egernug | d3c55ab | 2023-01-19 15:50:37 +0000 | [diff] [blame] | 1 | # Copyright © 2023 Nordix Foundation |
| 2 | # |
| 3 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | # you may not use this file except in compliance with the License. |
| 5 | # You may obtain a copy of the License at |
| 6 | # |
| 7 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | # |
| 9 | # Unless required by applicable law or agreed to in writing, software |
| 10 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | # See the License for the specific language governing permissions and |
| 13 | # limitations under the License. |
| 14 | |
| 15 | ################################################################# |
| 16 | # Global configuration defaults. |
| 17 | ################################################################# |
| 18 | global: |
| 19 | persistence: |
| 20 | mountPath: /dockerdata-nfs |
| 21 | mariadbGalera: |
| 22 | serviceName: mariadb-galera |
| 23 | servicePort: '3306' |
| 24 | |
| 25 | ################################################################# |
| 26 | # Secrets metaconfig |
| 27 | ################################################################# |
| 28 | secrets: |
| 29 | - uid: db-user-creds |
| 30 | type: basicAuth |
| 31 | externalSecret: '{{ tpl (default "" .Values.db.userCredsExternalSecret) . }}' |
| 32 | login: '{{ .Values.db.userName }}' |
| 33 | password: '{{ .Values.db.userPassword }}' |
| 34 | passwordPolicy: required |
| 35 | - uid: db-admin-creds |
| 36 | type: basicAuth |
| 37 | externalSecret: '{{ tpl (default "" .Values.db.adminCredsExternalSecret) . }}' |
| 38 | login: '{{ .Values.db.adminName }}' |
| 39 | password: '{{ .Values.db.adminPassword }}' |
| 40 | passwordPolicy: required |
| 41 | |
| 42 | ################################################################# |
| 43 | # Application configuration defaults. |
| 44 | ################################################################# |
egernug | 87dce3a | 2023-05-02 16:26:34 +0100 | [diff] [blame] | 45 | image: onap/so/so-cnfm-as-lcm:1.12.1 |
egernug | d3c55ab | 2023-01-19 15:50:37 +0000 | [diff] [blame] | 46 | pullPolicy: Always |
| 47 | |
| 48 | aai: |
| 49 | auth: 2A11B07DB6214A839394AA1EC5844695F5114FC407FF5422625FB00175A3DCB8A1FF745F22867EFA72D5369D599BBD88DA8BED4233CF5586 |
| 50 | db: |
| 51 | userName: so_user |
| 52 | userPassword: so_User123 |
| 53 | # userCredsExternalSecret: some secret |
| 54 | adminName: so_admin |
| 55 | adminPassword: so_Admin123 |
| 56 | # adminCredsExternalSecret: some secret |
| 57 | mso: |
| 58 | key: 07a7159d3bf51a0e53be7a8f89699be7 |
| 59 | sdc: |
| 60 | username: mso |
| 61 | password: 76966BDD3C7414A03F7037264FF2E6C8EEC6C28F2B67F2840A1ED857C0260FEE731D73F47F828E5527125D29FD25D3E0DE39EE44C058906BF1657DE77BF897EECA93BDC07FA64F |
| 62 | key: 566B754875657232314F5548556D3665 |
| 63 | |
| 64 | replicaCount: 1 |
| 65 | minReadySeconds: 10 |
| 66 | containerPort: &containerPort 9888 |
| 67 | logPath: ./logs/so-cnfm-lcm/ |
| 68 | app: so-cnfm-lcm |
| 69 | service: |
| 70 | type: ClusterIP |
| 71 | ports: |
| 72 | - name: http |
| 73 | port: *containerPort |
| 74 | updateStrategy: |
| 75 | type: RollingUpdate |
| 76 | maxUnavailable: 1 |
| 77 | maxSurge: 1 |
| 78 | |
| 79 | ################################################################# |
| 80 | # soHelpers part |
| 81 | ################################################################# |
| 82 | soHelpers: |
| 83 | containerPort: *containerPort |
| 84 | |
| 85 | # Resource Limit flavor -By Default using small |
| 86 | flavor: small |
| 87 | # Segregation for Different environment (Small and Large) |
| 88 | resources: |
| 89 | small: |
| 90 | limits: |
| 91 | memory: 4Gi |
| 92 | cpu: 2000m |
| 93 | requests: |
| 94 | memory: 1Gi |
| 95 | cpu: 500m |
| 96 | large: |
| 97 | limits: |
| 98 | memory: 8Gi |
| 99 | cpu: 4000m |
| 100 | requests: |
| 101 | memory: 2Gi |
| 102 | cpu: 1000m |
| 103 | unlimited: {} |
| 104 | |
| 105 | livenessProbe: |
| 106 | port: *containerPort |
| 107 | initialDelaySeconds: 600 |
| 108 | periodSeconds: 60 |
| 109 | timeoutSeconds: 10 |
| 110 | successThreshold: 1 |
| 111 | failureThreshold: 3 |
| 112 | |
| 113 | ingress: |
| 114 | enabled: false |
| 115 | service: |
| 116 | - baseaddr: 'so-cnfm-lcm-api' |
| 117 | name: 'so-cnfms-lcm' |
| 118 | port: *containerPort |
| 119 | config: |
| 120 | ssl: 'redirect' |
| 121 | |
AndrewLamb | ab2704a | 2023-04-05 14:45:11 +0100 | [diff] [blame] | 122 | serviceMesh: |
| 123 | authorizationPolicy: |
| 124 | authorizedPrincipals: |
| 125 | - serviceAccount: so-read |
| 126 | - serviceAccount: istio-ingress |
| 127 | namespace: istio-ingress |
| 128 | |
egernug | d3c55ab | 2023-01-19 15:50:37 +0000 | [diff] [blame] | 129 | nodeSelector: {} |
| 130 | |
| 131 | tolerations: [] |
| 132 | |
| 133 | affinity: {} |
| 134 | |
| 135 | #Pods Service Account |
| 136 | serviceAccount: |
| 137 | nameOverride: so-cnfm-lcm |
| 138 | roles: |
| 139 | - read |
| 140 | |