blob: d713d10fad329545e8770e00f35d5db96a599b01 [file] [log] [blame]
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -05001# Copyright (c) 2019 IBM, Bell Canada
Krzysztof Opasiak32f9aaa2020-02-06 23:05:15 +01002# Copyright (c) 2020 Samsung Electronics
efiacor7d3b0142023-02-28 11:28:52 +00003# Modification Copyright © 2022-2023 Nordix Foundation
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -05004#
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -05005# Licensed under the Apache License, Version 2.0 (the "License");
6# you may not use this file except in compliance with the License.
7# You may obtain a copy of the License at
8#
9# http://www.apache.org/licenses/LICENSE-2.0
10#
11# Unless required by applicable law or agreed to in writing, software
12# distributed under the License is distributed on an "AS IS" BASIS,
13# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14# See the License for the specific language governing permissions and
15# limitations under the License.
16
17#################################################################
18# Global configuration defaults.
19#################################################################
20global:
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -050021 # image pull policy
22 pullPolicy: Always
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -050023 persistence:
24 mountPath: /dockerdata-nfs
Andreas Geissler4ee97a92022-04-29 13:01:14 +020025 # This configuration specifies Service and port for SDNC OAM interface
Konrad Bańkae332b242020-04-06 13:30:06 +020026 sdncOamService: sdnc-oam
27 sdncOamPort: 8282
Andreas Geissler4ee97a92022-04-29 13:01:14 +020028 # This concerns CDS/AAI communication through HTTP when TLS is not being needed
29 # Port value should match the one in aai/values.yml : service.externalPlainPort
30 aaiData:
31 ExternalPlainPort: 80 # when TLS is not needed
32 ServiceName: aai # domain
33 # http://aai:80 or https://aai:443
34
Abdelmuhaimen Seaudi2b55c442021-09-19 09:02:22 +000035 #enable importCustomCerts to add custom CA to blueprint processor pod
36 #importCustomCertsEnabled: true
37
38 #use below configmap to add custom CA certificates
39 #certificates with *.pem will be added to JAVA truststore $JAVA_HOME/lib/security/cacerts in the pod
40 #certificates with *.crt will be added to /etc/ssl/certs/ca-certificates.crt in the pod
41 #customCertsConfigMap: onap-cds-blueprints-processor-configmap
42
Krzysztof Opasiak32f9aaa2020-02-06 23:05:15 +010043#################################################################
44# Secrets metaconfig
45#################################################################
46secrets:
47 - uid: 'cds-db-user-creds'
48 type: basicAuth
49 externalSecret: '{{ tpl (default "" .Values.config.cdsDB.dbCredsExternalSecret) . }}'
50 login: '{{ .Values.config.cdsDB.dbUser }}'
51 password: '{{ .Values.config.cdsDB.dbPassword }}'
52 passwordPolicy: required
Konrad Bańka031bdb72020-05-14 16:56:39 +020053 - uid: 'sdnc-db-root-pass'
Krzysztof Opasiak32f9aaa2020-02-06 23:05:15 +010054 type: password
Konrad Bańka031bdb72020-05-14 16:56:39 +020055 externalSecret: '{{ tpl (default "" .Values.config.sdncDB.dbRootPassExternalSecret) . }}'
56 password: '{{ .Values.config.sdncDB.dbRootPass }}'
Krzysztof Opasiak32f9aaa2020-02-06 23:05:15 +010057 passwordPolicy: required
Michal Jagiello2cef5642022-06-27 10:08:41 +000058 - uid: cps-creds
59 type: basicAuth
60 externalSecret: '{{ tpl (default "" .Values.config.cps.cpsUserExternalSecret) . }}'
61 login: '{{ .Values.config.cps.cpsUsername }}'
62 password: '{{ .Values.config.cps.cpsPassword }}'
63 passwordPolicy: required
Krzysztof Opasiak32f9aaa2020-02-06 23:05:15 +010064
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -050065#################################################################
66# Application configuration defaults.
67#################################################################
68# application image
Dan Timoney9f2a5772022-12-19 11:48:50 -050069image: onap/ccsdk-blueprintsprocessor:1.4.2
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -050070pullPolicy: Always
71
72# flag to enable debugging - application support required
73debugEnabled: false
74
75# application configuration
76config:
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -050077 appConfigDir: /opt/app/onap/config
Konrad Bańka031bdb72020-05-14 16:56:39 +020078 sdncDB:
79 dbService: mariadb-galera
80 dbPort: 3306
81 dbName: sdnctl
Andreas Geissler4ee97a92022-04-29 13:01:14 +020082 # dbRootPass: Custom root password
Konrad Bańka031bdb72020-05-14 16:56:39 +020083 dbRootPassExternalSecret: '{{ include "common.mariadb.secret.rootPassSecretName" ( dict "dot" . "chartName" .Values.config.sdncDB.dbService ) }}'
Krzysztof Opasiak32f9aaa2020-02-06 23:05:15 +010084 cdsDB:
85 dbServer: cds-db
86 dbPort: 3306
87 dbName: sdnctl
Sylvain Desbureaux503b2292020-11-21 22:29:17 +010088 dbUser: sdnctl
89 dbPassword: sdnctl
Krzysztof Opasiak32f9aaa2020-02-06 23:05:15 +010090 # dbCredsExternalSecret: <some secret name>
91 # dbRootPassword: password
92 # dbRootPassExternalSecret
Michal Jagiello2cef5642022-06-27 10:08:41 +000093 cps:
94 cpsUsername: ''
95 cpsPassword: ''
96 cpsUserExternalSecret: '{{ include "common.release" . }}-cps-core-app-user-creds'
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -050097
98# default number of instances
Jozsef Csongvai08515b72021-04-28 17:04:57 -040099replicaCount: 1
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500100
101nodeSelector: {}
102
103affinity: {}
104
efiacor7d3b0142023-02-28 11:28:52 +0000105# Strimzi KafkaUser config
106kafkaUser:
107 acls:
108 - name: cds-bp-processor
109 type: group
110 operations: [Read]
111 - name: cds.blueprint-processor
112 type: topic
113 patternType: prefix
114 operations: [Read, Write]
115# Strimzi KafkaTopic config
116kafkaTopic:
117 - name: cds.blueprint-processor.self-service-api.request
118 - name: cds.blueprint-processor.self-service-api.response
119 - name: cds.blueprint-processor.self-service-api.audit.request
120 - name: cds.blueprint-processor.self-service-api.audit.response
Prathamesh Morde93da1272019-06-24 10:36:15 -0400121
efiacor7d3b0142023-02-28 11:28:52 +0000122
123containerHttpPort: &svc_http_port 8080
124containerGrpcPort: &svc_grpc_port 9111
125containerTcpPort: &svc_tcp_port 5701
126
127service:
128 http:
129 type: ClusterIP
130 portName: http
131 internalPort: *svc_http_port
132 externalPort: *svc_http_port
133 grpc:
134 type: ClusterIP
135 portName: grpc
136 internalPort: *svc_grpc_port
137 externalPort: *svc_grpc_port
138 cluster:
139 type: ClusterIP
140 portName: tcp-cluster
141 internalPort: *svc_tcp_port
142 externalPort: *svc_tcp_port
143 port: *svc_http_port
Krzysztof Opasiak32f9aaa2020-02-06 23:05:15 +0100144
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500145# probe configuration parameters
Jozsef Csongvai08515b72021-04-28 17:04:57 -0400146startup:
147 initialDelaySeconds: 10
148 failureThreshold: 30
149 periodSeconds: 10
efiacor7d3b0142023-02-28 11:28:52 +0000150 port: *svc_http_port
Jozsef Csongvai08515b72021-04-28 17:04:57 -0400151
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500152liveness:
Andreas Geissler4ee97a92022-04-29 13:01:14 +0200153 initialDelaySeconds: 1
Oleg Mitsura3a621182019-10-09 12:40:11 -0400154 periodSeconds: 20
Andreas Geissler4ee97a92022-04-29 13:01:14 +0200155 timeoutSeconds: 30
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500156 # necessary to disable liveness probe when setting breakpoints
157 # in debugger so K8s doesn't restart unresponsive container
Andreas Geissler4ee97a92022-04-29 13:01:14 +0200158 enabled: false
efiacor7d3b0142023-02-28 11:28:52 +0000159 port: *svc_http_port
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500160
161readiness:
Yang Xu435062b2019-06-17 01:19:37 -0400162 initialDelaySeconds: 120
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500163 periodSeconds: 10
Oleg Mitsura3a621182019-10-09 12:40:11 -0400164 timeoutSeconds: 20
efiacor7d3b0142023-02-28 11:28:52 +0000165 port: *svc_http_port
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500166
167persistence:
Alexis de Talhouët108e28f2019-04-14 18:54:56 -0400168 volumeReclaimPolicy: Retain
169 accessMode: ReadWriteMany
170 size: 2Gi
171 enabled: true
172 mountSubPath: cds/blueprints/deploy
173 deployedBlueprint: /opt/app/onap/blueprints/deploy
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500174
Sebastien Premont-Tendlandb679d7b2020-02-17 11:32:15 -0500175cluster:
176 # Cannot have cluster enabled if the replicaCount is not at least 3
Jozsef Csongvai08515b72021-04-28 17:04:57 -0400177 enabled: false
Sebastien Premont-Tendlandb679d7b2020-02-17 11:32:15 -0500178 clusterName: cds-cluster
Sebastien Premont-Tendlandb679d7b2020-02-17 11:32:15 -0500179 # Defines the number of node to be part of the CP subsystem/raft algorithm. This value should be
180 # between 3 and 7 only.
181 groupSize: 3
182
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500183ingress:
184 enabled: false
Lucjan Bryndza33315d42019-11-27 14:07:58 +0100185 service:
Andreas Geissler51900a92022-08-03 13:10:35 +0200186 - baseaddr: "cds-blueprintsprocessor-api"
Lucjan Bryndza6174db42020-07-09 09:00:20 +0000187 name: "cds-blueprints-processor-http"
Lucjan Bryndza33315d42019-11-27 14:07:58 +0100188 port: 8080
Andreas Geissler4ee97a92022-04-29 13:01:14 +0200189 config:
190 ssl: "none"
Steve Alphonse Siania1b6b0e2019-01-25 15:23:58 -0500191
Dominik Mizyndd285d32020-08-21 13:10:11 +0200192logback:
193 rootLogLevel: INFO
194 logger:
195 springframework: INFO
196 springframeworkWeb: INFO
197 springframeworkSecurityWebauthentication: INFO
198 hibernate: INFO
199 onapCcsdkCds: INFO
200
Dan Timoney6cc07e02020-09-23 08:52:47 -0400201flavor: small
202
203resources:
204 small:
205 limits:
206 cpu: 2
207 memory: 4Gi
208 requests:
209 cpu: 1
210 memory: 1Gi
211 large:
212 limits:
213 cpu: 4
214 memory: 8Gi
215 requests:
216 cpu: 2
217 memory: 4Gi
218 unlimited: {}
farida azmyffad0322021-04-09 14:18:14 +0200219
efiacor7d3b0142023-02-28 11:28:52 +0000220readinessCheck:
221 wait_for:
222 - cds-db
223
farida azmyffad0322021-04-09 14:18:14 +0200224#Pods Service Account
225serviceAccount:
226 nameOverride: cds-blueprints-processor
227 roles:
228 - read
Kavitha P1a78f2f2021-08-25 16:40:38 +0530229
230# workflow store flag
231workflow:
232 storeEnabled: false