kubernetes/dmaap/components/dmaap-bc/resources/config/dmaapbc.properties

# Copyright © 2018  AT&T, Amdocs, Bell Canada Intellectual Property.  All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

#####################################################
#
# ONAP Casablanca oom configurable deployment params:
#
#####################################################


#####################################################
#
# Hooks for specific environment configurations
#
#####################################################
# Indicator for whether to use AAF
UseAAF: {{ .Values.global.aafEnabled }}

# csit: stubs out some southbound APIs for csit
csit: No

# name of this DMaaP instance (deprecated)
#DmaapName: demo

#####################################################
#
# Settings for Southbound API: Datarouter
#
#####################################################
# FQDN of DR Prov Server (deprecated)
#DR.provhost: dcae-drps.domain.not.set

# URI to retrieve dynamic DR configuration
ProvisioningURI:  /internal/prov

# indicator for handling feed delete:
#  DeleteOnDR - means use the DR API to DELETE a feed.  (default for backwards compatibility)
#  SimulateDelete - means preserve the feed on DR (after cleaning it up), and mark as DELETED in DBCL.  Better for cfy environments.
Feed.deleteHandling: SimulateDelete

#####################################################
#
# Settings for Soutbound API: Postgresql
#
#####################################################
# flag indicates if we are using postgresql
UsePGSQL: {{ .Values.PG.enabled  }}

# postgres host name
# Need to connect to PG primary service, designated by service.name2
DB.host: {{ .Values.postgres.service.name2 }}

# postgres schema name
#DB.schema: {{ .Values.postgres.config.pgDatabase }}

# postgres user name
#DB.user: {{ .Values.postgres.config.pgUserName }}

# postgres user password
DB.cred:  {{ .Values.postgres.config.pgUserPassword }}


#####################################################
#
# Settings for Soutbound API: Message Router
#
#####################################################
# indicator for multi-site (locations) deployment.  Give clue to buscontroller whether
# there is a need for message replication between edge and central.
# ONAP Casablanca is a single site deployment
MR.multisite: false

# FQDN of primary message router.
# In ONAP Casablanca, there is only 1 message router service, so use that.
# In a multi-site, MR cluster deployment, use the CNAME DNS entry which resolves to the primary central MR
MR.CentralCname: {{ .Values.dmaapMessageRouterService }}

# MR Client Delete Level thoroughness:
#  0 = don't delete
#  1 = delete from persistent store
#  2 = delete from persistent store (DB) and authorization store (AAF)
MR.ClientDeleteLevel: 1

# namespace of MR Topic Factory
MR.TopicFactoryNS: org.onap.dmaap.mr.topicFactory

# AAF Role assigned to Topic Manager Identity
MR.TopicMgrRole: org.onap.dmaap-bc-topic-mgr.client

# MR topic ProjectID (used in certain topic name generation formats)
MR.projectID:  mr

# Use Basic Authentication when provisioning topics
MR.authentication: basicAuth


#####################################################
#
# Settings for Southbound API: CADI
#
#####################################################
# path to cadi.properties
cadi.properties: /opt/app/osaaf/local/org.onap.dmaap-bc.props

#####################################################
#
# Settings for Southbound API: AAF proxy
#
#####################################################
# URL of the AAF server
aaf.URL: {{ .Values.aafURL }}

# TopicMgr Identity
aaf.TopicMgrUser: {{ .Values.topicMgrUser }}

# Password for TopicMgr identity
aaf.TopicMgrPassword: {{ .Values.topicMgrPwd }}

# Buscontroller Admin Identity
aaf.AdminUser: {{ .Values.adminUser }}

# Admin Password
aaf.AdminPassword: {{ .Values.adminPwd }}

# Identity that is owner of any created namespaces for topics
aaf.NsOwnerIdentity: {{ .Values.adminUser }}

# location of the codec keyfile used to decrypt passwords in this properties file before they are passed to AAF
CredentialCodeKeyfile: etc/LocalKey

# this overrides the Class used for Decryption.
# This allows for a plugin encryption/decryption method if needed.
# Call this Class for decryption at runtime.
#AafDecryption.Class: com.company.proprietaryDecryptor


#####################################################
#
# Settings for authorization of DBCAPI
#
#####################################################
# Namespace for URI values for the API used to create AAF permissions
# e.g. if ApiNamespace is X.Y.dmaapbc.api then for URI /mr_clients we create AAF perm X.Y.dmaapbc.api.mr_clients
ApiNamespace: org.onap.dmaap-bc.api

# If API authorization is required, then implement a class to enforce it.
# This overrides the Class used for API permission check.
ApiPermission.Class: org.onap.dmaap.dbcapi.authentication.AllowAll

#####################################################
#
# Settings for Southbound API: MirrorMaker provisioning
#
#####################################################
# AAF Role of client publishing MM prov cmds
MM.ProvRole: org.onap.dmaap-bc-mm-prov.prov

# AAF identity when publishing MM prov cmds
MM.ProvUserMechId: dmaap-bc-mm-prov@dmaap-bc-mm-prov.onap.org

# pwd for Identity used to publish MM prov cmds
MM.ProvUserPwd: demo123456!

# AAF Role of MirrorMaker agent subscribed to prov cmds
MM.AgentRole: org.onal.dmaap-bc-mm-prov.agent

#####################################################
#
# HTTP Server Configuration
#
#####################################################

# Allow http access to dbcapi
HttpAllowed: true

# listen to http port within this container (server)
IntHttpPort: 8080

# listen to https port within this container (server)
# set to 0 if no certificates are available.
IntHttpsPort: 8443

# external port number for https taking port mapping into account
ExtHttpsPort: 443

# the type of keystore for https
KeyStoreType: jks

# path to the keystore file
KeyStoreFile: etc/keystore

# password for the https keystore
KeyStorePassword:  Y@Y5f&gm?PAz,CVQL,lk[VAF
# password for the private key in the https keystore
KeyPassword: Y@Y5f&gm?PAz,CVQL,lk[VAF

# type of truststore for https
TrustStoreType: jks

# path to the truststore for https
TrustStoreFile: etc/org.onap.dmaap-bc.trust.jks

# password for the https truststore
TrustStorePassword: 8b&R5%l$l:@jSWz@FCs;rhY*

# path to the file used to trigger an orderly shutdown
QuiesceFile: etc/SHUTDOWN

inHttpsPort: 0