PrivateEdition/Current/TenantPEGuide/Configure - Revision history

WikiSysop at 15:01, October 7, 2022

2022-10-07T15:01:13Z

WikiSysop at 17:01, September 23, 2022

2022-09-23T17:01:30Z

WikiSysop at 16:31, September 23, 2022

2022-09-23T16:31:36Z

WikiSysop at 19:01, September 21, 2022

2022-09-21T19:01:10Z

Ed.jamer@genesys.com: Text replacement - "Genesys Engage [cC]loud" to "Genesys Multicloud CX"

2021-11-09T20:31:56Z

Text replacement - "Genesys Engage [cC]loud" to "Genesys Multicloud CX"

Corinne.hicks@genesys.com: Published

2021-09-27T18:11:36Z

Published

Show changes

Corinne.hicks@genesys.com: Published

2021-06-30T20:38:35Z

Published

New page

{{Article
|Standalone=No
|DisplayName=Configure the Tenant Service
|Context=Learn how to configure the Tenant Service.
|ComingSoon=No
|Section={{Section
|sectionHeading=Override Helm chart values
|alignment=Vertical
|structuredtext=For additional information about overriding Helm chart values, see {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|topic=HelmOverrides|display text=Overriding Helm Chart values}} in the ''{{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|display text=Genesys Engage Cloud Private Edition Guide}}''.

This section describes the purpose and use cases for the configurable parameters of a Tenant Service deployment. The content in the following tables is not intended to be actual values or the names of override options for the Helm charts; you can extract those later from the '''values.yaml''' file for each Helm chart. 
{{{!}} class="wikitable"
{{!}}+Versioning
!Group
!Name
!Purpose
!Comments
{{!}}-
{{!}}version
{{!}}Tenant image versions
{{!}}Target image to install; must use same version for all init containers.
{{!}}
{{!}}-
{{!}}version
{{!}}Roles and permissions version
{{!}}Target version of roles and permissions to apply.
{{!}}
{{!}}-
{{!}}location
{{!}}Image location
{{!}}Target registry to pull images from.
{{!}}
{{!}}}

{{{!}} class="wikitable"
{{!}}+Identification
!Group
!Name
!Purpose
!Comments
{{!}}-
{{!}}Tenant
{{!}}name
{{!}}nickname of tenant
{{!}}human readable name , default to "t<short_id>"
{{!}}-
{{!}}Tenant
{{!}}uuid
{{!}}unique identifier of all instances of tenant service
{{!}}all nodes deployed to handle end customer environment use that uuid that is also registered. last 4 positions of this uuid are used as short tenant id, when applicable.
{{!}}}
{{AnchorDiv|backend}}

{{{!}} class="wikitable"
{{!}}+Backend parameters
!Group
!name
!purpose
!comment
{{!}}-
{{!}}postgres
{{!}}database host
{{!}}reference to backend dbms to persist service into
{{!}}either direct value or file path that can point out to a mapped volume with file content that can be used as dbms name
{{!}}-
{{!}}postgres
{{!}}database user
{{!}}reference to backend database to persist service into
{{!}}either direct value or file path that can point out to a mapped volume with file content that can be used as database username
{{!}}-
{{!}}postgres
{{!}}database name
{{!}}reference to backend database to persist service into
{{!}}either direct value or file path that can point out to a mapped volume with file content that can be used as database username
{{!}}-
{{!}}postgres
{{!}}database password parameters
{{!}}either direct value or reference to a secret name and key that hold a value, depends on relevant k8s secret flag and k8s secret env map flag
{{!}}these parameters control how password is being extracted by service. direct value is supported to testing purposes; secret name can be specified if password from external secret shall be mounted as a volume and password exposed via file; secret key can be specified if password shall be mapped to environment variable
{{!}}-
{{!}}postgres
{{!}}k8s secret usage flags
{{!}}indication of k8s secret being used to keep password and whenever secret shall be mounted to env variable or expected to be mapped as a volume
{{!}}boolean values that forces use of secret (instead of direct database password).
{{!}}-
{{!}}postgres
{{!}}ssl usage
{{!}}specify secure connection preferences
{{!}}allow or require tls
{{!}}-
{{!}}consul
{{!}}k8s secret usage flags
{{!}}indication of k8s secret being used to keep token and whenever secret shall be mounted to env variable or expected to be mapped as a volume
{{!}}boolean values that force use of secret (instead of direct consul token value).
{{!}}-
{{!}}consul
{{!}}consul token parameters
{{!}}either direct value or reference to a secret name and key that hold a value, depends on relevant k8s secret flag and k8s secret env map flag
{{!}}these parameters control how token is being extracted by service. direct value is supported to testing purposes; secret name can be specified if token from external secret shall be mounted as a volume and token exposed via file; secret key can be specified if password shall be mapped to environment variable
{{!}}-
{{!}}redis
{{!}}k8s secret usage flags
{{!}}indication of k8s secrets being used to keep connection strings and whenever secrets shall be mounted to env variables or expected to be mapped as a volumes
{{!}}boolean values that forces use of secret (instead of direct connection strings). applicable for all type of redis connections supported by tenant
{{!}}-
{{!}}redis
{{!}}redis connection string for tenant stream
{{!}}either direct value or reference to a secret name and key that hold a value, depends on relevant k8s secret flag and k8s secret env map flag
{{!}}these parameters control how string is being extracted by service. direct value is supported for testing purposes; secret name can be specified if value from external secret shall be mounted as a volume and connection parameters exposed via file; secret key can be specified if string shall be mapped to environment variable
{{!}}-
{{!}}redis
{{!}}redis connection string for config cache
{{!}}either direct value or reference to a secret name and key that hold a value, depends on relevant k8s secret flag and k8s secret env map flag
{{!}}these parameters control how string is being extracted by service. direct value is supported for testing purposes; secret name can be specified if value from external secret shall be mounted as a volume and connection parameters exposed via file; secret key can be specified if string shall be mapped to environment variable
{{!}}-
{{!}}redis
{{!}}cluster flag
{{!}}type of redis backend to connect
{{!}}indicate whenever backend for redis is cluster or standalone server (same is used for all types of redis endpoints)
{{!}}-
{{!}}kafka
{{!}}k8s secret usage flags
{{!}}indication of k8s secrets being used to keep connection strings and whenever secrets shall be mounted to env variables or expected to be mapped as volumes
{{!}}boolean values that force use of secret (instead of direct connection strings).
{{!}}-
{{!}}kafka
{{!}}kafka connection string
{{!}}either direct value or reference to a secret name and key that hold a value, depends on relevant k8s secret flag and k8s secret env map flag
{{!}}these parameters control how string is being extracted by service. direct value is supported for testing purposes; secret name can be specified if value from external secret shall be mounted as a volume and connection parameters exposed via file; secret key can be specified if string shall be mapped to environment variable
{{!}}}
{{AnchorDiv|k8sparams}}

{{{!}} class="wikitable"
{{!}}+Kubernetes parameters
!Group
!name
!purpose
!comments
{{!}}-
{{!}}Auth and Autorization
{{!}}Service Account
{{!}}Specify non-default service account that shall be associated with all PODs of a tenant service deployment
{{!}}PODs will be assigned default account if not specified. If required, a separate account will be created during tenant deployment and set to use by all PODs. This could be required if consul registration of tenant service relies on tenant's POD having k8s accounts named after tenant service being registered. Service account is being created with name matching service name of as tenant (as visible in consul)
{{!}}-
{{!}}Auth and Autorization
{{!}}Pod identity
{{!}}specify optional annotation to associate with POD in order to access K8s resources
{{!}}PODs may be assigned adodbidentity if needed
{{!}}-
{{!}}Scheduling
{{!}}pod node selector
{{!}}specify optional node pool selector for tenant PODs
{{!}}PODs can be assigned to a specific pool, if needed. There is no default K8s pool selections
{{!}}-
{{!}}Scheduling
{{!}}pod toleration
{{!}}specify optional toleration for tenant PODs
{{!}}PODs can be set to tolerate specific taints, There is no default tolerations
{{!}}-
{{!}}Scheduling
{{!}}affinity
{{!}}enable affinity of tenant PODs to provide high availability
{{!}}PODs of same tenant service may be forced to schedule in different locations (if supported by underlying infrastructure) using <nowiki>failure-domain.beta.kubernetes.io/zone</nowiki> annotation when this is enabled. There is no affinity by default.
{{!}}-
{{!}}Scheduling
{{!}}priority class
{{!}}specify optional priority class for tenant PODs
{{!}}PODS may be assigned specific priority class; not set by default.
{{!}}}
{{{!}} class="wikitable"
{{!}}+Logging parameters
!Group
!name
!purpose
!comments
{{!}}-
{{!}}logging frameworks
{{!}}fluentbit
{{!}}specify usage of fluentbit for tenant console logging
{{!}}tenant PODs won't use fluentbit logging solution by default, tenant-specific fluentbit configuration can be enabled when deploying tenant-monitor resources, and use of fluentbit sidecar can be enabled on tenant PODs afterward.
{{!}}-
{{!}}logging frameworks
{{!}}fluentbit config
{{!}}specify config map with fluentbit sidecar configuration that should be mounted as a volume
{{!}}if fluent is enabled in both tenant-monitor and tenant charts, a volume referencing config map shall be specified, as below (if custom config map is created, map name can be set differently)

- name: tenants-fluent-bit-config

configMap:

name: tenants-fluent-bit-config
{{!}}-
{{!}}logging frameworks
{{!}}fluentbit local storage
{{!}}specify volume and volume mount where fluentbit logs will accumulate
{{!}}if fluent bit is enabled, below volume :

- name: fluent-logs

emptyDir: {}

and volume mount:

- name: fluent-logs

mountPath: "/opt/genesys/logs/JSON"

shall be added
{{!}}-
{{!}}file logging
{{!}}logging persistent volume
{{!}}specify usage of persistent volumes for logging by tenant component that produce log files
{{!}}tenant PODs won't use persistent volume claims by default and no storage classes are created. Persistent volume claims can be added to tenant PODs when this is enabled
{{!}}-
{{!}}file logging
{{!}}logging persistent volume storage class
{{!}}if use of persistent volume for logging has been enabled, storage class can be specified for these volumes as needed
{{!}}if tenant PODS are set to use persistent volume claims, storage class can be specified explicitly for volume claims. storage class is not specified in PVC by default
{{!}}-
{{!}}file logging
{{!}}logging storage class
{{!}}if logging to persistent volume is enabled and storage class has been specified explicitly then creation of storage class can also be enabled as needed
{{!}}tenant-specific storage class for persistent volumes won't get created by default, can be enabled when deploying tenant-monitor resources and later utilized by tenant PODs using same storage class name. storage class name shall be specified for this to work
{{!}}-
{{!}}file logging
{{!}}logging empty directory
{{!}}default logging mount path pointing to a K8s empty directory volume
{{!}}part of default mounts provided for tenant service
{{!}}}
{{{!}} class="wikitable"
{{!}}+Monitoring and observability
!Group
!name
!purpose
!comments
{{!}}-
{{!}}prometheus
{{!}}Prometheus pod monitor
{{!}}specify if pod monitor to scrape prom endpoints of tenant PODs should be created
{{!}}tenant-monitor won't create pod monitor for prometheus by default, prometheus specific monitor can be created as part of infrastructure deployment when this is enabled
{{!}}-
{{!}}prometheus
{{!}}Pod level annotations
{{!}}alternative to enabling pod monitor
{{!}}
{{!}}}
{{{!}} class="wikitable"
{{!}}+Integration
!Group
!name
!purpose
!comments
{{!}}-
{{!}}GWS
{{!}}GWS endpoint
{{!}}specify dedicated endpoint to register tenant service upon initial deployment or upgrade
{{!}}when provided, define contact address to reach master GWS environment service that should be used to register tenant resources to make them available for GWS-based applications. by default, endpoint isn't specified and localhost connection attempt will be made by tenant container, GWS endpoint shall be reachable via service mesh upstream
{{!}}-
{{!}}GWS
{{!}}GWS endpoint tls mode
{{!}}enable https (secure) connection mode to contact GWS endpoint
{{!}}when endpoint is provided, use of this parameter forces secure connection when accessing GWS on that address. NOTE: not available in initial release, only http connections are supported
{{!}}-
{{!}}GWS
{{!}}k8s secret usage flags
{{!}}indication of k8s secrets being used to keep client id and token and whenever secrets shall be mounted to env variables or expected to be mapped as volumes
{{!}}boolean values that force use of secret (instead of direct client id and token).
{{!}}-
{{!}}GWS
{{!}}client id and token
{{!}}either direct values or references to secret names and keys that hold values, depends on relevant k8s secret flag and k8s secret env map flag
{{!}}these parameters control how client id and token is being extracted by service. direct value is supported for testing purposes; secret name can be specified if value from external secret shall be mounted as a volume and connection parameters exposed via file; secret key can be specified if string shall be mapped to environment variables
{{!}}-
{{!}}Service Mesh
{{!}}upstream services
{{!}}override upstream service references used by tenant instance to locate intra-service and platform dependencies via consul
{{!}}tenant POD has default service references that tenant service has to access via consul service mesh, this parameter allow to specify alternative values to make consul service names to tenant POD local ports allocated for service mesh.
{{!}}-
{{!}}voice
{{!}}sip domain
{{!}}provide sip communication domain for voice /sbc integration
{{!}}customize SIP URI used to deliver between tenant and core voice platform and / or SBC
{{!}}-
{{!}}Tenant
{{!}}service user
{{!}}provide name of service user account
{{!}}this account is being used to manage all parts of tenant service provisioning and is created at bootstrap
{{!}}-
{{!}}Tenant
{{!}}k8s secret usage flags
{{!}}indicate usage of k8s secrets to keep tenant service account password
{{!}}
{{!}}-
{{!}}Tenant
{{!}}service user password
{{!}}either direct value or references to a secret name and key that hold values, depends on relevant k8s secret flag and k8s secret env map flag
{{!}}these parameters control how password for internal admin account is being accessed service. direct value is supported for testing purposes; secret name can be specified if password from external secret shall be mounted as a volume and password exposed as a file; secret key can be specified if password shall be mapped to environment variables
{{!}}}
{{AnchorDiv|scalabilityparams}}
{{{!}} class="wikitable"
{{!}}+Scalability and redundancy parameters
!Group
!name
!purpose
!comment
{{!}}-
{{!}}Tenant
{{!}}node count
{{!}}manage number of nodes deployed per service instance
{{!}}by default service instance is being deployed with single node. if local high availability is required, additional nodes can be added to as service by value of this parameter and re-running deployment
{{!}}-
{{!}}Tenant
{{!}}master location
{{!}}manage location where master (writable) tenant node can be found for multi-regional deployments
{{!}}by default tenant service is deployed as master, and expects to have writable local database backend accessible at its location, this parameter is required when deploying additional regions of the same tenant at other locations and its content should match with the name of consul datacenter where master tenant nodes are deployed. it shall be set the same across all locations
{{!}}}
{{{!}} class="wikitable"
{{!}}+Extended parameters
!Group
!name
!purpose
!comment
{{!}}-
{{!}}postgres
{{!}}main volume mounts for backend secrets
{{!}}specify volumes and volume mounts for main tenant container that reference secrets to bound
{{!}}usage of volumes and volume mounts depends on backend parameters selected as part of backend provisioning. volumes and mounts need to be specified if backend secrets are provisioned to come from secrets mapped as file systems. Note: Tenant has only one set of volume and volumeMounts entries in parameters overrides, all volumes for all purposes must be concatenated into one entry
{{!}}-
{{!}}postgres
{{!}}init volume mounts for backend secrets
{{!}}specify volumes and volume mounts for init containers (which are started as part of tenant onboarding and require secrets to operate)
{{!}}Similar to volumes/mounts of main tenant container. Note: Tenant has only one set of initVolumes and initVolumeMounts entries in parameters overrides, all volumes for all purposes must be concatenated into one entry.
{{!}}-
{{!}}consul
{{!}}main volume mounts for consul token
{{!}}specify volume mounts for main container to bound for consul access creds
{{!}}usage of volumes and volume mounts depends on backend parameters selected as part of consul provisioning. Volumes and mounts need to be specified if consul token is being provisioned from secret mapped as file systems. Note: Tenant has only one set of volume and volumeMounts entries in parameters overrides, all volumes for all purposes must be concatenated into one entry
{{!}}-
{{!}}consul
{{!}}init volume mounts for consul token
{{!}}specify volume mounts for main container to bound for consul access creds
{{!}}Similar to volumes/mounts of main tenant container. Tenant has only one set of initVolumes and initVolumeMounts entries in parameters overrides, all volumes for all purposes must be concatenated into one entry.
{{!}}-
{{!}}redis
{{!}}
{{!}}
{{!}}only main container needs to bound
{{!}}-
{{!}}kafka
{{!}}
{{!}}
{{!}}only main container needs to bound
{{!}}}
|Status=No
}}{{Section
|sectionHeading=Configure Kubernetes
|alignment=Vertical
|structuredtext={{Notices|Notice=PEComingSoon}}
|Status=No
}}{{Section
|sectionHeading=Configure security
|anchor=ConfigSecurity
|alignment=Vertical
|structuredtext====Service-specific infrastructure definitions===
====Docker container account adjustments====
Before you deploy the Tenant Service, be sure to read {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|topic=ConfigSecurity|display text=Security Settings}} in the {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|display text=Setting up Genesys Engage Cloud Private Edition}} guide. If you are using a non-default account (see {{Link-SomewhereInThisVersion|manual=TenantPEGuide|topic=Configure|anchor=k8sparams|display text=Kubernetes parameters}}), then you might have to associate context with that particular account:<source lang="text">
oc adm policy add-scc-to-user genesys-restricted -z tenant-<TENANT-UUID> -n <namespace>
</source>
{{AnchorDiv|servicespecificsecrets}}

===Service-specific secrets===

====Postgres database backend====
Database backend can be allocated shared or dedicated. A Tenant Service requires a separate database. Once deployed, secrets with details of postgres backend parameters must be created as follows:
<source lang="text">
kubectl create secret generic dbserver -n voice --from-literal="dbserver=<postgres service endpoint>"
kubectl create secret generic dbname -n voice --from-literal="dbname=<tenant DB name at postgres>"
kubectl create secret generic dbuser -n voice --from-literal="dbuser=<postgres user for tenant database>"
kubectl create secret generic dbpassword -n voice --from-literal="dbpassword=<password>"
</source>

====Service account password====
Default account allowing to access the Tenant Service config interface after initial deployment can be supplied a password via a secret. If not provided, '''password''' will be used as a default value (empty passwords are prohibited by a Tenant Service).
<source lang="text">
kubectl create secret generic svcuseraccount -n voice --from-literal="svcpassword=<password>"
</source>

====Genesys Authentication backend secrets====
Genesys Web Services (GWS)/Genesys Authentication integration requires a client ID and token to allow a Tenant Service to register at GWS.
<source lang="text">
kubectl create secret generic gauthclientid -n voice --from-literal="clientid=<client id>"

kubectl create secret generic gauthclientsecret -n voice --from-literal="clientsecret=<token>"
</source>
|Status=No
}}
|PEPageType=9c3ae89b-4f75-495b-85f8-d8c4afcb3f97
}}

@@ Line 7: / Line 7: @@
 |sectionHeading=Override Helm chart values
 |alignment=Vertical
-|structuredtext=For additional information about overriding Helm chart values, see {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|topic=HelmOverrides|display text=Overriding Helm Chart values}} in the ''{{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|display text=Genesys Engage Cloud Private Edition Guide}}''.
+|structuredtext=For additional information about overriding Helm chart values, see {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|topic=HelmOverrides|display text=Overriding Helm Chart values}} in the ''{{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|display text=Genesys Multicloud CX Private Edition Guide}}''.
 This section describes the purpose and use case for each configurable parameter in a Tenant Service deployment.
@@ Line 370: / Line 370: @@
 |anchor=ConfigSecurity
 |alignment=Vertical
-|structuredtext=Before you deploy the Tenant Service, be sure to read {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|topic=ConfigSecurity|display text=Security Settings}} in the ''{{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|display text=Setting up Genesys Engage Cloud Private Edition}}'' guide.
+|structuredtext=Before you deploy the Tenant Service, be sure to read {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|topic=ConfigSecurity|display text=Security Settings}} in the ''{{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|display text=Setting up Genesys Multicloud CX Private Edition}}'' guide.
 {{AnchorDiv|SecurityContextConfig}}

@@ Line 370: / Line 370: @@
 |sectionHeading=Configure Kubernetes
 |alignment=Vertical
-|structuredtext={{Notices|Notice=PEComingSoon}}
+|structuredtext=For information, see the following resources:
 |Status=No
 }}{{Section
@@ Line 379: / Line 384: @@
 {{AnchorDiv|SecurityContextConfig}}
-==={{Editgrn_open}}Security context configuration{{Editgrn_close}}===
+===Security context configuration===
 By default, the user and group IDs are set in the '''values.yaml''' file as <tt>500:500:500</tt>, meaning the '''genesys''' user.
 <source lang="text">
@@ Line 421: / Line 426: @@
 </source>
 {{AnchorDiv|servicespecificsecrets}}
-===Service-specific secrets===
+===Configure service-specific secrets===
 ====Postgres database backend====

@@ Line 154: / Line 154: @@
 {{!}}Pod identity
 {{!}}specify optional annotation to associate with POD in order to access Kubernetes resources
-{{!}}PODs may be assigned adodbidentity if needed
+{{!}}PODs may be assigned an ADODB identity if needed
 {{!}}-
 {{!}}Scheduling

@@ Line 34: / Line 34: @@
 {{!}}
 {{!}}}
 {{{!}} class="wikitable"
@@ Line 45: / Line 46: @@
 {{!}}name
 {{!}}Nickname of the tenant.
-{{!}}Human-readable name. The default value is "t<short_id>".
+{{!}}Human-readable name. The default value is the Helm release name.
 {{!}}-
 {{!}}Tenant
@@ Line 64: / Line 65: @@
 {{!}}database host
 {{!}}A reference to the backend DBMS into which to persist the service.
-{{!}}Either direct value or file path that can point out to a mapped volume with file content that can be used as DBMS name.
+{{!}}Either a direct value or a file path that points to a mapped volume with file content to be used as the DBMS name.
 {{!}}-
 {{!}}postgres
 {{!}}database user
 {{!}}A reference to the backend database into which to persist the service.
-{{!}}Either direct value or file path that can point out to a mapped volume with file content that can be used as database username.
+{{!}}Either a direct value or a file path that points to a mapped volume with file content to be used as the database username.
 {{!}}-
 {{!}}postgres
 {{!}}database name
 {{!}}A reference to the backend database into which to persist the service.
-{{!}}Either direct value or file path that can point out to a mapped volume with file content that can be used as database username.
+{{!}}Either a direct value or a file path that points to a mapped volume with file content to be used as the database name.
 {{!}}-
 {{!}}postgres
@@ Line 175: / Line 176: @@
 {{!}}PODS may be assigned specific priority class; not set by default.
 {{!}}}
 {{{!}} class="wikitable"
 {{!}}+Logging parameters
@@ Line 184: / Line 187: @@
 {{!}}logging frameworks
 {{!}}fluentbit
-{{!}}specify usage of fluentbit for tenant console logging
+{{!}}Specify usage of fluentbit for tenant console logging
-{{!}}tenant PODs won't use fluentbit logging solution by default,   tenant-specific fluentbit configuration can be enabled when deploying tenant-monitor resources, and use of fluentbit sidecar can be enabled on tenant PODs afterward.
+{{!}}Tenant PODs won't use fluentbit logging solution by default. Tenant-specific fluentbit configuration can be enabled when deploying tenant-monitor resources, and use of fluentbit sidecar can be enabled on tenant PODs afterward.
 {{!}}-
 {{!}}logging frameworks
 {{!}}fluentbit config
-{{!}}specify config map with fluentbit sidecar configuration that should be mounted as a volume
+{{!}}Specify config map with fluentbit sidecar configuration that should be mounted as a volume.
-{{!}}if fluent is enabled in both tenant-monitor and tenant charts, a volume referencing config map shall be specified, as below (if custom config map is created, map name can be set differently)
+{{!}}If fluent is enabled in both tenant-monitor and tenant charts, a volume-referencing config map shall be specified, as below (if custom config map is created, map name can be set differently)
 <source lang="text">
     - name: tenants-fluent-bit-config
@@ Line 201: / Line 204: @@
 {{!}}logging frameworks
 {{!}}fluentbit local storage
-{{!}}specify volume and volume mount where fluentbit logs will accumulate
+{{!}}Specify volume and volume mount where fluentbit logs will accumulate.
 {{!}}If fluent bit is enabled, the following volume is added:
 <source lang="text">
@@ Line 218: / Line 221: @@
 {{!}}file logging
 {{!}}logging persistent volume
-{{!}}specify usage of persistent volumes for logging by tenant  component that produce log files
+{{!}}Specify usage of persistent volumes for logging by tenant  components that produce log files.
-{{!}}tenant PODs won't use persistent volume claims by default and no storage classes are created. Persistent volume claims can be added to tenant PODs when this is enabled
+{{!}}Tenant PODs won't use persistent volume claims by default and no storage classes are created. Persistent volume claims can be added to tenant PODs when this is enabled.
 {{!}}-
 {{!}}file logging
 {{!}}logging persistent volume storage class
-{{!}}if use of persistent volume for logging has been enabled, storage class can be specified for these volumes as needed
+{{!}}If use of persistent volume for logging has been enabled, storage class can be specified for these volumes as needed.
-{{!}}if tenant PODS are set to use persistent volume claims, storage class can be specified explicitly for volume claims. storage class is not specified in PVC by default
+{{!}}If tenant PODS are set to use persistent volume claims, storage class can be specified explicitly for volume claims. Storage class is not specified in PVC by default.
 {{!}}-
 {{!}}file logging
@@ Line 236: / Line 239: @@
 {{!}}part of default mounts provided for tenant service
 {{!}}}
 {{{!}} class="wikitable"
 {{!}}+Monitoring and observability
@@ Line 244: / Line 249: @@
 {{!}}-
 {{!}}prometheus
-{{!}}Prometheus pod monitor
+{{!}}Prometheus PodMonitor
-{{!}}specify if pod monitor to scrape prom endpoints of tenant PODs should be created
+{{!}}Specify if PodMonitor to scrape Prometheus endpoints of tenant pods should be created.
-{{!}}tenant-monitor won't create pod monitor for prometheus by default, prometheus specific monitor can be created as part of infrastructure deployment when this is enabled
+{{!}}Tenant-monitor doesn't create PodMonitor for Prometheus by default. Prometheus specific monitor can be created as part of infrastructure deployment when this is enabled.
 {{!}}-
 {{!}}prometheus
 {{!}}Pod level annotations
-{{!}}alternative to enabling pod monitor
+{{!}}Alternative to enabling pod monitor.
 {{!}}
 {{!}}}
@@ Line 353: / Line 358: @@
 {{!}}
 {{!}}
-{{!}}only main container needs to bound
+{{!}}Only main container needs to be bound
 {{!}}-
 {{!}}kafka
 {{!}}
 {{!}}
-{{!}}only main container needs to bound
+{{!}}Only main container needs to be bound
 {{!}}}
 |Status=No
@@ Line 418: / Line 423: @@
 ====Postgres database backend====
-Database backend can be allocated shared or dedicated. A Tenant Service requires a separate database. Once deployed, secrets with details of postgres backend parameters must be created as follows:
+Database backend can be allocated as shared or dedicated. The Tenant Service requires a separate database. Once deployed, secrets with details of Postgres backend parameters must be created as follows:
 <source lang="text">
 kubectl create secret generic dbserver -n voice --from-literal="dbserver=<postgres service endpoint>"
@@ Line 427: / Line 432: @@
 ====Service account password====
-Default account allowing to access the Tenant Service config interface after initial deployment can be supplied a password via a secret. If not provided, '''password''' will be used  as a default value (empty passwords are prohibited by a Tenant Service).
+The default account that allows access to the Tenant Service config interface after initial deployment can be supplied a password through a secret. If not provided, '''password''' will be used  as a default value (empty passwords are prohibited by the Tenant Service).
 <source lang="text">
 kubectl create secret generic svcuseraccount -n voice --from-literal="svcpassword=<password>"
@@ Line 433: / Line 438: @@
 ====Genesys Authentication backend secrets====
-Genesys Web Services (GWS)/Genesys Authentication integration requires a client ID and token to allow a Tenant Service to register at GWS.
+Genesys Web Services (GWS)/Genesys Authentication integration requires a client ID and token to allow the Tenant Service to register at GWS.
 <source lang="text">
 kubectl create secret generic gauthclientid -n voice --from-literal="clientid=<client id>"