[COMMON] Harmonize resource settings
[oom.git] / kubernetes / dcaegen2-services / components / dcae-ves-collector / values.yaml
1 #============LICENSE_START========================================================
2 # ================================================================================
3 # Copyright (c) 2021-2022 Nokia.  All rights reserved.
4 # Copyright (c) 2021-2023 J. F. Lucas. All rights reserved.
5 # Copyright (c) 2022 AT&T Intellectual Property. All rights reserved.
6 # Copyright (c) 2024 Deutsche Telekom Intellectual Property. All rights reserved.
7 # ================================================================================
8 # Licensed under the Apache License, Version 2.0 (the "License");
9 # you may not use this file except in compliance with the License.
10 # You may obtain a copy of the License at
11 #
12 #     http://www.apache.org/licenses/LICENSE-2.0
13 #
14 # Unless required by applicable law or agreed to in writing, software
15 # distributed under the License is distributed on an "AS IS" BASIS,
16 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17 # See the License for the specific language governing permissions and
18 # limitations under the License.
19 # ============LICENSE_END=========================================================
20
21 #################################################################
22 # Global configuration defaults.
23 #################################################################
24 global:
25   nodePortPrefix: 302
26   nodePortPrefixExt: 304
27   centralizedLoggingEnabled: true
28
29 #################################################################
30 # Filebeat configuration defaults.
31 #################################################################
32 filebeatConfig:
33   logstashServiceName: log-ls
34   logstashPort: 5044
35
36 #################################################################
37 # initContainer images.
38 #################################################################
39 certPostProcessorImage: onap/org.onap.oom.platform.cert-service.oom-certservice-post-processor:2.5.0
40
41 #################################################################
42 # Application configuration defaults.
43 #################################################################
44 # application image
45 image: onap/org.onap.dcaegen2.collectors.ves.vescollector:1.12.4
46 pullPolicy: Always
47
48 # log directory where logging sidecar should look for log files
49 # if path is set to null sidecar won't be deployed in spite of
50 # global.centralizedLoggingEnabled setting.
51 log:
52   path: /opt/app/VESCollector/logs
53 logConfigMapNamePrefix: '{{ include "common.fullname" . }}'
54
55 # directory where TLS certs should be stored
56 # if absent, no certs will be retrieved and stored
57 certDirectory: /opt/app/dcae-certificate
58
59 # CMPv2 certificate
60 # It is used only when:
61 # - certDirectory is set
62 # - global cmpv2Enabled flag is set to true
63 # - flag useCmpv2Certificates is set to true
64 # Disabled by default
65 useCmpv2Certificates: false
66 certificates:
67   - mountPath: /opt/app/dcae-certificate/external
68     commonName: dcae-ves-collector
69     dnsNames:
70       - dcae-ves-collector
71       - ves-collector
72       - ves
73     keystore:
74       outputType:
75         - jks
76       passwordSecretRef:
77         name: ves-cmpv2-keystore-password
78         key: password
79         create: true
80
81 # dependencies
82 readinessCheck:
83   wait_for:
84     - message-router
85
86 # probe configuration
87   initialDelaySeconds: 5
88   periodSeconds: 15
89   path: /healthcheck
90   scheme: HTTP
91   port: 8080
92
93 # service configuration
94 service:
95   type: NodePort
96   name: dcae-ves-collector
97   ports:
98     - name: http
99       port: 8443
100       plain_port: 8080
101       port_protocol: http
102       nodePort: 17
103       useNodePortExt: true
104
105 ingress:
106   enabled: false
107   service:
108     - baseaddr: "dcae-ves-collector-api"
109       name: "dcae-ves-collector"
110       port: 8443
111       plain_port: 8080
112   config:
113     ssl: "redirect"
114
115 serviceMesh:
116   authorizationPolicy:
117     authorizedPrincipals:
118       - serviceAccount: istio-ingress
119         namespace: istio-ingress
120
121 # application environments
122 applicationEnv:
123   CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml'
124   LOG4J_FORMAT_MSG_NO_LOOKUPS: 'true'
125   BOOTSTRAP_SERVERS: '{{ include "common.release" . }}-strimzi-kafka-bootstrap:9092'
126   JAAS_CONFIG:
127     externalSecret: true
128     externalSecretUid: '{{ include "common.name" . }}-ku'
129     key: sasl.jaas.config
130
131 # Strimzi Kafka config
132 kafkaUser:
133   acls:
134     - name: unauthenticated.VES_PNFREG_OUTPUT
135       type: topic
136       patternType: literal
137       operations: [Write, DescribeConfigs]
138     - name: unauthenticated.VES_NOTIFICATION_OUTPUT
139       type: topic
140       patternType: literal
141       operations: [Write, DescribeConfigs]
142     - name: unauthenticated.SEC_HEARTBEAT_OUTPUT
143       type: topic
144       patternType: literal
145       operations: [Write, DescribeConfigs]
146     - name: unauthenticated.SEC_OTHER_OUTPUT
147       type: topic
148       patternType: literal
149       operations: [Write, DescribeConfigs]
150     - name: unauthenticated.SEC_FAULT_OUTPUT
151       type: topic
152       patternType: literal
153       operations: [Write, DescribeConfigs]
154     - name: unauthenticated.VES_MEASUREMENT_OUTPUT
155       type: topic
156       patternType: literal
157       operations: [Write, DescribeConfigs]
158     - name: unauthenticated.SEC_3GPP_FAULTSUPERVISION_OUTPUT
159       type: topic
160       patternType: literal
161       operations: [Write, DescribeConfigs]
162     - name: unauthenticated.SEC_3GPP_PROVISIONING_OUTPUT
163       type: topic
164       patternType: literal
165       operations: [Write, DescribeConfigs]
166     - name: unauthenticated.SEC_3GPP_HEARTBEAT_OUTPUT
167       type: topic
168       patternType: literal
169       operations: [Write, DescribeConfigs]
170     - name: unauthenticated.SEC_3GPP_PERFORMANCEASSURANCE_OUTPUT
171       type: topic
172       patternType: literal
173       operations: [Write, DescribeConfigs]
174
175 kafkaTopic:
176   - name: unauthenticated.VES_PNFREG_OUTPUT
177     strimziTopicName: unauthenticated.ves-pnfreg-output
178   - name: unauthenticated.VES_NOTIFICATION_OUTPUT
179     strimziTopicName: unauthenticated.ves-notification-output
180   - name: unauthenticated.SEC_HEARTBEAT_OUTPUT
181     strimziTopicName: unauthenticated.sec-heartbeat-output
182   - name: unauthenticated.SEC_OTHER_OUTPUT
183     strimziTopicName: unauthenticated.sec-other-output
184   - name: unauthenticated.SEC_FAULT_OUTPUT
185     strimziTopicName: unauthenticated.sec-fault-output
186   - name: unauthenticated.VES_MEASUREMENT_OUTPUT
187     strimziTopicName: unauthenticated.ves-measurment-output
188   - name: unauthenticated.SEC_3GPP_FAULTSUPERVISION_OUTPUT
189     strimziTopicName: unauthenticated.sec-3gpp-faultsupervision-output
190   - name: unauthenticated.SEC_3GPP_PROVISIONING_OUTPUT
191     strimziTopicName: unauthenticated.sec-3gpp-provisioning-output
192   - name: unauthenticated.SEC_3GPP_HEARTBEAT_OUTPUT
193     strimziTopicName: unauthenticated.sec-3gpp-heartbeat-output
194   - name: unauthenticated.SEC_3GPP_PERFORMANCEASSURANCE_OUTPUT
195     strimziTopicName: unauthenticated.sec-3gpp-performanceassurance-output
196
197 # initial application configuration
198 applicationConfig:
199   collector.dmaap.streamid: fault=ves-fault|syslog=ves-syslog|heartbeat=ves-heartbeat|measurement=ves-measurement|measurementsForVfScaling=ves-measurement|mobileFlow=ves-mobileflow|other=ves-other|stateChange=ves-statechange|thresholdCrossingAlert=ves-thresholdCrossingAlert|voiceQuality=ves-voicequality|sipSignaling=ves-sipsignaling|notification=ves-notification|pnfRegistration=ves-pnfRegistration|3GPP-FaultSupervision=ves-3gpp-fault-supervision|3GPP-Heartbeat=ves-3gpp-heartbeat|3GPP-Provisioning=ves-3gpp-provisioning|3GPP-PerformanceAssurance=ves-3gpp-performance-assurance
200   collector.inputQueue.maxPending: "8096"
201   collector.keystore.file.location: /opt/app/dcae-certificate/cert.jks
202   collector.keystore.passwordfile: /opt/app/dcae-certificate/jks.pass
203   collector.truststore.file.location: /opt/app/dcae-certificate/trust.jks
204   collector.truststore.passwordfile: /opt/app/dcae-certificate/trust.pass
205   collector.schema.checkflag: "1"
206   collector.schema.file: "{\"v1\":\"./etc/CommonEventFormat_27.2.json\",\"v2\":\"./etc/CommonEventFormat_27.2.json\",\"v3\":\"./etc/CommonEventFormat_27.2.json\",\"v4\":\"./etc/CommonEventFormat_27.2.json\",\"v5\":\"./etc/CommonEventFormat_28.4.1.json\",\"v7\":\"./etc/CommonEventFormat_30.2.1_ONAP.json\"}"
207   collector.externalSchema.checkflag: 1
208   collector.externalSchema.schemasLocation: "./etc/externalRepo/"
209   collector.externalSchema.mappingFileLocation: "./etc/externalRepo/schema-map.json"
210   event.externalSchema.schemaRefPath: $.event.stndDefinedFields.schemaReference
211   event.externalSchema.stndDefinedDataPath: $.event.stndDefinedFields.data
212   collector.service.port: "8080"
213   collector.service.secure.port: "8443"
214   event.transform.flag: "0"
215   auth.method: "noAuth"
216   header.authlist: "sample1,$2a$10$0buh.2WeYwN868YMwnNNEuNEAMNYVU9.FSMJGyIKV3dGET/7oGOi6|demouser,$2a$10$1cc.COcqV/d3iT2N7BjPG.S6ZKv2jpb9a5MV.o7lMih/GpjJRX.Ce"
217   services_calls: []
218   streams_publishes:
219     ves-fault:
220       dmaap_info:
221         topic_url:
222           "http://message-router:3904/events/unauthenticated.SEC_FAULT_OUTPUT"
223       type: message_router
224     ves-measurement:
225       dmaap_info:
226         topic_url:
227           "http://message-router:3904/events/unauthenticated.VES_MEASUREMENT_OUTPUT"
228       type: message_router
229     ves-notification:
230       dmaap_info:
231         topic_url:
232           "http://message-router:3904/events/unauthenticated.VES_NOTIFICATION_OUTPUT"
233       type: message_router
234     ves-pnfRegistration:
235       dmaap_info:
236         topic_url:
237           "http://message-router:3904/events/unauthenticated.VES_PNFREG_OUTPUT"
238       type: message_router
239     ves-heartbeat:
240       dmaap_info:
241         topic_url:
242           "http://message-router:3904/events/unauthenticated.SEC_HEARTBEAT_OUTPUT"
243       type: message_router
244     ves-other:
245       dmaap_info:
246         topic_url:
247           "http://message-router:3904/events/unauthenticated.SEC_OTHER_OUTPUT"
248       type: message_router
249     ves-3gpp-fault-supervision:
250       dmaap_info:
251         topic_url:
252           "http://message-router:3904/events/unauthenticated.SEC_3GPP_FAULTSUPERVISION_OUTPUT"
253       type: message_router
254     ves-3gpp-provisioning:
255       dmaap_info:
256         topic_url:
257           "http://message-router:3904/events/unauthenticated.SEC_3GPP_PROVISIONING_OUTPUT"
258       type: message_router
259     ves-3gpp-heartbeat:
260       dmaap_info:
261         topic_url:
262           "http://message-router:3904/events/unauthenticated.SEC_3GPP_HEARTBEAT_OUTPUT"
263       type: message_router
264     ves-3gpp-performance-assurance:
265       dmaap_info:
266         topic_url:
267           "http://message-router:3904/events/unauthenticated.SEC_3GPP_PERFORMANCEASSURANCE_OUTPUT"
268       type: message_router
269   collector.dynamic.config.update.frequency: "5"
270 # Resource Limit flavor -By Default using small
271 flavor: small
272 # Segregation for Different environment (Small and Large)
273 resources:
274   small:
275     limits:
276       cpu: "2"
277       memory: "1.5Gi"
278     requests:
279       cpu: "1"
280       memory: "1.5Gi"
281   large:
282     limits:
283       cpu: "4"
284       memory: "3Gi"
285     requests:
286       cpu: "2"
287       memory: "3Gi"
288   unlimited: {}
289
290 #Pods Service Account
291 serviceAccount:
292   nameOverride: dcae-ves-collector
293   roles:
294     - read