blob: 27d30e0aaf8b480d192100117fcebe0422e64cfc [file] [log] [blame]
Chenfei Gao9292e882019-02-27 22:14:45 -05001# ============LICENSE_START=======================================================
jhh999c2242021-02-24 12:10:02 -06002# Copyright (C) 2019-2021 AT&T Intellectual Property. All rights reserved.
a.sreekumar2f377362022-02-09 12:40:57 +00003# Modifications Copyright (C) 2022 Bell Canada. All rights reserved.
Andreas Geisslerf10c5552023-03-21 18:09:46 +01004# Modification (C) 2023 Deutsche Telekom. All rights reserved.
Chenfei Gao9292e882019-02-27 22:14:45 -05005# ================================================================================
6# Licensed under the Apache License, Version 2.0 (the "License");
7# you may not use this file except in compliance with the License.
8# You may obtain a copy of the License at
9#
10# http://www.apache.org/licenses/LICENSE-2.0
11#
12# Unless required by applicable law or agreed to in writing, software
13# distributed under the License is distributed on an "AS IS" BASIS,
14# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15# See the License for the specific language governing permissions and
16# limitations under the License.
17#
18# SPDX-License-Identifier: Apache-2.0
19# ============LICENSE_END=========================================================
20
21#################################################################
22# Global configuration defaults.
23#################################################################
24global:
25 nodePortPrefix: 304
26 persistence: {}
saul.gillef208b02023-04-26 16:16:05 +010027 postgres:
28 localCluster: false
Krzysztof Opasiak09d1b312020-03-31 23:44:22 +020029
30#################################################################
31# Secrets metaconfig
32#################################################################
33secrets:
Dominik Mizyn11038102020-04-14 17:14:42 +020034 - uid: db-creds
Krzysztof Opasiak09d1b312020-03-31 23:44:22 +020035 type: basicAuth
36 externalSecret: '{{ tpl (default "" .Values.db.credsExternalSecret) . }}'
37 login: '{{ .Values.db.user }}'
38 password: '{{ .Values.db.password }}'
39 passwordPolicy: required
Dominik Mizyn11038102020-04-14 17:14:42 +020040 - uid: restserver-creds
41 type: basicAuth
rameshiyer27ff176652021-09-21 15:19:05 +010042 externalSecret: '{{ tpl (default "" .Values.restServer.apiUserExternalSecret) . }}'
Dominik Mizyn11038102020-04-14 17:14:42 +020043 login: '{{ .Values.restServer.user }}'
44 password: '{{ .Values.restServer.password }}'
45 passwordPolicy: required
Chenfei Gao9292e882019-02-27 22:14:45 -050046
47#################################################################
48# Application configuration defaults.
49#################################################################
50# application image
saul.gillef208b02023-04-26 16:16:05 +010051image: onap/policy-api:2.8.2
Chenfei Gao9292e882019-02-27 22:14:45 -050052pullPolicy: Always
53
54# flag to enable debugging - application support required
55debugEnabled: false
56
57# application configuration
Krzysztof Opasiak09d1b312020-03-31 23:44:22 +020058db:
Andreas Geisslercfd84342023-08-16 17:18:49 +020059 user: policy-user
Krzysztof Opasiak09d1b312020-03-31 23:44:22 +020060 password: policy_user
jhhd4258672020-08-09 12:08:08 -050061 service:
62 name: policy-mariadb
saul.gillef208b02023-04-26 16:16:05 +010063 pgName: policy-pg-primary
jhhd4258672020-08-09 12:08:08 -050064 internalPort: 3306
saul.gillef208b02023-04-26 16:16:05 +010065 internalPgPort: 5432
jhhd4258672020-08-09 12:08:08 -050066
Dominik Mizyn11038102020-04-14 17:14:42 +020067restServer:
adheli.tavaresf3656cd2021-11-10 14:54:32 +000068 user: policyadmin
a.sreekumar2f377362022-02-09 12:40:57 +000069 password: zb!XztG34
Chenfei Gao9292e882019-02-27 22:14:45 -050070
71# default number of instances
72replicaCount: 1
73
74nodeSelector: {}
75
76affinity: {}
77
78# probe configuration parameters
79liveness:
a.sreekumar2f377362022-02-09 12:40:57 +000080 initialDelaySeconds: 60
Chenfei Gao9292e882019-02-27 22:14:45 -050081 periodSeconds: 10
82 # necessary to disable liveness probe when setting breakpoints
83 # in debugger so K8s doesn't restart unresponsive container
84 enabled: true
85
86readiness:
a.sreekumar2f377362022-02-09 12:40:57 +000087 initialDelaySeconds: 10
88 periodSeconds: 120
89 api: /policy/api/v1/healthcheck
a.sreekumar2f377362022-02-09 12:40:57 +000090 successThreshold: 1
91 failureThreshold: 3
92 timeout: 60
Chenfei Gao9292e882019-02-27 22:14:45 -050093
94service:
jhh59ce22d2019-05-14 17:59:36 -050095 type: ClusterIP
Chenfei Gao9292e882019-02-27 22:14:45 -050096 name: policy-api
Chenfei Gao9292e882019-02-27 22:14:45 -050097 internalPort: 6969
Andreas Geisslerf10c5552023-03-21 18:09:46 +010098 ports:
99 - name: http
100 port: 6969
101
Chenfei Gao9292e882019-02-27 22:14:45 -0500102ingress:
103 enabled: false
104
AndrewLamb7ef78ae2023-04-20 16:24:13 +0100105serviceMesh:
106 authorizationPolicy:
107 authorizedPrincipals:
108 - serviceAccount: policy-pap-read
109
jhhd4258672020-08-09 12:08:08 -0500110flavor: small
111resources:
112 small:
113 limits:
Andreas Geissler555db9c2023-06-20 11:38:39 +0200114 cpu: 999
115 memory: 1Gi
jhhd4258672020-08-09 12:08:08 -0500116 requests:
Andreas Geissler555db9c2023-06-20 11:38:39 +0200117 cpu: 0.5
jhhd4258672020-08-09 12:08:08 -0500118 memory: 1Gi
119 large:
120 limits:
Andreas Geissler555db9c2023-06-20 11:38:39 +0200121 cpu: 999
122 memory: 2Gi
jhhd4258672020-08-09 12:08:08 -0500123 requests:
Andreas Geissler555db9c2023-06-20 11:38:39 +0200124 cpu: 1
jhhd4258672020-08-09 12:08:08 -0500125 memory: 2Gi
126 unlimited: {}
farida azmyc1178372021-04-11 12:55:33 +0200127
128#Pods Service Account
129serviceAccount:
130 nameOverride: policy-api
131 roles:
132 - read
Rashmi Pujara8b09262022-03-15 21:58:57 -0400133
Rashmi Pujara8b09262022-03-15 21:58:57 -0400134metrics:
135 serviceMonitor:
136 # Override the labels based on the Prometheus config parameter: serviceMonitorSelector.
137 # The default operator for prometheus enforces the below label.
138 labels:
139 release: prometheus
140 enabled: true
141 port: policy-api
142 interval: 60s
Andreas Geisslerf10c5552023-03-21 18:09:46 +0100143 isHttps: false
Rashmi Pujara8b09262022-03-15 21:58:57 -0400144 basicAuth:
145 enabled: true
146 externalSecretNameSuffix: policy-api-user-creds
147 externalSecretUserKey: login
148 externalSecretPasswordKey: password
149 selector:
150 app: '{{ include "common.name" . }}'
151 chart: '{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}'
152 release: '{{ include "common.release" . }}'
153 heritage: '{{ .Release.Service }}'