...
| Group | Property name | Origin | Default | Description |
|---|---|---|---|---|
| external_cert | image_tag | plugin | nexus3.onap.org:10001/onap/org.onap.aaf.certservice.aaf-certservice-client:$VERSION | Image CertService client image name and version |
| request_url | plugin | https://aaf-cert-service:8443/v1/certificate/ | URL to Cert Service API | |
| timeout | plugin | 30000 | Request timeout. Needs to be taken from global CMPv2 helm variable | |
| country | plugin | US | Country name in ISO 3166-1 alpha-2 format, for which certificate will be created. Needs to be taken from global CMPv2 helm variable | |
| organization | plugin | Linux-Foundation | Organization name, for which certificate will be created. Needs to be taken from global CMPv2 helm variable | |
| state | plugin | California | State name, for which certificate will be created. Needs to be taken from global CMPv2 helm variable | |
| organizational_unit | plugin | ONAP | Organizational unit name, for which certificate will be created. Needs to be taken from global CMPv2 helm variable | |
| location | plugin | San-Francisco | Location name, for which certificate will be created. Needs to be taken from global CMPv2 helm variable |
...
Optionally adjust components (e.g. DFC) which use different certificates internally and externally to support the same truststore and keystore on both traffics.
Truststore merger properties
...
| Property name | Example | Description |
|---|---|---|
| TRUSTSTORES | /etc/dcae/truststore.jks:/etc/dcae/truststore2.p12:/etc/dcae/cacert.pem | List of truststores to be merged. Certificates from all provided truststores will be added to first provided truststore after success execution. |
| TRUSTSTORES_PASSWORDS | /etc/dcae/truststore.pass:/etc/dcae/truststore2.pass:/etc/dcae/cacert.key | List of passwords to provided truststores - order must be the same as in truststores |
...
Truststore merger flow
| Gliffy Diagram | ||||||
|---|---|---|---|---|---|---|
|
Policy to generate new aliases
...
for certificates from PEM files
Use as prefix pem-trusted-certificate- and $INDEX
Extra K8s plugin property
...
| Group | Property name | Origin | Default | Description |
|---|---|---|---|---|
| external_cert | trust_merger_image_tag | plugin | nexus3.onap.org:10001/onap/org.onap.dcae.trust-merger:$VERSION |
| Truststore merger image name and version |
Option 2 (Adjust DCAE components to support two internal and external truststores and keystores)
...