- [DCAEGEN2-2806/DCAEGEN2-2858/DCAEGEN2-2859] - VES Mapper updated to 1.3.0 - includes Istanbul vulnerability fixes, CBS client SDK to 1.8.7 and switched to integration-java11:9.0.0  base image
          - [DCAEGEN2-2892] - Set resource limits for TCAgen2 blueprints
          - [DCAEGEN2-2868] - Update PRH to use latest SDK (1.8.7)
+         - [DCAEGEN2-2329] Update DES and DL-feeder blueprint to use postgres DB for non-root access
 
 ## [3.3.3] - 2021-08-03
          - [DCAEGEN2-2853] SNMPTrap container updated to 2.0.5 - Switched to CBS client lib to 2.2.1
 
 # ============LICENSE_START====================================================
 # =============================================================================
 # Copyright (C) 2020 China Mobile
+# Copyright (C) 2021 Wipro Limited.
 # =============================================================================
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 imports:
   - "https://www.getcloudify.org/spec/cloudify/4.5.5/types.yaml"
   - plugin:k8splugin?version=>=3.4.3,<4.0.0
+  - plugin:pgaas?version=1.3.0
 inputs:
   service_name:
     type: string
     default: 'dcae-des'
-  mariadb_address:
+  pg_dbName:
     type: string
-    description: MariaDB URL
-    default: "mariadb-galera"
-  mariadb_port:
-    type: string
-    description: MariaDB port
-    default: "3306"
-  db_username:
-    type: string
-    description: MariaDB Username
-    default: "root"
-  db_password:
-    description: MariaDB password
-    type: string
-    default: "secretpassword"
+    description: DB name
+    default: "datalake"
   presto_address:
     type: string
     description: Presto URL
   image_name:
     description: des image URL.
     type: string
-    default: nexus3.onap.org:10003/onap/org.onap.dcaegen2.services.datalake.exposure.service:1.1.0
+    default: nexus3.onap.org:10003/onap/org.onap.dcaegen2.services.datalake.exposure.service:1.1.1
   dl_hostname:
     type: string
     description: dl default des_hostname
     type: string
     description: external port
     default: "30409"
+  pgaas_cluster_name:
+    type: string
+    description: pg cluster
+    default: "dcae-pg-primary.onap"
+
 node_templates:
+  despgaas:
+    type: dcae.nodes.pgaas.database
+    properties:
+      writerfqdn: { get_input: pgaas_cluster_name }
+      name: { get_input: pg_dbName}
+      use_existing: true
+
   datalake:
     type: dcae.nodes.ContainerizedServiceComponent
     interfaces:
               - '1681:0'
               - concat: [{get_input: container_port},":",{get_input: host_port}]
             envs:
-              MYSQL_HOST:
-                get_input: mariadb_address
-              MYSQL_PORT:
-                get_input: mariadb_port
-              MYSQL_ROOT_PASSWORD:
-                get_input: db_password
+              PG_HOST:
+               { get_attribute: [ despgaas, admin, host ] }
+              PG_PORT:
+                { get_attribute: [ despgaas, admin, port ] }
+              PG_USER:
+                { get_attribute: [ despgaas, admin, user ] }
+              PG_PASSWORD:
+                { get_attribute: [ despgaas, admin, password ] }
+              PG_DB:
+                get_input: pg_dbName
               PRESTO_HOST:
                 get_input: presto_address
               PRESTO_PORT:
                 get_input: presto_username
               PRESTO_PASSWORD:
                 get_input: presto_password
+
     properties:
       application_config:
-        MYSQL_HOST:
-          get_input: mariadb_address
-        MYSQL_PORT:
-          get_input: mariadb_port
-        MYSQL_ROOT_PASSWORD:
-          get_input: db_password
+        PG_HOST:
+          { get_attribute: [ despgaas, admin, host ] }
+        PG_PORT:
+          { get_attribute: [ despgaas, admin, port ] }
+        PG_USER:
+          { get_attribute: [ despgaas, admin, user ] }
+        PG_PASSWORD:
+          { get_attribute: [ despgaas, admin, password ] }
         PRESTO_HOST:
           get_input: presto_address
         PRESTO_PORT:
       service_component_type: 'dcae-des'
       service_id: 'dcae-des'
       service_component_name_override: 'dcae-des'
+    relationships:
+    - type: cloudify.relationships.depends_on
+      target: despgaas
 
 # =============================================================================
 # Copyright (C) 2020 QCT. All rights reserved.
 # Copyright (C) 2021 AT&T Intellectual Property. All rights reserved.
+# Copyright (C) 2021 Wipro Limited. All rights reserved.
 # =============================================================================
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 imports:
   - https://www.getcloudify.org/spec/cloudify/4.5.5/types.yaml
   - plugin:k8splugin?version=>=3.4.3,<4.0.0
-
+  - plugin:pgaas?version=1.3.0
 inputs:
-  mariadb_address:
-    type: string
-    description: MariaDB URL
-    default: "mariadb-galera"
-  mariadb_port:
-    type: string
-    description: MariaDB port
-    default: "3306"
-  db_username:
-    type: string
-    description: MariaDB Username
-    default: "root"
-  db_password:
-    description: MariaDB password
+  pg_dbName:
     type: string
-    default: "vlz8CJL1"
+    description: DB name
+    default: "datalake"
   image_name:
     description: datalake feeder image URL.
     type: string
-    default: nexus3.onap.org:10001/onap/org.onap.dcaegen2.services.datalakefeeder:1.1.0
+    default: nexus3.onap.org:10001/onap/org.onap.dcaegen2.services.datalakefeeder:1.1.1
   dl_hostname:
     type: string
     description: dl default dl_hostname
   service_component_name_override:
     type: string
     default: "dcae-dl-feeder"
+  pgaas_cluster_name:
+    type: string
+    description: pg cluster
+    default: "dcae-pg-primary.onap"
 
 node_templates:
+  feederpgaas:
+    type: dcae.nodes.pgaas.database
+    properties:
+      writerfqdn: { get_input: pgaas_cluster_name }
+      name: { get_input: pg_dbName}
+      use_existing: false
+
   datalake:
     type: dcae.nodes.ContainerizedServiceComponent
     interfaces:
               - '1680:0'
               - concat: [{get_input: container_port},":",{get_input: host_port}]
             envs:
-              MYSQL_HOST:
-                get_input: mariadb_address
-              MYSQL_PORT:
-                get_input: mariadb_port
-              MYSQL_ROOT_PASSWORD:
-                get_input: db_password
+              PG_HOST:
+               { get_attribute: [ feederpgaas, admin, host ] }
+              PG_PORT:
+                { get_attribute: [ feederpgaas, admin, port ] }
+              PG_USER:
+                { get_attribute: [ feederpgaas, admin, user ] }
+              PG_PASSWORD:
+                { get_attribute: [ feederpgaas, admin, password ] }
+              PG_DB:
+                get_input: pg_dbName
     properties:
       application_config:
-        MYSQL_HOST:
-          get_input: mariadb_address
-        MYSQL_PORT:
-          get_input: mariadb_port
-        MYSQL_ROOT_PASSWORD:
-          get_input: db_password
+        PG_HOST:
+          { get_attribute: [ feederpgaas, admin, host ] }
+        PG_PORT:
+          { get_attribute: [ feederpgaas, admin, port ] }
+        PG_USER:
+          { get_attribute: [ feederpgaas, admin, user ] }
+        PG_PASSWORD:
+          { get_attribute: [ feederpgaas, admin, password ] }
+        PG_DB:
+          get_input: pg_dbName
         HOSTNAME:
           get_input: dl_hostname
         CONSUL_HOST:
       service_component_type: { get_input: service_component_type }
       service_id: { get_input: service_id }
       service_component_name_override: { get_input: service_component_name_override }
-
+    relationships:
+    - type: cloudify.relationships.depends_on
+      target: feederpgaas