integration.git
4 years agoUpdate release note 17/97617/1 elalto
Eric Debeau [Thu, 24 Oct 2019 12:55:23 +0000 (12:55 +0000)]
Update release note

Correct system Warning
Correct Doc8 errors
Modify section level to avoid bad behavior in toctree

Issue-ID: INT-1249

Signed-off-by: Eric Debeau <eric.debeau@orange.com>
Change-Id: I44c027ec9b8a14cad455bc981994f3c7dab48140
(cherry picked from commit 2a75ad689a5024b38c53354973588d2f68da2596)

4 years agoupdate Postman collections and doc,with corrections 70/97570/1
Rene_Robert [Tue, 22 Oct 2019 15:27:21 +0000 (17:27 +0200)]
update Postman collections and doc,with corrections
Issue-ID: INT-1340

Signed-off-by: Rene_Robert <rene.robert@orange.com>
Change-Id: Idcb5ef7669805f0d8c4266ee45310078d33260c2
(cherry picked from commit 11c5783d20e52601853552ab00819a546b49fa83)

4 years agoUprev to 5.0.0 45/97545/1
Brian Freeman [Thu, 24 Oct 2019 13:10:58 +0000 (08:10 -0500)]
Uprev to 5.0.0

Issue-ID: INT-1322
Change-Id: Ia2db6c851009cf0ecdcb91cef7951d7062662f04
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agorelease note update 69/97469/1
mrichomme [Fri, 18 Oct 2019 16:54:16 +0000 (18:54 +0200)]
release note update

Issue-ID: INT-1249

Change-Id: Iadcfbb83cea8826e5af14f965f8b4b3aa24352d4
Signed-off-by: mrichomme <morgan.richomme@orange.com>
(cherry picked from commit 057c10b4339a1adff9846db38297c70e45094b15)

4 years agoWIP Update integration documentation for El Alto 54/97454/1
mrichomme [Wed, 9 Oct 2019 12:02:17 +0000 (14:02 +0200)]
WIP Update integration documentation for El Alto

Issue-ID: INT-1322

Change-Id: Idd1d5f7bd2f57e1acb2e3c050a631cc52e212e1e
Signed-off-by: mrichomme <morgan.richomme@orange.com>
(cherry picked from commit 842d3220273d962b547a84e5a17ac46781afdd20)

4 years agoMinor edits on 5G RTPM 18/97218/2
Brian Freeman [Wed, 16 Oct 2019 19:45:04 +0000 (14:45 -0500)]
Minor edits on 5G RTPM

Issue-ID: INT-1322
Change-Id: I822c972506aa54850d66813084b5205e61820d8d
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoIntegration doc for 5g pnp pnf use case 67/97167/2
Krzysztof Kuzmicki [Wed, 16 Oct 2019 07:03:28 +0000 (09:03 +0200)]
Integration doc for 5g pnp pnf use case

Issue-ID: INT-1333

Signed-off-by: krzysztof kuzmicki <krzysztof.kuzmicki@nokia.com>
Change-Id: Ic75ae09374ea806ea67526fba624c7a654c0aa10

4 years agoImprove scale out doc 05/97205/1
Marco Platania [Wed, 16 Oct 2019 16:10:52 +0000 (12:10 -0400)]
Improve scale out doc

Issue-ID: INT-1171
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I84791cb6e01f0f5f80bdec68cd9910bba5b81122

4 years agoUpdate demo artifacts to released version 1.5.0 16/97016/2
Marco Platania [Sun, 13 Oct 2019 14:55:42 +0000 (10:55 -0400)]
Update demo artifacts to released version 1.5.0

Issue-ID: INT-1072
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I9a5b99101dc08753981c97233b16d2a34438c807

4 years agoUpdate Change Management Flexible Designer and Orchestrator doc 72/97072/2
mrichomme [Mon, 14 Oct 2019 15:41:12 +0000 (17:41 +0200)]
Update Change Management Flexible Designer and Orchestrator doc

to integrate it in official documentation

Issue-ID: INT-1287

Change-Id: Ied366b0112a2a4d6557942f01f49d4c1939bc008
Signed-off-by: mrichomme <morgan.richomme@orange.com>
4 years agoUpdate vFW use case documentation 39/97139/1
mrichomme [Tue, 15 Oct 2019 09:34:19 +0000 (11:34 +0200)]
Update vFW use case documentation

Issue-ID: INT-1287

Change-Id: I643febd15fbb9cc4b66202edda2915d4d0219ea6
Signed-off-by: mrichomme <morgan.richomme@orange.com>
(cherry picked from commit aa96184d7975b08ff2ea4df815857eb2ad9ffd3a)

4 years agoIntegration doc for 5g pnp pnf use case 15/97115/1
Krzysztof Kuzmicki [Tue, 15 Oct 2019 11:17:47 +0000 (13:17 +0200)]
Integration doc for 5g pnp pnf use case

Issue-ID: INT-1333

Signed-off-by: krzysztof kuzmicki <krzysztof.kuzmicki@nokia.com>
Change-Id: Iaeac6337bd37a2b2e5e66b0a400c4f67d8fd7d85

4 years agoFixed Bugs in HPA automtion script 73/97073/1
Itohan [Mon, 7 Oct 2019 21:21:19 +0000 (21:21 +0000)]
Fixed Bugs in HPA automtion script

Signed-off-by: Itohan Ukponmwan <itohan.ukponmwan@intel.com>
Issue-ID: INT-1137
Change-Id: Ib681f797bb9ed631cfe36507425bcbd1fc2b5561
(cherry picked from commit 76ea974699c8de79070ededf2de74132f760b957)

4 years ago[INT] Adding deployments scripts for ONAP on AKS 52/96052/4
stark, steven [Thu, 19 Sep 2019 22:43:00 +0000 (15:43 -0700)]
[INT] Adding deployments scripts for ONAP on AKS

Patch 2 - updating readme and removing dash character from BUILD parameter
Patch 3 - updating image url to amd instead of arm, fixing NFS os disk parameter

Issue-ID: INT-1270
Signed-off-by: stark, steven <steven.stark@att.com>
Change-Id: I1d8824b3c098855c9094e27fad8c820e4df42677

4 years agoAutomate curl installation in sdnc container (vCPE) 71/96671/1
Bartek Grzybowski [Mon, 7 Oct 2019 12:25:30 +0000 (14:25 +0200)]
Automate curl installation in sdnc container (vCPE)

Curl package will be automatically installed be the
healthcheck-k8s.py script.

Change-Id: I7fc5579524c7519f6153b02d0de0000dc0138992
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: INT-1313

4 years agoFix SSL cert verify for SDNC 01/96601/1
Brian Freeman [Thu, 3 Oct 2019 20:25:39 +0000 (15:25 -0500)]
Fix SSL cert verify for SDNC

Issue-ID: INT-1265
Change-Id: I7c36dc479b73a8b663cae4472ed29182d0f6672b
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agok8s: Validate controller manager flags requiring specific values 18/96418/2
Pawel Wieczorek [Mon, 30 Sep 2019 13:27:43 +0000 (15:27 +0200)]
k8s: Validate controller manager flags requiring specific values

This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.3.2 - 1.3.3
and 1.3.6).

Issue-ID: SECCOM-235
Change-Id: I9c2921faf40ad9445e983f2b9bd0610e556cfe15
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years ago(WIP)Fix automation issues due to cli change 72/96372/6
Ruoyu Ying [Sun, 29 Sep 2019 11:55:47 +0000 (19:55 +0800)]
(WIP)Fix automation issues due to cli change

Fix several changes due to cli change

Issue-ID: INT-1289
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
Change-Id: Ib07d9be8ace77270046c8aa02f162a9ad7994370

4 years agoRefactor setup script for preparing vCPE tools runtime env 15/96415/4
Bartek Grzybowski [Mon, 30 Sep 2019 13:01:16 +0000 (15:01 +0200)]
Refactor setup script for preparing vCPE tools runtime env

Script is now more generic and allows proper setup
of vcpe scripts runtime environment on Ubuntu 16.04/18.04
and on Centos/Rhel 7.6.

Change-Id: I7b7d944f5a6a7a9dc45921082f908a1f8aa185a1
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-203

4 years agoLoosen sdc liveness readiness probe 37/96437/1
Brian Freeman [Mon, 30 Sep 2019 18:28:30 +0000 (13:28 -0500)]
Loosen sdc liveness readiness probe

Issue-ID: INT-1290
Change-Id: Iac5a16dae644a61de04bca00f49f14ae98dac995
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agok8s: Resolve Docker response formatting issue 17/96417/1
Pawel Wieczorek [Mon, 30 Sep 2019 12:39:32 +0000 (14:39 +0200)]
k8s: Resolve Docker response formatting issue

Checker collects information on cluster by Docker queries:

$ docker ps ARGS...      # Casablanca
$ docker inspect ARGS... # Dublin

Arrays of values are then filtered from those. They include:

* opening bracket ('['),
* closing bracket (']'),
* new line.

Additional characters affect check results if last flag (including
"]\n") requires specific value.

Issue-ID: SECCOM-235
Change-Id: I6838342b7e2ecdc44a47ffe02286266003e0b4d3
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Resolve address conflicts in virtual environments 16/96416/1
Pawel Wieczorek [Mon, 30 Sep 2019 12:23:30 +0000 (14:23 +0200)]
k8s: Resolve address conflicts in virtual environments

Running Casablanca and Dublin virtual environments at the same time led
to networking issues - the same IP had been assigned to cluster nodes.

Issue-ID: SECCOM-235
Change-Id: I2a59d023115326f5b132782a32190fd8f7dc1f48
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate controller manager address flag 48/96348/2
Pawel Wieczorek [Fri, 27 Sep 2019 17:00:46 +0000 (19:00 +0200)]
k8s: Validate controller manager address flag

This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.3.7).

Issue-ID: SECCOM-235
Change-Id: Id3f4bcb9a506dae3c7c0a884ad6c704dfae2a6d8
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Add controller manager information collection 47/96347/1
Pawel Wieczorek [Fri, 27 Sep 2019 16:26:13 +0000 (18:26 +0200)]
k8s: Add controller manager information collection

Issue-ID: SECCOM-235
Change-Id: Ieceb6337f935e6a5a6b94248ccf072229116510a
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate scheduler flags 41/96341/1
Pawel Wieczorek [Fri, 27 Sep 2019 14:26:39 +0000 (16:26 +0200)]
k8s: Validate scheduler flags

Issue-ID: SECCOM-235
Change-Id: I61df142e99a7f1da335471acab88e5a47d72df15
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Add scheduler information collection 40/96340/1
Pawel Wieczorek [Fri, 27 Sep 2019 14:10:33 +0000 (16:10 +0200)]
k8s: Add scheduler information collection

Issue-ID: SECCOM-235
Change-Id: I7da645737440172d3cf11f33069daa2697f83056
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Extract common validators for DRY code 39/96339/1
Pawel Wieczorek [Fri, 27 Sep 2019 15:09:49 +0000 (17:09 +0200)]
k8s: Extract common validators for DRY code

Issue-ID: SECCOM-235
Change-Id: Ic5997b67d0512bea51c3b4a4c71805987fa6f011
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Extract common interface to simplify development 98/96298/3
Pawel Wieczorek [Thu, 26 Sep 2019 14:43:01 +0000 (16:43 +0200)]
k8s: Extract common interface to simplify development

Common command and service name extraction is intended to limit
execution to small set of allowed processes.

This patch also drops unnecessary use of "Kubernetes" name because this
whole subproject concerns its clusters.

Issue-ID: SECCOM-235
Change-Id: I8babfeb4f24cf3baa4d236ca622c21170ab6205e
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Change default cluster access method choice logic 97/96297/1
Pawel Wieczorek [Thu, 26 Sep 2019 12:50:16 +0000 (14:50 +0200)]
k8s: Change default cluster access method choice logic

Previous way of choosing it led to impractical calls, e.g.

$ ./check -rke                   # (works fine)
$ ./check -ranchercli            # "Not supported."
$ ./check -ranchercli -rke=false # (works fine)

Disabling default cluster access method is no longer necessary.

Issue-ID: SECCOM-235
Change-Id: I2b4d5bff10c5470e567351abeac0431bed3b7938
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Declutter checker by dividing it into smaller packages 96/96296/1
Pawel Wieczorek [Thu, 26 Sep 2019 10:31:56 +0000 (12:31 +0200)]
k8s: Declutter checker by dividing it into smaller packages

Issue-ID: SECCOM-235
Change-Id: I7d4efd08b8c0258f2f9c33772bf1b1b02cedebfa
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Call correct methods for API server auditing flags validation 95/96295/1
Pawel Wieczorek [Wed, 25 Sep 2019 16:36:06 +0000 (18:36 +0200)]
k8s: Call correct methods for API server auditing flags validation

Issue-ID: SECCOM-235
Change-Id: Ia5d75628b1c5211f378c239f84e9689d45697a04
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server request timeout 94/96294/1
Pawel Wieczorek [Wed, 25 Sep 2019 16:30:10 +0000 (18:30 +0200)]
k8s: Validate API server request timeout

This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.38).

Issue-ID: SECCOM-235
Change-Id: Ic1f175d577c79013ddb49e02b8de69137535c964
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server included authorization mode 93/96293/1
Pawel Wieczorek [Wed, 25 Sep 2019 14:37:24 +0000 (16:37 +0200)]
k8s: Validate API server included authorization mode

This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.32).

It also fixes wrong documentation comment for similar validator
(1.1.19).

Issue-ID: SECCOM-235
Change-Id: I00cb8a458871b091b16fe60fc0087b7972aa3b6b
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server crypto ciphers in use 92/96292/1
Pawel Wieczorek [Fri, 20 Sep 2019 09:42:58 +0000 (11:42 +0200)]
k8s: Validate API server crypto ciphers in use

This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.30).

It also covers its duplicate (1.1.39).

Issue-ID: SECCOM-235
Change-Id: I0f3031c080cf225e7c2c03e65dd0bfc780326307
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agoFix hashbang in vCPE Python scripts 39/96239/1
Bartek Grzybowski [Wed, 25 Sep 2019 14:37:05 +0000 (16:37 +0200)]
Fix hashbang in vCPE Python scripts

Change-Id: Id2b7ec151e1a006a5a85b8544e478fd9cf282715
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-220

4 years agoAutomate vCPE closed loop policy pushing 19/96219/1
Bartek Grzybowski [Wed, 25 Sep 2019 09:21:42 +0000 (11:21 +0200)]
Automate vCPE closed loop policy pushing

Added a library routine to set up CL policy
in an idempotent fashion.

Description of CL pushing related manual step
was removed from documentation.

Change-Id: I1fad5d71481252ce803dd58c6ccbbcfa0a4d246f
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: INT-1267

4 years agoadd terminate and del function to hpy_automation scripts 63/96163/2
yangyan [Tue, 24 Sep 2019 02:51:44 +0000 (10:51 +0800)]
add terminate and del function to hpy_automation scripts

Change-Id: Ie669261bde3723d892706d3d767c08b325afc3e0
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
4 years agofix the typo error of hpy_automation scripts 64/96064/2
yangyan [Fri, 20 Sep 2019 07:47:40 +0000 (15:47 +0800)]
fix the typo error of hpy_automation scripts

Change-Id: I27b43d63042bdb46f1ff362335a26bf6726674a0
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
4 years agoSDNC SSL port, BRG category, DEBUG 82/96082/2
Brian Freeman [Fri, 20 Sep 2019 13:29:22 +0000 (08:29 -0500)]
SDNC SSL port, BRG category, DEBUG

Issue-ID: INT-1265
Change-Id: I4ea7bf282b7d8aad58645784317dea9edf373cff
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoUpdate INFO.yaml 18/96018/3
Yang Xu [Thu, 19 Sep 2019 16:16:45 +0000 (12:16 -0400)]
Update INFO.yaml

Signed-off-by: Yang Xu <xuyang11@gmail.com>
Issue-ID: INT-1269
Change-Id: I9f76cdd3b53f9519017da851a59b8c7000334797

4 years agok8s: Validate API server certificates and keys 23/96023/1
Pawel Wieczorek [Thu, 19 Sep 2019 14:06:13 +0000 (16:06 +0200)]
k8s: Validate API server certificates and keys

This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.22, 1.1.25 -
1.1.26 and 1.1.28).

Issue-ID: SECCOM-235
Change-Id: Ic61a796653dc868d20fe69c3ed508e7fa8ba52db
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server Certificate Authorities 22/96022/1
Pawel Wieczorek [Thu, 19 Sep 2019 13:27:14 +0000 (15:27 +0200)]
k8s: Validate API server Certificate Authorities

This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.21, 1.1.29
and 1.1.31).

Issue-ID: SECCOM-235
Change-Id: Ia2f55f6962885a7aa878c970a406189902cfab10
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server auditing flags 36/95836/2
Pawel Wieczorek [Tue, 17 Sep 2019 16:47:43 +0000 (18:47 +0200)]
k8s: Validate API server auditing flags

This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.16 - 1.1.18).

Issue-ID: SECCOM-235
Change-Id: I27b63e37fc3203cf3574b9e1cdc43333041f2a36
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server auditing is enabled 35/95835/2
Pawel Wieczorek [Tue, 17 Sep 2019 16:45:41 +0000 (18:45 +0200)]
k8s: Validate API server auditing is enabled

This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.15).

Issue-ID: SECCOM-235
Change-Id: Ia1d27ed7a9e439bb0abf4bd8941bdd4573a50bd5
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Group tests by flag type 34/95834/2
Pawel Wieczorek [Tue, 17 Sep 2019 15:17:48 +0000 (17:17 +0200)]
k8s: Group tests by flag type

Issue-ID: SECCOM-235
Change-Id: I25ebd2930afec6eb259f0a678fffbf7727eb315b
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server not excluded authorization mode 33/95833/2
Pawel Wieczorek [Tue, 17 Sep 2019 15:09:37 +0000 (17:09 +0200)]
k8s: Validate API server not excluded authorization mode

This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.19).

Issue-ID: SECCOM-235
Change-Id: I00c9600fd0d351afb7141a5fa16f348eab67b12d
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server not excluded admission plugins 32/95832/2
Pawel Wieczorek [Tue, 17 Sep 2019 14:31:47 +0000 (16:31 +0200)]
k8s: Validate API server not excluded admission plugins

This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.14).

Issue-ID: SECCOM-235
Change-Id: I63c2f8a5b94bfd6c9963805aae85595e6b6ad6d7
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agoFix rev level in license 36/95936/1
Brian Freeman [Wed, 18 Sep 2019 17:14:21 +0000 (12:14 -0500)]
Fix rev level in license

Issue-ID: INT-1266
Change-Id: I822becff87484b79d3e7c744038b55943c1dddcb
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoUpdates for ssl sdc 24/95924/1
Brian Freeman [Wed, 18 Sep 2019 14:30:05 +0000 (09:30 -0500)]
Updates for ssl sdc

Issue-ID: INT-1265
Change-Id: I64971740c8ae9aee60a06ca1d0e5ff02ccbc9a88
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoAdd mr-sim log to console 19/95719/2
ecaiyanlinux [Mon, 16 Sep 2019 07:56:21 +0000 (09:56 +0200)]
Add mr-sim log to console

Change-Id: I9697360d2ee5b8e95dacdb74a9a1a025a1a45e3c
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
Issue-ID: DCAEGEN2-1702

4 years agok8s: Validate API server included admission plugins 21/95821/1
Pawel Wieczorek [Tue, 17 Sep 2019 13:47:24 +0000 (15:47 +0200)]
k8s: Validate API server included admission plugins

This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.11 - 1.1.13,
1.1.24, 1.1.27, 1.1.33 and 1.1.36).

Issue-ID: SECCOM-235
Change-Id: I920bfd42014b8458126be251648f5bf3dcd84c16
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Validate API server excluded admission plugins 20/95820/1
Pawel Wieczorek [Mon, 16 Sep 2019 15:51:39 +0000 (17:51 +0200)]
k8s: Validate API server excluded admission plugins

This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.10).

However, CIS Kubernetes Benchmark v1.3.0 mismatches official
documentation: Kubernetes 1.10+ already provides safe defaults from
security standpoint [1] (ONAP Casablanca uses 1.11).

Deprecated admission control plugin flag has also been validated since
it was still available in Kubernetes provided by Rancher [2].

[1] https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use
[2] https://github.com/rancher/rancher/issues/15064

Issue-ID: SECCOM-235
Change-Id: I0e8fe9f885861f155cb8265df085fa93dbdff6d2
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Add note on release-specific dependencies 19/95819/1
Pawel Wieczorek [Fri, 30 Aug 2019 14:59:37 +0000 (16:59 +0200)]
k8s: Add note on release-specific dependencies

Issue-ID: SECCOM-235
Change-Id: I35d3e3f413542c69718d17ae25f227275270c8cf
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agoImprove description of scale out use case 54/95754/1
Marco Platania [Mon, 16 Sep 2019 16:16:54 +0000 (12:16 -0400)]
Improve description of scale out use case

- Describe the ONAP flows
- Describe SO workflow
- Describe how to obtain a TOSCA template from SDC

Issue-ID: INT-1171
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I901ae1a85becbb549804f8307991cb592a251d6d

4 years agoFix DCAE cleanup process 42/95742/1
Marco Platania [Mon, 16 Sep 2019 13:14:35 +0000 (09:14 -0400)]
Fix DCAE cleanup process

Issue-ID: INT-479

Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I360d9887842ac8e86e3a52f7a549367dc63ccb7d

4 years agoAdd sdc keyspaces and longer timeout 44/95644/1
Brian Freeman [Fri, 13 Sep 2019 14:23:55 +0000 (09:23 -0500)]
Add sdc keyspaces and longer timeout

Issue-ID: INT-1244
Change-Id: I5bc0f4e02ac3d2d8df867f76327e588353c76da8
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoModified vFW DT Use case description 39/95639/2
Lukasz Rajewski [Thu, 12 Sep 2019 07:03:47 +0000 (09:03 +0200)]
Modified vFW DT Use case description

Description of policy configuration and typos fixed

Change-Id: Ib11df95b79987b85c15452d74a5644c152dcbfde
Signed-off-by: Lukasz Rajewski <lukasz.rajewski@orange.com>
Issue-ID: INT-751

4 years agoRefactor healthcheck-k8s.py 34/95634/2
Bartek Grzybowski [Fri, 13 Sep 2019 10:50:59 +0000 (12:50 +0200)]
Refactor healthcheck-k8s.py

Error reporting was improved by returning actual
error message from subprocess call to 'kubectl' command.

Code readability was improved by defining a dictionary
of endpoint names to check and their IPs.

Unsecure 'shell=True' property in Popen constructor for
kubectl command in SDNC DB was removed and command string
itself sanitized.

Overall code readability was improved by reusing common
commands in a loop.

Change-Id: I19f8f71e27196bb55a9be3d58cd0885ceba3af0c
Issue-ID: TEST-213
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
4 years agoFix mispelled routine name in vcpe scripts 29/95629/2
Bartek Grzybowski [Fri, 13 Sep 2019 06:35:48 +0000 (08:35 +0200)]
Fix mispelled routine name in vcpe scripts

headbridge -> heatbridge

Change-Id: I49cc3af80b74a9d03612625be2a35e039e6d28e1
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: DOC-549

4 years agoRemove hardcoded SDNC pod name in vcpe scripts 31/95631/3
Bartek Grzybowski [Fri, 13 Sep 2019 06:54:14 +0000 (08:54 +0200)]
Remove hardcoded SDNC pod name in vcpe scripts

Sdnc pod name is set as a property in VcpeCommon
class and it should be used across the script.

Also removed hardcoded public net prefix in
get_pod_node_public_ip and use class property
where it's assigned.

Change-Id: I0308c808a764ff114fc43591aed34d9695207fe5
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-212

4 years agoFixed Bugs in HPA automtion script 28/95628/1
Itohan Ukponmwan [Fri, 13 Sep 2019 00:08:39 +0000 (00:08 +0000)]
Fixed Bugs in HPA automtion script

Signed-off-by: Itohan Ukponmwan <itohan.ukponmwan@intel.com>
Issue-ID: INT-1137
Change-Id: I89fefb02d7d58453d490499716c581cb66895b59

4 years agoBetter specifying parts supposed to be changed 73/95573/2
Michal Ptacek [Thu, 12 Sep 2019 12:27:47 +0000 (12:27 +0000)]
Better specifying parts supposed to be changed

Following params are needed minimum required to be changed or
cross-checked when vCPE is tried in different lab

Change-Id: I911acc682560c9a727d2e14ae1d4a22206d6e6f8
Issue-ID: TEST-208
Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
4 years agoAdd remarks related to Openstack's port security on vCPE 58/95558/2
Bartek Grzybowski [Thu, 12 Sep 2019 07:51:34 +0000 (09:51 +0200)]
Add remarks related to Openstack's port security on vCPE

Extended anti-spoofing related notes with some hints on
dealing with Neutron's Port Security Extension Driver
which in some cases may prevent VNFs to function properly.

Change-Id: Icf4f44b8cbcaa70621bf21d5b72ff552be80d4e2
Issue-ID: DOC-549
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
4 years agoImprove external_net_addr property description in vCPE scripts 70/95570/1
Bartek Grzybowski [Thu, 12 Sep 2019 12:04:59 +0000 (14:04 +0200)]
Improve external_net_addr property description in vCPE scripts

Change-Id: Ie06109bb5c62d4132a5db8c6cfeb9d4c297d05a5
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-208

4 years agoDeploy CDS in integration-override 41/95541/2
Abdelmuhaimen Seaudi [Wed, 11 Sep 2019 21:53:04 +0000 (21:53 +0000)]
Deploy CDS in integration-override

Issue-ID: OOM-2085
Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
Change-Id: I324b58868286971c93a54ae269517e20b954d759

4 years agoAdding hint regarding dhcp anti-spoofing for vCPE 84/95484/1
Michal Ptacek [Wed, 11 Sep 2019 12:04:35 +0000 (12:04 +0000)]
Adding hint regarding dhcp anti-spoofing for vCPE

Adding instructions for bypassing DHCP anti-spoofing rules
preventing vCPE to work.

Change-Id: Ic0f92a40a41e5e20dc43c360e429baba44a46fa1
Issue-ID: DOC-549
Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
4 years agoFix the error of hpa when create ns 98/95298/3
yangyan [Tue, 10 Sep 2019 04:11:10 +0000 (12:11 +0800)]
Fix the error of hpa when create ns

Change-Id: I6000c83a3a265a185dad8ac8ff90388df88850dd
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
4 years agoUpdate healthcheck-k8s script synopsis in vCPE manual 53/95353/1
Bartek Grzybowski [Tue, 10 Sep 2019 11:50:15 +0000 (13:50 +0200)]
Update healthcheck-k8s script synopsis in vCPE manual

This reflects changes made in regard of input parameters
done in Change-Id: Ib6e2875f351f095bd64acd706a6060e169c54e79

Also contains minor fix for 'namespace' and 'environment' vars
usage which are unused otherwise.

Change-Id: Ie479400dfa0d61c89a256d4aafb2c2d184f9b935
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: INT-1213

4 years agoUpdate robot image 68/95268/1
Brian Freeman [Mon, 9 Sep 2019 20:30:11 +0000 (15:30 -0500)]
Update robot image

Issue-ID: INT-1217
Change-Id: I5d7802def53d986a0bed16151afa806cba96becb
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoFix a bug in DFC CSIT 21/95121/2
ecaiyanlinux [Fri, 6 Sep 2019 09:31:51 +0000 (09:31 +0000)]
Fix a bug in DFC CSIT

when mounting a shared volume, the uid:gid is changed automaticlly
which could cause potential unstable.

Change-Id: If6279489ba0ba3d24fdd6893e02d9babf29d7925
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
4 years agoUpdated README files and adaptation of consul/cbs config 88/94688/2
maximesson [Fri, 30 Aug 2019 14:05:15 +0000 (14:05 +0000)]
Updated README files and adaptation of consul/cbs config

Change-Id: I81494f56978a3d0ff06ec0d66968f33f08114103
Issue-ID: DCAEGEN2-1719
Signed-off-by: maximesson <maxime.bonneau@est.tech>
4 years agoFix the bug of cli command error when onboard ns 08/95208/1
yangyan [Mon, 9 Sep 2019 07:32:43 +0000 (15:32 +0800)]
Fix the bug of cli command error when onboard ns

Change-Id: I832a1cbbbf8b882089f941033fdc2acefce7e387
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
4 years agoFix bug of cli command error when onboard vnf 07/95207/2
yangyan [Mon, 9 Sep 2019 07:27:31 +0000 (15:27 +0800)]
Fix bug of cli command error when onboard vnf

Change-Id: I25ca6c5a2cdf6eaca44cdcdb3f94e55c6bad899a
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
4 years agoFix invalid string error of vnf onboard 98/95198/3
yangyan [Mon, 9 Sep 2019 02:00:23 +0000 (10:00 +0800)]
Fix invalid string error of vnf onboard

Change-Id: I1f0077554db7d37ed33c45cbc68d8fb554339539
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
4 years agoSNDC preload change (http to https, 30202 to 30267) 08/95108/1
Rene_Robert [Fri, 6 Sep 2019 06:02:33 +0000 (08:02 +0200)]
SNDC preload change (http to https, 30202 to 30267)
Issue-ID: DOC-542

Signed-off-by: Rene_Robert <rene.robert@orange.com>
Change-Id: Ice1fc5853d9ad31e79ea8e941a8b053589b80a30

4 years agoUpdate latest staging portal docker images 76/94976/2
Welch, Lorraine (lb2391) [Wed, 4 Sep 2019 20:45:36 +0000 (16:45 -0400)]
Update latest staging portal docker images

update to 2.6.0-STAGING-latest for now to test

Issue-ID: PORTAL-685

Signed-off-by: Welch, Lorraine (lb2391) <lb2391@att.com>
Change-Id: I5a49caa40c05569a1a5fea2f3378c2a9fd2c064f
Signed-off-by: Welch, Lorraine (lb2391) <lb2391@att.com>
4 years agoUpdate SDNC/CCSDK staging versions 67/94967/1
Timoney, Dan (dt5972) [Wed, 4 Sep 2019 18:14:54 +0000 (14:14 -0400)]
Update SDNC/CCSDK staging versions

Update staging versions of CDS and dgbuilder to 0.6-STAGING-latest
and of SDNC to 1.7-STAGING-latest

Change-Id: I4a2a5f3ecdc2ed6085aa31c9e16fe1352e52dbe1
Issue-ID: SDNC-874
Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
4 years agoIntegrating DfC to use TLS sidecar container 83/94683/1
ecaiyanlinux [Fri, 30 Aug 2019 13:39:30 +0000 (13:39 +0000)]
Integrating DfC to use TLS sidecar container

Change-Id: I111bc5596346db70923645dcfe79af3e639c978c
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
4 years agoAdd tls-init-container to simulator 41/94041/2
ecaiyanlinux [Wed, 21 Aug 2019 12:10:33 +0000 (12:10 +0000)]
Add tls-init-container to simulator

1.replace dr-sim/dr-redir-sim cert/key
2.update mr-sim, make it support https
3.update ftpes cert/key

Change-Id: I7bbde98f352d1e7d7c8775acf3d8af89a6ef7bdc
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
4 years agoBump infra components version up 26/94626/1
Marco Platania [Thu, 29 Aug 2019 17:25:50 +0000 (13:25 -0400)]
Bump infra components version up

Issue-ID: INT-1231

Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I3b883ed67e7c34ddf6d92f7069c859a4496ae31f

4 years agoAdd comment about how to get cluster-ip 96/94396/2
songgongjun [Wed, 28 Aug 2019 04:06:07 +0000 (21:06 -0700)]
Add comment about how to get cluster-ip

Issue-ID: INT-1227
Signed-off-by: songgongjun <gongjun.song@intel.com>
Change-Id: I40a261079330ca00b9eb15d431fb3b7ae4c319cb

4 years agoAdd SO STAGING 33/94233/1
Brian Freeman [Fri, 23 Aug 2019 16:09:18 +0000 (11:09 -0500)]
Add SO STAGING

Issue-ID: INT-1217
Change-Id: Id19619f999dbe00e8501cdc029a0bf5788efd28f
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoAdd staging image override 61/94161/1
Brian Freeman [Thu, 22 Aug 2019 20:29:56 +0000 (15:29 -0500)]
Add staging image override

Issue-ID: INT-1217
Change-Id: I3b4f83552856d8551bba4787899d8901845fc4e6
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoIngest onap-lab-ci jjb's 92/93992/2
Brian Freeman [Tue, 20 Aug 2019 18:13:58 +0000 (13:13 -0500)]
Ingest onap-lab-ci jjb's

Issue-ID: INT-1215
Change-Id: I448fb7a147daa26d760df6c83fef75aa69f05879
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoFix doc nit in Robot section 30/94030/1
umry8364 [Wed, 21 Aug 2019 08:43:14 +0000 (10:43 +0200)]
Fix doc nit in Robot section

Issue-ID: DOC-534

Change-Id: Ibd4856a1b75d75fe786c7aa1d5337fa7972387a0
Signed-off-by: umry8364 <morgan.richomme@orange.com>
4 years agoMaking environment name configurable in vcpe healthcheck 51/93951/1
Michal Ptacek [Tue, 20 Aug 2019 11:37:43 +0000 (11:37 +0000)]
Making environment name configurable in vcpe healthcheck

Improving handling of arguments in healthcheck-k8s.py,
making environment name configurable.

Issue-ID: INT-1213

Change-Id: Ib6e2875f351f095bd64acd706a6060e169c54e79
Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
4 years agoAdd a section on Robot in the doc 86/93886/1
umry8364 [Mon, 19 Aug 2019 16:33:25 +0000 (18:33 +0200)]
Add a section on Robot in the doc

Issue-ID: DOC-534

Change-Id: I62be1a4b8eac385015dac519023db4fb7e6bd4dd
Signed-off-by: umry8364 <morgan.richomme@orange.com>
4 years agoMake cleanup script more generic 07/93707/3
Marco Platania [Fri, 16 Aug 2019 14:32:58 +0000 (10:32 -0400)]
Make cleanup script more generic

- Fix usage instructions
- Correct wrong input sequence

Issue-ID: INT-1073

Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: Ic01eb302d92d893d17eb71a9341be514cb12dc3f

4 years agoAdd preload description to scale out doc 31/93631/2
Marco Platania [Thu, 15 Aug 2019 16:11:31 +0000 (12:11 -0400)]
Add preload description to scale out doc

Issue-ID: INT-1171

Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: Ia6f7d8276b720bdf0ff1f71d5f1ba66535283751

4 years agoadd -n onap and job to cleanup 28/93628/1
Brian Freeman [Thu, 15 Aug 2019 14:30:55 +0000 (09:30 -0500)]
add -n onap and job to cleanup

Issue-ID: INT-1204
Change-Id: I907bb48c2eee62d9448c99a49e4446771113ceff
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoSimulator integration for CSIT of generalized DfC 08/93608/2
TamasBakai [Thu, 15 Aug 2019 08:25:27 +0000 (08:25 +0000)]
Simulator integration for CSIT of generalized DfC

Issue-ID: DCAEGEN2-1719
Change-Id: I963cfaef30bc4e85d76fecddd310f091e8c00bd0
Signed-off-by: TamasBakai <tamas.bakai@est.tech>
4 years agoRevert zfs and ceph volume 87/93587/1
Brian Freeman [Wed, 14 Aug 2019 22:28:09 +0000 (17:28 -0500)]
Revert zfs and ceph volume

Issue-ID: SDC-2502
Change-Id: Ief0bfdc02b05dca33a99d6a041ba905fb3cfd780
Signed-off-by: Brian Freeman <bf1936@att.com>
4 years agoAdd onboarding package for pnf sim 21/93021/3
wsliwka [Thu, 8 Aug 2019 07:56:34 +0000 (09:56 +0200)]
Add onboarding package for pnf sim
Issue-ID: INT-1134

Signed-off-by: wsliwka <wojciech.sliwka@nokia.com>
Change-Id: I4a23e51b5e46f04d0299b1bb997f572ec828e616

4 years agoUpdating vfw_edgeX documentation. 72/91472/2
Akhila Kishore [Mon, 15 Jul 2019 18:49:33 +0000 (11:49 -0700)]
Updating vfw_edgeX documentation.

Changes to the document has been made on wiki. Relecting those
here to have a uniform documentation available to all.

Issue-ID: MULTICLOUD-709
Signed-off-by: Akhila Kishore <akhila.kishore@intel.com>
Change-Id: I103bf97a54ca42f83baf05d3cf4db2189ab0b5b3

4 years agok8s: Add Makefile targets for testing 83/92883/2
Pawel Wieczorek [Wed, 7 Aug 2019 11:52:49 +0000 (13:52 +0200)]
k8s: Add Makefile targets for testing

Issue-ID: SECCOM-235
Change-Id: I6ac5f3c160f1cd1d8faac90576ab943d4ed213a5
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Add Makefile targets for external dependencies 82/92882/2
Pawel Wieczorek [Wed, 7 Aug 2019 11:38:38 +0000 (13:38 +0200)]
k8s: Add Makefile targets for external dependencies

Building "check" binary now requires several external dependencies. To
minimize setup effort, convenience make targets were provided.

Issue-ID: SECCOM-235
Change-Id: Iec74c0652a5ed3a90d4504216b00ef20bdb7e81f
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Add support for RKE-deployed clusters 20/92820/2
Pawel Wieczorek [Tue, 6 Aug 2019 14:04:53 +0000 (16:04 +0200)]
k8s: Add support for RKE-deployed clusters

RKE is used as a Kubernetes cluster deployment method from ONAP Dublin
release. RKE cluster definition is used to get access to necessary
information.

Issue-ID: SECCOM-235
Change-Id: I588598011ea746b5f7ba327a48f1cea605e56d31
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Add test cases for Dublin API server 19/92819/2
Pawel Wieczorek [Tue, 6 Aug 2019 13:56:56 +0000 (15:56 +0200)]
k8s: Add test cases for Dublin API server

Issue-ID: SECCOM-235
Change-Id: Ie6d43b9db767f191f883a2912916bc8abf9d3ad6
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agok8s: Unify order of API server test cases 18/92818/2
Pawel Wieczorek [Tue, 6 Aug 2019 13:49:34 +0000 (15:49 +0200)]
k8s: Unify order of API server test cases

So far CIS-compliant configuration has been validated first unless
configuration used in ONAP release did not pass given benchmark.

Issue-ID: SECCOM-235
Change-Id: Ibdb523ab7ab6b8285757719721f75aca57beeb82
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
4 years agoPnfsimulator-docker push configuration 63/92863/1
Tomasz Golabek [Wed, 7 Aug 2019 09:02:42 +0000 (11:02 +0200)]
Pnfsimulator-docker push configuration

New configuration for pnfsimulator and netconfsimulator added for docker builds.
Version of maven docker plugin downgraded to 1.0.0
Single tag added to images

Change-Id: Ia0e38b2c65e943614c7463d7889a7ca0b1aa0517
Issue-ID: INT-1134
Signed-off-by: Tomasz Golabek <tomasz.golabek@nokia.com>