zhangqingjie [Thu, 5 Mar 2020 08:26:21 +0000 (16:26 +0800)]
add yaml for 5G Network Slicing usecase
Issue-ID: OOM-2329
supply a ONAP installation config file for 5G Network Slicing usecase,
so that the user can easily install a minimum-scope ONAP with as few
resources as possible.
Signed-off-by: zhangqingjie <zhangqingjie@huawei.com>
Change-Id: I728a0229296d62120418f654e4c3f50a2805a69e
Krzysztof Opasiak [Fri, 6 Mar 2020 13:34:27 +0000 (13:34 +0000)]
Merge "[SO] Use common secret template in so-catalog-db-adapter"
efiacor [Fri, 6 Mar 2020 13:10:14 +0000 (13:10 +0000)]
Update git submodules
* Update kubernetes/robot from branch 'master'
to
c854b484ebbd5e0c1be1e6a032a79beeb4cab6ff
- Removing http for DMaaP DR
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1400
Change-Id: Ifd0502283d4efe0c14aeb1e77bfa85779596cfec
Krzysztof Opasiak [Fri, 6 Mar 2020 11:59:42 +0000 (11:59 +0000)]
Merge "[COMMON] Handle TLS/Non-TLS for Service"
Sylvain Desbureaux [Fri, 6 Mar 2020 08:27:15 +0000 (08:27 +0000)]
Merge "Removed external access on unsecure port for cds-blueprints-processor-http"
Sylvain Desbureaux [Wed, 4 Mar 2020 10:31:11 +0000 (11:31 +0100)]
[COMMON] Handle TLS/Non-TLS for Service
Current service and headlessService templates doesn't handle the fact
that out of cluster ports must be TLS encrypted only.
With a new (backward compatible) DSL, this is now possible.
In values.yaml, all ports in service part with port AND plain_port will
have the ability to be HTTP or HTTPS depending on the context.
Per default, they'll be HTTPS.
TLS choice will be done according this table:
| tlsOverride | global.tlsEnabled | global.serviceMesh.enabled | global.serviceMesh.tls | result |
|-------------|-------------------|----------------------------|------------------------|--------|
| not present | not present | not present | any | true |
| not present | not present | false | any | true |
| not present | not present | true | false | true |
| not present | not present | true | true | false |
| not present | true | any | any | true |
| not present | false | any | any | false |
| true | any | any | any | true |
| false | any | any | any | false |
Service template will create one or two service templates according to this table:
| serviceType | both_tls_and_plain | result |
|---------------|--------------------|--------------|
| ClusterIP | any | one Service |
| Not ClusterIP | not present | one Service |
| Not ClusterIP | false | one Service |
| Not ClusterIP | true | two Services |
If two services are created, one is ClusterIP with both crypted and plain
ports and the other one is NodePort (or LoadBalancer) with crypted port only.
Issue-ID: OOM-1936
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: If766dd73132022d1a6e578fd36113c461bb91ea5
Krzysztof Opasiak [Thu, 5 Mar 2020 22:37:28 +0000 (22:37 +0000)]
Merge "Disabling http ports on DMaaP"
gummar [Thu, 5 Mar 2020 18:57:12 +0000 (18:57 +0000)]
Removed external access on unsecure port for cds-blueprints-processor-http
Issue-ID: CCSDK-2147
Signed-off-by: gummar <raj.gumma@est.tech>
Change-Id: I7701616ec9732225cf2be07d67dad7af0953bccb
Krzysztof Opasiak [Thu, 5 Mar 2020 20:42:27 +0000 (20:42 +0000)]
Merge "[SDNC] Use common secret template in sdnc"
Krzysztof Opasiak [Thu, 5 Mar 2020 18:54:38 +0000 (18:54 +0000)]
Merge "HTTPS/AAF auto cert gen for Portal SDK"
Krzysztof Opasiak [Thu, 5 Mar 2020 18:44:32 +0000 (18:44 +0000)]
Merge "[UUI] UUI Server is a core eater"
Venkata Harish Kajur [Thu, 5 Mar 2020 14:10:24 +0000 (14:10 +0000)]
Update git submodules
* Update kubernetes/aai from branch 'master'
to
4f4d14ab45a2225953961136220041189d566015
- Merge "Update logback.xml"
- Update logback.xml
Issue-ID: AAI-2824
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
Change-Id: I9034b283a2cd47770a30db9e1eecf3ef5ad58d47
Sylvain Desbureaux [Thu, 5 Mar 2020 13:26:41 +0000 (13:26 +0000)]
Merge "readd so filebeat sidecar ELK endpoint"
Sylvain Desbureaux [Thu, 5 Mar 2020 13:26:34 +0000 (13:26 +0000)]
Merge "[SO] Use common secret template in so-bpmn-infra"
Sylvain Desbureaux [Thu, 5 Mar 2020 13:26:13 +0000 (13:26 +0000)]
Merge "Add parameter http scheme for multicloud adapter"
Sylvain Desbureaux [Thu, 5 Mar 2020 12:54:52 +0000 (13:54 +0100)]
[UUI] UUI Server is a core eater
And thus needs bigger limits/requests
Issue-ID: USECASEUI-403
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ide23f95af16f9ed9615bcb26e67e40cd1145670f
Harish Venkata Kajur [Thu, 5 Mar 2020 12:18:24 +0000 (07:18 -0500)]
Update git submodules
* Update kubernetes/aai from branch 'master'
to
c9fad710ea31ae6695c3914429266621d37ce8b8
- Fix the graphadmin logback issue
Issue-ID: AAI-2751
Change-Id: Icce232aab798c2c1d2a072a5cbf040403879a48b
Signed-off-by: Harish Venkata Kajur <vk250x@att.com>
ChrisC [Wed, 19 Feb 2020 08:45:54 +0000 (09:45 +0100)]
HTTPS/AAF auto cert gen for Portal SDK
integrate portal-sdk with AAF agent init container.
add pv to store init-container certs generated at startup.
add aafEnabled flag to switch on/off aaf integration.
modify tomcat startup to load p12 and enable HTTPS based on flag.
Issue-ID: PORTAL-261
Signed-off-by: ChrisC <christophe.closset@intl.att.com>
Change-Id: Ia2b05b8661bf9e0c03a60467212e80d1c9d02bac
Sylvain Desbureaux [Thu, 5 Mar 2020 08:33:46 +0000 (08:33 +0000)]
Merge "Use Frankfurt release of dmaap-bc"
Krzysztof Opasiak [Mon, 2 Mar 2020 21:18:41 +0000 (22:18 +0100)]
[SO] Use common secret template in so-catalog-db-adapter
Use common secret template in so-catalog-db-adapter component.
For now passwords are stil hardcoded but this will be removed in
further commits.
Issue-ID: OOM-2328
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I2ac98729b47d15ab4c360c3bb8c759370d6ec7d2
Dominic Lunanuova [Wed, 4 Mar 2020 20:14:49 +0000 (20:14 +0000)]
Use Frankfurt release of dmaap-bc
Issue-ID: DMAAP-1363
Signed-off-by: Dominic Lunanuova <dgl@research.att.com>
Change-Id: I198b19a24f2b413f489376eb101efa75a4513ba0
Krzysztof Opasiak [Wed, 4 Mar 2020 20:20:32 +0000 (20:20 +0000)]
Merge "VID: Update to version 6.0.3 (Frankfurt RC2)"
efiacor [Wed, 4 Mar 2020 20:06:49 +0000 (20:06 +0000)]
Disabling http ports on DMaaP
Change-Id: I8cf5a6ac58d38c6e5c818259baf7d69615eb9803
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1400
Krzysztof Opasiak [Tue, 25 Feb 2020 22:31:20 +0000 (23:31 +0100)]
[SDNC] Use common secret template in sdnc
Some passwords are still hardcoded but with this commit all components
should be using passwords provided via secrets not directly as strings.
A follow-up patch will remove hardcoded passwords where feasible.
Issue-ID: OOM-2309
Change-Id: I047974506430cbb277200d0103bcc57a6fd8a83b
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Sylvain Desbureaux [Wed, 4 Mar 2020 17:36:27 +0000 (17:36 +0000)]
Merge "Update HV-VES version to 1.4.0"
Krzysztof Opasiak [Wed, 4 Mar 2020 17:14:07 +0000 (17:14 +0000)]
Merge "[AAF] Give more CPU limit for AAF-GUI"
Ittay Stern [Wed, 4 Mar 2020 16:40:10 +0000 (18:40 +0200)]
VID: Update to version 6.0.3 (Frankfurt RC2)
Issue-ID: VID-761
Change-Id: Ie3127f62a9b059020b047ae09bf13bdf77923833
Signed-off-by: Ittay Stern <ittay.stern@att.com>
Eric Multanen [Mon, 2 Mar 2020 05:35:11 +0000 (21:35 -0800)]
Add parameter http scheme for multicloud adapter
Add support to build endpoint from SO to multicloud
via msb using http or https scheme.
Change-Id: I474fdd7c885e437c1c8136bffe3e40e41c86dab5
Issue-ID: SO-1450
Signed-off-by: Eric Multanen <eric.w.multanen@intel.com>
Sylvain Desbureaux [Wed, 4 Mar 2020 13:20:22 +0000 (14:20 +0100)]
[AAF] Give more CPU limit for AAF-GUI
It should make the POD to start again
Issue-ID: AAF-1106
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I934a904ba7310e49bf2cfd3f372c402af3878efa
pwielebs [Mon, 2 Mar 2020 15:40:48 +0000 (16:40 +0100)]
Update HV-VES version to 1.4.0
The issue related to HV-VES occurs due to a lack of
certificates. There are provided by TLS_INT_CONTAINER.
Therefore use-tls must be set on true.
Issue-ID: OOM-2281
Signed-off-by: Piotr Wielebski <piotr.wielebski@nokia.com>
Change-Id: Ib5c82d5955c0a7b32a4fc5c9797734f930ae7885
Sylvain Desbureaux [Wed, 4 Mar 2020 10:25:15 +0000 (11:25 +0100)]
[AAF] more memory for SMS
SMS requests/limits were set too low and thus it prevents start when on
small flavors
Issue-ID: AAF-1105
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib591c972ceaa4186dd16ca5cebd86b58c0288718
Sylvain Desbureaux [Wed, 4 Mar 2020 08:07:36 +0000 (08:07 +0000)]
Merge "Replaced URLs from the configuration file with test values"
Sylvain Desbureaux [Wed, 4 Mar 2020 07:56:13 +0000 (07:56 +0000)]
Merge "ES non-root"
osgn422w [Tue, 3 Mar 2020 18:57:18 +0000 (19:57 +0100)]
ES non-root
ElasticSearch run as non-root user
Issue-ID: CLAMP-668
Change-Id: I786e2ff8babf4b78fa6dfdf63ff9cd486099fbac
Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
Krzysztof Opasiak [Tue, 3 Mar 2020 11:52:30 +0000 (11:52 +0000)]
Merge "[Consul] Remove nodeport on UI"
Krzysztof Opasiak [Mon, 2 Mar 2020 20:52:23 +0000 (20:52 +0000)]
Merge "[DOC] Remove references to old versions"
Krzysztof Opasiak [Mon, 2 Mar 2020 20:04:12 +0000 (21:04 +0100)]
[SO] Use common secret template in so-bpmn-infra
Use common secrete template in so-bpmn-infra component.
For now passwords are stil hardcoded but this will be removed in
further commits.
Issue-ID: OOM-2328
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I828d6a5713cf023d72ab22ea758e78e91d1944b9
Sylvain Desbureaux [Mon, 2 Mar 2020 13:41:48 +0000 (14:41 +0100)]
[DOC] Remove references to old versions
Also add requirements for Frankfurt release
Issue-ID: OOM-1960
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Idaa4925515737221c90c4bf9141406fa1d428f15
Krzysztof Opasiak [Mon, 2 Mar 2020 16:15:38 +0000 (16:15 +0000)]
Merge "[SDNC] Allow to use templates in external secret names"
Sylvain Desbureaux [Mon, 2 Mar 2020 14:35:56 +0000 (14:35 +0000)]
Merge "[SDNC] Use common secret template in sdnc-portal"
Morgan Richomme [Mon, 2 Mar 2020 13:35:05 +0000 (13:35 +0000)]
Merge "[DMAAP] Don't hardcode mariadb-galera password"
Sylvain Desbureaux [Mon, 2 Mar 2020 12:42:31 +0000 (13:42 +0100)]
[Consul] Remove nodeport on UI
consul ui is on http mode.
As nobody really looks at it, let's remove the nodeport and set it as
ClusterIP.
Issue-ID: OJSI-168
Issue-ID: OJSI-202
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: If114dac59c4fc919a0ab879ef7c5c2478f6a16d2
Krzysztof Opasiak [Mon, 2 Mar 2020 07:29:48 +0000 (07:29 +0000)]
Merge "[SDNC] Add missing inclusion of common secret template"
Krzysztof Opasiak [Sat, 29 Feb 2020 18:59:18 +0000 (18:59 +0000)]
Merge "Added blueprint"
Krzysztof Opasiak [Sat, 29 Feb 2020 11:24:23 +0000 (11:24 +0000)]
Merge "tcagen2 prep + rls version updates"
Krzysztof Opasiak [Sat, 29 Feb 2020 11:23:23 +0000 (11:23 +0000)]
Merge "dcae sec updates for dashboard and inventory"
Venkata Harish Kajur [Fri, 28 Feb 2020 19:04:00 +0000 (19:04 +0000)]
Update git submodules
* Update kubernetes/aai from branch 'master'
to
ac0ea8aa12226ac95683838e92d22928eb221630
- Merge "Fix MSB config section"
- Fix MSB config section
Issue-ID: AAI-2809
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
Change-Id: I53bb71ce9d8989ee3d481bcf7f2db606455df1d3
Vijay Venkatesh Kumar [Thu, 27 Feb 2020 04:05:57 +0000 (04:05 +0000)]
tcagen2 prep + rls version updates
common mongo chart and input template for tca-gen2
VEScollector rls version for 7.1.1 support
Heartbeat rls version for non root support
Change-Id: Iea9c640411841553d79cee2b21447b87e2cd2a90
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Issue-ID: DCAEGEN2-1891
Issue-ID: DCAEGEN2-1907
Issue-ID: DCAEGEN2-2071
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Pawel [Mon, 24 Feb 2020 13:35:21 +0000 (14:35 +0100)]
Added blueprint
Added blueprint (for ves secure) and update blueprint (for ves insecure)
Issue-ID: DCAEGEN2-1777
Signed-off-by: Pawel <pawel.kasperkiewicz@nokia.com>
Change-Id: Iaf78187b8196944ecafcef19b1efec855a4d8922
Krzysztof Opasiak [Fri, 7 Feb 2020 21:54:20 +0000 (22:54 +0100)]
[DMAAP] Don't hardcode mariadb-galera password
Let's use common secret template to generate user credentials for
DMAAP data router DB DB and depend on mariadb-galera to generate
secure enough root password.
Issue-ID: OOM-2287
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I82d22a2db2dc9fba655f99f837be689f4a32a871
efiacor [Fri, 28 Feb 2020 12:46:07 +0000 (12:46 +0000)]
Adding aaf-service to readiness check on dmaap-dr-prov
Change-Id: I48313446853d9175ec41f288350bedbf6190c30c
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1388
HePeng [Tue, 10 Dec 2019 06:21:32 +0000 (14:21 +0800)]
Change MsbAddress Port
Issue-ID: AAI-2734
Change-Id: I04b77796e51afa94832454e4316d415724230124
Signed-off-by: HePeng <he.peng6@zte.com.cn>
[Remove space that breaks everything]
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Vijay Venkatesh Kumar [Thu, 20 Feb 2020 21:50:14 +0000 (21:50 +0000)]
dcae sec updates for dashboard and inventory
- Dashboard switched to https + non-root + portal sdk 2.6.0
- InventoryAPI keystore pwd read from file and filebeat support
Change-Id: I40d2f6a8414f0a8fc8ed7b60ed0118e69cdbb2fd
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Issue-ID: DCAEGEN2-1592
Issue-ID: OJSI-159
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Brian Freeman [Thu, 27 Feb 2020 16:04:42 +0000 (16:04 +0000)]
Merge "Temporarily remove the dependency on Cassandra"
Krzysztof Opasiak [Thu, 27 Feb 2020 16:03:04 +0000 (16:03 +0000)]
Merge "Cassandra 3 Upgrade"
Piotr Borelowski [Fri, 14 Feb 2020 15:57:50 +0000 (16:57 +0100)]
Added an SO K8S POD for SOL002 (Ve-Vnfm-Adapter)
Ve-Vnfm-Adapter POD
Issue-ID: OOM-2307
Signed-off-by: Piotr Borelowski <p.borelowski@partner.samsung.com>
Change-Id: I2bb95b1867338964e3f3dce74e50ac3e11231bcd
Borislav Glozman [Wed, 26 Feb 2020 14:30:12 +0000 (14:30 +0000)]
Merge "[COMMON] Allow to choose between nodePortPrefix and nodePortPrefixExt"
Borislav Glozman [Wed, 26 Feb 2020 14:27:42 +0000 (14:27 +0000)]
Merge "Drop support for postgres-legacy common chart"
shrek2000 [Tue, 25 Feb 2020 14:11:26 +0000 (16:11 +0200)]
Cassandra 3 Upgrade
Move OOM to use SDC cassandra 3
Issue-ID: SDC-2595
Signed-off-by: shrek2000 <oren.kleks@amdocs.com>
Change-Id: Ie58f3420cad70fbed7931656a98951e69a4b7b4b
Signed-off-by: shrek2000 <oren.kleks@amdocs.com>
hekeguang [Wed, 26 Feb 2020 07:05:50 +0000 (15:05 +0800)]
SECCOM HTTPS communication vs. HTTP(TSC must have)
Issue-ID: USECASEUI-356
Change-Id: Ibdaae24155992c0132254669c6173488d65227d6
Signed-off-by: hekeguang <hekeguang@chinamobile.com>
Krzysztof Opasiak [Wed, 26 Feb 2020 01:23:23 +0000 (02:23 +0100)]
[SDNC] Allow to use templates in external secret names
Issue-ID: OOM-2309
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I24fc7c69d6e7999c2ac8107c8d3ed3af22baae42
Ikramullah, Ikram [Tue, 25 Feb 2020 00:03:03 +0000 (19:03 -0500)]
Replaced URLs from the configuration file with test values
Also, the last patch seems to have required the server_url attribute in section [sdnc]
to be avaiable. This is why instead of 'removing', I'm replacing the unused/unwanted URL
Issue-ID: OPTFRA-699
Signed-off-by: Ikramullah, Ikram <ikram@research.att.com>
Change-Id: I2365439ae013b7b4331741cd26b66e9b59f4d864
sunilb [Tue, 25 Feb 2020 04:48:48 +0000 (10:18 +0530)]
readd so filebeat sidecar ELK endpoint
Issue-ID: SO-1110
Signed-off-by: sunilb <sb00577584@techmahindra.com>
Change-Id: Ic468a1b28d681d14e862f4405890d996b42660f6
Krzysztof Opasiak [Sat, 22 Feb 2020 01:12:02 +0000 (02:12 +0100)]
[SDNC] Use common secret template in sdnc-portal
Whole SDNC strongly depends on the assumption that it is using a
common mariadb-galera instance and that root password is secret
password. Also user and password to sdnc DB is hardcoded.
Let's start working on removing this assumption and component by
component add support for local and shared mariadb instance without
hardcoding any passwords to the database.
In this patch all passwords are still hardcoded in the helm chart to
not break other parts of SDNC. Those values will be removed in a final patch.
Issue-ID: OOM-2309
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I5ca369f43e8863f9ae3ec3f5d648740808a5e099
Krzysztof Opasiak [Mon, 24 Feb 2020 15:11:42 +0000 (16:11 +0100)]
[SDNC] Add missing inclusion of common secret template
Issue-ID: OOM-2309
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I6f08d537036576122fc2e7d941695434eaaf854e
Krzysztof Opasiak [Mon, 24 Feb 2020 19:52:42 +0000 (19:52 +0000)]
Merge "Added fix for OOM-1966"
Krzysztof Opasiak [Mon, 24 Feb 2020 19:49:50 +0000 (19:49 +0000)]
Merge "[DMaaP DR] Adding log level config to charts"
Krzysztof Opasiak [Mon, 24 Feb 2020 12:52:02 +0000 (13:52 +0100)]
[COMMON] Allow to choose between nodePortPrefix and nodePortPrefixExt
Add the ability to specify whether a nodePortPrefix or
nodePortPrefixExt should be used while defining a port using common
service template.
Now you can specify:
ports:
- name: http
port: 9098
nodePort: "09"
prefix: nodePortPrefixExt
Issue-ID: OOM-1971
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ied78584e5b1c8f479ca180890df67ad4dee3501a
Krzysztof Opasiak [Sat, 22 Feb 2020 01:34:14 +0000 (02:34 +0100)]
Drop support for postgres-legacy common chart
There is no need to maintain two postgres charts if all components can
work with the newest version so let's remove the legacy one.
Issue-ID: OOM-2310
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I8b399902e37fdec7e55552e7972daaf1c0c74cfe
Krzysztof Opasiak [Fri, 21 Feb 2020 23:50:43 +0000 (23:50 +0000)]
Merge "Release 1.5.1 container"
Krzysztof Opasiak [Fri, 21 Feb 2020 20:11:22 +0000 (20:11 +0000)]
Merge "[SDNC] Use common secret template in dmaap-listener"
Krzysztof Opasiak [Fri, 21 Feb 2020 20:11:18 +0000 (20:11 +0000)]
Merge "[SDNC] Use common secret template in ansible-server"
Krzysztof Opasiak [Fri, 21 Feb 2020 20:11:14 +0000 (20:11 +0000)]
Merge "[SDNC] Use common secret template in ueb listener"
jimmy [Fri, 21 Feb 2020 16:52:16 +0000 (11:52 -0500)]
Release 1.5.1 container
Issue-ID: AAI-2734
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
Change-Id: I7ae419b70f3349e6d0d5007132cfc46ec3810c58
Krzysztof Opasiak [Fri, 21 Feb 2020 15:37:44 +0000 (15:37 +0000)]
Merge "move to OpenDistro"
Krzysztof Opasiak [Fri, 21 Feb 2020 12:50:42 +0000 (13:50 +0100)]
Add Makefile option to skip lining of helm charts
For some reason after introducing our awesome templates to ONAP make
command can take now quite a lot of time, which sometimes causes out
CI jobs to fail.
Command that takes so much time is helm lint.
This patch adds a Makefile option that allows you to skip linting of
helm charts and just build them. Example:
make SKIP_LINT=TRUE
Default behavior stays unchanged.
Issue-ID: OOM-2055
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ic50bad0cc82892e1daecc5761d6144d788a79d9f
osgn422w [Tue, 11 Feb 2020 14:50:21 +0000 (15:50 +0100)]
move to OpenDistro
move dashboard to Opendistro and certificate update
Issue-ID: CLAMP-483
Change-Id: Ibaba1d517c13adeab611ab23749fb16295081372
Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
Sylvain Desbureaux [Fri, 21 Feb 2020 08:14:49 +0000 (08:14 +0000)]
Merge "update msbPort"
Krzysztof Opasiak [Thu, 20 Feb 2020 23:38:56 +0000 (00:38 +0100)]
[SDNC] Use common secret template in dmaap-listener
Whole SDNC strongly depends on the assumption that it is using a
common mariadb-galera instance and that root password is secret
password. Also user and password to sdnc DB is hardcoded.
Let's start working on removing this assumption and component by
component add support for local and shared mariadb instance without
hardcoding any passwords to the database.
In this patch all passwords are still hardcoded in the helm chart to
not break other parts of SDNC. Those values will be removed in a final patch.
Issue-ID: OOM-2309
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I3280f9d7ff4933d4e50b94ca248676ed9aa6688d
Krzysztof Opasiak [Thu, 20 Feb 2020 20:29:45 +0000 (21:29 +0100)]
[SDNC] Use common secret template in ansible-server
Whole SDNC strongly depends on the assumption that it is using a
common mariadb-galera instance and that root password is secret
password. Also user and password to sdnc DB is hardcoded.
Let's start working on removing this assumption and component by
component add support for local and shared mariadb instance without
hardcoding any passwords to the database.
In this patch all passwords are still hardcoded in the helm chart to
not break other parts of SDNC. Those values will be removed in a final patch.
Issue-ID: OOM-2309
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Idb460e72301dd63082d7890d34fea923df3ac426
Krzysztof Opasiak [Thu, 20 Feb 2020 19:26:55 +0000 (20:26 +0100)]
[SDNC] Use common secret template in ueb listener
Whole SDNC strongly depends on the assumption that it is using a
common mariadb-galera instance and that root password is secret
password. Also user and password to sdnc DB is hardcoded.
Let's start working on removing this assumption and component by
component add support for local and shared mariadb instance without
hardcoding any passwords to the database.
In this patchAll passwords are still hardcoded in the helm chart to
not break other parts of SDNC. Those values will be removed in a final patch.
Issue-ID: OOM-2309
Change-Id: Ie998b3c5775807ef096074b18a18a1773120c1d6
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
efiacor [Thu, 20 Feb 2020 16:50:30 +0000 (16:50 +0000)]
[DMaaP DR] Adding log level config to charts
Change-Id: I3c34258810908b4eb26864f33ee1fc56216906a8
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1389
Sylvain Desbureaux [Thu, 20 Feb 2020 08:18:54 +0000 (08:18 +0000)]
Merge "[COMMON] Use common mariadb-galera instance in network-name-gen"
Sylvain Desbureaux [Thu, 20 Feb 2020 08:18:05 +0000 (08:18 +0000)]
Merge "[OOF] Use common secret template for mariadb credentials"
dyh [Thu, 20 Feb 2020 02:08:58 +0000 (10:08 +0800)]
update msbPort
Change-Id: Iff0251e5ccd432985d9b25ea80f004d7e772a652
Issue-ID: MODELING-317
Signed-off-by: dyh <dengyuanhong@chinamobile.com>
Krzysztof Opasiak [Fri, 14 Feb 2020 15:45:20 +0000 (16:45 +0100)]
[COMMON] Use common mariadb-galera instance in network-name-gen
Improve usage of common secret template by removing all hardcoded
values and use common mariadb-galera instance.
Issue-ID: OOM-2249
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ia126a0b66d9e61c90114ff688cc52cc5fa4f5d58
Sylvain Desbureaux [Wed, 19 Feb 2020 16:00:03 +0000 (16:00 +0000)]
Merge "[COMMON] Use common secret template in dgbuilder"
ksinghn247 [Tue, 18 Feb 2020 12:27:45 +0000 (17:57 +0530)]
Added fix for OOM-1966
Issue-ID: OOM-1966
Signed-off-by: ksinghn247 <kuldeepsinghn@hcl.com>
Change-Id: Iaff841695f0ef8513b202bc299ecc2785bf97ee0
Sylvain Desbureaux [Wed, 19 Feb 2020 12:46:18 +0000 (12:46 +0000)]
Merge "[OOM] Bump postgresql version"
Sebastien Premont-Tendland [Mon, 17 Feb 2020 16:32:15 +0000 (11:32 -0500)]
Cluster Distributed lock service integration with OOM.
Disabled by default. In order to enable cluster replicaCount
should be higher than 2 and useScriptCompileCache is set to false.
We need to disable script compile cache otherwise there is
issue with updating CBA when running multiple replicas of
blueprint processor.
Issue-ID: CCSDK-2011
Signed-off-by: Sebastien Premont-Tendland <sebastien.premont@bell.ca>
Change-Id: I6f6071556eb499832f9a765ba4c27100497c6e88
Mike Elliott [Tue, 18 Feb 2020 17:26:35 +0000 (17:26 +0000)]
Merge "Fix yamllint error in info file"
Sylvain Desbureaux [Tue, 18 Feb 2020 15:50:05 +0000 (16:50 +0100)]
[OOM] Bump postgresql version
Use version 10.11 deployed by crunchydata scripts version 4.2.1.
this will:
* remove some CVEs (in particular CVE-2019-10164)
* use UTF-8 as default encoding
Issue-ID: OOM-2290
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I6f6ca18b48c435f55f5ffcb88e4f2dc83b758b84
Aric Gardner [Mon, 17 Feb 2020 16:38:46 +0000 (11:38 -0500)]
Fix yamllint error in info file
Each changes item needs its own list
this can be seen in the changed code
Also, remove other repositories.
Each repository in ONAP requires its own info file
and so we cannot include multiple repos in a single
info file
Issue-ID: CIMAN-33
Signed-off-by: Aric Gardner <agardner@linuxfoundation.org>
Change-Id: Id23288f9a5bddd3f0a1f52d56d072ef90b8a8f9b
Krzysztof Opasiak [Tue, 18 Feb 2020 14:20:35 +0000 (14:20 +0000)]
Merge "[SO] Enable use of Keystone v3"
James Forsyth [Tue, 18 Feb 2020 13:54:22 +0000 (13:54 +0000)]
Update git submodules
* Update kubernetes/aai from branch 'master'
to
23f076495d36081f34a367067918d15fcc5ada8d
- Merge "Add ingress controler support to AAI"
- Add ingress controler support to AAI
Issue-ID: OOM-2171
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Change-Id: I9afdae36aa9afd1f80f88b5bb3a15935f9335a93
Krzysztof Opasiak [Tue, 18 Feb 2020 12:38:57 +0000 (12:38 +0000)]
Merge "[SDC] Change default access mode for cert PVC"
Krzysztof Opasiak [Mon, 17 Feb 2020 21:05:51 +0000 (22:05 +0100)]
[COMMON] Use common secret template in dgbuilder
Taken into account how "easy" it would be to modify the dgbuilder
which is written in JavaScript (which is not my mother tongue to say
the least) let's try to remove hardcoded passwords from config files
without modifying the application container itself.
In order to achieve this:
1) Remove createReleaseDir.sh script from the container as it is never
used and contains a ton of passwords
2) Replace all sensitive values in config files with references to
respective environment variables
3) Introduce init container that will run envsubst command on config
files and copy them from ConfigMap value to the new volume which is
backed by tmpfs so that the plain text passwords are never written to
the disk
For now all the hardcoded values are still there to minimize the risk
of breaking the deployment but step by step they will be removed in
next commits.
Issue-ID: OOM-2247
Change-Id: I5a428e3415713857084ba6aaa6be9b04a8eb8c0f
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Sylvain Desbureaux [Tue, 18 Feb 2020 08:20:05 +0000 (08:20 +0000)]
Merge "Removed use of vfc-redis from etsicatalog component"
Krzysztof Opasiak [Fri, 7 Feb 2020 20:06:58 +0000 (21:06 +0100)]
[OOF] Use common secret template for mariadb credentials
Remove all hardcoded credentials for mariadb and depend on common
secret template to generate all passwords at the deployment time.
Issue-ID: OOM-2292
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I54e57b317a8852469bcc11aabf6ddf0040ff5eb3
Krzysztof Opasiak [Mon, 17 Feb 2020 13:03:18 +0000 (13:03 +0000)]
Merge "[DMaaP MR] Remove "lost+found" in kafka PVC"