mrichomme [Thu, 30 Apr 2020 07:10:49 +0000 (09:10 +0200)]
Add csa as binary in .gitattributes
Issue-ID: INT-1572
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: If307c3028372fc729aa848ff8d2b4042442aa313
Signed-off-by: mrichomme <morgan.richomme@orange.com>
zhaoliping123 [Wed, 29 Apr 2020 11:38:08 +0000 (19:38 +0800)]
update the integration doc for vCPE
Issue-ID: VFC-1668
Change-Id: I5fc41873f7a31e4c67669ea8bb07b674bc434cec
Signed-off-by: zhaoliping123 <zhaoliping@chinamobile.com>
zhaoliping123 [Fri, 24 Apr 2020 10:11:45 +0000 (18:11 +0800)]
update docs_vCPE_tosca_local.rst
Issue-ID: INT-1285
Change-Id: I6a365b56207ae3d21e8a6601f1110914d841160c
Signed-off-by: zhaoliping123 <zhaoliping@chinamobile.com>
Lukasz Rajewski [Mon, 27 Apr 2020 19:30:24 +0000 (21:30 +0200)]
Documentation for vFW In-Place Upgrade with TD
The documentation for vFW Traffic Distributino use case
evolves to vFW InPlace Upgrade with TD one. There is
changed description of the use case purpose, the workflow,
the configuration procedure and information about the
way of testing.
Change-Id: I1e68d46871864b4e65df553355b3a11d86b4c9cb
Issue-ID: INT-1277
Signed-off-by: Lukasz Rajewski <lukasz.rajewski@orange.com>
mrichomme [Mon, 27 Apr 2020 08:10:20 +0000 (10:10 +0200)]
Exclude VFC-redis from xfail list
Issue-ID: INT-1564
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I32d9e25e4d4d0bfab7fdfa5979db266a0826604c
Signed-off-by: mrichomme <morgan.richomme@orange.com>
stark, steven [Tue, 21 Apr 2020 22:28:13 +0000 (15:28 -0700)]
[INT] updating aks install w/ master pass
- Also updating openstack cli to py3 to fix import issues
Issue-ID: INT-1557
Signed-off-by: stark, steven <steven.stark@att.com>
Change-Id: I99cbc68614e0fcc8fd0572fd7c44c7cd431b215b
zhaoliping123 [Wed, 22 Apr 2020 03:52:56 +0000 (11:52 +0800)]
Add vcpe tosca local mode case
- fix json errors
- fix not related rst error
(due to a broken link as jira.opnfv.org is no more responding)
Issue-ID: INT-1285
Change-Id: I733a491c4204334fc532abcf9dbbdc2226900d5b
Signed-off-by: zhaoliping123 <zhaoliping@chinamobile.com>
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Bartek Grzybowski [Mon, 20 Apr 2020 13:41:04 +0000 (06:41 -0700)]
Leverage pytest parametrize mark in test_rest_api_endpoints
Change-Id: Ia29f79227e21e623489a7b340496f18def5f7a52
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Mon, 20 Apr 2020 12:21:20 +0000 (05:21 -0700)]
Leverage pytest parametrize mark in test_bad_prefix test
Change-Id: I0c0ea8612e0f0ac6b2198dc78908bd604f5ad61c
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Mon, 20 Apr 2020 11:39:43 +0000 (04:39 -0700)]
Leverage pytest parametrize mark in test_bad_moi_class test
Change-Id: I7218c5ca61669197d1e79189e841b0062524c02d
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Mon, 20 Apr 2020 11:01:10 +0000 (04:01 -0700)]
Refactor test_unauthorized() to leverage pytest parametrize mark
Change-Id: I52079b276332c0bf2ffcea047ab8129066aff185
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Marco Platania [Mon, 20 Apr 2020 13:06:34 +0000 (09:06 -0400)]
Resize CLAMP picture
Issue-ID: INT-1536
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I27a213493377c4af80f914f3d8983b6d37ee6da1
ebo [Sun, 19 Apr 2020 00:33:21 +0000 (01:33 +0100)]
netconf-pnp-simulator: fix sysrepod crash on TLS reconfig
The crash was caused by:
- the '--permanent' option while updating the ietf-keystore by
sysrepocfg
- missing some Yang modules on sysrepo installation
Other changes:
1. Added TLS integration tests, including reconfiguration
2. reconfigure-*.sh are now synchronous, only returnig after restart is
completed
Issue-ID: INT-1516
Change-Id: Iddc03fc968aaab60931596045437ba0c78448b08
Signed-off-by: ebo <eliezio.oliveira@est.tech>
Marco Platania [Thu, 16 Apr 2020 20:09:55 +0000 (16:09 -0400)]
Fix link in RST file for Scale Out doc
Issue-ID: INT-1536
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: Ic16b339332033cd487cf19458464c1dc86c61d65
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Bartek Grzybowski [Thu, 16 Apr 2020 11:11:07 +0000 (04:11 -0700)]
Add test to verify bad API prefix handling by the service
Functional test for verifying that the service handles
bad API prefix in URI string properly and returns appropriate
response to the client.
Change-Id: I5e5e8a9dcd6fe05bd2b4536790d16e825aa21679
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 16 Apr 2020 11:04:12 +0000 (04:04 -0700)]
Add test to verify bad MOI handling by the service
Functional test for verifying that the service handles
bad MOI class in URI string properly and returns appropriate
response to the client.
Change-Id: I606aaba5c400f81e8142a34f250bc249251feaf7
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 16 Apr 2020 10:55:21 +0000 (03:55 -0700)]
Add test to verify unauthorized requests
Functional test for verifying that the service forbids
API access with proper http code and message should
the client provide wrong auth credentials.
Change-Id: I78d5f050e99c23fd7116468ff007078b3cd56987
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 16 Apr 2020 10:28:14 +0000 (03:28 -0700)]
Fix invalid prefix check handling
Should the URI prefix length in the request be incorrect
and not contain two "/" the service would fail with "empty
response" on client side due to unhandled "list index
out of range" in the server process while trying to get
the idName from pathlist[4] which throws IndexError.
Prefix validation, id and class variable assignment are
wrapped up in try-except clause to evaluate the prefix check
correctly, catch the exception and return appropriate response
to the client.
Change-Id: If6333228fbdd3a8075ade55436c3ca9bb8a97caa
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 16 Apr 2020 08:35:48 +0000 (01:35 -0700)]
Return http 404 for wrong prefix, not 401
The correct http code for wrong REST API url should
be http "404 Not Found", not "401 Unauthorized".
Change-Id: I78710fcd4c43926dbba3227c4099bf6239095f19
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Wed, 15 Apr 2020 11:48:16 +0000 (04:48 -0700)]
Move tests to their own directory
File layout was also restructured for better
readability.
Change-Id: Id1cba755127319c45ec50b08d12daa543c8c9ae5
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Wed, 15 Apr 2020 11:06:39 +0000 (04:06 -0700)]
Add tox runner for pytest in prov-mns-provider
Pytest setup as entrypoint to gating job in CI.
Change-Id: If052af0f7c8272844f644cb3789dbc3a8451c629
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Tue, 14 Apr 2020 15:49:19 +0000 (08:49 -0700)]
Extend unit tests for provisioning management service
This adds additional unit tests for the service provider for
PATCH and DELETE request methods.
Change-Id: If0cce9c713f2999c859910661308c24ac68f04d6
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Tue, 14 Apr 2020 14:59:00 +0000 (07:59 -0700)]
Add unit tests for provisioning management service
This adds pytest based unit tests for the service provider.
Testing PUT and GET requests is covered within this patch.
Change-Id: Id9bcb870b032c6fce64985a5fd501bbd44031f50
Issue-ID: INT-1529
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
mrichomme [Mon, 13 Apr 2020 16:46:35 +0000 (18:46 +0200)]
Fix rst errors
- Modify the linter to use sphinx linters (no coala bean)
- Fix all broken links
- fix minor rst issue
- Add regex in ignore link (for ONAP URL and frankfurt doc)
The rst target defined in tox will execute 3 steps:
- local build of the documentation
- check of the url
Note 1: for the moment the Warning have not been turned into Error
Note 2: frankfurt exeption shall be removed when frankfurt branch is available
Issue-ID: INT-1523
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I6d7ad9d293a1b5c01f05a021d9a6f3767d04e62f
Signed-off-by: mrichomme <morgan.richomme@orange.com>
ebo [Sat, 11 Apr 2020 00:34:47 +0000 (01:34 +0100)]
netconf-pnp-simulator: enable NETCONF send/recv message logging
to aid troubleshooting integration with OpenDaylight
- Add more integration tests
- Defaults to generic subscriber
Issue-ID: INT-1516
Change-Id: Ib5bbf4cdbba6cdfee901f6c07dfa195a21cd8bbb
Signed-off-by: ebo <eliezio.oliveira@est.tech>
Bartek Grzybowski [Tue, 14 Apr 2020 09:17:56 +0000 (11:17 +0200)]
Upgrade netconf-pnp-simulator image tag to 2.8.2
Change-Id: I430b3c8743d103f5e4bb6396a151495cc31843d6
Issue-ID: INT-1508
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
mrichomme [Fri, 10 Apr 2020 16:22:59 +0000 (18:22 +0200)]
Fix integration markdown errors for linter
Issue-ID: INT-1523
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I2be0865395b12e1f277834b0c096f5d183cb5056
Signed-off-by: mrichomme <morgan.richomme@orange.com>
ebo [Fri, 10 Apr 2020 20:17:17 +0000 (21:17 +0100)]
netconf-pnp-simulator: normalized image reference
Required change for the forthcoming fix on tox execution in
ci-management/jjb/integration/integration-docker.yaml
Issue-ID: INT-1124
Change-Id: I70c3351e5cf691a9eaeb7b49ec276d825016e0fa
Signed-off-by: ebo <eliezio.oliveira@est.tech>
ebo [Fri, 10 Apr 2020 17:51:59 +0000 (18:51 +0100)]
netconf-pnp-simulator: fix invalid ref to libssh v0.8.8
This version was upgraded to 0.8.9 on 2020-04-09.
Fortunately the new 0.9.4 fixes the bug that was forcing us to use
the old 0.8.x
Issue-ID: INT-1124
Change-Id: I6dacac8925af047d2e5342a76da6eb221074ddd9
Signed-off-by: ebo <eliezio.oliveira@est.tech>
mrichomme [Thu, 9 Apr 2020 16:38:07 +0000 (18:38 +0200)]
WIP: Add rst and md linters in tox
Issue-ID: INT-1523
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: Ifcce4fa5985df52fd66414f5842f50e21a79006a
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Dongho Kim [Thu, 9 Apr 2020 17:52:13 +0000 (10:52 -0700)]
Update A1 Adaptor section to user guide
Change-Id: I6b1d1173bcb2c9e190584445fde561b204e8664c
Signed-off-by: Dongho Kim <dk5913@att.com>
Issue-ID: INT-1503
mrichomme [Fri, 10 Apr 2020 07:44:09 +0000 (09:44 +0200)]
remove CLI from https xfail list
Even if CLI got a NO GO for frankfurt, docker update is planned
to fix security issues for frankfurt
As a consequence, CLI must be removed from the xfail list
Issue-ID: INT-1480
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I78dccd2bdabe05515ff8ab64d30e9e5d6f97e74b
ebo [Wed, 8 Apr 2020 11:32:14 +0000 (12:32 +0100)]
Update pnf-sw-upgrade module to latest engine v2.8.1
- Using loguru to follow new recommend standard
- Renamed Yang model filename to comply with
https://tools.ietf.org/html/rfc6020#section-5.2
- Renamed initialization data to reflect the target datastore
Issue-ID: INT-1516
Signed-off-by: ebo <eliezio.oliveira@est.tech>
Change-Id: Ifde9e832b6a308dc918e3a84e03bfd43ad0f9b63
Aric Gardner [Thu, 9 Apr 2020 19:26:09 +0000 (12:26 -0700)]
Automation adds docs_postman.rst
Issue-ID: CIMAN-376
Signed-off-by: Jessica Wagantall <jwagantall@linuxfoundation.org>
Change-Id: I253073cc5d5a589b4225a489906588cedd8c49e3
Bartek Grzybowski [Thu, 9 Apr 2020 09:07:21 +0000 (11:07 +0200)]
Remove orphaned entry for pnfsimulator from Coala config
Change-Id: Ib506dbc82e86ec02f8b1b118c3b9dfcf3209e7c2
Issue-ID: INT-1517
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartosz Gardziejewski [Wed, 8 Apr 2020 07:47:06 +0000 (09:47 +0200)]
Remove old PNF simulator
Issue-ID: INT-1517
Signed-off-by: Bartosz Gardziejewski <bartosz.gardziejewski@nokia.com>
Change-Id: I235b0fdf12b265a256c371126e218826e74a9133
LF Jenkins CI [Tue, 7 Apr 2020 20:22:01 +0000 (20:22 +0000)]
Automation adds release-notes.rst
Add _release_notes hook to allow automation.
Fix non valid release notes characters in content.
Issue-ID: CIMAN-376
Change-Id: If2f0b5ae09d97a282d9acfd3c32971148d674a79
Signed-off-by: lf-jobbuilder <releng+lf-jobbuilder@linuxfoundation.org>
LF Jenkins CI [Tue, 7 Apr 2020 06:45:04 +0000 (06:45 +0000)]
Automation adds index.rst
Issue-ID: CIMAN-376
Change-Id: I1d2fc58d6f559471fffeb23c398d9903923d2eeb
Signed-off-by: lf-jobbuilder <releng+lf-jobbuilder@linuxfoundation.org>
ebo [Fri, 3 Apr 2020 14:24:15 +0000 (15:24 +0100)]
netconf-pnp-simulator: convenient TLS and SSH configuration
- Simple SSH and TLS configuration. Instead of specific Netopeer2
XML configuration files, the user only needs to provide:
For SSH: id_XXX.pub
For TLS: server_key.pem, server_cert.pem, and ca.pem
- SSH and TLS can be reconfigured at runtime by running
/opt/bin/reconfigure-ssh.sh and /opt/bin/reconfigure-tls.sh respectively
- Improved log readability by using zlog (on C applications) and loguru
for Python
See the updated documentation under ../docs for more information.
Issue-ID: INT-1516
Change-Id: I21052d2524f0610c6197875a544113cce1a02787
Signed-off-by: ebo <eliezio.oliveira@est.tech>
Bartek Grzybowski [Mon, 6 Apr 2020 12:39:13 +0000 (05:39 -0700)]
Remove deprecated options from virtualenv invocation
--no-site-packages and --distribute are marked DEPRECATED
and retained only for backward compatibility so removing.
Change-Id: I3cc66b5c09363d5b982537cc28b8f66609743121
Issue-ID: INT-1508
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
wangyaoguang [Wed, 1 Apr 2020 13:12:21 +0000 (13:12 +0000)]
Add docs for PNF Software upgrade
It contains documentation for two sub-scenarios of PNF Software upgrade,
enhancement on PNF SW upgrade using ansible and with netconf/yang interface with EM.
Issue-ID: INT-1209
Signed-off-by: wangyaoguang <sunshine.wang@huawei.com>
Change-Id: I6e1ad2464d9f0d607d5f7f14d8fb1c51afc90814
Marco Platania [Thu, 2 Apr 2020 13:46:23 +0000 (09:46 -0400)]
Update SO and VID docker version
Issue-ID: INT-1462
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I49d3fc837e58c9e2f8b879c04c84317e8bd320ba
wangyaoguang [Thu, 2 Apr 2020 07:57:30 +0000 (07:57 +0000)]
add docs for 5G NRM Configuration
Documentation for 5G NRM CM
Issue-ID: INT-1514
Signed-off-by: wangyaoguang <sunshine.wang@huawei.com>
Change-Id: I56b579abaf18897961b1eefa4aa4b8490979bf87
Bartek Grzybowski [Thu, 2 Apr 2020 11:14:06 +0000 (13:14 +0200)]
Upgrade netconf-pnp-simulator tag to 2.6.2 for netconf-pnp-pmsh
Tag 2.6.1 is no longer available.
Change-Id: I5a2cb51d21b4c6d75aff387e87976ede184a92b2
Issue-ID: INT-1508
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Marco Platania [Wed, 1 Apr 2020 13:41:06 +0000 (09:41 -0400)]
Update SDC and Portal docker image version
Issue-ID: INT-1462
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: Ib50de36def25dd4b4330c8a5bcccf453b767efe8
Bartek Grzybowski [Wed, 1 Apr 2020 12:09:26 +0000 (14:09 +0200)]
Upgrade netconf-pnp-simulator tag to 2.6.2 for ems-netconf-swm
Tag 2.6.1 is no longer available.
Change-Id: Ia2ce3f2d1d25e5f941cd2b49ed213445960e8a04
Issue-ID: INT-1508
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Krzysztof Opasiak [Tue, 31 Mar 2020 13:21:02 +0000 (15:21 +0200)]
Grant a waiver for SO 30277
As discussed during SECCOM call on 31.03.2020 SO team pushed hard to
finialize AAF integration in F but failed due to AAF issues.
Per TSC decision they should be granted a waiver as a project which
has been impacted by AAF
Issue-ID: OJSI-138
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I46028f2d3de80f5ca7dc274cf6af26000b766f32
mrichomme [Thu, 19 Mar 2020 18:02:41 +0000 (19:02 +0100)]
fix integration doc warning
Issue-ID: INT-1490
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I9153da660ae469c0bd3ed51cfebd912b6e4b9bf2
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Pérez Caparrós David, INI-ONE-MBL-MEE [Thu, 26 Mar 2020 11:17:50 +0000 (12:17 +0100)]
Update BBS use case documentation
BBS use case documentation needs additional updates in Frankfurt release
Issue-ID: INT-1444
Signed-off-by: Pérez Caparrós David, INI-ONE-MBL-MEE <David.PerezCaparros@swisscom.com>
Change-Id: I5d44898f4e7d7d628181a0140b7b13d8b57a8170
Marco Platania [Wed, 25 Mar 2020 15:44:09 +0000 (11:44 -0400)]
Set SKIP_LINT=TRUE to speed up installation
Issue-ID: OOM-2335
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I803781947a9fe84e153cdbd6f94d9f21b8bcdb6f
DarraghEgan [Thu, 19 Mar 2020 15:46:57 +0000 (15:46 +0000)]
[INT-1450] : Documentation of PNF Software Upgrade
This contains documentation for PNF Software Upgrade
using Ansible protocol with EM
Issue-ID: INT-1450
Signed-off-by: Darragh Egan <darragh.egan@est.tech>
Change-Id: Ib5385e690c9f6cff7fc2b2251181054dacba777f
DarraghEgan [Thu, 19 Mar 2020 15:53:54 +0000 (15:53 +0000)]
[INT-1450] : Documentation of PNF Software Upgrade
This contains documentation for PNF Software Upgrade
using Netconf/Yang interface with EM
Issue-ID: INT-1450
Signed-off-by: Darragh Egan <darragh.egan@est.tech>
Change-Id: I8a225b5a4b08de2004ff327148fadfff8976c5de
Bartek Grzybowski [Wed, 25 Mar 2020 10:25:29 +0000 (11:25 +0100)]
Add 'build' target for 'sslendpoints' project
To follow a common protocol of testing Golang based
applications in CI we need a 'build' target for doing
a local (non-docker) build to verify 'go build' routine.
It's however not added to "all" target as that one already
references docker based build by default.
Change-Id: I2e380ef09a1ae18456d7288f853d085617149338
Issue-ID: SECCOM-261
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
andreasgeissler [Fri, 13 Mar 2020 14:13:35 +0000 (15:13 +0100)]
corrected the hardcoded DB pod-names
Issue-ID: INT-1484
Signed-off-by: andreasgeissler <andreas-geissler@telekom.de>
Change-Id: I7f1670a79db751087f722a1196e2de23448f7a2a
Pawel Wieczorek [Wed, 18 Mar 2020 15:32:45 +0000 (16:32 +0100)]
Reduce cyclomatic complexity
Moving CSV data conversion and "expected failure" filtering away from
main function made testing these features easier. Utility behaviour
remained unchanged.
Issue-ID: SECCOM-261
Change-Id: I4cabfc7b352434c84a613c02f44af3c9630be970
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Wed, 18 Mar 2020 11:38:30 +0000 (12:38 +0100)]
Add "expected failure" support to non-SSL NodePort scanner
This patch makes scanner compatible with its shell predecessor. The same
"expected failure" list format is used i.e.
# Comment line; will be ignored
SERVICE1 NODEPORT1
SERVICE2 NODEPORT2
Single space character is used as a field separator.
Issue-ID: SECCOM-261
Change-Id: Ieedd4e98a83ffe242c695133fdf7342e17efa9a2
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Fri, 13 Mar 2020 13:14:55 +0000 (14:14 +0100)]
Run port scan
Issue-ID: SECCOM-261
Change-Id: I465282a8793191c45d288284a127e80e1fecf513
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Thu, 12 Mar 2020 17:39:03 +0000 (18:39 +0100)]
Add IP addresses filtering
Each node might be described with 3 types of addresses [1]. Some
providers also use node annotations [2] for assigned addresses.
This patch filters out all IP addresses from nodes list. External IPs
take precedence over internal ones. The first address on the extracted
slice will be later used to run the scan on.
This behaviour could be later modified to e.g. loop over all extracted
IP addresses (if scan fails).
[1] https://kubernetes.io/docs/concepts/architecture/nodes/#addresses
[2] https://github.com/rancher/rke/blob/master/k8s/node.go#L18
Issue-ID: SECCOM-261
Change-Id: Ifd094447f778da378dfe1aee765f552b6ebd669f
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Mon, 23 Mar 2020 15:02:04 +0000 (16:02 +0100)]
Add temporary "make" target for automated testing compatibility
Utility "sslendpoints" and related packages make use of idiomatic Go
testing commands, i.e. go test [./...]. Thanks to Go Modules [1] nothing
else is needed to run internal tests for this tool.
Unfortunately it's not the case for all Go-based Integration tools. In
order to use a single automated verification script in CI additional
"make" target is required. It will provide temporary compatibility layer
with utilities setting up test environment on their own with "make test"
target.
This patch should be reverted upon removal of such cases (currently:
after dropping "../k8s/check" tool in favour of Aquasec solution).
[1] https://blog.golang.org/using-go-modules (see "Adding a dependency"
test execution explanation)
Issue-ID: INT-1498
Change-Id: I14c83f7f193c7688590366db988ff02c13c036a4
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Tue, 25 Feb 2020 12:36:59 +0000 (13:36 +0100)]
Add NodePorts filtering with development environment basis
This patch has not made "sslendpoints" fully compatible with
"check_for_nonssl_endpoints.sh" script yet. It sets up basic development
environment for Golang-based checkers, though.
Tool output will be added to the README after reaching full
compatibility with previous (script) version.
Development environment brought by this patch is heavily based on:
https://github.com/SamsungSLAV/boruta
Issue-ID: SECCOM-261
Change-Id: I8f035b63bea13785c40971ede5fdbbc9b6810168
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Fri, 7 Feb 2020 11:59:32 +0000 (12:59 +0100)]
Increase verifiability of security checks
This patch introduces a series of patches that will provide tools which
will succeed current security check scripts. Its two main reasons are:
* increasing tools verifiability by providing internal tests,
* improving "expected failure" support by suppressing carefully selected
set of special cases.
Each tool will use following directory structure (generated with
"tree -a --charset=ascii" command):
.
`-- check_module
|-- Dockerfile
|-- .dockerignore
|-- .gitignore
|-- go.mod
|-- main.go
|-- Makefile
|-- README
|-- README.rst -> README
`-- submodule
|-- submodule.go
`-- submodule_test.go
This will allow using Go Modules mechanism within its limitations [1]
for "non-go-get-able modules" [2][3][4] - also in case of separating
code into several modules used by multiple "check modules", e.g.
.
|-- common
| |-- common.go
| |-- common_test.go
| `-- go.mod
`-- check_module
|-- go.mod
`-- ...
It would require migration from separate Dockerfiles to a single one
(multi-stage), though.
Provided Makefiles are intended to simplify local development
(Docker-less building) and container images preparation. READMEs clarify
utility requirements and usage - file without extension is for VCS
reference, symlink for proper syntax rendering.
[1] https://github.com/golang/go/wiki/Modules#is-it-possible-to-add-a-module-to-a-multi-module-repository
[2] https://github.com/golang/go/wiki/Modules#can-i-work-entirely-outside-of-vcs-on-my-local-filesystem
[3] https://github.com/golang/go/issues/26645#issuecomment-
408572701
[4] https://www.dim13.org/go-get-cgit
Issue-ID: SECCOM-261
Change-Id: I48eeeda66bd5570d249e96e101e431e6bab75cb3
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
jhh [Thu, 19 Mar 2020 21:31:13 +0000 (16:31 -0500)]
misnaming of pap component
Issue-ID: POLICY-2296
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Change-Id: I3addd7de51fa2ca4b1e76e95a9f0e91d1e1ca3e9
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Huang Cheng [Tue, 3 Mar 2020 09:01:58 +0000 (09:01 +0000)]
Add the provisioning management service provider for 5G NRM CM
Issue-ID: INT-1387
Signed-off-by: Huang Cheng <duke.huangcheng@huawei.com>
Change-Id: I23bda3ec2a31569d4857b2f16b9a607c64abd9f0
Enbo Wang [Thu, 12 Mar 2020 08:49:42 +0000 (16:49 +0800)]
Add script and patch to build CBA file to support PNF SW upgrade
Change-Id: I8b0155a0a6022d7b6d172c1b46d1b7d189fcbe8a
Issue-ID: INT-1210
Signed-off-by: Enbo Wang <wangenbo@huawei.com>
Tomasz Golabek [Fri, 20 Mar 2020 10:49:04 +0000 (11:49 +0100)]
Set of fixes for pnfsimulator startup
* v0.7.7 of netopeer used
* SSLAuthenticationHelper marked as primary bean to avoid duplicated-bean exception
* spring props properly mounted into container
Change-Id: Ib6bb32f32a7f60786901ffbf592b1a26b5cb1cbf
Issue-ID: INT-1320
Signed-off-by: Tomasz Golabek <tomasz.golabek@nokia.com>
DarraghEgan [Fri, 13 Mar 2020 16:47:55 +0000 (16:47 +0000)]
[INT-1450] : Documentation of PNF Software Upgrade
This contains documentation for PNF Software Upgrade
with direct Netconf/Yang interface with PNF
Issue-ID: INT-1450
Signed-off-by: Darragh Egan <darragh.egan@est.tech>
Change-Id: I58acec3baed757bdc8cad2e2588c560f31c9025c
Pawel Wieczorek [Thu, 19 Mar 2020 10:18:06 +0000 (11:18 +0100)]
Add services with waiver to expected failures list for non-SSL endpoints tests
Issue-ID: INT-1480
Change-Id: Iabd7932e0eb8f8981d064aee0f4d8c44df65a379
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Thu, 19 Mar 2020 10:14:18 +0000 (11:14 +0100)]
Filter out only open non-SSL ports
This patch ignores closed and filtered ports from scan results. It is
intended to keep "expected failure" list minimal.
Issue-ID: INT-1480
Change-Id: Idb93cf4e19284bc121aa45ea950d28405c29e222
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Yaoguang Wang [Thu, 12 Mar 2020 01:39:59 +0000 (09:39 +0800)]
EMS simulator extension to support netconf interaction with CDS
Issue-ID: INT-1211
Signed-off-by: Yaoguang Wang <sunshine.wang@huawei.com>
Change-Id: I5a7724e6cbfab81eeb3299c88f995c3cf9ea71ec
Marco Platania [Fri, 13 Mar 2020 14:34:37 +0000 (10:34 -0400)]
Update image versions in integration override
Issue-ID: INT-1462
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: Ib14e88d854bc36c7ca16997a1f26d232bcd97ce4
mrichomme [Thu, 12 Mar 2020 14:34:58 +0000 (15:34 +0100)]
WIP: update CI documentation
Fix CI doc glitches and modify a figure
Issue-ID: INT-1446
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: Id64b2193f1bf66124546aa4889a0b6ed03962d79
mrichomme [Thu, 12 Mar 2020 13:50:19 +0000 (14:50 +0100)]
Finalize CI document for integration
Issue-ID: INT-1446
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I7ca12c6b5219b25847bf3da6e17adc1219917d33
mrichomme [Thu, 12 Mar 2020 10:48:57 +0000 (11:48 +0100)]
Fix regex for http xfail list
in CI we got an error sed: unsupported command o
due to space management in the sed command
Issue-ID: INT-1480
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I44c6ecd7c47ec02b76c7932bb86de0a58726d93d
Pawel Wieczorek [Thu, 12 Mar 2020 10:47:01 +0000 (11:47 +0100)]
Unify expected failures lists naming convention
List of expected failures for non-SSL services test has not been renamed
together with corresponding check script and might have been confusing.
Issue-ID: INT-1480
Change-Id: I4f88a09ddb90a14500498892f1fda99e1c3febf0
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Thu, 12 Mar 2020 10:44:15 +0000 (11:44 +0100)]
Add upstream services to expected failures list for non-SSL endpoints tests
Issue-ID: INT-1480
Change-Id: I755a3e65897f94e3f42f27bbf798c9bcd9c2868f
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
rajendrajaiswal [Mon, 9 Mar 2020 15:41:41 +0000 (15:41 +0000)]
Added python3 and Updated netopeer image
Change-Id: Ib7c21353cff267b847a4d1d7fdcb322e22772062
Issue-ID: INT-1312
Signed-off-by: rajendrajaiswal <rajendra.jaiswal@ericsson.com>
ebo [Mon, 9 Mar 2020 15:42:08 +0000 (15:42 +0000)]
netconf-pnp-simulator: make PYTHONPATH always globally defined
Add IT using ncclient and tox
Issue-ID: INT-1124
Change-Id: I560d4fd2468ac93f8ead36062b2e316821af8d07
Signed-off-by: ebo <eliezio.oliveira@est.tech>
mrichomme [Tue, 10 Mar 2020 14:41:14 +0000 (15:41 +0100)]
Rename white list to xfail list to clarify the role of the list
to be consistent with xfail lists introduced in security tests
by Pawel Wieczorek [1]
Issue-ID: INT-1435
[1]: https://gerrit.onap.org/r/c/integration/+/103444
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I5345607931e443f3335f34823c5cd80290425a45
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Pawel Wieczorek [Tue, 10 Mar 2020 14:22:55 +0000 (15:22 +0100)]
Drop filtering out services recognized as HTTP
This patch extends tool used to detect plain HTTP ports to report all
non-SSL endpoints. Previously it omitted services not recognized as
HTTP.
Naming changes were made to reflect purpose of this tool better.
Issue-ID: INT-1480
Change-Id: I58a152022d48121bf4b9c6180ddc820dd4a79805
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Pawel Wieczorek [Mon, 9 Mar 2020 15:33:53 +0000 (16:33 +0100)]
Add expected failures list for HTTP endpoints tests
This patch is heavily based on previous work by
Morgan Richomme <morgan.richomme@orange.com>
(Change-Id: Ibaed4c5c0e5ae179af0ae317e543c1efdc9ddef2)
It is intended to suppress failure reports on known plain HTTP
endpoints. Introduced list of "expected failures" (or "xfail" for short)
will be shrunk after resolving tickets related to INT-1480 and this
patch will be eventually reverted.
Issue-ID: INT-1480
Change-Id: I4edbf3efaf66bfa2dbe2f265983eb0a27048ed4e
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Xin Miao [Thu, 5 Mar 2020 19:54:39 +0000 (19:54 +0000)]
Add MDONS sections
Issue-ID: INT-1474
Signed-off-by: Xin Miao <xin.miao@us.fujitsu.com>
Change-Id: I57483601ac9962c486657c7c0941cfe7faf3a222
mrichomme [Tue, 11 Feb 2020 08:46:48 +0000 (09:46 +0100)]
Add a white list for jdwp tests
The port scanned can be the default redis port.
A white list must be included to avoid false positive.
Open quesiton, should this list be passed as argument?
It is relatively static so for the moment, I created a list to exclude
through grep -V the false positive
Issue-ID: INT-1435
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: Ibaed4c5c0e5ae179af0ae317e543c1efdc9ddef2
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Bartek Grzybowski [Fri, 6 Mar 2020 13:20:07 +0000 (14:20 +0100)]
Setup Python linters in tox
This adds Python linting setup that'll be triggered
by relevant CI job for any uploaded python script review.
Change-Id: I957156e281e97a05651e806f6418a7c450e20b43
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Samuli Silvius [Tue, 18 Feb 2020 08:00:47 +0000 (10:00 +0200)]
Documentation of vFW CNF CDS Use case
Issue-ID: INT-1452
Signed-off-by: Samuli Silvius <s.silvius@partner.samsung.com>
Change-Id: I766d02b9fb901458eba8cd0f2fecd0b71edc7aa2
Bartek Grzybowski [Thu, 5 Mar 2020 14:08:58 +0000 (15:08 +0100)]
Fix linter issues in soutils.py vcp librabry
Change-Id: I6adaa992fe9c2411025eb28edafef83b506bac29
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 5 Mar 2020 13:35:29 +0000 (14:35 +0100)]
Fix Python linting issues in Python scripts
Fixed pylint issues for categories trailing-whitespace,
trailing-newlines, syntax-error, unused-import.
Change-Id: Iccbdb0c9538a6b8299c0517bafa1ec1be30f07cd
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 5 Mar 2020 12:21:59 +0000 (13:21 +0100)]
Fix Python linting issues in Python scripts
Fixed pylint issues for categories len-as-condition, using-constant-test,
undefined-variable and reimported.
Change-Id: Idad710958c3ca0ac6da78fb4709da03e5f079b34
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 5 Mar 2020 11:36:00 +0000 (12:36 +0100)]
Fix linting issues in check_for_ingress_and_nodeports.py
Change-Id: Ic0d2a32a964a4cf5ff1580ffd06103c450a0e8b0
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 5 Mar 2020 10:41:08 +0000 (11:41 +0100)]
Supress pylint warnings for undefined variables
'cmp', 'file' and 'unicode' functions are Python 2
specific.
Change-Id: I30fa091ef157453a328ab40e4186c30e5ed1b3a1
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Thu, 5 Mar 2020 09:28:03 +0000 (10:28 +0100)]
Fix indentation and whitespace issues in Python scripts
Reported by pylint.
Change-Id: I9d5ee152f3587bb2d7e8abee919e4ffe47d8ae85
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Pérez Caparrós David [Thu, 5 Mar 2020 11:00:00 +0000 (12:00 +0100)]
Update BBS use case documentation
BBS use case documentation needs minor updates in Frankfurt release
Issue-ID: INT-1444
Signed-off-by: Pérez Caparrós David <David.PerezCaparros@swisscom.com>
Change-Id: I3773fd4ec64a98befcafdf9a46ea3c5488d64307
Enbo Wang [Tue, 3 Mar 2020 16:42:31 +0000 (00:42 +0800)]
EMS simulator extension for PNF SW Upgrade
Change-Id: I3a8c706373f4004850c2403f4aee0d1f28aad464
Issue-ID: INT-1208
Signed-off-by: Enbo Wang <wangenbo@huawei.com>
Pérez Caparrós David [Thu, 5 Mar 2020 09:31:49 +0000 (10:31 +0100)]
Update BBS use case documentation
BBS use case documentation needs minor updates in Frankfurt release
Issue-ID: INT-1444
Signed-off-by: Pérez Caparrós David <David.PerezCaparros@swisscom.com>
Change-Id: I1c5f34f1e4c8b943e50a8fdeb7e440803a96a928
Bartek Grzybowski [Wed, 4 Mar 2020 14:45:08 +0000 (15:45 +0100)]
Fix pylint trailing whitespaces issues in vcpe python scripts
Change-Id: I8b1dbdb7bf5d2d12d0104dcabc200b8827b6fb8a
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Wed, 4 Mar 2020 13:45:30 +0000 (14:45 +0100)]
Remove unused imports in mass-pnf-sim.py
Change-Id: Idf48efd38395afc4fcb85d42e79a26f94f59a02b
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Bartek Grzybowski [Wed, 4 Mar 2020 13:01:02 +0000 (14:01 +0100)]
Remove unused imports in vcpe python scripts
Unused imports are removed according to pylint report
or ignore rules are added where applicable.
Change-Id: I8c32b5c3f456f0444f8ec8980910d470b7238a7d
Issue-ID: INT-1427
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
shashikanth.vh@huawei.com [Wed, 4 Mar 2020 06:36:18 +0000 (12:06 +0530)]
doc_CCVPN update for frankfurt
Change-Id: Ifecd0f8c24f59ffd8ab3e2e40ea3988fa7beb047
Issue-ID: INT-1469
Signed-off-by: shashikanth.vh <shashikanth.vh@huawei.com>
Reshmasree [Tue, 3 Mar 2020 11:30:39 +0000 (11:30 +0000)]
Update OOF SON use case documentation
Issue-ID: INT-1466
Signed-off-by: Reshmasree <reshmasree.chamarthi2@wipro.com>
Change-Id: I9d2dfac1d7244971553f79359466b2b3c104066d
Reshmasree [Tue, 3 Mar 2020 11:56:27 +0000 (11:56 +0000)]
Update E2E Network Slicing use case documentation
Issue-ID: INT-1468
Signed-off-by: Reshmasree <reshmasree.chamarthi2@wipro.com>
Change-Id: Ib7a1a363910594eea5fb85460a98478a36510dbf
ebo [Sun, 1 Mar 2020 23:41:37 +0000 (23:41 +0000)]
Fixed the SSH configuration of user 'netconf'
The actual SSH configuration is stored in Sysrepo and not as ordinary
~netconf/.ssh files.
Issue-ID: INT-1124
Change-Id: I7e16e09a20ac6f2d52c8958550603935b6790283
Signed-off-by: ebo <eliezio.oliveira@est.tech>