kubernetes/so/values.yaml

   1 # Copyright © 2018 AT&T USA
   2 # Copyright © 2020 Huawei
   3 # Copyright © 2021 Orange
   4 # Copyright © 2024 Deutsche Telekom Intellectual Property. All rights reserved.
   5 # Modifications Copyright © 2023 Nordix Foundation
   6 # Licensed under the Apache License, Version 2.0 (the "License");
   7 # you may not use this file except in compliance with the License.
   8 # You may obtain a copy of the License at
   9 #
  10 #       http://www.apache.org/licenses/LICENSE-2.0
  11 #
  12 # Unless required by applicable law or agreed to in writing, software
  13 # distributed under the License is distributed on an "AS IS" BASIS,
  14 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15 # See the License for the specific language governing permissions and
  16 # limitations under the License.
  17 #################################################################
  18 # Global configuration defaults.
  19 #################################################################
  20 global:
  21   nodePortPrefix: 302
  22   nodePortPrefixExt: 304
  23   centralizedLoggingEnabled: true
  24   mariadbGalera:
  25     # flag to enable the DB creation via mariadb-operator
  26     useOperator: true
  27     nameOverride: mariadb-galera
  28     servicePort: '3306'
  29     service: mariadb-galera
  30     internalPort: '3306'
  31     # This flag allows SO to instantiate its own mariadb-galera cluster,
  32     # serviceName and nameOverride should be so-mariadb-galera if this flag is enabled
  33     localCluster: false
  34     # (optional) if localCluster=false and an external secret is used set this variable
  35     #userRootSecret: <secretName>
  36   persistence:
  37     mountPath: /dockerdata-nfs
  38   #This configuration specifies Service and port for SDNC OAM interface
  39   sdncOamService: sdnc-oam
  40   sdncOamPort: 8282
  41   #This configuration will run the migration. The configurations are for backing up the data
  42   #from DB and then restoring it to the present versions preferred DB.
  43   migration:
  44     enabled: false
  45     dbHost: mariadb-galera
  46     dbPort: 3306
  47     dbUser: root
  48     dbPassword: secretpassword
  49     # dbCredsExternalSecret: some secret
  50   msbEnabled: true
  51   app:
  52     siteName: onapheat
  53     auth: 3EDC974C5CD7FE54C47C7490AF4D3B474CDD7D0FFA35A7ACDE3E209631E45F428976EAC0858874F17390A13149E63C90281DD8D20456
  54     defaultCloudOwner: onap
  55
  56 readinessCheck:
  57   wait_for:
  58     jobs:
  59       - '{{ include "common.release" . }}-so-mariadb-config-job'
  60
  61 #################################################################
  62 # Secrets metaconfig
  63 #################################################################
  64 secrets:
  65   - uid: db-root-pass
  66     name: &dbRootPassSecretName '{{ include "common.release" . }}-so-db-root-pass'
  67     type: password
  68     # If we're using shared mariadb, we need to use the secret name (second
  69     # part).
  70     # If not, we do the same trick than for user db secret hat allows you
  71     # override this secret using external one with the same field that is used
  72     # to pass this to subchart.
  73     externalSecret: '{{ .Values.global.mariadbGalera.localCluster |
  74       ternary (( hasSuffix "so-db-root-pass" (index .Values "mariadb-galera" "rootUser" "externalSecret")) |
  75                ternary
  76                   ""
  77                   (tpl (default "" (index .Values "mariadb-galera" "rootUser" "externalSecret")) .)
  78                )
  79                ( (not (empty (default "" .Values.global.mariadbGalera.userRootSecret))) |
  80                  ternary
  81                    .Values.global.mariadbGalera.userRootSecret
  82                    (include "common.mariadb.secret.rootPassSecretName"
  83                      (dict "dot" . "chartName" .Values.global.mariadbGalera.nameOverride)
  84                    )
  85                ) }}'
  86     password: '{{ .Values.global.mariadbGalera.mariadbRootpassword }}'
  87   - uid: db-backup-creds
  88     name: &dbBackupCredsSecretName '{{ include "common.release" . }}-so-db-backup-creds'
  89     type: basicAuth
  90     externalSecret: '{{ ternary .Values.global.migration.dbCredsExternalSecret "migrationDisabled" .Values.global.migration.enabled }}'
  91     login: '{{ ternary .Values.global.migration.dbUser "migrationDisabled" .Values.global.migration.enabled }}'
  92     password: '{{ ternary .Values.global.migration.dbPassword "migrationDisabled" .Values.global.migration.enabled }}'
  93     passwordPolicy: required
  94     annotations:
  95       helm.sh/hook: pre-upgrade,pre-install
  96       helm.sh/hook-weight: '0'
  97       helm.sh/hook-delete-policy: before-hook-creation
  98   - uid: db-user-creds
  99     name: &dbUserCredsSecretName '{{ include "common.release" . }}-so-db-user-creds'
 100     type: basicAuth
 101     externalSecret: '{{ .Values.dbCreds.userCredsExternalSecret }}'
 102     login: '{{ .Values.dbCreds.userName }}'
 103     password: '{{ .Values.dbCreds.userPassword }}'
 104     passwordPolicy: generate
 105   - uid: db-admin-creds
 106     name: &dbAdminCredsSecretName '{{ include "common.release" . }}-so-db-admin-creds'
 107     type: basicAuth
 108     externalSecret: '{{ .Values.dbCreds.adminCredsExternalSecret }}'
 109     login: '{{ .Values.dbCreds.adminName }}'
 110     password: '{{ .Values.dbCreds.adminPassword }}'
 111     passwordPolicy: generate
 112   - uid: 'mso-key'
 113     name: &mso-key '{{ include "common.release" . }}-mso-key'
 114     type: password
 115     password: '{{ .Values.mso.msoKey }}'
 116   - uid: mso-oof-auth
 117     name: &mso-oof-auth '{{ include "common.release" . }}-mso-oof-auth'
 118     type: basicAuth
 119     login: '{{ .Values.mso.oof.login }}'
 120     password: '{{ .Values.mso.oof.password }}'
 121     passwordPolicy: required
 122   - uid: server-actuator-creds
 123     name: &actuator-secrets '{{ include "common.release" . }}-so-server-actuator-creds'
 124     type: basicAuth
 125     externalSecret: '{{ tpl (default "" .Values.server.actuatorCredsExternalSecret) . }}'
 126     login: '{{ .Values.server.actuator.username }}'
 127     password: '{{ .Values.server.actuator.password }}'
 128     passwordPolicy: required
 129   - uid: server-bpel-creds
 130     name: &bpel-secrets '{{ include "common.release" . }}-so-server-bpel-creds'
 131     type: basicAuth
 132     externalSecret: '{{ tpl (default "" .Values.server.bpelCredsExternalSecret) . }}'
 133     login: '{{ .Values.server.bpel.username }}'
 134     password: '{{ .Values.server.bpel.password }}'
 135     passwordPolicy: required
 136   - uid: so-aai-creds
 137     name: &aai-secrets '{{ include "common.release" . }}-so-server-aai-creds'
 138     type: basicAuth
 139     externalSecret: '{{ tpl (default "" .Values.server.aaiCredsExternalSecret) . }}'
 140     login: '{{ .Values.server.aai.username }}'
 141     password: '{{ .Values.server.aai.password }}'
 142     passwordPolicy: required
 143
 144 ##################################################################
 145 # Application configuration defaults.
 146 #################################################################
 147
 148 dbSecrets: &dbSecrets
 149   userCredsExternalSecret: *dbUserCredsSecretName
 150   adminCredsExternalSecret: *dbAdminCredsSecretName
 151
 152 # unused in this, just to pass to subcharts
 153 dbCreds:
 154   userName: so_user
 155   adminName: so_admin
 156
 157 image: onap/so/api-handler-infra:1.12.2
 158
 159 server:
 160   aai:
 161     username: aai@aai.onap.org
 162     password: demo123456!
 163   # aaiCredsExternalSecret: some secret
 164   actuator:
 165     username: mso_admin
 166     password: password1$
 167   # actuatorCredsExternalSecret: some secret
 168   bpel:
 169     username: bpel
 170     password: password1$
 171   # bpelCredsExternalSecret: some secret
 172
 173 pullPolicy: Always
 174 replicaCount: 1
 175 minReadySeconds: 10
 176 containerPort: &containerPort 8080
 177 logPath: ./logs/apih/
 178 app: api-handler-infra
 179 service:
 180   type: NodePort
 181   internalPort: *containerPort
 182   ports:
 183     - name: http
 184       port: *containerPort
 185       nodePort: '77'
 186   annotations:
 187     msb.onap.org/service-info: |
 188       {{ if .Values.global.msbEnabled -}}[
 189         {
 190           "serviceName": "so",
 191           "version": "v1",
 192           "url": "/onap/so/infra/cloudResources/{version:[vV][1]}/operationalEnvironments",
 193           "protocol": "REST",
 194           "port": "{{ .Values.service.internalPort }}",
 195           "visualRange":"0",
 196           "lb_policy":"ip_hash"
 197         },
 198         {
 199           "serviceName": "so",
 200           "version": "v1",
 201           "url": "/onap/so/infra/cloudResources/{version:[vV][1]}/operationalEnvironments/{operationalEnvironmentId}/activate",
 202           "protocol": "REST",
 203           "port": "{{ .Values.service.internalPort }}",
 204           "visualRange":"0",
 205           "lb_policy":"ip_hash"
 206         },
 207         {
 208           "serviceName": "so",
 209           "version": "v1",
 210           "url": "/onap/so/infra/cloudResources/{version:[vV][1]}/operationalEnvironments/{operationalEnvironmentId}/deactivate",
 211           "protocol": "REST",
 212           "port": "{{ .Values.service.internalPort }}",
 213           "visualRange":"0",
 214           "lb_policy":"ip_hash"
 215         },
 216         {
 217           "serviceName": "so",
 218           "version": "v1",
 219           "url": "/onap/so/infra/cloudResourcesRequests/{version:[vV][1]}/{requestId}/unlock",
 220           "protocol": "REST",
 221           "port": "{{ .Values.service.internalPort }}",
 222           "visualRange":"0",
 223           "lb_policy":"ip_hash"
 224         },
 225         {
 226           "serviceName": "so",
 227           "version": "v1",
 228           "url": "/onap/so/infra/cloudResourcesRequests/{version:[vV][1]}",
 229           "protocol": "REST",
 230           "port": "{{ .Values.service.internalPort }}",
 231           "visualRange":"0",
 232           "lb_policy":"ip_hash"
 233         },
 234         {
 235           "serviceName": "so",
 236           "version": "v1",
 237           "url": "/onap/so/infra/orchestrationRequests/{version:[vV][4-7]}/{requestId}",
 238           "protocol": "REST",
 239           "port": "{{ .Values.service.internalPort }}",
 240           "visualRange":"0",
 241           "lb_policy":"ip_hash"
 242         },
 243         {
 244           "serviceName": "so",
 245           "version": "v1",
 246           "url": "/onap/so/infra/orchestrationRequests/{version:[vV][4-7]}",
 247           "protocol": "REST",
 248           "port": "{{ .Values.service.internalPort }}",
 249           "visualRange":"0",
 250           "lb_policy":"ip_hash"
 251         },
 252         {
 253           "serviceName": "so",
 254           "version": "v1",
 255           "url": "/onap/so/infra/orchestrationRequests/{version:[vV][4-7]}/{requestId}/unlock",
 256           "protocol": "REST",
 257           "port": "{{ .Values.service.internalPort }}",
 258           "visualRange":"0",
 259           "lb_policy":"ip_hash"
 260         },
 261         {
 262           "serviceName": "so",
 263           "version": "v1",
 264           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances",
 265           "protocol": "REST",
 266           "port": "{{ .Values.service.internalPort }}",
 267           "visualRange":"0",
 268           "lb_policy":"ip_hash"
 269         },
 270         {
 271           "serviceName": "so",
 272           "version": "v1",
 273           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/activate",
 274           "protocol": "REST",
 275           "port": "{{ .Values.service.internalPort }}",
 276           "visualRange":"0",
 277           "lb_policy":"ip_hash"
 278         },
 279         {
 280           "serviceName": "so",
 281           "version": "v1",
 282           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/deactivate",
 283           "protocol": "REST",
 284           "port": "{{ .Values.service.internalPort }}",
 285           "visualRange":"0",
 286           "lb_policy":"ip_hash"
 287         },
 288         {
 289           "serviceName": "so",
 290           "version": "v1",
 291           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}",
 292           "protocol": "REST",
 293           "port": "{{ .Values.service.internalPort }}",
 294           "visualRange":"0",
 295           "lb_policy":"ip_hash"
 296         },
 297         {
 298           "serviceName": "so",
 299           "version": "v1",
 300           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][7]}/serviceInstances/assign",
 301           "protocol": "REST",
 302           "port": "{{ .Values.service.internalPort }}",
 303           "visualRange":"0",
 304           "lb_policy":"ip_hash"
 305         },
 306         {
 307           "serviceName": "so",
 308           "version": "v1",
 309           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][7]}/serviceInstances/{serviceInstanceId}/unassign",
 310           "protocol": "REST",
 311           "port": "{{ .Values.service.internalPort }}",
 312           "visualRange":"0",
 313           "lb_policy":"ip_hash"
 314         },
 315         {
 316           "serviceName": "so",
 317           "version": "v1",
 318           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations",
 319           "protocol": "REST",
 320           "port": "{{ .Values.service.internalPort }}",
 321           "visualRange":"0",
 322           "lb_policy":"ip_hash"
 323         },
 324         {
 325           "serviceName": "so",
 326           "version": "v1",
 327           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}",
 328           "protocol": "REST",
 329           "port": "{{ .Values.service.internalPort }}",
 330           "visualRange":"0",
 331           "lb_policy":"ip_hash"
 332         },
 333         {
 334           "serviceName": "so",
 335           "version": "v1",
 336           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}/enablePort",
 337           "protocol": "REST",
 338           "port": "{{ .Values.service.internalPort }}",
 339           "visualRange":"0",
 340           "lb_policy":"ip_hash"
 341         },
 342         {
 343           "serviceName": "so",
 344           "version": "v1",
 345           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}/disablePort",
 346           "protocol": "REST",
 347           "port": "{{ .Values.service.internalPort }}",
 348           "visualRange":"0",
 349           "lb_policy":"ip_hash"
 350         },
 351         {
 352           "serviceName": "so",
 353           "version": "v1",
 354           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}/activate",
 355           "protocol": "REST",
 356           "port": "{{ .Values.service.internalPort }}",
 357           "visualRange":"0",
 358           "lb_policy":"ip_hash"
 359         },
 360         {
 361           "serviceName": "so",
 362           "version": "v1",
 363           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/configurations/{configurationInstanceId}/deactivate",
 364           "protocol": "REST",
 365           "port": "{{ .Values.service.internalPort }}",
 366           "visualRange":"0",
 367           "lb_policy":"ip_hash"
 368         },
 369         {
 370           "serviceName": "so",
 371           "version": "v1",
 372           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][6-7]}/serviceInstances/{serviceInstanceId}/addRelationships",
 373           "protocol": "REST",
 374           "port": "{{ .Values.service.internalPort }}",
 375           "visualRange":"0",
 376           "lb_policy":"ip_hash"
 377         },
 378         {
 379           "serviceName": "so",
 380           "version": "v1",
 381           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][6-7]}/serviceInstances/{serviceInstanceId}/removeRelationships",
 382           "protocol": "REST",
 383           "port": "{{ .Values.service.internalPort }}",
 384           "visualRange":"0",
 385           "lb_policy":"ip_hash"
 386         },
 387         {
 388           "serviceName": "so",
 389           "version": "v1",
 390           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs",
 391           "protocol": "REST",
 392           "port": "{{ .Values.service.internalPort }}",
 393           "visualRange":"0",
 394           "lb_policy":"ip_hash"
 395         },
 396         {
 397           "serviceName": "so",
 398           "version": "v1",
 399           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/replace",
 400           "protocol": "REST",
 401           "port": "{{ .Values.service.internalPort }}",
 402           "visualRange":"0",
 403           "lb_policy":"ip_hash"
 404         },
 405         {
 406           "serviceName": "so",
 407           "version": "v1",
 408           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}",
 409           "protocol": "REST",
 410           "port": "{{ .Values.service.internalPort }}",
 411           "visualRange":"0",
 412           "lb_policy":"ip_hash"
 413         },
 414         {
 415           "serviceName": "so",
 416           "version": "v1",
 417           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][6-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/applyUpdatedConfig",
 418           "protocol": "REST",
 419           "port": "{{ .Values.service.internalPort }}",
 420           "visualRange":"0",
 421           "lb_policy":"ip_hash"
 422         },
 423         {
 424           "serviceName": "so",
 425           "version": "v1",
 426           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}",
 427           "protocol": "REST",
 428           "port": "{{ .Values.service.internalPort }}",
 429           "visualRange":"0",
 430           "lb_policy":"ip_hash"
 431         },
 432         {
 433           "serviceName": "so",
 434           "version": "v1",
 435           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules",
 436           "protocol": "REST",
 437           "port": "{{ .Values.service.internalPort }}",
 438           "visualRange":"0",
 439           "lb_policy":"ip_hash"
 440         },
 441         {
 442           "serviceName": "so",
 443           "version": "v1",
 444           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/{vfmoduleInstanceId}/replace",
 445           "protocol": "REST",
 446           "port": "{{ .Values.service.internalPort }}",
 447           "visualRange":"0",
 448           "lb_policy":"ip_hash"
 449         },
 450         {
 451           "serviceName": "so",
 452           "version": "v1",
 453           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/{vfmoduleInstanceId}",
 454           "protocol": "REST",
 455           "port": "{{ .Values.service.internalPort }}",
 456           "visualRange":"0",
 457           "lb_policy":"ip_hash"
 458         },
 459         {
 460           "serviceName": "so",
 461           "version": "v1",
 462           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][6-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/inPlaceSoftwareUpdate",
 463           "protocol": "REST",
 464           "port": "{{ .Values.service.internalPort }}",
 465           "visualRange":"0",
 466           "lb_policy":"ip_hash"
 467         },
 468         {
 469           "serviceName": "so",
 470           "version": "v1",
 471           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/{vfmoduleInstanceId}",
 472           "protocol": "REST",
 473           "port": "{{ .Values.service.internalPort }}",
 474           "visualRange":"0",
 475           "lb_policy":"ip_hash"
 476         },
 477         {
 478           "serviceName": "so",
 479           "version": "v1",
 480           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/{vfmoduleInstanceId}/deactivateAndCloudDelete",
 481           "protocol": "REST",
 482           "port": "{{ .Values.service.internalPort }}",
 483           "visualRange":"0",
 484           "lb_policy":"ip_hash"
 485         },
 486         {
 487           "serviceName": "so",
 488           "version": "v1",
 489           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/vfModules/scaleOut",
 490           "protocol": "REST",
 491           "port": "{{ .Values.service.internalPort }}",
 492           "visualRange":"0",
 493           "lb_policy":"ip_hash"
 494         },
 495         {
 496           "serviceName": "so",
 497           "version": "v1",
 498           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/volumeGroups",
 499           "protocol": "REST",
 500           "port": "{{ .Values.service.internalPort }}",
 501           "visualRange":"0",
 502           "lb_policy":"ip_hash"
 503         },
 504         {
 505           "serviceName": "so",
 506           "version": "v1",
 507           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/volumeGroups/{volumeGroupInstanceId}",
 508           "protocol": "REST",
 509           "port": "{{ .Values.service.internalPort }}",
 510           "visualRange":"0",
 511           "lb_policy":"ip_hash"
 512         },
 513         {
 514           "serviceName": "so",
 515           "version": "v1",
 516           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/vnfs/{vnfInstanceId}/volumeGroups/{volumeGroupInstanceId}",
 517           "protocol": "REST",
 518           "port": "{{ .Values.service.internalPort }}",
 519           "visualRange":"0",
 520           "lb_policy":"ip_hash"
 521         },
 522         {
 523           "serviceName": "so",
 524           "version": "v1",
 525           "url": "/onap/so/infra/serviceInstantiation/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/networks",
 526           "protocol": "REST",
 527           "port": "{{ .Values.service.internalPort }}",
 528           "visualRange":"0",
 529           "lb_policy":"ip_hash"
 530         },
 531         {
 532           "serviceName": "so",
 533           "version": "v1",
 534           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/networks/{networkInstanceId}",
 535           "protocol": "REST",
 536           "port": "{{ .Values.service.internalPort }}",
 537           "visualRange":"0",
 538           "lb_policy":"ip_hash"
 539         },
 540         {
 541           "serviceName": "so",
 542           "version": "v1",
 543           "url": "/onap/so/infra/serviceInstantiationRequests/{version:[vV][5-7]}/serviceInstances/{serviceInstanceId}/networks/{networkInstanceId}",
 544           "protocol": "REST",
 545           "port": "{{ .Values.service.internalPort }}",
 546           "visualRange":"0",
 547           "lb_policy":"ip_hash"
 548         }
 549       ]{{ end }}
 550
 551 updateStrategy:
 552   type: RollingUpdate
 553   maxUnavailable: 1
 554   maxSurge: 1
 555
 556 ################################################################
 557 # soHelpers part
 558 #################################################################
 559 soHelpers:
 560   containerPort: *containerPort
 561
 562 # Resource Limit flavor -By Default using small
 563 flavor: small
 564 # Segregation for Different environment (Small and Large)
 565 resources:
 566   small:
 567     limits:
 568       cpu: "1"
 569       memory: "4Gi"
 570     requests:
 571       cpu: "0.5"
 572       memory: "1Gi"
 573   large:
 574     limits:
 575       cpu: "2"
 576       memory: "8Gi"
 577     requests:
 578       cpu: "1"
 579       memory: "2Gi"
 580   unlimited: {}
 581
 582 nodeSelector: {}
 583 affinity: {}
 584
 585 # application configuration
 586 config:
 587   logstashServiceName: log-ls
 588   logstashPort: 5044
 589   # "KEYSTONE" for keystone v2, "KEYSTONE_V3" for keystone v3
 590   openStackKeystoneVersion: "KEYSTONE"
 591
 592 #Used only if localCluster is enabled. Instantiates SO's own cassandra cluster
 593 #helm deploy demo local/onap --namespace onap --verbose --set so.enabled=true \
 594 #                                                       --set so.global.mariadbGalera.localCluster=true \
 595 #                                                       --set so.global.mariadbGalera.nameOverride=so-mariadb-galera \
 596 #                                                       --set so.global.mariadbGalera.serviceName=so-mariadb-galera
 597 mariadb-galera: &mariadbGalera
 598   rootUser:
 599     externalSecret: *dbRootPassSecretName
 600   nameOverride: &so-mariadb so-mariadb-galera
 601   replicaCount: 1
 602   service:
 603     name: *so-mariadb
 604     portName: *so-mariadb
 605     internalPort: 3306
 606   mariadbOperator:
 607     galera:
 608       enabled: false
 609   persistence:
 610     mountSubPath: so/mariadb-galera/data
 611     enabled: true
 612   serviceAccount:
 613     nameOverride: *so-mariadb
 614
 615 ingress:
 616   enabled: false
 617   service:
 618     - baseaddr: 'so-api'
 619       name: 'so'
 620       port: 8080
 621
 622 serviceMesh:
 623   authorizationPolicy:
 624     authorizedPrincipals:
 625       - serviceAccount: consul-read
 626       - serviceAccount: consul-server-read
 627       - serviceAccount: nbi-read
 628       - serviceAccount: policy-drools-pdp-read
 629       - serviceAccount: so-bpmn-infra-read
 630       - serviceAccount: robot-read
 631       - serviceAccount: istio-ingress
 632         namespace: istio-ingress
 633
 634 mso:
 635   adapters:
 636     requestDb:
 637       auth: Basic YnBlbDpwYXNzd29yZDEk
 638   camundaAuth: AE2E9BE6EF9249085AF98689C4EE087736A5500629A72F35068FFB88813A023581DD6E765071F1C04075B36EA4213A
 639   msoKey: 07a7159d3bf51a0e53be7a8f89699be7
 640   sdc:
 641     client:
 642       auth: 878785F4F31BC9CFA5AB52A172008212D8845ED2DE08AD5E56AF114720A4E49768B8F95CDA2EB971765D28EDCDAA24
 643   aai:
 644     auth: 6E081E10B1CA43A843E303733A74D9B23B601A6E22A21C7EF2C7F15A42F81A1A4E85E65268C2661F71321052C7F3E55B96A8E1E951F8BF6F
 645   oof:
 646     login: test
 647     password: testpwd
 648   so:
 649     operationalEnv:
 650       dmaap:
 651         auth: 51EA5414022D7BE536E7516C4D1A6361416921849B72C0D6FC1C7F262FD9F2BBC2AD124190A332D9845A188AD80955567A4F975C84C221EEA8243BFD92FFE6896CDD1EA16ADD34E1E3D47D4A
 652   health:
 653     auth: basic bXNvX2FkbWlufHBhc3N3b3JkMSQ=
 654
 655 so-bpmn-infra:
 656   mariadb-galera:
 657     <<: *mariadbGalera
 658   db:
 659     <<: *dbSecrets
 660   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 661
 662 so-catalog-db-adapter:
 663   enabled: true
 664   mariadb-galera:
 665     <<: *mariadbGalera
 666   db:
 667     <<: *dbSecrets
 668
 669 so-cnf-adapter:
 670   enabled: true
 671   mariadb-galera:
 672     <<: *mariadbGalera
 673   db:
 674     <<: *dbSecrets
 675   server:
 676     aaiCredsExternalSecret: *aai-secrets
 677     actuatorCredsExternalSecret: *actuator-secrets
 678   mso:
 679     msoKeySecret: *mso-key
 680
 681 so-cnfm-lcm:
 682   enabled: true
 683   mariadb-galera:
 684     <<: *mariadbGalera
 685   db:
 686     <<: *dbSecrets
 687
 688 so-etsi-nfvo-ns-lcm:
 689   enabled: true
 690   mariadb-galera:
 691     <<: *mariadbGalera
 692   db:
 693     <<: *dbSecrets
 694
 695 so-mariadb:
 696   mariadb-galera:
 697     <<: *mariadbGalera
 698   db:
 699     rootPasswordExternalSecretLocalDb: *dbRootPassSecretName
 700     #rootPasswordExternalSecretLocalDb: *dbRootPassSecretName
 701     rootPasswordExternalSecret: '{{ .Values.global.mariadbGalera.localCluster |
 702       ternary (tpl .Values.db.rootPasswordExternalSecretLocalDb .)
 703                ( (not (empty (default "" .Values.global.mariadbGalera.userRootSecret))) |
 704                  ternary
 705                    .Values.global.mariadbGalera.userRootSecret
 706                    (include "common.mariadb.secret.rootPassSecretName"
 707                      (dict "dot" . "chartName" .Values.global.mariadbGalera.nameOverride)
 708                    )
 709                ) }}'
 710     backupCredsExternalSecret: *dbBackupCredsSecretName
 711     userCredsExternalSecret: *dbUserCredsSecretName
 712     adminCredsExternalSecret: *dbAdminCredsSecretName
 713
 714 so-admin-cockpit:
 715   enabled: true
 716   mariadb-galera:
 717     <<: *mariadbGalera
 718   db:
 719     <<: *dbSecrets
 720
 721 so-nssmf-adapter:
 722   enabled: true
 723   server:
 724     actuatorCredsExternalSecret: *actuator-secrets
 725     bpelCredsExternalSecret: *bpel-secrets
 726   mariadb-galera:
 727     <<: *mariadbGalera
 728   db:
 729     <<: *dbSecrets
 730
 731 so-oof-adapter:
 732   enabled: true
 733   mariadb-galera:
 734     <<: *mariadbGalera
 735   db:
 736     <<: *dbSecrets
 737   mso:
 738     msoKeySecret: *mso-key
 739     camundaAuth: AE2E9BE6EF9249085AF98689C4EE087736A5500629A72F35068FFB88813A023581DD6E765071F1C04075B36EA4213A
 740     oof:
 741       authSecret: *mso-oof-auth
 742   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 743
 744 so-openstack-adapter:
 745   enabled: true
 746   mariadb-galera:
 747     <<: *mariadbGalera
 748   db:
 749     <<: *dbSecrets
 750   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 751
 752 so-request-db-adapter:
 753   mariadb-galera:
 754     <<: *mariadbGalera
 755   db:
 756     <<: *dbSecrets
 757
 758 so-sdc-controller:
 759   mariadb-galera:
 760     <<: *mariadbGalera
 761   db:
 762     <<: *dbSecrets
 763   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 764
 765 so-sdnc-adapter:
 766   enabled: true
 767   mariadb-galera:
 768     <<: *mariadbGalera
 769   db:
 770     <<: *dbSecrets
 771   mso:
 772     msoKeySecret: *mso-key
 773   logConfigMapNamePrefix: '{{ include "common.release" . }}-so'
 774
 775 so-ve-vnfm-adapter:
 776   enabled: false
 777
 778 so-etsi-sol005-adapter:
 779   enabled: true
 780   mariadb-galera:
 781     <<: *mariadbGalera
 782   db:
 783     <<: *dbSecrets
 784
 785 so-etsi-sol003-adapter:
 786   enabled: true
 787
 788 #Pods Service Account
 789 serviceAccount:
 790   nameOverride: so
 791   roles:
 792     - read
 793
 794 #Log configuration
 795 log:
 796   path: /var/log/onap