| Sylvain Desbureaux | d1ca1ee | 2020-04-07 14:52:20 +0200 | [diff] [blame] | 1 | # Copyright © 2020, Nordix Foundation, Orange |
| 2 | # |
| 3 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | # you may not use this file except in compliance with the License. |
| 5 | # You may obtain a copy of the License at |
| 6 | # |
| 7 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | # |
| 9 | # Unless required by applicable law or agreed to in writing, software |
| 10 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | # See the License for the specific language governing permissions and |
| 13 | # limitations under the License. |
| 14 | global: |
| 15 | readinessRepository: oomk8s |
| 16 | readinessImage: readiness-check:2.0.1 |
| 17 | mariadbGalera: &mariadbGalera |
| 18 | #This flag allows EJBCA to instantiate its own mariadb-galera cluster |
| 19 | localCluster: false |
| 20 | service: mariadb-galera |
| 21 | internalPort: 3306 |
| 22 | nameOverride: mariadb-galera |
| 23 | |
| 24 | secrets: |
| 25 | - uid: ejbca-db-secret |
| 26 | name: &ejbca-db-secret '{{ include "common.release" . }}-ejbca-db-secret' |
| 27 | type: basicAuth |
| 28 | externalSecret: '{{ tpl (default "" .Values.config.db.userCredentialsExternalSecret) . }}' |
| 29 | login: '{{ .Values.config.db.userName }}' |
| 30 | password: '{{ .Values.config.db.userPassword }}' |
| 31 | - uid: ejbca-server-ra-iak |
| 32 | name: '{{ include "common.release" . }}-ejbca-ra-iak' |
| 33 | type: password |
| 34 | password: '{{ .Values.config.ejbca.raIak }}' |
| 35 | - uid: ejbca-server-client-iak |
| 36 | name: '{{ include "common.release" . }}-ejbca-client-iak' |
| 37 | type: password |
| 38 | password: '{{ .Values.config.ejbca.clientIak }}' |
| 39 | |
| 40 | # application configuration |
| 41 | config: |
| 42 | db: |
| 43 | userName: ejbca |
| 44 | # userPassword: password |
| 45 | # userCredentialsExternalSecret: some-secret |
| 46 | ejbca: {} |
| 47 | # raIak: mypassword |
| 48 | # clientIak: mypassword |
| 49 | |
| 50 | mysqlDatabase: &dbName ejbca |
| 51 | |
| 52 | ################################################################# |
| 53 | # Application configuration defaults. |
| 54 | ################################################################# |
| 55 | # application configuration |
| 56 | replicaCount: 1 |
| 57 | |
| 58 | ejbca: |
| 59 | image: primekey/ejbca-ce:6.15.2.5 |
| 60 | pullPolicy: Always |
| 61 | |
| 62 | mariadb-galera: |
| 63 | # '&mariadbConfig' means we "store" the values for later use in the file |
| 64 | # with '*mariadbConfig' pointer. |
| 65 | config: &mariadbConfig |
| 66 | userCredentialsExternalSecret: *ejbca-db-secret |
| 67 | mysqlDatabase: *dbName |
| 68 | nameOverride: ejbca-galera |
| 69 | service: |
| 70 | name: ejbca-galera |
| 71 | portName: ejbca-galera |
| 72 | internalPort: 3306 |
| 73 | replicaCount: 1 |
| 74 | persistence: |
| 75 | enabled: true |
| 76 | mountSubPath: ejbca/maria/data |
| 77 | |
| 78 | mariadb-init: |
| 79 | config: *mariadbConfig |
| 80 | nameOverride: ejbca-config |
| 81 | |
| 82 | nodeSelector: {} |
| 83 | |
| 84 | affinity: {} |
| 85 | |
| 86 | # probe configuration parameters |
| 87 | liveness: |
| 88 | path: /ejbca/publicweb/healthcheck/ejbcahealth |
| 89 | port: api |
| 90 | initialDelaySeconds: 30 |
| 91 | periodSeconds: 30 |
| 92 | |
| 93 | readiness: |
| 94 | path: /ejbca/publicweb/healthcheck/ejbcahealth |
| 95 | port: api |
| 96 | initialDelaySeconds: 30 |
| 97 | periodSeconds: 30 |
| 98 | |
| 99 | service: |
| 100 | type: ClusterIP |
| 101 | ports: |
| 102 | - name: api |
| 103 | port: 8443 |
| 104 | plain_port: 8080 |
| 105 | port_protocol: http |