[DCAE] Log4j vulnerability fix with patched containers
[oom.git] / kubernetes / dcaegen2-services / components / dcae-ves-collector / values.yaml
1 #============LICENSE_START========================================================
2 # ================================================================================
3 # Copyright (c) 2021 J. F. Lucas. All rights reserved.
4 # Copyright (c) 2021 Nokia.  All rights reserved.
5 # Copyright (c) 2022 AT&T Intellectual Property. All rights reserved.
6 # ================================================================================
7 # Licensed under the Apache License, Version 2.0 (the "License");
8 # you may not use this file except in compliance with the License.
9 # You may obtain a copy of the License at
10 #
11 #     http://www.apache.org/licenses/LICENSE-2.0
12 #
13 # Unless required by applicable law or agreed to in writing, software
14 # distributed under the License is distributed on an "AS IS" BASIS,
15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 # See the License for the specific language governing permissions and
17 # limitations under the License.
18 # ============LICENSE_END=========================================================
19
20 #################################################################
21 # Global configuration defaults.
22 #################################################################
23 global:
24   nodePortPrefix: 302
25   nodePortPrefixExt: 304
26
27 #################################################################
28 # Filebeat configuration defaults.
29 #################################################################
30 filebeatConfig:
31   logstashServiceName: log-ls
32   logstashPort: 5044
33
34 #################################################################
35 # initContainer images.
36 #################################################################
37 tlsImage: onap/org.onap.dcaegen2.deployments.tls-init-container:2.1.0
38 consulLoaderImage: onap/org.onap.dcaegen2.deployments.consul-loader-container:1.1.1
39 certPostProcessorImage: onap/org.onap.oom.platform.cert-service.oom-certservice-post-processor:2.4.0
40
41 #################################################################
42 # Application configuration defaults.
43 #################################################################
44 # application image
45 image: onap/org.onap.dcaegen2.collectors.ves.vescollector:1.10.2
46 pullPolicy: Always
47
48 # log directory where logging sidecar should look for log files
49 # if absent, no sidecar will be deployed
50 logDirectory: /opt/app/VESCollector/logs
51
52 # directory where TLS certs should be stored
53 # if absent, no certs will be retrieved and stored
54 certDirectory: /opt/app/dcae-certificate
55
56 # TLS role -- set to true if microservice acts as server
57 # If true, an init container will retrieve a server cert
58 # and key from AAF and mount them in certDirectory.
59 tlsServer: true
60
61 # CMPv2 certificate
62 # It is used only when:
63 # - certDirectory is set
64 # - global cmpv2Enabled flag is set to true
65 # - flag useCmpv2Certificates is set to true
66 # Disabled by default
67 useCmpv2Certificates: false
68 certificates:
69   - mountPath: /opt/app/dcae-certificate/external
70     commonName: dcae-ves-collector
71     dnsNames:
72       - dcae-ves-collector
73       - ves-collector
74       - ves
75     keystore:
76       outputType:
77         - jks
78       passwordSecretRef:
79         name: ves-cmpv2-keystore-password
80         key: password
81         create: true
82
83 # dependencies
84 readinessCheck:
85   wait_for:
86     - dcae-config-binding-service
87     - aaf-cm
88
89 # probe configuration
90   initialDelaySeconds: 5
91   periodSeconds: 15
92   path: /healthcheck
93   scheme: HTTP
94   port: 8080
95
96 # service configuration
97 service:
98   type: NodePort
99   name: dcae-ves-collector
100   ports:
101     - name: http
102       port: 8443
103       plain_port: 8080
104       port_protocol: http
105       nodePort: 17
106       useNodePortExt: true
107
108 # application environments
109 applicationEnv:
110   CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml'
111   LOG4J_FORMAT_MSG_NO_LOOKUPS: 'true'
112
113 # initial application configuration
114 applicationConfig:
115   collector.dmaap.streamid: fault=ves-fault|syslog=ves-syslog|heartbeat=ves-heartbeat|measurement=ves-measurement|measurementsForVfScaling=ves-measurement|mobileFlow=ves-mobileflow|other=ves-other|stateChange=ves-statechange|thresholdCrossingAlert=ves-thresholdCrossingAlert|voiceQuality=ves-voicequality|sipSignaling=ves-sipsignaling|notification=ves-notification|pnfRegistration=ves-pnfRegistration|3GPP-FaultSupervision=ves-3gpp-fault-supervision|3GPP-Heartbeat=ves-3gpp-heartbeat|3GPP-Provisioning=ves-3gpp-provisioning|3GPP-PerformanceAssurance=ves-3gpp-performance-assurance
116   collector.inputQueue.maxPending: "8096"
117   collector.keystore.file.location: /opt/app/dcae-certificate/cert.jks
118   collector.keystore.passwordfile: /opt/app/dcae-certificate/jks.pass
119   collector.truststore.file.location: /opt/app/dcae-certificate/trust.jks
120   collector.truststore.passwordfile: /opt/app/dcae-certificate/trust.pass
121   collector.schema.checkflag: "1"
122   collector.schema.file: "{\"v1\":\"./etc/CommonEventFormat_27.2.json\",\"v2\":\"./etc/CommonEventFormat_27.2.json\",\"v3\":\"./etc/CommonEventFormat_27.2.json\",\"v4\":\"./etc/CommonEventFormat_27.2.json\",\"v5\":\"./etc/CommonEventFormat_28.4.1.json\",\"v7\":\"./etc/CommonEventFormat_30.2.1_ONAP.json\"}"
123   collector.externalSchema.checkflag: 1
124   collector.externalSchema.schemasLocation: "./etc/externalRepo/"
125   collector.externalSchema.mappingFileLocation: "./etc/externalRepo/schema-map.json"
126   event.externalSchema.schemaRefPath: $.event.stndDefinedFields.schemaReference
127   event.externalSchema.stndDefinedDataPath: $.event.stndDefinedFields.data
128   collector.service.port: "8080"
129   collector.service.secure.port: "8443"
130   event.transform.flag: "0"
131   auth.method: "certBasicAuth"
132   header.authlist: "sample1,$2a$10$0buh.2WeYwN868YMwnNNEuNEAMNYVU9.FSMJGyIKV3dGET/7oGOi6|demouser,$2a$10$1cc.COcqV/d3iT2N7BjPG.S6ZKv2jpb9a5MV.o7lMih/GpjJRX.Ce"
133   services_calls: []
134   streams_publishes:
135     ves-fault:
136       dmaap_info:
137         topic_url:
138           "http://message-router:3904/events/unauthenticated.SEC_FAULT_OUTPUT"
139       type: message_router
140     ves-measurement:
141       dmaap_info:
142         topic_url:
143           "http://message-router:3904/events/unauthenticated.VES_MEASUREMENT_OUTPUT"
144       type: message_router
145     ves-notification:
146       dmaap_info:
147         topic_url:
148           "http://message-router:3904/events/unauthenticated.VES_NOTIFICATION_OUTPUT"
149       type: message_router
150     ves-pnfRegistration:
151       dmaap_info:
152         topic_url:
153           "http://message-router:3904/events/unauthenticated.VES_PNFREG_OUTPUT"
154       type: message_router
155     ves-heartbeat:
156       dmaap_info:
157         topic_url:
158           "http://message-router:3904/events/unauthenticated.SEC_HEARTBEAT_OUTPUT"
159       type: message_router
160     ves-other:
161       dmaap_info:
162         topic_url:
163           "http://message-router:3904/events/unauthenticated.SEC_OTHER_OUTPUT"
164       type: message_router
165     ves-3gpp-fault-supervision:
166       dmaap_info:
167         topic_url:
168           "http://message-router:3904/events/unauthenticated.SEC_3GPP_FAULTSUPERVISION_OUTPUT"
169       type: message_router
170     ves-3gpp-provisioning:
171       dmaap_info:
172         topic_url:
173           "http://message-router:3904/events/unauthenticated.SEC_3GPP_PROVISIONING_OUTPUT"
174       type: message_router
175     ves-3gpp-heartbeat:
176       dmaap_info:
177         topic_url:
178           "http://message-router:3904/events/unauthenticated.SEC_3GPP_HEARTBEAT_OUTPUT"
179       type: message_router
180     ves-3gpp-performance-assurance:
181       dmaap_info:
182         topic_url:
183           "http://message-router:3904/events/unauthenticated.SEC_3GPP_PERFORMANCEASSURANCE_OUTPUT"
184       type: message_router
185   collector.dynamic.config.update.frequency: "5"
186 # Resource Limit flavor -By Default using small
187 flavor: small
188 # Segregation for Different environment (Small and Large)
189 resources:
190   small:
191     limits:
192       cpu: 2
193       memory: 2Gi
194     requests:
195       cpu: 1
196       memory: 1Gi
197   large:
198     limits:
199       cpu: 4
200       memory: 4Gi
201     requests:
202       cpu: 2
203       memory: 2Gi
204   unlimited: {}
205
206 #Pods Service Account
207 serviceAccount:
208   nameOverride: dcae-ves-collector
209   roles:
210     - read