kubernetes/aaf/components/aaf-sms/values.yaml

   1 # Copyright 2018 Intel Corporation, Inc
   2 # Modifications © 2020 AT&T, Orange
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 #################################################################
  17 # Global configuration defaults.
  18 #################################################################
  19 global:
  20   nodePortPrefix: 302
  21   persistence: {}
  22   aafEnabled: true
  23
  24 flavor: small
  25
  26 #################################################################
  27 # AAF part
  28 #################################################################
  29 certInitializer:
  30   nameOverride: aaf-sms-cert-init
  31   aafDeployFqi: deployer@people.osaaf.org
  32   aafDeployPass: demo123456!
  33   # aafDeployCredsExternalSecret: some secret
  34   fqdn: aaf-sms
  35   fqi: aaf-sms@aaf-sms.onap.org
  36   public_fqdn: aaf-sms.onap.org
  37   cadi_longitude: "0.0"
  38   cadi_latitude: "0.0"
  39   app_ns: org.osaaf.aaf
  40   mountPath: /opt/app/osaaf
  41   keystore: truststoreONAPall.jks
  42   keystore_pass: changeit
  43   root_ca_alias: onaptestca
  44   root_ca_name: aaf_root_ca.cer
  45   permission_user: 1000
  46   permission_group: 1000
  47   aaf_add_config: >
  48     cd {{ .Values.mountPath }}/local;
  49     keytool -exportcert -rfc -file {{ .Values.root_ca_name }} -keystore {{ .Values.keystore }}
  50     -alias {{ .Values.root_ca_alias }} -storepass {{ .Values.keystore_pass }};
  51     chown -R {{.Values.permission_user}}:{{.Values.permission_group}}
  52     {{ .Values.mountPath }};
  53
  54 #################################################################
  55 # Application configuration defaults.
  56 #################################################################
  57 # application image
  58 image: onap/aaf/sms:4.0.2
  59 pullPolicy: Always
  60
  61 # flag to enable debugging - application support required
  62 debugEnabled: false
  63
  64 # application configuration
  65 # Example:
  66 config:
  67   smsdbaddress: "http://aaf-sms-db:8200"
  68   cafile: "/opt/app/osaaf/local/aaf_root_ca.cer"
  69   servercert: "/opt/app/osaaf/local/org.onap.aaf-sms.crt"
  70   serverkey: "/opt/app/osaaf/local/org.onap.aaf-sms.key"
  71   password: "c2VjcmV0bWFuYWdlbWVudHNlcnZpY2VzZWNyZXRwYXNzd29yZA=="
  72
  73 # subchart configuration
  74 vault:
  75   nameOverride: smsdb
  76
  77 # default number of instances
  78 replicaCount: 1
  79
  80 nodeSelector: {}
  81
  82 affinity: {}
  83
  84 # probe configuration parameters
  85 liveness:
  86   initialDelaySeconds: 10
  87   periodSeconds: 30
  88   # necessary to disable liveness probe when setting breakpoints
  89   # in debugger so K8s doesn't restart unresponsive container
  90   enabled: true
  91
  92 readiness:
  93   initialDelaySeconds: 10
  94   periodSeconds: 30
  95
  96 service:
  97   type: ClusterIP
  98   name: aaf-sms
  99   portName: aaf-sms
 100   internalPort: 10443
 101   externalPort: 10443
 102
 103 #define value for aaf-sms-quorumclient subchart
 104 aaf-sms-quorumclient:
 105   service:
 106     name: aaf-sms
 107
 108 persistence:
 109   enabled: true
 110   volumeReclaimPolicy: Retain
 111   accessMode: ReadWriteOnce
 112   size: 1Gi
 113   mountPath: /dockerdata-nfs
 114   mountSubPath: sms/auth
 115
 116 ingress:
 117   enabled: false
 118
 119 cps:
 120   enabled: true
 121
 122 secrets:
 123   - uid: aai-creds
 124     type: basicAuth
 125     login: '{{ .Values.oofCreds.aaiUsername }}'
 126     password: '{{ .Values.oofCreds.aaiPassword }}'
 127     passwordPolicy: required
 128   - uid: conductor-creds
 129     type: basicAuth
 130     login: '{{ .Values.oofCreds.conductorUsername }}'
 131     password: '{{ .Values.oofCreds.conductorPassword }}'
 132     passwordPolicy: required
 133   - uid: sdnc-creds
 134     type: basicAuth
 135     login: '{{ .Values.oofCreds.sdncUsername }}'
 136     password: '{{ .Values.oofCreds.sdncPassword }}'
 137     passwordPolicy: required
 138   - uid: music-creds
 139     type: basicAuth
 140     login: '{{ .Values.oofCreds.musicUsername }}'
 141     password: '{{ .Values.oofCreds.musicPassword }}'
 142     passwordPolicy: required
 143   - uid: aaf-creds
 144     type: basicAuth
 145     login: '{{ .Values.oofCreds.aafUsername }}'
 146     password: '{{ .Values.oofCreds.aafPassword }}'
 147     passwordPolicy: required
 148   - uid: policy-plat-creds
 149     type: basicAuth
 150     login: '{{ .Values.oofCreds.policyPlatUsername }}'
 151     password: '{{ .Values.oofCreds.policyPlatPassword }}'
 152     passwordPolicy: required
 153   - uid: policy-cli-creds
 154     type: basicAuth
 155     login: '{{ .Values.oofCreds.policyCliUsername }}'
 156     password: '{{ .Values.oofCreds.policyCliPassword }}'
 157     passwordPolicy: required
 158   - uid: osdf-placement-creds
 159     type: basicAuth
 160     login: '{{ .Values.oofCreds.osdfPlacementUsername }}'
 161     password: '{{ .Values.oofCreds.osdfPlacementPassword }}'
 162     passwordPolicy: required
 163   - uid: osdf-placement-so-creds
 164     type: basicAuth
 165     login: '{{ .Values.oofCreds.osdfPlacementSOUsername }}'
 166     password: '{{ .Values.oofCreds.osdfPlacementSOPassword }}'
 167     passwordPolicy: required
 168   - uid: osdf-placement-vfc-creds
 169     type: basicAuth
 170     login: '{{ .Values.oofCreds.osdfPlacementVFCUsername }}'
 171     password: '{{ .Values.oofCreds.osdfPlacementVFCPassword }}'
 172     passwordPolicy: required
 173   - uid: osdf-cm-scheduler-creds
 174     type: basicAuth
 175     login: '{{ .Values.oofCreds.osdfCMSchedulerUsername }}'
 176     password: '{{ .Values.oofCreds.osdfCMSchedulerPassword }}'
 177     passwordPolicy: required
 178   - uid: config-db-creds
 179     type: basicAuth
 180     login: '{{ .Values.oofCreds.configDbUsername }}'
 181     password: '{{ .Values.oofCreds.configDbPassword }}'
 182     passwordPolicy: required
 183   - uid: osdf-pci-opt-creds
 184     type: basicAuth
 185     login: '{{ .Values.oofCreds.osdfPCIOptUsername }}'
 186     password: '{{ .Values.oofCreds.osdfPCIOptPassword }}'
 187     passwordPolicy: required
 188   - uid: osdf-opt-engine-creds
 189     type: basicAuth
 190     login: '{{ .Values.oofCreds.osdfOptEngineUsername }}'
 191     password: '{{ .Values.oofCreds.osdfOptEnginePassword }}'
 192     passwordPolicy: required
 193   - uid: so-creds
 194     type: basicAuth
 195     login: '{{ .Values.oofCreds.soUsername }}'
 196     password: '{{ .Values.oofCreds.soPassword }}'
 197     passwordPolicy: required
 198   - uid: sdc-creds
 199     type: basicAuth
 200     login: '{{ .Values.oofCreds.sdcUsername }}'
 201     password: '{{ .Values.oofCreds.sdcPassword }}'
 202     passwordPolicy: required
 203   - uid: cps-creds
 204     type: basicAuth
 205     externalSecret: '{{ tpl (default "" .Values.oofCreds.cpsUserExternalSecret) . }}'
 206     login: '{{ .Values.oofCreds.cpsUsername }}'
 207     password: '{{ .Values.oofCreds.cpsPassword }}'
 208     passwordPolicy: required
 209 oofCreds:
 210   aaiUsername: oof@oof.onap.org
 211   aaiPassword: demo123456!
 212
 213   conductorUsername: admin1
 214   conductorPassword: plan.15
 215
 216   sdncUsername: admin
 217   sdncPassword: Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U
 218
 219   musicUsername: conductor
 220   musicPassword: c0nduct0r
 221
 222   aafUsername: aaf_admin@people.osaaf.org
 223   aafPassword: demo123456!
 224
 225   policyPlatUsername: healthcheck
 226   policyPlatPassword: zb!XztG34
 227
 228   policyCliUsername: healthcheck
 229   policyCliPassword: zb!XztG34
 230
 231   osdfPlacementUsername: test
 232   osdfPlacementPassword: testpwd
 233
 234   osdfPlacementSOUsername: so_test
 235   osdfPlacementSOPassword: so_testpwd
 236
 237   osdfPlacementVFCUsername: vfc_test
 238   osdfPlacementVFCPassword: vfc_testpwd
 239
 240   osdfCMSchedulerUsername: test1
 241   osdfCMSchedulerPassword: testpwd1
 242
 243   configDbUsername: osdf
 244   configDbPassword: passwd
 245
 246   osdfPCIOptUsername: pci_test
 247   osdfPCIOptPassword: pci_testpwd
 248
 249   osdfOptEngineUsername: opt_test
 250   osdfOptEnginePassword: opt_testpwd
 251
 252   soUsername: apihBpmn
 253   soPassword: password1$
 254
 255   sdcUsername: aai
 256   sdcPassword: Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U
 257
 258   cpsUsername: ''
 259   cpsPassword: ''
 260   cpsUserExternalSecret: '{{ include "common.release" . }}-cps-core-app-user-creds'
 261
 262 # Configure resource requests and limits
 263 resources:
 264   small:
 265     limits:
 266       cpu: 100m
 267       memory: 400Mi
 268     requests:
 269       cpu: 25m
 270       memory: 10Mi
 271   large:
 272     limits:
 273       cpu: 400m
 274       memory: 1Gi
 275     requests:
 276       cpu: 25m
 277       memory: 100Mi
 278   unlimited: {}
 279
 280 wait_for_job_container:
 281   containers:
 282     - '{{ include "common.name" . }}-preload'
 283