...
** - property available in blueprint, doesn't need to be changed every deployment
*** - property not available in blueprint, but available in K8s plugin configuration. The same for all blueprints
| Group | Property name | Type (input*/blueprint**/plugin***) | Default | Description |
|---|---|---|---|---|
| external_cert | use_external_tls | input | true | A boolean that indicates whether the component uses AAF CertService to acquire operator certificate to protect external (between xNFs and ONAP) traffic. For a time being only operator certificate from CMPv2 server is supported |
| external_cert_directory | blueprint | /opt/app/dcae-certificate/external_cert | Directory where operator certificate and trusted certs should be created | |
| image_tag | inputplugin | nexus3.onap.org:10001/onap/org.onap.aaf.certservice.aaf-certservice-client:$VERSION | Image name and version | |
| request_url | blueprintplugin | https://aaf-cert-service-service:8443/v1/certificate/ | URL to Cert Service API | |
| timeout | blueprintplugin | 30000 | Request timeout | |
| ca_name | input | RA_TEST | Name of Certificate Authority configured on CertService side (in cmpServers.json). Default RA_TEST corresponds to default CMPv2 testing configuration. | |
| common_name | input | <Specific for every blueprint> | Common name which should be present in certificate. Specific for every blueprint (e.g. dcae-ves-collector for VES) | |
| sans | input | <Specific for every blueprint> | List of Subject Alternative Names (SANs) which should be present in certificate. Delimiter - : Should contain common_name value and other FQDNs under which given component is accessible, e.g. if xNFs uses ves-collector in request URL, such should be also present in SANs - e.g. dcae-ves-collector:ves-collector. | |
| country | input | US | Country name in ISO 3166-1 alpha-2 format, for which certificate will be created | |
| organization | input | Linux-Foundation | Organization name, for which certificate will be created | |
| state | input | California | State name, for which certificate will be created | |
| organizational_unit | input | ONAP | Organizational unit name, for which certificate will be created | |
| location | input | San-Francisco | Location name, for which certificate will be created |
...