mirror of
https://github.com/Telecominfraproject/wlan-cloud-helm.git
synced 2025-10-29 17:52:40 +00:00
a3e523f922
* thirdparties replaced with latest bitnami charts * migration values example for persistence, dev-local example for thirdparties * removing hardcoded passwords * changing storage classes to mimic what minikube has * fixing missing folder * fixing PR comments, fixing testing build * forgot to fix the namespace in the testing build * fixing path issues * fixing another path issue * fixing build issues * improving namespace support * fixing cleanup task * fixing yaml files * further yaml formatting * Update README.md * Update testing.yml Co-authored-by: Gleb Boushev <4c74356b41@outlook.com> Co-authored-by: Leonid Mirsky <leonid@opsfleet.com>
187 lines
4.3 KiB
YAML
187 lines
4.3 KiB
YAML
global:
|
|
nodePortPrefix: 302
|
|
nodePortPrefixExt: 304
|
|
|
|
pullPolicy: Always
|
|
repository: tip-tip-wlan-cloud-docker-repo.jfrog.io
|
|
|
|
integratedDeployment: true
|
|
testingEnabled:
|
|
|
|
dockerRegistrySecret: ewoJImF1dGhzIjogewoJCSJ0aXAtdGlwLXdsYW4tY2xvdWQtZG9ja2VyLXJlcG8uamZyb2cuaW8iOiB7CgkJCSJhdXRoIjogImRHbHdMWEpsWVdRNmRHbHdMWEpsWVdRPSIKCQl9Cgl9LAoJIkh0dHBIZWFkZXJzIjogewoJCSJVc2VyLUFnZW50IjogIkRvY2tlci1DbGllbnQvMTkuMDMuOCAobGludXgpIgoJfQp9
|
|
annotations: {
|
|
"helm.sh/resource-policy": keep
|
|
}
|
|
|
|
opensync-gw-static:
|
|
enabled: false
|
|
|
|
opensync-gw-cloud:
|
|
enabled: true
|
|
env:
|
|
protocol: https
|
|
ssc:
|
|
service: wlan-integrated-cloud-component-service
|
|
port: 9092
|
|
prov:
|
|
service: wlan-integrated-cloud-component-service
|
|
port: 9092
|
|
|
|
opensync-mqtt-broker:
|
|
enabled: true
|
|
replicaCount: 1
|
|
persistence:
|
|
enabled: true
|
|
storageClass: glusterfs-storage
|
|
|
|
wlan-cloud-graphql-gw:
|
|
enabled: true
|
|
|
|
wlan-cloud-static-portal:
|
|
enabled: true
|
|
|
|
wlan-integrated-cloud-component-service:
|
|
enabled: true
|
|
image:
|
|
name: wlan-integrated-cloud-component-service-persistence
|
|
tag: 0.0.1-SNAPSHOT
|
|
creds:
|
|
enabled: true
|
|
postgres:
|
|
password: cG9zdGdyZXMxMjM=
|
|
schema_repo:
|
|
username: tip-read
|
|
password: tip-read
|
|
integratedWithPersistence:
|
|
enabled: true
|
|
|
|
nginx-ingress-controller:
|
|
enabled: true
|
|
controller:
|
|
nodeSelector: {
|
|
type: master
|
|
}
|
|
config:
|
|
externalStatusAddress: "192.168.56.101"
|
|
|
|
kafka:
|
|
enabled: true
|
|
replicaCount: 1
|
|
image:
|
|
debug: true
|
|
auth:
|
|
clientProtocol: mtls
|
|
interBrokerProtocol: tls
|
|
jksSecret: tip-common-kafka-certs
|
|
jksPassword: mypassword
|
|
tlsEndpointIdentificationAlgorithm: ""
|
|
jaas:
|
|
clientUsers:
|
|
- brokerUser
|
|
clientPassword:
|
|
- brokerPassword
|
|
extraEnvVars:
|
|
- name: KAFKA_CFG_SSL_KEYSTORE_TYPE
|
|
value: PKCS12
|
|
allowPlaintextListener: true
|
|
persistence:
|
|
enabled: true
|
|
storageClass: glusterfs-storage
|
|
metrics:
|
|
serviceMonitor:
|
|
enabled: false
|
|
namespace: monitoring
|
|
selector:
|
|
release: prometheus-operator
|
|
zookeeper:
|
|
enabled: true
|
|
persistence:
|
|
enabled: true
|
|
|
|
cassandra:
|
|
enabled: true
|
|
tlsEncryptionSecretName: tip-common-cassandra-certs
|
|
image:
|
|
debug: true
|
|
persistence:
|
|
enabled: true
|
|
storageClass: glusterfs-storage
|
|
replicaCount: 1
|
|
cluster:
|
|
name: TipWlanCluster
|
|
seedCount: 1
|
|
internodeEncryption: all
|
|
clientEncryption: true
|
|
exporter:
|
|
enabled: false
|
|
serviceMonitor:
|
|
enabled: false
|
|
additionalLabels:
|
|
release: prometheus-operator
|
|
dbUser:
|
|
user: cassandra
|
|
password: cassandra
|
|
resources:
|
|
limits: {}
|
|
requests:
|
|
cpu: 1
|
|
memory: 3Gi
|
|
|
|
postgresql:
|
|
enabled: true
|
|
postgresqlDatabase: tip
|
|
image:
|
|
debug: true
|
|
metrics:
|
|
enabled: false
|
|
serviceMonitor:
|
|
enabled: falsea
|
|
namespace: monitoring
|
|
additionalLabels:
|
|
release: prometheus-operator
|
|
postgresqlUsername: postgres
|
|
postgresqlPassword: postgres
|
|
pgHbaConfiguration: |
|
|
hostssl replication repl_user 0.0.0.0/0 md5 clientcert=0
|
|
hostssl postgres postgres 0.0.0.0/0 cert clientcert=1
|
|
hostssl postgres postgres ::/0 cert clientcert=1
|
|
hostssl all all 0.0.0.0/0 md5 clientcert=1
|
|
replication:
|
|
enabled: true
|
|
user: repl_user
|
|
password: repl_password
|
|
slaveReplicas: 1
|
|
persistence:
|
|
enabled: true
|
|
storageClass: glusterfs-storage
|
|
volumePermissions:
|
|
enabled: true
|
|
livenessProbe:
|
|
enabled: false
|
|
readinessProbe:
|
|
enabled: false
|
|
tls:
|
|
enabled: true
|
|
certificatesSecret: tip-common-postgres-certs
|
|
certFilename: cert.crt
|
|
certKeyFilename: cert.key
|
|
certCAFilename: cacert.pem
|
|
initdbScriptsConfigMap: tip-common-postgres-scripts
|
|
extraEnv:
|
|
- name: PGSSLCERT
|
|
value: /opt/tip-wlan/certs/postgresclientcert.pem
|
|
- name: PGSSLKEY
|
|
value: /opt/tip-wlan/certs/postgresclientkey_dec.pem
|
|
- name: PGSSLROOTCERT
|
|
value: /opt/tip-wlan/certs/cacert.pem
|
|
primary:
|
|
extraInitContainers:
|
|
- command: [ "sh", "-c", "chmod 0600 /opt/bitnami/postgresql/certs/postgresclientkey_dec.pem" ]
|
|
image: busybox:latest
|
|
name: chmod-client-cert-additional
|
|
securityContext:
|
|
runAsUser: 0
|
|
volumeMounts:
|
|
- mountPath: /opt/bitnami/postgresql/certs
|
|
name: postgresql-certificates
|