[OOM] Add comments for importCustomCerts in blueprints-processor 43/124343/4
authorAbdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
Sun, 19 Sep 2021 09:02:22 +0000 (09:02 +0000)
committerAbdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
Tue, 21 Sep 2021 12:05:26 +0000 (12:05 +0000)
Comments explain how to enable import Custom Certificates.
By default, importCustomCerts is disabled.

Issue-ID: CCSDK-3356
Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
Change-Id: I42264c465861786dfb38dda8c94abbe6c6a9c56d

kubernetes/cds/components/cds-blueprints-processor/values.yaml

index d21598a..dc20028 100755 (executable)
@@ -31,6 +31,17 @@ global:
   sdncOamService: sdnc-oam
   sdncOamPort: 8282
 
+  #AAF is enabled by default
+  #aafEnabled: true
+
+  #enable importCustomCerts to add custom CA to blueprint processor pod
+  #importCustomCertsEnabled: true
+
+  #use below configmap to add custom CA certificates
+  #certificates with *.pem will be added to JAVA truststore $JAVA_HOME/lib/security/cacerts in the pod
+  #certificates with *.crt will be added to /etc/ssl/certs/ca-certificates.crt in the pod
+  #customCertsConfigMap: onap-cds-blueprints-processor-configmap
+
 #################################################################
 # Secrets metaconfig
 #################################################################
@@ -51,7 +62,7 @@ secrets:
 # AAF part
 #################################################################
 certInitializer:
-  nameOverride: cds-blueprints-processor-initializer
+  nameOverride: cds-blueprints-processor-cert-initializer
   aafDeployFqi: deployer@people.osaaf.org
   aafDeployPass: demo123456!
   # aafDeployCredsExternalSecret: some secret
@@ -63,6 +74,10 @@ certInitializer:
   app_ns: org.osaaf.aaf
   credsPath: /opt/app/osaaf/local
   fqi_namespace: org.onap.sdnc-cds
+  #enable below if we need custom CA to be added to blueprint processor pod
+  #importCustomCertsEnabled: true
+  #truststoreMountpath: /opt/onap/cds
+  #truststoreOutputFileName: truststoreONAPall.jks
   aaf_add_config: >
     /opt/app/aaf_config/bin/agent.sh;
     /opt/app/aaf_config/bin/agent.sh local showpass