[DCAEGEN2] Create Authorization Policies for DCAE
[oom.git] / kubernetes / dcaegen2-services / components / dcae-pm-mapper / values.yaml
1 # ================================ LICENSE_START ==========================
2 # =========================================================================
3 #  Copyright (C) 2021 Nordix Foundation.
4 #  Copyright (c) 2022 Nokia.  All rights reserved.
5 #  Copyright (c) 2022-2023 J. F. Lucas. All rights reserved.
6 #  Copyright (c) 2023 Deutsche Telekom AG. All rights reserved.
7 # =========================================================================
8 # Licensed under the Apache License, Version 2.0 (the "License");
9 # you may not use this file except in compliance with the License.
10 # You may obtain a copy of the License at
11 #
12 #     http://www.apache.org/licenses/LICENSE-2.0
13 #
14 # Unless required by applicable law or agreed to in writing, software
15 # distributed under the License is distributed on an "AS IS" BASIS,
16 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17 # See the License for the specific language governing permissions and
18 # limitations under the License.
19 # ================================= LICENSE_END ===========================
20
21 #################################################################
22 # Global Configuration Defaults.
23 #################################################################
24 global:
25   nodePortPrefix: 302
26   nodePortPrefixExt: 304
27   centralizedLoggingEnabled: true
28
29 #################################################################
30 # Filebeat Configuration Defaults.
31 #################################################################
32 filebeatConfig:
33   logstashServiceName: log-ls
34   logstashPort: 5044
35
36 #################################################################
37 # Secrets Configuration.
38 #################################################################
39 secrets:
40   - uid: &drSubCredsUID drsubcreds
41     type: basicAuth
42     login: '{{ .Values.drSubscriberCreds.username }}'
43     password: '{{ .Values.drSubscriberCreds.password }}'
44     passwordPolicy: required
45
46 #################################################################
47 # Application Configuration Defaults.
48 #################################################################
49 # Application Image
50 image: onap/org.onap.dcaegen2.services.pm-mapper:1.10.1
51 pullPolicy: Always
52
53 # Log directory where logging sidecar should look for log files
54 # if path is set to null sidecar won't be deployed in spite of
55 # global.centralizedLoggingEnabled setting.
56 log:
57   path: /var/log/ONAP/dcaegen2/services/pm-mapper
58 logConfigMapNamePrefix: '{{ include "common.fullname" . }}'
59
60 # Dependencies
61 readinessCheck:
62   wait_for:
63     containers:
64       - dmaap-bc
65       - dmaap-provisioning-job
66       - dcae-datafile-collector
67       - message-router
68
69 # Probe Configuration
70 readiness:
71   initialDelaySeconds: 10
72   periodSeconds: 15
73   timeoutSeconds: 1
74   path: /healthcheck
75   scheme: HTTP
76   port: 8081
77
78 # Service Configuration
79 service:
80   type: ClusterIP
81   name: dcae-pm-mapper
82   both_tls_and_plain: true
83   ports:
84     - name: http
85       port: 8443
86       plain_port: 8081
87       port_protocol: http
88
89 serviceMesh:
90   authorizationPolicy:
91     authorizedPrincipals:
92       - serviceAccount: message-router-read
93
94 # Data Router Subscriber Credentials
95 drSubscriberCreds:
96   username: username
97   password: password
98
99 credentials:
100 - name: DR_USERNAME
101   uid: *drSubCredsUID
102   key: login
103 - name: DR_PASSWORD
104   uid: *drSubCredsUID
105   key: password
106
107 # Initial Application Configuration
108 applicationConfig:
109   enable_tls: false
110   enable_http: true
111   aaf_identity: ""
112   aaf_password: ""
113   pm-mapper-filter: "{ \"filters\":[] }"
114   #key_store_path: /opt/app/pm-mapper/etc/cert/cert.jks
115   #key_store_pass_path: /opt/app/pm-mapper/etc/cert/jks.pass
116   trust_store_path: /opt/app/pm-mapper/etc/cert/trust.jks
117   trust_store_pass_path: /opt/app/pm-mapper/etc/cert/trust.pass
118   dmaap_dr_delete_endpoint: http://dmaap-dr-node:8080/delete
119   streams_publishes:
120     dmaap_publisher:
121       type: message_router
122       dmaap_info:
123         client_id: ${MR_FILES_PUBLISHER_CLIENT_ID_0}
124         location: san-francisco
125         client_role: org.onap.dcae.pmPublisher
126         topic_url: http://message-router:3904/events/unauthenticated.PERFORMANCE_MEASUREMENTS
127   streams_subscribes:
128     dmaap_subscriber:
129       type: data_router
130       dmaap_info:
131         subscriber_id: ${DR_FILES_SUBSCRIBER_ID_0}
132         decompress: true
133         privileged: true
134         username: ${DR_USERNAME}
135         password: ${DR_PASSWORD}
136         location: san-francisco
137         delivery_url: http://dcae-pm-mapper:8081/delivery
138
139 applicationEnv:
140   #CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml'
141   #Temporary Dummy CBS Port Value until internal SDK library is updated
142   CONFIG_BINDING_SERVICE_SERVICE_PORT: '0000'
143
144 # DataRouter Feed Configuration
145 drFeedConfig:
146   - feedName: bulk_pm_feed
147     owner: dcaecm
148     feedVersion: "0.0"
149     asprClassification: unclassified
150     feedDescription: DFC Feed Creation
151
152 # DataRouter Subscriber Configuration
153 drSubConfig:
154   - feedName: bulk_pm_feed
155     decompress: true
156     username: ${DR_USERNAME}
157     userpwd: ${DR_PASSWORD}
158     dcaeLocationName: loc00
159     privilegedSubscriber: true
160     deliveryURL: http://dcae-pm-mapper:8081/delivery
161
162 # ConfigMap Configuration for Dr Feed, Subscriber, MR Topics
163 volumes:
164   - name: feeds-config
165     path: /opt/app/config/feeds
166   - name: drsub-config
167     path: /opt/app/config/dr_subs
168
169 # Resource Limit Flavor -By Default Using Small
170 flavor: small
171
172 # Segregation for Different Environment (Small and Large)
173 resources:
174   small:
175     limits:
176       cpu: 1
177       memory: 1Gi
178     requests:
179       cpu: 1
180       memory: 1Gi
181   large:
182     limits:
183       cpu: 2
184       memory: 2Gi
185     requests:
186       cpu: 2
187       memory: 2Gi
188   unlimited: {}
189
190 #Pods Service Account
191 serviceAccount:
192   nameOverride: dcae-pm-mapper
193   roles:
194     - read