3 Customizing SEPP

This section explains the configuration parameters of the SEPP.

Follow the below steps to customize the ocsepp-custom-values-1.4.0.yaml file as per the required parameters:
  1. Go to the Oracle Help Center (OHC) Web site.
  2. Navigate to Industries->Communications->Cloud Native Core->Release 2.3.1.
  3. Click the SEPP Custom Template link to download the zip file.
  4. Unzip the file to get ocscp-custom-configTemplates-1.4.0.0.0 file that contains the ocsepp-custom-configTemplates-1.4.0.0.0. This file is used during installation.
  5. Customize the ocsepp-custom-values-1.4.0.yaml file.
  6. Save the updated ocsepp-custom-values-1.4.0.yaml file in the helm chart directory.

Configuration Parameters

This section includes information about the configuration parameters of OCSEPP.

Configurable Custom Values

Global
Parameter Description Mandatory (M)/ Optional(O) Default value
dockerRegistry Docker registry name M helm-gateway-repo
dbCredSecretName Kubernetes Secret containing DB credentials M ocsepp-mysql-cred
nameSpace NameSpace where secret is deployed M seppsvc
mysql.primary.host Mysql Primary hostname or IP M sepp-mysql-svc
mysql.primary.port Mysql Primary port M 3306
mysql.secondary.host Mysql Secondary hostname or IP M sepp-mysql-svc
mysql.secondary.host Mysql Secondary port M 3306
seppDbName Name of Sepp database M seppdb
nfName The value of nfName is specified as ocnf which is stands of Oracle NF M sepp
nrfClientNfManagementEnable Global control to enable/disable deployment of NF Management service M true
envJaegerAgentHost Jaeger tracing host O "occne-tracer-jaeger-agent.occne-infra"
envJaegerAgentPort Jaeger tracing port O 6831
nrfClientNodePort Provide value for NodePort O 0
imageServiceDetector Readiness-Detector image details with tag M nrf-client/readiness-detector:helm_nrfclient_tag
configServerEnable Service Enable or not M true
configServerFullNameOverride Config-Server Service. Shall be used as {{ ReleaseName }}-configServerFullNameOverride M ocpm-config
envMysqlHost Mysql host M sepp-mysql-svc ( refers to database which nrfclient will connect)
envMysqlPort Mysql port M 3306
appinfoServiceEnable lobal Control to disable appinfo service O true
deploymentNrfClientService.envNfNamespace If no services are to be monitored, envNfNamespace,envNfType,envConsumeSvcName can be left blank O  
deploymentNrfClientService.envNfType Services to be monitored by performance service nftype O  
deploymentNrfClientService.envConsumeSvcName Services to be monitored by performance service name O  
deploymentNrfClientService.envEgressGatewayFullnameOverride Egress gateway Host. Shall be used as {{ ReleaseName }}-envEgressGatewayFullnameOverride M plmn-egress-gateway
deploymentNrfClientService.envEgressGatewayPort Egress gateway Port M 8080
deploymentNrfClientService.nfApiRoot.nodeSelectorEnabled nodeSelector enabling or disabling O false
deploymentNrfClientService.nfApiRoot.nodeSelectorKey nodeSelector enabling or disabling O zone
deploymentNrfClientService.nfApiRoot.nodeSelectorValue Schedule on node having this value O app
privilegedDbCredSecretName K8s Secret containing Database/user/password for DB Hooks for creating tables M ocsepp-mysql-cred
releaseDbName Mysql Release Database Name M seppdb
localProfile.name SEPP Local Profile Name M SEPP-1
localProfile.plmn.mcc SEPP Local MCC M 311
localProfile.plmn.mnc SEPP Local MNC M 282
localProfile.domain SEPP Local Domain M oracle.com
localProfile.interPlmnFqdn SEPP FQDN for Inter PLMN Access M sepp1.inter.oracle.com
localProfile.intraPlmnFqdn SEPP FQDN for Intra PLMN Access M 10.75.236.42:30053
localProfile.supportedSecurityCapabilityList SEPP Supported Security capability ( Only TLS is supported in this release) M TLS
localProfile.apiPrefix SEPP apiPrefix O  
localProfile.retryInterval SEPP Audit retry interval ( For handshake Retry) M 300000 (In milli seconds)
localProfile.maxRetry SEPP Audit Max retry count ( for handshake retry), Default is -1 means infinite M -1 (-1 means no limit on retry count. Mean infinite.)
localProfile.nfInstanceId SEPP NF Instance Id. M sepp1
cn32f-svc
SL. No Parameter Description Mandatory (M)/ Optional(O) Default Value
1 image.repository Repo location of image M reg-1:5000
2 image.name Name of image M ocsepp-cn32f-svc
3 image.tag Tag of image M 1.4.0
4 image.pullPolicy This setting indicates if the image needs to be pulled or not M Always
5 replicaCount Number of replicas for the pod M 1
6 minAvailable Number minimum available of replicas. M 1
7 minReplicas Minimum Number of Relicas M 1
8 maxReplicas Maximum num of replicas of pod M 3
9 log.root Root log level M WARN
10 log.sepp Sepp sepecific log level M INFO
11 resources.limit.cpu Resource Requirements(limit of cpu) M 2
12 resources.limit.memory Resource Requirements(limit of memory) M 2
13 resources.requests.cpu Resource Requirements(requested cpu) M 1
14 resources.requests.memory Resource Requirements(requested memory) M 1
15 resources.target.averageCpuUtil Resource Requirements(avg cpu utilisation) M 50
16 jaegerTracingEnabled Enable Jaeger trace O false
17 bodyInTraceEnabled Enable Jaeger trace for Body O false
18 openTracing.jaeger.udpSender.host Jaeger host O occne-tracer-jaeger-agent.occne-infra
19 openTracing.jaeger.udpSender.port Jaeger port O 6831
20 openTracing.jaeger.logSpans Jaeger port O false
21 openTracing.jaeger.probabilisticSamplingRate Trace capture in percentage O 0.5 (Note: it means 50%)
22 nrfconfiguration.service.type Kind of Service that will be used for this Deployment O  
23 service.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Service O  
24 service.customExtension.anOtations Custom Annotations that needs to be added to nrfconfiguration specific Services O  
25 deployment.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Deployment O
25 deployment.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Deployment O  
pn32c-svc
S. No Parameter Description Mandatory (M)/ Optional(O) Default Value
1 image.repository Repo location of image M reg-1:5000
2 image.name Name of image M ocsepp-pn32c-svc
3 image.tag Tag of image M 1.4.0
4 image.pullPolicy This setting indicates if the image needs to be pulled or not M Always
5 minReplicas Minimum Number of Relicas M 1
6 maxReplicas Maximum num of replicas of pod M 5
7 log.root Root log level M WARN
8 log.sepp Sepp sepecific log level M WARN
9 resources.limit.cpu Resource Requirements(limit of cpu) M 2
10 resources.limit.memory Resource Requirements(limit of memory) M 2Gi
11 resources.requests.cpu Resource Requirements(requested cpu) M 1
12 resources.requests.memory Resource Requirements(requested memory) M 1Gi
13 resources.target.averageCpuUtil Resource Requirements(avg cpu utilisation) M 50
14 jaegerTracingEnabled Enable Jaeger trace O false
15 bodyInTraceEnabled Enable Jaeger trace for Body O false
16 openTracing.jaeger.udpSender.host Jaeger host O occne-tracer-jaeger-agent.occne-infra
17 openTracing.jaeger.udpSender.port Jaeger port O 6831
18 openTracing.jaeger.logSpans   O false
19 openTracing.jaeger.probabilisticSamplingRate Trace capture in percentage O 0.5 (Note: it means 50%)
20 nrfconfiguration.service.type Kind of Service that will be used for this Deployment O  
21 service.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Service O  
22 service.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Services O  
23 deployment.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Deployment O  
24 deployment.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Deployment O  
cn32f-svc
S. No Parameter Description Mandatory (M)/ Optional(O) Default Value
1 image.repository Repo location of image M reg-1:5000
2 image.name Name of image M ocsepp-cn32f-svc
3 image.tag Tag of image M 1.4.0
4 image.pullPolicy This setting indicates if the image needs to be pulled or not M Always
7 minReplicas Minimum Number of Relicas M 1
8 maxReplicas Maximum num of replicas of pod M 5
9 log.root Root log level M WARN
10 log.sepp Sepp sepecific log level M WARN
11 resources.limit.cpu Resource Requirements(limit of cpu) M 4
12 resources.limit.memory Resource Requirements(limit of memory) M 4Gi
13 resources.requests.cpu Resource Requirements(requested cpu) M 2
14 resources.requests.memory Resource Requirements(requested memory) M 2Gi
15 resources.target.averageCpuUtil Resource Requirements(avg cpu utilisation) M 50
16 jaegerTracingEnabled Enable Jaeger trace O false
17 bodyInTraceEnabled Enable Jaeger trace for Body O false
18 openTracing.jaeger.udpSender.host Jaeger host O occne-tracer-jaeger-agent.occne-infra
19 openTracing.jaeger.udpSender.port Jaeger port O 6831
20 openTracing.jaeger.logSpans To enable the span O false
21 openTracing.jaeger.probabilisticSamplingRate Trace capture in percentage O 0.5 (Note: it means 50%)
22 nrfconfiguration.service.type Kind of Service that will be used for this Deployment O  
23 service.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Service O  
24 service.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Services O  
25 deployment.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Deployment O  
26 deployment.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Deployment O  
pn32f-svc
S. No Parameter Description Mandatory (M)/ Optional(O) Default Value
1 image.repository Repo location of image M reg-1:5000
2 image.name Name of image M ocsepp-pn32f-svc
3 image.tag Tag of image M 1.4.0
4 image.pullPolicy This setting indicates if the image needs to be pulled or not M Always
7 minReplicas Minimum Number of Relicas M 1
8 maxReplicas Maximum num of replicas of pod M 5
9 log.root Root log level M WARN
10 log.sepp Sepp sepecific log level M WARN
11 resources.limit.cpu Resource Requirements(limit of cpu) M 4
12 resources.limit.memory Resource Requirements(limit of memory) M 4Gi
13 resources.requests.cpu Resource Requirements(requested cpu) M 2
14 resources.requests.memory Resource Requirements(requested memory) M 2Gi
15 resources.target.averageCpuUtil Resource Requirements(avg cpu utilisation) M 50
16 jaegerTracingEnabled Enable Jaeger trace O false
17 bodyInTraceEnabled Enable Jaeger trace for Body O false
18 openTracing.jaeger.udpSender.host Jaeger host O occne-tracer-jaeger-agent.occne-infra
19 openTracing.jaeger.udpSender.port Jaeger port O 6831
20 openTracing.jaeger.logSpans To enable the span O false
21 openTracing.jaeger.probabilisticSamplingRate Trace capture in percentage O 0.5 (Note: it means 50%)
22 nrfconfiguration.service.type Kind of Service that will be used for this Deployment O  
23 service.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Service O  
24 service.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Services O  
25 deployment.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Deployment O  
26 deployment.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Deployment O  
config-mgr-svc
S. No Parameter Description Mandatory (M)/ Optional(O) Default Value
1 image.repository Repo location of image M reg-1:5000
2 image.name Name of image M ocsepp-config-mgr-svc
3 image.tag Tag of image M 1.4.0
4 image.pullPolicy This setting indicates if the image needs to be pulled or not M Always
5 log.root Root log level M WARN
6 log.sepp Sepp sepecific log level M WARN
7 resources.limit.cpu Resource Requirements(limit of cpu) M 2
8 resources.limit.memory Resource Requirements(limit of memory) M 2Gi
9 resources.requests.cpu Resource Requirements(requested cpu) M 1
10 resources.requests.memory Resource Requirements(requested memory) M 1Gi
11 nrfconfiguration.service.type Kind of Service that will be used for this Deployment O  
12 service.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Service O  
13 service.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Services O  
14 deployment.customExtension.labels Custom Labels that needs to be added to nrfconfiguration specific Deployment O  
15 deployment.customExtension.annotations Custom Annotations that needs to be added to nrfconfiguration specific Deployment O  
Ingress Gateway

Table 3-1 n32-ingress-gateway

Name Description Mandatory(M)/ Optional(O) Default Value
cmName To enable the span O ingressgateway
prefix When set to some value then that value will be used in the names of resources along with release name M 'n32'
global.publicHttpSignalingPort Http Signalling port M 80
gloabl.publicHttpsSignallingPort Https Signalling port M 443
gloabl.serviceAccountName Service Account name O  
global.type type of service M LoadBalancer

(Note: Possible values are ClusterIP, NodePort, LoadBalancer and ExternalName)

global.metalLbIpAllocationEnabled Enable or disable IP Address allocation from Metallb Pool O true
global.metalLbIpAllocationAnnotation Address Pool Annotation for Metallb O "metallb.universe.tf/address-pool: signaling"
global.staticIpAddressEnabled

If Static load balancer IP needs to be set, then set staticIpAddressEnabled flag to true and provide value for staticIpAddress

Else random IP will be assigned by the metalLB from its IP Pool

O false
global.staticIpAddress StaticIp O 10.75.212.60
global.staticNodePortEnabled Node Port Enabled O true
global.staticHttpNodePort Http Node Port M 30075
global.staticHttpsNodePort Https Node Port M 30043
image.name Image name of ingress gateway O ocingress_gateway
image.tag Image Tag name of ingress gateway O helm-gateway-tag
image.pullPolicy Image Pull Policy O Always
initContainersImage.name Image name of initContainer O configurationinit
initContainersImage.tag Image tag name of initContainer O helm-gateway-config-tag
initContainersImage.pullPolicy Image Pull Policy O Always
updateContainersImage.name Image name of updateContainer O configurationupdate
updateContainersImage.tag Image tag name of updateContainer O helm-gateway-config-tag
updateContainersImage.pullPolicy Image Pull Policy O Always
service.ssl.tlsVersion TLS Version M TLSv1.2
service.ssl.privateKey.k8SecretName Name of the privatekey secret M ocsepp-n32-secret
service.ssl.privateKey.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.privateKey.rsa.fileName rsa private key file name M rsa_private_key_pkcs1.pem
service.ssl.privateKey.ecdsa.fileName ecdsa private key file name M ssl_ecdsa_private_key.pem
service.ssl.certificate.k8SecretName Name of the certificate secret M ocsepp-n32-secret
service.ssl.certificate.k8NameSpace Namespace of certificate M seppsvc
service.ssl.certificate.rsa.fileName rsa certificate key file name M ocsepp.cer
service.ssl.certificate.ecdsa.fileName ecdsa certificate key file name M ssl_ecdsa_certificate.crt
service.ssl.caBundle.k8SecretName Name of the caBundle secret M ocsepp-n32-secret
service.ssl.caBundle.k8NameSpace Namespace of private M seppsvc
service.ssl.caBundle.fileName rsa private key file name M caroot.cer
service.ssl.keyStorePassword.k8SecretName Name of the privatekey secret M ocsepp-n32-secret
service.ssl.keyStorePassword.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.keyStorePassword.fileName File name that has password for keyStore M key.txt
service.ssl.trustStorePassword.k8SecretName Name of the privatekey secret M ocsepp-n32-secret
service.ssl.trustStorePassword.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.trustStorePassword.fileName File name that has password for trustStore M trust.txt
service.ssl.initialAlgorithm Algorithm based on the certificate M RSA256
service.customExtension.labels Custom Labels that needs to be added to sepp specific Service O  
service.customExtension.annotations Custom Annotations that needs to be added to sepp specific Services O  
deployment.customExtension.labels Custom Labels that needs to be added to sepp specific deployment O  
deployment.customExtension.annotations Custom Annotations that needs to be added to sepp specific deployment O  
ports.containerPort ContainerPort represents a network port in a single container O 8081
ports.containersslPort Ssl port of the container O 8443
ports.actuatorPort ActuatorPort O 9090
log.level.root Log level for root logs O WARN
log.level.ingress Log level for ingress logs O WARN
log.level.oauth Log level for oauth logs O WARN
log.level.updateContainer log.level.updateContainer O WARN
log.level.cncc.security Log level for cncc logs O WARN
log.traceIdGenerationEnabled TraceId Generation is Enabled O true
resources.limits.cpu CPU Limit O 4
resources.limits.initServiceCpu Init Container CPU Limit O 0.5
resources.limits.updateServiceCpu Update Container CPU Limit O 0.5
resources.limits.memory Memory Limit O 4Gi
resources.limits.updateServiceMemory Update Container Memory Limit O 0.5Gi
resources.limits.initServiceMemory int Container Memory Limit O 0.5Gi
resources.requests.cpu CPU for requests O 2
resources.requests.initServiceCpu Init Container CPU for requests O 0.5
resources.requests.updateServiceCpu Update Container CPU for requests O 0.5
resources.requests.memory Memory for requests O 2Gi
resources.requests.updateServiceMemory Update Container Memory for requests O 0.5Gi
resources.requests.initServiceMemory Init Container Memory for requests O 0.5Gi
resources.target.averageCpuUtil   O 80
minAvailable Number of Pods must always be available, even during a disruption O 1
minReplicas Min replicas to scale to maintain an average CPU utilization O 1
maxReplicas Max replicas to scale to maintain an average CPU utilization O 5
jaegerTracingEnabled Enable jaeger tracing O false
openTracing.jaeger.udpSender.host Jaeger Host O occne-tracer-jaeger-agent.occne-infra
openTracing.jaeger.udpSender.port Jaeger Port O 6831
openTracing.jaeger.probabilisticSampler Trace capture in percentage O 0.5
allowedCipherSuites Allowed Ciphers O

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25

- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

cipherSuites Supported Cipher Suites in Ingress O

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

initssl Enabling it generates key and trust store for https support O true
enableIncomingHttp Enabling it for incoming http request O false
enableIncomingHttps Enabling it for incoming https request O true
enableOutgoingHttps Enabling it for outgoing https request O false
needClientAuth This must be true if client certificate identity is required in the header x-custom-ingress-client-identity O true
rateLimiting.enabled Ratelimiting feature enabled O false
routeRateLimiting.enabled Route based ratelimiting feature enabled O false
globalIngressRateLimiting.enabled Global rate limiting is enabled O false
globalIngressRateLimiting.duration Iterations of time duration(In seconds) for which bucketCapacity and refillRate are reset. O 1
globalIngressRateLimiting.burstCapacity Holds maximum number of tokens in the bucket for the given duration O 1
globalIngressRateLimiting.refillRate Number of tokens to be added to the bucket for the given duration O 1
plmn-ingress-gateway
Name Description Mandatory (M)/ Optional(O) Default Value
cmName Name of the config-map O ingressgateway
prefix When set to some value then that value will be used in the names of resources along with release name M 'plmn'
global.publicHttpSignalingPort Http Signalling port M 80
gloabl.publicHttpsSignallingPort Https Signalling port M 443
gloabl.serviceAccountName Service Account name O  
global.type type of service M LoadBalancer

(Note: Possible values are ClusterIP, NodePort, LoadBalancer and ExternalName)

global.metalLbIpAllocationEnabled Enable or disable IP Address allocation from Metallb Pool O true
global.metalLbIpAllocationAnnotation Address Pool Annotation for Metallb O "metallb.universe.tf/address-pool: signaling"
global.staticIpAddressEnabled

If Static load balancer IP needs to be set, then set staticIpAddressEnabled flag to true and provide value for staticIpAddress

Else random IP will be assigned by the metalLB from its IP Pool

O false
global.staticIpAddress StaticIp O 10.75.212.60
global.staticNodePortEnabled Node Port Enabled O true
global.staticHttpNodePort Http Node Port M 30075
global.staticHttpsNodePort Https Node Port M 30043
image.name Image name of ingress gateway O ocingress_gateway
image.tag Image Tag name of ingress gateway O helm-gateway-tag
image.pullPolicy Image Pull Policy O Always
initContainersImage.name Image name of initContainer O configurationinit
initContainersImage.tag Image tag name of initContainer O helm-gateway-config-tag
initContainersImage.pullPolicy Image Pull Policy O Always
updateContainersImage.name Image name of updateContainer O configurationupdate
updateContainersImage.tag Image tag name of updateContainer O helm-gateway-config-tag
updateContainersImage.pullPolicy Image Pull Policy O Always
service.ssl.tlsVersion TLS Version M TLSv1.2
service.ssl.privateKey.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.privateKey.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.privateKey.rsa.fileName rsa private key file name M rsa_private_key_pkcs1.pem
service.ssl.privateKey.ecdsa.fileName ecdsa private key file name M ssl_ecdsa_private_key.pem
service.ssl.certificate.k8SecretName Name of the certificate secret M ocsepp-plmn-secret
service.ssl.certificate.k8NameSpace Namespace of certificate M seppsvc
service.ssl.certificate.rsa.fileName rsa certificate key file name M ocsepp.cer
service.ssl.certificate.ecdsa.fileName ecdsa certificate key file name M ssl_ecdsa_certificate.crt
service.ssl.caBundle.k8SecretName Name of the caBundle secret M ocsepp-plmn-secret
service.ssl.caBundle.k8NameSpace Namespace of private M seppsvc
service.ssl.caBundle.fileName rsa private key file name M caroot.cer
service.ssl.keyStorePassword.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.keyStorePassword.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.keyStorePassword.fileName File name that has password for keyStore M key.txt
service.ssl.trustStorePassword.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.trustStorePassword.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.trustStorePassword.fileName File name that has password for trustStore M trust.txt
service.ssl.initialAlgorithm Algorithm based on the certificate M RSA256
service.customExtension.labels Custom Labels that needs to be added to sepp specific Service O  
service.customExtension.annotations Custom Annotations that needs to be added to sepp specific Services O  
deployment.customExtension.labels Custom Labels that needs to be added to sepp specific deployment O  
deployment.customExtension.annotations Custom Annotations that needs to be added to sepp specific deployment O  
ports.containerPort ContainerPort represents a network port in a single container O 8081
ports.containersslPort Ssl port of the container O 8443
ports.actuatorPort ActuatorPort O 9090
log.level.root Log level for root logs O WARN
log.level.ingress Log level for ingress logs O WARN
log.level.oauth Log level for oauth logs O WARN
log.level.updateContainer Log level for update container logs O WARN
log.level.cncc.security Log level for cncc logs O WARN
log.traceIdGenerationEnabled TraceId Generation is Enabled O true
resources.limits.cpu CPU Limit O 4
resources.limits.initServiceCpu Init Container CPU Limit O 0.5
resources.limits.updateServiceCpu Update Container CPU Limit O 0.5
resources.limits.memory Memory Limit O 4Gi
resources.limits.updateServiceMemory Update Container Memory Limit O 0.5Gi
resources.limits.initServiceMemory int Container Memory Limit O 0.5Gi
resources.requests.cpu CPU for requests O 2
resources.requests.initServiceCpu Init Container CPU for requests O 0.5
resources.requests.updateServiceCpu Update Container CPU for requests O 0.5
resources.requests.memory Memory for requests O 3Gi
resources.requests.updateServiceMemory Update Container Memory for requests O 0.5Gi
resources.requests.initServiceMemory Init Container Memory for requests O 0.5Gi
resources.target.averageCpuUtil Resource Requirements(avg cpu utilisation) O 80
minAvailable Number of Pods must always be available, even during a disruption O 1
minReplicas Min replicas to scale to maintain an average CPU utilization O 1
maxReplicas Max replicas to scale to maintain an average CPU utilization O 5
jaegerTracingEnabled Enable jaeger tracing O false
openTracing.jaeger.udpSender.host Jaeger Host O occne-tracer-jaeger-agent.occne-infra
openTracing.jaeger.udpSender.port Jaeger Port O 6831
openTracing.jaeger.probabilisticSampler Trace capture in percentage O 0.5
allowedCipherSuites Allowed Ciphers  

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25

- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

cipherSuites Supported Cipher Suites in Ingress O

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

initssl Enabling it generates key and trust store for https support O true
enableIncomingHttp Enabling it for incoming http request O true
enableIncomingHttps Enabling it for incoming https request O true
enableOutgoingHttps Enabling it for outgoing https request O false
needClientAuth This must be true if client certificate identity is required in the header x-custom-ingress-client-identity O true
rateLimiting.enabled Ratelimiting feature enabled O false
routeRateLimiting.enabled Route based ratelimiting feature enabled O false
globalIngressRateLimiting.enabled Global rate limiting is enabled O false
globalIngressRateLimiting.duration Iterations of time duration(In seconds) for which bucketCapacity and refillRate are reset. O 1
globalIngressRateLimiting.burstCapacity Holds maximum number of tokens in the bucket for the given duration O 1
globalIngressRateLimiting.refillRate Number of tokens to be added to the bucket for the given duration O 1
Egress Gateway

Table 3-2 n32-egress-gateway

Name Description Mandatory (M)/ Optional(O) Default Value
cmName Name of the configmap O egressgateway
prefix When set to some value then that value will be used in the names of resources along with release name M plmn
serviceEgressGateway.port Egress gw port M 8080
serviceEgressGateway.sslPort SSL Port M 8442
serviceEgressGateway.actuatorPort Actuator Port M 9090
deploymentEgressGateway.image Image name of ingress gateway O ocingress_gateway
deploymentEgressGateway.imageTag Image Tag name of ingress gateway O helm-gateway-tag
deploymentEgressGateway.pullPolicy Image Pull Policy O Always
initContainersImage.name Image name of initContainer O configurationinit
initContainersImage.tag Image tag name of initContainer O helm-gateway-config-tag
initContainersImage.pullPolicy Image Pull Policy O Always
updateContainersImage.name Image name of updateContainer O configurationupdate
updateContainersImage.tag Image tag name of updateContainer O helm-gateway-config-tag
updateContainersImage.pullPolicy Image Pull Policy O Always
initssl Enabling it generates key and trust store for https support O true
enableIncomingHttps Enabling it for incoming http request O false
enableOutgoingHttps Enabling it for incoming https request O true
log.level.root Log level for root logs O WARN
log.level.egress Log level for ingress logs O WARN
log.level.oauth Log level for oauth logs O WARN
log.level.updateContainer Log level for update container logs O WARN
service.type Service type M ClusterIP
service.ssl.tlsVersion TLS Version M TLSv1.2
service.ssl.privateKey.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.privateKey.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.privateKey.rsa.fileName rsa private key file name M rsa_private_key_pkcs1.pem
service.ssl.privateKey.ecdsa.fileName ecdsa private key file name M ssl_ecdsa_private_key.pem
service.ssl.certificate.k8SecretName Name of the certificate secret M ocsepp-plmn-secret
service.ssl.certificate.k8NameSpace Namespace of certificate M seppsvc
service.ssl.certificate.rsa.fileName rsa certificate key file name M ocsepp.cer
service.ssl.certificate.ecdsa.fileName ecdsa certificate key file name M ssl_ecdsa_certificate.crt
service.ssl.caBundle.k8SecretName Name of the caBundle secret M ocsepp-plmn-secret
service.ssl.caBundle.k8NameSpace Namespace of private M seppsvc
service.ssl.caBundle.fileName rsa private key file name M caroot.cer
service.ssl.keyStorePassword.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.keyStorePassword.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.keyStorePassword.fileName File name that has password for keyStore M key.txt
service.ssl.trustStorePassword.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.trustStorePassword.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.trustStorePassword.fileName File name that has password for trustStore M trust.txt
service.ssl.initialAlgorithm Algorithm based on the certificate M RSA256
service.customExtension.labels Custom Labels that needs to be added to sepp specific Service O  
service.customExtension.annotations Custom Annotations that needs to be added to sepp specific Services O  
deployment.customExtension.labels Custom Labels that needs to be added to sepp specific deployment O  
deployment.customExtension.annotations Custom Annotations that needs to be added to sepp specific deployment O  
allowedCipherSuites Allowed Ciphers  

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25

- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

cipherSuites Supported Cipher Suites in Ingress O

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

jaegerTracingEnabled Enable jaeger tracing O false
openTracing.jaeger.udpSender.host Jaeger Host O occne-tracer-jaeger-agent.occne-infra
openTracing.jaeger.udpSender.port Jaeger Port O 6831
openTracing.jaeger.probabilisticSampler Trace capture in percentage O 0.5
resources.limits.cpu CPU Limit O 4
resources.limits.initServiceCpu Init Container CPU Limit O 0.5
resources.limits.updateServiceCpu Update Container CPU Limit O 0.5
resources.limits.memory Memory Limit O 4Gi
resources.limits.updateServiceMemory Update Container Memory Limit O 0.5Gi
resources.limits.initServiceMemory int Container Memory Limit O 0.5Gi
resources.requests.cpu CPU for requests O 2
resources.requests.initServiceCpu Init Container CPU for requests O 0.5
resources.requests.updateServiceCpu Update Container CPU for requests O 0.5
resources.requests.memory Memory for requests O 2Gi
resources.requests.updateServiceMemory Update Container Memory for requests O 0.5Gi
resources.requests.initServiceMemory Init Container Memory for requests O 0.5Gi
resources.target.averageCpuUtil Resource Requirements(avg cpu utilisation) O 80
minAvailable Number of Pods must always be available, even during a disruption O 1
minReplicas Min replicas to scale to maintain an average CPU utilization O 1
maxReplicas Max replicas to scale to maintain an average CPU utilization O 5
plmn-egress-gateway
Name Description Mandatory (M)/ Optional(O) Default Value
cmName Name of configmap O egressgateway
prefix When set to some value then that value will be used in the names of resources along with release name M plmn
serviceEgressGateway.port Egress gw port M 8080
serviceEgressGateway.sslPort SSL Port M 8442
serviceEgressGateway.actuatorPort Actuator Port M 9090
deploymentEgressGateway.image Image name of ingress gateway O ocingress_gateway
deploymentEgressGateway.imageTag Image Tag name of ingress gateway O helm-gateway-tag
deploymentEgressGateway.pullPolicy Image Pull Policy O Always
initContainersImage.name Image name of initContainer O configurationinit
initContainersImage.tag Image tag name of initContainer O helm-gateway-config-tag
initContainersImage.pullPolicy Image Pull Policy O Always
updateContainersImage.name Image name of updateContainer O configurationupdate
updateContainersImage.tag Image tag name of updateContainer O helm-gateway-config-tag
updateContainersImage.pullPolicy Image Pull Policy O Always
initssl Enabling it generates key and trust store for https support O true
enableIncomingHttps Enabling it for incoming http request O false
enableOutgoingHttps Enabling it for incoming https request O true
log.level.root Log level for root logs O WARN
log.level.egress Log level for ingress logs O WARN
log.level.oauth Log level for oauth logs O WARN
log.level.updateContainer Log level for update container logs O WARN
service.type Service type M ClusterIP
service.ssl.tlsVersion TLS Version M TLSv1.2
service.ssl.privateKey.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.privateKey.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.privateKey.rsa.fileName rsa private key file name M rsa_private_key_pkcs1.pem
service.ssl.privateKey.ecdsa.fileName ecdsa private key file name M ssl_ecdsa_private_key.pem
service.ssl.certificate.k8SecretName Name of the certificate secret M ocsepp-plmn-secret
service.ssl.certificate.k8NameSpace Namespace of certificate M seppsvc
service.ssl.certificate.rsa.fileName rsa certificate key file name M ocsepp.cer
service.ssl.certificate.ecdsa.fileName ecdsa certificate key file name M ssl_ecdsa_certificate.crt
service.ssl.caBundle.k8SecretName Name of the caBundle secret M ocsepp-plmn-secret
service.ssl.caBundle.k8NameSpace Namespace of private M seppsvc
service.ssl.caBundle.fileName rsa private key file name M caroot.cer
service.ssl.keyStorePassword.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.keyStorePassword.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.keyStorePassword.fileName File name that has password for keyStore M key.txt
service.ssl.trustStorePassword.k8SecretName Name of the privatekey secret M ocsepp-plmn-secret
service.ssl.trustStorePassword.k8NameSpace Namespace of privatekey M seppsvc
service.ssl.trustStorePassword.fileName File name that has password for trustStore M trust.txt
service.ssl.initialAlgorithm Algorithm based on the certificate M RSA256
service.customExtension.labels Custom Labels that needs to be added to sepp specific Service O  
service.customExtension.annotations Custom Annotations that needs to be added to sepp specific Services O  
deployment.customExtension.labels Custom Labels that needs to be added to sepp specific deployment O  
deployment.customExtension.annotations Custom Annotations that needs to be added to sepp specific deployment O  
allowedCipherSuites Allowed Ciphers  

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25

- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

cipherSuites Supported Cipher Suites in Ingress O

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

jaegerTracingEnabled Enable jaeger tracing O false
openTracing.jaeger.udpSender.host Jaeger Host O occne-tracer-jaeger-agent.occne-infra
openTracing.jaeger.udpSender.port Jaeger Port O 6831
openTracing.jaeger.probabilisticSampler Trace capture in percentage O 0.5
resources.limits.cpu CPU Limit O 4
resources.limits.initServiceCpu Init Container CPU Limit O 0.5
resources.limits.updateServiceCpu Update Container CPU Limit O 0.5
resources.limits.memory Memory Limit O 4Gi
resources.limits.updateServiceMemory Update Container Memory Limit O 0.5Gi
resources.limits.initServiceMemory int Container Memory Limit O 0.5Gi
resources.requests.cpu CPU for requests O 2
resources.requests.initServiceCpu Init Container CPU for requests O 0.5
resources.requests.updateServiceCpu Update Container CPU for requests O 0.5
resources.requests.memory Memory for requests O 2Gi
resources.requests.updateServiceMemory Update Container Memory for requests O 0.5Gi
resources.requests.initServiceMemory Init Container Memory for requests O 0.5Gi
resources.target.averageCpuUtil Resource Requirements(avg cpu utilisation) O 80
minAvailable Number of Pods must always be available, even during a disruption O 1
minReplicas Min replicas to scale to maintain an average CPU utilization O 1
maxReplicas Max replicas to scale to maintain an average CPU utilization O 5
Nrfclient

nrf-client
S. No Parameter Description Mandatory (M)/ Optional(O) Default Value
1 configmapApplicationConfig.profile This config map is for providing inputs to NRF-Client M |- [appcfg] primaryNrfApiRoot= http://10.75.236.102:31294 ( This ip:port is nrf server ip and it's ingress gateway port)

secondaryNrfApiRoot= retryAfterTime=PT120S nrfClientType=SEPP nrfClientSubscribeTypes= appProfiles= [{"nfInstanceId":"9faf1bbc-6e4a-4454-a507-aef01a101a06","nfType":"SEPP","nfStatus":"REGISTERED","fqdn":"sepp11.lab.oracle.com","scheme":"http"}] enableF3=true enableF5=true renewalTimeBeforeExpiry=3600 validityTime=30 enableSubscriptionAutoRenewal=true acceptAdditionalAttributes=false retryForCongestion=5 supportedDataSetId= enableVirtualNrfResolution=false virtualNrfFqdn=nrf.oracle.com virtualNrfScheme=http virtualNrfPort= enableNrfRetry=true maxNrfRetries=3 enableNrfAlternateRouting=true alternateRoutingErrorCodes=500,503 useAlternateScpOnAlternateRouting=
2 nrf-client-nfmanagement.image NRF Client Microservice image name M nrf-client
3 nrf-client-nfmanagement.imageTag NRF Client Microservice image tag M helm_nrfclient_tag
4 nrf-client-nfmanagement.envJaegerSamplerParam Trace capture in percentage M 1
5 nrf-client-nfmanagement.envJaegerSamplerType Trace Sampler Type M ratelimiting
6 nrf-client-nfmanagement.envJaegerServiceName Jaeger Service Name M nrf-client-nfmanagement
7 nrf-client-nfmanagement.replicas replicas for nf management pods M 1
8 nrf-client-nfmanagement.cpuLimit maximum cpu limit M 1
9 nrf-client-nfmanagement.cpuRequest maximum cpu limit to which it can be requested M 1
10 nrf-client-nfmanagement.memoryRequest amount of memory requested M 1Gi
11 nrf-client-nfmanagement.memoryLimit maximum memory limit to which it can be requested M 1Gi
12 nrf-client-nfmanagement.type Exposes the service on cluster internal ip O ClusterIP
config-server
S. No Parameter Description Mandatory (M)/ Optional(O) Default Value
1 enabled service can be enabled or disabled M true
2 image image name M occnp/oc-config-serve
3 imageTag image tag M helm_nrfclient_config_server_tag
4 fullNameOverride image name override M config-server
5 envJaegerServiceName image tag M occne-tracer-jaeger-agent.occne-infra
6 nfInstanceId This is the NfInstanceId of NF that will get deployed. This shall be used in the profile being registered M 9faf1bbc-6e4a-4454-a507-aef01a101a06
7 envMysqlDatabase Mysql Config Server Databse Name for creating necessary tables M seppdb
8 replicas number of replicas for config-server pod M 1
9 nodeSelectorEnabled Enable of Disable nodeSelector to schedule pod on particular node O false
10 nodeSelectorKey schedule pod on node having this key O zone
11 nodeSelectorValue schedule pod on node having this key O app
12 resources.limits.cpu maximum cpu limit to which it can be requested M 1
13 resources.limits.memory maximum memory limit to which it can be requested M 1Gi
14 resources.requests.cpu amount of vcpu requested O 0.5
15 resources.requests.memory memory requested O 0.5Gi
16 servicePcfConfig.type Exposes the service on NodePort O NodePort
appinfo
S. No Parameter Description Mandatory (M)/ Optional(O) Default Value
1 enabled To Enable of Disable the service M true
2 image image name been used M app_info
3 imageTag image tag that is been used M helm_nrfclient_app_info_tag
4 replicas the replica count for appinfo M 1
5 debug Log Level to DEBUG M true
6 serviceAccountName service Account Name M ''
7 core_services.sepp Service to be monitored by appinfo is none so, default value is empty M [ ]
8 infraServices: As don't want to monitor infra services, so it is blank M [ ]