| --- |
| # Copyright 2018-present Open Networking Foundation |
| # Copyright 2018 Intel Corporation |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| # Default values for mcord-vepc-helm. |
| # This is a YAML-formatted file. |
| # Declare variables to be passed into your templates. |
| --- |
| apiVersion: v1 |
| kind: ConfigMap |
| metadata: |
| name: {{ .Values.hss.name }} |
| data: |
| acl.conf: | |
| ALLOW_OLD_TLS *.cluster.local |
| hss.conf: | |
| Identity = "HSS_IDENTITY"; |
| Realm = "HSS_REALM"; |
| TLS_Cred = "CONF_DIR/HSS_HOST.cert.pem", "CONF_DIR/HSS_HOST.key.pem"; |
| TLS_CA = "CONF_DIR/cacert.pem"; |
| No_SCTP; |
| Prefer_TCP; |
| No_IPv6; |
| SCTP_streams = 3; |
| NoRelay; |
| AppServThreads = 4; |
| Port = 3868; |
| SecPort = 5868; |
| LoadExtension = "/usr/local/lib/freeDiameter/acl_wl.fdx" : "CONF_DIR/acl.conf"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_3gpp2_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_draftload_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_etsi283034_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4004_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4006bis_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4072_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc4590_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5447_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5580_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5777_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc5778_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc6734_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc6942_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7155_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7683_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_rfc7944_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29061_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29128_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29154_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29173_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29212_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29214_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29215_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29217_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29229_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29272_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29273_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29329_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29336_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29337_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29338_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29343_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29344_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29345_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29368_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts29468_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_ts32299_avps.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_S6as6d.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_S6t.fdx"; |
| LoadExtension = "/usr/local/lib/freeDiameter/dict_S6c.fdx"; |
| hss.json: | |
| {"common": { |
| "fdcfg": "CONF_DIR/hss.conf", |
| "originhost": "HSS_IDENTITY", |
| "originrealm": "HSS_REALM" |
| }, |
| "hss": { |
| "gtwhost": "*", |
| "gtwport" : 9080, |
| "restport" : 9081, |
| "ossport" : 9082, |
| "casssrv": "HSSDB_ADDR", |
| "cassusr": "root", |
| "casspwd": "root", |
| "cassdb" : "vhss", |
| "casscoreconnections" : 2, |
| "cassmaxconnections" : 8, |
| "cassioqueuesize" : 32768, |
| "cassiothreads" : 2, |
| "randv" : true, |
| "optkey" : "63bfa50ee6523365ff14c1f45f88737d", |
| "reloadkey" : true, |
| "logsize": 20, |
| "lognumber": 5, |
| "logname": "LOGS_DIR/hss.log", |
| "logqsize": 8192, |
| "statlogsize": 20, |
| "statlognumber": 5, |
| "statlogname": "LOGS_DIR/hss_stat.log", |
| "auditlogsize": 20, |
| "auditlognumber": 5, |
| "auditlogname": "LOGS_DIR/hss_audit.log", |
| "statfreq": 2000, |
| "numworkers": 4, |
| "concurrent": 10, |
| "ossfile": "CONF_DIR/oss.json" |
| } |
| } |
| oss.json: | |
| { |
| "option": { |
| "id": "url", |
| "type": "string" |
| }, |
| "services": [ |
| { |
| "id": "logger", |
| "commands": [ |
| { |
| "id": "describe_loggers" |
| }, |
| { |
| "id": "set_logger_level", |
| "options": [ |
| { |
| "id": "name", |
| "type": "string" |
| }, |
| { |
| "id": "level", |
| "type": "integer" |
| } |
| ] |
| } |
| ] |
| }, |
| { |
| "id": "stats", |
| "commands": [ |
| { |
| "id": "describe_stats_frequency" |
| }, |
| { |
| "id": "describe_stats_live" |
| }, |
| { |
| "id": "set_stats_frequency", |
| "options": [ |
| { |
| "id": "frequency", |
| "type": "integer" |
| } |
| ] |
| } |
| ] |
| } |
| ] |
| } |
| launch.sh: | |
| #!/bin/bash -x |
| |
| CONF_DIR="/opt/c3po/hss/conf" |
| LOGS_DIR="/opt/c3po/hss/logs" |
| mkdir -p $CONF_DIR $LOGS_DIR |
| |
| cp /etc/hss/conf/{acl.conf,hss.json,hss.conf,oss.json} $CONF_DIR |
| |
| HSS_HOST=$(hostname) |
| HSS_DOMAIN=$(dnsdomainname) |
| |
| # from hss.json |
| sed -i "s!HSS_IDENTITY!$HSS_HOST.$HSS_DOMAIN!g" $CONF_DIR/hss.json |
| sed -i "s!HSS_REALM!$HSS_DOMAIN!g" $CONF_DIR/hss.json |
| sed -i "s!HSSDB_ADDR!$HSSDB_ADDR!g" $CONF_DIR/hss.json |
| sed -i "s!CONF_DIR!$CONF_DIR!g" $CONF_DIR/hss.json |
| sed -i "s!LOGS_DIR!$LOGS_DIR!g" $CONF_DIR/hss.json |
| |
| # from hss.conf |
| sed -i "s!HSS_IDENTITY!$HSS_HOST.$HSS_DOMAIN!g" $CONF_DIR/hss.conf |
| sed -i "s!HSS_REALM!$HSS_DOMAIN!g" $CONF_DIR/hss.conf |
| sed -i "s!HSS_HOST!$HSS_HOST!g" $CONF_DIR/hss.conf |
| sed -i "s!CONF_DIR!$CONF_DIR!g" $CONF_DIR/hss.conf |
| cat $CONF_DIR/{hss.json,hss.conf} |
| |
| # If necessary, calculate the OPc value for each UE (User Equipment). |
| #./bin/hss -j conf/hss.json --onlyloadkey |
| cd $CONF_DIR |
| make_certs.sh $(hostname) $(dnsdomainname) |
| cd .. |
| # finally, launch |
| hss -j $CONF_DIR/hss.json |
| --- |
| apiVersion: v1 |
| kind: Service |
| metadata: |
| name: {{ .Values.hss.name }} |
| spec: |
| selector: |
| app: {{ .Values.hss.name }} |
| clusterIP: None |
| ports: |
| - name: s6a |
| port: 3868 |
| protocol: TCP |
| --- |
| apiVersion: apps/v1 |
| kind: StatefulSet |
| metadata: |
| name: {{ .Values.hss.name }} |
| labels: |
| app: {{ .Values.hss.name }} |
| spec: |
| replicas: 1 |
| selector: |
| matchLabels: |
| app: {{ .Values.hss.name }} |
| serviceName: {{ .Values.hss.name }} |
| template: |
| metadata: |
| labels: |
| app: {{ .Values.hss.name }} |
| spec: |
| initContainers: |
| - name: init-hss |
| image: {{ .Values.hss.initimage }} |
| imagePullPolicy: Always |
| command: [ "bash", "-xc"] |
| # TODO: Move the SIM card configuration into values.yaml |
| args: |
| - until nslookup $HSSDB_ADDR; do echo "waiting for hssdb"; sleep 2; done; |
| until cqlsh --file /opt/c3po/hssdb/oai_db.cql $HSSDB_ADDR; do echo "provisioning hssdb"; sleep 2; done; |
| until data_provisioning_users.sh 208014567891200 1122334455 apn1 465B5CE8B199B49FAA5F0A2EE238A6BC 10 $HSSDB_ADDR $MME_HOST.$MME_REALM $MME_REALM; |
| do echo "setting up users"; sleep 2; done; |
| until data_provisioning_mme.sh 1 19136246000 $MME_HOST.$MME_REALM $MME_REALM 1 $HSSDB_ADDR; do echo "setting up mme"; sleep 2; done; |
| until data_provisioning_mme.sh 1 19136246000 smsrouter.test3gpp.net test3gpp.net 0 $HSSDB_ADDR; do echo "setting up smsrouter"; sleep 2; done; |
| env: |
| - name: HSSDB_ADDR |
| value: {{ .Values.hssdb.name }} |
| - name: MME_HOST |
| value: mme-0 |
| - name: MME_REALM |
| value: {{ .Values.mme.name }}.{{ .Values.global.namespace }}.{{ .Values.global.fqdn }} |
| containers: |
| - name: hss |
| image: {{ .Values.hss.image }} |
| imagePullPolicy: {{ .Values.global.imagepullpolicy }} |
| stdin: true |
| tty: true |
| env: |
| - name: HSSDB_ADDR |
| value: {{ .Values.hssdb.name | quote }} |
| - name: MME_IDENTITY |
| value: {{ .Values.mme.name }}.{{ .Values.global.namespace }}.{{ .Values.global.fqdn }} |
| command: ["bash", "-c", "/opt/c3po/hss/launch.sh; sleep 3600"] |
| resources: |
| limits: |
| cpu: {{ .Values.hss.cpu | quote }} |
| memory: {{ .Values.hss.memory }} |
| volumeMounts: |
| - name: hss-script |
| mountPath: /opt/c3po/hss/launch.sh |
| subPath: launch.sh |
| - name: hss-config |
| mountPath: /etc/hss/conf |
| volumes: |
| - name: hss-script |
| configMap: |
| name: {{ .Values.hss.name }} |
| defaultMode: 493 |
| - name: hss-config |
| configMap: |
| name: {{ .Values.hss.name }} |
| defaultMode: 420 |