Code Review
/
oom.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
Run SDC pods as non-root
[oom.git]
/
kubernetes
/
sdc
/
charts
/
sdc-wfd-be
/
values.yaml
diff --git
a/kubernetes/sdc/charts/sdc-wfd-be/values.yaml
b/kubernetes/sdc/charts/sdc-wfd-be/values.yaml
index
0a250e4
..
78fdb32
100644
(file)
--- a/
kubernetes/sdc/charts/sdc-wfd-be/values.yaml
+++ b/
kubernetes/sdc/charts/sdc-wfd-be/values.yaml
@@
-28,32
+28,32
@@
global:
#################################################################
# application image
repository: nexus3.onap.org:10001
#################################################################
# application image
repository: nexus3.onap.org:10001
-image: onap/workflow-backend:1.
5.1
-configInitImage: onap/workflow-init:1.
5.1
+image: onap/workflow-backend:1.
6.2
+configInitImage: onap/workflow-init:1.
6.2
pullPolicy: Always
pullPolicy: Always
-# flag to enable debugging - application support required
-debugEnabled: false
-
initJob:
enabled: true
config:
javaOptions: "-Xmx1536m -Xms1536m"
cassandraAuthenticationEnabled: true
initJob:
enabled: true
config:
javaOptions: "-Xmx1536m -Xms1536m"
cassandraAuthenticationEnabled: true
- cassandraThriftClientPort: 9160
cassandraClientPort: 9042
cassandraClientPort: 9042
- sdcProtocol: HTTP
- sdcEndpoint: sdc-be:8080
+
+ sdcProtocol: HTTPS
+ sdcEndpoint: sdc-be:8443
sdcExternalUser: workflow
sdcExternalUser: workflow
- sdcExternalUserPassword: Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U
- serverSSLEnabled: false
+
+ serverSSLEnabled: true
+
serverSSLKeyStoreType: jks
serverSSLKeyStoreType: jks
- serverSSLKeyStorePath: /etc/server-https-keystore/keystore
- serverSSLKeyPassword: password
+ serverSSLKeyStorePath: /home/sdc/etc/keystore
+
+ serverSSLTrustStoreType: jks
+ serverSSLTrustStorePath: /home/sdc/etc/truststore
+
cassandraSSLEnabled: false
cassandraSSLEnabled: false
- cassandraTrustStorePath: /etc/cassandra-client-truststore/truststore
- cassandraTrustStorePassword: password
+ cassandraTrustStorePath: /home/sdc/etc/truststore
# default number of instances
replicaCount: 1
# default number of instances
replicaCount: 1
@@
-76,16
+76,23
@@
readiness:
service:
type: NodePort
service:
type: NodePort
+ portName: sdc-wfd-be
internalPort: 8080
externalPort: 8080
internalPort2: 8443
externalPort2: 8443
internalPort: 8080
externalPort: 8080
internalPort2: 8443
externalPort2: 8443
- portName: sdc-wfd-be
- nodePort: "57"
+ nodePort: "57" # only one node port. set to http or https port depending on isHttpsEnabled property
+
ingress:
enabled: false
ingress:
enabled: false
-
+ service:
+ - baseaddr: "sdcwfdbe"
+ name: "sdc-wfd-be"
+ port: 8443
+ config:
+ ssl: "redirect"
+
resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little