GuangrongFu | cc1316b | 2021-02-03 17:29:08 +0800 | [diff] [blame] | 1 | #============LICENSE_START======================================================== |
| 2 | # ================================================================================ |
| 3 | # Copyright (c) 2021 ZTE Corporation Intellectual Property. All rights reserved. |
| 4 | # ================================================================================ |
| 5 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 6 | # you may not use this file except in compliance with the License. |
| 7 | # You may obtain a copy of the License at |
| 8 | # |
| 9 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 10 | # |
| 11 | # Unless required by applicable law or agreed to in writing, software |
| 12 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 13 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 14 | # See the License for the specific language governing permissions and |
| 15 | # limitations under the License. |
| 16 | # ============LICENSE_END========================================================= |
| 17 | |
| 18 | ################################################################# |
| 19 | # Global configuration defaults. |
| 20 | ################################################################# |
| 21 | global: |
| 22 | nodePortPrefixExt: 302 |
| 23 | |
| 24 | ################################################################# |
| 25 | # Application configuration defaults. |
| 26 | ################################################################# |
| 27 | # application image |
GuangrongFu | 7cf6d98 | 2021-04-07 14:07:38 +0800 | [diff] [blame] | 28 | image: onap/holmes/engine-management:1.3.3 |
GuangrongFu | cc1316b | 2021-02-03 17:29:08 +0800 | [diff] [blame] | 29 | consulLoaderImage: onap/org.onap.dcaegen2.deployments.consul-loader-container:1.0.0 |
| 30 | |
| 31 | ################################################################# |
| 32 | # AAF part |
| 33 | ################################################################# |
| 34 | certInitializer: |
| 35 | nameOverride: holmes-engine-mgmt-cert-initializer |
| 36 | aafDeployFqi: deployer@people.osaaf.org |
| 37 | aafDeployPass: demo123456! |
| 38 | # aafDeployCredsExternalSecret: some secret |
| 39 | fqdn: holmes-engine-mgmt |
| 40 | fqi: holmes-engine-mgmt@holmes-engine-mgmt.onap.org |
| 41 | fqi_namespace: org.onap.holmes-engine-mgmt |
| 42 | public_fqdn: holmes-engine-mgmt.onap.org |
| 43 | cadi_longitude: "0.0" |
| 44 | cadi_latitude: "0.0" |
| 45 | app_ns: org.osaaf.aaf |
| 46 | credsPath: /opt/app/osaaf/local |
| 47 | aaf_add_config: | |
| 48 | echo "*** changing them into shell safe ones" |
| 49 | export KEYSTORE_PASSWORD=$(tr -cd '[:alnum:]' < /dev/urandom | fold -w64 | head -n1) |
| 50 | export TRUSTSORE_PASSWORD=$(tr -cd '[:alnum:]' < /dev/urandom | fold -w64 | head -n1) |
| 51 | cd {{ .Values.credsPath }} |
| 52 | keytool -storepasswd -new "${KEYSTORE_PASSWORD}" \ |
| 53 | -storepass "${cadi_keystore_password_p12}" \ |
| 54 | -keystore {{ .Values.fqi_namespace }}.p12 |
| 55 | keytool -storepasswd -new "${TRUSTSORE_PASSWORD}" \ |
| 56 | -storepass "${cadi_truststore_password}" \ |
| 57 | -keystore {{ .Values.fqi_namespace }}.trust.jks |
GuangrongFu | cc1316b | 2021-02-03 17:29:08 +0800 | [diff] [blame] | 58 | echo "*** save the generated passwords" |
| 59 | echo "KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD}" > mycreds.prop |
| 60 | echo "TRUSTSORE_PASSWORD=${TRUSTSORE_PASSWORD}" >> mycreds.prop |
| 61 | echo "*** change ownership of certificates to targeted user" |
| 62 | chown -R 1000 . |
| 63 | |
| 64 | ################################################################# |
| 65 | # Secrets metaconfig |
| 66 | ################################################################# |
| 67 | secrets: |
| 68 | - uid: pg-user-creds |
| 69 | type: basicAuth |
| 70 | externalSecret: '{{ tpl (default "" .Values.config.pgConfig.dbUserCredsExternalSecret) . }}' |
| 71 | login: '{{ .Values.config.pgConfig.dbUser }}' |
| 72 | password: '{{ .Values.config.pgConfig.dbUserPassword }}' |
| 73 | |
| 74 | # application configuration |
| 75 | config: |
| 76 | logstashServiceName: log-ls |
| 77 | logstashPort: 5044 |
| 78 | # Addresses of other ONAP entities |
| 79 | address: |
| 80 | consul: |
| 81 | host: consul-server |
| 82 | port: 8500 |
| 83 | pgConfig: |
| 84 | dbName: defaultName |
| 85 | dbHost: defaultHost |
| 86 | dbPort: 1234 |
| 87 | dbUser: admin |
| 88 | dbUserPassword: admin |
| 89 | # dbUserCredsExternalSecret |
| 90 | |
| 91 | service: |
| 92 | type: ClusterIP |
| 93 | name: holmes-engine-mgmt |
| 94 | ports: |
| 95 | - name: https-rest |
| 96 | port: &svc_port 9102 |
| 97 | |
| 98 | # probe configuration parameters |
| 99 | liveness: |
| 100 | initialDelaySeconds: 10 |
| 101 | periodSeconds: 10 |
| 102 | path: /api/holmes-engine-mgmt/v1/healthcheck |
| 103 | scheme: HTTPS |
| 104 | port: *svc_port |
| 105 | enabled: true |
| 106 | |
| 107 | readiness: |
| 108 | initialDelaySeconds: 30 |
| 109 | periodSeconds: 30 |
| 110 | path: /api/holmes-engine-mgmt/v1/healthcheck |
| 111 | scheme: HTTPS |
| 112 | port: *svc_port |
| 113 | |
| 114 | # Segregation for Different environment (Small and Large) |
| 115 | resources: |
| 116 | small: |
| 117 | limits: |
| 118 | cpu: 500m |
| 119 | memory: 1Gi |
| 120 | requests: |
| 121 | cpu: 250m |
| 122 | memory: 500Mi |
| 123 | large: |
| 124 | limits: |
| 125 | cpu: 500m |
| 126 | memory: 2Gi |
| 127 | requests: |
| 128 | cpu: 250m |
| 129 | memory: 1Gi |
| 130 | unlimited: {} |