1212# #
1313commonLabels :
1414 app.kubernetes.io/component : mosip
15-
1615# # Add annotations to all the deployed resources
1716# #
1817commonAnnotations : {}
19-
2018# # Kubernetes Cluster Domain
2119# #
2220clusterDomain : cluster.local
23-
2421# # Extra objects to deploy (value evaluated as a template)
2522# #
2623extraDeploy : []
27-
2824# # Number of nodes
2925# #
3026replicaCount : 1
31-
3227service :
3328 type : ClusterIP
3429 port : 80
@@ -49,11 +44,10 @@ service:
4944 # # ref http://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
5045 # #
5146 externalTrafficPolicy : Cluster
52-
5347image :
5448 registry : docker.io
55- repository : mosipqa /authentication-service
56- tag : develop
49+ repository : mosipid /authentication-service
50+ tag : 1.2.1.1-beta.1
5751 # # Specify a imagePullPolicy
5852 # # Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
5953 # # ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -65,10 +59,8 @@ image:
6559 # #
6660 # pullSecrets:
6761 # - myRegistryKeySecretName
68-
6962# # Port on which this particular spring service module is running.
7063springServicePort : 8090
71-
7264# # Configure extra options for liveness and readiness probes
7365# # ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
7466# #
@@ -82,7 +74,6 @@ startupProbe:
8274 timeoutSeconds : 5
8375 failureThreshold : 30
8476 successThreshold : 1
85-
8677livenessProbe :
8778 enabled : true
8879 httpGet :
@@ -93,7 +84,6 @@ livenessProbe:
9384 timeoutSeconds : 5
9485 failureThreshold : 6
9586 successThreshold : 1
96-
9787readinessProbe :
9888 enabled : true
9989 httpGet :
@@ -104,20 +94,17 @@ readinessProbe:
10494 timeoutSeconds : 5
10595 failureThreshold : 6
10696 successThreshold : 1
107-
10897# #
10998# existingConfigmap:
11099
111100# # Command and args for running the container (set to default if not set). Use array form
112101# #
113102command : []
114103args : []
115-
116104# # Deployment pod host aliases
117105# # https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
118106# #
119107hostAliases : []
120-
121108# # ref: http://kubernetes.io/docs/user-guide/compute-resources/
122109# #
123110resources :
@@ -131,37 +118,31 @@ resources:
131118 requests :
132119 cpu : 100m
133120 memory : 1000Mi
134-
135121additionalResources :
136122 # # Specify any JAVA_OPTS string here. These typically will be specified in conjunction with above resources
137123 # # Example: java_opts: "-Xms500M -Xmx500M"
138124 javaOpts : " -Xms2000M -Xmx2000M"
139-
140125# # ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
141126# # Clamav container already runs as 'mosip' user, so we may not need to enable this
142127containerSecurityContext :
143128 enabled : false
144129 runAsUser : mosip
145130 runAsNonRoot : true
146-
147131# # ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
148132# #
149133podSecurityContext :
150134 enabled : false
151135 fsGroup : 1001
152-
153136# # Pod affinity preset
154137# # ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
155138# # Allowed values: soft, hard
156139# #
157140podAffinityPreset : " "
158-
159141# # Pod anti-affinity preset
160142# # Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
161143# # Allowed values: soft, hard
162144# #
163145podAntiAffinityPreset : soft
164-
165146# # Node affinity preset
166147# # Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
167148# # Allowed values: soft, hard
@@ -183,32 +164,26 @@ nodeAffinityPreset:
183164 # # - e2e-az2
184165 # #
185166 values : []
186-
187167# # Affinity for pod assignment. Evaluated as a template.
188168# # Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
189169# #
190170affinity : {}
191-
192171# # Node labels for pod assignment. Evaluated as a template.
193172# # ref: https://kubernetes.io/docs/user-guide/node-selection/
194173# #
195174nodeSelector : {}
196-
197175# # Tolerations for pod assignment. Evaluated as a template.
198176# # ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
199177# #
200178tolerations : []
201-
202179# # Pod extra labels
203180# # ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
204181# #
205182podLabels : {}
206-
207183# # Annotations for server pods.
208184# # ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
209185# #
210186podAnnotations : {}
211-
212187# # pods' priority.
213188# # ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/
214189# #
@@ -217,51 +192,42 @@ podAnnotations: {}
217192# # lifecycleHooks for the container to automate configuration before or after startup.
218193# #
219194lifecycleHooks : {}
220-
221195# # Custom Liveness probes for
222196# #
223197customLivenessProbe : {}
224-
225198# # Custom Rediness probes
226199# #
227200customReadinessProbe : {}
228-
229201# # Update strategy - only really applicable for deployments with RWO PVs attached
230202# # If replicas = 1, an update can get "stuck", as the previous pod remains attached to the
231203# # PV, and the "incoming" pod can never start. Changing the strategy to "Recreate" will
232204# # terminate the single previous pod, so that the new, incoming pod can attach to the PV
233205# #
234206updateStrategy :
235207 type : RollingUpdate
236-
237208# # Additional environment variables to set
238209# # Example:
239210# # extraEnvVars:
240211# # - name: FOO
241212# # value: "bar"
242213# #
243214extraEnvVars : []
244-
245215# # ConfigMap with extra environment variables that used
246216# #
247217extraEnvVarsCM :
248218 - global
249219 - config-server-share
250220 - artifactory-share
251221 - softhsm-ida-share
252-
253222# # Secret with extra environment variables
254223# #
255224extraEnvVarsSecret : []
256-
257225# # Extra volumes to add to the deployment
258226# #
259227extraVolumes : []
260-
261228# # Extra volume mounts to add to the container
262229# #
263230extraVolumeMounts : []
264-
265231# # Add init containers to the pods.
266232# # Example:
267233# # initContainers:
@@ -276,17 +242,7 @@ initContainers:
276242 - command :
277243 - /bin/bash
278244 - -c
279- - if [ "$ENABLE_INSECURE" = "true" ]; then HOST=$( env | grep "mosip-api-internal-host"
280- |sed "s/mosip-api-internal-host=//g"); if [ -z "$HOST" ]; then echo "HOST
281- $HOST is empty; EXITING"; exit 1; fi; openssl s_client -servername "$HOST"
282- -connect "$HOST":443 > "$HOST.cer" 2>/dev/null & sleep 2 ; sed -i -ne '/-BEGIN
283- CERTIFICATE-/,/-END CERTIFICATE-/p' "$HOST.cer"; cat "$HOST.cer"; /usr/local/openjdk-11/bin/keytool
284- -delete -alias "$HOST" -keystore $JAVA_HOME/lib/security/cacerts -storepass
285- changeit; /usr/local/openjdk-11/bin/keytool -trustcacerts -keystore "$JAVA_HOME/lib/security/cacerts"
286- -storepass changeit -noprompt -importcert -alias "$HOST" -file "$HOST.cer"
287- ; if [ $? -gt 0 ]; then echo "Failed to add SSL certificate for host $host;
288- EXITING"; exit 1; fi; cp /usr/local/openjdk-11/lib/security/cacerts /cacerts;
289- fi
245+ - if [ "$ENABLE_INSECURE" = "true" ]; then HOST=$( env | grep "mosip-api-internal-host" |sed "s/mosip-api-internal-host=//g"); if [ -z "$HOST" ]; then echo "HOST $HOST is empty; EXITING"; exit 1; fi; openssl s_client -servername "$HOST" -connect "$HOST":443 > "$HOST.cer" 2>/dev/null & sleep 2 ; sed -i -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' "$HOST.cer"; cat "$HOST.cer"; /usr/local/openjdk-11/bin/keytool -delete -alias "$HOST" -keystore $JAVA_HOME/lib/security/cacerts -storepass changeit; /usr/local/openjdk-11/bin/keytool -trustcacerts -keystore "$JAVA_HOME/lib/security/cacerts" -storepass changeit -noprompt -importcert -alias "$HOST" -file "$HOST.cer" ; if [ $? -gt 0 ]; then echo "Failed to add SSL certificate for host $host; EXITING"; exit 1; fi; cp /usr/local/openjdk-11/lib/security/cacerts /cacerts; fi
290246 env :
291247 - name : ENABLE_INSECURE
292248 value : " true"
@@ -304,7 +260,6 @@ initContainers:
304260 volumeMounts :
305261 - mountPath : /cacerts
306262 name : cacerts
307-
308263# # Add sidecars to the pods.
309264# # Example:
310265# # sidecars:
@@ -316,7 +271,6 @@ initContainers:
316271# # containerPort: 1234
317272# #
318273sidecars : {}
319-
320274persistence :
321275 enabled : false
322276 # # If defined, storageClassName: <storageClass>
@@ -341,7 +295,6 @@ persistence:
341295 mountDir : /home/mosip/config/
342296 volume_name : config
343297 # pvc_claim_name: pkcs12-keys.p12
344-
345298# # Init containers parameters:
346299# # volumePermissions: Change the owner and group of the persistent volume mountpoint to runAsUser:fsGroup values from the securityContext section.
347300# #
@@ -375,12 +328,10 @@ volumePermissions:
375328 # # cpu: 100m
376329 # # memory: 128Mi
377330 # #
378-
379331# # Specifies whether RBAC resources should be created
380332# #
381333rbac :
382334 create : true
383-
384335# # Specifies whether a ServiceAccount should be created
385336# #
386337serviceAccount :
@@ -389,7 +340,6 @@ serviceAccount:
389340 # # If not set and create is true, a name is generated using the fullname template
390341 # #
391342 name :
392-
393343# # Prometheus Metrics
394344# #
395345metrics :
@@ -399,7 +349,6 @@ metrics:
399349 # #
400350 podAnnotations :
401351 prometheus.io/scrape : " true"
402-
403352 endpointPath : /idauthentication/v1/actuator/prometheus
404353 # # Prometheus Service Monitor
405354 # # ref: https://github.com/coreos/prometheus-operator
@@ -427,7 +376,6 @@ metrics:
427376 # # ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
428377 # #
429378 additionalLabels : {}
430-
431379 # # Custom PrometheusRule to be defined
432380 # # The value is evaluated as a template, so, for example, the value can depend on .Release or .Chart
433381 # # ref: https://github.com/coreos/prometheus-operator#customresourcedefinitions
@@ -445,7 +393,6 @@ metrics:
445393 # labels:
446394 # severity: error
447395 rules : []
448-
449396# # IDA Auth needs both internal & external access.
450397istio :
451398 enabled : true
@@ -467,8 +414,6 @@ istio:
467414 prefix : /idauthentication/v1/identity-key-binding
468415 - uri :
469416 prefix : /idauthentication/v1/vci-exchange
470-
471417enable_insecure : false
472-
473418springConfigNameEnv :
474419activeProfileEnv :
0 commit comments