From: Dan Timoney Date: Tue, 26 Oct 2021 14:59:36 +0000 (-0400) Subject: [CCSDK] Workaround for naming service host name verification issue X-Git-Tag: 9.0.0~42 X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;ds=sidebyside;h=7ec6cb6b34221a9a2293fbc3c09a89940c8f18bd;p=oom.git [CCSDK] Workaround for naming service host name verification issue The naming service query to policy manager is failing host name verification. While this issue is under investigation, it can be worked around by configuring the naming service to disable host name verification. This requires a new version of the network-name-gen microservice (1.2.1), and a change to set a new env variable to disable host name verification (enabled by default if this variable is unset). Issue-ID: CCSDK-3501 Signed-off-by: Dan Timoney Change-Id: Ia471cd27ce16b6e79a3ce6708e08c7d5f239feb3 --- diff --git a/kubernetes/common/network-name-gen/templates/deployment.yaml b/kubernetes/common/network-name-gen/templates/deployment.yaml index 8ca5374bbd..9bdf19c7ec 100644 --- a/kubernetes/common/network-name-gen/templates/deployment.yaml +++ b/kubernetes/common/network-name-gen/templates/deployment.yaml @@ -93,6 +93,8 @@ spec: value: "{{ .Values.config.aaiUri }}" - name: AAI_AUTH value: "{{ .Values.config.aaiAuth }}" + - name: DISABLE_HOST_VERIFICATION + value: "{{ .Values.config.disableHostVerification }}" volumeMounts: - name: certs mountPath: /opt/etc/config/aai_keystore diff --git a/kubernetes/common/network-name-gen/values.yaml b/kubernetes/common/network-name-gen/values.yaml index c1717c3d24..6937facf6f 100644 --- a/kubernetes/common/network-name-gen/values.yaml +++ b/kubernetes/common/network-name-gen/values.yaml @@ -74,7 +74,7 @@ mariadb-init: # Application configuration defaults. ################################################################# # application image -image: onap/ccsdk-apps-ms-neng:1.2.0 +image: onap/ccsdk-apps-ms-neng:1.2.1 pullPolicy: IfNotPresent # application configuration @@ -90,6 +90,7 @@ config: polUrl: https://policy-xacml-pdp:6969/policy/pdpx/v1/decision polEnv: TEST polReqId: xx + disableHostVerification: true aaiCertPass: changeit aaiCertPath: /opt/etc/config/aai_keystore aaiAuth: QUFJOkFBSQ==