kubernetes/aaf/components/aaf-sms/values.yaml

   1 # Copyright 2018 Intel Corporation, Inc
   2 # Modifications © 2020 AT&T, Orange
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 #################################################################
  17 # Global configuration defaults.
  18 #################################################################
  19 global:
  20   nodePortPrefix: 302
  21   persistence: {}
  22   aafEnabled: true
  23
  24 flavor: small
  25
  26 #################################################################
  27 # AAF part
  28 #################################################################
  29 certInitializer:
  30   nameOverride: aaf-sms-cert-init
  31   aafDeployFqi: deployer@people.osaaf.org
  32   aafDeployPass: demo123456!
  33   # aafDeployCredsExternalSecret: some secret
  34   fqdn: aaf-sms
  35   fqi: aaf-sms@aaf-sms.onap.org
  36   public_fqdn: aaf-sms.onap.org
  37   cadi_longitude: "0.0"
  38   cadi_latitude: "0.0"
  39   app_ns: org.osaaf.aaf
  40   mountPath: /opt/app/osaaf
  41   keystore: truststoreONAPall.jks
  42   keystore_pass: changeit
  43   root_ca_alias: onaptestca
  44   root_ca_name: aaf_root_ca.cer
  45   permission_user: 1000
  46   permission_group: 1000
  47   aaf_add_config: >
  48     cd {{ .Values.mountPath }}/local;
  49     keytool -exportcert -rfc -file {{ .Values.root_ca_name }} -keystore {{ .Values.keystore }}
  50     -alias {{ .Values.root_ca_alias }} -storepass {{ .Values.keystore_pass }};
  51     chown -R {{.Values.permission_user}}:{{.Values.permission_group}}
  52     {{ .Values.mountPath }};
  53
  54 #################################################################
  55 # Application configuration defaults.
  56 #################################################################
  57 # application image
  58 image: onap/aaf/sms:4.0.2
  59 pullPolicy: Always
  60
  61 # flag to enable debugging - application support required
  62 debugEnabled: false
  63
  64 # application configuration
  65 # Example:
  66 config:
  67   smsdbaddress: "http://aaf-sms-db:8200"
  68   cafile: "/opt/app/osaaf/local/aaf_root_ca.cer"
  69   servercert: "/opt/app/osaaf/local/org.onap.aaf-sms.crt"
  70   serverkey: "/opt/app/osaaf/local/org.onap.aaf-sms.key"
  71   password: "c2VjcmV0bWFuYWdlbWVudHNlcnZpY2VzZWNyZXRwYXNzd29yZA=="
  72
  73 # subchart configuration
  74 vault:
  75   nameOverride: smsdb
  76
  77 # default number of instances
  78 replicaCount: 1
  79
  80 nodeSelector: {}
  81
  82 affinity: {}
  83
  84 # probe configuration parameters
  85 liveness:
  86   initialDelaySeconds: 10
  87   periodSeconds: 30
  88   # necessary to disable liveness probe when setting breakpoints
  89   # in debugger so K8s doesn't restart unresponsive container
  90   enabled: true
  91
  92 readiness:
  93   initialDelaySeconds: 10
  94   periodSeconds: 30
  95
  96 service:
  97   type: ClusterIP
  98   name: aaf-sms
  99   portName: aaf-sms
 100   internalPort: 10443
 101   externalPort: 10443
 102
 103 #define value for aaf-sms-quorumclient subchart
 104 aaf-sms-quorumclient:
 105   service:
 106     name: aaf-sms
 107
 108 persistence:
 109   enabled: true
 110   volumeReclaimPolicy: Retain
 111   accessMode: ReadWriteOnce
 112   size: 1Gi
 113   mountPath: /dockerdata-nfs
 114   mountSubPath: sms/auth
 115
 116 ingress:
 117   enabled: false
 118
 119 secrets:
 120   - uid: aai-creds
 121     type: basicAuth
 122     login: '{{ .Values.oofCreds.aaiUsername }}'
 123     password: '{{ .Values.oofCreds.aaiPassword }}'
 124     passwordPolicy: required
 125   - uid: conductor-creds
 126     type: basicAuth
 127     login: '{{ .Values.oofCreds.conductorUsername }}'
 128     password: '{{ .Values.oofCreds.conductorPassword }}'
 129     passwordPolicy: required
 130   - uid: sdnc-creds
 131     type: basicAuth
 132     login: '{{ .Values.oofCreds.sdncUsername }}'
 133     password: '{{ .Values.oofCreds.sdncPassword }}'
 134     passwordPolicy: required
 135   - uid: music-creds
 136     type: basicAuth
 137     login: '{{ .Values.oofCreds.musicUsername }}'
 138     password: '{{ .Values.oofCreds.musicPassword }}'
 139     passwordPolicy: required
 140   - uid: aaf-creds
 141     type: basicAuth
 142     login: '{{ .Values.oofCreds.aafUsername }}'
 143     password: '{{ .Values.oofCreds.aafPassword }}'
 144     passwordPolicy: required
 145   - uid: policy-plat-creds
 146     type: basicAuth
 147     login: '{{ .Values.oofCreds.policyPlatUsername }}'
 148     password: '{{ .Values.oofCreds.policyPlatPassword }}'
 149     passwordPolicy: required
 150   - uid: policy-cli-creds
 151     type: basicAuth
 152     login: '{{ .Values.oofCreds.policyCliUsername }}'
 153     password: '{{ .Values.oofCreds.policyCliPassword }}'
 154     passwordPolicy: required
 155   - uid: osdf-placement-creds
 156     type: basicAuth
 157     login: '{{ .Values.oofCreds.osdfPlacementUsername }}'
 158     password: '{{ .Values.oofCreds.osdfPlacementPassword }}'
 159     passwordPolicy: required
 160   - uid: osdf-placement-so-creds
 161     type: basicAuth
 162     login: '{{ .Values.oofCreds.osdfPlacementSOUsername }}'
 163     password: '{{ .Values.oofCreds.osdfPlacementSOPassword }}'
 164     passwordPolicy: required
 165   - uid: osdf-placement-vfc-creds
 166     type: basicAuth
 167     login: '{{ .Values.oofCreds.osdfPlacementVFCUsername }}'
 168     password: '{{ .Values.oofCreds.osdfPlacementVFCPassword }}'
 169     passwordPolicy: required
 170   - uid: osdf-cm-scheduler-creds
 171     type: basicAuth
 172     login: '{{ .Values.oofCreds.osdfCMSchedulerUsername }}'
 173     password: '{{ .Values.oofCreds.osdfCMSchedulerPassword }}'
 174     passwordPolicy: required
 175   - uid: config-db-creds
 176     type: basicAuth
 177     login: '{{ .Values.oofCreds.configDbUsername }}'
 178     password: '{{ .Values.oofCreds.configDbPassword }}'
 179     passwordPolicy: required
 180   - uid: osdf-pci-opt-creds
 181     type: basicAuth
 182     login: '{{ .Values.oofCreds.osdfPCIOptUsername }}'
 183     password: '{{ .Values.oofCreds.osdfPCIOptPassword }}'
 184     passwordPolicy: required
 185   - uid: osdf-opt-engine-creds
 186     type: basicAuth
 187     login: '{{ .Values.oofCreds.osdfOptEngineUsername }}'
 188     password: '{{ .Values.oofCreds.osdfOptEnginePassword }}'
 189     passwordPolicy: required
 190   - uid: so-creds
 191     type: basicAuth
 192     login: '{{ .Values.oofCreds.soUsername }}'
 193     password: '{{ .Values.oofCreds.soPassword }}'
 194     passwordPolicy: required
 195   - uid: sdc-creds
 196     type: basicAuth
 197     login: '{{ .Values.oofCreds.sdcUsername }}'
 198     password: '{{ .Values.oofCreds.sdcPassword }}'
 199     passwordPolicy: required
 200   - uid: cps-creds
 201     type: basicAuth
 202     externalSecret: '{{ tpl (default "" .Values.oofCreds.cpsUserExternalSecret) . }}'
 203     login: '{{ .Values.oofCreds.cpsUsername }}'
 204     password: '{{ .Values.oofCreds.cpsPassword }}'
 205     passwordPolicy: required
 206 oofCreds:
 207   aaiUsername: oof@oof.onap.org
 208   aaiPassword: demo123456!
 209
 210   conductorUsername: admin1
 211   conductorPassword: plan.15
 212
 213   sdncUsername: admin
 214   sdncPassword: Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U
 215
 216   musicUsername: conductor
 217   musicPassword: c0nduct0r
 218
 219   aafUsername: aaf_admin@people.osaaf.org
 220   aafPassword: demo123456!
 221
 222   policyPlatUsername: healthcheck
 223   policyPlatPassword: zb!XztG34
 224
 225   policyCliUsername: healthcheck
 226   policyCliPassword: zb!XztG34
 227
 228   osdfPlacementUsername: test
 229   osdfPlacementPassword: testpwd
 230
 231   osdfPlacementSOUsername: so_test
 232   osdfPlacementSOPassword: so_testpwd
 233
 234   osdfPlacementVFCUsername: vfc_test
 235   osdfPlacementVFCPassword: vfc_testpwd
 236
 237   osdfCMSchedulerUsername: test1
 238   osdfCMSchedulerPassword: testpwd1
 239
 240   configDbUsername: osdf
 241   configDbPassword: passwd
 242
 243   osdfPCIOptUsername: pci_test
 244   osdfPCIOptPassword: pci_testpwd
 245
 246   osdfOptEngineUsername: opt_test
 247   osdfOptEnginePassword: opt_testpwd
 248
 249   soUsername: apihBpmn
 250   soPassword: password1$
 251
 252   sdcUsername: aai
 253   sdcPassword: Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U
 254
 255   cpsUsername: ''
 256   cpsPassword: ''
 257   cpsUserExternalSecret: '{{ include "common.release" . }}-cps-core-app-user-creds'
 258
 259 # Configure resource requests and limits
 260 resources:
 261   small:
 262     limits:
 263       cpu: 100m
 264       memory: 400Mi
 265     requests:
 266       cpu: 25m
 267       memory: 10Mi
 268   large:
 269     limits:
 270       cpu: 400m
 271       memory: 1Gi
 272     requests:
 273       cpu: 25m
 274       memory: 100Mi
 275   unlimited: {}