oom.git
7 weeks ago[MARIADB] Update image versions to the latest MariaDB Operator 82/140382/12
Andreas Geissler [Wed, 5 Mar 2025 08:55:50 +0000 (09:55 +0100)]
[MARIADB] Update image versions to the latest MariaDB Operator

Update tags for MariaDB Galera Init and agent containers
to v0.37.1
Add new docker repository for mariadb-operator images
Update mariadb template to use resource settings
Update SO jobAnnotation handling for DB init
Fix minimu resource settings in SO

Issue-ID: OOM-3335

Change-Id: I5f31e3db62ed27d33ea47b69645d9beb55e45335
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
7 weeks agoMerge "[UUI] Chart changes for uui-server 15.0.2"
Andreas Geissler [Tue, 4 Mar 2025 07:50:57 +0000 (07:50 +0000)]
Merge "[UUI] Chart changes for uui-server 15.0.2"

8 weeks agoMerge "[DCAE] Disable Istio Sidecar injection in HV-VES"
Fiete Ostkamp [Mon, 3 Mar 2025 16:26:56 +0000 (16:26 +0000)]
Merge "[DCAE] Disable Istio Sidecar injection in HV-VES"

8 weeks ago[SDNC] SDNC resource limits corrected 31/140331/3
Andreas Geissler [Mon, 3 Mar 2025 08:19:17 +0000 (09:19 +0100)]
[SDNC] SDNC resource limits corrected

As the SDNC pod JVM limits are set to max 6Gi, the pod limits need to
be increased as well, otherwise the pod gets OOMKilled.
Instead of using fixed memory limits, now the maxRAMPercentage is defined.

Issue-ID: OOM-3332

Change-Id: I90245f5c1c5501be5e7a7deca9a722d70a82a267
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 weeks ago[DCAE] Disable Istio Sidecar injection in HV-VES 56/140356/1
Andreas Geissler [Mon, 3 Mar 2025 13:45:58 +0000 (14:45 +0100)]
[DCAE] Disable Istio Sidecar injection in HV-VES

Added possibility to set "polLabel" in deployment template and
disabled "isto-sidecar" injection in HV-VES collector

Issue-ID: OOM-3333

Change-Id: Ic5a62549bc0a00e1138f4319be6460a9c9476dc1
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 weeks ago[UUI] Chart changes for uui-server 15.0.2 34/140234/12
Fiete Ostkamp [Mon, 17 Feb 2025 10:13:00 +0000 (11:13 +0100)]
[UUI] Chart changes for uui-server 15.0.2

- define tracing properties in global section to allow centrally
  configuring it (for the whole platform)
- define uui-server properties in values.yaml
- use MaxRAMPercentage jvm arg to scale the jvm heap size
  dynamically with the pod resources (and give the process
  more than 128MB(!) max heap)
- add a revisionHistoryLimit setting
- do not use NodePorts
- change default service type for nginx to ClusterIP

Issue-ID: USECASEUI-875
Change-Id: I3c7893f4970c088844511ea5b038bf842ce90859
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
8 weeks ago[SO] Revert decreasing the liveness probe intervals 29/140329/1
Fiete Ostkamp [Sun, 2 Mar 2025 14:08:58 +0000 (15:08 +0100)]
[SO] Revert decreasing the liveness probe intervals

- SO was not running stable with liveness probe intervals
  of 20 seconds

Issue-ID: SO-4147
Change-Id: I574165c0c583e4cc2a518ff4f79d5d6e4ff2fce4
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
8 weeks agoMerge "[COMMON] Add jobAnnotations as optional variables"
Fiete Ostkamp [Sun, 2 Mar 2025 13:58:22 +0000 (13:58 +0000)]
Merge "[COMMON] Add jobAnnotations as optional variables"

8 weeks ago[COMMON] Add jobAnnotations as optional variables 25/140325/6
Andreas Geissler [Fri, 28 Feb 2025 12:44:27 +0000 (13:44 +0100)]
[COMMON] Add jobAnnotations as optional variables

- add Annotations to all job template metadata
- make the jobAnnotations configurable via values.yaml

Issue-ID: OOM-3254

Change-Id: I84a3a7e9a89ea272a239e7a86e9c615103c2c7e4
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 weeks ago[AAI] 15.0.4 release 50/140150/24
Fiete Ostkamp [Wed, 5 Feb 2025 13:34:30 +0000 (14:34 +0100)]
[AAI] 15.0.4 release

- [resources,traversal,graphadmin,schema-service] use v30 api version
- [resources,traversal,graphadmin] make basic-auth configurable
- [resources,traversal] remove Keycloak-auth related files
- [resources,traversal] remove logToFile option since container filesystems are read-only [0]
- [graphadmin] use init container for schema-creation

[0] and sooner or later any tmp volume will fill up

Issue-ID: AAI-4124
Change-Id: Ib9b70dedd07acfb8ae24506ab044de0940c0c815
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2 months ago[AAI] 15.0.3 release 84/140284/4
Fiete Ostkamp [Mon, 24 Feb 2025 07:31:33 +0000 (08:31 +0100)]
[AAI] 15.0.3 release

- [graphadmin] make auth configurable
- [resources, traversal] cleanup logback config by removing logToFile option [0]
- [resources, traversal] reduce log noise from liveness probe
- [babel] make tracing configurable via globals

[0] this is not a viable option anymore in a readonly filesystem. EmptyDir volumes can
    still allow logging to file, but sooner or later these volumes fill up

Issue-ID: AAI-4124
Change-Id: I3a8284e3cd8a3b387722fa49506cfdeaeeb303f0
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2 months agoMerge "[SDC] Reduce sdc-be log noise"
Fiete Ostkamp [Tue, 25 Feb 2025 14:20:44 +0000 (14:20 +0000)]
Merge "[SDC] Reduce sdc-be log noise"

2 months ago[SO] Leverage startup probe to avoid initialDelaySeconds of 10 minutes for k8s probes 91/140291/4
Fiete Ostkamp [Mon, 24 Feb 2025 15:39:18 +0000 (16:39 +0100)]
[SO] Leverage startup probe to avoid initialDelaySeconds of 10 minutes for k8s probes

- use startup probe to make so services available as early as possible
- define revisionHistoryLimit
- reduce default liveness period from 60 seconds to 20 seconds

Issue-ID: SO-4144
Change-Id: Ibd84fe1ef2d5c7f55e580fb7cc7b0a4bedff0045
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2 months ago[SDC] Reduce sdc-be log noise 95/140295/1
Fiete Ostkamp [Tue, 25 Feb 2025 12:11:41 +0000 (13:11 +0100)]
[SDC] Reduce sdc-be log noise

- change logback configuration for sdc-be to not log the
  healthcheck on info level

Issue-ID: SDC-4718
Change-Id: I0f227378b18718ea0e44809fe9db186f3dad524e
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2 months agoMerge "[COMMON] Add label template and make jobs GitOps ready"
Lukasz Rajewski [Mon, 24 Feb 2025 10:55:57 +0000 (10:55 +0000)]
Merge "[COMMON] Add label template and make jobs GitOps ready"

2 months agoMerge "[INFO] Add Fiete Ostkamp as committer"
Lukasz Rajewski [Mon, 24 Feb 2025 10:55:30 +0000 (10:55 +0000)]
Merge "[INFO] Add Fiete Ostkamp as committer"

2 months agoMerge "[COMMON] Fix mariadb template, so and authentication after checking in ArgoCD"
Lukasz Rajewski [Mon, 24 Feb 2025 10:40:32 +0000 (10:40 +0000)]
Merge "[COMMON] Fix mariadb template, so and authentication after checking in ArgoCD"

2 months ago[INFO] Add Fiete Ostkamp as committer 87/140287/1
Andreas Geissler [Mon, 24 Feb 2025 10:27:11 +0000 (11:27 +0100)]
[INFO] Add Fiete Ostkamp as committer

Added Fiete as committer of OOM

Issue-ID: OOM-3331

Change-Id: I5b1febe707098abef0547f3fce1a45fc96fee0ed
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2 months ago[COMMON] Add label template and make jobs GitOps ready 79/140179/5
Andreas Geissler [Mon, 10 Feb 2025 10:57:45 +0000 (11:57 +0100)]
[COMMON] Add label template and make jobs GitOps ready

- update label template and use it within the resource definitions
- add jobAnnotations in DB init jobs to make them GitOps ready
- add bitnami/common chart to nginx and fix lint errors

Issue-ID: OOM-3327
Issue-ID: OOM-3329

Change-Id: I72b1adad43ff479e46f6db2834c627d74c97a20c
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2 months ago[COMMON] Fix mariadb template, so and authentication after checking in ArgoCD 26/140226/5
Andreas Geissler [Fri, 14 Feb 2025 15:40:09 +0000 (16:40 +0100)]
[COMMON] Fix mariadb template, so and authentication after checking in ArgoCD

- mariadb: manifest was not synced by ArgoCD, as entry for securityContext was wrong
- authentication: wrong keycloak-config-cli version and implementation
- so: added annotation for ArgoCD in job

Issue-ID: OOM-3330

Change-Id: I6f573defe2f44b625027325f318e63fca1846e3c
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2 months agoMerge "Use 6.1.1 readiness image"
Andreas Geissler [Thu, 20 Feb 2025 07:31:46 +0000 (07:31 +0000)]
Merge "Use 6.1.1 readiness image"

2 months agoUse 6.1.1 readiness image 38/140238/4
Fiete Ostkamp [Mon, 17 Feb 2025 15:26:48 +0000 (16:26 +0100)]
Use 6.1.1 readiness image

- contains performance improvement for the check time
- set default pullPolicy for the readiness to IfNotPresent
  to avoid downloading this ~20 times

Issue-ID: INT-2292
Change-Id: Id712dc67d92d8d6eebf9ac7d13129e0192a82a46
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2 months ago[DCAEGEN2] datalake ui is not coming up due to a tmp volume overwriting it's entrypoint 43/140243/1
Fiete Ostkamp [Tue, 18 Feb 2025 15:31:22 +0000 (16:31 +0100)]
[DCAEGEN2] datalake ui is not coming up due to a tmp volume overwriting it's entrypoint

- followup of https://gerrit.onap.org/r/c/oom/+/140241 since two subcomponents
  were forgotten when enabling the tmp volume

Issue-ID: DCAEGEN2-3419
Change-Id: Ifb883cec4541fd95346ae0b3042ee7f4fca6caf1
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2 months agoMerge "datalake ui is not coming up due to a tmp volume overwriting it's entrypoint"
Andreas Geissler [Tue, 18 Feb 2025 12:47:06 +0000 (12:47 +0000)]
Merge "datalake ui is not coming up due to a tmp volume overwriting it's entrypoint"

2 months agodatalake ui is not coming up due to a tmp volume overwriting it's entrypoint 41/140241/1
Fiete Ostkamp [Tue, 18 Feb 2025 11:06:39 +0000 (12:06 +0100)]
datalake ui is not coming up due to a tmp volume overwriting it's entrypoint

- make the definition of a tmp empty dir volume configurable
- only enable it for ves-collector (where it is increasing read-only
  filesystem support)

Issue-ID: DCAEGEN2-3419
Change-Id: I90a3f22f316957ad9f77e97f5175173a1748adac
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2 months agoMerge "[AAI] 15.0.2 release"
Andreas Geissler [Tue, 18 Feb 2025 11:06:07 +0000 (11:06 +0000)]
Merge "[AAI] 15.0.2 release"

2 months ago[AAI] 15.0.2 release 15/140215/5
Fiete Ostkamp [Thu, 13 Feb 2025 10:47:31 +0000 (11:47 +0100)]
[AAI] 15.0.2 release

- [resources,traversal,graphadmin] use 1.15.4 image version
- [resources,traversal,graphadmin] fix liveness probe
- [all] make annotations configurable
- [all] disable janusgraph warning log line on each liveness probe
- [all] disable tracing by default since jaeger is not included in the deployment by default
- [all] use 6.1.0 readiness image with shorter check intervals
- [graphadmin] wait for cassandra before running the schema-creation init container

Issue-ID: AAI-4124
Change-Id: Ib1d592c1fc1e3cfb3fe26b238ec2ad6c200ef2e1
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2 months ago[POLICY] Update helm charts with latest released versions 20/140220/5
adheli.tavares [Thu, 13 Feb 2025 20:20:45 +0000 (20:20 +0000)]
[POLICY] Update helm charts with latest released versions

- use R16 interim release versions for policy components
- remove mariadb configurations for policy
- remove execute permissions for yaml config files

Issue-ID: POLICY-5285
Change-Id: I8cab7d7a2509286555634b851efb7fc13d314049
Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
2 months agoMerge "Integrate Scalability Changes in SDC"
Andreas Geissler [Mon, 10 Feb 2025 07:58:46 +0000 (07:58 +0000)]
Merge "Integrate Scalability Changes in SDC"

2 months agoMerge "Integrate Scalability Changes in SDC for Community Contribution"
Andreas Geissler [Mon, 10 Feb 2025 07:58:21 +0000 (07:58 +0000)]
Merge "Integrate Scalability Changes in SDC for Community Contribution"

2 months agoIntegrate Scalability Changes in SDC 44/140044/6
Khantwal [Fri, 31 Jan 2025 06:20:47 +0000 (11:50 +0530)]
Integrate Scalability Changes in SDC

- Add scalability changes to SDC components

Issue-ID: SDC-4712
Change-Id: I9c5f81ce979d3c923981f8b00eeec25f69d9d103
Signed-off-by: Anamika Khantwal <anamika.khantwal@accenture.com>
2 months agoMerge "Addition of OPA-PDP Helm charts"
Andreas Geissler [Mon, 3 Feb 2025 07:45:18 +0000 (07:45 +0000)]
Merge "Addition of OPA-PDP Helm charts"

2 months agoAddition of OPA-PDP Helm charts 23/139923/11
Deena Mukundan [Fri, 17 Jan 2025 12:18:34 +0000 (13:18 +0100)]
Addition of OPA-PDP Helm charts

Issue-ID: POLICY-5142
Change-Id: I810c514940048a4a32acc00eabdfa653692cb7b2
Signed-off-by: Deena Mukundan <dm00536893@techmahindra.com>
2 months agoIntegrate Scalability Changes in SDC for Community Contribution 43/140043/1
Khantwal [Fri, 31 Jan 2025 06:03:50 +0000 (11:33 +0530)]
Integrate Scalability Changes in SDC for Community Contribution

- Add scalability changes to SDC components

Issue-ID: SDC-4712
Change-Id: I3bf59b7cde36ce19a884552fdb9cf0ce10f5c327
Signed-off-by: Anamika Khantwal <anamika.khantwal@accenture.com>
2 months agoMerge "[SDC] Chart changes related to catalog-be and openecomp-be module"
Andreas Geissler [Tue, 28 Jan 2025 13:35:21 +0000 (13:35 +0000)]
Merge "[SDC] Chart changes related to catalog-be and openecomp-be module"

3 months ago[SDC] Chart changes related to catalog-be and openecomp-be module 33/140033/3
rohit.raj@t-systems.com [Mon, 27 Jan 2025 12:43:00 +0000 (13:43 +0100)]
[SDC] Chart changes related to catalog-be and openecomp-be module

- Contains changes related to catalog-be(sdc-be) and openecomp-be(sdc-onboarding-be) module after chef-removal.
- Has some configuration files as configmap that were getting generated through Chef before.

Issue-ID: SDC-4710
Change-Id: Ia84ceffa7dc7371b232f7c9d6d4082416c23e4f8
Signed-off-by: rohit.raj@t-systems.com <rohit.raj@t-systems.com>
3 months agoMerge "[POLICY] Add fixed postgres image tag and postgres port"
Lukasz Rajewski [Mon, 27 Jan 2025 08:26:31 +0000 (08:26 +0000)]
Merge "[POLICY] Add fixed postgres image tag and postgres port"

3 months agoMerge "[USECASEUI] Make usecase-ui work via ingress"
Andreas Geissler [Thu, 23 Jan 2025 10:28:04 +0000 (10:28 +0000)]
Merge "[USECASEUI] Make usecase-ui work via ingress"

3 months ago[POLICY] Add fixed postgres image tag and postgres port 64/139964/1
Andreas Geissler [Mon, 20 Jan 2025 14:57:23 +0000 (15:57 +0100)]
[POLICY] Add fixed postgres image tag and postgres port

Use fixed image version instead of "latest" and
define a port variable used in the DB job definition

Issue-ID: POLICY-5250

Change-Id: I2d73cb485ac1a6cb94913cdaa0b3a8bfe87a60e0
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
3 months agoMerge "[SDNC] Replace Bierman RESTCONF with RFC 8040"
Lukasz Rajewski [Mon, 20 Jan 2025 10:30:39 +0000 (10:30 +0000)]
Merge "[SDNC] Replace Bierman RESTCONF with RFC 8040"

3 months ago[SDNC] Replace Bierman RESTCONF with RFC 8040 64/139164/19
Dan Timoney [Thu, 17 Oct 2024 13:15:51 +0000 (09:15 -0400)]
[SDNC] Replace Bierman RESTCONF with RFC 8040

Replaces Bierman draft version of RESTCONF API with
version that is compliant with RFC 8040.
Updated the required configuration files for SDNC
Update the generic-resource-api configuration file and mount it to
the sdnc pod
Update of SO images to use the new SO library.

Issue-ID: SDNC-1847
Change-Id: Id133d6bb83d55d8dac65447e5828b7793069cefb
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
Signed-off-by: Dan Timoney <dtimoney@att.com>
3 months ago[USECASEUI] Make usecase-ui work via ingress 43/139943/8
Fiete Ostkamp [Thu, 16 Jan 2025 15:07:56 +0000 (16:07 +0100)]
[USECASEUI] Make usecase-ui work via ingress

- introduce nginx that serves as reverse proxy in front of the uui and uui-server pods
- this approach makes the web app work over ingress
- introduce new AAI_ADDR environment variable that may eventually
  be used by uui-server to interface with AAI directly

Issue-ID: USECASEUI-854
Change-Id: I229e039f8dfe6df050886ade0ea37a30c7272494
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
3 months ago[COMMON] Fix errors in mariadb operator template 09/139909/1
Andreas Geissler [Wed, 15 Jan 2025 15:20:03 +0000 (16:20 +0100)]
[COMMON] Fix errors in mariadb operator template

- remove SecurytyContext settings
- remove fixed primary pod index from template

Issue-ID: OOM-3324

Change-Id: I535477ec43cde42cc63f1ab2620cf632eb64c943
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
3 months ago[SDC] Updated versions of images. 49/139849/2
rohit.raj@t-systems.com [Mon, 13 Jan 2025 06:22:11 +0000 (07:22 +0100)]
[SDC] Updated versions of images.

The image versions of all the components have been updated.

Issue-ID: SDC-4696
Change-Id: Id2890b00742096015007f4675d76ee9d4de77c62
Signed-off-by: rohit.raj@t-systems.com <rohit.raj@t-systems.com>
3 months agoMerge "[DOC] Update versions of Operators"
Lukasz Rajewski [Mon, 6 Jan 2025 15:44:02 +0000 (15:44 +0000)]
Merge "[DOC] Update versions of Operators"

3 months agoMerge "[UUI] Update image of components of UUI"
Andreas Geissler [Fri, 3 Jan 2025 07:59:50 +0000 (07:59 +0000)]
Merge "[UUI] Update image of components of UUI"

3 months ago[UUI] Update image of components of UUI 31/139831/2
kaixiliu [Thu, 2 Jan 2025 01:43:13 +0000 (09:43 +0800)]
[UUI] Update image of components of UUI

Issue-ID: USECASEUI-853
Change-Id: I4cb335bd048c30d41613138dd5851931fca90597
Signed-off-by: kaixiliu <liukaixi@chinamobile.com>
3 months ago[DOC] Update versions of Operators 18/139318/9
Andreas Geissler [Mon, 4 Nov 2024 10:55:08 +0000 (11:55 +0100)]
[DOC] Update versions of Operators

Add new versions of infrastructure SW
Add release notes for Oslo
Correct linting issues in documents

Issue-ID: OOM-3322

Change-Id: I5ff844a0c6ad5dadc225232d5ef3fd1c149f6fa4
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
3 months ago[CDS] Update Chart Version 78/139778/2
soumya.e.singh [Fri, 20 Dec 2024 09:02:31 +0000 (14:32 +0530)]
[CDS] Update Chart Version

Update Chart Version in cds blueprint processor and main chart.yaml.

Issue-ID: CCSDK-4068
Signed-off-by: soumya.e.singh <soumya.e.singh@accenture.com>
Change-Id: Iff97e7c3ee476e308a0cf7e2844aabf21dc898ff

3 months ago[CDS]Update Image version to 1.7.1 75/139775/2
soumya.e.singh [Fri, 20 Dec 2024 04:50:40 +0000 (10:20 +0530)]
[CDS]Update Image version to 1.7.1

Update Image version to 1.7.1 of CDS blueprint processor to point to
latest image and update the DB URLs.

Issue-ID: CCSDK-4068
Signed-off-by: soumya.e.singh <soumya.e.singh@accenture.com>
Change-Id: I8258b84091fd28cc605b6a5a3ee6c7c947917643

4 months ago[POLICY] Fix default settings in values.yaml 20/139720/1
Andreas Geissler [Thu, 12 Dec 2024 15:53:39 +0000 (16:53 +0100)]
[POLICY] Fix default settings in values.yaml

Enable local Postgres instance as default DB.

Issue-ID: POLICY-5166

Change-Id: I5ba458548e3bee5cd6d3df2cf9b334af9b8da78f
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
4 months agoMerge "[POLICY] Fix DB related issues"
Micha? Jagie??o [Thu, 12 Dec 2024 12:08:23 +0000 (12:08 +0000)]
Merge "[POLICY] Fix DB related issues"

4 months agoMerge "[AAI] Fix Kyverno Policy violations"
Andreas Geissler [Thu, 12 Dec 2024 11:34:05 +0000 (11:34 +0000)]
Merge "[AAI] Fix Kyverno Policy violations"

4 months agoMerge "[AUTHENTICATION] New Oslo version"
Micha? Jagie??o [Thu, 12 Dec 2024 07:44:14 +0000 (07:44 +0000)]
Merge "[AUTHENTICATION] New Oslo version"

4 months ago[AUTHENTICATION] New Oslo version 90/139590/7
Andreas Geissler [Thu, 28 Nov 2024 13:09:55 +0000 (14:09 +0100)]
[AUTHENTICATION] New Oslo version

Update for the latest Keycloak version (26.0.x)
Additional support for REALM options.
Add Authorization support
Update keycloak-config-cli and oauth2-proxy charts

Issue-ID: OOM-3306

Change-Id: I1e1d4b7afbaf52bc33904a1589efc25cf578d7a6
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
4 months ago[AAI] Fix Kyverno Policy violations 50/139550/3
Andreas Seelinger [Thu, 7 Nov 2024 09:20:07 +0000 (10:20 +0100)]
[AAI] Fix Kyverno Policy violations

- Refactored code for readiness check and use library readinessCheck
- Fixed securityContext settings
- Limit emptyVolume size and make it configurable
- Important: Need to use aai-haproxy docker image version >= 1.15.2
- Refactore meta labels and use common.labels instead

Issue-ID: AAI-4044
Change-Id: I346316e64cb67222836951cf12b3772bbf509c6a
Signed-off-by: Andreas Seelinger <andreas.seelinger@accenture.com>
4 months ago[POLICY] Fix DB related issues 51/139651/4
Andreas Geissler [Thu, 5 Dec 2024 09:34:57 +0000 (10:34 +0100)]
[POLICY] Fix DB related issues

- fix MariaDB configuration in PolicyAPI
- fix Postgres/MariaDB selection handling
- fix Secret definitions for DBs
- fix Postgres init script to be compliant to PG version 15+
- smaller linter fixes

Issue-ID: POLICY-5166

Change-Id: I7d95d50133eb1e9e1d91991d9fea05331442dea0
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
4 months agoAdjust default role mapping of the common serviceAccount chart 36/139636/1
Fiete Ostkamp [Tue, 3 Dec 2024 13:36:26 +0000 (14:36 +0100)]
Adjust default role mapping of the common serviceAccount chart

- make roles in serviceAccount chart configurable via role.read and role.create
- change declaration of roles to work in environments with more restrictive RBAC rules

Issue-ID: OOM-3323
Change-Id: I25ddd1a7cf26047b9098de03bbb8598dfd367133
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
4 months agoFix Kyverno policy violations for DCAE PRH & VES-COLLECTOR 63/139163/4
Aditi Shukla [Thu, 17 Oct 2024 08:20:23 +0000 (13:50 +0530)]
Fix Kyverno policy violations for DCAE PRH & VES-COLLECTOR

Issue-ID: OOM-3315
Change-Id: I1d6251e7c6724addca81167f9f4d184c291340c3
Signed-off-by: Aditi Shukla <aditi.shukla@t-systems.com>
4 months agoMerge "[POLICY] Update docker images to latest versions"
Andreas Geissler [Thu, 28 Nov 2024 07:32:14 +0000 (07:32 +0000)]
Merge "[POLICY] Update docker images to latest versions"

5 months agoMerge "[COMMON] Synchronize the charts"
Lukasz Rajewski [Wed, 27 Nov 2024 13:19:21 +0000 (13:19 +0000)]
Merge "[COMMON] Synchronize the charts"

5 months ago[MULTICLOUD] Add /tmp volumes in K8S 81/139581/1
Andreas Geissler [Wed, 27 Nov 2024 12:21:36 +0000 (13:21 +0100)]
[MULTICLOUD] Add /tmp volumes in K8S

Add temporary volumes to overcome read-only filesystem restrictions

Issue-ID: OOM-3318

Change-Id: Ie09c952d8d0a850bfbc6c1e6f17341face9d946a
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
5 months ago[POLICY] Update docker images to latest versions 61/139461/3
rameshiyer27 [Tue, 19 Nov 2024 16:12:27 +0000 (16:12 +0000)]
[POLICY] Update docker images to latest versions

The image versions in policy values.yaml files have been updated

*** This commit is generated by a PF release script ***

Issue-ID: POLICY-5166
Change-Id: I1e81d5bbee812f584cd8ee769f95f9534a5cef9d
Signed-off-by: rameshiyer27 <ramesh.murugan.iyer@est.tech>
5 months agoMerge "[Multicloud] Fix Kyverno Policy violations"
Andreas Geissler [Mon, 25 Nov 2024 15:57:44 +0000 (15:57 +0000)]
Merge "[Multicloud] Fix Kyverno Policy violations"

5 months agoMerge "[AAI] 15.0.0 chart release"
Andreas Geissler [Sat, 23 Nov 2024 10:02:42 +0000 (10:02 +0000)]
Merge "[AAI] 15.0.0 chart release"

5 months ago[COMMON] Synchronize the charts 09/139509/1
Andreas Geissler [Thu, 21 Nov 2024 09:25:10 +0000 (10:25 +0100)]
[COMMON] Synchronize the charts

Correct the security settings and improve templates.

Issue-ID: OOM-3288

Change-Id: Idf1d59b33bea4d27a523d990b218b2e36ffb0348
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
5 months ago[AAI] 15.0.0 chart release 17/139317/6
Fiete Ostkamp [Mon, 4 Nov 2024 07:09:09 +0000 (08:09 +0100)]
[AAI] 15.0.0 chart release

- update graphadmin image (1.14.7 -> 1.15.1)
- update babel image (1.13.3 -> 1.13.4)
- update resources image (1.14.7 -> 1.15.1)
- make logging partially configurable and less verbose

Issue-ID: AAI-4047
Change-Id: I78695dfccab88244bf119a4fc8877c1b9ddf90c2
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
6 months ago[CPS][COMMON] Update latest cps-and-ncmp image version 72/139272/1
rajesh.kumar [Thu, 24 Oct 2024 11:58:12 +0000 (17:28 +0530)]
[CPS][COMMON] Update latest cps-and-ncmp image version

Update latest cps-and-ncmp image version
- it will fix cps rolling upgrade issue

Issue-ID: OOM-3321

Change-Id: I56c34400dc73c71b936a51260efd241024abbeaa
Signed-off-by: rajesh.kumar <rk00747546@techmahindra.com>
6 months ago[Multicloud] Fix Kyverno Policy violations 47/139247/3
Andreas Geissler [Tue, 22 Oct 2024 09:33:38 +0000 (11:33 +0200)]
[Multicloud] Fix Kyverno Policy violations

Add SecurityContext to deployments

Issue-ID: OOM-3318

Change-Id: Ie4cfa869628d030c2047f3dd954d77786ab88c53
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
6 months ago[DOC] Update OOM Documentation 20/139220/1
Andreas Geissler [Thu, 17 Oct 2024 13:24:46 +0000 (15:24 +0200)]
[DOC] Update OOM Documentation

Replace wiki.onap.org links with altassian ones.

Issue-ID: OOM-3317

Change-Id: I09227ca0ac1d536b7e0507b60d15df6f0ff00480
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
6 months ago[ETCD] Add kyverno policy fixes 97/139197/3
Andreas Geissler [Mon, 14 Oct 2024 13:10:37 +0000 (15:10 +0200)]
[ETCD] Add kyverno policy fixes

Add securityContext settings to resolve kyverno policy violations
Fix Jira Links in all release notes.

Issue-ID: OOM-3314

Change-Id: Ief20d42f2e4825754bf8d1a142665c7dd176a1d9
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
6 months agoportal-ng chart update 10/139010/5
Fiete Ostkamp [Wed, 25 Sep 2024 06:29:14 +0000 (08:29 +0200)]
portal-ng chart update

- Kyverno fixes
- make Keycloak settings configurable via `global`

Issue-ID: PORTALNG-125
Change-Id: I827527d4fe2dcadf79ed79591c81dbe83169b2cb
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
7 months ago[AAI] 14.0.3 Oslo release with Java 11 00/138900/6
Fiete Ostkamp [Wed, 4 Sep 2024 14:55:56 +0000 (16:55 +0200)]
[AAI] 14.0.3 Oslo release with Java 11

- [resources,traversal,graphadmin] use 1.14.7 release images that are based on Java 11
- [babel] add metrics and tracing
- [babel] allow remote profiling and debugging
- [graphadmin] make graphadmin chart Kyverno compliant
- [graphadmin] replace fixed initialDelaySeconds wait invertal with dynamic startup probe
- [graphadmin] use actuator endpoint for liveness and readiness probe. Actuator still uses the old echo probe in the background
- [graphadmin] remove janusgraph-cached.properties since it effectively cannot be used
- [graphadmin] clean up janusgraph-realtime.properties
- [graphadmin] use common functions for readiness probe
- [graphadmin] remove LOCAL_USER_ID and LOCAL_GROUP_ID environment variables since they are not used (anymore)
- [modelloader] add metrics monitoring via prometheus
- [modelloader] allow remote profiling and debugging
- [sparky-be] use latest release image (2.0.5)

Other
- [sdc-be] declare ServiceMonitor to enable metrics monitoring via Prometheus

Issue-ID: AAI-3986
Change-Id: Ifbd52d0d019d34596f6f824aa940e9b7993336ab
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
7 months agoMerge "[STRIMZI] Solve Security Policy violations"
Lukasz Rajewski [Thu, 12 Sep 2024 06:34:41 +0000 (06:34 +0000)]
Merge "[STRIMZI] Solve Security Policy violations"

7 months ago[STRIMZI] Solve Security Policy violations 83/138783/2
Andreas Geissler [Mon, 19 Aug 2024 14:30:45 +0000 (16:30 +0200)]
[STRIMZI] Solve Security Policy violations

- add securityContext settings to Operator and strimzi resources
- add resources settings
- update documents to use a new strimzi-kafka operator version in Oslo

Issue-ID: OOM-3311

Change-Id: Ie6e4c30495e500781d898aed31bd74f2f4f3c708
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
7 months agoMerge "[CPS][COMMON] Sync newly added cps configurations"
Andreas Geissler [Tue, 10 Sep 2024 11:36:08 +0000 (11:36 +0000)]
Merge "[CPS][COMMON] Sync newly added cps configurations"

7 months agoMerge "[POLICY] Fix postgres support and SASL"
Andreas Geissler [Tue, 10 Sep 2024 06:32:53 +0000 (06:32 +0000)]
Merge "[POLICY] Fix postgres support and SASL"

7 months ago[CPS][COMMON] Sync newly added cps configurations 88/138688/1
rajesh.kumar [Wed, 4 Sep 2024 08:44:29 +0000 (14:14 +0530)]
[CPS][COMMON] Sync newly added cps configurations

Update CPS helm charts for newly added configurations.

Issue-ID: OOM-3313

Change-Id: I56c34400dc73c71b936a51260efd240904bdaeae
Signed-off-by: rajesh.kumar <rk00747546@techmahindra.com>
7 months ago[POLICY] Fix postgres support and SASL 74/138774/9
saul.gill [Thu, 7 Mar 2024 12:43:01 +0000 (12:43 +0000)]
[POLICY] Fix postgres support and SASL

Charts will allow mariadb or postgres
Allow configuration of db choice globally
Deleted jobs that aren't needed
Altered db migrator script
Allow SASL config in drools
Drools chart fixed
Removed readiness jobs for kafka
Exposed more config for drools

Issue-ID: POLICY-4943
Change-Id: I26c4a7c1adc2d615602e3e6495ecedfb017ef39e
Signed-off-by: saul.gill <saul.gill@est.tech>
7 months ago[DCAEGEN2] define emptyDir volume for /tmp dir 80/138880/1
Fiete Ostkamp [Sun, 1 Sep 2024 13:08:37 +0000 (15:08 +0200)]
[DCAEGEN2] define emptyDir volume for /tmp dir

- this improves support for making the pod filesystem read-only (of ves-collector)

Issue-ID: DCAEGEN2-3415
Change-Id: Ic7413b2fd589d095b69eec0c88693b2db4e3c13c
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
8 months agoMerge "[AAI] Release 14.0.1 chart with Janusgraph update to 0.6.0"
Andreas Geissler [Thu, 22 Aug 2024 13:04:01 +0000 (13:04 +0000)]
Merge "[AAI] Release 14.0.1 chart with Janusgraph update to 0.6.0"

8 months ago[CASSANDRA] Add option to set the resource limits 17/138817/2
Andreas Geissler [Wed, 21 Aug 2024 08:06:35 +0000 (10:06 +0200)]
[CASSANDRA] Add option to set the resource limits

add resources entry to the _cassOp template
add resources setting to the cassandra instance
add additional settings to improve the performance

Issue-ID: OOM-3312

Change-Id: Iaa18e7c55a933f2403eff2dd93cb36f9786b3a41
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 months agoMerge "[COMMON] Cleanup charts"
Thomas Kulik [Tue, 20 Aug 2024 05:02:35 +0000 (05:02 +0000)]
Merge "[COMMON] Cleanup charts"

8 months ago[AAI] Release 14.0.1 chart with Janusgraph update to 0.6.0 41/138641/8
Fiete Ostkamp [Tue, 6 Aug 2024 13:00:30 +0000 (15:00 +0200)]
[AAI] Release 14.0.1 chart with Janusgraph update to 0.6.0

- 1.14.5 images for resources, traversal and graphadmin with Janusgraph update (0.5.3 -> 0.6.0)
- cleanup janusgraph-realtime.properties file since the 'cassandra' storage.backend option is not supported anymore
- use more descriptive port names for schema-service
- reduce terminationGracePeriodSeconds of pods to enable quicker deployment
- declare pod revisionHistoryLimit for all components
- make root log level configurable for all components (via log.level.root)

Issue-ID: AAI-3950
Change-Id: I6221963139fcf4b748167940b6e59367661ba1e5
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
8 months agoMerge "[UUI] Modify llm-adaptation port"
Andreas Geissler [Fri, 16 Aug 2024 08:52:14 +0000 (08:52 +0000)]
Merge "[UUI] Modify llm-adaptation port"

8 months ago[UUI] Modify llm-adaptation port 82/138682/2
kaixiliu [Fri, 16 Aug 2024 08:25:59 +0000 (16:25 +0800)]
[UUI] Modify llm-adaptation port

Modify llm-adaptation port

Issue-ID: USECASEUI-838
Change-Id: I5ee51936fe19563f7eec8fb1eae75247eea8a687
Signed-off-by: kaixiliu <liukaixi@chinamobile.com>
8 months agoMerge "[COMMON][TIMESCALEDB] TemporalDB and securityContext settings"
Thomas Kulik [Thu, 15 Aug 2024 11:20:02 +0000 (11:20 +0000)]
Merge "[COMMON][TIMESCALEDB] TemporalDB and securityContext settings"

8 months ago[COMMON][TIMESCALEDB] TemporalDB and securityContext settings 44/138744/3
Andreas Geissler [Wed, 14 Aug 2024 11:13:41 +0000 (13:13 +0200)]
[COMMON][TIMESCALEDB] TemporalDB and securityContext settings

- make pod/containerSecurityContext settings more configurable
  in _pod.tpl
- fix MariaDB statefulset
- Fix temporal statefulset to comply with security rules
- Set timescaleDB via RepositoryGenerator

Issue-ID: OOM-3310

Change-Id: I870f1e835020c2b30225741e700d1a6abfba8ad3
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 months agonew onap logo 33/138733/1
thmsdt [Wed, 14 Aug 2024 08:24:21 +0000 (10:24 +0200)]
new onap logo

Issue-ID: DOC-826

Change-Id: Ifc4a02697760b228029363d9362cb12070efd198
Signed-off-by: thmsdt <thomas.kulik@telekom.de>
8 months ago[authentication] Fix README 19/138719/1
Andreas Geissler [Tue, 13 Aug 2024 12:59:39 +0000 (14:59 +0200)]
[authentication] Fix README

change default settings

Issue-ID: OOM-3306

Change-Id: I5600dce6d4828323a0c00107a967cfdaf71c07b5
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 months ago[COMMON] Cleanup charts 09/138709/2
Andreas Geissler [Tue, 13 Aug 2024 07:59:22 +0000 (09:59 +0200)]
[COMMON] Cleanup charts

- archive charts, which are not maintained anymore
- archive subcharts in SDNC, MSB, DCAEGEN2-SERVICES
- Cleanup environment and override files

Issue-ID: OOM-3309
Issue-ID: ONAPARC-805

Change-Id: If19a807fefa574ceb9b90ac1eb84d9642729323d
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 months agoMerge "[COMMON] Synchronize common charts"
Lukasz Rajewski [Tue, 13 Aug 2024 07:00:05 +0000 (07:00 +0000)]
Merge "[COMMON] Synchronize common charts"

8 months agoMerge "[POLICY] Fix Kyverno Policy violations"
Lukasz Rajewski [Sat, 10 Aug 2024 18:53:17 +0000 (18:53 +0000)]
Merge "[POLICY] Fix Kyverno Policy violations"

8 months agoMerge "[AUTHENTICATION] Fixes for REALM generation"
Lukasz Rajewski [Sat, 10 Aug 2024 18:53:01 +0000 (18:53 +0000)]
Merge "[AUTHENTICATION] Fixes for REALM generation"

8 months agoMerge "[UUI] Add configuration file for llm adaptation"
Andreas Geissler [Fri, 9 Aug 2024 20:40:24 +0000 (20:40 +0000)]
Merge "[UUI] Add configuration file for llm adaptation"

8 months ago[UUI] Add configuration file for llm adaptation 33/138533/10
kaixiliu [Tue, 23 Jul 2024 06:52:04 +0000 (14:52 +0800)]
[UUI] Add configuration file for llm adaptation

Add configuration file for llm adaptation

Issue-ID: USECASEUI-838
Change-Id: Ib25a7047712d753b4be8fa39733001f02bc196aa
Signed-off-by: kaixiliu <liukaixi@chinamobile.com>
8 months ago[AUTHENTICATION] Fixes for REALM generation 98/138498/5
Andreas Geissler [Wed, 17 Jul 2024 13:07:55 +0000 (15:07 +0200)]
[AUTHENTICATION] Fixes for REALM generation

- Some fixes for the client creation within the REALM.
- Addition function for SMTP server configuration
- README additions
- Kyverno policy violation fixes

Issue-ID: OOM-3306

Change-Id: I6df34be566257f40795e454a6a81b4743cb8edb1
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 months ago[COMMON] Synchronize common charts 24/138624/2
Andreas Geissler [Fri, 2 Aug 2024 12:18:07 +0000 (14:18 +0200)]
[COMMON] Synchronize common charts

- solve actual findings during tests with kyverno policies
- synchronize headers

Issue-ID: OOM-3288
Issue-ID: OOM-3296

Change-Id: Ia7e7daa8864069493e09dd6511825aa939c5eeaf
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
8 months ago[POLICY] Fix Kyverno Policy violations 87/138587/2
Andreas Geissler [Mon, 29 Jul 2024 08:18:26 +0000 (10:18 +0200)]
[POLICY] Fix Kyverno Policy violations

- Add "archive" folder for removed policy-gui charts
- Update all deployments/jobs to fix policies
- Correct KafkaUser definition to avoid deprecated attribute
- update xacml-pdp deployment to work with readOnlyFilesystem setting

Issue-ID: OOM-3307

Change-Id: I579062c1c49923666c1d836f7324c8bbd7b88695
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
9 months ago[POLICY] Deprecation of policy-gui 75/138575/2
adheli.tavares [Thu, 25 Jul 2024 09:03:13 +0000 (10:03 +0100)]
[POLICY] Deprecation of policy-gui

- policy-gui is going into unmaintained state.

Issue-ID: POLICY-5049
Change-Id: Ic83ab19a37d1c3e7007975b27ca150c4794a86e9
Signed-off-by: adheli.tavares <adheli.tavares@est.tech>