cd kubernetes/appc
mkdir -p resources/config/certs
download and copy org.onap.appc.p12 file from this page's comment below to resources/config/certs
Change cadi.properties
edit resources/config/appc/opt/onap/appc/data/properties/cadi.properties
replace the line:
...
cadi_keystore_password=enc:4DVUTKvRCCtebQrKskDsuKFIHLzOf2M9XxNOhVIK4xb
to
cadi_keystore_password=enc:tQTHVtbdCuzqrQY1TBRt9SkFL9tCY3OzwbsfaVyAa2dOfZlI0krFOJSBnkm1WdGr
Update the secrets.yaml
Add the following to the end of templates/configmapsecrets.yaml
---
apiVersion: v1
kind: ConfigMapSecret
metadata:
name: {{ include "common.fullname" . }}-certs
namespace: {{ include "common.namespace" . }}
labels:
app: {{ include "common.name" . }}-preload
chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
release: {{ .Release.Name }}
heritage: {{ .Release.Service }}
type: Opaque
data:
{{ tpl (.Files.Glob "resources/config/certs/*").AsConfig AsSecrets . | indent 2 }}
Update the statefulset.yaml
...
- mountPath: /opt/onap/appc/data/stores/org.onap.appc.p12
name: {{ include "common.name" .}}- certs
subPath: org.onap.appc.p12
Add the following lines in templates/deploymentstatefulset.yaml under volumes:
- name : {{ include "common.name" . }}- certs
configMap secret:
name secretName: {{ include "common.fullname" . }}-certs
...