OrderService custom resource manifest

Configure the OrderService custom resource by setting up the parameters as needed.

Remember: The commented parameters with # are optional for creating OrderService. The values in example 2 are provided for demonstration purpose only and must me modified as required.

Example 1: OrderService configuration with the supported parameters and default values

apiVersion: apps.oms.ibm.com/v1beta1
kind: OrderService
metadata:
  name: ""
spec:
  license:
    accept: false
  upgradeStrategy: ""
  secret: ""
  replicaCount: 1
  # profile: balanced
  # orderServiceVersion: ""
  # podLabels: {}
  # podAnnotations: {}
​
  image:
    tag: ""
    repository: ""
    # pullPolicy: IfNotPresent
    # imageName: orderservice
    # imagePullSecrets:
    # - name: ""
​
  networking:
    ingress:
      host: ""
      # annotations: {}
      # labels: {}
      # ssl:
        # enabled: false
        # identitySecretName: ""
​
  networkPolicy:
    <kubernetes-network-policy-spec>

  # Note: The following way of configuring security parameter is deprecated.
  # security:
  # trust:
  #    # storeLocation: ""
  #    # trustedCertDir: ""
  #    storeType: PKCS12
  #    trustJavaCACerts: true

  #  The new way to set the truststore is by using ssl as shown in the following snippet.
  security:
    ssl:
      trust:
        # storeLocation: ""
        # trustedCertDir: ""
        storeType: PKCS12
        trustJavaCACerts: true

  # serverProfiles:
  # - name: ""
    # resources:
      # limits:
        # cpu: 
        # memory: 
      # requests:
        # cpu: 
        # memory: 
​
  configuration:
    jwt_algorithm: ""
    jwt_audience: ""
    jwt_ignore_expiration: 
    jwt_issuer: ""
    # additionalConfig: {}
​
  cassandra:
    keyspace: ""
    # contactPoints: ""
    # createDevInstance:
      # profile: balanced
      # storage:
        # name: ""
        # accessMode: ""
        # capacity: 
        # storageClassName: ""
​
  elasticsearch:
    # contactPoints: ""
    # createDevInstance:
      # profile: balanced
      # storage:
        # name: ""
        # accessMode: ""
        # capacity: 
        # storageClassName: ""
​
  # additionalMounts:
    # configMaps:
    # - name: ""
      # mountPath: ""
      # subPath: ""
      # subPathExpr: ""
      # readOnly: false
      # mountPropagation: ""
      # matchLabels: {}
    # secrets:
    # - name: ""
      # mountPath: ""
      # subPath: ""
      # subPathExpr: ""
      # readOnly: false
      # mountPropagation: ""
      # matchLabels: {}
    # storages:
    # - name: ""
      # mountPath: ""
      # storageClassName: ""
      # accessMode: ""
      # capacity: 
      # matchLabels: {}
  # horizontalPodAutoscaler: HPA1

Example 2: OrderService configuration with sample values for quick setup

apiVersion: apps.oms.ibm.com/v1beta1
kind: OrderService
metadata:
  name: oserv
spec:
  license:
    accept: false
 upgradeStrategy: RollingUpdate
  secret: oserv-secrets
  replicaCount: 1
  profile: large
  orderServiceVersion: "1.0"
​
  image:
    tag: 1.0.2209.0-amd64
    repository: cp.icr.io/cp/ibm-oms-<edition>
    imagePullSecrets:
    - name: ibm-entitlement-key
    - name: my-private-registry-key1
    - name: my-private-registry-key2
​
  networking:
    ingress:
      host: public-domain.mycluster.com
​
  # This networkPolicy is most open and hence least secure. You have been warned!
  networkPolicy:
    podSelector:
      matchLabels:
        none: none
    policyTypes:
      - Ingress
    ingress: []
​
  security:
    ssl:
      trust:
      storeLocation: ""
         trustedCertDir: ""
         storetype: PKCS12
         trustJavaCACerts: true
​
  serverProfiles:
    - name: large
      resources:
        requests:
          cpu: 500m
          memory: 2Gi
        limits:
          cpu: 4000m
          memory: 4Gi
    - name: colossal
      resources:
        requests:
          cpu: 500m
          memory: 4Gi
        limits:
          cpu: 4000m
          memory: 16Gi
​
  configuration:
    jwt_algorithm: RS512
    jwt_audience: service
    jwt_ignore_expiration: false
    jwt_issuer: oms
    additionalConfig:
      enable_graphql_introspection: "true"
      ssl_vertx_disable: "false"
​
  cassandra:
    createDevInstance:
      profile: colossal
      storage:
        name: oserv-services
        capacity: 40Gi
        storageClassName: dynamic-pv
    keyspace: oserv
​
  elasticsearch:
    createDevInstance:
      profile: balanced
      storage:
        name: oserv-services
        capacity: 40Gi
        storageClassName: dynamic-pv
​
  additionalMounts:
    configMaps:
    - name: env-certificates
      mountPath: /var/trustedCerts/cassandra.crt
      subPath: cassandra.crt
    - name: env-certificates
      mountPath: /var/trustedCerts/elastic.crt
      subPath: elastic.crt