diff options
| author |   EmmettCox <emmett.cox@est.tech> | 2020-02-27 14:20:52 +0000 |
|---|---|---|
| committer |   Paweł Baniewski <pawel.baniewski@nokia.com> | 2020-06-04 12:08:56 +0000 |
| commit | 2edb937330babe09aa7f7977ea7fcb1f6b3dc5ac (patch) | |
| tree | bb00c983f2da95d96ed38a9a008dd22d6cffa99e /kubernetes/onap/values.yaml | |
| parent | 844be0e8fbf0df4933aabb28f579f7626640b492 (diff) | |
[AAF] Add CMPv2 Cert Service
This new micro service allow retrieval of certificates using CMPv2
protocol and relay the requests to CA server (such as EJBCA provided in
contrib folder).
Issue-ID: AAF-1083
Change-Id: Ib3acba3d071533ad933d043f067147e8406d8fa8
Signed-off-by: EmmettCox <emmett.cox@est.tech>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
(cherry picked from commit bca68e048a74ac3754e76ed738090402f7cbfd13)
Diffstat (limited to 'kubernetes/onap/values.yaml')
| -rwxr-xr-x | kubernetes/onap/values.yaml | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/kubernetes/onap/values.yaml b/kubernetes/onap/values.yaml index 9e593c2e42..1723ad5d39 100755 --- a/kubernetes/onap/values.yaml +++ b/kubernetes/onap/values.yaml @@ -96,6 +96,27 @@ global: # Enabling CMPv2 cmpv2Enabled: true + aaf: + certServiceClient: + image: onap/org.onap.aaf.certservice.aaf-certservice-client:1.0.0 + secret: + name: aaf-cert-service-client-tls-secret + mountPath: /etc/onap/aaf/certservice/certs/ + envVariables: + # Certificate related + cmpv2Organization: "Linux-Foundation" + cmpv2OrganizationalUnit: "ONAP" + cmpv2Location: "San-Francisco" + cmpv2State: "California" + cmpv2Country: "US" + # Client configuration related + caName: "RA" + requestURL: "https://aaf-cert-service:8443/v1/certificate/" + requestTimeout: "20000" + keystorePath: "/etc/onap/aaf/certservice/certs/certServiceClient-keystore.jks" + keystorePassword: "secret" + truststorePath: "/etc/onap/aaf/certservice/certs/truststore.jks" + truststorePassword: "secret" # TLS # Set to false if you want to disable TLS for NodePorts. Be aware that this |