[DCAE] Revert TLS disabling for external DCAE MSs
[oom.git] / kubernetes / dcaegen2-services / components / dcae-ves-collector / values.yaml
1 #============LICENSE_START========================================================
2 # ================================================================================
3 # Copyright (c) 2021-2022 Nokia.  All rights reserved.
4 # Copyright (c) 2021-2022 J. F. Lucas. All rights reserved.
5 # Copyright (c) 2022 AT&T Intellectual Property. All rights reserved.
6 # ================================================================================
7 # Licensed under the Apache License, Version 2.0 (the "License");
8 # you may not use this file except in compliance with the License.
9 # You may obtain a copy of the License at
10 #
11 #     http://www.apache.org/licenses/LICENSE-2.0
12 #
13 # Unless required by applicable law or agreed to in writing, software
14 # distributed under the License is distributed on an "AS IS" BASIS,
15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 # See the License for the specific language governing permissions and
17 # limitations under the License.
18 # ============LICENSE_END=========================================================
19
20 #################################################################
21 # Global configuration defaults.
22 #################################################################
23 global:
24   nodePortPrefix: 302
25   nodePortPrefixExt: 304
26   centralizedLoggingEnabled: true
27
28 #################################################################
29 # Filebeat configuration defaults.
30 #################################################################
31 filebeatConfig:
32   logstashServiceName: log-ls
33   logstashPort: 5044
34
35 #################################################################
36 # initContainer images.
37 #################################################################
38 tlsImage: onap/org.onap.dcaegen2.deployments.tls-init-container:2.1.0
39 certPostProcessorImage: onap/org.onap.oom.platform.cert-service.oom-certservice-post-processor:2.5.0
40
41 #################################################################
42 # Application configuration defaults.
43 #################################################################
44 # application image
45 image: onap/org.onap.dcaegen2.collectors.ves.vescollector:1.11.1
46 pullPolicy: Always
47
48 # log directory where logging sidecar should look for log files
49 # if path is set to null sidecar won't be deployed in spite of
50 # global.centralizedLoggingEnabled setting.
51 log:
52   path: /opt/app/VESCollector/logs
53 logConfigMapNamePrefix: '{{ include "common.fullname" . }}'
54
55 # directory where TLS certs should be stored
56 # if absent, no certs will be retrieved and stored
57 certDirectory: /opt/app/dcae-certificate
58
59 # TLS role -- set to true if microservice acts as server
60 # If true, an init container will retrieve a server cert
61 # and key from AAF and mount them in certDirectory.
62 tlsServer: true
63
64 # CMPv2 certificate
65 # It is used only when:
66 # - certDirectory is set
67 # - global cmpv2Enabled flag is set to true
68 # - flag useCmpv2Certificates is set to true
69 # Disabled by default
70 useCmpv2Certificates: false
71 certificates:
72   - mountPath: /opt/app/dcae-certificate/external
73     commonName: dcae-ves-collector
74     dnsNames:
75       - dcae-ves-collector
76       - ves-collector
77       - ves
78     keystore:
79       outputType:
80         - jks
81       passwordSecretRef:
82         name: ves-cmpv2-keystore-password
83         key: password
84         create: true
85
86 # dependencies
87 readinessCheck:
88   wait_for:
89     - aaf-cm
90     - message-router
91
92 # probe configuration
93   initialDelaySeconds: 5
94   periodSeconds: 15
95   path: /healthcheck
96   scheme: HTTP
97   port: 8080
98
99 # service configuration
100 service:
101   type: NodePort
102   name: dcae-ves-collector
103   ports:
104     - name: http
105       port: 8443
106       plain_port: 8080
107       port_protocol: http
108       nodePort: 17
109       useNodePortExt: true
110
111 ingress:
112   enabled: false
113   service:
114     - baseaddr: "dcae-ves-collector-api"
115       name: "dcae-ves-collector"
116       port: 8443
117       plain_port: 8080
118   config:
119     ssl: "redirect"
120
121 # application environments
122 applicationEnv:
123   CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml'
124   LOG4J_FORMAT_MSG_NO_LOOKUPS: 'true'
125
126 # initial application configuration
127 applicationConfig:
128   collector.dmaap.streamid: fault=ves-fault|syslog=ves-syslog|heartbeat=ves-heartbeat|measurement=ves-measurement|measurementsForVfScaling=ves-measurement|mobileFlow=ves-mobileflow|other=ves-other|stateChange=ves-statechange|thresholdCrossingAlert=ves-thresholdCrossingAlert|voiceQuality=ves-voicequality|sipSignaling=ves-sipsignaling|notification=ves-notification|pnfRegistration=ves-pnfRegistration|3GPP-FaultSupervision=ves-3gpp-fault-supervision|3GPP-Heartbeat=ves-3gpp-heartbeat|3GPP-Provisioning=ves-3gpp-provisioning|3GPP-PerformanceAssurance=ves-3gpp-performance-assurance
129   collector.inputQueue.maxPending: "8096"
130   collector.keystore.file.location: /opt/app/dcae-certificate/cert.jks
131   collector.keystore.passwordfile: /opt/app/dcae-certificate/jks.pass
132   collector.truststore.file.location: /opt/app/dcae-certificate/trust.jks
133   collector.truststore.passwordfile: /opt/app/dcae-certificate/trust.pass
134   collector.schema.checkflag: "1"
135   collector.schema.file: "{\"v1\":\"./etc/CommonEventFormat_27.2.json\",\"v2\":\"./etc/CommonEventFormat_27.2.json\",\"v3\":\"./etc/CommonEventFormat_27.2.json\",\"v4\":\"./etc/CommonEventFormat_27.2.json\",\"v5\":\"./etc/CommonEventFormat_28.4.1.json\",\"v7\":\"./etc/CommonEventFormat_30.2.1_ONAP.json\"}"
136   collector.externalSchema.checkflag: 1
137   collector.externalSchema.schemasLocation: "./etc/externalRepo/"
138   collector.externalSchema.mappingFileLocation: "./etc/externalRepo/schema-map.json"
139   event.externalSchema.schemaRefPath: $.event.stndDefinedFields.schemaReference
140   event.externalSchema.stndDefinedDataPath: $.event.stndDefinedFields.data
141   collector.service.port: "8080"
142   collector.service.secure.port: "8443"
143   event.transform.flag: "0"
144   auth.method: "certBasicAuth"
145   header.authlist: "sample1,$2a$10$0buh.2WeYwN868YMwnNNEuNEAMNYVU9.FSMJGyIKV3dGET/7oGOi6|demouser,$2a$10$1cc.COcqV/d3iT2N7BjPG.S6ZKv2jpb9a5MV.o7lMih/GpjJRX.Ce"
146   services_calls: []
147   streams_publishes:
148     ves-fault:
149       dmaap_info:
150         topic_url:
151           "http://message-router:3904/events/unauthenticated.SEC_FAULT_OUTPUT"
152       type: message_router
153     ves-measurement:
154       dmaap_info:
155         topic_url:
156           "http://message-router:3904/events/unauthenticated.VES_MEASUREMENT_OUTPUT"
157       type: message_router
158     ves-notification:
159       dmaap_info:
160         topic_url:
161           "http://message-router:3904/events/unauthenticated.VES_NOTIFICATION_OUTPUT"
162       type: message_router
163     ves-pnfRegistration:
164       dmaap_info:
165         topic_url:
166           "http://message-router:3904/events/unauthenticated.VES_PNFREG_OUTPUT"
167       type: message_router
168     ves-heartbeat:
169       dmaap_info:
170         topic_url:
171           "http://message-router:3904/events/unauthenticated.SEC_HEARTBEAT_OUTPUT"
172       type: message_router
173     ves-other:
174       dmaap_info:
175         topic_url:
176           "http://message-router:3904/events/unauthenticated.SEC_OTHER_OUTPUT"
177       type: message_router
178     ves-3gpp-fault-supervision:
179       dmaap_info:
180         topic_url:
181           "http://message-router:3904/events/unauthenticated.SEC_3GPP_FAULTSUPERVISION_OUTPUT"
182       type: message_router
183     ves-3gpp-provisioning:
184       dmaap_info:
185         topic_url:
186           "http://message-router:3904/events/unauthenticated.SEC_3GPP_PROVISIONING_OUTPUT"
187       type: message_router
188     ves-3gpp-heartbeat:
189       dmaap_info:
190         topic_url:
191           "http://message-router:3904/events/unauthenticated.SEC_3GPP_HEARTBEAT_OUTPUT"
192       type: message_router
193     ves-3gpp-performance-assurance:
194       dmaap_info:
195         topic_url:
196           "http://message-router:3904/events/unauthenticated.SEC_3GPP_PERFORMANCEASSURANCE_OUTPUT"
197       type: message_router
198   collector.dynamic.config.update.frequency: "5"
199 # Resource Limit flavor -By Default using small
200 flavor: small
201 # Segregation for Different environment (Small and Large)
202 resources:
203   small:
204     limits:
205       cpu: 2
206       memory: 2Gi
207     requests:
208       cpu: 1
209       memory: 1Gi
210   large:
211     limits:
212       cpu: 4
213       memory: 4Gi
214     requests:
215       cpu: 2
216       memory: 2Gi
217   unlimited: {}
218
219 #Pods Service Account
220 serviceAccount:
221   nameOverride: dcae-ves-collector
222   roles:
223     - read