3 Customizing SEPP
This section explains the configuration parameters of the SEPP.
ocsepp-custom-values-1.4.0.yaml
file as per the required
parameters:
- Go to the Oracle Help Center (OHC) Web site.
- Navigate to Industries->Communications->Cloud Native Core->Release 2.3.1.
- Click the SEPP Custom Template link to download the zip file.
- Unzip the file to get ocscp-custom-configTemplates-1.4.0.0.0 file that contains the ocsepp-custom-configTemplates-1.4.0.0.0. This file is used during installation.
- Customize the ocsepp-custom-values-1.4.0.yaml file.
- Save the updated ocsepp-custom-values-1.4.0.yaml file in the helm chart directory.
Configuration Parameters
This section includes information about the configuration parameters of OCSEPP.
Parameter | Description | Mandatory (M)/ Optional(O) | Default value |
---|---|---|---|
dockerRegistry | Docker registry name | M | helm-gateway-repo |
dbCredSecretName | Kubernetes Secret containing DB credentials | M | ocsepp-mysql-cred |
nameSpace | NameSpace where secret is deployed | M | seppsvc |
mysql.primary.host | Mysql Primary hostname or IP | M | sepp-mysql-svc |
mysql.primary.port | Mysql Primary port | M | 3306 |
mysql.secondary.host | Mysql Secondary hostname or IP | M | sepp-mysql-svc |
mysql.secondary.host | Mysql Secondary port | M | 3306 |
seppDbName | Name of Sepp database | M | seppdb |
nfName | The value of nfName is specified as ocnf which is stands of Oracle NF | M | sepp |
nrfClientNfManagementEnable | Global control to enable/disable deployment of NF Management service | M | true |
envJaegerAgentHost | Jaeger tracing host | O | "occne-tracer-jaeger-agent.occne-infra" |
envJaegerAgentPort | Jaeger tracing port | O | 6831 |
nrfClientNodePort | Provide value for NodePort | O | 0 |
imageServiceDetector | Readiness-Detector image details with tag | M | nrf-client/readiness-detector:helm_nrfclient_tag |
configServerEnable | Service Enable or not | M | true |
configServerFullNameOverride | Config-Server Service. Shall be used as {{ ReleaseName }}-configServerFullNameOverride | M | ocpm-config |
envMysqlHost | Mysql host | M | sepp-mysql-svc ( refers to database which nrfclient will connect) |
envMysqlPort | Mysql port | M | 3306 |
appinfoServiceEnable | lobal Control to disable appinfo service | O | true |
deploymentNrfClientService.envNfNamespace | If no services are to be monitored, envNfNamespace,envNfType,envConsumeSvcName can be left blank | O | |
deploymentNrfClientService.envNfType | Services to be monitored by performance service nftype | O | |
deploymentNrfClientService.envConsumeSvcName | Services to be monitored by performance service name | O | |
deploymentNrfClientService.envEgressGatewayFullnameOverride | Egress gateway Host. Shall be used as {{ ReleaseName }}-envEgressGatewayFullnameOverride | M | plmn-egress-gateway |
deploymentNrfClientService.envEgressGatewayPort | Egress gateway Port | M | 8080 |
deploymentNrfClientService.nfApiRoot.nodeSelectorEnabled | nodeSelector enabling or disabling | O | false |
deploymentNrfClientService.nfApiRoot.nodeSelectorKey | nodeSelector enabling or disabling | O | zone |
deploymentNrfClientService.nfApiRoot.nodeSelectorValue | Schedule on node having this value | O | app |
privilegedDbCredSecretName | K8s Secret containing Database/user/password for DB Hooks for creating tables | M | ocsepp-mysql-cred |
releaseDbName | Mysql Release Database Name | M | seppdb |
localProfile.name | SEPP Local Profile Name | M | SEPP-1 |
localProfile.plmn.mcc | SEPP Local MCC | M | 311 |
localProfile.plmn.mnc | SEPP Local MNC | M | 282 |
localProfile.domain | SEPP Local Domain | M | oracle.com |
localProfile.interPlmnFqdn | SEPP FQDN for Inter PLMN Access | M | sepp1.inter.oracle.com |
localProfile.intraPlmnFqdn | SEPP FQDN for Intra PLMN Access | M | 10.75.236.42:30053 |
localProfile.supportedSecurityCapabilityList | SEPP Supported Security capability ( Only TLS is supported in this release) | M | TLS |
localProfile.apiPrefix | SEPP apiPrefix | O | |
localProfile.retryInterval | SEPP Audit retry interval ( For handshake Retry) | M | 300000 (In milli seconds) |
localProfile.maxRetry | SEPP Audit Max retry count ( for handshake retry), Default is -1 means infinite | M | -1 (-1 means no limit on retry count. Mean infinite.) |
localProfile.nfInstanceId | SEPP NF Instance Id. | M | sepp1 |
SL. No | Parameter | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|---|
1 | image.repository | Repo location of image | M | reg-1:5000 |
2 | image.name | Name of image | M | ocsepp-cn32f-svc |
3 | image.tag | Tag of image | M | 1.4.0 |
4 | image.pullPolicy | This setting indicates if the image needs to be pulled or not | M | Always |
5 | replicaCount | Number of replicas for the pod | M | 1 |
6 | minAvailable | Number minimum available of replicas. | M | 1 |
7 | minReplicas | Minimum Number of Relicas | M | 1 |
8 | maxReplicas | Maximum num of replicas of pod | M | 3 |
9 | log.root | Root log level | M | WARN |
10 | log.sepp | Sepp sepecific log level | M | INFO |
11 | resources.limit.cpu | Resource Requirements(limit of cpu) | M | 2 |
12 | resources.limit.memory | Resource Requirements(limit of memory) | M | 2 |
13 | resources.requests.cpu | Resource Requirements(requested cpu) | M | 1 |
14 | resources.requests.memory | Resource Requirements(requested memory) | M | 1 |
15 | resources.target.averageCpuUtil | Resource Requirements(avg cpu utilisation) | M | 50 |
16 | jaegerTracingEnabled | Enable Jaeger trace | O | false |
17 | bodyInTraceEnabled | Enable Jaeger trace for Body | O | false |
18 | openTracing.jaeger.udpSender.host | Jaeger host | O | occne-tracer-jaeger-agent.occne-infra |
19 | openTracing.jaeger.udpSender.port | Jaeger port | O | 6831 |
20 | openTracing.jaeger.logSpans | Jaeger port | O | false |
21 | openTracing.jaeger.probabilisticSamplingRate | Trace capture in percentage | O | 0.5 (Note: it means 50%) |
22 | nrfconfiguration.service.type | Kind of Service that will be used for this Deployment | O | |
23 | service.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Service | O | |
24 | service.customExtension.anOtations | Custom Annotations that needs to be added to nrfconfiguration specific Services | O | |
25 | deployment.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Deployment | O | |
25 | deployment.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Deployment | O |
S. No | Parameter | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|---|
1 | image.repository | Repo location of image | M | reg-1:5000 |
2 | image.name | Name of image | M | ocsepp-pn32c-svc |
3 | image.tag | Tag of image | M | 1.4.0 |
4 | image.pullPolicy | This setting indicates if the image needs to be pulled or not | M | Always |
5 | minReplicas | Minimum Number of Relicas | M | 1 |
6 | maxReplicas | Maximum num of replicas of pod | M | 5 |
7 | log.root | Root log level | M | WARN |
8 | log.sepp | Sepp sepecific log level | M | WARN |
9 | resources.limit.cpu | Resource Requirements(limit of cpu) | M | 2 |
10 | resources.limit.memory | Resource Requirements(limit of memory) | M | 2Gi |
11 | resources.requests.cpu | Resource Requirements(requested cpu) | M | 1 |
12 | resources.requests.memory | Resource Requirements(requested memory) | M | 1Gi |
13 | resources.target.averageCpuUtil | Resource Requirements(avg cpu utilisation) | M | 50 |
14 | jaegerTracingEnabled | Enable Jaeger trace | O | false |
15 | bodyInTraceEnabled | Enable Jaeger trace for Body | O | false |
16 | openTracing.jaeger.udpSender.host | Jaeger host | O | occne-tracer-jaeger-agent.occne-infra |
17 | openTracing.jaeger.udpSender.port | Jaeger port | O | 6831 |
18 | openTracing.jaeger.logSpans | O | false | |
19 | openTracing.jaeger.probabilisticSamplingRate | Trace capture in percentage | O | 0.5 (Note: it means 50%) |
20 | nrfconfiguration.service.type | Kind of Service that will be used for this Deployment | O | |
21 | service.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Service | O | |
22 | service.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Services | O | |
23 | deployment.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Deployment | O | |
24 | deployment.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Deployment | O |
S. No | Parameter | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|---|
1 | image.repository | Repo location of image | M | reg-1:5000 |
2 | image.name | Name of image | M | ocsepp-cn32f-svc |
3 | image.tag | Tag of image | M | 1.4.0 |
4 | image.pullPolicy | This setting indicates if the image needs to be pulled or not | M | Always |
7 | minReplicas | Minimum Number of Relicas | M | 1 |
8 | maxReplicas | Maximum num of replicas of pod | M | 5 |
9 | log.root | Root log level | M | WARN |
10 | log.sepp | Sepp sepecific log level | M | WARN |
11 | resources.limit.cpu | Resource Requirements(limit of cpu) | M | 4 |
12 | resources.limit.memory | Resource Requirements(limit of memory) | M | 4Gi |
13 | resources.requests.cpu | Resource Requirements(requested cpu) | M | 2 |
14 | resources.requests.memory | Resource Requirements(requested memory) | M | 2Gi |
15 | resources.target.averageCpuUtil | Resource Requirements(avg cpu utilisation) | M | 50 |
16 | jaegerTracingEnabled | Enable Jaeger trace | O | false |
17 | bodyInTraceEnabled | Enable Jaeger trace for Body | O | false |
18 | openTracing.jaeger.udpSender.host | Jaeger host | O | occne-tracer-jaeger-agent.occne-infra |
19 | openTracing.jaeger.udpSender.port | Jaeger port | O | 6831 |
20 | openTracing.jaeger.logSpans | To enable the span | O | false |
21 | openTracing.jaeger.probabilisticSamplingRate | Trace capture in percentage | O | 0.5 (Note: it means 50%) |
22 | nrfconfiguration.service.type | Kind of Service that will be used for this Deployment | O | |
23 | service.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Service | O | |
24 | service.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Services | O | |
25 | deployment.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Deployment | O | |
26 | deployment.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Deployment | O |
S. No | Parameter | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|---|
1 | image.repository | Repo location of image | M | reg-1:5000 |
2 | image.name | Name of image | M | ocsepp-pn32f-svc |
3 | image.tag | Tag of image | M | 1.4.0 |
4 | image.pullPolicy | This setting indicates if the image needs to be pulled or not | M | Always |
7 | minReplicas | Minimum Number of Relicas | M | 1 |
8 | maxReplicas | Maximum num of replicas of pod | M | 5 |
9 | log.root | Root log level | M | WARN |
10 | log.sepp | Sepp sepecific log level | M | WARN |
11 | resources.limit.cpu | Resource Requirements(limit of cpu) | M | 4 |
12 | resources.limit.memory | Resource Requirements(limit of memory) | M | 4Gi |
13 | resources.requests.cpu | Resource Requirements(requested cpu) | M | 2 |
14 | resources.requests.memory | Resource Requirements(requested memory) | M | 2Gi |
15 | resources.target.averageCpuUtil | Resource Requirements(avg cpu utilisation) | M | 50 |
16 | jaegerTracingEnabled | Enable Jaeger trace | O | false |
17 | bodyInTraceEnabled | Enable Jaeger trace for Body | O | false |
18 | openTracing.jaeger.udpSender.host | Jaeger host | O | occne-tracer-jaeger-agent.occne-infra |
19 | openTracing.jaeger.udpSender.port | Jaeger port | O | 6831 |
20 | openTracing.jaeger.logSpans | To enable the span | O | false |
21 | openTracing.jaeger.probabilisticSamplingRate | Trace capture in percentage | O | 0.5 (Note: it means 50%) |
22 | nrfconfiguration.service.type | Kind of Service that will be used for this Deployment | O | |
23 | service.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Service | O | |
24 | service.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Services | O | |
25 | deployment.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Deployment | O | |
26 | deployment.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Deployment | O |
S. No | Parameter | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|---|
1 | image.repository | Repo location of image | M | reg-1:5000 |
2 | image.name | Name of image | M | ocsepp-config-mgr-svc |
3 | image.tag | Tag of image | M | 1.4.0 |
4 | image.pullPolicy | This setting indicates if the image needs to be pulled or not | M | Always |
5 | log.root | Root log level | M | WARN |
6 | log.sepp | Sepp sepecific log level | M | WARN |
7 | resources.limit.cpu | Resource Requirements(limit of cpu) | M | 2 |
8 | resources.limit.memory | Resource Requirements(limit of memory) | M | 2Gi |
9 | resources.requests.cpu | Resource Requirements(requested cpu) | M | 1 |
10 | resources.requests.memory | Resource Requirements(requested memory) | M | 1Gi |
11 | nrfconfiguration.service.type | Kind of Service that will be used for this Deployment | O | |
12 | service.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Service | O | |
13 | service.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Services | O | |
14 | deployment.customExtension.labels | Custom Labels that needs to be added to nrfconfiguration specific Deployment | O | |
15 | deployment.customExtension.annotations | Custom Annotations that needs to be added to nrfconfiguration specific Deployment | O |
Table 3-1 n32-ingress-gateway
Name | Description | Mandatory(M)/ Optional(O) | Default Value |
---|---|---|---|
cmName | To enable the span | O | ingressgateway |
prefix | When set to some value then that value will be used in the names of resources along with release name | M | 'n32' |
global.publicHttpSignalingPort | Http Signalling port | M | 80 |
gloabl.publicHttpsSignallingPort | Https Signalling port | M | 443 |
gloabl.serviceAccountName | Service Account name | O | |
global.type | type of service | M | LoadBalancer
(Note: Possible values are ClusterIP, NodePort, LoadBalancer and ExternalName) |
global.metalLbIpAllocationEnabled | Enable or disable IP Address allocation from Metallb Pool | O | true |
global.metalLbIpAllocationAnnotation | Address Pool Annotation for Metallb | O | "metallb.universe.tf/address-pool: signaling" |
global.staticIpAddressEnabled |
If Static load balancer IP needs to be set, then set staticIpAddressEnabled flag to true and provide value for staticIpAddress Else random IP will be assigned by the metalLB from its IP Pool |
O | false |
global.staticIpAddress | StaticIp | O | 10.75.212.60 |
global.staticNodePortEnabled | Node Port Enabled | O | true |
global.staticHttpNodePort | Http Node Port | M | 30075 |
global.staticHttpsNodePort | Https Node Port | M | 30043 |
image.name | Image name of ingress gateway | O | ocingress_gateway |
image.tag | Image Tag name of ingress gateway | O | helm-gateway-tag |
image.pullPolicy | Image Pull Policy | O | Always |
initContainersImage.name | Image name of initContainer | O | configurationinit |
initContainersImage.tag | Image tag name of initContainer | O | helm-gateway-config-tag |
initContainersImage.pullPolicy | Image Pull Policy | O | Always |
updateContainersImage.name | Image name of updateContainer | O | configurationupdate |
updateContainersImage.tag | Image tag name of updateContainer | O | helm-gateway-config-tag |
updateContainersImage.pullPolicy | Image Pull Policy | O | Always |
service.ssl.tlsVersion | TLS Version | M | TLSv1.2 |
service.ssl.privateKey.k8SecretName | Name of the privatekey secret | M | ocsepp-n32-secret |
service.ssl.privateKey.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.privateKey.rsa.fileName | rsa private key file name | M | rsa_private_key_pkcs1.pem |
service.ssl.privateKey.ecdsa.fileName | ecdsa private key file name | M | ssl_ecdsa_private_key.pem |
service.ssl.certificate.k8SecretName | Name of the certificate secret | M | ocsepp-n32-secret |
service.ssl.certificate.k8NameSpace | Namespace of certificate | M | seppsvc |
service.ssl.certificate.rsa.fileName | rsa certificate key file name | M | ocsepp.cer |
service.ssl.certificate.ecdsa.fileName | ecdsa certificate key file name | M | ssl_ecdsa_certificate.crt |
service.ssl.caBundle.k8SecretName | Name of the caBundle secret | M | ocsepp-n32-secret |
service.ssl.caBundle.k8NameSpace | Namespace of private | M | seppsvc |
service.ssl.caBundle.fileName | rsa private key file name | M | caroot.cer |
service.ssl.keyStorePassword.k8SecretName | Name of the privatekey secret | M | ocsepp-n32-secret |
service.ssl.keyStorePassword.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.keyStorePassword.fileName | File name that has password for keyStore | M | key.txt |
service.ssl.trustStorePassword.k8SecretName | Name of the privatekey secret | M | ocsepp-n32-secret |
service.ssl.trustStorePassword.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.trustStorePassword.fileName | File name that has password for trustStore | M | trust.txt |
service.ssl.initialAlgorithm | Algorithm based on the certificate | M | RSA256 |
service.customExtension.labels | Custom Labels that needs to be added to sepp specific Service | O | |
service.customExtension.annotations | Custom Annotations that needs to be added to sepp specific Services | O | |
deployment.customExtension.labels | Custom Labels that needs to be added to sepp specific deployment | O | |
deployment.customExtension.annotations | Custom Annotations that needs to be added to sepp specific deployment | O | |
ports.containerPort | ContainerPort represents a network port in a single container | O | 8081 |
ports.containersslPort | Ssl port of the container | O | 8443 |
ports.actuatorPort | ActuatorPort | O | 9090 |
log.level.root | Log level for root logs | O | WARN |
log.level.ingress | Log level for ingress logs | O | WARN |
log.level.oauth | Log level for oauth logs | O | WARN |
log.level.updateContainer | log.level.updateContainer | O | WARN |
log.level.cncc.security | Log level for cncc logs | O | WARN |
log.traceIdGenerationEnabled | TraceId Generation is Enabled | O | true |
resources.limits.cpu | CPU Limit | O | 4 |
resources.limits.initServiceCpu | Init Container CPU Limit | O | 0.5 |
resources.limits.updateServiceCpu | Update Container CPU Limit | O | 0.5 |
resources.limits.memory | Memory Limit | O | 4Gi |
resources.limits.updateServiceMemory | Update Container Memory Limit | O | 0.5Gi |
resources.limits.initServiceMemory | int Container Memory Limit | O | 0.5Gi |
resources.requests.cpu | CPU for requests | O | 2 |
resources.requests.initServiceCpu | Init Container CPU for requests | O | 0.5 |
resources.requests.updateServiceCpu | Update Container CPU for requests | O | 0.5 |
resources.requests.memory | Memory for requests | O | 2Gi |
resources.requests.updateServiceMemory | Update Container Memory for requests | O | 0.5Gi |
resources.requests.initServiceMemory | Init Container Memory for requests | O | 0.5Gi |
resources.target.averageCpuUtil | O | 80 | |
minAvailable | Number of Pods must always be available, even during a disruption | O | 1 |
minReplicas | Min replicas to scale to maintain an average CPU utilization | O | 1 |
maxReplicas | Max replicas to scale to maintain an average CPU utilization | O | 5 |
jaegerTracingEnabled | Enable jaeger tracing | O | false |
openTracing.jaeger.udpSender.host | Jaeger Host | O | occne-tracer-jaeger-agent.occne-infra |
openTracing.jaeger.udpSender.port | Jaeger Port | O | 6831 |
openTracing.jaeger.probabilisticSampler | Trace capture in percentage | O | 0.5 |
allowedCipherSuites | Allowed Ciphers | O |
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25 - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
cipherSuites | Supported Cipher Suites in Ingress | O |
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
initssl | Enabling it generates key and trust store for https support | O | true |
enableIncomingHttp | Enabling it for incoming http request | O | false |
enableIncomingHttps | Enabling it for incoming https request | O | true |
enableOutgoingHttps | Enabling it for outgoing https request | O | false |
needClientAuth | This must be true if client certificate identity is required in the header x-custom-ingress-client-identity | O | true |
rateLimiting.enabled | Ratelimiting feature enabled | O | false |
routeRateLimiting.enabled | Route based ratelimiting feature enabled | O | false |
globalIngressRateLimiting.enabled | Global rate limiting is enabled | O | false |
globalIngressRateLimiting.duration | Iterations of time duration(In seconds) for which bucketCapacity and refillRate are reset. | O | 1 |
globalIngressRateLimiting.burstCapacity | Holds maximum number of tokens in the bucket for the given duration | O | 1 |
globalIngressRateLimiting.refillRate | Number of tokens to be added to the bucket for the given duration | O | 1 |
Name | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|
cmName | Name of the config-map | O | ingressgateway |
prefix | When set to some value then that value will be used in the names of resources along with release name | M | 'plmn' |
global.publicHttpSignalingPort | Http Signalling port | M | 80 |
gloabl.publicHttpsSignallingPort | Https Signalling port | M | 443 |
gloabl.serviceAccountName | Service Account name | O | |
global.type | type of service | M | LoadBalancer
(Note: Possible values are ClusterIP, NodePort, LoadBalancer and ExternalName) |
global.metalLbIpAllocationEnabled | Enable or disable IP Address allocation from Metallb Pool | O | true |
global.metalLbIpAllocationAnnotation | Address Pool Annotation for Metallb | O | "metallb.universe.tf/address-pool: signaling" |
global.staticIpAddressEnabled |
If Static load balancer IP needs to be set, then set staticIpAddressEnabled flag to true and provide value for staticIpAddress Else random IP will be assigned by the metalLB from its IP Pool |
O | false |
global.staticIpAddress | StaticIp | O | 10.75.212.60 |
global.staticNodePortEnabled | Node Port Enabled | O | true |
global.staticHttpNodePort | Http Node Port | M | 30075 |
global.staticHttpsNodePort | Https Node Port | M | 30043 |
image.name | Image name of ingress gateway | O | ocingress_gateway |
image.tag | Image Tag name of ingress gateway | O | helm-gateway-tag |
image.pullPolicy | Image Pull Policy | O | Always |
initContainersImage.name | Image name of initContainer | O | configurationinit |
initContainersImage.tag | Image tag name of initContainer | O | helm-gateway-config-tag |
initContainersImage.pullPolicy | Image Pull Policy | O | Always |
updateContainersImage.name | Image name of updateContainer | O | configurationupdate |
updateContainersImage.tag | Image tag name of updateContainer | O | helm-gateway-config-tag |
updateContainersImage.pullPolicy | Image Pull Policy | O | Always |
service.ssl.tlsVersion | TLS Version | M | TLSv1.2 |
service.ssl.privateKey.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.privateKey.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.privateKey.rsa.fileName | rsa private key file name | M | rsa_private_key_pkcs1.pem |
service.ssl.privateKey.ecdsa.fileName | ecdsa private key file name | M | ssl_ecdsa_private_key.pem |
service.ssl.certificate.k8SecretName | Name of the certificate secret | M | ocsepp-plmn-secret |
service.ssl.certificate.k8NameSpace | Namespace of certificate | M | seppsvc |
service.ssl.certificate.rsa.fileName | rsa certificate key file name | M | ocsepp.cer |
service.ssl.certificate.ecdsa.fileName | ecdsa certificate key file name | M | ssl_ecdsa_certificate.crt |
service.ssl.caBundle.k8SecretName | Name of the caBundle secret | M | ocsepp-plmn-secret |
service.ssl.caBundle.k8NameSpace | Namespace of private | M | seppsvc |
service.ssl.caBundle.fileName | rsa private key file name | M | caroot.cer |
service.ssl.keyStorePassword.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.keyStorePassword.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.keyStorePassword.fileName | File name that has password for keyStore | M | key.txt |
service.ssl.trustStorePassword.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.trustStorePassword.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.trustStorePassword.fileName | File name that has password for trustStore | M | trust.txt |
service.ssl.initialAlgorithm | Algorithm based on the certificate | M | RSA256 |
service.customExtension.labels | Custom Labels that needs to be added to sepp specific Service | O | |
service.customExtension.annotations | Custom Annotations that needs to be added to sepp specific Services | O | |
deployment.customExtension.labels | Custom Labels that needs to be added to sepp specific deployment | O | |
deployment.customExtension.annotations | Custom Annotations that needs to be added to sepp specific deployment | O | |
ports.containerPort | ContainerPort represents a network port in a single container | O | 8081 |
ports.containersslPort | Ssl port of the container | O | 8443 |
ports.actuatorPort | ActuatorPort | O | 9090 |
log.level.root | Log level for root logs | O | WARN |
log.level.ingress | Log level for ingress logs | O | WARN |
log.level.oauth | Log level for oauth logs | O | WARN |
log.level.updateContainer | Log level for update container logs | O | WARN |
log.level.cncc.security | Log level for cncc logs | O | WARN |
log.traceIdGenerationEnabled | TraceId Generation is Enabled | O | true |
resources.limits.cpu | CPU Limit | O | 4 |
resources.limits.initServiceCpu | Init Container CPU Limit | O | 0.5 |
resources.limits.updateServiceCpu | Update Container CPU Limit | O | 0.5 |
resources.limits.memory | Memory Limit | O | 4Gi |
resources.limits.updateServiceMemory | Update Container Memory Limit | O | 0.5Gi |
resources.limits.initServiceMemory | int Container Memory Limit | O | 0.5Gi |
resources.requests.cpu | CPU for requests | O | 2 |
resources.requests.initServiceCpu | Init Container CPU for requests | O | 0.5 |
resources.requests.updateServiceCpu | Update Container CPU for requests | O | 0.5 |
resources.requests.memory | Memory for requests | O | 3Gi |
resources.requests.updateServiceMemory | Update Container Memory for requests | O | 0.5Gi |
resources.requests.initServiceMemory | Init Container Memory for requests | O | 0.5Gi |
resources.target.averageCpuUtil | Resource Requirements(avg cpu utilisation) | O | 80 |
minAvailable | Number of Pods must always be available, even during a disruption | O | 1 |
minReplicas | Min replicas to scale to maintain an average CPU utilization | O | 1 |
maxReplicas | Max replicas to scale to maintain an average CPU utilization | O | 5 |
jaegerTracingEnabled | Enable jaeger tracing | O | false |
openTracing.jaeger.udpSender.host | Jaeger Host | O | occne-tracer-jaeger-agent.occne-infra |
openTracing.jaeger.udpSender.port | Jaeger Port | O | 6831 |
openTracing.jaeger.probabilisticSampler | Trace capture in percentage | O | 0.5 |
allowedCipherSuites | Allowed Ciphers |
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25 - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
|
cipherSuites | Supported Cipher Suites in Ingress | O |
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
initssl | Enabling it generates key and trust store for https support | O | true |
enableIncomingHttp | Enabling it for incoming http request | O | true |
enableIncomingHttps | Enabling it for incoming https request | O | true |
enableOutgoingHttps | Enabling it for outgoing https request | O | false |
needClientAuth | This must be true if client certificate identity is required in the header x-custom-ingress-client-identity | O | true |
rateLimiting.enabled | Ratelimiting feature enabled | O | false |
routeRateLimiting.enabled | Route based ratelimiting feature enabled | O | false |
globalIngressRateLimiting.enabled | Global rate limiting is enabled | O | false |
globalIngressRateLimiting.duration | Iterations of time duration(In seconds) for which bucketCapacity and refillRate are reset. | O | 1 |
globalIngressRateLimiting.burstCapacity | Holds maximum number of tokens in the bucket for the given duration | O | 1 |
globalIngressRateLimiting.refillRate | Number of tokens to be added to the bucket for the given duration | O | 1 |
Table 3-2 n32-egress-gateway
Name | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|
cmName | Name of the configmap | O | egressgateway |
prefix | When set to some value then that value will be used in the names of resources along with release name | M | plmn |
serviceEgressGateway.port | Egress gw port | M | 8080 |
serviceEgressGateway.sslPort | SSL Port | M | 8442 |
serviceEgressGateway.actuatorPort | Actuator Port | M | 9090 |
deploymentEgressGateway.image | Image name of ingress gateway | O | ocingress_gateway |
deploymentEgressGateway.imageTag | Image Tag name of ingress gateway | O | helm-gateway-tag |
deploymentEgressGateway.pullPolicy | Image Pull Policy | O | Always |
initContainersImage.name | Image name of initContainer | O | configurationinit |
initContainersImage.tag | Image tag name of initContainer | O | helm-gateway-config-tag |
initContainersImage.pullPolicy | Image Pull Policy | O | Always |
updateContainersImage.name | Image name of updateContainer | O | configurationupdate |
updateContainersImage.tag | Image tag name of updateContainer | O | helm-gateway-config-tag |
updateContainersImage.pullPolicy | Image Pull Policy | O | Always |
initssl | Enabling it generates key and trust store for https support | O | true |
enableIncomingHttps | Enabling it for incoming http request | O | false |
enableOutgoingHttps | Enabling it for incoming https request | O | true |
log.level.root | Log level for root logs | O | WARN |
log.level.egress | Log level for ingress logs | O | WARN |
log.level.oauth | Log level for oauth logs | O | WARN |
log.level.updateContainer | Log level for update container logs | O | WARN |
service.type | Service type | M | ClusterIP |
service.ssl.tlsVersion | TLS Version | M | TLSv1.2 |
service.ssl.privateKey.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.privateKey.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.privateKey.rsa.fileName | rsa private key file name | M | rsa_private_key_pkcs1.pem |
service.ssl.privateKey.ecdsa.fileName | ecdsa private key file name | M | ssl_ecdsa_private_key.pem |
service.ssl.certificate.k8SecretName | Name of the certificate secret | M | ocsepp-plmn-secret |
service.ssl.certificate.k8NameSpace | Namespace of certificate | M | seppsvc |
service.ssl.certificate.rsa.fileName | rsa certificate key file name | M | ocsepp.cer |
service.ssl.certificate.ecdsa.fileName | ecdsa certificate key file name | M | ssl_ecdsa_certificate.crt |
service.ssl.caBundle.k8SecretName | Name of the caBundle secret | M | ocsepp-plmn-secret |
service.ssl.caBundle.k8NameSpace | Namespace of private | M | seppsvc |
service.ssl.caBundle.fileName | rsa private key file name | M | caroot.cer |
service.ssl.keyStorePassword.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.keyStorePassword.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.keyStorePassword.fileName | File name that has password for keyStore | M | key.txt |
service.ssl.trustStorePassword.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.trustStorePassword.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.trustStorePassword.fileName | File name that has password for trustStore | M | trust.txt |
service.ssl.initialAlgorithm | Algorithm based on the certificate | M | RSA256 |
service.customExtension.labels | Custom Labels that needs to be added to sepp specific Service | O | |
service.customExtension.annotations | Custom Annotations that needs to be added to sepp specific Services | O | |
deployment.customExtension.labels | Custom Labels that needs to be added to sepp specific deployment | O | |
deployment.customExtension.annotations | Custom Annotations that needs to be added to sepp specific deployment | O | |
allowedCipherSuites | Allowed Ciphers |
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25 - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
|
cipherSuites | Supported Cipher Suites in Ingress | O |
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
jaegerTracingEnabled | Enable jaeger tracing | O | false |
openTracing.jaeger.udpSender.host | Jaeger Host | O | occne-tracer-jaeger-agent.occne-infra |
openTracing.jaeger.udpSender.port | Jaeger Port | O | 6831 |
openTracing.jaeger.probabilisticSampler | Trace capture in percentage | O | 0.5 |
resources.limits.cpu | CPU Limit | O | 4 |
resources.limits.initServiceCpu | Init Container CPU Limit | O | 0.5 |
resources.limits.updateServiceCpu | Update Container CPU Limit | O | 0.5 |
resources.limits.memory | Memory Limit | O | 4Gi |
resources.limits.updateServiceMemory | Update Container Memory Limit | O | 0.5Gi |
resources.limits.initServiceMemory | int Container Memory Limit | O | 0.5Gi |
resources.requests.cpu | CPU for requests | O | 2 |
resources.requests.initServiceCpu | Init Container CPU for requests | O | 0.5 |
resources.requests.updateServiceCpu | Update Container CPU for requests | O | 0.5 |
resources.requests.memory | Memory for requests | O | 2Gi |
resources.requests.updateServiceMemory | Update Container Memory for requests | O | 0.5Gi |
resources.requests.initServiceMemory | Init Container Memory for requests | O | 0.5Gi |
resources.target.averageCpuUtil | Resource Requirements(avg cpu utilisation) | O | 80 |
minAvailable | Number of Pods must always be available, even during a disruption | O | 1 |
minReplicas | Min replicas to scale to maintain an average CPU utilization | O | 1 |
maxReplicas | Max replicas to scale to maintain an average CPU utilization | O | 5 |
Name | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|
cmName | Name of configmap | O | egressgateway |
prefix | When set to some value then that value will be used in the names of resources along with release name | M | plmn |
serviceEgressGateway.port | Egress gw port | M | 8080 |
serviceEgressGateway.sslPort | SSL Port | M | 8442 |
serviceEgressGateway.actuatorPort | Actuator Port | M | 9090 |
deploymentEgressGateway.image | Image name of ingress gateway | O | ocingress_gateway |
deploymentEgressGateway.imageTag | Image Tag name of ingress gateway | O | helm-gateway-tag |
deploymentEgressGateway.pullPolicy | Image Pull Policy | O | Always |
initContainersImage.name | Image name of initContainer | O | configurationinit |
initContainersImage.tag | Image tag name of initContainer | O | helm-gateway-config-tag |
initContainersImage.pullPolicy | Image Pull Policy | O | Always |
updateContainersImage.name | Image name of updateContainer | O | configurationupdate |
updateContainersImage.tag | Image tag name of updateContainer | O | helm-gateway-config-tag |
updateContainersImage.pullPolicy | Image Pull Policy | O | Always |
initssl | Enabling it generates key and trust store for https support | O | true |
enableIncomingHttps | Enabling it for incoming http request | O | false |
enableOutgoingHttps | Enabling it for incoming https request | O | true |
log.level.root | Log level for root logs | O | WARN |
log.level.egress | Log level for ingress logs | O | WARN |
log.level.oauth | Log level for oauth logs | O | WARN |
log.level.updateContainer | Log level for update container logs | O | WARN |
service.type | Service type | M | ClusterIP |
service.ssl.tlsVersion | TLS Version | M | TLSv1.2 |
service.ssl.privateKey.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.privateKey.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.privateKey.rsa.fileName | rsa private key file name | M | rsa_private_key_pkcs1.pem |
service.ssl.privateKey.ecdsa.fileName | ecdsa private key file name | M | ssl_ecdsa_private_key.pem |
service.ssl.certificate.k8SecretName | Name of the certificate secret | M | ocsepp-plmn-secret |
service.ssl.certificate.k8NameSpace | Namespace of certificate | M | seppsvc |
service.ssl.certificate.rsa.fileName | rsa certificate key file name | M | ocsepp.cer |
service.ssl.certificate.ecdsa.fileName | ecdsa certificate key file name | M | ssl_ecdsa_certificate.crt |
service.ssl.caBundle.k8SecretName | Name of the caBundle secret | M | ocsepp-plmn-secret |
service.ssl.caBundle.k8NameSpace | Namespace of private | M | seppsvc |
service.ssl.caBundle.fileName | rsa private key file name | M | caroot.cer |
service.ssl.keyStorePassword.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.keyStorePassword.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.keyStorePassword.fileName | File name that has password for keyStore | M | key.txt |
service.ssl.trustStorePassword.k8SecretName | Name of the privatekey secret | M | ocsepp-plmn-secret |
service.ssl.trustStorePassword.k8NameSpace | Namespace of privatekey | M | seppsvc |
service.ssl.trustStorePassword.fileName | File name that has password for trustStore | M | trust.txt |
service.ssl.initialAlgorithm | Algorithm based on the certificate | M | RSA256 |
service.customExtension.labels | Custom Labels that needs to be added to sepp specific Service | O | |
service.customExtension.annotations | Custom Annotations that needs to be added to sepp specific Services | O | |
deployment.customExtension.labels | Custom Labels that needs to be added to sepp specific deployment | O | |
deployment.customExtension.annotations | Custom Annotations that needs to be added to sepp specific deployment | O | |
allowedCipherSuites | Allowed Ciphers |
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25 - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
|
cipherSuites | Supported Cipher Suites in Ingress | O |
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
jaegerTracingEnabled | Enable jaeger tracing | O | false |
openTracing.jaeger.udpSender.host | Jaeger Host | O | occne-tracer-jaeger-agent.occne-infra |
openTracing.jaeger.udpSender.port | Jaeger Port | O | 6831 |
openTracing.jaeger.probabilisticSampler | Trace capture in percentage | O | 0.5 |
resources.limits.cpu | CPU Limit | O | 4 |
resources.limits.initServiceCpu | Init Container CPU Limit | O | 0.5 |
resources.limits.updateServiceCpu | Update Container CPU Limit | O | 0.5 |
resources.limits.memory | Memory Limit | O | 4Gi |
resources.limits.updateServiceMemory | Update Container Memory Limit | O | 0.5Gi |
resources.limits.initServiceMemory | int Container Memory Limit | O | 0.5Gi |
resources.requests.cpu | CPU for requests | O | 2 |
resources.requests.initServiceCpu | Init Container CPU for requests | O | 0.5 |
resources.requests.updateServiceCpu | Update Container CPU for requests | O | 0.5 |
resources.requests.memory | Memory for requests | O | 2Gi |
resources.requests.updateServiceMemory | Update Container Memory for requests | O | 0.5Gi |
resources.requests.initServiceMemory | Init Container Memory for requests | O | 0.5Gi |
resources.target.averageCpuUtil | Resource Requirements(avg cpu utilisation) | O | 80 |
minAvailable | Number of Pods must always be available, even during a disruption | O | 1 |
minReplicas | Min replicas to scale to maintain an average CPU utilization | O | 1 |
maxReplicas | Max replicas to scale to maintain an average CPU utilization | O | 5 |
S. No | Parameter | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|---|
1 | configmapApplicationConfig.profile | This config map is for providing inputs to NRF-Client | M | |- [appcfg] primaryNrfApiRoot= http://10.75.236.102:31294 ( This ip:port is nrf server ip and it's ingress gateway port) secondaryNrfApiRoot= retryAfterTime=PT120S nrfClientType=SEPP nrfClientSubscribeTypes= appProfiles= [{"nfInstanceId":"9faf1bbc-6e4a-4454-a507-aef01a101a06","nfType":"SEPP","nfStatus":"REGISTERED","fqdn":"sepp11.lab.oracle.com","scheme":"http"}] enableF3=true enableF5=true renewalTimeBeforeExpiry=3600 validityTime=30 enableSubscriptionAutoRenewal=true acceptAdditionalAttributes=false retryForCongestion=5 supportedDataSetId= enableVirtualNrfResolution=false virtualNrfFqdn=nrf.oracle.com virtualNrfScheme=http virtualNrfPort= enableNrfRetry=true maxNrfRetries=3 enableNrfAlternateRouting=true alternateRoutingErrorCodes=500,503 useAlternateScpOnAlternateRouting= |
2 | nrf-client-nfmanagement.image | NRF Client Microservice image name | M | nrf-client |
3 | nrf-client-nfmanagement.imageTag | NRF Client Microservice image tag | M | helm_nrfclient_tag |
4 | nrf-client-nfmanagement.envJaegerSamplerParam | Trace capture in percentage | M | 1 |
5 | nrf-client-nfmanagement.envJaegerSamplerType | Trace Sampler Type | M | ratelimiting |
6 | nrf-client-nfmanagement.envJaegerServiceName | Jaeger Service Name | M | nrf-client-nfmanagement |
7 | nrf-client-nfmanagement.replicas | replicas for nf management pods | M | 1 |
8 | nrf-client-nfmanagement.cpuLimit | maximum cpu limit | M | 1 |
9 | nrf-client-nfmanagement.cpuRequest | maximum cpu limit to which it can be requested | M | 1 |
10 | nrf-client-nfmanagement.memoryRequest | amount of memory requested | M | 1Gi |
11 | nrf-client-nfmanagement.memoryLimit | maximum memory limit to which it can be requested | M | 1Gi |
12 | nrf-client-nfmanagement.type | Exposes the service on cluster internal ip | O | ClusterIP |
S. No | Parameter | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|---|
1 | enabled | service can be enabled or disabled | M | true |
2 | image | image name | M | occnp/oc-config-serve |
3 | imageTag | image tag | M | helm_nrfclient_config_server_tag |
4 | fullNameOverride | image name override | M | config-server |
5 | envJaegerServiceName | image tag | M | occne-tracer-jaeger-agent.occne-infra |
6 | nfInstanceId | This is the NfInstanceId of NF that will get deployed. This shall be used in the profile being registered | M | 9faf1bbc-6e4a-4454-a507-aef01a101a06 |
7 | envMysqlDatabase | Mysql Config Server Databse Name for creating necessary tables | M | seppdb |
8 | replicas | number of replicas for config-server pod | M | 1 |
9 | nodeSelectorEnabled | Enable of Disable nodeSelector to schedule pod on particular node | O | false |
10 | nodeSelectorKey | schedule pod on node having this key | O | zone |
11 | nodeSelectorValue | schedule pod on node having this key | O | app |
12 | resources.limits.cpu | maximum cpu limit to which it can be requested | M | 1 |
13 | resources.limits.memory | maximum memory limit to which it can be requested | M | 1Gi |
14 | resources.requests.cpu | amount of vcpu requested | O | 0.5 |
15 | resources.requests.memory | memory requested | O | 0.5Gi |
16 | servicePcfConfig.type | Exposes the service on NodePort | O | NodePort |
S. No | Parameter | Description | Mandatory (M)/ Optional(O) | Default Value |
---|---|---|---|---|
1 | enabled | To Enable of Disable the service | M | true |
2 | image | image name been used | M | app_info |
3 | imageTag | image tag that is been used | M | helm_nrfclient_app_info_tag |
4 | replicas | the replica count for appinfo | M | 1 |
5 | debug | Log Level to DEBUG | M | true |
6 | serviceAccountName | service Account Name | M | '' |
7 | core_services.sepp | Service to be monitored by appinfo is none so, default value is empty | M | [ ] |
8 | infraServices: | As don't want to monitor infra services, so it is blank | M | [ ] |