Shared configuration

If your installation includes Business Automation Studio and Application Engine and you want to compress and export an application project to Business Automation Studio or import an application project in Application Engine, you can specify the encryption key (aeEncryptionKey) and the encryption salt value (aeEncryptionSalt) of this secret. These values are used to encrypt sensitive information of the exported file. This is an optional step.

26.0.0

26.0.0

26.0.0

26.0.0

opensearch-<hostname_suffix>

• Use "OCP" for Red Hat OpenShift Container Platform.
• Use "ROKS" for Red Hat OpenShift on IBM Cloud®.
• Use "Other", for Rancher, Tanzu, or GKE platform.

Enables or disables a Pod Disruption Budget (PDB) for the BAI component. The parameter overrides the shared_configuration.sc_enable_pdb parameter value.

When PDB is set to true and the replica count for BAI management is greater than 1, then a PDB is created with a `minAvailable` value set to 1. If the replica count is 1, then the PDB has a `minAvailable` set to 0.

Enables the upload of usage metrics to IBM Software Central.

Use the parameter to generate network policy templates that you can install for a BAI deployment. The default is not to generate network policies that restrict access to external systems.

Set the value of sc_generate_sample_network_policies to true in your custom resource for BAI to generate sample network policies for the BAI capabilities. The templates restrict access for all pods to external systems. You can customize your network policy or use specific policies with matchLabels to set exceptions. 

• enabled
• type
• value

The type parameter identifies the type of the huge pages in the cluster. The default is "hugepages-2Mi".

The value parameter is used to set the specific size of the huge pages specified in bytes with an optional scale suffix [kKmMgG] in the OpenShift cluster to allocate.

• false
• hugepages-2Mi
• 2M

• default_admin_username

Digests are used instead of the image tag, but it is useful to keep the tag up to date with the corresponding version. The list of digests that are used in each version can be found in the resources.yaml file under the ${CASE_LOCAL_PATH}/ibm-ba-insights/inventory/cp4aOperatorSdk directory of the CASE package. For more information, see Preparing a client to connect to the cluster .

No

Yes on ROKS.

To get the secret when Ingress is enabled with TLS, run the following command.

ibmcloud kubectl cluster get --cluster <clusterID> | grep Ingress 

No

Yes if ingress is enabled.

An example of an optional component:

• bai

Example: Localhost

The sc_service_ip_families parameter is used to define a list of values that corresponds to the ipFamilies property of the Kubernetes Service object. If you have a dual-stack enabled cluster that supports both IPv6 and IPv4, then add a list with IPv6 and IPv4. The default is to use the cluster-level settings.

For more information, see Service .

shared_configuration:
  sc_service_ip_families:
  - IPv6
  - IPv4
  sc_service_ip_family_policy: PreferDualStack

The sc_service_ip_family_policy parameter is used to define a value that corresponds to the ipFamilyPolicy property of the Kubernetes Service object. If you have a dual-stack enabled cluster that supports both IPv6 and IPv4, then add the string PreferDualStack or RequireDualStack. The default is to use the cluster-level settings.

For more information, see Service .

shared_configuration:
  sc_service_ip_families:
  - IPv4
  - IPv6
  sc_service_ip_family_policy: PreferDualStack

Controls whether the operator configures the Content Platform Engine to use an LDAP directory configuration or a SCIM directory configuration to authorize users and groups.

Set to true (default) for the operator to configure a Content Platform Engine SCIM directory configuration to retrieve authorization information such as the groups to which a user belongs from IM.

Set to false for the operator to configure a Content Platform Engine LDAP directory configuration to retrieve authorization information such as the groups to which a user belongs from an LDAP server.

No.

False must be specified to retain a non-default configuration of the Content Platform Engine. Examples of a false value include upgrading from a previous deployment where an LDAP directory configured user and group authorization, or moving a traditional deployment that used an LDAP directory.

• sc_slow_file_storage_classname
• sc_medium_file_storage_classname
• sc_fast_file_storage_classname
• sc_block_storage_classname

The set block storage class name is used for the PVCs that are created for MongoDB.