Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 1 | #============LICENSE_START======================================================== |
| 2 | # ================================================================================ |
Jack Lucas | 64da4e7 | 2023-03-03 14:46:05 -0500 | [diff] [blame] | 3 | # Copyright (c) 2021-2023 J. F. Lucas. All rights reserved. |
Kasperki | 5e1d978 | 2022-02-24 17:49:04 +0100 | [diff] [blame] | 4 | # Copyright (c) 2021-2022 Nokia. All rights reserved. |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 5 | # Modifications Copyright (C) 2022-2023 Nordix Foundation. |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 6 | # ================================================================================ |
| 7 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 8 | # you may not use this file except in compliance with the License. |
| 9 | # You may obtain a copy of the License at |
| 10 | # |
| 11 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 12 | # |
| 13 | # Unless required by applicable law or agreed to in writing, software |
| 14 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 15 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 16 | # See the License for the specific language governing permissions and |
| 17 | # limitations under the License. |
| 18 | # ============LICENSE_END========================================================= |
| 19 | |
| 20 | ################################################################# |
| 21 | # Global configuration defaults. |
| 22 | ################################################################# |
| 23 | global: |
| 24 | nodePortPrefix: 302 |
| 25 | nodePortPrefixExt: 304 |
Maciej Wereski | 7000a7c | 2021-12-16 12:24:06 +0100 | [diff] [blame] | 26 | centralizedLoggingEnabled: true |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 27 | |
| 28 | ################################################################# |
| 29 | # Filebeat configuration defaults. |
| 30 | ################################################################# |
| 31 | filebeatConfig: |
| 32 | logstashServiceName: log-ls |
| 33 | logstashPort: 5044 |
| 34 | |
| 35 | ################################################################# |
| 36 | # initContainer images. |
| 37 | ################################################################# |
Tomasz Wrobel | 1c39a90 | 2022-01-12 10:49:51 +0100 | [diff] [blame] | 38 | certPostProcessorImage: onap/org.onap.oom.platform.cert-service.oom-certservice-post-processor:2.5.0 |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 39 | |
| 40 | ################################################################# |
| 41 | # Application configuration defaults. |
| 42 | ################################################################# |
| 43 | # application image |
Tomasz Wrobel | f39c640 | 2022-09-12 15:48:10 +0200 | [diff] [blame] | 44 | image: onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.11.0 |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 45 | pullPolicy: Always |
| 46 | |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 47 | commonName: &commonName dcae-hv-ves-collector |
| 48 | containerPort: &containerPort 6061 |
| 49 | |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 50 | # log directory where logging sidecar should look for log files |
Maciej Wereski | 7000a7c | 2021-12-16 12:24:06 +0100 | [diff] [blame] | 51 | # if path is set to null sidecar won't be deployed in spite of |
| 52 | # global.centralizedLoggingEnabled setting. |
| 53 | log: |
| 54 | path: /var/log/ONAP/dcae-hv-ves-collector |
| 55 | logConfigMapNamePrefix: '{{ include "common.fullname" . }}' |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 56 | |
| 57 | # directory where TLS certs should be stored |
| 58 | # if absent, no certs will be retrieved and stored |
| 59 | certDirectory: /etc/ves-hv/ssl |
| 60 | |
Remigiusz Janeczek | 9b00b56 | 2021-04-26 14:37:57 +0200 | [diff] [blame] | 61 | # CMPv2 certificate |
Remigiusz Janeczek | 7b09503 | 2021-05-20 19:39:44 +0200 | [diff] [blame] | 62 | # It is used only when: |
| 63 | # - certDirectory is set |
| 64 | # - global cmpv2Enabled flag is set to true |
Remigiusz Janeczek | 7b09503 | 2021-05-20 19:39:44 +0200 | [diff] [blame] | 65 | # - flag useCmpv2Certificates is set to true |
Piotr Marcinkiewicz | 7062518 | 2021-04-29 17:02:37 +0200 | [diff] [blame] | 66 | # Disabled by default |
Remigiusz Janeczek | 7b09503 | 2021-05-20 19:39:44 +0200 | [diff] [blame] | 67 | useCmpv2Certificates: false |
Remigiusz Janeczek | 9b00b56 | 2021-04-26 14:37:57 +0200 | [diff] [blame] | 68 | certificates: |
| 69 | - mountPath: /etc/ves-hv/ssl/external |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 70 | commonName: *commonName |
Remigiusz Janeczek | 9b00b56 | 2021-04-26 14:37:57 +0200 | [diff] [blame] | 71 | dnsNames: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 72 | - *commonName |
Remigiusz Janeczek | 9b00b56 | 2021-04-26 14:37:57 +0200 | [diff] [blame] | 73 | - hv-ves-collector |
| 74 | - hv-ves |
| 75 | keystore: |
| 76 | outputType: |
| 77 | - jks |
| 78 | passwordSecretRef: |
| 79 | name: hv-ves-cmpv2-keystore-password |
| 80 | key: password |
| 81 | create: true |
| 82 | |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 83 | # probe configuration |
| 84 | readiness: |
| 85 | type: exec |
| 86 | initialDelaySeconds: 5 |
| 87 | periodSeconds: 15 |
| 88 | timeoutSeconds: 2 |
| 89 | command: |
| 90 | - /opt/ves-hv-collector/healthcheck.sh |
| 91 | |
Andreas Geissler | 2d78742 | 2023-02-14 17:27:42 +0100 | [diff] [blame] | 92 | # since there are problems receiving binary data via the sidecar |
| 93 | # the service port is excluded in the sidecar processing |
| 94 | podAnnotations: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 95 | traffic.sidecar.istio.io/excludeInboundPorts: '6061' |
Andreas Geissler | 2d78742 | 2023-02-14 17:27:42 +0100 | [diff] [blame] | 96 | traffic.sidecar.istio.io/includeInboundPorts: '*' |
| 97 | |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 98 | # service configuration |
| 99 | service: |
| 100 | type: NodePort |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 101 | name: *commonName |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 102 | ports: |
Andreas Geissler | 2d78742 | 2023-02-14 17:27:42 +0100 | [diff] [blame] | 103 | - name: tcp |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 104 | port: *containerPort |
Andreas Geissler | 2d78742 | 2023-02-14 17:27:42 +0100 | [diff] [blame] | 105 | port_protocol: tcp |
| 106 | app_protocol: tcp |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 107 | nodePort: 22 |
| 108 | |
Andreas Geissler | 261763a | 2022-10-17 18:39:54 +0200 | [diff] [blame] | 109 | ingress: |
| 110 | enabled: false |
| 111 | service: |
| 112 | - baseaddr: "dcae-hv-ves-collector-api" |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 113 | name: *commonName |
| 114 | port: *containerPort |
Andreas Geissler | 261763a | 2022-10-17 18:39:54 +0200 | [diff] [blame] | 115 | config: |
| 116 | ssl: "redirect" |
| 117 | |
AndrewLamb | bd6ff6b | 2023-05-04 15:56:49 +0100 | [diff] [blame] | 118 | serviceMesh: |
| 119 | authorizationPolicy: |
| 120 | authorizedPrincipals: |
| 121 | - serviceAccount: istio-ingress |
| 122 | namespace: istio-ingress |
| 123 | |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 124 | # initial application configuration |
| 125 | applicationConfig: |
| 126 | logLevel: INFO |
| 127 | server.idleTimeoutSec: 300 |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 128 | server.listenPort: *containerPort |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 129 | cbs.requestIntervalSec: 5 |
Andreas Geissler | b0841b8 | 2022-12-16 10:40:21 +0100 | [diff] [blame] | 130 | security.sslDisable: true |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 131 | security.keys.keyStoreFile: /etc/ves-hv/ssl/cert.jks |
| 132 | security.keys.keyStorePasswordFile: /etc/ves-hv/ssl/jks.pass |
| 133 | security.keys.trustStoreFile: /etc/ves-hv/ssl/trust.jks |
| 134 | security.keys.trustStorePasswordFile: /etc/ves-hv/ssl/trust.pass |
| 135 | streams_publishes: |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 136 | ves-3gpp-fault-supervision: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 137 | type: ${MESSAGING_TYPE} |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 138 | kafka_info: |
efiacor | 26c1f7a | 2022-04-25 13:27:18 +0100 | [diff] [blame] | 139 | bootstrap_servers: ${KAFKA_BOOTSTRAP_SERVERS} |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 140 | topic_name: &ves3gppFaultSupervision SEC_3GPP_FAULTSUPERVISION_OUTPUT |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 141 | ves-3gpp-provisioning: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 142 | type: ${MESSAGING_TYPE} |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 143 | kafka_info: |
efiacor | 26c1f7a | 2022-04-25 13:27:18 +0100 | [diff] [blame] | 144 | bootstrap_servers: ${KAFKA_BOOTSTRAP_SERVERS} |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 145 | topic_name: &ves3gppProvisioning SEC_3GPP_PROVISIONING_OUTPUT |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 146 | ves-3gpp-heartbeat: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 147 | type: ${MESSAGING_TYPE} |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 148 | kafka_info: |
efiacor | 26c1f7a | 2022-04-25 13:27:18 +0100 | [diff] [blame] | 149 | bootstrap_servers: ${KAFKA_BOOTSTRAP_SERVERS} |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 150 | topic_name: &ves3gppHeartbeat SEC_3GPP_HEARTBEAT_OUTPUT |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 151 | ves-3gpp-performance-assurance: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 152 | type: ${MESSAGING_TYPE} |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 153 | kafka_info: |
efiacor | 26c1f7a | 2022-04-25 13:27:18 +0100 | [diff] [blame] | 154 | bootstrap_servers: ${KAFKA_BOOTSTRAP_SERVERS} |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 155 | topic_name: &ves3gppPerformanceAssurance SEC_3GPP_PERFORMANCEASSURANCE_OUTPUT |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 156 | perf3gpp: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 157 | type: ${MESSAGING_TYPE} |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 158 | kafka_info: |
efiacor | 26c1f7a | 2022-04-25 13:27:18 +0100 | [diff] [blame] | 159 | bootstrap_servers: ${KAFKA_BOOTSTRAP_SERVERS} |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 160 | topic_name: &perf3gpp HV_VES_PERF3GPP |
| 161 | |
| 162 | # Strimzi Kafka config |
| 163 | kafkaUser: |
| 164 | acls: |
| 165 | - name: SEC_3GPP |
| 166 | type: topic |
| 167 | patternType: prefix |
| 168 | operations: [Write, DescribeConfigs] |
| 169 | - name: *perf3gpp |
| 170 | type: topic |
| 171 | operations: [Write, DescribeConfigs] |
| 172 | |
| 173 | kafkaTopic: |
| 174 | - name: *ves3gppFaultSupervision |
| 175 | strimziTopicName: dcae-ves-3gpp-fault-supervision |
| 176 | # the default retention values below can be updated |
| 177 | # to meet use case requirements for each topic. |
| 178 | retentionMs: 7200000 |
| 179 | segmentBytes: 1073741824 |
| 180 | - name: *ves3gppProvisioning |
| 181 | strimziTopicName: dcae-ves-3gpp-provisioning |
| 182 | - name: *ves3gppHeartbeat |
| 183 | strimziTopicName: dcae-ves-3gpp-heartbeat |
| 184 | - name: *ves3gppPerformanceAssurance |
| 185 | strimziTopicName: dcae-ves-3gpp-performance-assurance |
| 186 | - name: *perf3gpp |
| 187 | strimziTopicName: dcae-ves-3gpp-perf |
| 188 | |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 189 | |
| 190 | applicationEnv: |
| 191 | JAVA_OPTS: '-Dlogback.configurationFile=/etc/ONAP/dcae-hv-ves-collector/logback.xml' |
Joanna Jeremicz | 616ea93 | 2021-09-06 14:25:04 +0200 | [diff] [blame] | 192 | CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml' |
rope252 | 5a7fbee | 2022-07-25 20:00:36 +0100 | [diff] [blame] | 193 | #Temporary Dummy CBS Port Value until internal SDK library is updated |
| 194 | CONFIG_BINDING_SERVICE_SERVICE_PORT: '0000' |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 195 | MESSAGING_TYPE: 'kafka' |
efiacor | 26c1f7a | 2022-04-25 13:27:18 +0100 | [diff] [blame] | 196 | KAFKA_BOOTSTRAP_SERVERS: '{{ include "common.release" . }}-strimzi-kafka-bootstrap:9092' |
| 197 | USE_SCRAM: 'true' |
| 198 | JAAS_CONFIG: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 199 | externalSecret: true |
| 200 | externalSecretUid: '{{ include "common.name" . }}-ku' |
efiacor | 26c1f7a | 2022-04-25 13:27:18 +0100 | [diff] [blame] | 201 | key: sasl.jaas.config |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 202 | |
| 203 | # Resource Limit flavor -By Default using small |
| 204 | flavor: small |
| 205 | # Segregation for Different environment (Small and Large) |
| 206 | resources: |
| 207 | small: |
| 208 | limits: |
Andreas Geissler | 555db9c | 2023-06-20 11:38:39 +0200 | [diff] [blame^] | 209 | cpu: 999 |
| 210 | memory: 1Gi |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 211 | requests: |
| 212 | cpu: 1 |
| 213 | memory: 1Gi |
| 214 | large: |
| 215 | limits: |
| 216 | cpu: 4 |
Andreas Geissler | 555db9c | 2023-06-20 11:38:39 +0200 | [diff] [blame^] | 217 | memory: 2Gi |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 218 | requests: |
| 219 | cpu: 2 |
| 220 | memory: 2Gi |
| 221 | unlimited: {} |
farida azmy | cb03ac7 | 2021-09-12 16:14:12 +0200 | [diff] [blame] | 222 | |
| 223 | #Pods Service Account |
| 224 | serviceAccount: |
efiacor | 5c0678f | 2023-03-06 09:21:57 +0000 | [diff] [blame] | 225 | nameOverride: *commonName |
farida azmy | cb03ac7 | 2021-09-12 16:14:12 +0200 | [diff] [blame] | 226 | roles: |
| 227 | - read |