1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
|
# Copyright © 2017 Amdocs, Bell Canada
# Modifications Copyright © 2018 AT&T, ZTE
# Modifications Copyright © 2022 Nordix Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#################################################################
# Global configuration defaults.
#################################################################
global:
nodePortPrefix: 302
sdc_cassandra:
#This flag allows SDC to instantiate its own cluster, serviceName
#should be sdc-cs if this flag is enabled
localCluster: false
#The cassandra service name to connect to (default: shared cassandra service)
serviceName: cassandra
#Shared cassandra cluster replicaCount, should be changed if localCluster is enabled
#to match with its own cluster replica
replicaCount: 3
clusterName: cassandra
#datacenter name (use "dc1" in case of k8ssandra-operator, otherwise "Pod")
dataCenter: dc1
# Global Strimzi kafka config overridden
# from parent values.yaml
kafka:
useKafka: overridden-from-parent-values-yaml
#################################################################
# Application configuration defaults.
#################################################################
# application image
image: onap/sdc-backend-all-plugins:1.14.1
backendInitImage: onap/sdc-backend-init:1.14.1
pullPolicy: Always
# flag to enable debugging - application support required
debugEnabled: false
#environment file
env:
name: &env AUTO
#################################################################
# SDC Config part
#################################################################
config:
javaOptions: "-Xmx1536m -Xms1536m"
cassandraSslEnabled: "false"
kafkaUser:
acls:
- name: sdc
suffix: *env
type: group
operations: [Read]
- name: SDC-DISTR
type: topic
patternType: prefix
operations: [Read, Write]
# default number of instances
replicaCount: 1
nodeSelector: {}
affinity: {}
# probe configuration parameters
liveness:
initialDelaySeconds: 1
periodSeconds: 10
timeoutSeconds: 180
successThreshold: 1
failureThreshold: 3
# necessary to disable liveness probe when setting breakpoints
# in debugger so K8s doesn't restart unresponsive container
enabled: true
readiness:
initialDelaySeconds: 1
periodSeconds: 10
timeoutSeconds: 180
successThreshold: 1
failureThreshold: 3
startup:
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 180
successThreshold: 1
failureThreshold: 60
service:
type: NodePort
name: sdc-be
internalPort: 8080
ports:
- name: tcp-api
port: 8080
port_protocol: http
nodePort: '04'
annotations:
msb.onap.org/service-info: |
{{ if .Values.global.msbEnabled -}}[
{
"serviceName": "sdc-be",
"version": "v1",
"url": "/sdc/v1",
"path":"/sdc/v1",
"protocol": "REST",
"visualRange":"1",
"port": "{{ .Values.service.internalPort }}",
}
]{{ end }}
ingress:
enabled: false
service:
- baseaddr: "sdc-be-api"
name: "sdc-be"
port: 8080
config:
ssl: "redirect"
serviceMesh:
authorizationPolicy:
authorizedPrincipals:
- serviceAccount: consul-read
- serviceAccount: consul-server-read
- serviceAccount: modeling-etsicatalog-read
- serviceAccount: nbi-read
- serviceAccount: oof-has-read
- serviceAccount: portal-db-read
- serviceAccount: so-cnfm-lcm-read
- serviceAccount: so-etsi-sol003-adapter-read
- serviceAccount: so-read
- serviceAccount: istio-ingress
namespace: istio-ingress
# Resource Limit flavor -By Default using small
flavor: small
# Segregation for Different environment (Small and Large)
resources:
small:
limits:
cpu: "2"
memory: "3Gi"
requests:
cpu: "1"
memory: "3Gi"
large:
limits:
cpu: "3"
memory: "6Gi"
requests:
cpu: "1"
memory: "6Gi"
unlimited: {}
metrics:
serviceMonitor:
enabled: true
targetPort: 8080
path: /sdc2/rest/actuator/prometheus
basicAuth:
enabled: false
#Pods Service Account
serviceAccount:
nameOverride: sdc-be
roles:
- read
wait_for_job_container:
containers:
- '{{ include "common.name" . }}-job'
#Log configuration
log:
path: /var/log/onap
logConfigMapNamePrefix: '{{ include "common.fullname" . }}'
#######
#######
pairEnvName: ""
cassandra:
hostname: cassandra-dc1-service.onap
port: 9042
cassandraPassword: Aa1234%^!
cassandraUsername: asdc_user
connectionTimeout: 10000
cassandraSslEnabled: false
keystoreLocation: ""
keystorePassword: ""
truststoreLocation: ""
truststorePassword: ""
clusterName: SDC-CS-
readConsistencyLevel: ONE
writeConsistencyLevel: ALL
#replication_strategy_options: dc1,3
cassandraConfig:
cassandraHosts: [cassandra-dc1-service.onap]
cassandraPort: 9042
localDataCenter: dc1
socketReadTimeout: 20000
socketConnectTimeout: 20000
username: asdc_user
password: Aa1234%^!
ssl: false
keystorePath: ""
keystorePassword: false
truststorePath: ""
truststorePassword: ""
janusgraph:
keyspace: sdctitan
cfgFile: /app/jetty/config/catalog-be/janusgraph.properties
dbCache:
enabled: false
cleanWait: 20
time: 18000
size: 0.5
txCache:
size: '1000000'
storage:
lockRetries: 5
lockWaitTime: 500
backend: cql
connectionTimeout: 5000
graph:
replaceInstance: true
inMemory: false
lockTimeout: 1800
reconnectInterval: 3
healthCheckReadTimeout: 8
dmaapConsumerConfiguration:
active: false
permittedAncestors: ""
tlsCert: ""
tlsKey: ""
caCert: ""
ONBOARDING_BE:
host: sdc-onboarding-be.onap
httpPort: 8081
httpsPort: 8445
dmaapProducerConfiguration:
hosts: olsd004.com:3905
topic: SDC-FACADE-NOTIF-v1
serviceName: dmaap.com:3905/events
environment: TEST
protocol: ""
aftEnvironment: ""
dme2preferredRouterFilePath: ""
username: user1@sdc.com
password: password==
appVersion: ""
# Distrubution
uebPublicKey: iPIxkpAMI8qTcQj8
uebSecretKey: Ehq3WyT4bkif4zwgEbvshGal
#distributionNotifTopicName: SDC-DISTR-NOTIF-TOPIC
#distributionStatusTopicName: SDC-DISTR-STATUS-TOPIC
kafkaBootStrapServers: onap-strimzi-kafka-bootstrap:9092
chefEnvironment: AUTO
logback:
rootLogLevel: INFO
jetty:
httpPort: 8080
httpsPort: 8443
keystorePath: ""
truststorePath: ""
keystorePassword: ""
truststorePassword: ""
disableHttp: false
beFqdn: sdc-be.onap
beHttpPort: 8080
beSslPort: 8443
basicAuth:
enabled: true
userName: testName
userPass: testPass
basicAuthConfig:
enabled: false
beInit:
beIp: sdc-be.onap
tlsCert: ""
tlsKey: ""
tlsKeyPw: ""
caCert: ""
be:
tlsCert: ""
tlsKey: ""
tlsPassword: ""
keystorePath: ""
keystorePassword: ""
caCert: ""
truststorePath: ""
truststorePassword: ""
autoscaling:
enabled: true
minReplicas: 1
maxReplicas: 3
targetCPUUtilizationPercentage: 75
# number of ReplicaSets that should be retained for the Deployment
revisionHistoryLimit: 1
# the minimum number of seconds that a newly created Pod should be ready
minReadySeconds: 30
updateStrategy:
type: RollingUpdate
# The number of pods that can be unavailable during the update process
maxUnavailable: 0
# The number of pods that can be created above the desired amount of pods during an update
maxSurge: 1
# Annotations to control the execution and deletion of the job
# Can be used to delete a job before an Upgrade
#
# jobAnnotations:
# # In case of an ArgoCD deployment this Hook deletes the job before syncing
# argocd.argoproj.io/hook: Sync
# argocd.argoproj.io/hook-delete-policy: BeforeHookCreation
#
# # In case of an Helm/Flux deployment this Hook deletes the job
# # This is what defines this resource as a hook. Without this line, the
# # job is considered part of the release.
# "helm.sh/hook": "pre-upgrade,pre-rollback,post-install"
# "helm.sh/hook-delete-policy": "before-hook-creation"
# "helm.sh/hook-weight": "1"
#END
|