Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 1 | # Copyright (c) 2019 IBM, Bell Canada |
Krzysztof Opasiak | 32f9aaa | 2020-02-06 23:05:15 +0100 | [diff] [blame] | 2 | # Copyright (c) 2020 Samsung Electronics |
efiacor | 7d3b014 | 2023-02-28 11:28:52 +0000 | [diff] [blame] | 3 | # Modification Copyright © 2022-2023 Nordix Foundation |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 4 | # |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 5 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 6 | # you may not use this file except in compliance with the License. |
| 7 | # You may obtain a copy of the License at |
| 8 | # |
| 9 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 10 | # |
| 11 | # Unless required by applicable law or agreed to in writing, software |
| 12 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 13 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 14 | # See the License for the specific language governing permissions and |
| 15 | # limitations under the License. |
| 16 | |
| 17 | ################################################################# |
| 18 | # Global configuration defaults. |
| 19 | ################################################################# |
| 20 | global: |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 21 | # image pull policy |
| 22 | pullPolicy: Always |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 23 | persistence: |
| 24 | mountPath: /dockerdata-nfs |
Andreas Geissler | 4ee97a9 | 2022-04-29 13:01:14 +0200 | [diff] [blame] | 25 | # This configuration specifies Service and port for SDNC OAM interface |
Konrad Bańka | e332b24 | 2020-04-06 13:30:06 +0200 | [diff] [blame] | 26 | sdncOamService: sdnc-oam |
| 27 | sdncOamPort: 8282 |
Andreas Geissler | 4ee97a9 | 2022-04-29 13:01:14 +0200 | [diff] [blame] | 28 | # This concerns CDS/AAI communication through HTTP when TLS is not being needed |
| 29 | # Port value should match the one in aai/values.yml : service.externalPlainPort |
| 30 | aaiData: |
| 31 | ExternalPlainPort: 80 # when TLS is not needed |
| 32 | ServiceName: aai # domain |
| 33 | # http://aai:80 or https://aai:443 |
| 34 | |
Abdelmuhaimen Seaudi | 2b55c44 | 2021-09-19 09:02:22 +0000 | [diff] [blame] | 35 | #enable importCustomCerts to add custom CA to blueprint processor pod |
| 36 | #importCustomCertsEnabled: true |
| 37 | |
| 38 | #use below configmap to add custom CA certificates |
| 39 | #certificates with *.pem will be added to JAVA truststore $JAVA_HOME/lib/security/cacerts in the pod |
| 40 | #certificates with *.crt will be added to /etc/ssl/certs/ca-certificates.crt in the pod |
| 41 | #customCertsConfigMap: onap-cds-blueprints-processor-configmap |
| 42 | |
Krzysztof Opasiak | 32f9aaa | 2020-02-06 23:05:15 +0100 | [diff] [blame] | 43 | ################################################################# |
| 44 | # Secrets metaconfig |
| 45 | ################################################################# |
| 46 | secrets: |
| 47 | - uid: 'cds-db-user-creds' |
| 48 | type: basicAuth |
| 49 | externalSecret: '{{ tpl (default "" .Values.config.cdsDB.dbCredsExternalSecret) . }}' |
| 50 | login: '{{ .Values.config.cdsDB.dbUser }}' |
| 51 | password: '{{ .Values.config.cdsDB.dbPassword }}' |
| 52 | passwordPolicy: required |
Konrad Bańka | 031bdb7 | 2020-05-14 16:56:39 +0200 | [diff] [blame] | 53 | - uid: 'sdnc-db-root-pass' |
Krzysztof Opasiak | 32f9aaa | 2020-02-06 23:05:15 +0100 | [diff] [blame] | 54 | type: password |
Konrad Bańka | 031bdb7 | 2020-05-14 16:56:39 +0200 | [diff] [blame] | 55 | externalSecret: '{{ tpl (default "" .Values.config.sdncDB.dbRootPassExternalSecret) . }}' |
| 56 | password: '{{ .Values.config.sdncDB.dbRootPass }}' |
Krzysztof Opasiak | 32f9aaa | 2020-02-06 23:05:15 +0100 | [diff] [blame] | 57 | passwordPolicy: required |
Michal Jagiello | 2cef564 | 2022-06-27 10:08:41 +0000 | [diff] [blame] | 58 | - uid: cps-creds |
| 59 | type: basicAuth |
| 60 | externalSecret: '{{ tpl (default "" .Values.config.cps.cpsUserExternalSecret) . }}' |
| 61 | login: '{{ .Values.config.cps.cpsUsername }}' |
| 62 | password: '{{ .Values.config.cps.cpsPassword }}' |
| 63 | passwordPolicy: required |
Krzysztof Opasiak | 32f9aaa | 2020-02-06 23:05:15 +0100 | [diff] [blame] | 64 | |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 65 | ################################################################# |
| 66 | # Application configuration defaults. |
| 67 | ################################################################# |
| 68 | # application image |
Dan Timoney | 9f2a577 | 2022-12-19 11:48:50 -0500 | [diff] [blame] | 69 | image: onap/ccsdk-blueprintsprocessor:1.4.2 |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 70 | pullPolicy: Always |
| 71 | |
| 72 | # flag to enable debugging - application support required |
| 73 | debugEnabled: false |
| 74 | |
| 75 | # application configuration |
| 76 | config: |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 77 | appConfigDir: /opt/app/onap/config |
Konrad Bańka | 031bdb7 | 2020-05-14 16:56:39 +0200 | [diff] [blame] | 78 | sdncDB: |
| 79 | dbService: mariadb-galera |
| 80 | dbPort: 3306 |
| 81 | dbName: sdnctl |
Andreas Geissler | 4ee97a9 | 2022-04-29 13:01:14 +0200 | [diff] [blame] | 82 | # dbRootPass: Custom root password |
Konrad Bańka | 031bdb7 | 2020-05-14 16:56:39 +0200 | [diff] [blame] | 83 | dbRootPassExternalSecret: '{{ include "common.mariadb.secret.rootPassSecretName" ( dict "dot" . "chartName" .Values.config.sdncDB.dbService ) }}' |
Krzysztof Opasiak | 32f9aaa | 2020-02-06 23:05:15 +0100 | [diff] [blame] | 84 | cdsDB: |
| 85 | dbServer: cds-db |
| 86 | dbPort: 3306 |
| 87 | dbName: sdnctl |
Sylvain Desbureaux | 503b229 | 2020-11-21 22:29:17 +0100 | [diff] [blame] | 88 | dbUser: sdnctl |
| 89 | dbPassword: sdnctl |
Krzysztof Opasiak | 32f9aaa | 2020-02-06 23:05:15 +0100 | [diff] [blame] | 90 | # dbCredsExternalSecret: <some secret name> |
| 91 | # dbRootPassword: password |
| 92 | # dbRootPassExternalSecret |
Michal Jagiello | 2cef564 | 2022-06-27 10:08:41 +0000 | [diff] [blame] | 93 | cps: |
| 94 | cpsUsername: '' |
| 95 | cpsPassword: '' |
| 96 | cpsUserExternalSecret: '{{ include "common.release" . }}-cps-core-app-user-creds' |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 97 | |
| 98 | # default number of instances |
Jozsef Csongvai | 08515b7 | 2021-04-28 17:04:57 -0400 | [diff] [blame] | 99 | replicaCount: 1 |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 100 | |
| 101 | nodeSelector: {} |
| 102 | |
| 103 | affinity: {} |
| 104 | |
efiacor | 7d3b014 | 2023-02-28 11:28:52 +0000 | [diff] [blame] | 105 | # Strimzi KafkaUser config |
| 106 | kafkaUser: |
| 107 | acls: |
| 108 | - name: cds-bp-processor |
| 109 | type: group |
| 110 | operations: [Read] |
| 111 | - name: cds.blueprint-processor |
| 112 | type: topic |
| 113 | patternType: prefix |
| 114 | operations: [Read, Write] |
| 115 | # Strimzi KafkaTopic config |
| 116 | kafkaTopic: |
| 117 | - name: cds.blueprint-processor.self-service-api.request |
| 118 | - name: cds.blueprint-processor.self-service-api.response |
| 119 | - name: cds.blueprint-processor.self-service-api.audit.request |
| 120 | - name: cds.blueprint-processor.self-service-api.audit.response |
Prathamesh Morde | 93da127 | 2019-06-24 10:36:15 -0400 | [diff] [blame] | 121 | |
efiacor | 7d3b014 | 2023-02-28 11:28:52 +0000 | [diff] [blame] | 122 | |
| 123 | containerHttpPort: &svc_http_port 8080 |
| 124 | containerGrpcPort: &svc_grpc_port 9111 |
| 125 | containerTcpPort: &svc_tcp_port 5701 |
| 126 | |
| 127 | service: |
| 128 | http: |
| 129 | type: ClusterIP |
| 130 | portName: http |
| 131 | internalPort: *svc_http_port |
| 132 | externalPort: *svc_http_port |
| 133 | grpc: |
| 134 | type: ClusterIP |
| 135 | portName: grpc |
| 136 | internalPort: *svc_grpc_port |
| 137 | externalPort: *svc_grpc_port |
| 138 | cluster: |
| 139 | type: ClusterIP |
| 140 | portName: tcp-cluster |
| 141 | internalPort: *svc_tcp_port |
| 142 | externalPort: *svc_tcp_port |
| 143 | port: *svc_http_port |
Krzysztof Opasiak | 32f9aaa | 2020-02-06 23:05:15 +0100 | [diff] [blame] | 144 | |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 145 | # probe configuration parameters |
Jozsef Csongvai | 08515b7 | 2021-04-28 17:04:57 -0400 | [diff] [blame] | 146 | startup: |
| 147 | initialDelaySeconds: 10 |
| 148 | failureThreshold: 30 |
| 149 | periodSeconds: 10 |
efiacor | 7d3b014 | 2023-02-28 11:28:52 +0000 | [diff] [blame] | 150 | port: *svc_http_port |
Jozsef Csongvai | 08515b7 | 2021-04-28 17:04:57 -0400 | [diff] [blame] | 151 | |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 152 | liveness: |
Andreas Geissler | 4ee97a9 | 2022-04-29 13:01:14 +0200 | [diff] [blame] | 153 | initialDelaySeconds: 1 |
Oleg Mitsura | 3a62118 | 2019-10-09 12:40:11 -0400 | [diff] [blame] | 154 | periodSeconds: 20 |
Andreas Geissler | 4ee97a9 | 2022-04-29 13:01:14 +0200 | [diff] [blame] | 155 | timeoutSeconds: 30 |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 156 | # necessary to disable liveness probe when setting breakpoints |
| 157 | # in debugger so K8s doesn't restart unresponsive container |
Andreas Geissler | 4ee97a9 | 2022-04-29 13:01:14 +0200 | [diff] [blame] | 158 | enabled: false |
efiacor | 7d3b014 | 2023-02-28 11:28:52 +0000 | [diff] [blame] | 159 | port: *svc_http_port |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 160 | |
| 161 | readiness: |
Yang Xu | 435062b | 2019-06-17 01:19:37 -0400 | [diff] [blame] | 162 | initialDelaySeconds: 120 |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 163 | periodSeconds: 10 |
Oleg Mitsura | 3a62118 | 2019-10-09 12:40:11 -0400 | [diff] [blame] | 164 | timeoutSeconds: 20 |
efiacor | 7d3b014 | 2023-02-28 11:28:52 +0000 | [diff] [blame] | 165 | port: *svc_http_port |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 166 | |
| 167 | persistence: |
Alexis de Talhouët | 108e28f | 2019-04-14 18:54:56 -0400 | [diff] [blame] | 168 | volumeReclaimPolicy: Retain |
| 169 | accessMode: ReadWriteMany |
| 170 | size: 2Gi |
| 171 | enabled: true |
| 172 | mountSubPath: cds/blueprints/deploy |
| 173 | deployedBlueprint: /opt/app/onap/blueprints/deploy |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 174 | |
Sebastien Premont-Tendland | b679d7b | 2020-02-17 11:32:15 -0500 | [diff] [blame] | 175 | cluster: |
| 176 | # Cannot have cluster enabled if the replicaCount is not at least 3 |
Jozsef Csongvai | 08515b7 | 2021-04-28 17:04:57 -0400 | [diff] [blame] | 177 | enabled: false |
Sebastien Premont-Tendland | b679d7b | 2020-02-17 11:32:15 -0500 | [diff] [blame] | 178 | clusterName: cds-cluster |
Sebastien Premont-Tendland | b679d7b | 2020-02-17 11:32:15 -0500 | [diff] [blame] | 179 | # Defines the number of node to be part of the CP subsystem/raft algorithm. This value should be |
| 180 | # between 3 and 7 only. |
| 181 | groupSize: 3 |
| 182 | |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 183 | ingress: |
| 184 | enabled: false |
Lucjan Bryndza | 33315d4 | 2019-11-27 14:07:58 +0100 | [diff] [blame] | 185 | service: |
Andreas Geissler | 51900a9 | 2022-08-03 13:10:35 +0200 | [diff] [blame] | 186 | - baseaddr: "cds-blueprintsprocessor-api" |
Lucjan Bryndza | 6174db4 | 2020-07-09 09:00:20 +0000 | [diff] [blame] | 187 | name: "cds-blueprints-processor-http" |
Lucjan Bryndza | 33315d4 | 2019-11-27 14:07:58 +0100 | [diff] [blame] | 188 | port: 8080 |
Andreas Geissler | 4ee97a9 | 2022-04-29 13:01:14 +0200 | [diff] [blame] | 189 | config: |
| 190 | ssl: "none" |
Steve Alphonse Siani | a1b6b0e | 2019-01-25 15:23:58 -0500 | [diff] [blame] | 191 | |
Dominik Mizyn | dd285d3 | 2020-08-21 13:10:11 +0200 | [diff] [blame] | 192 | logback: |
| 193 | rootLogLevel: INFO |
| 194 | logger: |
| 195 | springframework: INFO |
| 196 | springframeworkWeb: INFO |
| 197 | springframeworkSecurityWebauthentication: INFO |
| 198 | hibernate: INFO |
| 199 | onapCcsdkCds: INFO |
| 200 | |
Dan Timoney | 6cc07e0 | 2020-09-23 08:52:47 -0400 | [diff] [blame] | 201 | flavor: small |
| 202 | |
| 203 | resources: |
| 204 | small: |
| 205 | limits: |
| 206 | cpu: 2 |
| 207 | memory: 4Gi |
| 208 | requests: |
| 209 | cpu: 1 |
| 210 | memory: 1Gi |
| 211 | large: |
| 212 | limits: |
| 213 | cpu: 4 |
| 214 | memory: 8Gi |
| 215 | requests: |
| 216 | cpu: 2 |
| 217 | memory: 4Gi |
| 218 | unlimited: {} |
farida azmy | ffad032 | 2021-04-09 14:18:14 +0200 | [diff] [blame] | 219 | |
efiacor | 7d3b014 | 2023-02-28 11:28:52 +0000 | [diff] [blame] | 220 | readinessCheck: |
| 221 | wait_for: |
| 222 | - cds-db |
| 223 | |
farida azmy | ffad032 | 2021-04-09 14:18:14 +0200 | [diff] [blame] | 224 | #Pods Service Account |
| 225 | serviceAccount: |
| 226 | nameOverride: cds-blueprints-processor |
| 227 | roles: |
| 228 | - read |
Kavitha P | 1a78f2f | 2021-08-25 16:40:38 +0530 | [diff] [blame] | 229 | |
| 230 | # workflow store flag |
| 231 | workflow: |
| 232 | storeEnabled: false |