kubernetes/dcaegen2-services/components/dcae-prh/values.yaml

   1 #============LICENSE_START========================================================
   2 # ================================================================================
   3 # Copyright (c) 2021-2023 J. F. Lucas. All rights reserved.
   4 # Copyright (c) 2022 Nokia.  All rights reserved.
   5 # Copyright (c) 2024 Deutsche Telekom Intellectual Property. All rights reserved.
   6 # ================================================================================
   7 # Licensed under the Apache License, Version 2.0 (the "License");
   8 # you may not use this file except in compliance with the License.
   9 # You may obtain a copy of the License at
  10 #
  11 #     http://www.apache.org/licenses/LICENSE-2.0
  12 #
  13 # Unless required by applicable law or agreed to in writing, software
  14 # distributed under the License is distributed on an "AS IS" BASIS,
  15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16 # See the License for the specific language governing permissions and
  17 # limitations under the License.
  18 # ============LICENSE_END=========================================================
  19
  20 #################################################################
  21 # Global configuration defaults.
  22 #################################################################
  23 global:
  24   nodePortPrefix: 302
  25   nodePortPrefixExt: 304
  26   centralizedLoggingEnabled: true
  27
  28 #################################################################
  29 # Filebeat configuration defaults.
  30 #################################################################
  31 filebeatConfig:
  32   logstashServiceName: log-ls
  33   logstashPort: 5044
  34
  35 #################################################################
  36 # Application configuration defaults.
  37 #################################################################
  38 # application image
  39 image: onap/org.onap.dcaegen2.services.prh.prh-app-server:1.10.1
  40 pullPolicy: Always
  41
  42 # log directory where logging sidecar should look for log files
  43 # if path is set to null sidecar won't be deployed in spite of
  44 # global.centralizedLoggingEnabled setting.
  45 log:
  46   path: /opt/app/prh/logs
  47 logConfigMapNamePrefix: '{{ include "common.fullname" . }}'
  48
  49 secrets:
  50   - uid: &aaiCredsUID aaicreds
  51     type: basicAuth
  52     login: '{{ .Values.aaiCreds.user }}'
  53     password: '{{ .Values.aaiCreds.password }}'
  54     passwordPolicy: required
  55
  56 # probe configuration
  57 readiness:
  58   initialDelaySeconds: 5
  59   periodSeconds: 15
  60   path: /heartbeat
  61   scheme: HTTP
  62   port: 8100
  63
  64 # service configuration
  65 service:
  66   type: ClusterIP
  67   name: dcae-prh
  68   ports:
  69     - port: 8100
  70       name: http
  71
  72 serviceMesh:
  73   authorizationPolicy:
  74     authorizedPrincipals:
  75       - serviceAccount: message-router-read
  76
  77 aaiCreds:
  78   user: AAI
  79   password: AAI
  80
  81 credentials:
  82 - name: AAI_USER
  83   uid: *aaiCredsUID
  84   key: login
  85 - name: AAI_PASSWORD
  86   uid: *aaiCredsUID
  87   key: password
  88
  89 # initial application configuration
  90 applicationConfig:
  91   dmaap.dmaapConsumerConfiguration.dmaapContentType: "application/json"
  92   dmaap.dmaapConsumerConfiguration.consumerId: "c12"
  93   dmaap.dmaapConsumerConfiguration.consumerGroup: "OpenDCAE-c12"
  94   dmaap.dmaapConsumerConfiguration.timeoutMs: -1
  95   dmaap.dmaapProducerConfiguration.dmaapContentType: "application/json"
  96   dmaap.dmaapUpdateProducerConfiguration.dmaapContentType: "application/json"
  97   aai.aaiClientConfiguration.pnfUrl: http://aai-internal.onap.svc.cluster.local:80/aai/v23/network/pnfs/pnf
  98   aai.aaiClientConfiguration.baseUrl: http://aai-internal.onap.svc.cluster.local:80/aai/v23
  99   aai.aaiClientConfiguration.aaiHost: aai-internal.onap.svc.cluster.local
 100   aai.aaiClientConfiguration.aaiHostPortNumber: 80
 101   aai.aaiClientConfiguration.aaiProtocol: "http"
 102   aai.aaiClientConfiguration.aaiUserName: ${AAI_USER}
 103   aai.aaiClientConfiguration.aaiUserPassword: ${AAI_PASSWORD}
 104   aai.aaiClientConfiguration.aaiIgnoreSslCertificateErrors: true
 105   aai.aaiClientConfiguration.aaiBasePath: "/aai/v23"
 106   aai.aaiClientConfiguration.aaiPnfPath: "/network/pnfs/pnf"
 107   aai.aaiClientConfiguration.aaiServiceInstancePath: "/business/customers/customer/{{customer}}/service-subscriptions/service-subscription/{{serviceType}}/service-instances/service-instance/{{serviceInstanceId}}"
 108   aai.aaiClientConfiguration.aaiHeaders:
 109       X-FromAppId: "prh"
 110       X-TransactionId: "9999"
 111       Accept: "application/json"
 112       Real-Time: "true"
 113       Authorization: ${AUTH_HDR}
 114   security.trustStorePath: "/opt/app/prh/etc/cert/trust.jks"
 115   security.trustStorePasswordPath: "/opt/app/prh/etc/cert/trust.pass"
 116   security.keyStorePath: "/opt/app/prh/etc/cert/cert.jks"
 117   security.keyStorePasswordPath: "/opt/app/prh/etc/cert/jks.pass"
 118   security.enableAaiCertAuth: false
 119   security.enableDmaapCertAuth: false
 120   streams_publishes:
 121       pnf-update:
 122         type: "message_router"
 123         dmaap_info:
 124           topic_url: http://message-router.onap.svc.cluster.local:3904/events/unauthenticated.PNF_UPDATE
 125       pnf-ready:
 126         type: "message_router"
 127         dmaap_info:
 128           topic_url: http://message-router.onap.svc.cluster.local:3904/events/unauthenticated.PNF_READY
 129   streams_subscribes:
 130       ves-reg-output:
 131         type: "message_router"
 132         dmaap_info:
 133           topic_url: http://message-router.onap.svc.cluster.local:3904/events/unauthenticated.VES_PNFREG_OUTPUT
 134
 135 applicationEnv:
 136   CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml'
 137   AUTH_HDR: '{{ printf "Basic %s" (print .Values.aaiCreds.user ":" .Values.aaiCreds.password | b64enc) }}'
 138   BOOTSTRAP_SERVERS: '{{ include "common.release" . }}-strimzi-kafka-bootstrap:9092'
 139   JAAS_CONFIG:
 140     externalSecret: true
 141     externalSecretUid: '{{ include "common.name" . }}-ku'
 142     key: sasl.jaas.config
 143
 144 # Strimzi Kafka User config
 145 kafkaUser:
 146   acls:
 147     - name: OpenDCAE-c12
 148       type: group
 149       patternType: literal
 150       operations: [Read]
 151     - name: \"*\"
 152       type: topic
 153       patternType: literal
 154       operations: [DescribeConfigs]
 155     - name: unauthenticated.VES_PNFREG_OUTPUT
 156       type: topic
 157       patternType: literal
 158       operations: [Read]
 159     - name: unauthenticated.PNF_READY
 160       type: topic
 161       patternType: literal
 162       operations: [Write]
 163     - name: unauthenticated.PNF_UPDATE
 164       type: topic
 165       patternType: literal
 166       operations: [Write]
 167
 168 # Strimzi Kafka Topics
 169 kafkaTopic:
 170   - name: unauthenticated.PNF_READY
 171     strimziTopicName: unauthenticated.pnf-ready
 172   - name: unauthenticated.PNF_UPDATE
 173     strimziTopicName: unauthenticated.pnf-update
 174
 175 # Resource Limit flavor -By Default using small
 176 flavor: small
 177 # Segregation for Different environment (Small and Large)
 178 resources:
 179   small:
 180     limits:
 181       cpu: "1"
 182       memory: "3Gi"
 183     requests:
 184       cpu: "0.5"
 185       memory: "3Gi"
 186   large:
 187     limits:
 188       cpu: "2"
 189       memory: "6Gi"
 190     requests:
 191       cpu: "1"
 192       memory: "6Gi"
 193   unlimited: {}
 194
 195 #Pods Service Account
 196 serviceAccount:
 197   nameOverride: dcae-prh
 198   roles:
 199     - read