# Copyright © 2018 AT&T USA # Copyright © 2020 Huawei # Copyright © 2021 Orange # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. ################################################################# # Global configuration defaults. ################################################################# global: nodePortPrefix: 302 nodePortPrefixExt: 304 aafAgentImage: onap/aaf/aaf_agent:2.1.20 centralizedLoggingEnabled: true mariadbGalera: nameOverride: mariadb-galera serviceName: mariadb-galera servicePort: '3306' service: mariadb-galera internalPort: '3306' # mariadbRootPassword: secretpassword # rootPasswordExternalSecret: some secret #This flag allows SO to instantiate its own mariadb-galera cluster, #serviceName and nameOverride should be so-mariadb-galera if this flag is enabled localCluster: false persistence: mountPath: /dockerdata-nfs #This configuration specifies Service and port for SDNC OAM interface sdncOamService: sdnc-oam sdncOamPort: 8282 #This configuration will run the migration. The configurations are for backing up the data #from DB and then restoring it to the present versions preferred DB. migration: enabled: false dbHost: mariadb-galera dbPort: 3306 dbUser: root dbPassword: secretpassword # dbCredsExternalSecret: some secret msbEnabled: true security: aaf: enabled: false aaf: auth: header: Basic c29Ac28ub25hcC5vcmc6ZGVtbzEyMzQ1Ngo= encrypted: 3EDC974C5CD7FE54C47C7490AF4D3B474CDD7D0FFA35A7ACDE3E209631E45F428976EAC0858874F17390A13149E63C90281DD8D20456 app: siteName: onapheat auth: 3EDC974C5CD7FE54C47C7490AF4D3B474CDD7D0FFA35A7ACDE3E209631E45F428976EAC0858874F17390A13149E63C90281DD8D20456 defaultCloudOwner: onap certificates: path: /etc/ssl/certs share_path: /usr/local/share/ca-certificates/ readinessCheck: wait_for: jobs: - '{{ include "common.release" . }}-so-mariadb-config-job' ################################################################# # Secrets metaconfig ################################################################# secrets: - uid: db-root-pass name: &dbRootPassSecretName '{{ include "common.release" . }}-so-db-root-pass' type: password externalSecret: '{{ .Values.global.mariadbGalera.localCluster | ternary .Values.global.mariadbGalera.rootPasswordExternalSecret (default (include "common.mariadb.secret.rootPassSecretName" (dict "dot" . "chartName" .Values.global.mariadbGalera.nameOverride)) .Values.global.mariadbGalera.rootPasswordExternalSecret) }}' password: '{{ .Values.global.mariadbGalera.mariadbRootpassword }}' - uid: db-backup-creds name: &dbBackupCredsSecretName '{{ include "common.release" . }}-so-db-backup-creds' type: basicAuth externalSecret: '{{ ternary .Values.global.migration.dbCredsExternalSecret "migrationDisabled" .Values.global.migration.enabled }}' login: '{{ ternary .Values.global.migration.dbUser "migrationDisabled" .Values.global.migration.enabled }}' password: '{{ ternary .Values.global.migration.dbPassword "migrationDisabled" .Values.global.migration.enabled }}' passwordPolicy: required annotations: helm.sh/hook: pre-upgrade,pre-install helm.sh/hook-weight: '0' helm.sh/hook-delete-policy: before-hook-creation - uid: db-user-creds name: &dbUserCredsSecretName '{{ include "common.release" . }}-so-db-user-creds' type: basicAuth externalSecret: '{{ .Values.dbCreds.userCredsExternalSecret }}' login: '{{ .Values.dbCreds.userName }}' password: '{{ .Values.dbCreds.userPassword }}' passwordPolicy: generate - uid: db-admin-creds name: &dbAdminCredsSecretName '{{ include "common.release" 
cd /opt/app/cass_backup
DATA="ns role perm ns_attrib user_role cred cert x509 delegate approval approved future notify artifact health history"
PWD=cassandra
CQLSH="cqlsh -u cassandra -k authz -p $PWD"
for T in $DATA ; do
    echo "Creating $T.dat"
    $CQLSH -e  "COPY authz.$T TO '$T.dat' WITH DELIMITER='|'"
done
common.release" . }}-so' so-catalog-db-adapter: enabled: true db: <<: *dbSecrets so-cnf-adapter: enabled: true db: <<: *dbSecrets server: aafCredsExternalSecret: *aaf-secrets aaiCredsExternalSecret: *aai-secrets actuatorCredsExternalSecret: *actuator-secrets mso: msoKeySecret: *mso-key so-etsi-nfvo-ns-lcm: enabled: true db: <<: *dbSecrets so-mariadb: db: rootPasswordExternalSecretLocalDb: *dbRootPassSecretName rootPasswordExternalSecret: '{{ ternary .Values.db.rootPasswordExternalSecretLocalDb (include "common.mariadb.secret.rootPassSecretName" (dict "dot" . "chartName" .Values.global.mariadbGalera.nameOverride)) .Values.global.mariadbGalera.localCluster }}' backupCredsExternalSecret: *dbBackupCredsSecretName userCredsExternalSecret: *dbUserCredsSecretName adminCredsExternalSecret: *dbAdminCredsSecretName so-admin-cockpit: enabled: true db: <<: *dbSecrets so-nssmf-adapter: enabled: true server: actuatorCredsExternalSecret: *actuator-secrets bpelCredsExternalSecret: *bpel-secrets db: <<: *dbSecrets so-oof-adapter: enabled: true db: <<: *dbSecrets mso: msoKeySecret: *mso-key camundaAuth: AE2E9BE6EF9249085AF98689C4EE087736A5500629A72F35068FFB88813A023581DD6E765071F1C04075B36EA4213A oof: authSecret: *mso-oof-auth logConfigMapNamePrefix: '{{ include "common.release" . }}-so' so-openstack-adapter: enabled: true db: <<: *dbSecrets logConfigMapNamePrefix: '{{ include "common.release" . }}-so' so-request-db-adapter: db: <<: *dbSecrets so-sdc-controller: db: <<: *dbSecrets logConfigMapNamePrefix: '{{ include "common.release" . }}-so' so-sdnc-adapter: enabled: true db: <<: *dbSecrets mso: msoKeySecret: *mso-key logConfigMapNamePrefix: '{{ include "common.release" . }}-so' so-ve-vnfm-adapter: enabled: false so-etsi-sol005-adapter: enabled: true db: <<: *dbSecrets so-etsi-sol003-adapter: enabled: true #Pods Service Account serviceAccount: nameOverride: so roles: - read #Log configuration log: path: /var/log/onap