Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 1 | #============LICENSE_START======================================================== |
| 2 | # ================================================================================ |
| 3 | # Copyright (c) 2021 J. F. Lucas. All rights reserved. |
Kasperki | 5e1d978 | 2022-02-24 17:49:04 +0100 | [diff] [blame] | 4 | # Copyright (c) 2021-2022 Nokia. All rights reserved. |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 5 | # ================================================================================ |
| 6 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 7 | # you may not use this file except in compliance with the License. |
| 8 | # You may obtain a copy of the License at |
| 9 | # |
| 10 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 11 | # |
| 12 | # Unless required by applicable law or agreed to in writing, software |
| 13 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 14 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 15 | # See the License for the specific language governing permissions and |
| 16 | # limitations under the License. |
| 17 | # ============LICENSE_END========================================================= |
| 18 | |
| 19 | ################################################################# |
| 20 | # Global configuration defaults. |
| 21 | ################################################################# |
| 22 | global: |
| 23 | nodePortPrefix: 302 |
| 24 | nodePortPrefixExt: 304 |
Maciej Wereski | 7000a7c | 2021-12-16 12:24:06 +0100 | [diff] [blame] | 25 | centralizedLoggingEnabled: true |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 26 | |
| 27 | ################################################################# |
| 28 | # Filebeat configuration defaults. |
| 29 | ################################################################# |
| 30 | filebeatConfig: |
| 31 | logstashServiceName: log-ls |
| 32 | logstashPort: 5044 |
| 33 | |
| 34 | ################################################################# |
| 35 | # initContainer images. |
| 36 | ################################################################# |
| 37 | tlsImage: onap/org.onap.dcaegen2.deployments.tls-init-container:2.1.0 |
Jack Lucas | d263e69 | 2021-08-16 16:02:23 -0400 | [diff] [blame] | 38 | consulLoaderImage: onap/org.onap.dcaegen2.deployments.consul-loader-container:1.1.1 |
Tomasz Wrobel | 1c39a90 | 2022-01-12 10:49:51 +0100 | [diff] [blame] | 39 | certPostProcessorImage: onap/org.onap.oom.platform.cert-service.oom-certservice-post-processor:2.5.0 |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 40 | |
| 41 | ################################################################# |
| 42 | # Application configuration defaults. |
| 43 | ################################################################# |
| 44 | # application image |
Kasperki | 5e1d978 | 2022-02-24 17:49:04 +0100 | [diff] [blame] | 45 | image: onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.10.0 |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 46 | pullPolicy: Always |
| 47 | |
| 48 | # log directory where logging sidecar should look for log files |
Maciej Wereski | 7000a7c | 2021-12-16 12:24:06 +0100 | [diff] [blame] | 49 | # if path is set to null sidecar won't be deployed in spite of |
| 50 | # global.centralizedLoggingEnabled setting. |
| 51 | log: |
| 52 | path: /var/log/ONAP/dcae-hv-ves-collector |
| 53 | logConfigMapNamePrefix: '{{ include "common.fullname" . }}' |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 54 | |
| 55 | # directory where TLS certs should be stored |
| 56 | # if absent, no certs will be retrieved and stored |
| 57 | certDirectory: /etc/ves-hv/ssl |
| 58 | |
| 59 | # TLS role -- set to true if microservice acts as server |
| 60 | # If true, an init container will retrieve a server cert |
| 61 | # and key from AAF and mount them in certDirectory. |
| 62 | tlsServer: true |
| 63 | |
| 64 | secrets: |
| 65 | - uid: &aafCredsUID aafcreds |
| 66 | type: basicAuth |
| 67 | login: '{{ .Values.aafCreds.user }}' |
| 68 | password: '{{ .Values.aafCreds.password }}' |
| 69 | passwordPolicy: required |
| 70 | |
Remigiusz Janeczek | 9b00b56 | 2021-04-26 14:37:57 +0200 | [diff] [blame] | 71 | # CMPv2 certificate |
Remigiusz Janeczek | 7b09503 | 2021-05-20 19:39:44 +0200 | [diff] [blame] | 72 | # It is used only when: |
| 73 | # - certDirectory is set |
| 74 | # - global cmpv2Enabled flag is set to true |
Remigiusz Janeczek | 7b09503 | 2021-05-20 19:39:44 +0200 | [diff] [blame] | 75 | # - flag useCmpv2Certificates is set to true |
Piotr Marcinkiewicz | 7062518 | 2021-04-29 17:02:37 +0200 | [diff] [blame] | 76 | # Disabled by default |
Remigiusz Janeczek | 7b09503 | 2021-05-20 19:39:44 +0200 | [diff] [blame] | 77 | useCmpv2Certificates: false |
Remigiusz Janeczek | 9b00b56 | 2021-04-26 14:37:57 +0200 | [diff] [blame] | 78 | certificates: |
| 79 | - mountPath: /etc/ves-hv/ssl/external |
| 80 | commonName: dcae-hv-ves-collector |
| 81 | dnsNames: |
| 82 | - dcae-hv-ves-collector |
| 83 | - hv-ves-collector |
| 84 | - hv-ves |
| 85 | keystore: |
| 86 | outputType: |
| 87 | - jks |
| 88 | passwordSecretRef: |
| 89 | name: hv-ves-cmpv2-keystore-password |
| 90 | key: password |
| 91 | create: true |
| 92 | |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 93 | # dependencies |
| 94 | readinessCheck: |
| 95 | wait_for: |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 96 | - aaf-cm |
| 97 | |
| 98 | # probe configuration |
| 99 | readiness: |
| 100 | type: exec |
| 101 | initialDelaySeconds: 5 |
| 102 | periodSeconds: 15 |
| 103 | timeoutSeconds: 2 |
| 104 | command: |
| 105 | - /opt/ves-hv-collector/healthcheck.sh |
| 106 | |
| 107 | # service configuration |
| 108 | service: |
| 109 | type: NodePort |
| 110 | name: dcae-hv-ves-collector |
| 111 | ports: |
| 112 | - name: http |
| 113 | port: 6061 |
| 114 | port_protocol: http |
| 115 | nodePort: 22 |
| 116 | |
| 117 | aafCreds: |
| 118 | user: admin |
| 119 | password: admin_secret |
| 120 | |
| 121 | credentials: |
| 122 | - name: AAF_USER |
| 123 | uid: *aafCredsUID |
| 124 | key: login |
| 125 | - name: AAF_PASSWORD |
| 126 | uid: *aafCredsUID |
| 127 | key: password |
| 128 | |
| 129 | # initial application configuration |
| 130 | applicationConfig: |
| 131 | logLevel: INFO |
| 132 | server.idleTimeoutSec: 300 |
| 133 | server.listenPort: 6061 |
| 134 | cbs.requestIntervalSec: 5 |
| 135 | security.sslDisable: false |
| 136 | security.keys.keyStoreFile: /etc/ves-hv/ssl/cert.jks |
| 137 | security.keys.keyStorePasswordFile: /etc/ves-hv/ssl/jks.pass |
| 138 | security.keys.trustStoreFile: /etc/ves-hv/ssl/trust.jks |
| 139 | security.keys.trustStorePasswordFile: /etc/ves-hv/ssl/trust.pass |
| 140 | streams_publishes: |
Tomasz Pietruszkiewicz | 773c5cb | 2021-03-31 07:35:03 +0200 | [diff] [blame] | 141 | ves-3gpp-fault-supervision: |
| 142 | type: kafka |
| 143 | aaf_credentials: |
| 144 | username: ${AAF_USER} |
| 145 | password: ${AAF_PASSWORD} |
| 146 | kafka_info: |
| 147 | bootstrap_servers: message-router-kafka:9092 |
| 148 | topic_name: SEC_3GPP_FAULTSUPERVISION_OUTPUT |
| 149 | ves-3gpp-provisioning: |
| 150 | type: kafka |
| 151 | aaf_credentials: |
| 152 | username: ${AAF_USER} |
| 153 | password: ${AAF_PASSWORD} |
| 154 | kafka_info: |
| 155 | bootstrap_servers: message-router-kafka:9092 |
| 156 | topic_name: SEC_3GPP_PROVISIONING_OUTPUT |
| 157 | ves-3gpp-heartbeat: |
| 158 | type: kafka |
| 159 | aaf_credentials: |
| 160 | username: ${AAF_USER} |
| 161 | password: ${AAF_PASSWORD} |
| 162 | kafka_info: |
| 163 | bootstrap_servers: message-router-kafka:9092 |
| 164 | topic_name: SEC_3GPP_HEARTBEAT_OUTPUT |
| 165 | ves-3gpp-performance-assurance: |
| 166 | type: kafka |
| 167 | aaf_credentials: |
| 168 | username: ${AAF_USER} |
| 169 | password: ${AAF_PASSWORD} |
| 170 | kafka_info: |
| 171 | bootstrap_servers: message-router-kafka:9092 |
| 172 | topic_name: SEC_3GPP_PERFORMANCEASSURANCE_OUTPUT |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 173 | perf3gpp: |
| 174 | type: kafka |
| 175 | aaf_credentials: |
| 176 | username: ${AAF_USER} |
| 177 | password: ${AAF_PASSWORD} |
| 178 | kafka_info: |
| 179 | bootstrap_servers: message-router-kafka:9092 |
| 180 | topic_name: HV_VES_PERF3GPP |
| 181 | |
| 182 | applicationEnv: |
| 183 | JAVA_OPTS: '-Dlogback.configurationFile=/etc/ONAP/dcae-hv-ves-collector/logback.xml' |
Joanna Jeremicz | 616ea93 | 2021-09-06 14:25:04 +0200 | [diff] [blame] | 184 | CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml' |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 185 | |
| 186 | # Resource Limit flavor -By Default using small |
| 187 | flavor: small |
| 188 | # Segregation for Different environment (Small and Large) |
| 189 | resources: |
| 190 | small: |
| 191 | limits: |
| 192 | cpu: 2 |
| 193 | memory: 2Gi |
| 194 | requests: |
| 195 | cpu: 1 |
| 196 | memory: 1Gi |
| 197 | large: |
| 198 | limits: |
| 199 | cpu: 4 |
| 200 | memory: 4Gi |
| 201 | requests: |
| 202 | cpu: 2 |
| 203 | memory: 2Gi |
| 204 | unlimited: {} |
farida azmy | cb03ac7 | 2021-09-12 16:14:12 +0200 | [diff] [blame] | 205 | |
| 206 | #Pods Service Account |
| 207 | serviceAccount: |
| 208 | nameOverride: dcae-hv-ves-collector |
| 209 | roles: |
| 210 | - read |