blob: 9e2b65615034ef45fe2f52ff70bce0521f2fe570 [file] [log] [blame]
GuangrongFucc1316b2021-02-03 17:29:08 +08001#============LICENSE_START========================================================
2# ================================================================================
3# Copyright (c) 2021 ZTE Corporation Intellectual Property. All rights reserved.
4# ================================================================================
5# Licensed under the Apache License, Version 2.0 (the "License");
6# you may not use this file except in compliance with the License.
7# You may obtain a copy of the License at
8#
9# http://www.apache.org/licenses/LICENSE-2.0
10#
11# Unless required by applicable law or agreed to in writing, software
12# distributed under the License is distributed on an "AS IS" BASIS,
13# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14# See the License for the specific language governing permissions and
15# limitations under the License.
16# ============LICENSE_END=========================================================
17
18#################################################################
19# Global configuration.
20#################################################################
21global:
22 nodePortPrefixExt: 302
23
24#################################################################
25# Application configuration defaults.
26#################################################################
27# application image
GuangrongFu7cf6d982021-04-07 14:07:38 +080028image: onap/holmes/rule-management:1.3.3
GuangrongFucc1316b2021-02-03 17:29:08 +080029consulLoaderImage: onap/org.onap.dcaegen2.deployments.consul-loader-container:1.0.0
30
31#################################################################
32# AAF part
33#################################################################
34certInitializer:
35 nameOverride: holmes-rule-mgmt-cert-initializer
36 aafDeployFqi: deployer@people.osaaf.org
37 aafDeployPass: demo123456!
38 # aafDeployCredsExternalSecret: some secret
39 fqdn: holmes-rule-mgmt
40 fqi: holmes-rule-mgmt@holmes-rule-mgmt.onap.org
41 fqi_namespace: org.onap.holmes-rule-mgmt
42 public_fqdn: holmes-rule-mgmt.onap.org
43 cadi_longitude: "0.0"
44 cadi_latitude: "0.0"
45 app_ns: org.osaaf.aaf
46 credsPath: /opt/app/osaaf/local
47 aaf_add_config: |
48 echo "*** changing them into shell safe ones"
49 export KEYSTORE_PASSWORD=$(tr -cd '[:alnum:]' < /dev/urandom | fold -w64 | head -n1)
50 export TRUSTSORE_PASSWORD=$(tr -cd '[:alnum:]' < /dev/urandom | fold -w64 | head -n1)
51 cd {{ .Values.credsPath }}
52 keytool -storepasswd -new "${KEYSTORE_PASSWORD}" \
53 -storepass "${cadi_keystore_password_p12}" \
54 -keystore {{ .Values.fqi_namespace }}.p12
55 keytool -storepasswd -new "${TRUSTSORE_PASSWORD}" \
56 -storepass "${cadi_truststore_password}" \
57 -keystore {{ .Values.fqi_namespace }}.trust.jks
GuangrongFucc1316b2021-02-03 17:29:08 +080058 echo "*** save the generated passwords"
59 echo "KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD}" > mycreds.prop
60 echo "TRUSTSORE_PASSWORD=${TRUSTSORE_PASSWORD}" >> mycreds.prop
61 echo "*** change ownership of certificates to targeted user"
62 chown -R 1000 .
63
64#################################################################
65# Secrets metaconfig
66#################################################################
67secrets:
68- uid: pg-user-creds
69 type: basicAuth
70 externalSecret: '{{ tpl (default "" .Values.config.pgConfig.dbUserCredsExternalSecret) . }}'
71 login: '{{ .Values.config.pgConfig.dbUser }}'
72 password: '{{ .Values.config.pgConfig.dbUserPassword }}'
73
74# application configuration
75config:
76 logstashServiceName: log-ls
77 logstashPort: 5044
78 # Addresses of other ONAP entities
79 address:
80 consul:
81 host: consul-server
82 port: 8500
83 pgConfig:
84 dbName: defaultName
85 dbHost: defaultHost
86 dbPort: 1234
87 dbUser: admin
88 dbUserPassword: admin
89 # dbUserCredsExternalSecret
90
91service:
92 type: NodePort
93 name: holmes-rule-mgmt
94 ports:
95 - name: https-rest
96 port: &svc_port 9101
97 nodePort: 92
98 - name: https-ui
99 port: 9104
100 nodePort: 93
101
102# probe configuration parameters
103liveness:
104 initialDelaySeconds: 10
105 port: *svc_port
106 periodSeconds: 10
107 path: /api/holmes-rule-mgmt/v1/healthcheck
108 enabled: true
109 scheme: HTTPS
110
111readiness:
112 initialDelaySeconds: 30
113 port: *svc_port
114 periodSeconds: 30
115 path: /api/holmes-rule-mgmt/v1/healthcheck
116 scheme: HTTPS
117
118# Segregation for Different environment (Small and Large)
119resources:
120 small:
121 limits:
122 cpu: 250m
123 memory: 256Mi
124 requests:
125 cpu: 250m
126 memory: 1024Mi
127 large:
128 limits:
129 cpu: 500m
130 memory: 512Mi
131 requests:
132 cpu: 500m
133 memory: 2Gi
134 unlimited: {}