DCAE ComponentsProtocol (based on K8S Service)HTTPS if OptionalAAF Certificates if OptionalClient/Server (based on API if any exposed)Secure TopicSVC mesh complaintComment
VESCollectorHTTPS/HTTPYESYESServerNOYES
TCAgen2HTTPNAYES?NANOYES

Need to verify deployment with tlsServer: false

AAF certificate required for AAI communication

PRHHTTPNAYESClientNOYESNeed to verify deploy with tlsServer: false; possibly certificate required for AAI communication
HV-VESHTTPS/HTTPYESYESServerNO (message-router-kafka:9092)YESNeed to verify deploy with tlsServer: false + security.sslDisable: true
DFCHTTPS/HTTPYES
Default is HTTPS, but can be switched to HTTP 
NOServerDR – Yes; MR – NoNO

DCAEGEN2-3039 - DFC - Make certificate dependencies configurable (planned in Kohn)


PM-MapperHTTPS/HTTPYES
Default is HTTPS, but can be switched to HTTP 
NOClientDR – Yes, MR - YesNO

DCAEGEN2-3032 - Migrate PM-Mapper to use unauthenticated topic (Done - Jakarta)

DCAEGEN2-3038 - PM-Mapper - Make certificate dependencies configurable  (Done - Jakarta)

DR feed will be switched to http in Kohn

BBS-EventprocessorHTTPNAYESClientYESYES?

Need to verify deploy with tlsServer: false + application.ssl.enableDmaapCertAuth: false

Service deprecated with J release

Heartbeat MSHTTPNAYESNANOYESNeed to verify deploy with tlsServer: false
DL-FeederHTTPNAYESNANOYESCertificate probably not required
DL-AdminUIHTTPNAYESServerNAYESCertificate probably not required
DL-DESHTTPNAYESServerNAYESCertificate probably not required
KPI-MSHTTPNAYESClient?YES (cambria client)YES

DCAEGEN2-3033 - Migrate KPI-MS to use unauthenticated topic - DONE (J)

(has dependency on DCAEGEN2-3032)

PMSHHTTPS (default)/HTTPYESYESClientYESYES12/3/21 - Port hardcoded to 8443 (supports as https or http)
Need to verify deploy with tlsServer: false + application_config enable_tls: false
RESTConfHTTPYESNOClientNO (cambria client)NO

03/04/22 - Dependent on AAF certs; if not mounted app/readiness fails.

DCAEGEN2-3095 - RESTConf - Make certificate dependencies configurable

SliceAnalysis MSHTTPYESYESServer?YES (cambria client)YES

DCAEGEN2-3034 - Migrate SliceAnalysis MS to use unauthenticated topic

(has dependency on DCAEGEN2-3032 DONE (J)

SNMPTRap CollectorUDPNAYESNANOYES
SON-HandlerHTTPS(helm)/HTTP (blueprint)YESYESClientYES (cambria client)YES

DCAEGEN2-3035 - Migrate SON-Handler to use unauthenticated topic  DONE (J)


VES-MapperHTTPNAYESNANOYES
DCAE MS HealthcheckHTTPNAYESServerNOYES
VES-OpenAPI managerHTTPNAYESNANOYES
CBSHTTPS/HTTPYESYESServerNOYESService deprecated with J release