
+  secureEnableCert:\r
+    type: boolean\r
+    description: enable certificate base connection with PNF and DMaap\r
+    default: false\r
 node_templates:\r
   datafile-collector:\r
     interfaces:\r
@@ -104,6 +108,11 @@ node_templates:
         dmaap.ftp.ftpesConfiguration.keyPassword: "secret"\r
         dmaap.ftp.ftpesConfiguration.trustedCA: "/config/cacerts"\r
         dmaap.ftp.ftpesConfiguration.trustedCAPassword: "secret"\r
+        dmaap.security.trustStorePath: "/opt/app/datafile/etc/cert/trust.jks"\r
+        dmaap.security.trustStorePasswordPath: "/opt/app/datafile/etc/cert/trust.pass"\r
+        dmaap.security.keyStorePath: "/opt/app/datafile/etc/cert/key.p12"\r
+        dmaap.security.keyStorePasswordPath: "/opt/app/datafile/etc/cert/key.pass"\r
+        dmaap.security.enableDmaapCertAuth: { get_input: secureEnableCert }\r
       docker_config:\r
         healthcheck:\r
           endpoint: /heartbeat\r
@@ -117,4 +126,7 @@ node_templates:
       dns_name: 'dcae-datafile-collector'\r
       log_info:\r
         log_directory: "/opt/app/datafile/logs"\r
+      tls_info:\r
+        cert_directory: '/opt/app/datafile/etc/cert/'\r
+        use_tls: true\r
     type: dcae.nodes.ContainerizedPlatformComponent\r