kubernetes/so/values.yaml

   1 # Copyright © 2018 AT&T USA
   2 # Copyright © 2020 Huawei
   3 # Copyright © 2021 Orange
   4 # Modifications Copyright © 2023 Nordix Foundation
   5 # Licensed under the Apache License, Version 2.0 (the "License");
   6 # you may not use this file except in compliance with the License.
   7 # You may obtain a copy of the License at
   8 #
   9 #       http://www.apache.org/licenses/LICENSE-2.0
  10 #
  11 # Unless required by applicable law or agreed to in writing, software
  12 # distributed under the License is distributed on an "AS IS" BASIS,
  13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14 # See the License for the specific language governing permissions and
  15 # limitations under the License.
  16 #################################################################
  17 # Global configuration defaults.
  18 #################################################################
  19 global:
  20   nodePortPrefix: 302
  21   nodePortPrefixExt: 304
  22   centralizedLoggingEnabled: true
  23   mariadbGalera:
  24     nameOverride: mariadb-galera
  25     serviceName: mariadb-galera
  26     servicePort: '3306'
  27     service: mariadb-galera
  28     internalPort: '3306'
  29     # mariadbRootPassword: secretpassword
  30     # rootPasswordExternalSecret: some secret
  31     #This flag allows SO to instantiate its own mariadb-galera cluster,
  32     #serviceName and nameOverride should be so-mariadb-galera if this flag is enabled
  33     localCluster: false
  34   persistence:
  35     mountPath: /dockerdata-nfs
  36   #This configuration specifies Service and port for SDNC OAM interface
  37   sdncOamService: sdnc-oam
  38   sdncOamPort: 8282
  39   #This configuration will run the migration. The configurations are for backing up the data
  40   #from DB and then restoring it to the present versions preferred DB.
  41   migration:
  42     enabled: false
  43     dbHost: mariadb-galera
  44     dbPort: 3306
  45     dbUser: root
  46     dbPassword: secretpassword
  47     # dbCredsExternalSecret: some secret
  48   msbEnabled: true
  49   app:
  50     siteName: onapheat
  51     auth: 3EDC974C5CD7FE54C47C7490AF4D3B474CDD7D0FFA35A7ACDE3E209631E45F428976EAC0858874F17390A13149E63C90281DD8D20456
  52     defaultCloudOwner: onap
  53
  54 readinessCheck:
  55   wait_for:
  56     jobs:
  57       - '{{ include "common.release" . }}-so-mariadb-config-job'
  58
  59 #################################################################
  60 # Secrets metaconfig
  61 #################################################################
  62 secrets:
  63   - uid: db-root-pass
  64     name: &dbRootPassSecretName '{{ include "common.release" . }}-so-db-root-pass'
  65     type: password
  66     externalSecret: '{{ .Values.global.mariadbGalera.localCluster | ternary
  67       .Values.global.mariadbGalera.rootPasswordExternalSecret
  68       (default (include "common.mariadb.secret.rootPassSecretName"
  69         (dict "dot" . "chartName" .Values.global.mariadbGalera.nameOverride))
  70         .Values.global.mariadbGalera.rootPasswordExternalSecret)  }}'
  71     password: '{{ .Values.global.mariadbGalera.mariadbRootpassword }}'
  72   - uid: db-backup-creds
  73     name: &dbBackupCredsSecretName '{{ include "common.release" . }}-so-db-backup-creds'
  74     type: basicAuth
  75     externalSecret: '{{ ternary .Values.global.migration.dbCredsExternalSecret "migrationDisabled" .Values.global.migration.enabled }}'
  76     login: '{{ ternary .Values.global.migration.dbUser "migrationDisabled" .Values.global.migration.enabled }}'
  77     password: '{{ ternary .Values.global.migration.dbPassword "migrationDisabled" .Values.global.migration.enabled }}'
  78     passwordPolicy: required
  79     annotations:
  80       helm.sh/hook: pre-upgrade,pre-install
  81       helm.sh/hook-weight: '0'
  82       helm.sh/hook-delete-policy: before-hook-creation
  83   - uid: db-user-creds
  84     name: &dbUserCredsSecretName '{{ include "common.release" . }}-so-db-user-creds'
  85     type: basicAuth
  86     externalSecret: '{{ .Values.dbCreds.userCredsExternalSecret }}'
  87     login: '{{ .Values.dbCreds.userName }}'
  88     password: '{{ .Values.dbCreds.userPassword }}'
  89     passwordPolicy: generate
  90   - uid: db-admin-creds
  91     name: &dbAdminCredsSecretName '{{ include "common.release" . }}-so-db-admin-creds'
  92     type: basicAuth
  93     externalSecret: '{{ .Values.dbCreds.adminCredsExternalSecret }}'
  94     login: '{{ .Values.dbCreds.adminName }}'
  95     password: '{{ .Values.dbCreds.adminPassword }}'
  96     passwordPolicy: generate
  97   - uid: 'mso-key'
  98     name: &mso-key '{{ include "common.release" . }}-mso-key'
  99     type: password
 100     password: '{{ .Values.mso.msoKey }}'
 101   - uid: mso-oof-auth
 102     name: &mso-oof-auth '{{ include "common.release" . }}-mso-oof-auth'
 103     type: basicAuth
 104     login: '{{ .Values.mso.oof.login }}'
 105     password: '{{ .Values.mso.oof.password }}'
 106     passwordPolicy: required
 107   - uid: server-actuator-creds
 108     name: &actuator-secrets '{{ include "common.release" . }}-so-server-actuator-creds'
 109     type: basicAuth
 110     externalSecret: '{{ tpl (default "" .Values.server.actuatorCredsExternalSecret) . }}'
 111     login: '{{ .Values.server.actuator.username }}'
 112     password: '{{ .Values.server.actuator.password }}'
 113     passwordPolicy: required
 114   - uid: server-bpel-creds
 115     name: &bpel-secrets '{{ include "common.release" . }}-so-server-bpel-creds'
 116     type: basicAuth
 117     externalSecret: '{{ tpl (default "" .Values.server.bpelCredsExternalSecret) . }}'
 118     login: '{{ .Values.server.bpel.username }}'
 119     password: '{{ .Values.server.bpel.password }}'
 120     passwordPolicy: required
 121   - uid: so-aai-creds
 122     name: &aai-secrets '{{ include "common.release" . }}-so-server-aai-creds'
 123     type: basicAuth
 124     externalSecret: '{{ tpl (default "" .Values.server.aaiCredsExternalSecret) . }}'
 125     login: '{{ .Values.server.aai.username }}'
 126     password: '{{ .Values.server.aai.password }}'
 127     passwordPolicy: required
 128
 129 ##################################################################
 130 # Application configuration defaults.
 131 #################################################################
 132
 133 dbSecrets: &dbSecrets
 134   userCredsExternalSecret: *dbUserCredsSecretName
 135   adminCredsExternalSecret: *dbAdminCredsSecretName
 136
 137 # unused in this, just to pass to subcharts
 138 dbCreds:
 139   userName: so_user
 140   adminName: so_admin
 141
 142 image: onap/so/api-handler-infra:1.12.1
 143
 144 server:
 145   aai:
 146     username: aai@aai.onap.org
 147     password: demo123456!
 148   # aaiCredsExternalSecret: some secret
 149   actuator:
 150     username: mso_admin
 151     password: password1$
 152   # actuatorCredsExternalSecret: some secret
 153   bpel:
 154     username: bpel
 155     password: password1$
 156   # bpelCredsExternalSecret: some secret
 157
 158 pullPolicy: Always
 159 replicaCount: 1
 160 minReadySeconds: 10
 161 containerPort: &containerPort 8080
 162 logPath: ./logs/apih/
 163 app: api-handler-infra
 164 service:
 165   type: NodePort
 166   internalPort: *containerPort
 167   ports:
 168     - name: http
 169       port: *containerPort
 170       nodePort: '77'
 171   annotations:
 172     msb.onap.org/service-info: |
 173       {{ if .Values.global.msbEnabled -}}[
 174         {
 175           "serviceName": "so",
 176           "version": "v1",
 177           "url": "/onap/so/infra/cloudResources/{version:[vV][1]}/operationalEnvironments",
 178           "protocol": "REST",
 179           "port": "{{ .Values.service.internalPort }}",
 180           "visualRange":"0",
 181           "lb_policy":"ip_hash"
 182         },
 183         {
 184           "serviceName": "so",
 185           "version": "v1",
 186           "url": "/onap/so/infra/cloudResources/{version:[vV][1]}/operationalEnvironments/{operationalEnvironmentId}/activate",
 187           "protocol": "REST",
 188           "port": "{{ .Values.service.internalPort }}",
 189           "visualRange":"0",
 190           "lb_policy":"ip_hash"
 191         },
 192         {
 193           "serviceName": "so",
 194           "version": "v1",
 195           "url": "/onap/so/infra/cloudResources/{version:[vV][1]}/operationalEnvironments/{operationalEnvironmentId}/deactivate",
 196           "protocol": "REST",
 197           "port": "{{ .Values.service.internalPort }}",
 198           "visualRange":"0",
 199           "lb_policy":"ip_hash"
 200         },
 201         {
 202           "serviceName": "so",
 203           "version": "v1",
 204           "url": "/onap/so/infra/cloudResourcesRequests/{version:[vV][1]}/{requestId}/unlock",
 205           "protocol": "REST",
 206           "port": "{{ .Values.service.internalPort }}",
 207           "visualRange":"0",
 208           "lb_policy":"ip_hash"
 209         },
 210         {
 211           "serviceName": "so",
 212           "version": "v1",
 213           "url": "/onap/so/infra/cloudResourcesRequests/{version:[vV][1]}",
 214           "protocol": "REST",
 215           "port": "{{ .Values.service.internalPort }}",
 216           "visualRange":"0",
 217           "lb_policy":"ip_hash"
 218         },
 219         {
 220           "serviceName": "so",
 221           "version": "v1",
 222           "url": "/onap/so/infra/orchestrationRequests/{version:[vV][4-7]}/{requestId}",
 223           "protocol": "REST",
 224           "port": "{{ .Values.service.internalPort }}",
 225           "visualRange":"0",
 226           "lb_policy":"ip_hash"
 227         },
 228         {
 229           "serviceName": "so",
 230           "version": "v1",
 231           "url": "/onap/so/infra/orchestrationRequests/{version:[vV][4-7]}",
 232           "protocol": "REST",
 233           "port": "{{ .Values.service.internalPort }}",
 234           "visualRange":"0",
 235           "lb_policy":"ip_hash"
 236         },
 237         {
 238           "serviceName": "so",
 239           "version": "v1",
 240           "url": "/onap/so/infra/orchestrationRequests/{version:[vV][4-7]}/{requestId}/unlock",
 241           "protocol": "REST",
 242           "port": "{{ .Values.service.internalPort }}",
 243           "visualRange":"0",
 244           "lb_policy":"ip_hash"
 245         },
 246         {
 247           "serviceName": "so",
 248           "version": "v1",
 249           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances",
 250           "protocol": "REST",
 251           "port": "{{ .Values.service.internalPort }}",
 252           "visualRange":"0",
 253           "lb_policy":"ip_hash"
 254         },
 255         {
 256           "serviceName": "so",
 257           "version": "v1",
 258           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/activate",
 259           "protocol": "REST",
 260           "port": "{{ .Values.service.internalPort }}",
 261           "visualRange":"0",
 262           "lb_policy":"ip_hash"
 263         },
 264         {
 265           "serviceName": "so",
 266           "version": "v1",
 267           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/deactivate",
 268           "protocol": "REST",
 269           "port": "{{ .Values.service.internalPort }}",
 270           "visualRange":"0",
 271           "lb_policy":"ip_hash"
 272         },
 273         {
 274           "serviceName": "so",
 275           "version": "v1",
 276           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}",
 277           "protocol": "REST",
 278           "port": "{{ .Values.service.internalPort }}",
 279           "visualRange":"0",
 280           "lb_policy":"ip_hash"
 281         },
 282         {
 283           "serviceName": "so",
 284           "version": "v1",
 285           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][7]}/serviceInstances/assign",
 286           "protocol": "REST",
 287           "port": "{{ .Values.service.internalPort }}",
 288           "visualRange":"0",
 289           "lb_policy":"ip_hash"
 290         },
 291         {
 292           "serviceName": "so",
 293           "version": "v1",
 294           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][7]}/serviceInstances/{serviceInstanceId}/unassign",
 295           "protocol": "REST",
 296           "port": "{{ .Values.service.internalPort }}",
 297           "visualRange":"0",
 298           "lb_policy":"ip_hash"
 299         },
 300         {
 301           "serviceName": "so",
 302           "version": "v1",
 303           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations",
 304           "protocol": "REST",
 305           "port": "{{ .Values.service.internalPort }}",
 306           "visualRange":"0",
 307           "lb_policy":"ip_hash"
 308         },
 309         {
 310           "serviceName": "so",
 311           "version": "v1",
 312           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}",
 313           "protocol": "REST",
 314           "port": "{{ .Values.service.internalPort }}",
 315           "visualRange":"0",
 316           "lb_policy":"ip_hash"
 317         },
 318         {
 319           "serviceName": "so",
 320           "version": "v1",
 321           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}/enablePort",
 322           "protocol": "REST",
 323           "port": "{{ .Values.service.internalPort }}",
 324           "visualRange":"0",
 325           "lb_policy":"ip_hash"
 326         },
 327         {
 328           "serviceName": "so",
 329           "version": "v1",
 330           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}/disablePort",
 331           "protocol": "REST",
 332           "port": "{{ .Values.service.internalPort }}",
 333           "visualRange":"0",
 334           "lb_policy":"ip_hash"
 335         },
 336         {
 337           "serviceName": "so",
 338           "version": "v1",
 339           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}/activate",
 340           "protocol": "REST",
 341           "port": "{{ .Values.service.internalPort }}",
 342           "visualRange":"0",
 343           "lb_policy":"ip_hash"
 344         },
 345         {
 346           "serviceName": "so",
 347           "version": "v1",
 348           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}/deactivate",
 349           "protocol": "REST",
 350           "port": "{{ .Values.service.internalPort }}",
 351           "visualRange":"0",
 352           "lb_policy":"ip_hash"
 353         },
 354         {
 355           "serviceName": "so",
 356           "version": "v1",
 357           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][6-7]}/serviceInstances/{serviceInstanceId}/addRelationships",
 358           "protocol": "REST",
 359           "port": "{{ .Values.service.internalPort }}",
 360           "visualRange":"0",
 361           "lb_policy":"ip_hash"
 362         },
 363         {
 364           "serviceName": "so",
 365           "version": "v1",
 366           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][6-7]}/serviceInstances/{serviceInstanceId}/removeRelationships",
 367           "protocol": "REST",
 368           "port": "{{ .Values.service.internalPort }}",
 369           "visualRange":"0",
 370           "lb_policy":"ip_hash"
 371         },
 372         {
 373           "serviceName": "so",
 374           "version": "v1",
 375           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs",
 376           "protocol": "REST",
 377           "port": "{{ .Values.service.internalPort }}",
 378           "visualRange":"0",
 379           "lb_policy":"ip_hash"
 380         },
 381         {
 382           "serviceName": "so",
 383           "version": "v1",
 384           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/replace",
 385           "protocol": "REST",
 386           "port": "{{ .Values.service.internalPort }}",
 387           "visualRange":"0",
 388           "lb_policy":"ip_hash"
 389         },
 390         {
 391           "serviceName": "so",
 392           "version": "v1",
 393           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}",
 394           "protocol": "REST",
 395           "port": "{{ .Values.service.internalPort }}",
 396           "visualRange":"0",
 397           "lb_policy":"ip_hash"
 398         },
 399         {
 400           "serviceName": "so",
 401           "version": "v1",
 402           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][6-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/applyUpdatedConfig",
 403           "protocol": "REST",
 404           "port": "{{ .Values.service.internalPort }}",
 405           "visualRange":"0",
 406           "lb_policy":"ip_hash"
 407         },
 408         {
 409           "serviceName": "so",
 410           "version": "v1",
 411           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}",
 412           "protocol": "REST",
 413           "port": "{{ .Values.service.internalPort }}",
 414           "visualRange":"0",
 415           "lb_policy":"ip_hash"
 416         },
 417         {
 418           "serviceName": "so",
 419           "version": "v1",
 420           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules",
 421           "protocol": "REST",
 422           "port": "{{ .Values.service.internalPort }}",
 423           "visualRange":"0",
 424           "lb_policy":"ip_hash"
 425         },
 426         {
 427           "serviceName": "so",
 428           "version": "v1",
 429           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/{vfmoduleInstanceId}/replace",
 430           "protocol": "REST",
 431           "port": "{{ .Values.service.internalPort }}",
 432           "visualRange":"0",
 433           "lb_policy":"ip_hash"
 434         },
 435         {
 436           "serviceName": "so",
 437           "version": "v1",
 438           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/{vfmoduleInstanceId}",
 439           "protocol": "REST",
 440           "port": "{{ .Values.service.internalPort }}",
 441           "visualRange":"0",
 442           "lb_policy":"ip_hash"
 443         },
 444         {
 445           "serviceName": "so",
 446           "version": "v1",
 447           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][6-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/inPlaceSoftwareUpdate",
 448           "protocol": "REST",
 449           "port": "{{ .Values.service.internalPort }}",
 450           "visualRange":"0",
 451           "lb_policy":"ip_hash"
 452         },
 453         {
 454           "serviceName": "so",
 455           "version": "v1",
 456           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/{vfmoduleInstanceId}",
 457           "protocol": "REST",
 458           "port": "{{ .Values.service.internalPort }}",
 459           "visualRange":"0",
 460           "lb_policy":"ip_hash"
 461         },
 462         {
 463           "serviceName": "so",
 464           "version": "v1",
 465           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/{vfmoduleInstanceId}/deactivateAndCloudDelete",
 466           "protocol": "REST",
 467           "port": "{{ .Values.service.internalPort }}",
 468           "visualRange":"0",
 469           "lb_policy":"ip_hash"
 470         },
 471         {
 472           "serviceName": "so",
 473           "version": "v1",
 474           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/scaleOut",
 475           "protocol": "REST",
 476           "port": "{{ .Values.service.internalPort }}",
 477           "visualRange":"0",
 478           "lb_policy":"ip_hash"
 479         },
 480         {
 481           "serviceName": "so",
 482           "version": "v1",
 483           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/volumeGroups",
 484           "protocol": "REST",
 485           "port": "{{ .Values.service.internalPort }}",
 486           "visualRange":"0",
 487           "lb_policy":"ip_hash"
 488         },
 489         {
 490           "serviceName": "so",
 491           "version": "v1",
 492           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/volumeGroups/{volumeGroupInstanceId}",
 493           "protocol": "REST",
 494           "port": "{{ .Values.service.internalPort }}",
 495           "visualRange":"0",
 496           "lb_policy":"ip_hash"
 497         },
 498         {
 499           "serviceName": "so",
 500           "version": "v1",
 501           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/volumeGroups/{volumeGroupInstanceId}",
 502           "protocol": "REST",
 503           "port": "{{ .Values.service.internalPort }}",
 504           "visualRange":"0",
 505           "lb_policy":"ip_hash"
 506         },
 507         {
 508           "serviceName": "so",
 509           "version": "v1",
 510           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/networks",
 511           "protocol": "REST",
 512           "port": "{{ .Values.service.internalPort }}",
 513           "visualRange":"0",
 514           "lb_policy":"ip_hash"
 515         },
 516         {
 517           "serviceName": "so",
 518           "version": "v1",
 519           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/networks/{networkInstanceId}",
 520           "protocol": "REST",
 521           "port": "{{ .Values.service.internalPort }}",
 522           "visualRange":"0",
 523           "lb_policy":"ip_hash"
 524         },
 525         {
 526           "serviceName": "so",
 527           "version": "v1",
 528           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/networks/{networkInstanceId}",
 529           "protocol": "REST",
 530           "port": "{{ .Values.service.internalPort }}",
 531           "visualRange":"0",
 532           "lb_policy":"ip_hash"
 533         }
 534       ]{{ end }}
 535
 536 updateStrategy:
 537   type: RollingUpdate
 538   maxUnavailable: 1
 539   maxSurge: 1
 540
 541 ################################################################
 542 # soHelpers part
 543 #################################################################
 544 soHelpers:
 545   containerPort: *containerPort
 546
 547 # Resource Limit flavor -By Default using small
 548 flavor: small
 549 # Segregation for Different environment (Small and Large)
 550 resources:
 551   small:
 552     limits:
 553       cpu: 2000m
 554       memory: 4Gi
 555     requests:
 556       cpu: 500m
 557       memory: 1Gi
 558   large:
 559     limits:
 560       cpu: 4000m
 561       memory: 8Gi
 562     requests:
 563       cpu: 1000m
 564       memory: 2Gi
 565   unlimited: {}
 566
 567 nodeSelector: {}
 568 affinity: {}
 569
 570 # application configuration
 571 config:
 572   logstashServiceName: log-ls
 573   logstashPort: 5044
 574   # "KEYSTONE" for keystone v2, "KEYSTONE_V3" for keystone v3
 575   openStackKeystoneVersion: "KEYSTONE"
 576
 577 #Used only if localCluster is enabled. Instantiates SO's own cassandra cluster
 578 #helm deploy demo local/onap --namespace onap --verbose --set so.enabled=true \
 579 #                                                       --set so.global.mariadbGalera.localCluster=true \
 580 #                                                       --set so.global.mariadbGalera.nameOverride=so-mariadb-galera \
 581 #                                                       --set so.global.mariadbGalera.serviceName=so-mariadb-galera
 582 mariadb-galera:
 583   rootUser:
 584     externalSecret: *dbRootPassSecretName
 585   nameOverride: &so-mariadb so-mariadb-galera
 586   replicaCount: 1
 587   persistence:
 588     mountSubPath: so/mariadb-galera/data
 589     enabled: true
 590   serviceAccount:
 591     nameOverride: *so-mariadb
 592
 593 ingress:
 594   enabled: false
 595   service:
 596     - baseaddr: 'so-api'
 597       name: 'so'
 598       port: 8080
 599
 600 serviceMesh:
 601   authorizationPolicy:
 602     authorizedPrincipals:
 603       - serviceAccount: consul-read
 604       - serviceAccount: consul-server-read
 605       - serviceAccount: nbi-read
 606       - serviceAccount: policy-drools-pdp-read
 607       - serviceAccount: so-bpmn-infra-read
 608       - serviceAccount: robot-read
 609       - serviceAccount: istio-ingress
 610         namespace: istio-ingress
 611
 612 mso:
 613   adapters:
 614     requestDb:
 615       auth: Basic YnBlbDpwYXNzd29yZDEk
 616   camundaAuth: AE2E9BE6EF9249085AF98689C4EE087736A5500629A72F35068FFB88813A023581DD6E765071F1C04075B36EA4213A
 617   msoKey: 07a7159d3bf51a0e53be7a8f89699be7
 618   sdc:
 619     client:
 620       auth: 878785F4F31BC9CFA5AB52A172008212D8845ED2DE08AD5E56AF114720A4E49768B8F95CDA2EB971765D28EDCDAA24
 621   aai:
 622     auth: 6E081E10B1CA43A843E303733A74D9B23B601A6E22A21C7EF2C7F15A42F81A1A4E85E65268C2661F71321052C7F3E55B96A8E1E951F8BF6F
 623   oof:
 624     login: test
 625     password: testpwd
 626   so:
 627     operationalEnv:
 628       dmaap:
 629         auth: 51EA5414022D7BE536E7516C4D1A6361416921849B72C0D6FC1C7F262FD9F2BBC2AD124190A332D9845A188AD80955567A4F975C84C221EEA8243BFD92FFE6896CDD1EA16ADD34E1E3D47D4A
 630   health:
 631     auth: basic bXNvX2FkbWlufHBhc3N3b3JkMSQ=
 632
 633 so-bpmn-infra:
 634   db:
 635     <<: *dbSecrets
 636   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 637
 638 so-catalog-db-adapter:
 639   enabled: true
 640   db:
 641     <<: *dbSecrets
 642
 643 so-cnf-adapter:
 644   enabled: true
 645   db:
 646     <<: *dbSecrets
 647   server:
 648     aaiCredsExternalSecret: *aai-secrets
 649     actuatorCredsExternalSecret: *actuator-secrets
 650   mso:
 651     msoKeySecret: *mso-key
 652
 653 so-cnfm-lcm:
 654   enabled: true
 655   db:
 656     <<: *dbSecrets
 657
 658 so-etsi-nfvo-ns-lcm:
 659   enabled: true
 660   db:
 661     <<: *dbSecrets
 662
 663 so-mariadb:
 664   db:
 665     rootPasswordExternalSecretLocalDb: *dbRootPassSecretName
 666     rootPasswordExternalSecret: '{{ ternary .Values.db.rootPasswordExternalSecretLocalDb (include "common.mariadb.secret.rootPassSecretName" (dict "dot" . "chartName" .Values.global.mariadbGalera.nameOverride)) .Values.global.mariadbGalera.localCluster }}'
 667     backupCredsExternalSecret: *dbBackupCredsSecretName
 668     userCredsExternalSecret: *dbUserCredsSecretName
 669     adminCredsExternalSecret: *dbAdminCredsSecretName
 670
 671 so-admin-cockpit:
 672   enabled: true
 673   db:
 674     <<: *dbSecrets
 675
 676 so-nssmf-adapter:
 677   enabled: true
 678   server:
 679     actuatorCredsExternalSecret: *actuator-secrets
 680     bpelCredsExternalSecret: *bpel-secrets
 681   db:
 682     <<: *dbSecrets
 683
 684 so-oof-adapter:
 685   enabled: true
 686   db:
 687     <<: *dbSecrets
 688   mso:
 689     msoKeySecret: *mso-key
 690     camundaAuth: AE2E9BE6EF9249085AF98689C4EE087736A5500629A72F35068FFB88813A023581DD6E765071F1C04075B36EA4213A
 691     oof:
 692       authSecret: *mso-oof-auth
 693   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 694
 695 so-openstack-adapter:
 696   enabled: true
 697   db:
 698     <<: *dbSecrets
 699   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 700
 701 so-request-db-adapter:
 702   db:
 703     <<: *dbSecrets
 704
 705 so-sdc-controller:
 706   db:
 707     <<: *dbSecrets
 708   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 709
 710 so-sdnc-adapter:
 711   enabled: true
 712   db:
 713     <<: *dbSecrets
 714   mso:
 715     msoKeySecret: *mso-key
 716   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 717
 718 so-ve-vnfm-adapter:
 719   enabled: false
 720
 721 so-etsi-sol005-adapter:
 722   enabled: true
 723   db:
 724     <<: *dbSecrets
 725
 726 so-etsi-sol003-adapter:
 727   enabled: true
 728
 729 #Pods Service Account
 730 serviceAccount:
 731   nameOverride: so
 732   roles:
 733     - read
 734
 735 #Log configuration
 736 log:
 737   path: /var/log/onap