Merge branch 'master' of oom

Change-Id: I0d7f356a8828a51484307759831e68339a48dcfd

Use nodePortPrefix variable in AAF (aaf-sms) charts

Issue-ID: AAF-383
Change-Id: I3e2591ca73c8ba559fd39aa1250471b15d1189d2
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>

Moving Helm Chart version for El Alto

Updating all helm chart versions to 5.0.0 for the El Alto release.

Merge will be co-ordinated with the merge of a separate aai/oom patch.
Please do not merge until this coordination has completed.

Issue-ID: OOM-1980
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
Change-Id: I31daaebeacea33565f13affd2fa28fb15fe948ba

Updated certificates for SMS

SMS healthcheck breaks because of expired certificates
This patch fixes that issue.

Issue-ID: AAF-845
Change-Id: I2004e29e3271a829989e1f46ebcd7e07e1b6185a
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

SMS and SSHSH (AAF PTL) Release Version

Issue-ID: AAF-826
Change-Id: Ia8c23170ccaaa52c528d89417d95ddb3478ab00d
Signed-off-by: Instrumental <jonathan.gathman@att.com>

AAF to Release version 2.1.13

Also upped SMS/SSHSM versions
Issue-ID: AAF-823
Change-Id: I27de5079cd678d0206238873b81cb55b5612a67a
Signed-off-by: Gathman, Jonathan (jg1555) <jg1555@us.att.com>

Apply Cert changes

Issue-ID: AAF-822
Change-Id: I3185d827f3f67cb177534f7c7f3281375b77c613
Signed-off-by: Instrumental <jonathan.gathman@att.com>

Remove DCAE image from update

Change-Id: Ifa98f8610b0a96a28f3a3ded7cb65663e9455158
Issue-ID: INT-1042
Signed-off-by: Yang Xu <yang.xu3@huawei.com>

Remove nodeport for aaf-sms

Nodeport exposes aaf-sms outside the cluster
which is a security risk without the proper
authentication systems in place.
We will add external access if needed in the
future.

Issue-ID: OOM-1739
Change-Id: Ibefbd1c5656262131f00a2e53dbf5804f2ead084
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Update Chart version for Dublin Release

All charts are being bumped from 3.0.0 to 4.0.0 for the Dublin release.
In addition the requirement.yaml files have been updated to allow for
chart versions that include timestamp suffix. A following on patch will
take care of changes to the OOM Makefiles to support injection of the
timestamp versions.

Change-Id: Ie03d86fad2027e975e8b9106e3a828e4335037cb
Issue-ID: OOM-1642
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>

Initial empty repository

Merge "global image pull issue Issue-ID: OOM-1563"

global image pull issue
Issue-ID: OOM-1563

Change-Id: I383dbec29291ba5b13d613f60d8eb343b9c59dda
Signed-off-by: dkamdocs <devesh.kumar@amdocs.com>

Reconfigure nodeport usage

Removed the nodeport usage for sms-db
Converted all multicloud-prometheus charts
to use ClusterIP for now. We can allocate
nodeports for them later on when the services
are requested by other services in multicloud.
Also, disabled the multicloud-prometheus charts from starting up by default.
Change once dependent charts or services are added.

Issue-ID: OOM-1555
Change-Id: I2dddc54015844de3abbbf786f95b8bb6eba92d86
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Merge "AAF version to 2.1.8"

Sync docker tags with release manifest

Sync docker tags with the release manifest from integration
repo commit b37a3cfdaf92c4855660d2f0c1b20eb482b99bd4.

Change-Id: Iabb203836d0c0adb5604a9303d4a108142ec6757
Issue-ID: INT-663
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

AAF version to 2.1.8

Issue-ID: AAF-630
Change-Id: I26b61e5734a0a0249f66325594dc50e03b613727
Signed-off-by: Instrumental <jonathan.gathman@att.com>

Move to AAF 2.1.7 Release

Issue-ID: AAF-620
Change-Id: Iafdc20818e52dab4b6ab56a8053553d6dfe02e6a
Signed-off-by: Instrumental <jonathan.gathman@att.com>

Sync docker tags with release manifest

Sync docker tags with the release manifest from integration
repo commit 1e16c7e67d1fdeadab3789b07d6d2f47b7d0ffd7.

Change-Id: If580d0000108ce9ff70ad128b9bc93bf4364376b
Issue-ID: INT-663
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

update OOM for 2.1.7-SNAPSHOT

Issue-ID: AAF-609
Change-Id: Ia3735e269205425e66452701fa15909500e569f7
Signed-off-by: Instrumental <jonathan.gathman@att.com>

add OOF-HAS AAF integration

Issue-ID: OPTFRA-331

Change-Id: I4811511424c42aec0dc98d2dcdf3cce3cc2bd218
Signed-off-by: sandovalfrOAM <frank_sandoval@oamtechnologies.com>
Signed-off-by: Frank Sandoval <frank.sandoval@oamtechnologies.com>

Update sms version to 3.0.1

Update SMS version to 3.0.1 to reflect latest image

Issue-ID: AAF-390
Change-Id: Ie4b6c45bf2dc3e8352810809b2c88523240b6d43
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Merge "OOF HAS Helm chart updates"

OOF HAS Helm chart updates

Helm charts updated for HAS with MUSIC v3.
Sync conductor.conf, added dependent containers for AAF.
Read config from values.yaml.
Disabled AAF authentication.
Updated resources for OSDF and HAS charts.
Removed hardcoded values for namespace

Change-Id: I683cd0b8c86a6cc9a4b4c4793051878e0d0e5b2f
Issue-ID: OPTFRA-363
Signed-off-by: Dileep Ranganathan <dileep.ranganathan@intel.com>
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

update OOM for 2.1.6

Issue-ID: AAF-571
Change-Id: I95f1f9c1604c36bc76eb556c7f35fdb8caceba57
Signed-off-by: Instrumental <jonathan.gathman@att.com>

Sync docker tags with release manifest

Sync docker tags with the release manifest from integration
repo commit 90e136c83ec5434abaeb9939b995f86aa4089850.

Change-Id: I771393adb429087752dc52df2cd2812dc9ff6a11
Issue-ID: INT-663
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

Sync docker tags with release manifest

Sync docker tags with the release manifest.  It is
assumed that the release manifest is the
"single source of truth" and that the versions in
the helm charts are out of date.

Change-Id: I2902e60b25f57409dd616780a626e63c92d26769
Issue-ID: INT-663
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

Recommended AAF/OOM Changes

This incorporats Mike E's changes as well as recommended
changes from Abandoned 70511 (merges from multiple
machines got too hard.)

Made Olaf recommended changes.  Changed to non-SNAPSHOT in
anticipation of LF releasing this morning

Put Versions back to "2.1.5-SNAPSHOT"  Brian F reminded
me that GWu's scripts handle version changes for
Envs.

Issue-ID: AAF-557
Change-Id: I3e81a9c65df356d1d27b0d453e09c9ed3a81f803
Signed-off-by: Instrumental <jonathan.gathman@att.com>

Merge "Add sshsm hardware security support charts"

Replace liveness probe & update images

Updating to latest snapshot images. File-based "wait"
being replaced with standard port-based liveness probe to
fix cassandra from not starting for AAF.

Change-Id: If08d6bbf766abfcebe14d23894cde9c21c96c510
Issue-ID: AAF-557
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>

Merge "Add sms preload job that preloads secrets"

Add sshsm hardware security support charts

Add charts that support hardware security in AAF
This includes two sub charts, abrmd and distcenter
By default tpm requirement is disabled via the global.tpm flag.

Issue-ID: AAF-409
Change-Id: Ia3f5948891638bc281ad4585818274fc71564bdd
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

refactor AAF casablanca charts

Issue-ID: AAF-539

Change-Id: Id1f263d526ef5fa88c6cd25f7ed1779d3a0cd2ee
Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>

Add sms preload job that preloads secrets

Add a preload job that loads secrets from config
files into secret management service after it comes up.
P1: Includes osdf.json which contains secrets for oof-osdf
P2: Add has.json for oof-has

Issue-ID: AAF-548
Change-Id: Ib03cf6771a445be8ab00621cf26ca0e902af4ab3
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

commiting resource limit for onap-aaf component

cleaning up merge conflict
implementing template
reducing overly large resource limits
adding limits to aaf-sms.

Issue-ID: OOM-1146

Change-Id: Idac679dc9be94ab92ea95c38f9f237af65307131
Signed-off-by: dsingh.278 <dsingh.278@gmail.com>
Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>

Updating charts to use common resource template

Issue-ID: OOM-1145

Change-Id: I1510339a820802554b6e8b9a201619ef66be17a0
Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>

adding unlimited resource limit

Adds the ability to turn them off if they are found to
cause issues
also cleaning up some whitespace

Issue-ID: OOM-1145

Change-Id: Idf0ee21f70e1bf65813b7f51ea028f2783a01cf8
Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>

Update Chart versions to 3.0

All Chart versions and requirement dependencies have been updated to 3.0 for Casablanca release.

Change-Id: Iea57e5da09ea8a8bac0a415b9a6196151cbea10b
Issue-ID: OOM-1354
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>

updating gerritBranch to master

some charts internally pull config/scripts from gerrit to
bootstrap.  They are currently bootstrapping with the beijing
branch.

Issue-ID: OOM-1425

Change-Id: I0ab0a054e9cc6ed6b23704404d80588f53530fa2
Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>

Sync values from docker-manifest-staging file

Change-Id: Ic8f11dc20c425aab144fe28a5e761552eb7b025b
Issue-ID: OOM-1422
Signed-off-by: Alexis de Talhouët <adetalhouet89@gmail.com>

Merge "Add config file for pkcs11"

Apache2 License addition

Issue-ID: OOM-1306

Change-Id: I1a617718006ee845d675fead74ce075c3390ac2f
Signed-off-by: toshrajbhardwaj <toshrajbhardwaj@gmail.com>

Add config file for pkcs11

This file will be used by ca property file
to trigger pkcs11 keystore to be used by local CA

Change-Id: I7dd5d668bbf438d4a0e347835ca92ae9202f3a50
Issue-ID: AAF-413
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "License Task for VID,AAF,CLI,SNIRO"

License Task for VID,AAF,CLI,SNIRO

Issue-ID: OOM-1304

Signed-off-by: vaibhavjayas <vaibhav.jayas@amdocs.com>
Change-Id: I601eaabf6e4487a5eda90f6117d55fcbfe0e7d6b

Add readiness step for deployment

Using an initContainer and to start SMS only after
vault and consul have already started. This prevents
restarts of the sms container.

Issue-ID: AAF-421
Change-Id: Ied3264711d5d931a1d18523eadcc84e188ededa5
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Merge "Fix Policy Nexus liveness initialDelaySeconds"

Use 2.0.0-ONAP tag instead beijing branch

To ensure reproducible deployments, change gerrit branches to
2.0.0-ONAP tag instead of using the beijing branch since the
beijing branches are not locked.

Change-Id: I30bbece5fa2e0b8622db948d45e08a46ecf43ece
Issue-ID: INT-506
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

Change gerrit branches to beijing

Change-Id: I840e9aada77fa297273ef5b32663f70ca4aac371
Issue-ID: INT-506
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

Remove stderr/stdout redirection from Command

Issue-ID: AAF-353
Change-Id: Ief7a3dda7160e385c15ed0be7e158c7de3af8cdd
Signed-off-by: Instrumental <jonathan.gathman@att.com>

Merge "Fix AAF CS startup timeouts"

Merge "Replace AAF Certs"

Fix AAF CS startup timeouts

Change-Id: I8140e6c392726e78e0a2c9b18337fa712eb9d944
Issue-ID: OOM-1128
Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>

Sync docker image versions from manifest

Sync docker image versions from docker manifest commit
b075c2738d81c258f2157eb329241b00e27938ec

Change-Id: I3aab98252d3318431cc4ce49221f552d7bc57b7d
Issue-ID: OOM-1053
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

Sync docker image versions from manifest

Sync docker image versions from docker manifest commit
fa290e17ced19e893b3f7cf8e070f459c3aeea07

Change-Id: Id185e51667d9b2dd8f0f77046ac044690d09b0ea
Issue-ID: OOM-1053
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

Replace AAF Certs

Issue-ID: AAF-346
Change-Id: Ie56c187e4c8ca7a0abad170a7b3a5571084ff566
Signed-off-by: Instrumental <jonathan.gathman@att.com>

Enable https endpoint for SMS

SMS got a new SAN certificate and we are
using that in this deployment now.
Applications will now query on https://aaf-sms.onap
This should also fix the failing healthcheck
for SMS

-P3: Changing liveness and readiness probes to use
 https instead of tcp which was throwing up TLS error
 spam on the server

Issue-ID: AAF-284
Change-Id: I654eced0bb75c8b5c807c45773f308d824dfb571
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Update readiness-check to 2.0.0

Change-Id: I3477393d2ba98fe1d48561efc6991e88d8e03793
Issue-ID: OOM-1076
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

Improve docker registry secret management

Change-Id: I2d1ff878c215becc9856af184eb0b11defd75e1d
Issue-ID: OOM-1064
Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>

Remove AAF truststore files from configmap

Moved security-related files from the configmap to an
init container, to dramatically reduce the overall size
of the ONAP deployment configmap.

Change-Id: I5e1c176f14d2e010c69e6c1e86c487583ed18f59
Issue-ID: OOM-1061
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>

Sync docker image images with docker-manifest.csv

Update the docker image versions in the OOM helm charts
with the versions specified in the docker-manifest.csv
in the integration repo.

Change-Id: I38bd9e98ae1b15ed4bbc68051b8516f311aa8db0
Issue-ID: OOM-1053
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

fixing duplicate nodeport with SO

47 is free..

Issue-ID: OOM-930

Change-Id: I90d008bb77cfa1107f85d10c96482fe2693c400a
Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>

AAF Charts

-PS3-MK
 -renaming charts to remove hyphen
 -refactoring service name configuration.  It wasn't quite correct
  the way it was.  It was taking the chart name as the service name
  and not using the values.yaml from the top level chart as intended.
 -Jonathan asked to name the main app service "aaf-service and cassandra
  to "aaf-cass" as this is what is in the cert
 -squashed https://gerrit.onap.org/r/#/c/45923/1 into this commit.
 -updated robot to the latest settings
 Robot tests are failing but all pods come up.  I think this can be merged
 and the AAF team investigate the robot health issue in a running system

-PS4-MK
 -reverting sms changes and taking the latest from master
 -removing repository from the global section of the aaf values.
  -this was causing all images to be pulled from nexus3.onap.org
   which was failing to pull images that come from docker hub.
   There is supposed to be a proxy through nexus3 to dockerhub but maybe
   we are missing something.

-PS5-MK
 -removing nodeports from non gui related charts.  There are conflicts

-PS6-Kiran
 -Adding imagepullsecrets for aaf-sms-vault subchart
 -updated image repository to pull from nexus3
 -tested and works now and should fix the pull errors

-PS7-Kiran
 -Previous patch picked up a couple of unintended changes
 -Reverting them

-PS8-MK
  -removing names from identities
  -using https for robot test

Issue-ID: OOM-930

Change-Id: I98f40ef5af03dda73aebf12f6fa48d928915ab34
Signed-off-by: Mahendra Raghuwanshi <mahendra.raghuwanshi@amdocs.com>
Add Beijing CQLs into OOM

Issue-ID: AAF-114
Change-Id: I2c2d46738ba0885c41f710997d4b212b6ce4d2de
Signed-off-by: Instrumental <jonathan.gathman@att.com>
Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Adding Quorum client sub chart for sms

SMS uses vault for its backend which needs
an unseal operation to proceed.
Quorumclient provides the unseal operation
via 3 replicas that store each unseal shard
and provide it during unseal.

Issue-ID: AAF-255
Change-Id: I62db7a450e1e81aa6bfb2cc5b9da29ce99efd24b
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Make all services independent of helm Release.Name

Issue-ID: OOM-906
Change-Id: Ic65127d3981cb0a696c784392cab59fbf06b1e66
Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>

Update readiness-check version

Readiness check version is not sinchronized in many pods
This causing deployment failures.
Issue-ID: OOM-936
Change-Id: Ieef91df17836adcdf24db536440d0a1624a50591
Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>

Merge "Using .values.service.name for service URL"

Using .values.service.name for service URL

Use .values.service.name to get the service URL prefix
Using common.namepace was an error

Issue-ID: AAF-162
Change-Id: I11daa933b9f3a767aea7eac512bd09f4589fcde5
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

aaf mapping fix

Issue-ID: OOM-888

Change-Id: I005c686239e366318f08ec3b810ca2b1d3dbda56
Signed-off-by: Keren Joseph <keren.joseph@amdocs.com>

Add support for secret management service

Adding Helm charts for deployment of secret
management service. Adding them as a subchart under aaf.
Solved the values problem by using env variable to
pass values to SMS about the backend service URL

Issue-ID: AAF-162
Change-Id: Iac7973fdf38281a1d1b6ccb0fbfb5c3a052ac7ae
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>

Add standardized helm chart for aaf

AAF crashes due to "could not find or load main class org.onap.aaf.authz.service.AuthAPI"
see https://jira.onap.org/browse/OOM-324

Issue-ID: OOM-732

Change-Id: I1c5f93d6e9a4d91224bfc0df2894ca7ab7d1de38
Signed-off-by: kj <keren.joseph@amdocs.com>

License addition in all yamls

Issue-ID: OOM-821

Change-Id: I627ac962afe8cd6bf2859a30a0e88f6c9ac89d34
Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>

Replica scaling of Clamp and AAF conatiner

Issue-ID: OOM-691

Change-Id: Idea9ebc33310cbaf823163cccd6c816477661118
Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>

Run all components in one namespace

Change-Id: I5fcd4d577c1fda4de27842807c7cf7a5d372756e
Issue-ID: OOM-722
Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>

AAF - readiness image update

Issue-ID: OOM-514

Change-Id: I3533bafa88341e6895132ba8fda2fb8fc4e27210
Signed-off-by: kerenj <keren.joseph@amdocs.com>

AAF config seggregation

Issue-ID: OOM-554

Change-Id: I24367eac50b3d46be964a6d60e24b317af376c3e
Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>

Update annotations to spec for aaf

Issue-ID: OOM-457

Change-Id: I556adf3714119d8ab8515d36303809b36cbe65f4
Signed-off-by: kiranya <kiran.yadav@amdocs.com>

Add option to disable specific deployments

Add option to disable any deployment by using conditions in helm
templates. Each deployment will get helm parameter - boolean flag
allowing to disable it. The flags can be listed in the custom
values.yaml file that can be passed to the createAll script with
'-v' command line option.

Change-Id: I32b795de46c72915c2201c94c23f4e061971bb56
Issue-ID: OOM-380
Signed-off-by: yuryn <Yury.Novitsky@Amdocs.com>

Added missing mount to aaf deployment yaml

Created mount /data2/ needed for aaf

Change-Id: I050579e42afce9dc29c4c7a3cfdfb05ddb4d4217
Issue-ID: OOM-331
Signed-off-by: Dusan Rozman <dusan.rozman@amdocs.com>

Added AAF containers to ONAP Kubernetes

Created the initial deployment yamls for AAF project

Issue-ID: OOM-11

Change-Id: I3c60185d78e8ce5596791624086f7cf32b3c3c38
Signed-off-by: Dusan Rozman <dusan.rozman@amdocs.com>