Merge "[COMMON] Add custom certs into AAF truststore"
[oom.git] / kubernetes / dcaegen2-services / components / dcae-hv-ves-collector / values.yaml
1 #============LICENSE_START========================================================
2 # ================================================================================
3 # Copyright (c) 2021 J. F. Lucas. All rights reserved.
4 # Copyright (c) 2021 Nokia.  All rights reserved.
5 # ================================================================================
6 # Licensed under the Apache License, Version 2.0 (the "License");
7 # you may not use this file except in compliance with the License.
8 # You may obtain a copy of the License at
9 #
10 #     http://www.apache.org/licenses/LICENSE-2.0
11 #
12 # Unless required by applicable law or agreed to in writing, software
13 # distributed under the License is distributed on an "AS IS" BASIS,
14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 # See the License for the specific language governing permissions and
16 # limitations under the License.
17 # ============LICENSE_END=========================================================
18
19 #################################################################
20 # Global configuration defaults.
21 #################################################################
22 global:
23   nodePortPrefix: 302
24   nodePortPrefixExt: 304
25
26 #################################################################
27 # Filebeat configuration defaults.
28 #################################################################
29 filebeatConfig:
30   logstashServiceName: log-ls
31   logstashPort: 5044
32
33 #################################################################
34 # initContainer images.
35 #################################################################
36 tlsImage: onap/org.onap.dcaegen2.deployments.tls-init-container:2.1.0
37 consulLoaderImage: onap/org.onap.dcaegen2.deployments.consul-loader-container:1.1.0
38 certPostProcessorImage: onap/org.onap.oom.platform.cert-service.oom-certservice-post-processor:2.3.3
39
40 #################################################################
41 # Application configuration defaults.
42 #################################################################
43 # application image
44 image: onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.8.0
45 pullPolicy: Always
46
47 # log directory where logging sidecar should look for log files
48 # if absent, no sidecar will be deployed
49 logDirectory: /var/log/ONAP/dcae-hv-ves-collector
50
51 # directory where TLS certs should be stored
52 # if absent, no certs will be retrieved and stored
53 certDirectory: /etc/ves-hv/ssl
54
55 # TLS role -- set to true if microservice acts as server
56 # If true, an init container will retrieve a server cert
57 # and key from AAF and mount them in certDirectory.
58 tlsServer: true
59
60 secrets:
61   - uid: &aafCredsUID aafcreds
62     type: basicAuth
63     login: '{{ .Values.aafCreds.user }}'
64     password: '{{ .Values.aafCreds.password }}'
65     passwordPolicy: required
66
67 # CMPv2 certificate
68 certificates:
69   - mountPath: /etc/ves-hv/ssl/external
70     commonName: dcae-hv-ves-collector
71     dnsNames:
72       - dcae-hv-ves-collector
73       - hv-ves-collector
74       - hv-ves
75     keystore:
76       outputType:
77         - jks
78       passwordSecretRef:
79         name: hv-ves-cmpv2-keystore-password
80         key: password
81         create: true
82
83 # dependencies
84 readinessCheck:
85   wait_for:
86     - dcae-config-binding-service
87     - aaf-cm
88
89 # probe configuration
90 readiness:
91   type: exec
92   initialDelaySeconds: 5
93   periodSeconds: 15
94   timeoutSeconds: 2
95   command:
96   - /opt/ves-hv-collector/healthcheck.sh
97
98 # service configuration
99 service:
100   type: NodePort
101   name: dcae-hv-ves-collector
102   ports:
103     - name: http
104       port: 6061
105       port_protocol: http
106       nodePort: 22
107
108 aafCreds:
109   user: admin
110   password: admin_secret
111
112 credentials:
113 - name: AAF_USER
114   uid: *aafCredsUID
115   key: login
116 - name: AAF_PASSWORD
117   uid: *aafCredsUID
118   key: password
119
120 # initial application configuration
121 applicationConfig:
122   logLevel: INFO
123   server.idleTimeoutSec: 300
124   server.listenPort: 6061
125   cbs.requestIntervalSec: 5
126   security.sslDisable: false
127   security.keys.keyStoreFile: /etc/ves-hv/ssl/cert.jks
128   security.keys.keyStorePasswordFile: /etc/ves-hv/ssl/jks.pass
129   security.keys.trustStoreFile: /etc/ves-hv/ssl/trust.jks
130   security.keys.trustStorePasswordFile: /etc/ves-hv/ssl/trust.pass
131   streams_publishes:
132     ves-3gpp-fault-supervision:
133       type: kafka
134       aaf_credentials:
135         username: ${AAF_USER}
136         password: ${AAF_PASSWORD}
137       kafka_info:
138         bootstrap_servers: message-router-kafka:9092
139         topic_name: SEC_3GPP_FAULTSUPERVISION_OUTPUT
140     ves-3gpp-provisioning:
141       type: kafka
142       aaf_credentials:
143         username: ${AAF_USER}
144         password: ${AAF_PASSWORD}
145       kafka_info:
146         bootstrap_servers: message-router-kafka:9092
147         topic_name: SEC_3GPP_PROVISIONING_OUTPUT
148     ves-3gpp-heartbeat:
149       type: kafka
150       aaf_credentials:
151         username: ${AAF_USER}
152         password: ${AAF_PASSWORD}
153       kafka_info:
154         bootstrap_servers: message-router-kafka:9092
155         topic_name: SEC_3GPP_HEARTBEAT_OUTPUT
156     ves-3gpp-performance-assurance:
157       type: kafka
158       aaf_credentials:
159         username: ${AAF_USER}
160         password: ${AAF_PASSWORD}
161       kafka_info:
162         bootstrap_servers: message-router-kafka:9092
163         topic_name: SEC_3GPP_PERFORMANCEASSURANCE_OUTPUT
164     perf3gpp:
165       type: kafka
166       aaf_credentials:
167         username: ${AAF_USER}
168         password: ${AAF_PASSWORD}
169       kafka_info:
170         bootstrap_servers: message-router-kafka:9092
171         topic_name: HV_VES_PERF3GPP
172
173 applicationEnv:
174   JAVA_OPTS: '-Dlogback.configurationFile=/etc/ONAP/dcae-hv-ves-collector/logback.xml'
175
176 # Resource Limit flavor -By Default using small
177 flavor: small
178 # Segregation for Different environment (Small and Large)
179 resources:
180   small:
181     limits:
182       cpu: 2
183       memory: 2Gi
184     requests:
185       cpu: 1
186       memory: 1Gi
187   large:
188     limits:
189       cpu: 4
190       memory: 4Gi
191     requests:
192       cpu: 2
193       memory: 2Gi
194   unlimited: {}