nebulous/monitoring
Code Issues Proposed changes
monitoring/charts/nebulous-monitoring/values.yaml
ipatini 5596b8b6c4 Updated values.yaml to include new EMS server env vars 
Change-Id: Iee55da17acc3b68a81b493a9026faa19e89a8a6c
2024-05-09 11:56:44 +03:00

281 lines
8.4 KiB
YAML
Raw Blame History

#
# Copyright (C) 2017-2025 Institute of Communication and Computer Systems (imu.iccs.gr)
#
# This Source Code Form is subject to the terms of the Mozilla Public License, v2.0, unless
# Esper library is used, in which case it is subject to the terms of General Public License v2.0.
# If a copy of the MPL was not distributed with this file, you can obtain one at
# https://www.mozilla.org/en-US/MPL/2.0/
#
# Default values for nebulous-monitoring.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
replicaCount: 1
image:
repository: "quay.io/nebulous/monitoring"
# pullPolicy: IfNotPresent
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
tag: ""
imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""
serviceAccount:
# Specifies whether a service account should be created
create: true
# Annotations to add to the service account
annotations: {}
# The name of the service account to use.
# If not set and create is true, a name is generated using the fullname template
name: ""
podAnnotations: {}
podSecurityContext: {}
# fsGroup: 2000
securityContext: {}
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000
service:
type: ClusterIP
port: 8111
ingress:
enabled: false
className: ""
annotations: {}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
hosts:
- host: chart-example.local
paths:
- path: /
pathType: ImplementationSpecific
tls: []
# - secretName: chart-example-tls
# hosts:
# - chart-example.local
resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
autoscaling:
enabled: false
minReplicas: 1
maxReplicas: 1
targetCPUUtilizationPercentage: 80
# targetMemoryUtilizationPercentage: 80
nodeSelector: {}
tolerations: []
affinity: {}
ports:
- name: http
containerPort: 8111
protocol: TCP
public: true
nodePort: 30111
- name: openwire
containerPort: 61616
protocol: TCP
public: false
- name: openwire-tls
containerPort: 61617
protocol: TCP
public: true
nodePort: 31617
- name: stomp
containerPort: 61610
protocol: TCP
public: false
- name: baguette
containerPort: 2222
protocol: TCP
public: true
nodePort: 32222
env:
#
# ===== EMS server configuration =====
#
# ===== INITIALIZATION settings =====
- name: BUILD_MESSAGE
value: '2024-05-09 11:57:00+03:00 opendev'
- name: JASYPT_PASSWORD
value: 'password' #+++++++++++++++++++++++++ ?????????????????
- name: NET_UTIL_ADDRESS_DISCOVERY_SERVICES
value: '-'
- name: EMS_IP_SETTING
value: 'DEFAULT_IP'
- name: EMS_LOG_REQUESTS
value: 'false'
- name: EMS_PRELOAD_APP_MODEL
value: 'empty.yml'
- name: EMS_PRELOAD_CP_MODEL
value: ''
- name: CONTROL_SKIP_MVV_RETRIEVE
value: 'true'
- name: CONTROL_SKIP_METASOLVER
value: 'true'
- name: CONTROL_SKIP_NOTIFICATION
value: 'true'
- name: CONTROL_EXIT_ALLOWED
value: 'true'
- name: RESTART_EXIT_CODE
value: '99'
# ===== Security and Authentication settings =====
- name: CONTROL_SSL_KEY_ENTRY_GENERATE
value: 'ALWAYS'
- name: CONTROL_SSL_KEYSTORE_PASSWORD
value: 'melodic' #+++++++++++++++++++++++++ ${P_KEYSTORE_PASSWORD}
- name: CONTROL_SSL_TRUSTSTORE_PASSWORD
value: 'melodic' #+++++++++++++++++++++++++ ${P_KEYSTORE_PASSWORD}
- name: JWT_SECRET
value: 'ENC(I0mRWgH2FVDDNs4OBcdh7Z+o3lOQDa3ztaEtmnXT2HN0aClkChp/lqm9zM5HyTk0stJ7v2Di75U=)' #+++++++++++++++++++++++++ ${P_JWT_SECRET}
- name: WEB_SECURITY_API_KEY_AUTHENTICATION_VALUE
value: '1234567890' #+++++++++++++++++++++++++ ${P_WEB_API_KEY_VALUE}
- name: WEB_SECURITY_FORM_AUTHENTICATION_PASSWORD
value: 'ems' #+++++++++++++++++++++++++ ${P_WEB_ADMIN_PASSWORD}
# ===== Topic Beacon settings =====
- name: BEACON_INITIAL_DELAY
value: '10000'
- name: BEACON_DELAY
value: '10000'
# ===== EMS server monitoring settings =====
- name: EMS_SYSMON_ENABLED
value: 'true'
- name: EMS_SYSMON_PERIOD
value: '1000'
- name: EMS_SYSMON_COMMAND
value: './bin/sysmon.sh'
- name: INFO_FILES_ROOTS
value: '/logs, /config, /opt/ems-server/public_resources/resources'
- name: INFO_FILES_EXTENSIONS_BLOCKED
value: '.pem, .p12, .sh'
# ===== EMS Boot (server) settings =====
- name: BOOT_ENABLED
value: 'true'
# ===== EMS Boot Initializer (client) settings =====
- name: BOOT_INITIALIZER_ENABLED
value: 'false'
# ===== EMS-Nebulous K8S service settings =====
- name: K8S_DEPLOY_EMS_CLIENTS_ON_KUBERNETES_ENABLED
value: 'false'
- name: K8S_ENABLED
value: 'false'
- name: K8S_WATCHER_ENABLED
value: 'false'
# ===== External Broker settings =====
- name: EXTERNAL_ENABLED
value: 'true'
- name: EXTERNAL_BROKER_ADDRESS
value: 'nebulous-activemq'
- name: EXTERNAL_BROKER_PORT
value: '5672'
- name: EXTERNAL_BROKER_USERNAME
value: 'nebulous'
- name: EXTERNAL_BROKER_PASSWORD
value: 'admin'
- name: EXTERNAL_CONNECTION_INFO_COLLECTION_MODE
value: 'CONFIG'
- name: EXTERNAL_BROKER_SERVICE_NAME
value: 'nebulous-activemq'
- name: EXTERNAL_BROKER_SERVICE_NAMESPACE
value: 'nebulous-cd'
# ===== Broker settings =====
- name: EMS_SERVER_BROKER_PORT
value: '31617'
- name: BROKERCEP_ADDITIONAL_BROKER_CREDENTIALS
value: 'aaa/111, bbb/222' # ++++++++++++++++ ${P_BROKERCEP_CREDENTIALS:-}
# value: 'ENC(axeJUxNHajYfBffUwvuT3kwTgLTpRliDMz/ZQ9hROZ3BNOv0Idw72NJsawzIZRuZ)'
- name: BROKERCEP_EVENT_RECORDER_ENABLED
value: 'false'
- name: BROKERCEP_EVENT_RECORDER_FILTER_MODE
value: 'ALL'
# ===== Baguette Server settings =====
- name: BAGUETTE_SERVER_CREDENTIALS
value: '{ "aa":"xx" }' # ++++++++++++++++ ${P_BAGUETTE_SERVER_CREDENTIALS:-{}
# value: 'ENC(y46CiW6przlpXvz8ToE+T1Sn6uGfO2haP7OhATB0SXo=)'
# ===== Baguette Client Install settings =====
- name: EMS_SERVER_ADDRESS
value: '158.39.200.177'
- name: BAGUETTE_SERVER_ADDRESS
value: '158.39.200.177'
- name: BAGUETTE_SERVER_PORT
value: '32222'
# - name: BAGUETTE_CLIENT_INSTALL_INSTRUCTIONS_LINUX
# value: 'file:${EMS_CONFIG_DIR}/baguette-client-install/helm/app-detection.yml, file:${EMS_CONFIG_DIR}/baguette-client-install/helm/epm-deploy.yml, file:${EMS_CONFIG_DIR}/baguette-client-install/helm/netdata-deploy.yml'
- name: BAGUETTE_CLIENT_INSTALL_INSTALLATION_CONTEXT_PROCESSOR_PLUGINS
value: 'eu.nebulous.ems.plugins.NebulousInstallationContextProcessorPlugin'
#
# ===== EMS server K8sClientInstaller configuration =====
#
- name: EMS_CLIENT_DEPLOYMENT_DRY_RUN
value: "false"
- name: K8S_SERVICE_ACCOUNT_SECRETS_PATH
value: "/var/run/secrets/kubernetes.io/serviceaccount"
- name: APP_CONFIG_MAP_NAME
value: "monitoring-configmap"
- name: EMS_CLIENT_CONFIG_MAP_NAME
value: "ems-client-configmap"
#- name: EMS_CLIENT_DAEMONSET_SPECIFICATION_FILE
# value: "/ems-client-daemonset.yaml"
- name: EMS_CLIENT_DAEMONSET_NAME
value: "ems-client-daemonset"
- name: EMS_CLIENT_DAEMONSET_IMAGE_REPOSITORY
value: "registry.gitlab.com/nebulous-project/ems-main/ems-client"
- name: EMS_CLIENT_DAEMONSET_IMAGE_TAG
value: "latest"
- name: EMS_CLIENT_DAEMONSET_IMAGE_PULL_POLICY
value: "Always"
# ===== EMS clients - Security and Authentication settings =====
- name: EMS_CLIENT_ADDITIONAL_BROKER_CREDENTIALS
value: 'aaa/111, bbb/222'
# value: "ENC(axeJUxNHajYfBffUwvuT3kwTgLTpRliDMz/ZQ9hROZ3BNOv0Idw72NJsawzIZRuZ)"
#- name: EMS_CLIENT_BROKER_USERNAME # It is appended to EMS_CLIENT_ADDITIONAL_BROKER_CREDENTIALS
# value: "ccc"
#- name: EMS_CLIENT_BROKER_PASSWORD
# value: "333"
- name: EMS_CLIENT_KEYSTORE_SECRET
value: ""
- name: EMS_CLIENT_TRUSTSTORE_SECRET
value: ""
View Git Blame Copy Permalink