This repository has been archived by the owner on Mar 12, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 5
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #15 from catenax-ng/main
update helm charts, update docs
- Loading branch information
Showing
25 changed files
with
1,230 additions
and
571 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,3 @@ | ||
| validate-maintainers: false | ||
| chart-repos: | ||
| - bitnami=https://charts.bitnami.com/bitnami | ||
| - bitnami=https://charts.bitnami.com/bitnami |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,116 @@ | ||
| # managed-identity-wallets | ||
|
|
||
|    | ||
|
|
||
| Managed Identity Wallets Service | ||
|
|
||
| ## Requirements | ||
|
|
||
| | Repository | Name | Version | | ||
| |------------|------|---------| | ||
| | https://charts.bitnami.com/bitnami | acapypostgresql(postgresql) | 11.x.x | | ||
| | https://charts.bitnami.com/bitnami | postgresql(postgresql) | 11.x.x | | ||
|
|
||
| ## Values | ||
|
|
||
| | Key | Type | Default | Description | | ||
| |-----|------|---------|-------------| | ||
| | auth.realm | string | `"CX-Central"` | The realm name in Keycloak | | ||
| | auth.role | string | `"add_wallets"` | The main role in MIW | | ||
| | auth.roleMappings | string | `"create_wallets:add_wallets,view_wallets:view_wallets,update_wallets:update_wallets,delete_wallets:delete_wallets,view_wallet:view_wallet,update_wallet:update_wallet"` | The role mapping in MIW | | ||
| | auth.resourceId | string | `"Cl5-CX-Custodian"` | The resource Id in Keycloak | | ||
| | image.name | string | `"catenax-ng/tx-managed-identity-wallets_service"` | | | ||
| | image.registry | string | `"ghcr.io"` | | | ||
| | image.tag | string | `""` | Overrides the image tag whose default is the chart appVersion | | ||
| | image.secret | string | `"acr-credentials"` | | | ||
| | allowEmptyPassword | string | `"\"yes\""` | | | ||
| | db.jdbcDriver | string | `"org.postgresql.Driver"` | Database driver to use | | ||
| | namespace | string | `"managed-identity-wallets"` | | | ||
| | logging.exposed | string | `"INFO"` | | | ||
| | wallet.baseWalletBpn | string | `""` | The BPN of the base wallet | | ||
| | wallet.baseWalletShortDid | string | `""` | The short DID of the base wallet. It can be created with its verkey as described in https://github.com/eclipse-tractusx/managed-identity-wallets#integrate-with-an-write-restricted-indy-ledger. It should be registered on the Indy ledger with role endorser. | | ||
| | wallet.baseWalletVerkey | string | `""` | The verkey (public key) of the base wallet | | ||
| | wallet.baseWalletName | string | `""` | The name of the base wallet | | ||
| | revocation.refreshHour | string | `"3"` | At which hour (24-hour clock) the cron job should issue/update status-list credentials | | ||
| | revocation.revocationServiceUrl | string | `"http://localhost:8086"` | The url of the revocation service | | ||
| | revocationService.imageName | string | `"registry.gitlab.com/gaia-x/data-infrastructure-federation-services/not/notarization-service/revocation"` | | | ||
| | revocationService.tag | string | `"1.0.0-SNAPSHOT-quarkus-2.10.2.Final-java17"` | | | ||
| | revocationService.port | string | `"8086"` | | | ||
| | revocationService.httpAccessLog | bool | `true` | | | ||
| | revocationService.minIssueInterval | string | `"2"` | Issuance cache interval | | ||
| | revocationService.baseUrlForCredentialList | string | `"https//localhost:8080/api/credentials/"` | The the endpoint in MIW at which status credentials can be issued | | ||
| | revocationService.clientIssuanceApiUrl | string | `"http://localhost:8080"` | The url at which the MIW is reachable | | ||
| | acapy.imageName | string | `"bcgovimages/aries-cloudagent"` | | | ||
| | acapy.tag | string | `"py36-1.16-1_0.7.5"` | | | ||
| | acapy.endorser.ledgerUrl | string | `"https://idu.cloudcompass.ca"` | The url of the used Indy ledger | | ||
| | acapy.endorser.label | string | `"CatenaXIssuer"` | The label of the instance | | ||
| | acapy.endorser.logLevel | string | `"INFO"` | | | ||
| | acapy.endorser.networkIdentifier | string | `"idunion:test"` | The network identifier of the used Indy ledger | | ||
| | acapy.endorser.databaseHost | string | `"acapypostgresql"` | The host of the used database | | ||
| | acapy.endorser.endpointPort | string | `"8000"` | The port at which the wallet is reachable | | ||
| | acapy.endorser.adminPort | string | `"11000"` | The port at which the admin API is reachable | | ||
| | acapy.endorser.adminUrl | string | `"http://localhost:11000"` | The url of the admin API | | ||
| | acapy.endorser.secret.apikey | string | `"0"` | The API key of the admin endpoints. It must be a random and secure string | | ||
| | acapy.endorser.secret.walletseed | string | `"0"` | The seed of the wallet. It must be random and secure (no patterns or use of dictionary words, the use of uppercase and lowercase letters - as well as numbers and allowed symbols, no personal preferences like names or phone numbers) | | ||
| | acapy.endorser.secret.dbaccount | string | `"postgres"` | | | ||
| | acapy.endorser.secret.dbadminuser | string | `"postgres"` | | | ||
| | acapy.endorser.secret.dbadminpassword | string | `"postgres"` | | | ||
| | acapy.endorser.secret.dbpassword | string | `"postgres"` | | | ||
| | acapy.endorser.secret.jwtsecret | string | `"0"` | | | ||
| | acapy.endorser.secret.walletkey | string | `"0"` | | | ||
| | acapy.mt.ledgerUrl | string | `"https://idu.cloudcompass.ca"` | The url of the used Indy ledger | | ||
| | acapy.mt.label | string | `"CatenaXIssuer"` | The label of the instance | | ||
| | acapy.mt.logLevel | string | `"INFO"` | | | ||
| | acapy.mt.networkIdentifier | string | `"idunion:test"` | The network identifier of the used Indy ledger | | ||
| | acapy.mt.databaseHost | string | `"acapypostgresql"` | | | ||
| | acapy.mt.endpointPort | string | `"8003"` | The port at which the sub-wallets are reachable | | ||
| | acapy.mt.adminPort | string | `"11003"` | The port at which the admin API is reachable | | ||
| | acapy.mt.adminUrl | string | `"http://localhost:11003"` | The url of the admin API | | ||
| | acapy.mt.endorserPublicDid | string | `"ShortDIDPlaceholderX"` | The short DID of the base wallet | | ||
| | acapy.mt.webhookUrl | string | `"http://localhost:8080/webhook"` | The url at which events are sent. It should be the webhook endpoint in MIW | | ||
| | acapy.mt.secret.apikey | string | `"0"` | The API-Key of the admin endpoints. It must be a random and secure string | | ||
| | acapy.mt.secret.walletseed | string | `"0"` | The seed of the wallet. It must be random and secure (no patterns or use of dictionary words, the use of uppercase and lowercase letters - as well as numbers and allowed symbols, no personal preferences like names or phone numbers) | | ||
| | acapy.mt.secret.dbaccount | string | `"postgres"` | | | ||
| | acapy.mt.secret.dbadminuser | string | `"postgres"` | | | ||
| | acapy.mt.secret.dbadminpassword | string | `"postgres"` | | | ||
| | acapy.mt.secret.dbpassword | string | `"postgres"` | | | ||
| | acapy.mt.secret.jwtsecret | string | `"0"` | | | ||
| | acapy.mt.secret.walletkey | string | `"0"` | | | ||
| | ingress.enabled | bool | `false` | | | ||
| | acapypostgresql.enabled | bool | `true` | | | ||
| | acapypostgresql.auth.existingSecret | string | `"product-managed-identity-wallets-acapypostgresql"` | | | ||
| | acapypostgresql.secret.password | string | `"postgres"` | | | ||
| | acapypostgresql.secret.postgrespassword | string | `"postgres"` | | | ||
| | acapypostgresql.secret.user | string | `"postgres"` | | | ||
| | postgresql.enabled | bool | `true` | | | ||
| | postgresql.auth.existingSecret | string | `"product-managed-identity-wallets-postgresql"` | | | ||
| | postgresql.primary.extraVolumeMounts[0].name | string | `"initdb"` | | | ||
| | postgresql.primary.extraVolumeMounts[0].mountPath | string | `"/docker-entrypoint-initdb.d"` | | | ||
| | postgresql.primary.extraVolumes[0].name | string | `"initdb"` | | | ||
| | postgresql.primary.extraVolumes[0].emptyDir | object | `{}` | | | ||
| | postgresql.primary.initContainers[0].name | string | `"initdb"` | | | ||
| | postgresql.primary.initContainers[0].image | string | `"ghcr.io/catenax-ng/tx-managed-identity-wallets_initdb:3.0.0"` | The image is built and used to initialize the database of MIW. The tag must equal the appVersion in Chart.yaml | | ||
| | postgresql.primary.initContainers[0].imagePullPolicy | string | `"Always"` | | | ||
| | postgresql.primary.initContainers[0].command[0] | string | `"sh"` | | | ||
| | postgresql.primary.initContainers[0].args[0] | string | `"-c"` | | | ||
| | postgresql.primary.initContainers[0].args[1] | string | `"echo \"Copying initdb sqls...\"\ncp -R /initdb/* /docker-entrypoint-initdb.d\n"` | | | ||
| | postgresql.primary.initContainers[0].volumeMounts[0].name | string | `"initdb"` | | | ||
| | postgresql.primary.initContainers[0].volumeMounts[0].mountPath | string | `"/docker-entrypoint-initdb.d"` | | | ||
| | postgresql.secret.password | string | `"postgres"` | | | ||
| | postgresql.secret.postgrespassword | string | `"postgres"` | | | ||
| | postgresql.secret.user | string | `"postgres"` | | | ||
| | datapool.grantType | string | `"client_credentials"` | | | ||
| | datapool.scope | string | `"openid"` | | | ||
| | datapool.refreshHour | string | `"23"` | At which hour (24-hour clock) the cron job should pull the data from the BPDM data pool | | ||
| | datapool.url | string | `""` | Url at which the API of BPDM is reachable | | ||
| | datapool.authUrl | string | `""` | IAM url to get the access token for BPDM data pool endpoint | | ||
| | managedIdentityWallets.secret.jdbcurl | string | `"jdbc:postgresql://postgresql:5432/postgres?user=postgres&password=postgres"` | Database connection string to the Postgres database of MIW | | ||
| | managedIdentityWallets.secret.authclientid | string | `"clientid"` | It can be extracted from Keycloak | | ||
| | managedIdentityWallets.secret.authclientsecret | string | `"client"` | It can be extracted from Keycloak | | ||
| | managedIdentityWallets.secret.bpdmauthclientid | string | `"clientid"` | client id for accessing the BPDM data pool endpoint | | ||
| | managedIdentityWallets.secret.bpdmauthclientsecret | string | `"client"` | client secret for accessing the BPDM data pool endpoint | | ||
| | certificate.host | string | `"localhost"` | | | ||
| | isLocal | bool | `false` | Deployment on Kubernetes on local device | | ||
|
|
||
| ---------------------------------------------- | ||
| Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) |
Oops, something went wrong.