Merge "[MULTICLOUD] Uses new tpls for repos / images"
[oom.git] / kubernetes / common / elasticsearch / values.yaml
1 # Copyright (c) 2020 Bitnami, AT&T, Amdocs, Bell Canada, highstreet technologies
2 # Modification Copyright (c) 2020 Nokia
3 #
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
7 #
8 #       http://www.apache.org/licenses/LICENSE-2.0
9 #
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15
16 #################################################################
17 # Global configuration defaults.
18 #################################################################
19 global:
20   aafEnabled: true
21   nodePortPrefix: 302
22   clusterName: cluster.local
23
24 persistence:
25   mountPath: /dockerdata-nfs
26   backup:
27     mountPath: /dockerdata-nfs/backup
28   storageClass:
29
30 #################################################################
31 # Application configuration defaults.
32 #################################################################
33 ## Init containers parameters:
34 sysctlImage:
35   enabled: true
36
37 # application image
38 image: bitnami/elasticsearch:7.9.3
39 ## Specify a imagePullPolicy
40 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
41 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
42 ##
43 pullPolicy: IfNotPresent
44 ## Optionally specify an array of imagePullSecrets.
45 ## Secrets must be manually created in the namespace.
46 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
47 ##
48 # pullSecrets:
49 #   - myRegistryKeySecretName
50 ## Set to true if you would like to see extra information on logs
51 ## ref:  https://github.com/bitnami/minideb-extras/#turn-on-bash-debugging
52 ##
53 debug: false
54
55 ## String to partially override common.fullname template (will maintain the release name)
56 ##
57 # nameOverride:
58
59 ## String to fully override common.fullname template
60 ##
61 # fullnameOverride:
62 ## updateStrategy for ElasticSearch coordinating deployment
63 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
64 ##
65 updateStrategy:
66   type: RollingUpdate
67 heapSize: 128m
68 ## Provide annotations for the coordinating-only pods.
69 ##
70 podAnnotations: {}
71 ## Pod Security Context for coordinating-only pods.
72 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
73 ##
74 securityContext:
75   enabled: true
76   fsGroup: 1001
77   runAsUser: 1001
78 ## Affinity for pod assignment.
79 ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
80 ##
81 affinity: {}
82 ## Node labels for pod assignment. Evaluated as a template.
83 ## Ref: https://kubernetes.io/docs/user-guide/node-selection/
84 ##
85 nodeSelector: {}
86 ## Tolerations for pod assignment. Evaluated as a template.
87 ## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
88 ##
89 tolerations: []
90 ## Elasticsearch coordinating-only container's resource requests and limits
91 ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
92 ##
93 resources:
94   ## We usually recommend not to specify default resources and to leave this as a conscious
95   ## choice for the user. This also increases chances charts run on environments with little
96   ## resources, such as Minikube.
97   limits: {}
98   #   cpu: 100m
99   #   memory: 128Mi
100   requests:
101     cpu: 25m
102     memory: 256Mi
103 ## Elasticsearch coordinating-only container's liveness and readiness probes
104 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
105 ##
106 livenessProbe:
107   enabled: false
108 #  initialDelaySeconds: 90
109 #  periodSeconds: 10
110 #  timeoutSeconds: 5
111 #  successThreshold: 1
112 #  failureThreshold: 5
113 readinessProbe:
114   enabled: false
115 #  initialDelaySeconds: 90
116 #  periodSeconds: 10
117 #  timeoutSeconds: 5
118 #  successThreshold: 1
119 #  failureThreshold: 5
120 ## Service parameters for coordinating-only node(s)
121 ##
122 serviceAccount:
123   ## Specifies whether a ServiceAccount should be created for the coordinating node
124   ##
125   create: false
126   ## The name of the ServiceAccount to use.
127   ## If not set and create is true, a name is generated using the fullname template
128   ##
129   # name:
130
131 sysctlImage:
132   enabled: true
133   ## Specify a imagePullPolicy
134   ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
135   ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
136   ##
137   pullPolicy: Always
138   ## Optionally specify an array of imagePullSecrets.
139   ## Secrets must be manually created in the namespace.
140   ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
141   ##
142   # pullSecrets:
143   #   - myRegistryKeySecretName
144
145 # nginx image
146 nginx:
147   pullPolicy: IfNotPresent
148   service:
149     name: nginx
150     ports:
151     - name: elasticsearch
152       port: 8080
153 ## Custom server block to be added to NGINX configuration
154 ## PHP-FPM example server block:
155   serverBlock:
156     https: |-
157       server {
158         listen 9200 ssl;
159         #server_name ;
160         # auth_basic "server auth";
161         # auth_basic_user_file /etc/nginx/passwords;
162         ssl_certificate /opt/app/osaaf/local/certs/cert.pem;
163         ssl_certificate_key /opt/app/osaaf/local/certs/key.pem;
164         location / {
165           # deny node shutdown api
166           if ($request_filename ~ "_shutdown") {
167             return 403;
168             break;
169           }
170
171           proxy_pass http://localhost:9000;
172           proxy_http_version 1.1;
173           proxy_set_header Connection "Keep-Alive";
174           proxy_set_header Proxy-Connection "Keep-Alive";
175           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
176           proxy_set_header X-Forwarded-Proto $scheme;
177           proxy_set_header X-Real-IP $remote_addr;
178           proxy_set_header Host $http_host;
179           proxy_redirect off;
180         }
181
182         location = / {
183           proxy_pass http://localhost:9000;
184           proxy_http_version 1.1;
185           proxy_set_header Connection "Keep-Alive";
186           proxy_set_header Proxy-Connection "Keep-Alive";
187           proxy_redirect off;
188           auth_basic "off";
189         }
190       }
191     http: |-
192       server {
193         listen 9200 ;
194         #server_name ;
195         location / {
196           # deny node shutdown api
197           if ($request_filename ~ "_shutdown") {
198             return 403;
199             break;
200           }
201
202           proxy_pass http://localhost:9000;
203           proxy_http_version 1.1;
204           proxy_set_header Connection "Keep-Alive";
205           proxy_set_header Proxy-Connection "Keep-Alive";
206           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
207           proxy_set_header X-Forwarded-Proto $scheme;
208           proxy_set_header X-Real-IP $remote_addr;
209           proxy_set_header Host $http_host;
210           proxy_redirect off;
211         }
212
213         location = / {
214           proxy_pass http://localhost:9000;
215           proxy_http_version 1.1;
216           proxy_set_header Connection "Keep-Alive";
217           proxy_set_header Proxy-Connection "Keep-Alive";
218           proxy_redirect off;
219           auth_basic "off";
220         }
221       }
222 #################################################################
223 # coordinating service configuration defaults.
224 #################################################################
225
226 service:
227   name: ""
228   suffix: ""
229   ## coordinating-only service type
230   ##
231   type: ClusterIP
232   headlessPorts:
233   - name: http-transport
234     port: 9300
235   headless:
236     suffix: discovery
237     annotations:
238       service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
239     publishNotReadyAddresses: true
240   ## Elasticsearch tREST API port
241   ##
242   ports:
243   - name: elasticsearch
244     port: 9200
245
246
247   ## Specify the nodePort value for the LoadBalancer and NodePort service types.
248   ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
249   ##
250   # nodePort:
251   ## Provide any additional annotations which may be required. This can be used to
252   ## set the LoadBalancer service type to internal only.
253   ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
254   ##
255   annotations: {}
256   ## Set the LoadBalancer service type to internal only.
257   ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
258   ##
259   # loadBalancerIP:
260   ## Provide functionality to use RBAC
261   ##
262
263 #################################################################
264 # Certificate configuration
265 #################################################################
266 certInitializer:
267   nameOverride: elasticsearch-cert-initializer
268   aafDeployFqi: deployer@people.osaaf.org
269   aafDeployPass: demo123456!
270   # aafDeployCredsExternalSecret: some secret
271   fqdn: "elastic"
272   app_ns: "org.osaaf.aaf"
273   fqi_namespace: "org.onap.elastic"
274   fqi: "elastic@elastic.onap.org"
275   public_fqdn: "aaf.osaaf.org"
276   cadi_longitude: "0.0"
277   cadi_latitude: "0.0"
278   credsPath: /opt/app/osaaf/local
279   aaf_add_config: >
280     cd {{ .Values.credsPath }};
281     mkdir -p certs;
282     export $(/opt/app/aaf_config/bin/agent.sh local showpass | grep '^c' | xargs -0);
283     keytool -exportcert -rfc -file certs/cacert.pem -keystore {{ .Values.fqi_namespace }}.trust.jks -alias ca_local_0 -storepass $cadi_truststore_password;
284     openssl pkcs12 -in {{ .Values.fqi_namespace }}.p12 -out certs/cert.pem -passin pass:$cadi_keystore_password_p12 -passout pass:$cadi_keystore_password_p12;
285     cp {{ .Values.fqi_namespace }}.key certs/key.pem;
286     chmod -R 755 certs;
287
288 #################################################################
289 # subcharts configuration defaults.
290 #################################################################
291
292
293 #data:
294 #  enabled: false
295
296 #curator:
297 #  enabled: false
298
299 ## Change nameOverride to be consistent accross all elasticsearch (sub)-charts
300
301 master:
302   replicaCount: 3
303   # dedicatednode: "yes"
304   # working as master node only, in this case increase replicaCount for elasticsearch-data
305   # dedicatednode: "no"
306   # handles master and data node functionality
307   dedicatednode: "no"
308   cluster_name: elasticsearch
309 data:
310   enabled: false
311   cluster_name: elasticsearch
312 curator:
313   enabled: false