vaibhav_16dec | e04b2fe | 2018-03-22 09:07:12 +0000 | [diff] [blame] | 1 | # Copyright © 2017 Amdocs, Bell Canada |
jhh | d425867 | 2020-08-09 12:08:08 -0500 | [diff] [blame] | 2 | # Modifications Copyright © 2018-2020 AT&T Intellectual Property |
jhh | d74fe9f | 2021-04-15 11:04:39 -0500 | [diff] [blame] | 3 | # Modifications Copyright (C) 2021 Nordix Foundation. |
vaibhav_16dec | e04b2fe | 2018-03-22 09:07:12 +0000 | [diff] [blame] | 4 | # |
| 5 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 6 | # you may not use this file except in compliance with the License. |
| 7 | # You may obtain a copy of the License at |
| 8 | # |
| 9 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 10 | # |
| 11 | # Unless required by applicable law or agreed to in writing, software |
| 12 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 13 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 14 | # See the License for the specific language governing permissions and |
| 15 | # limitations under the License. |
| 16 | |
mayankg2703 | ced8514 | 2018-03-20 05:42:53 +0000 | [diff] [blame] | 17 | ################################################################# |
| 18 | # Global configuration defaults. |
| 19 | ################################################################# |
| 20 | global: |
jhh | d425867 | 2020-08-09 12:08:08 -0500 | [diff] [blame] | 21 | aafEnabled: true |
Sylvain Desbureaux | 4898dc0 | 2019-11-14 13:35:13 +0100 | [diff] [blame] | 22 | mariadb: |
| 23 | # '&mariadbConfig' means we "store" the values for later use in the file |
| 24 | # with '*mariadbConfig' pointer. |
| 25 | config: &mariadbConfig |
Sylvain Desbureaux | 4898dc0 | 2019-11-14 13:35:13 +0100 | [diff] [blame] | 26 | mysqlDatabase: policyadmin |
| 27 | service: &mariadbService |
Sylvain Desbureaux | 93a5b49 | 2020-11-27 11:07:42 +0100 | [diff] [blame] | 28 | name: &policy-mariadb policy-mariadb |
Sylvain Desbureaux | 4898dc0 | 2019-11-14 13:35:13 +0100 | [diff] [blame] | 29 | internalPort: 3306 |
mayankg2703 | ced8514 | 2018-03-20 05:42:53 +0000 | [diff] [blame] | 30 | |
| 31 | ################################################################# |
Krzysztof Opasiak | 98a79cc | 2020-04-01 22:33:58 +0200 | [diff] [blame] | 32 | # Secrets metaconfig |
| 33 | ################################################################# |
| 34 | secrets: |
| 35 | - uid: db-root-password |
| 36 | name: &dbRootPassSecretName '{{ include "common.release" . }}-policy-db-root-password' |
| 37 | type: password |
Sylvain Desbureaux | 93a5b49 | 2020-11-27 11:07:42 +0100 | [diff] [blame] | 38 | externalSecret: '{{ ternary "" (tpl (default "" (index .Values "mariadb-galera" "rootUser" "externalSecret")) .) (hasSuffix "policy-db-root-password" (index .Values "mariadb-galera" "rootUser" "externalSecret"))}}' |
| 39 | password: '{{ (index .Values "mariadb-galera" "rootUser" "password") }}' |
Krzysztof Opasiak | 98a79cc | 2020-04-01 22:33:58 +0200 | [diff] [blame] | 40 | policy: generate |
| 41 | - uid: db-secret |
| 42 | name: &dbSecretName '{{ include "common.release" . }}-policy-db-secret' |
| 43 | type: basicAuth |
Sylvain Desbureaux | 93a5b49 | 2020-11-27 11:07:42 +0100 | [diff] [blame] | 44 | externalSecret: '{{ ternary "" (tpl (default "" (index .Values "mariadb-galera" "db" "externalSecret")) .) (hasSuffix "policy-db-secret" (index .Values "mariadb-galera" "db" "externalSecret"))}}' |
| 45 | login: '{{ index .Values "mariadb-galera" "db" "user" }}' |
| 46 | password: '{{ index .Values "mariadb-galera" "db" "password" }}' |
Krzysztof Opasiak | 98a79cc | 2020-04-01 22:33:58 +0200 | [diff] [blame] | 47 | passwordPolicy: generate |
| 48 | |
jhh | d425867 | 2020-08-09 12:08:08 -0500 | [diff] [blame] | 49 | db: &dbSecretsHook |
| 50 | credsExternalSecret: *dbSecretName |
| 51 | |
| 52 | policy-api: |
| 53 | enabled: true |
| 54 | db: *dbSecretsHook |
| 55 | policy-pap: |
| 56 | enabled: true |
| 57 | db: *dbSecretsHook |
| 58 | policy-xacml-pdp: |
| 59 | enabled: true |
| 60 | db: *dbSecretsHook |
| 61 | policy-apex-pdp: |
| 62 | enabled: true |
| 63 | db: *dbSecretsHook |
| 64 | policy-drools-pdp: |
| 65 | enabled: true |
| 66 | db: *dbSecretsHook |
| 67 | policy-distribution: |
| 68 | enabled: true |
| 69 | db: *dbSecretsHook |
sebdet | 5c44988 | 2021-01-13 11:35:56 +0100 | [diff] [blame] | 70 | policy-clamp-be: |
| 71 | enabled: true |
| 72 | db: *dbSecretsHook |
| 73 | policy-clamp-fe: |
| 74 | enabled: true |
rameshiyer27 | 01b8cc0 | 2021-09-21 15:07:50 +0100 | [diff] [blame] | 75 | policy-clamp-cl-k8s-ppnt: |
| 76 | enabled: true |
jhh | d425867 | 2020-08-09 12:08:08 -0500 | [diff] [blame] | 77 | policy-nexus: |
jhh | bf8d8a9 | 2020-09-10 14:01:49 -0500 | [diff] [blame] | 78 | enabled: false |
ktimoney | b3aef7b | 2021-09-13 08:27:58 +0100 | [diff] [blame^] | 79 | policy-gui: |
| 80 | enabled: true |
jhh | d425867 | 2020-08-09 12:08:08 -0500 | [diff] [blame] | 81 | |
Krzysztof Opasiak | 98a79cc | 2020-04-01 22:33:58 +0200 | [diff] [blame] | 82 | ################################################################# |
jhh | d425867 | 2020-08-09 12:08:08 -0500 | [diff] [blame] | 83 | # DB configuration defaults. |
mayankg2703 | ced8514 | 2018-03-20 05:42:53 +0000 | [diff] [blame] | 84 | ################################################################# |
jhh | d425867 | 2020-08-09 12:08:08 -0500 | [diff] [blame] | 85 | |
mayankg2703 | ced8514 | 2018-03-20 05:42:53 +0000 | [diff] [blame] | 86 | repository: nexus3.onap.org:10001 |
kerenj | 3b697f6 | 2017-08-23 11:21:21 +0000 | [diff] [blame] | 87 | pullPolicy: Always |
Alexis de Talhouët | df4db0b | 2017-12-11 08:36:25 -0500 | [diff] [blame] | 88 | |
Sylvain Desbureaux | 7c8c686 | 2020-11-19 18:02:37 +0100 | [diff] [blame] | 89 | mariadb: |
| 90 | image: mariadb:10.5.8 |
| 91 | |
jhh | d74fe9f | 2021-04-15 11:04:39 -0500 | [diff] [blame] | 92 | dbmigrator: |
| 93 | image: onap/policy-db-migrator:2.3.0 |
| 94 | schema: policyadmin |
| 95 | policy_home: "/opt/app/policy" |
| 96 | |
mayankg2703 | ced8514 | 2018-03-20 05:42:53 +0000 | [diff] [blame] | 97 | subChartsOnly: |
| 98 | enabled: true |
BorislavG | 5f3b619 | 2018-03-25 18:12:38 +0300 | [diff] [blame] | 99 | |
mayankg2703 | ced8514 | 2018-03-20 05:42:53 +0000 | [diff] [blame] | 100 | # flag to enable debugging - application support required |
| 101 | debugEnabled: false |
| 102 | |
mayankg2703 | ced8514 | 2018-03-20 05:42:53 +0000 | [diff] [blame] | 103 | # default number of instances |
| 104 | replicaCount: 1 |
| 105 | |
| 106 | nodeSelector: {} |
| 107 | |
| 108 | affinity: {} |
| 109 | |
| 110 | # probe configuration parameters |
| 111 | liveness: |
| 112 | initialDelaySeconds: 10 |
| 113 | periodSeconds: 10 |
| 114 | # necessary to disable liveness probe when setting breakpoints |
| 115 | # in debugger so K8s doesn't restart unresponsive container |
| 116 | enabled: true |
| 117 | |
| 118 | readiness: |
| 119 | initialDelaySeconds: 10 |
| 120 | periodSeconds: 10 |
| 121 | |
Sylvain Desbureaux | 4898dc0 | 2019-11-14 13:35:13 +0100 | [diff] [blame] | 122 | mariadb-galera: |
| 123 | # mariadb-galera.config and global.mariadb.config must be equals |
Sylvain Desbureaux | 93a5b49 | 2020-11-27 11:07:42 +0100 | [diff] [blame] | 124 | db: |
| 125 | user: policy_user |
| 126 | # password: |
| 127 | externalSecret: *dbSecretName |
| 128 | name: &mysqlDbName policyadmin |
| 129 | rootUser: |
| 130 | externalSecret: *dbRootPassSecretName |
| 131 | nameOverride: *policy-mariadb |
Sylvain Desbureaux | 4898dc0 | 2019-11-14 13:35:13 +0100 | [diff] [blame] | 132 | # mariadb-galera.service and global.mariadb.service must be equals |
| 133 | service: *mariadbService |
| 134 | replicaCount: 1 |
| 135 | persistence: |
| 136 | enabled: true |
| 137 | mountSubPath: policy/maria/data |
Sylvain Desbureaux | 93a5b49 | 2020-11-27 11:07:42 +0100 | [diff] [blame] | 138 | serviceAccount: |
| 139 | nameOverride: *policy-mariadb |
Sylvain Desbureaux | 4898dc0 | 2019-11-14 13:35:13 +0100 | [diff] [blame] | 140 | |
jhh | bf8d8a9 | 2020-09-10 14:01:49 -0500 | [diff] [blame] | 141 | # Resource Limit flavor -By Default using small |
| 142 | # Segregation for Different environment (small, large, or unlimited) |
| 143 | flavor: small |
| 144 | resources: |
| 145 | small: |
| 146 | limits: |
| 147 | cpu: 1 |
| 148 | memory: 4Gi |
| 149 | requests: |
| 150 | cpu: 100m |
| 151 | memory: 1Gi |
| 152 | large: |
| 153 | limits: |
| 154 | cpu: 2 |
| 155 | memory: 8Gi |
| 156 | requests: |
| 157 | cpu: 200m |
| 158 | memory: 2Gi |
| 159 | unlimited: {} |
| 160 | |
farida azmy | c117837 | 2021-04-11 12:55:33 +0200 | [diff] [blame] | 161 | #Pods Service Account |
| 162 | serviceAccount: |
| 163 | nameOverride: policy |
| 164 | roles: |
| 165 | - read |