MichaelMorris [Sun, 15 Mar 2020 17:44:48 +0000 (17:44 +0000)]
Run SDC pods as non-root
Change-Id: Id8626c02f4c8bf3e1da406920169c0ed6bee457f
Issue-ID: SDC-2798
Signed-off-by: MichaelMorris <michael.morris@est.tech>
Krzysztof Opasiak [Thu, 6 Feb 2020 22:05:15 +0000 (23:05 +0100)]
[CDS] Use common secret tamplate for mariadb-galera
Use common secret template for cds-db mariadb-galera instance.
Issue-ID: OOM-2263
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I4723c84f0079735abddce032ebc3b99541dabb53
Steve Siani [Sat, 14 Mar 2020 16:15:50 +0000 (12:15 -0400)]
update properties with ErrorCatalog
Issue-ID: OOM-2337
Signed-off-by: Steve Siani <alphonse.steve.siani.djissitchi@ibm.com>
Change-Id: Iec54c9446cba54d6327659a06fade5ebaf537b3b
Sylvain Desbureaux [Tue, 17 Mar 2020 09:45:57 +0000 (09:45 +0000)]
Merge "Change the version number to 2.0.5, and modify the configuration of HTTPS matching 2.0.5."
Sylvain Desbureaux [Tue, 17 Mar 2020 07:51:41 +0000 (07:51 +0000)]
Merge "fix for the 30224 with the debugEnabled"
hekeguang [Tue, 17 Mar 2020 07:25:24 +0000 (15:25 +0800)]
Change the version number to 2.0.5, and modify the configuration of HTTPS matching 2.0.5.
Issue-ID: USECASEUI-412
Change-Id: I8afe4fef1da62e6c40a9b19c2699135b9b0055a3
Signed-off-by: hekeguang <hekeguang@chinamobile.com>
Sylvain Desbureaux [Tue, 17 Mar 2020 06:54:44 +0000 (06:54 +0000)]
Merge "Changes for MDONS usecase"
seshukm [Mon, 16 Mar 2020 15:25:48 +0000 (20:55 +0530)]
fix for the 30224 with the debugEnabled
Issue-ID: SO-2519
Signed-off-by: seshukm <seshu.kumar.m@huawei.com>
Change-Id: Iee36c5f5182686a8d18ba8d178a5d002623cd0a1
Krzysztof Opasiak [Mon, 16 Mar 2020 15:25:24 +0000 (15:25 +0000)]
Merge "Deploy dmaap-bc with downloaded certs"
Sylvain Desbureaux [Mon, 16 Mar 2020 14:52:57 +0000 (14:52 +0000)]
Merge "Add flag to values for disableHttp"
Borislav Glozman [Mon, 16 Mar 2020 12:17:46 +0000 (12:17 +0000)]
Merge "Nginx ingress config loadbalancer option"
Borislav Glozman [Mon, 16 Mar 2020 12:16:11 +0000 (12:16 +0000)]
Merge "DNS add option for display target machine info"
IlanaP [Mon, 16 Mar 2020 12:13:45 +0000 (14:13 +0200)]
Add flag to values for disableHttp
Add a flag that can be used inside the charts and in the AUTO.json file with the http enabled status
Issue-ID: OJSI-102
Signed-off-by: IlanaP <ilanap@amdocs.com>
Signed-off-by: IlanaP <ilanap@amdocs.com>
Change-Id: Ieee2a4b4dea49d7a55eed0811ea29145dd17556a
Morgan Richomme [Mon, 16 Mar 2020 09:43:58 +0000 (09:43 +0000)]
Merge "Add NBI Frankfurt features to gating test"
Sylvain Desbureaux [Mon, 16 Mar 2020 08:13:03 +0000 (08:13 +0000)]
Merge "remove 30208 port"
Dominic Lunanuova [Thu, 12 Mar 2020 16:36:09 +0000 (16:36 +0000)]
Deploy dmaap-bc with downloaded certs
This fixes the charts to properly install new SSL artifacts from AAF.
And we use the newest container version that uses cadi library to read
these artifacts.
Issue-ID: DMAAP-1401
Signed-off-by: Dominic Lunanuova <dgl@research.att.com>
Change-Id: I4d70716220a7f3e629762d3bef2149e3b0147133
Krzysztof Opasiak [Fri, 13 Mar 2020 20:01:49 +0000 (20:01 +0000)]
Merge "Add dcaemod charts"
Taka Cho [Fri, 13 Mar 2020 19:42:34 +0000 (15:42 -0400)]
remove 30208 port
the port 30208 was using http apidoc
since we have moved to https apidoc
hence this 30208 can be removed
Issue-ID: APPC-1851
Change-Id: Iccd814bd624635939c51147489af708320caedac
Signed-off-by: Taka Cho <takamune.cho@att.com>
Krzysztof Opasiak [Fri, 13 Mar 2020 15:34:38 +0000 (15:34 +0000)]
Merge "[COMMON] Allow special characters in postgress passwords"
Krzysztof Opasiak [Fri, 13 Mar 2020 15:33:56 +0000 (15:33 +0000)]
Merge "[APPC] Use common secret tamplate for mariadb-galera credentials"
Jack Lucas [Thu, 13 Feb 2020 22:19:01 +0000 (17:19 -0500)]
Add dcaemod charts
Issue-ID: DCAEGEN2-1866
Change-Id: I0179e1e75529ad8017b1a5c23747dbd80aa6f625
Signed-off-by: Jack Lucas <jflucas@research.att.com>
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
aosull01 [Thu, 12 Mar 2020 12:27:37 +0000 (12:27 +0000)]
Add NBI Frankfurt features to gating test
Issue-ID: EXTAPI-413
Signed-off-by: aosull01 <adrian.osullivan@huawei.com>
Change-Id: I962409c449ea8ba14327e3102c0085311bb1800a
Sylvain Desbureaux [Fri, 13 Mar 2020 12:14:25 +0000 (12:14 +0000)]
Merge "SDC/Portal interface to HTTPS"
hekeguang [Fri, 13 Mar 2020 05:44:43 +0000 (13:44 +0800)]
[UUI] Release new version of server
Issue-ID: USECASEUI-412
Change-Id: I521876aecb95f265ccfc92c8f1d144afd6cbb54c
Signed-off-by: hekeguang <hekeguang@chinamobile.com>
Ofir Sonsino [Thu, 12 Mar 2020 17:28:12 +0000 (19:28 +0200)]
SDC/Portal interface to HTTPS
Change-Id: I769e4f0c4cdaf5b3f2737128654e4650a9d9ab29
Issue-ID: SDC-2799
Signed-off-by: Ofir Sonsino <os0695@intl.att.com>
Krzysztof Opasiak [Wed, 19 Feb 2020 00:44:30 +0000 (01:44 +0100)]
[APPC] Use common secret tamplate for mariadb-galera credentials
Use init container construction & common secret template to remove
hardcoded mysql db credentials.
For now credentials are still hardcoded in the values file to avoid
making too many changes at once.
I also had to make properties files writeable because appc uses some
weird design and modifies them inside main container while starting
odl.
Issue-ID: OOM-2275
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ie36522fc1fdf92a382d5f25a54d4cb150b57ea35
Krzysztof Opasiak [Thu, 12 Mar 2020 14:16:39 +0000 (14:16 +0000)]
Merge "[DMaaP BC] Use common.service template"
Sylvain Desbureaux [Thu, 12 Mar 2020 07:49:41 +0000 (08:49 +0100)]
[DOC] Explain where to download kubectl
Some people weren't sure on which machine we have to install it.
Issue-ID: OOM-2061
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib46ac2211a716e04ce5b8d9394264bb7fd34a42c
Lucjan Bryndza [Thu, 12 Mar 2020 10:10:25 +0000 (11:10 +0100)]
Nginx ingress config loadbalancer option
Add nginx ingress postinstall optional step for
enable nginx ingress controller service with
LoadBalancer option
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Issue-ID: OOM-2099
Change-Id: I195bfaee5e7e268b0f16da4c75b44c17bd695086
Lucjan Bryndza [Thu, 12 Mar 2020 09:02:56 +0000 (10:02 +0100)]
DNS add option for display target machine info
Add info option for displaying target machine
configuration manual when DNS server is already
deployed on the cluster
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Issue-ID: OOM-2289
Change-Id: Ia876fd9ee51fbe852fae2f9daf8f769ff32efe46
Bin Yang [Tue, 10 Mar 2020 14:56:56 +0000 (22:56 +0800)]
Bump up versions of multicloud service
Issue-ID: MULTICLOUD-1026
Signed-off-by: Bin Yang <bin.yang@windriver.com>
Change-Id: I5bf7f56bf2c90ae4fb7584f6c16ce485025ecd1e
Sylvain Desbureaux [Wed, 11 Mar 2020 15:47:18 +0000 (15:47 +0000)]
Merge "Helm changes for new Kafka and zk images"
Srinivasan Ramanathan [Wed, 11 Mar 2020 15:22:44 +0000 (15:22 +0000)]
Changes for MDONS usecase
Change-Id: I182419f83c8296b25be2aa4ce729d6ea27b33836
Issue-ID: SO-2460
Signed-off-by: Srinivasan Ramanathan <srinivasan.ramanathan2@us.fujitsu.com>
su622b [Tue, 10 Mar 2020 13:44:35 +0000 (09:44 -0400)]
Helm changes for new Kafka and zk images
Issue-ID: DMAAP-1337
Change-Id: I98c5812365ba0abeb81455793c826d84507bc7e7
Signed-off-by: su622b <su622b@att.com>
Sylvain Desbureaux [Wed, 11 Mar 2020 12:13:03 +0000 (12:13 +0000)]
Merge "Standardize the pap pod/service name."
Krzysztof Opasiak [Wed, 11 Mar 2020 10:19:48 +0000 (10:19 +0000)]
Merge "[DMaaP DR] Enable persistence for Claims"
Sylvain Desbureaux [Wed, 11 Mar 2020 10:09:23 +0000 (10:09 +0000)]
Merge "Add VFC env about reg_to_msb_when_start to determine whether register to microserice"
Sylvain Desbureaux [Tue, 10 Mar 2020 08:57:25 +0000 (09:57 +0100)]
[DMaaP BC] Use common.service template
Use the service template from common folder.
Align Deployment with kubernetes v1.9+ stable APIs
Fix case when PG AND AAF are not enabled
Enable liveness and readiness probes.
Issue-ID: OOM-1971
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ic6232312ba28effeb8d911001bc05ed7752b2212
Krzysztof Opasiak [Wed, 11 Mar 2020 08:36:32 +0000 (08:36 +0000)]
Merge "[SO] Use common secret template in so-mariadb"
mrichomme [Wed, 11 Mar 2020 07:29:45 +0000 (08:29 +0100)]
Update git submodules
* Update kubernetes/robot from branch 'master'
to
3fa8381f2a1e5f030ee1388466417817dda0fbe2
- Adapt Robot test for vnfsdk (move to HTTPS)
Issue-ID: OJSI-154
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: Ie04b69feeeb8723e400899abd1360c90ae505d4f
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Jimmy Forsyth [Wed, 11 Mar 2020 03:04:51 +0000 (23:04 -0400)]
Update git submodules
* Update kubernetes/aai from branch 'master'
to
3d1bbe894ff20bc8b1512591c6d8993b4d2009b1
- Use release resources:1.6.6
Issue-ID: AAI-2831
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
Change-Id: I7f561576db28439572ea95131efe12f1f3e953c7
yangyan [Wed, 11 Mar 2020 02:14:42 +0000 (10:14 +0800)]
Add VFC env about reg_to_msb_when_start to determine whether register to microserice
Becaue now oom can register the microservice to msb automatically,
if without K8S, we can also register vfc microservice to msb
automatically by vfc container itself.
IF it is set to false, vfc contanier will not register again, if it is
set to true, vfc will register by itself.
we use this flag to determine who is responbile for serice registeration
and it can reduce duplicate registration.
Change-Id: Ie79a8803725ae0c762d9c39a04f922d9823c46e2
Issue-ID: VFC-1601
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
Krzysztof Opasiak [Tue, 10 Mar 2020 22:53:31 +0000 (23:53 +0100)]
[COMMON] Allow special characters in postgress passwords
Postgres image that we are currently using uses sed to replace
passwords placeholders with their actual values at startup time.
This apprach is very fragile and leads to issues if & happens to be a
part of password as it has a special meaning in sed.
To fix this issue let's just extract the setup.sql file from the
container and process it on our own in init container using envsubst
and then mount it to the main container to be used.
Issue-ID: OOM-2317
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ifd51d8f0af0099958caa209185fb7a87a0480bd2
Krzysztof Opasiak [Tue, 10 Mar 2020 17:57:47 +0000 (17:57 +0000)]
Merge "[DOC] Update Kubernetes RKE installation doc"
Krzysztof Opasiak [Tue, 10 Mar 2020 17:57:30 +0000 (17:57 +0000)]
Merge "5.1.0 policy-handler - policy-updates from new PDP"
Krzysztof Opasiak [Tue, 10 Mar 2020 17:56:58 +0000 (17:56 +0000)]
Merge "4.3.0/6.1.0 deploy-handler - policyVersion as str"
Krzysztof Opasiak [Tue, 10 Mar 2020 17:47:22 +0000 (17:47 +0000)]
Merge "Remove CBS NodePort assignments"
Krzysztof Opasiak [Tue, 10 Mar 2020 17:43:42 +0000 (17:43 +0000)]
Merge "Update VFC release version in oom"
k.kedron [Tue, 10 Mar 2020 15:09:06 +0000 (16:09 +0100)]
Standardize the pap pod/service name.
To fix the bug with connecting to the pap by pdp.
Change-Id: I21fb90f151ecace5c10e4def190ed15b15d7c4e5
Issue-ID: OOM-2333
Signed-off-by: Krystian Kedron <k.kedron@partner.samsung.com>
yangyan [Mon, 9 Mar 2020 02:28:05 +0000 (10:28 +0800)]
Update VFC release version in oom
Change-Id: I57b66de5d562b5170b841c5615f84f14f75ce16a
Issue-ID: VFC-1644
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
Sylvain Desbureaux [Tue, 10 Mar 2020 08:11:59 +0000 (08:11 +0000)]
Merge "Migrate to HTTPS from HTTP - VNFSDK"
Sylvain Desbureaux [Tue, 10 Mar 2020 07:45:42 +0000 (08:45 +0100)]
[DMaaP DR] Enable persistence for Claims
Currently, persistence was not enabled, preventing creation of relevant
PV/PVC for DMaaP DR.
Setting this persistence as it should be the normal behavior
Issue-ID: OOM-2332
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ic36c0956d40333529d6325af38e33a9bc6838946
Sebastien Premont-Tendland [Mon, 9 Mar 2020 21:55:41 +0000 (17:55 -0400)]
CDS SDC listener crashing
The environment specification for AUTO in sdc defines the UEB endpoints
with the namespace appended to message-router "message-router.onap". In
CDS configuration we were only specifying the hostname
"message-router" causing SDC to not find a suitable environment and
returning an error.
Modified the sdc listener configuration in CDS to append the namespace
to the configuration.
Issue-ID: CCSDK-2160
Signed-off-by: Sebastien Premont-Tendland <sebastien.premont@bell.ca>
Change-Id: I7afabb91e43948118490455bdc6ba6a53c28a217
Krzysztof Opasiak [Mon, 9 Mar 2020 20:38:09 +0000 (20:38 +0000)]
Merge "add yaml for 5G Network Slicing usecase"
Krzysztof Opasiak [Mon, 9 Mar 2020 20:32:41 +0000 (20:32 +0000)]
Merge "Reverting to AAF deployer@people.osaaf.org for cert distribution"
Jack Lucas [Mon, 9 Mar 2020 16:53:06 +0000 (12:53 -0400)]
Remove CBS NodePort assignments
Exposing NodePorts is needed only for multi-site installations.
Issue-ID: OJSI-195
Issue-ID: DCAEGEN2-2129
Change-Id: I1d6731d95a6c058f5b2e08708c153f31e2065476
Signed-off-by: Jack Lucas <jflucas@research.att.com>
Krzysztof Opasiak [Mon, 9 Mar 2020 20:12:05 +0000 (20:12 +0000)]
Merge "[COMMON] Add a template for PV"
Krzysztof Opasiak [Mon, 9 Mar 2020 17:46:02 +0000 (17:46 +0000)]
Merge "[DMaaP MR] Use HTTPS only for external traffic"
Alex Shatov [Fri, 28 Feb 2020 20:05:14 +0000 (15:05 -0500)]
4.3.0/6.1.0 deploy-handler - policyVersion as str
- external version 4.3.0
- internal version 6.1.0 for code change - no API change
Change-Id: I9093184da29b7ef9ac3e6e48cc6e53743ecb5c9e
Signed-off-by: Alex Shatov <alexs@att.com>
Issue-ID: DCAEGEN2-2085
Sylvain Desbureaux [Mon, 9 Mar 2020 11:06:03 +0000 (12:06 +0100)]
[DOC] Update Kubernetes RKE installation doc
Issue-ID: OOM-2204
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I1d17f027f81c2abc3fbf97973dd5076776b8499e
Sylvain Desbureaux [Mon, 9 Mar 2020 16:04:02 +0000 (16:04 +0000)]
Merge "[VFC] Use common secret template for DB root password"
Alex Shatov [Tue, 25 Feb 2020 20:24:02 +0000 (15:24 -0500)]
5.1.0 policy-handler - policy-updates from new PDP
- need help with url to DMaaP MR and info on policy-update topic
plus the subscriber info
DCAEGEN2-1851:
- policy-handler now supports the policy-update notification
from the new policy-engine thru DMaaP MR
- integration testing is requested
DCAEGEN2-1976:
- policy-handler is enhanced to get user/password from env vars
for PDP and DMaaP MR clients and overwriting the Authorization field
in https headers received from the discoverable config
= to override the Authorization value on policy_engine,
set the environment vars $PDP_USER and $PDP_PWD in policy-handler
container
= to override the Authorization value on dmaap_mr,
if using https and user-password authentication,
set the environment vars $DMAAP_MR_USER and $DMAAP_MR_PWD in
policy-handler container
- Fixed service definition external port to 80
Change-Id: I8c1089542ed00408614da0720653221d475293e6
Signed-off-by: Alex Shatov <alexs@att.com>
Issue-ID: DCAEGEN2-1851
Issue-ID: DCAEGEN2-1976
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Sylvain Desbureaux [Mon, 9 Mar 2020 15:02:07 +0000 (15:02 +0000)]
Merge "Use released version of ESR"
Krzysztof Opasiak [Wed, 4 Mar 2020 22:06:16 +0000 (23:06 +0100)]
[SO] Use common secret template in so-mariadb
Use common secrete template in so-mariadb component.
For now passwords are stil hardcoded but this will be removed in
further commits.
Issue-ID: OOM-2328
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I70b13b14d0ddad8913f45c7cabed0c0d221d0005
Sylvain Desbureaux [Mon, 9 Mar 2020 15:00:35 +0000 (15:00 +0000)]
Merge "[COMMON] Allow to attach annotations to secrets"
Sylvain Desbureaux [Mon, 9 Mar 2020 14:50:56 +0000 (14:50 +0000)]
Merge "[SO] Support LCM API of SDNC"
Krzysztof Opasiak [Mon, 9 Mar 2020 13:51:48 +0000 (13:51 +0000)]
Merge "DCAE R6 updates"
Krzysztof Opasiak [Wed, 26 Feb 2020 22:36:22 +0000 (23:36 +0100)]
[VFC] Use common secret template for DB root password
Issue-ID: VFC-1600
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I9f83c6f6eaace60c3e974218810e5943c5758c06
zhangqingjie [Thu, 5 Mar 2020 08:26:21 +0000 (16:26 +0800)]
add yaml for 5G Network Slicing usecase
Issue-ID: OOM-2329
supply a ONAP installation config file for 5G Network Slicing usecase,
so that the user can easily install a minimum-scope ONAP with as few
resources as possible.
Signed-off-by: zhangqingjie <zhangqingjie@huawei.com>
Change-Id: I728a0229296d62120418f654e4c3f50a2805a69e
Sylvain Desbureaux [Thu, 5 Mar 2020 09:52:22 +0000 (10:52 +0100)]
[COMMON] Add a template for PV
Issue-ID: OOM-1227
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ia885d54fbb9a9fe1ea8a0dec311f63b11cc028c6
Forsyth, James (jf2512) [Fri, 6 Mar 2020 21:09:10 +0000 (16:09 -0500)]
Use released version of ESR
Issue-ID: AAI-2734
Change-Id: I9479f62bfc1baab2d3a72602f6c6fa704ef01962
Signed-off-by: Forsyth, James (jf2512) <jf2512@att.com>
efiacor [Fri, 6 Mar 2020 16:30:05 +0000 (16:30 +0000)]
Reverting to AAF deployer@people.osaaf.org for cert distribution
Change-Id: I4882750ff11343b387dde0452f7bf65a4f612f80
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1405
efiacor [Fri, 6 Mar 2020 12:48:07 +0000 (12:48 +0000)]
Bump DMaaP DR version
Change-Id: I7a37ab9a69fdb3232f68b908ea97a788fbab55a1
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1404
Krzysztof Opasiak [Fri, 6 Mar 2020 13:34:27 +0000 (13:34 +0000)]
Merge "[SO] Use common secret template in so-catalog-db-adapter"
Krzysztof Opasiak [Wed, 4 Mar 2020 22:04:21 +0000 (23:04 +0100)]
[COMMON] Allow to attach annotations to secrets
SO adds some annotations to one of its secres so let's extend the
common secret template with the ability to add annotations.
Issue-ID: OOM-2328
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I4c33d87724b2296852d62e2ddf9061ff4e235157
efiacor [Fri, 6 Mar 2020 13:10:14 +0000 (13:10 +0000)]
Update git submodules
* Update kubernetes/robot from branch 'master'
to
c854b484ebbd5e0c1be1e6a032a79beeb4cab6ff
- Removing http for DMaaP DR
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1400
Change-Id: Ifd0502283d4efe0c14aeb1e77bfa85779596cfec
Krzysztof Opasiak [Fri, 6 Mar 2020 11:59:42 +0000 (11:59 +0000)]
Merge "[COMMON] Handle TLS/Non-TLS for Service"
Sylvain Desbureaux [Fri, 6 Mar 2020 08:27:15 +0000 (08:27 +0000)]
Merge "Removed external access on unsecure port for cds-blueprints-processor-http"
Sylvain Desbureaux [Fri, 6 Mar 2020 07:58:23 +0000 (08:58 +0100)]
[DMaaP MR] Use HTTPS only for external traffic
Use the new template features to create two services for DMaaP Message
Router:
* One of ClusterIP type with HTTP AND HTTPS port, with the same
name as before.
* Another of NodePort type with HTTPS only port, with a new name (this
one should be used only for external traffic)
I've also replaced `tabs` iby spaces in two resources files so it's
easier to read the configmap.
Issue-ID: DMAAP-1400
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I394e0b5327ffe2605f0c4c8b134e49553b06232c
Sylvain Desbureaux [Wed, 4 Mar 2020 10:31:11 +0000 (11:31 +0100)]
[COMMON] Handle TLS/Non-TLS for Service
Current service and headlessService templates doesn't handle the fact
that out of cluster ports must be TLS encrypted only.
With a new (backward compatible) DSL, this is now possible.
In values.yaml, all ports in service part with port AND plain_port will
have the ability to be HTTP or HTTPS depending on the context.
Per default, they'll be HTTPS.
TLS choice will be done according this table:
| tlsOverride | global.tlsEnabled | global.serviceMesh.enabled | global.serviceMesh.tls | result |
|-------------|-------------------|----------------------------|------------------------|--------|
| not present | not present | not present | any | true |
| not present | not present | false | any | true |
| not present | not present | true | false | true |
| not present | not present | true | true | false |
| not present | true | any | any | true |
| not present | false | any | any | false |
| true | any | any | any | true |
| false | any | any | any | false |
Service template will create one or two service templates according to this table:
| serviceType | both_tls_and_plain | result |
|---------------|--------------------|--------------|
| ClusterIP | any | one Service |
| Not ClusterIP | not present | one Service |
| Not ClusterIP | false | one Service |
| Not ClusterIP | true | two Services |
If two services are created, one is ClusterIP with both crypted and plain
ports and the other one is NodePort (or LoadBalancer) with crypted port only.
Issue-ID: OOM-1936
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: If766dd73132022d1a6e578fd36113c461bb91ea5
Krzysztof Opasiak [Thu, 5 Mar 2020 22:37:28 +0000 (22:37 +0000)]
Merge "Disabling http ports on DMaaP"
gummar [Thu, 5 Mar 2020 18:57:12 +0000 (18:57 +0000)]
Removed external access on unsecure port for cds-blueprints-processor-http
Issue-ID: CCSDK-2147
Signed-off-by: gummar <raj.gumma@est.tech>
Change-Id: I7701616ec9732225cf2be07d67dad7af0953bccb
Krzysztof Opasiak [Thu, 5 Mar 2020 20:42:27 +0000 (20:42 +0000)]
Merge "[SDNC] Use common secret template in sdnc"
Jack Lucas [Tue, 3 Mar 2020 20:57:59 +0000 (15:57 -0500)]
DCAE R6 updates
Helm chart updates to pull in latest version of components:
bootstrap loads blueprints into DCAE inventory
bootstrap configures k8splugin for JKS CA store
inventory uses generated CA cert
cloudify manager loads type file to synch clamp and dcae
policy plugins
dashboard skips bad blueprints from inventory
bootstrap loads latest pgaas and sshkeyshare plugins
bootstrap runs as non-root user
Issue-ID: DCAEGEN2-2049
Issue-ID: DCAEGEN2-1938
Issue-ID: DCAEGEN2-2097
Issue-ID: DCAEGEN2-2120
Issue-ID: DCAEGEN2-2072
Signed-off-by: Jack Lucas <jflucas@research.att.com>
Change-Id: I12f37ccc85ebfefba10e7ec1113da6474927ba57
Krzysztof Opasiak [Thu, 5 Mar 2020 18:54:38 +0000 (18:54 +0000)]
Merge "HTTPS/AAF auto cert gen for Portal SDK"
Krzysztof Opasiak [Thu, 5 Mar 2020 18:44:32 +0000 (18:44 +0000)]
Merge "[UUI] UUI Server is a core eater"
Venkata Harish Kajur [Thu, 5 Mar 2020 14:10:24 +0000 (14:10 +0000)]
Update git submodules
* Update kubernetes/aai from branch 'master'
to
4f4d14ab45a2225953961136220041189d566015
- Merge "Update logback.xml"
- Update logback.xml
Issue-ID: AAI-2824
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
Change-Id: I9034b283a2cd47770a30db9e1eecf3ef5ad58d47
Sylvain Desbureaux [Thu, 5 Mar 2020 13:26:41 +0000 (13:26 +0000)]
Merge "readd so filebeat sidecar ELK endpoint"
Sylvain Desbureaux [Thu, 5 Mar 2020 13:26:34 +0000 (13:26 +0000)]
Merge "[SO] Use common secret template in so-bpmn-infra"
Sylvain Desbureaux [Thu, 5 Mar 2020 13:26:13 +0000 (13:26 +0000)]
Merge "Add parameter http scheme for multicloud adapter"
Sylvain Desbureaux [Thu, 5 Mar 2020 12:54:52 +0000 (13:54 +0100)]
[UUI] UUI Server is a core eater
And thus needs bigger limits/requests
Issue-ID: USECASEUI-403
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ide23f95af16f9ed9615bcb26e67e40cd1145670f
Harish Venkata Kajur [Thu, 5 Mar 2020 12:18:24 +0000 (07:18 -0500)]
Update git submodules
* Update kubernetes/aai from branch 'master'
to
c9fad710ea31ae6695c3914429266621d37ce8b8
- Fix the graphadmin logback issue
Issue-ID: AAI-2751
Change-Id: Icce232aab798c2c1d2a072a5cbf040403879a48b
Signed-off-by: Harish Venkata Kajur <vk250x@att.com>
Enbo Wang [Mon, 2 Mar 2020 10:57:45 +0000 (18:57 +0800)]
[SO] Support LCM API of SDNC
Issue-ID: SO-2588
Signed-off-by: Enbo Wang <wangenbo@huawei.com>
Change-Id: I809336bcc7528e4196ddb59a9c25939fd891b502
Kanagaraj Manickam [Thu, 5 Mar 2020 11:15:54 +0000 (16:45 +0530)]
Migrate to HTTPS from HTTP - VNFSDK
Issue-ID: OJSI-154
Signed-off-by: Kanagaraj Manickam <kanagaraj.manickam@hauwei.com>
Change-Id: I7d3d3faa5e17d68051b0816fa5834b88817c3cf1
Signed-off-by: Kanagaraj Manickam <kanagaraj.manickam@huawei.com>
ChrisC [Wed, 19 Feb 2020 08:45:54 +0000 (09:45 +0100)]
HTTPS/AAF auto cert gen for Portal SDK
integrate portal-sdk with AAF agent init container.
add pv to store init-container certs generated at startup.
add aafEnabled flag to switch on/off aaf integration.
modify tomcat startup to load p12 and enable HTTPS based on flag.
Issue-ID: PORTAL-261
Signed-off-by: ChrisC <christophe.closset@intl.att.com>
Change-Id: Ia2b05b8661bf9e0c03a60467212e80d1c9d02bac
Sylvain Desbureaux [Thu, 5 Mar 2020 08:33:46 +0000 (08:33 +0000)]
Merge "Use Frankfurt release of dmaap-bc"
Krzysztof Opasiak [Mon, 2 Mar 2020 21:18:41 +0000 (22:18 +0100)]
[SO] Use common secret template in so-catalog-db-adapter
Use common secret template in so-catalog-db-adapter component.
For now passwords are stil hardcoded but this will be removed in
further commits.
Issue-ID: OOM-2328
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I2ac98729b47d15ab4c360c3bb8c759370d6ec7d2
Dominic Lunanuova [Wed, 4 Mar 2020 20:14:49 +0000 (20:14 +0000)]
Use Frankfurt release of dmaap-bc
Issue-ID: DMAAP-1363
Signed-off-by: Dominic Lunanuova <dgl@research.att.com>
Change-Id: I198b19a24f2b413f489376eb101efa75a4513ba0
Krzysztof Opasiak [Wed, 4 Mar 2020 20:20:32 +0000 (20:20 +0000)]
Merge "VID: Update to version 6.0.3 (Frankfurt RC2)"
efiacor [Wed, 4 Mar 2020 20:06:49 +0000 (20:06 +0000)]
Disabling http ports on DMaaP
Change-Id: I8cf5a6ac58d38c6e5c818259baf7d69615eb9803
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1400
Code Review / oom.git / log