Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 1 | #============LICENSE_START======================================================== |
| 2 | # ================================================================================ |
| 3 | # Copyright (c) 2021 J. F. Lucas. All rights reserved. |
| 4 | # ================================================================================ |
| 5 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 6 | # you may not use this file except in compliance with the License. |
| 7 | # You may obtain a copy of the License at |
| 8 | # |
| 9 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 10 | # |
| 11 | # Unless required by applicable law or agreed to in writing, software |
| 12 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 13 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 14 | # See the License for the specific language governing permissions and |
| 15 | # limitations under the License. |
| 16 | # ============LICENSE_END========================================================= |
| 17 | |
| 18 | ################################################################# |
| 19 | # Global configuration defaults. |
| 20 | ################################################################# |
| 21 | global: |
| 22 | nodePortPrefix: 302 |
| 23 | nodePortPrefixExt: 304 |
Maciej Wereski | 7000a7c | 2021-12-16 12:24:06 +0100 | [diff] [blame] | 24 | centralizedLoggingEnabled: true |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 25 | |
| 26 | ################################################################# |
| 27 | # Filebeat configuration defaults. |
| 28 | ################################################################# |
| 29 | filebeatConfig: |
| 30 | logstashServiceName: log-ls |
| 31 | logstashPort: 5044 |
| 32 | |
| 33 | ################################################################# |
| 34 | # initContainer images. |
| 35 | ################################################################# |
| 36 | tlsImage: onap/org.onap.dcaegen2.deployments.tls-init-container:2.1.0 |
Jack Lucas | d263e69 | 2021-08-16 16:02:23 -0400 | [diff] [blame] | 37 | consulLoaderImage: onap/org.onap.dcaegen2.deployments.consul-loader-container:1.1.1 |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 38 | |
| 39 | ################################################################# |
| 40 | # Application configuration defaults. |
| 41 | ################################################################# |
| 42 | # application image |
Remigiusz Janeczek | 92231d4 | 2021-08-27 16:41:56 +0200 | [diff] [blame] | 43 | image: onap/org.onap.dcaegen2.services.prh.prh-app-server:1.7.1 |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 44 | pullPolicy: Always |
| 45 | |
| 46 | # log directory where logging sidecar should look for log files |
Maciej Wereski | 7000a7c | 2021-12-16 12:24:06 +0100 | [diff] [blame] | 47 | # if path is set to null sidecar won't be deployed in spite of |
| 48 | # global.centralizedLoggingEnabled setting. |
| 49 | log: |
| 50 | path: /opt/app/prh/logs |
| 51 | logConfigMapNamePrefix: '{{ include "common.fullname" . }}' |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 52 | |
| 53 | # directory where TLS certs should be stored |
| 54 | # if absent, no certs will be retrieved and stored |
| 55 | certDirectory: /opt/app/prh/etc/cert |
| 56 | |
| 57 | # TLS role -- set to true if microservice acts as server |
| 58 | # If true, an init container will retrieve a server cert |
| 59 | # and key from AAF and mount them in certDirectory. |
| 60 | tlsServer: true |
| 61 | |
| 62 | secrets: |
| 63 | - uid: &aaiCredsUID aaicreds |
| 64 | type: basicAuth |
| 65 | login: '{{ .Values.aaiCreds.user }}' |
| 66 | password: '{{ .Values.aaiCreds.password }}' |
| 67 | passwordPolicy: required |
| 68 | |
| 69 | # dependencies |
| 70 | readinessCheck: |
| 71 | wait_for: |
| 72 | - dcae-config-binding-service |
| 73 | - aaf-cm |
| 74 | |
| 75 | # probe configuration |
| 76 | readiness: |
| 77 | initialDelaySeconds: 5 |
| 78 | periodSeconds: 15 |
| 79 | path: /heartbeat |
| 80 | scheme: HTTP |
| 81 | port: 8100 |
| 82 | |
| 83 | # service configuration |
| 84 | service: |
| 85 | type: ClusterIP |
| 86 | name: dcae-prh |
| 87 | ports: |
| 88 | - port: 8100 |
| 89 | name: http |
| 90 | |
| 91 | aaiCreds: |
| 92 | user: AAI |
| 93 | password: AAI |
| 94 | |
| 95 | credentials: |
| 96 | - name: AAI_USER |
| 97 | uid: *aaiCredsUID |
| 98 | key: login |
| 99 | - name: AAI_PASSWORD |
| 100 | uid: *aaiCredsUID |
| 101 | key: password |
| 102 | |
| 103 | customEnvVars: |
| 104 | - name: AUTH_HDR |
| 105 | value: "Basic `echo -n ${AAI_USER}:${AAI_PASSWORD} | base64`" |
| 106 | |
| 107 | # initial application configuration |
| 108 | applicationConfig: |
| 109 | dmaap.dmaapConsumerConfiguration.dmaapContentType: "application/json" |
| 110 | dmaap.dmaapConsumerConfiguration.consumerId: "c12" |
| 111 | dmaap.dmaapConsumerConfiguration.consumerGroup: "OpenDCAE-c12" |
| 112 | dmaap.dmaapConsumerConfiguration.timeoutMs: -1 |
| 113 | dmaap.dmaapProducerConfiguration.dmaapContentType: "application/json" |
| 114 | dmaap.dmaapUpdateProducerConfiguration.dmaapContentType: "application/json" |
Remigiusz Janeczek | 3b9d886 | 2021-08-10 13:14:14 +0200 | [diff] [blame] | 115 | aai.aaiClientConfiguration.pnfUrl: https://aai.onap.svc.cluster.local:8443/aai/v23/network/pnfs/pnf |
| 116 | aai.aaiClientConfiguration.baseUrl: https://aai.onap.svc.cluster.local:8443/aai/v23 |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 117 | aai.aaiClientConfiguration.aaiHost: aai.onap.svc.cluster.local |
| 118 | aai.aaiClientConfiguration.aaiHostPortNumber: 8443 |
| 119 | aai.aaiClientConfiguration.aaiProtocol: "https" |
| 120 | aai.aaiClientConfiguration.aaiUserName: ${AAI_USER} |
| 121 | aai.aaiClientConfiguration.aaiUserPassword: ${AAI_PASSWORD} |
| 122 | aai.aaiClientConfiguration.aaiIgnoreSslCertificateErrors: true |
Remigiusz Janeczek | 3b9d886 | 2021-08-10 13:14:14 +0200 | [diff] [blame] | 123 | aai.aaiClientConfiguration.aaiBasePath: "/aai/v23" |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 124 | aai.aaiClientConfiguration.aaiPnfPath: "/network/pnfs/pnf" |
Tomasz Wrobel | 57a143b | 2021-08-11 11:55:41 +0200 | [diff] [blame] | 125 | aai.aaiClientConfiguration.aaiServiceInstancePath: "/business/customers/customer/{{customer}}/service-subscriptions/service-subscription/{{serviceType}}/service-instances/service-instance/{{serviceInstanceId}}" |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 126 | aai.aaiClientConfiguration.aaiHeaders: |
| 127 | X-FromAppId: "prh" |
| 128 | X-TransactionId: "9999" |
| 129 | Accept: "application/json" |
| 130 | Real-Time: "true" |
| 131 | Authorization: $AUTH_HDR |
| 132 | security.trustStorePath: "/opt/app/prh/etc/cert/trust.jks" |
| 133 | security.trustStorePasswordPath: "/opt/app/prh/etc/cert/trust.pass" |
| 134 | security.keyStorePath: "/opt/app/prh/etc/cert/cert.jks" |
| 135 | security.keyStorePasswordPath: "/opt/app/prh/etc/cert/jks.pass" |
| 136 | security.enableAaiCertAuth: false |
| 137 | security.enableDmaapCertAuth: false |
| 138 | streams_publishes: |
| 139 | pnf-update: |
| 140 | type: "message_router" |
| 141 | dmaap_info: |
| 142 | topic_url: http://message-router.onap.svc.cluster.local:3904/events/unauthenticated.PNF_UPDATE |
| 143 | pnf-ready: |
| 144 | type: "message_router" |
| 145 | dmaap_info: |
| 146 | topic_url: http://message-router.onap.svc.cluster.local:3904/events/unauthenticated.PNF_READY |
| 147 | streams_subscribes: |
| 148 | ves-reg-output: |
| 149 | type: "message_router" |
| 150 | dmaap_info: |
| 151 | topic_url: http://message-router.onap.svc.cluster.local:3904/events/unauthenticated.VES_PNFREG_OUTPUT |
| 152 | |
Remigiusz Janeczek | 92231d4 | 2021-08-27 16:41:56 +0200 | [diff] [blame] | 153 | applicationEnv: |
| 154 | CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml' |
| 155 | |
Jack Lucas | d41dbdb | 2021-02-16 11:07:28 -0500 | [diff] [blame] | 156 | # Resource Limit flavor -By Default using small |
| 157 | flavor: small |
| 158 | # Segregation for Different environment (Small and Large) |
| 159 | resources: |
| 160 | small: |
| 161 | limits: |
| 162 | cpu: 2 |
| 163 | memory: 2Gi |
| 164 | requests: |
| 165 | cpu: 1 |
| 166 | memory: 1Gi |
| 167 | large: |
| 168 | limits: |
| 169 | cpu: 4 |
| 170 | memory: 4Gi |
| 171 | requests: |
| 172 | cpu: 2 |
| 173 | memory: 2Gi |
| 174 | unlimited: {} |
farida azmy | cb03ac7 | 2021-09-12 16:14:12 +0200 | [diff] [blame] | 175 | |
| 176 | #Pods Service Account |
| 177 | serviceAccount: |
| 178 | nameOverride: dcae-prh |
| 179 | roles: |
| 180 | - read |