1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
|
# Copyright © 2017 Amdocs, Bell Canada
# Modifications Copyright © 2018 AT&T
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#################################################################
# Global configuration defaults.
#################################################################
global:
nodePortPrefix: 302
persistence: {}
#################################################################
# AAF part
#################################################################
certInitializer:
nameOverride: dmaap-mr-kafka-cert-initializer
aafDeployFqi: deployer@people.osaaf.org
aafDeployPass: demo123456!
# aafDeployCredsExternalSecret: some secret
fqdn: dmaap-mr
fqi: dmaapmr@mr.dmaap.onap.org
public_fqdn: mr.dmaap.onap.org
cadi_longitude: "-122.26147"
cadi_latitude: "37.78187"
app_ns: org.osaaf.aaf
credsPath: /opt/app/osaaf/local
fqi_namespace: org.onap.dmaap.mr
final_cadi_files: cadi.properties
aaf_add_config: |
echo "*** concat the three prop files"
cd {{ .Values.credsPath }}
cat {{ .Values.fqi_namespace }}.props > {{ .Values.final_cadi_files }}
cat {{ .Values.fqi_namespace }}.cred.props >> {{ .Values.final_cadi_files }}
cat {{ .Values.fqi_namespace }}.location.props >> {{ .Values.final_cadi_files }}
echo "*** configuration result:"
cat {{ .Values.final_cadi_files }}
chown -R 1000 .
#################################################################
# Application configuration defaults.
#################################################################
# application image
image: onap/dmaap/kafka111:1.0.5
pullPolicy: Always
zookeeper:
name: message-router-zookeeper
port: 2181
replicaCount: 3
kafka:
heapOptions: -Xmx5G -Xms1G
jaasOptions: -Djava.security.auth.login.config=/etc/kafka/secrets/jaas/zk_client_jaas.conf
jaasOptionsAaf: -Djava.security.auth.login.config=/etc/kafka/secrets/jaas/kafka_server_jaas.conf
enableSupport: false
protocolMapAaf: INTERNAL_SASL_PLAINTEXT:SASL_PLAINTEXT,EXTERNAL_SASL_PLAINTEXT:SASL_PLAINTEXT
protocolMap: INTERNAL_PLAINTEXT:PLAINTEXT,EXTERNAL_PLAINTEXT:PLAINTEXT
listenersAaf: EXTERNAL_SASL_PLAINTEXT://0.0.0.0:9091,INTERNAL_SASL_PLAINTEXT://0.0.0.0:9092
listeners: EXTERNAL_PLAINTEXT://0.0.0.0:9091,INTERNAL_PLAINTEXT://0.0.0.0:9092
authorizer: org.onap.dmaap.kafkaAuthorize.KafkaCustomAuthorizer
saslInterBrokerProtocol: PLAIN
saslMech: PLAIN
interBrokerListernerAaf: INTERNAL_SASL_PLAINTEXT
interBrokerListerner: INTERNAL_PLAINTEXT
configurationOverrides:
"offsets.topic.replication.factor": "3"
"log.dirs": "/var/lib/kafka/data"
"log.retention.hours": "168"
"num.partitions": "3"
"offsets.topic.replication.factor": "3"
"transaction.state.log.replication.factor": "1"
"transaction.state.log.min.isr": "1"
"num.recovery.threads.per.data.dir": "5"
"log.retention.hours": "168"
"zookeeper.connection.timeout.ms": "6000"
"default.replication.factor": "3"
"zookeeper.set.acl": "true"
jmx:
port: 5555
prometheus:
jmx:
enabled: false
image: solsson/kafka-prometheus-jmx-exporter@sha256
imageTag: 6f82e2b0464f50da8104acd7363fb9b995001ddff77d248379f8788e78946143
port: 5556
jaas:
config:
zkClient: kafka
zkClientPassword: kafka_secret
kafkaAdminUser: admin
kafkaAdminPassword: admin_secret
#kafkaAdminUserExternal: some secret
#zkClientPasswordExternal: some secret
secrets:
- uid: zk-client
type: basicAuth
externalSecret: '{{ .Values.jaas.config.zkClientPasswordExternal}}'
login: '{{ .Values.jaas.config.zkClient }}'
password: '{{ .Values.jaas.config.zkClientPassword }}'
passwordPolicy: required
- uid: kafka-admin
type: basicAuth
externalSecret: '{{ .Values.jaas.config.kafkaAdminUserExternal}}'
login: '{{ .Values.jaas.config.kafkaAdminUser }}'
password: '{{ .Values.jaas.config.kafkaAdminPassword }}'
passwordPolicy: required
# flag to enable debugging - application support required
debugEnabled: false
# default number of instances
replicaCount: 3
# To access Kafka outside cluster, this value must be set to hard and the number of nodes in K8S cluster must be equal or greater then replica count
podAntiAffinityType: soft
# defult partitions
defaultpartitions: 3
nodeSelector: {}
nodeAffinity: {}
affinity: {}
tolerations: {}
# probe configuration parameters
liveness:
initialDelaySeconds: 70
periodSeconds: 20
timeoutSeconds: 10
# necessary to disable liveness probe when setting breakpoints
# in debugger so K8s doesn't restart unresponsive container
enabled: true
readiness:
initialDelaySeconds: 90
periodSeconds: 20
timeoutSeconds: 100
## Persist data to a persitent volume
persistence:
enabled: true
## A manually managed Persistent Volume and Claim
## Requires persistence.enabled: true
## If defined, PVC must be created manually before volume will be bound
# existingClaim:
volumeReclaimPolicy: Retain
## database data Persistent Volume Storage Class
## If defined, storageClassName: <storageClass>
## If set to "-", storageClassName: "", which disables dynamic provisioning
## If undefined (the default) or set to null, no storageClassName spec is
## set, choosing the default provisioner. (gp2 on AWS, standard on
## GKE, AWS & OpenStack)
##
# storageClass: "-"
accessMode: ReadWriteOnce
size: 2Gi
mountPath: /dockerdata-nfs
mountSubPath: message-router/data-kafka
service:
type: NodePort
name: message-router-kafka
portName: tcp-message-router-kafka
internalPort: 9092
internalSSLPort: 9093
externalPort: 9091
baseNodePort: 30490
ingress:
enabled: false
# Resource Limit flavor -By Default using small
flavor: small
# Segregation for Different environment (Small and Large)
resources:
small:
limits:
cpu: 2000m
memory: 4Gi
requests:
cpu: 500m
memory: 1Gi
large:
limits:
cpu: 4000m
memory: 8Gi
requests:
cpu: 1000m
memory: 2Gi
unlimited: {}
#Pods Service Account
serviceAccount:
nameOverride: message-router-kafka
roles:
- read
|
