Dominik Mizyn [Tue, 14 Apr 2020 16:03:53 +0000 (18:03 +0200)]
[POLICY] Remove hardcoded credentials from policy-distribution
This patch remove hardcoded healthcheck credentials from
policy-distribution.
Issue-ID: OOM-2342
Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
Change-Id: I7c71fcceab030bd7858e8de9fe3f58451ac505d6
[Fix init container]
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
(cherry picked from commit
4aa534fa3920335f1ec899331b435ac6b8c8521b)
Sylvain Desbureaux [Wed, 13 May 2020 11:13:28 +0000 (11:13 +0000)]
Merge "[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt release" into frankfurt
deen1985 [Wed, 13 May 2020 07:29:02 +0000 (09:29 +0200)]
Update git submodules
* Update kubernetes/robot from branch 'frankfurt'
to
4a50a3b035623ab285263a9ebed5d98f33bc65fe
- demo-k8s.sh -- robot heatbridge updated
Inputs to heatbridge operation updated,
Inputs description updated
Signed-off-by: deen1985 <damian.nowak@nokia.com>
Change-Id: I96d89a7ed52850e5a9bbae2bb69177d25eb942ea
Signed-off-by: deen1985 <damian.nowak@nokia.com>
Issue-ID: INT-1584
(cherry picked from commit
eed1fc5b5a55fc75935edda30cdee84542fedb4c)
- Change ingress base hostname
Change ingress base hostname to recommended value
Issue-ID: OOM-2391
Change-Id: Ica5ab275ed3eac2ec6f1669fc9ca32c29a2b12e6
- Merge "Host and port template for ingress setup"
- Merge "[ROBOT] Fix Ingress configuration"
- Merge "ROBOT e2e test cases improvements for csar/zip tosca package validation in VNFSDK and SDC Onbarding fix in scrip required for Frankfurt"
- ROBOT e2e test cases improvements for csar/zip tosca package validation in VNFSDK and SDC Onbarding fix in scrip required for Frankfurt
Issue-ID: INT-1240
Signed-off-by: Krzysztof Kuzmicki <krzysztof.kuzmicki@nokia.com>
Change-Id: I08584c00eaaa7cb84bcb055d1f7eee41d95d6019
- [ROBOT] Fix Ingress configuration
Set SSL to redirect as backend uses HTTPS.
Issue-ID: OOM-2186
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I94cf20a016f1d1face44037d9912de774a5f338c
- Host and port template for ingress setup
Depending on the ingress robot configuration
host and port template should choose ingress
host and port or direct cluster host and port
+ alternarive ingress hostname in config file
Change-Id: I04c13657f5c5cf8b5f5373897bdc551dc2efdf36
Issue-ID: OOM-2341
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Sylvain Desbureaux [Wed, 13 May 2020 07:06:19 +0000 (07:06 +0000)]
Merge "[Tree-wide] Make chart build process predictible" into frankfurt
Sylvain Desbureaux [Tue, 12 May 2020 11:45:03 +0000 (11:45 +0000)]
Merge "Revise dcae bootstrap version" into frankfurt
Krzysztof Opasiak [Fri, 8 May 2020 16:56:39 +0000 (18:56 +0200)]
[Tree-wide] Make chart build process predictible
ONAP is built using plain makefile rules. List of targets is generated
using wildcard function. Based on make changelog:
http://git.savannah.gnu.org/cgit/make.git/tree/NEWS
since version 3.82 wildcard is not going to sort its results which
means that charts are being processed in an arbitrary order which may
lead to build failure due to missing dependencies.
Since version 4.3 make started sorting the wildcard results once again
which may lead to build issues.
To avoid that and make our builds predictible independently from
Makefile version let's make sure that we always sort wildcard results.
Addinally let's use 'file://' instead of '@local' for charts in common
to resolve dependencies between them.
Issue-ID: OOM-2399
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Iacb02dcdbd577ce0e9ca1078dd0586d296ec9375
(cherry picked from commit
aae2da91becf5f1f56329d49656c1ad634917cba)
Sylvain Desbureaux [Tue, 12 May 2020 07:20:53 +0000 (07:20 +0000)]
Merge "Add Helm charts for CDS py-executor" into frankfurt
Vijay Venkatesh Kumar [Wed, 6 May 2020 15:37:56 +0000 (15:37 +0000)]
Revise dcae bootstrap version
New bootstrap released for Son-handler
blueprint updates
Change-Id: I3bf4d177a6827ff6afe36a0d2130ccdc797ac099
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Issue-ID: DCAEGEN2-2216
Issue-ID: DCAEGEN2-2200
(cherry picked from commit
416658b118984aae23654dc0521027b86c277389)
efiacor [Sun, 10 May 2020 14:42:34 +0000 (15:42 +0100)]
[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt release
Change-Id: I8b370e77407a3497d2fe46b207668dd234a24a80
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DCAEGEN2-2217
(cherry picked from commit
b4ea1d79cdfdcc9f013a87f63f5ae386dbd8b137)
Sylvain Desbureaux [Mon, 11 May 2020 13:17:11 +0000 (13:17 +0000)]
Merge "[POLICY] put base64 password in xacml.properties" into frankfurt
Marek Szwalkiewicz [Mon, 2 Mar 2020 17:09:18 +0000 (17:09 +0000)]
Add Helm charts for CDS py-executor
Chart for deployment pod and service of py-executor. This chart
covers also artifact manager grpc server.
Issue-ID: OOM-2256
Change-Id: Iaf7c569ccaea4062bf16abe3c314a1b24940d4c5
Signed-off-by: Marek Szwalkiewicz <marek.szwalkiewicz@external.t-mobile.pl>
(cherry picked from commit
a662568a444a4985068a96007290d1f480fe8547)
Sylvain Desbureaux [Mon, 11 May 2020 07:11:13 +0000 (07:11 +0000)]
Merge "[VNFSDK] Use common secret template for postgres credentials" into frankfurt
jhh [Fri, 8 May 2020 17:28:27 +0000 (12:28 -0500)]
[POLICY] put base64 password in xacml.properties
In addition, remove heap mem sizing for drools too
as it is properly sized according to container allocated
resources.
Issue-ID: POLICY-2547
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Change-Id: I4e1e5eaef1cad924ac4c86e5248230aef1fad7d8
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
(cherry picked from commit
ed6839f2fe2566741dcd49c8e59fdae519ce84b0)
Eric Multanen [Wed, 6 May 2020 21:40:12 +0000 (14:40 -0700)]
Set multicloud-k8s image to 0.6.0
Update image for Frankfurt release.
Change-Id: Idc26b081694b8d7270fea81a30d595d41b6b9240
Issue-ID: OOM-2397
Signed-off-by: Eric Multanen <eric.w.multanen@intel.com>
(cherry picked from commit
0d36387da995a3e5100b4a99c3e05765ee3ed4cd)
Krzysztof Opasiak [Mon, 4 May 2020 23:42:23 +0000 (01:42 +0200)]
[VNFSDK] Use common secret template for postgres credentials
Even through we use common secret template both passwords are still
hardcoded in common postgres chart but this will be removed as a final
step just like we did for mariadb-galera.
Issue-ID: OOM-2250
Change-Id: I4ca210c99c27fbfbf74a467d72a81b2e38d8d800
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
(cherry picked from commit
79677d38adfb3de5a35c00cdb710f6325a8719a9)
Krzysztof Opasiak [Thu, 7 May 2020 10:08:24 +0000 (10:08 +0000)]
Merge "[AAF] v1.16+ compatible templates"
Sylvain Desbureaux [Thu, 7 May 2020 09:12:04 +0000 (09:12 +0000)]
Merge "[SDNC] Use common aaf template in SDNC"
Sylvain Desbureaux [Thu, 7 May 2020 07:39:14 +0000 (07:39 +0000)]
Merge changes I0947c006,I73f799d9
* changes:
DOC howto setup ingress on the Kubernetes cluster
Ingress quick start guide notice
Sylvain Desbureaux [Thu, 7 May 2020 06:43:13 +0000 (06:43 +0000)]
Merge "[COMMON] Add new template for obtaining certificate"
Dan Timoney [Mon, 4 May 2020 17:55:56 +0000 (13:55 -0400)]
Use RC1 version of CCSDK artifacts
Update helm charts to use RC1 version of CCSDK dockers
Issue-ID: CCSDK-2358
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Id247bdf3442084d724b84ed752956d08868c7ddf
Krzysztof Opasiak [Thu, 30 Apr 2020 23:46:37 +0000 (01:46 +0200)]
[COMMON] Add new template for obtaining certificate
Add new template that can be used to obtain certificate by
component. Make also a PoC with NBI.
Strongly based on aaf-config template.
Issue-ID: AAF-1134
Change-Id: I10cb2a7b36a8dc436be337518cc15431aabbbc5d
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Lucjan Bryndza [Wed, 6 May 2020 14:08:52 +0000 (14:08 +0000)]
DOC howto setup ingress on the Kubernetes cluster
User manual howto setup ingress controller on the kubernetes
cluster using Nginx and MetalLB
Issue-ID: OOM-1878
Change-Id: I0947c0060851fd7a43bfa92b0472b9ec898857b6
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Krzysztof Opasiak [Wed, 6 May 2020 14:05:47 +0000 (14:05 +0000)]
Merge "[VNFSDK] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:05:26 +0000 (14:05 +0000)]
Merge "[VID] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:05:07 +0000 (14:05 +0000)]
Merge "[UUI] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:03:56 +0000 (14:03 +0000)]
Merge "[SDNC] Fix Ingress Configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:03:30 +0000 (14:03 +0000)]
Merge "[SDC] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:00:30 +0000 (14:00 +0000)]
Merge "[Portal] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:00:10 +0000 (14:00 +0000)]
Merge "[OOF] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:59:45 +0000 (13:59 +0000)]
Merge "[DMaaP] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:59:26 +0000 (13:59 +0000)]
Merge "[CLI] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:58:55 +0000 (13:58 +0000)]
Merge "[CDS] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:58:49 +0000 (13:58 +0000)]
Merge "[APPC] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:58:44 +0000 (13:58 +0000)]
Merge "[AAF] Fix AAF Configuration"
Sylvain Desbureaux [Wed, 6 May 2020 13:27:37 +0000 (15:27 +0200)]
[VNFSDK] Fix Ingress configuration
Change port to HTTPS one
Set ssl to redirect.
Issue-ID: OOM-2192
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I4ca8b8debe721c86baf92ba947f891a120df5435
Sylvain Desbureaux [Wed, 6 May 2020 13:26:57 +0000 (15:26 +0200)]
[VID] Fix Ingress configuration
Set SSL to redirect as backend is HTTPS.
Issue-ID: OOM-2191
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: If7dd2760af35f169cad1adcf7573352766beada2
Sylvain Desbureaux [Wed, 6 May 2020 13:25:54 +0000 (15:25 +0200)]
[UUI] Fix Ingress configuration
Set ssl to redirect when backend is HTTPS.
Issue-ID: OOM-2190
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I8275d31c8a6f07d42f178db15173665b998ef5e8
Sylvain Desbureaux [Wed, 6 May 2020 13:24:57 +0000 (15:24 +0200)]
[SDNC] Fix Ingress Configuration
Set redirect to true when backend is HTTPS.
Issue-ID: OOM-2188
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I787d5723b9e301f644aa0d6271980e3f58292cc2
Sylvain Desbureaux [Wed, 6 May 2020 13:24:04 +0000 (15:24 +0200)]
[SDC] Fix Ingress configuration
Set redirect for SSL when backend is HTTPS
Issue-ID: OOM-2187
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I2c1e9acfdaf427e85b78accaf2d26be48eed5f73
Sylvain Desbureaux [Wed, 6 May 2020 13:23:16 +0000 (15:23 +0200)]
[Portal] Fix Ingress configuration
Set redirect for SSL for HTTPS backend.
Issue-ID: OOM-2185
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I44c42968c2d3ab35c61920f47d3bd6c2ae3cd4dc
Sylvain Desbureaux [Wed, 6 May 2020 13:22:29 +0000 (15:22 +0200)]
[OOF] Fix Ingress configuration
Set redirect for SSL as backend is HTTPS.
Issue-ID: OOM-2182
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I7dca15d6a381048f8f07c81b2523a1b6ec0ae308
Sylvain Desbureaux [Wed, 6 May 2020 13:21:31 +0000 (15:21 +0200)]
[DMaaP] Fix Ingress configuration
Use HTTPS port
set redirect for ssl part.
Issue-ID: OOM-2179
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I83b30e7a21785f1018118f83db1fd3fe43db5f17
Sylvain Desbureaux [Wed, 6 May 2020 13:20:39 +0000 (15:20 +0200)]
[CLI] Fix Ingress configuration
Use the new port.
Set redirect to https service.
Issue-ID: OOM-2176
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I139511d3dbdf22f771ff2168588a475f2a7303af
Sylvain Desbureaux [Wed, 6 May 2020 13:19:52 +0000 (15:19 +0200)]
[CDS] Fix Ingress configuration
Set redirect to https based service.
Issue-ID: OOM-2174
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I1a823618c71458be055b0a6af96a56eee7262ee6
Sylvain Desbureaux [Wed, 6 May 2020 13:19:03 +0000 (15:19 +0200)]
[APPC] Fix Ingress configuration
set redirect to https based service.
Issue-ID: OOM-2173
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I8b226cd6d8cd598cf6578b58d0d0c0f9558fd818
Sylvain Desbureaux [Wed, 6 May 2020 13:17:55 +0000 (15:17 +0200)]
[AAF] Fix AAF Configuration
set redirect to service providing SSL
add ingress for aaf-oauth
Issue-ID: OOM-2170
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Iec05ec5798cc8240ca45d7d08c973bc3516f5e8f
Sylvain Desbureaux [Wed, 6 May 2020 13:09:02 +0000 (13:09 +0000)]
Merge "[DCAEGEN2] Use common secret template for postgres credentials"
Lucjan Bryndza [Wed, 6 May 2020 11:03:03 +0000 (11:03 +0000)]
Ingress quick start guide notice
Notice about experimental ingress configuration
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Change-Id: I73f799d9fb254a5d40b1c7d22c75350010780a1d
Issue-ID: OOM-1878
Sylvain Desbureaux [Wed, 6 May 2020 06:14:59 +0000 (06:14 +0000)]
Merge "MUSIC spring boot helm charts (music-sb)"
Sylvain Desbureaux [Tue, 5 May 2020 15:56:23 +0000 (15:56 +0000)]
Merge "[DCAEGEN2][dashboard] Use common secret template for postgres credentials"
Krzysztof Opasiak [Tue, 5 May 2020 15:18:27 +0000 (15:18 +0000)]
Merge "[DCAEGEN2][bootstrap] Use common secret template for postgres credentials"
Tschaen, Brendan [Thu, 2 Apr 2020 19:49:13 +0000 (19:49 +0000)]
MUSIC spring boot helm charts (music-sb)
Removal of tomcat and zookeeper as per latest music version..
Replaced with cassandra only and spring boot version of music,
adding support for https and running the music container under
a non-root user
Update oof-has music-api configuration, use https
Switch to music-api-springboot for all the ready.py
Issue-ID: MUSIC-572
Signed-off-by: Tschaen, Brendan <ctschaen@att.com>
Change-Id: Idbfac29cb5e9808787b5994e2575f055c292a146
Signed-off-by: vrvarma <vikas.varma@att.com>
Krzysztof Opasiak [Tue, 5 May 2020 12:56:37 +0000 (12:56 +0000)]
Merge "[OOF] add Ingress to HAS API service"
Krzysztof Opasiak [Tue, 5 May 2020 12:54:52 +0000 (12:54 +0000)]
Merge "[COMMON] add missing ingress template"
Krzysztof Opasiak [Tue, 5 May 2020 12:54:19 +0000 (12:54 +0000)]
Merge "[CLAMP] Configure Ingress for Kibana"
Krzysztof Opasiak [Tue, 5 May 2020 12:53:08 +0000 (12:53 +0000)]
Merge "[NBI] add missing ingress template"
Krzysztof Opasiak [Tue, 5 May 2020 09:36:30 +0000 (11:36 +0200)]
[DCAEGEN2] Use common secret template for postgres credentials
Even through we use common secret template both passwords are still
hardcoded in common postgres chart but this will be removed as a final
step just like we did for mariadb-galera.
Issue-ID: OOM-2250
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I4b499e277bb084d7d1f2f2d9b72533a6532b751f
Krzysztof Opasiak [Tue, 5 May 2020 10:04:31 +0000 (12:04 +0200)]
[DCAEGEN2][bootstrap] Use common secret template for postgres credentials
Even through we use common secret template both passwords are still
hardcoded in common postgres chart but this will be removed as a final
step just like we did for mariadb-galera.
Issue-ID: OOM-2250
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Icaa5334d6ebad4fbce23ed4f59b74448c02783cf
Krzysztof Opasiak [Tue, 5 May 2020 09:50:45 +0000 (09:50 +0000)]
Merge "[Contrib] Make Postgres work when using dynamic PV"
Krzysztof Opasiak [Tue, 5 May 2020 09:45:03 +0000 (11:45 +0200)]
[DCAEGEN2][dashboard] Use common secret template for postgres credentials
Even through we use common secret template both passwords are still
hardcoded in common postgres chart but this will be removed as a final
step just like we did for mariadb-galera.
Issue-ID: OOM-2250
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ic8d8a53093ccdf5f91a26ce9ac2734fe36ccca4f
Krzysztof Opasiak [Tue, 5 May 2020 09:14:13 +0000 (09:14 +0000)]
Merge "Release RC1"
Sylvain Desbureaux [Tue, 5 May 2020 07:40:01 +0000 (09:40 +0200)]
[OOF] add Ingress to HAS API service
Adding the Ingresses to HAS API service.
Issue-ID: OOM-2182
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I6cfe4d014a18e693344e24f14c00f4108d9c15c9
Sylvain Desbureaux [Mon, 4 May 2020 09:50:08 +0000 (11:50 +0200)]
[CLAMP] Configure Ingress for Kibana
Clamp Kibana didn't had a proper ingress, adding it.
Issue-ID: OOM-2175
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I584bffc776789e7e527ffe24fb6ea73f42aebd59
Sylvain Desbureaux [Tue, 5 May 2020 07:26:19 +0000 (09:26 +0200)]
[COMMON] add missing ingress template
ingress template is needed to create ingress.
Issue-ID: OOM-2173
Issue-ID: OOM-2188
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ia957cb25f3f76658affabd148aaa4118b2d7ea0c
Sylvain Desbureaux [Tue, 5 May 2020 07:22:47 +0000 (09:22 +0200)]
[NBI] add missing ingress template
ingress template is needed to create ingress.
Issue-ID: OOM-2172
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I176f70600918def3d1fc43d9fdb35ca8d29653de
Sylvain Desbureaux [Tue, 5 May 2020 06:22:17 +0000 (06:22 +0000)]
Merge "remove hardcoded MariaDB password"
Krzysztof Opasiak [Tue, 28 Apr 2020 22:55:47 +0000 (00:55 +0200)]
[SDNC] Use common aaf template in SDNC
Issue-ID: AAF-1134
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I62eb9f20c66e4b26bc4625b121e52cf70d2b4063
Sylvain Desbureaux [Mon, 4 May 2020 17:05:04 +0000 (17:05 +0000)]
Merge "Change ingress hosnames for exposed services"
Krzysztof Opasiak [Mon, 4 May 2020 16:34:52 +0000 (16:34 +0000)]
Merge "[COMMON|APPC|SDNC] add Ingress to dgbuilder"
Krzysztof Opasiak [Mon, 4 May 2020 16:28:27 +0000 (16:28 +0000)]
Merge "[POLICY] update images and fixes"
Sylvain Desbureaux [Mon, 4 May 2020 15:30:15 +0000 (15:30 +0000)]
Merge "Portal AAF REST API perm fixes for Roles"
Sylvain Desbureaux [Tue, 14 Apr 2020 13:02:57 +0000 (15:02 +0200)]
[AAF] v1.16+ compatible templates
Use the different "common" templates in order to create consistent and
v1.16+ compatible templates for the different resources of AAF
Issue-ID: AAF-1122
Issue-ID: OOM-1971
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Iefc1391211a69b6584ea127066ce430d4f5eb389
Huabing Zhao [Sun, 26 Apr 2020 01:09:38 +0000 (09:09 +0800)]
Release RC1
This change addresses two issues:
MSB-467: Certificate in MSB is set to use *.zte.com.cn
MSB-462: Pods still run as root
These two issue have been fixed in docker images, but also need to be
reflected in K8s manifest.
Issue-ID: MSB-467
Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn>
Change-Id: Id67e521b3051e9651051083f05d9e54973803030
JulienBe [Fri, 10 Apr 2020 14:50:08 +0000 (16:50 +0200)]
remove hardcoded MariaDB password
This aligns with other changes on OOM.
You can either supply a specific password or
have it generated for you based on a master password
Issue-ID: CLAMP-796, OJSI-188
Change-Id: If1b80fc47cf1033e094f8a106746d1e8c556c08b
Signed-off-by: JulienBe <jb379x@att.com>
Co-authored-by: sebdet <sebastien.determe@intl.att.com>
[small updates in common secret template usage]
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
ChrisC [Mon, 4 May 2020 10:43:34 +0000 (12:43 +0200)]
Portal AAF REST API perm fixes for Roles
Fixed AAF REST API creds : reuse of X509 identity
the use of javax.net.ssl variables overrides basic auth identity
the fake password must be slightly updated in order to pass current decryption method in portal code
Issue-ID: PORTAL-875
Change-Id: I0497df70f0ff9a30e4ccd634aff67467f5ae04df
Signed-off-by: ChrisC <christophe.closset@intl.att.com>
Sylvain Desbureaux [Mon, 4 May 2020 09:45:16 +0000 (11:45 +0200)]
[COMMON|APPC|SDNC] add Ingress to dgbuilder
Add Ingress for dgbuilder in common and update SDNC and APPC in order to
use proper configuration.
Issue-ID: OOM-2173
Issue-ID: OOM-2188
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib810ce3f4b3ff2ff3297c39be352d246aef6d7f1
Sylvain Desbureaux [Mon, 4 May 2020 06:55:59 +0000 (06:55 +0000)]
Merge "Making mounted volume non-root"
Marco Platania [Fri, 1 May 2020 17:00:29 +0000 (17:00 +0000)]
Update git submodules
* Update kubernetes/robot from branch 'master'
to
c81062626b69160145baac5e6a5d670cb67211fa
- Merge "Add instantiateVFWCLDN for DANOS"
- Add instantiateVFWCLDN for DANOS
Issue-ID: INT-1566
Change-Id: I48525947492061a98092f3b102ba240146a18e61
Signed-off-by: Brian Freeman <bf1936@att.com>
mrichomme [Fri, 1 May 2020 12:29:32 +0000 (14:29 +0200)]
Update git submodules
* Update kubernetes/robot from branch 'master'
to
beea44604181479064665a2deb67d72c8c0e5d85
- [Integration][Testsuite] bump 1.6.1 version
Issue-ID: INT-1567
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: Ib337dc9134b54cadd9bb1ae7a2fa1fdfeaa42c4f
jhh [Mon, 27 Apr 2020 22:12:43 +0000 (17:12 -0500)]
[POLICY] update images and fixes
Issue-ID: POLICY-2510
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Change-Id: I1ac9698233d1b570ef3c5759742038c96015ba32
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Krzysztof Opasiak [Thu, 30 Apr 2020 14:11:38 +0000 (14:11 +0000)]
Merge "Adding NSSMF adapter chart"
Krzysztof Opasiak [Thu, 30 Apr 2020 12:27:24 +0000 (12:27 +0000)]
Merge "[COMMON] Switch dgbuilder chart to new API"
mrichomme [Thu, 30 Apr 2020 10:31:08 +0000 (12:31 +0200)]
Update git submodules
* Update kubernetes/robot from branch 'master'
to
1367bd680380828977982030eb9784250c579e25
- Use SPDX identifier for the license
instead of putting an extract of the license
Issue-ID: OOM-2389
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I7292b0b03dbf964d6aeaf987726e82ed7f0ba8b2
jananib [Wed, 8 Apr 2020 16:05:45 +0000 (21:35 +0530)]
Adding NSSMF adapter chart
OOM SO-NSSMF adapter
Issue-ID: OOM-2343
Change-Id: I93c7bfc58601202dd61455431d2720162ee9e69c
Signed-off-by: jananib <janani.b@huawei.com>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Lucjan Bryndza [Wed, 29 Apr 2020 08:52:33 +0000 (08:52 +0000)]
Change ingress hosnames for exposed services
Change ingress host to the required hostnames
Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Issue-ID: OOM-2391
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Krzysztof Opasiak [Wed, 29 Apr 2020 13:53:47 +0000 (13:53 +0000)]
Merge "[CDS] Remove unused filebeat container."
Krzysztof Opasiak [Wed, 29 Apr 2020 13:50:51 +0000 (13:50 +0000)]
Merge "Changed http to https for SDK"
Sylvain Desbureaux [Wed, 29 Apr 2020 09:40:22 +0000 (09:40 +0000)]
Merge "Set sdc onboarding volume mount permissions"
MichaelMorris [Tue, 28 Apr 2020 08:34:17 +0000 (09:34 +0100)]
Set sdc onboarding volume mount permissions
Set the permissions of files in the sdc onboarding backend persistent volume for package certs to enable access by the process in the pod which now runs as non-root user (since SDC-2798)
Signed-off-by: MichaelMorris <michael.morris@est.tech>
Issue-ID: SDC-2981
Change-Id: I6113f14ca9933e2fec2b565768ed5afbe3c18f21
Krzysztof Opasiak [Wed, 22 Apr 2020 22:11:44 +0000 (00:11 +0200)]
[COMMON] Allow to use ' in mysql passwords
derivePassword which we use to generate our passwords includes ' in
set of special characters that can be used in passwords.
Current implementation of bitnami configure-mysql.sh simply
concatenates password surrounded with '' rest of SQL query. This
causes issues if password contains ' as it creates invalid SQL statement.
To fix this issue we just patch the script and escape the special '
character in password.
Issue-ID: OOM-2246
Reported-by: Mateusz Pilat <m.pilat@partner.samsung.com>
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I3d2150760755e55558e2045cbb7ca5693c8ab71f
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Krzysztof Opasiak [Mon, 27 Apr 2020 13:30:47 +0000 (13:30 +0000)]
Merge "[APPC] Enable password generation for sdnctl"
Krzysztof Opasiak [Mon, 27 Apr 2020 13:30:33 +0000 (13:30 +0000)]
Merge "[APPC] Enable password generation for appcctl"
James Forsyth [Mon, 27 Apr 2020 13:22:45 +0000 (13:22 +0000)]
Update git submodules
* Update kubernetes/aai from branch 'master'
to
2d6141ab8bd7bfe58f5da0483e578032226e7ebb
- Merge "Use released 1.6.8 container"
- Use released 1.6.8 container
Issue-ID: AAI-2883
Issue-ID: AAI-2593
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
Change-Id: I0dd8217c2fee8596e663d65206f92bc5446f02ea
Krzysztof Opasiak [Mon, 27 Apr 2020 13:15:51 +0000 (13:15 +0000)]
Merge "[CLAMP] use common templates for logs"
Sylvain Desbureaux [Mon, 27 Apr 2020 11:27:26 +0000 (11:27 +0000)]
Merge "[POLICY] fix: Process also content of pd-pdp"
mrichomme [Mon, 27 Apr 2020 06:41:03 +0000 (08:41 +0200)]
Update git submodules
* Update kubernetes/robot from branch 'master'
to
b73d77ca2e9df3d7300ca85b5593d89a9271d13a
- Bump teststuite 1.6.0 to OOM Master
Issue-ID: INT-1558
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: Iaf544043476e03589464d8e47ba4f89f7cbd8e5d
Lorraine Welch [Fri, 24 Apr 2020 20:14:43 +0000 (16:14 -0400)]
Changed http to https for SDK
Issue-ID: PORTAL-890
Signed-off-by: Lorraine Welch <lb2391@att.com>
Change-Id: I29db7da917f46a4bd3917fe1b71d714a9bf80022
Krzysztof Opasiak [Fri, 24 Apr 2020 18:41:24 +0000 (20:41 +0200)]
[COMMON] Switch dgbuilder chart to new API
While working on password removal we added a new configuration
node (config.db) which should be used for passing db credentials. Now
when all user are switched to use new config options we can remove
backward compatibility layer and start using new options.
Issue-ID: OOM-2247
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I77876fbfc0a4af18fa36f0e8c5813a5e393a7e09
Krzysztof Opasiak [Fri, 24 Apr 2020 17:53:08 +0000 (19:53 +0200)]
[APPC] Enable password generation for sdnctl
Start using auto-generated password for sdnctl db instead of using the
one hardcoded in values.yaml
Issue-ID: OOM-2275
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I0a3b526387830d2bf44e88281896d0b87a92ce94
Krzysztof Opasiak [Fri, 24 Apr 2020 17:50:48 +0000 (19:50 +0200)]
[APPC] Enable password generation for appcctl
Start using auto-generated password for appcctl db instead of using the
one hardcoded in values.yaml
Issue-ID: OOM-2275
Change-Id: I3884a5b30a47d602b28136f984ebe4492ec43fb2
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>