IBM Operational Decision Manager parameters
Configuration parameters are used to install ODM for production on Kubernetes.
ODM for production parameters
| Parameters | Description | Example values |
|---|---|---|
|
dc_odm_datasource.dc_database_type dc_odm_datasource.database_servername dc_odm_datasource.dc_common_database_port dc_odm_datasource.dc_common_database_name dc_odm_datasource.dc_common_database_instance_secret dc_odm_datasource.dc_common_database_instance_user dc_odm_datasource.dc_common_database_instance_password |
Parameters that locate a Db2®, PostgreSQL, or SQLserver and the credentials to connect to it. Microsoft SQL Server support is New in 20.0.3 |
db2 db2forodm 50000 db2db SecretName db2user {base64}UGFzc3cwcmQ0SypT |
| Parameters | Description | Example values |
|---|---|---|
| dc_odm_datasource.dc_common_ssl_enabled | Set to true when the database uses SSL. | true |
| dc_odm_datasource.dc_ssl_secret_name | If SSL is used to secure the database connection, specify the name of the SSL secret. | empty |
| Parameters | Description | Example values |
|---|---|---|
| customization.baiEmitterSecretRef | Enables ODM to emit events to a Kafka server used by IBM Business Automation Insights. Create a Kubernetes secret, and then
enter this secret in the customization.baiEmitterSecretRef parameter field. |
empty |
| customization.authSecretRef | Customizes user authentication and management by overriding the default basic registry or by using an LDAP connection. You must create a Kubernetes secret and enter the name of the secret in this field. | empty |
| For 20.0.1 customization.securitySecretRef | Replaces the default certificate. You must create a Kubernetes secret and enter the name of
the secret in this field. From version 20.0.2, use the shared_configuration.root_ca_secret parameter instead. |
empty |
| New in 19.0.3 debug | When the value is set to true, the parameter activates a trace for ODM in
the operator pod. The parameter is directly under the odm_configuration heading
in the custom resource YAML file. |
false |
| New in 19.0.1 decisionCenter.customlibPvc | Specify the name of the persistent volume claim (PVC) that locates the customized Decision Center JAR files. | empty |
| decisionCenter.enabled | To enable Decision Center. | true |
| New in 20.0.2 decisionCenter.extendRoleMapping | Enable the role mapping extension feature to map an ODM role to one or several groups (basic or LDAP registry) when their names are different. | false |
| New in 19.0.3 decisionCenter.jvmOptionsRef | Specify the name of the configMap that has the defined JVM options. If left empty, the default JVM options are used. | empty |
| New in 19.0.3 decisionCenter.loggingRef | Specify the name of the configMap that has the defined logging options. If left empty, the default logging options are used. | empty |
| decisionCenter.persistenceLocale | The persistence locale for Decision Center. | en_US |
| decisionCenter.replicaCount | The number of Decision Center pods. | 1 ( New in 20.0.3 2) |
|
decisionCenter.resources.limits.cpu decisionCenter.resources.limits.memory decisionCenter.resources.requests.cpu decisionCenter.resources.requests.memory |
The CPU/Memory resource requests/limits for Decision Center. |
2 4096Mi 500m 1500Mi |
| New in 20.0.3 decisionCenter.tagOrDigest | If you want to use a specific image version, you can override the default tag or digest. For
example, setting the value to 20.0.3-IF001 or a
sha256:<digestValue> can be used to pull an interim fix.If left empty, the default tag or digest is used. For more information, see Choosing image tags or digests. |
empty |
| decisionRunner.enabled | To enable Decision Runner. | true |
| New in 20.0.2 decisionRunner.extendRoleMapping | Enable the role mapping extension feature to map an ODM role to one or several groups (basic or LDAP registry) when their names are different. | false |
| New in 19.0.3 decisionRunner.jvmOptionsRef | Specify the name of the configMap that has the defined JVM options. If left empty, the default JVM options are used. | empty |
| New in 19.0.3 decisionRunner.loggingRef | Specify the name of the configMap that has the defined logging options. If left empty, the default logging options are used. | empty |
| decisionRunner.replicaCount | The number of Decision Runner pods. | 1 ( New in 20.0.3 2) |
|
decisionRunner.resources.limits.cpu decisionRunner.resources.limits.memory decisionRunner.resources.requests.cpu decisionRunner.resources.requests.memory |
The CPU/Memory resource requests/limits for Decision Runner. |
2 4096Mi 500m 512Mi |
| New in 20.0.3 decisionRunner.tagOrDigest | If you want to use a specific image version, you can override the default tag or digest. For
example, setting the value to 20.0.3-IF001 or a
sha256:<digestValue> can be used to pull an interim fix.If left empty, the default tag or digest is used. For more information, see Choosing image tags or digests. |
empty |
| New in 20.0.3 decisionServerConsole.description | Specify a description for the Decision Server Console. If left empty, the default description is used. | empty |
| New in 20.0.2 decisionServerConsole.extendRoleMapping | Enable the role mapping extension feature to map an ODM role to one or several groups (basic or LDAP registry) when their names are different. | false |
| New in 19.0.3 decisionServerConsole.jvmOptionsRef | Specify the name of the configMap that has the defined JVM options. If left empty, the default JVM options are used. | empty |
| New in 19.0.3 decisionServerConsole.loggingRef | Specify the name of the configMap that has the defined logging options. If left empty, the default logging options are used. | empty |
|
decisionServerConsole.resources.limits.cpu decisionServerConsole.resources.limits.memory decisionServerConsole.resources.requests.cpu decisionServerConsole.resources.requests.memory |
The CPU/Memory resource requests/limits for Rule Execution Server console. |
2 1024Mi 500m 512Mi |
| New in 20.0.3 decisionServerConsole.title | Specify the title name for the Decision Server Console web page. If left empty, the default title name is used. | empty |
| New in 20.0.3 decisionServerConsole.tagOrDigest | If you want to use a specific image version, you can override the default tag or digest. For
example, setting the value to 20.0.3-IF001 or a
sha256:<digestValue> can be used to pull an interim fix.If left empty, the default tag or digest is used. For more information, see Choosing image tags or digests. |
empty |
| decisionServerRuntime.enabled | To enable Decision Server Runtime. | true |
| New in 20.0.2 decisionServerRuntime.extendRoleMapping | Enable the role mapping extension feature to map an ODM role to one or several groups (basic or LDAP registry) when their names are different. | false |
| New in 19.0.3 decisionServerRuntime.jvmOptionsRef | Specify the name of the configMap that has the defined JVM options. If left empty, the default JVM options are used. | empty |
| New in 19.0.3 decisionServerRuntime.loggingRef | Specify the name of the configMap that has the defined logging options. If left empty, the default logging options are used. | empty |
| decisionServerRuntime.replicaCount | The number of Decision Server Runtime pods. | 1 ( New in 20.0.3 2) |
|
decisionServerRuntime.resources.limits.cpu decisionServerRuntime.resources.limits.memory decisionServerRuntime.resources.requests.cpu decisionServerRuntime.resources.requests.memory |
The CPU/Memory resource requests/limits for Decision Server Runtime. |
2 4096Mi 500m 512Mi |
| New in 20.0.3 decisionServerRuntime.tagOrDigest | If you want to use a specific image version, you can override the default tag or digest. For
example, setting the value to 20.0.3-IF001 or a
sha256:<digestValue> can be used to pull an interim fix.If left empty, the default tag or digest is used. For more information, see Choosing image tags or digests. |
empty |
| New in 20.0.1 decisionServerRuntime.xuConfigRef | A configmap with a name that corresponds to the type of configuration that you want to apply. | empty |
| externalCustomDatabase.datasourceRef | The data source secret reference. | empty |
| externalCustomDatabase.driverPvc | The Persistent Volume Claim to access the JDBC database driver. | empty |
| For 20.0.1 externalDatabase.databaseName | The name of the external database that is used for ODM. If this parameter is empty,
odmdb is used by default. |
empty |
| For 20.0.1 externalDatabase.secretCredentials | The name of the secret that contains the credentials to connect to the external database. | empty |
| For 20.0.1 externalDatabase.port | The port that is exposed to connect to the external database. If this parameter is empty, the default port numbers are used: 5432 for PostgreSQL and 50000 for Db2. | empty |
| For 20.0.1 externalDatabase.serverName | The name of the server that runs the database for ODM. Only PostgreSQL and Db2 are supported as external database. | empty |
| For 20.0.1 externalDatabase.sslSecretRef | Specify the name of the secret that contains the TLS certificate that you want to use for the secure database. This parameter is left empty for a non-secured database. | empty |
| For 20.0.1 externalDatabase.type | The type of the external database. This parameter can be set to postgresql
for a PostgreSQL database or to db2 for a Db2
database. If this parameter is empty, postgresql is used by default. |
empty |
| image.arch | The worker node architecture. The architecture is amd64 (or x86_64), which refers to the 64-bit edition for Linux® x86. |
empty |
| image.pullPolicy | The image pull policy. | "IfNotPresent", pulls the most recent downloaded docker image if one is not present. Set the policy to "Always" to pull the latest version of the docker image. "Never", does not attempt to pull the image. |
| image.pullSecrets | The secrets to be able to pull images. | empty Does not add image pull secrets to deployed pods. |
| image.repository | The repository. | mycluster:8500/default/ |
| image.tag | The image tag number. | For 20.0.1 8.10.3.0_ICP2001 For 20.0.2 8.10.4.0 For 20.0.2 IF001 8.10.4.0-IF002 New in 20.0.3 8.10.5.0 |
| For 20.0.1 internalDatabase.databaseName | The name of the internal database that is used for ODM. This parameter can be used to define a different name for the PostgreSQL database that is created by default when the image is first started. | odmdb |
| For 20.0.1 internalDatabase.persistence.enabled | To enable the use of a Persistent Volume Claim (PVC) to persist data. | true |
| For 20.0.1 internalDatabase.persistence.resources.requests.storage | The requested storage size for Persistent Volume. | 5Gi |
| For 20.0.1 internalDatabase.persistence.storageClassName | The storage class name for Persistent Volume. | empty |
| For 20.0.1 internalDatabase.persistence.useDynamicProvisioning | To use dynamic provisioning for Persistent Volume Claim. If this parameter is set to false, the Kubernetes binding process selects a pre-existing volume. Ensure, in this case, that a volume is not already bound before you install the chart. | false |
|
For 20.0.1 internalDatabase.resources.limits.cpu For 20.0.1 internalDatabase.resources.limits.memory For 20.0.1 internalDatabase.resources.requests.cpu For 20.0.1 internalDatabase.resources.requests.memory |
The CPU/Memory resource requests/limits for the internal database. |
2 4096Mi 500m 512Mi |
| For 20.0.1 internalDatabase.secretCredentials | The name of the secret that contains the credentials to connect to the internal database. | empty |
|
livenessProbe.failureThreshold livenessProbe.initialDelaySeconds livenessProbe.periodSeconds livenessProbe.timeoutSeconds |
The behavior of liveness probes to know when to restart a container. |
10 ( New in 20.0.3 50) 300 ( New in 20.0.3 400 10 5 |
| New in 20.0.1 oidc.enabled | Set to true to enable UMS authentication. | true in 20.0.3, false previously |
| For 20.0.1 oidc.adminRef | The URL of the UMS server is mandatory. | empty |
| For 20.0.1 oidc.allowedDomains | A secret for the UMS administrator. The administrator secret is used to call the UMS REST API to register the URLs of the ODM services. | * |
| For 20.0.1 oidc.clientRef | The configmap containing the list of redirect URLs (separated by commas) to access ODM. | empty |
| New in 20.0.1 oidc.provider | The secret reference name that contains the client id and password to use the UMS REST API. If not provided, a default secret is created. | ums |
| For 20.0.1 oidc.redirectUrisRef | The name of the provider used to build the endpoints for UMS REST API calls. If
not provided, the umsprovider name is used. |
empty |
| For 20.0.1 oidc.serverUrl | A list of domain names (separated by commas) to avoid Cross-Site Request Forgery (CSRF) attacks on the Decision Server console. | empty |
|
readinessProbe.failureThreshold readinessProbe.initialDelaySeconds readinessProbe.periodSeconds readinessProbe.timeoutSeconds |
The behavior of readiness probes to know when the containers are ready to start accepting traffic. |
45 ( New in 20.0.3 90) 5 5 5 |
| New in 20.0.3 route_ingress_annotations | You can add capabilities to your Ingress application load balancer (ALB), by specifying annotations as metadata. For example, to handle specific errors with custom actions. For more information about available Ingress annotations on OpenShift, see https://cloud.ibm.com/docs/openshift?topic=openshift-ingress_annotation. | empty |
| service.enableTLS | To enable Transport Layer Security (TLS). If this parameter is set to true, the web applications are accessed through HTTPS. If this parameter is set to false, the web applications are accessed through HTTP. | true |
| service.type | The Kubernetes Service type. | NodePort |