oom.git
3 years ago[COMMON] Override truststore in aaf_agent image 54/108254/3
Krzysztof Opasiak [Wed, 6 May 2020 21:27:18 +0000 (23:27 +0200)]
[COMMON] Override truststore in aaf_agent image

aaf_agent image currently contains hardcoded truststores in order to
be able to connect to certman to retrieve certificate for given
component.

The goal is to remove hardcoded truststore from aaf_agent immage but
first we need to be sure that all its users are able to provide the
truststore to the pod as a configmap.

Issue-ID: AAF-1134
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ibe9de6ad7264c05aeca2af858918fc2b4d3a772b
(cherry picked from commit 95a5f84069703c583e49028b37003c73c03cc07d)

3 years agoMerge "Update Portal Images for Role Mgt fix" into frankfurt
Sylvain Desbureaux [Thu, 28 May 2020 14:29:07 +0000 (14:29 +0000)]
Merge "Update Portal Images for Role Mgt fix" into frankfurt

3 years agoMerge "[COMMON] Allow to use ' in postgres passwords" into frankfurt
Sylvain Desbureaux [Thu, 28 May 2020 06:48:04 +0000 (06:48 +0000)]
Merge "[COMMON] Allow to use ' in postgres passwords" into frankfurt

3 years agoUpdate Portal Images for Role Mgt fix 50/108250/3
statta [Wed, 27 May 2020 20:42:57 +0000 (16:42 -0400)]
Update Portal Images for Role Mgt fix

Issue-ID: PORTAL-894

Change-Id: I7cf521518a89be18443148b350ba3d1df1bfec06
Signed-off-by: statta <statta@research.att.com>
3 years agoMerge "Naming micro-service - Helm chart values updates." into frankfurt
Sylvain Desbureaux [Wed, 27 May 2020 07:58:38 +0000 (07:58 +0000)]
Merge "Naming micro-service - Helm chart values updates." into frankfurt

3 years agoMerge "[POLICY] frankfurt RC2 images" into frankfurt
Sylvain Desbureaux [Wed, 27 May 2020 07:56:57 +0000 (07:56 +0000)]
Merge "[POLICY] frankfurt RC2 images" into frankfurt

3 years agoMerge "Upgrade refrepo to 1.5.2" into frankfurt
Sylvain Desbureaux [Wed, 27 May 2020 07:46:26 +0000 (07:46 +0000)]
Merge "Upgrade refrepo to 1.5.2" into frankfurt

3 years agoMerge "[so][msb] Update MSB url to match with its certificate" into frankfurt
Sylvain Desbureaux [Wed, 27 May 2020 07:27:07 +0000 (07:27 +0000)]
Merge "[so][msb] Update MSB url to match with its certificate" into frankfurt

3 years agoMerge "Set certificate SAN as msb-iag" into frankfurt
Sylvain Desbureaux [Wed, 27 May 2020 07:27:04 +0000 (07:27 +0000)]
Merge "Set certificate SAN as msb-iag" into frankfurt

3 years agoMerge "the final docker release for R6" into frankfurt
Sylvain Desbureaux [Wed, 27 May 2020 07:15:13 +0000 (07:15 +0000)]
Merge "the final docker release for R6" into frankfurt

3 years agoUpgrade refrepo to 1.5.2 45/108245/2
Bogumil Zebek [Tue, 26 May 2020 07:21:42 +0000 (09:21 +0200)]
Upgrade refrepo to 1.5.2

Issue-ID: VNFSDK-577
Signed-off-by: Zebek Bogumil <bogumil.zebek@nokia.com>
Change-Id: I64cb933fe5d0f721221c13f5b5271d2f460f021b

3 years ago[COMMON] Allow to use ' in postgres passwords 41/108241/1
Krzysztof Opasiak [Mon, 25 May 2020 13:38:48 +0000 (15:38 +0200)]
[COMMON] Allow to use ' in postgres passwords

' is one of characters that are placed in passwords by our default
password generation algorith. As ' is a special character in SQL files
we need to escape it before substituting environment variables in .sql file.

Issue-ID: OOM-2317
Reported-by: Fiachra Corcoran <fiachra.corcoran@est.tech>
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I970eaf03fbcbfa8cb68df4a06ee27503d02d896a
(cherry picked from commit b0a2d3b3628166dc2dba34a6984cc36b8f821fe0)

3 years agoNaming micro-service - Helm chart values updates. 40/108240/1
bt2983 [Sun, 10 May 2020 23:06:09 +0000 (17:06 -0600)]
Naming micro-service - Helm chart values updates.

Changes requested by Yuriy. Moved policy password to secrets.

Issue-ID: CCSDK-1307

Signed-off-by: bt2983 <bt2983@att.com>
Change-Id: Ibec80f147ad1f7623b5915afd0072f7add76ef9f
(cherry picked from commit 91566f00ca5ad9d76ff658f05fc8596ab481287a)

3 years ago[POLICY] frankfurt RC2 images 46/108046/2
jhh [Fri, 22 May 2020 14:59:49 +0000 (09:59 -0500)]
[POLICY] frankfurt RC2 images

Issue-ID: POLICY-2514
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Change-Id: Id2597d80cfd5c43992e8d0435a2aca4312a3c796
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
3 years agoMerge "Make Policy PAP exposition configurable" into frankfurt
Sylvain Desbureaux [Tue, 26 May 2020 06:53:10 +0000 (06:53 +0000)]
Merge "Make Policy PAP exposition configurable" into frankfurt

3 years agoMerge "Use non encrypted pwd for AAF communication" into frankfurt
Sylvain Desbureaux [Tue, 26 May 2020 06:50:06 +0000 (06:50 +0000)]
Merge "Use non encrypted pwd for AAF communication" into frankfurt

3 years ago[so][msb] Update MSB url to match with its certificate 55/108055/1
Konrad Bańka [Wed, 29 Apr 2020 17:31:03 +0000 (19:31 +0200)]
[so][msb] Update MSB url to match with its certificate

Change tested on so-openstack-adapter but it should impact each
subcomponent the same way.

Issue-ID: MSB-467
Signed-off-by: Konrad Bańka <k.banka@samsung.com>
Change-Id: I3f2ffef25b614701b23aeb9b248db24eee671188
(cherry picked from commit 9755aadf7f86d65db50c3193b984c8f76536c54f)

3 years agoSet certificate SAN as msb-iag 54/108054/1
Huabing Zhao [Thu, 14 May 2020 01:17:52 +0000 (09:17 +0800)]
Set certificate SAN as msb-iag

Also add helm certificate to be used within deployments.

Issue-ID: MSB-467
Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn>
Signed-off-by: Konrad Bańka <k.banka@samsung.com>
Change-Id: I1dabc31275edebd4a01be658e462a7d45497ce46
(cherry picked from commit 88cf4965828fa7f17e413a4465844e200d1358df)

3 years agoMerge "Fix policy api credentials for oof in oom" into frankfurt
Krzysztof Opasiak [Mon, 25 May 2020 16:44:57 +0000 (16:44 +0000)]
Merge "Fix policy api credentials for oof in oom" into frankfurt

3 years agoMerge "Update oof so callback credentials" into frankfurt
Krzysztof Opasiak [Mon, 25 May 2020 16:44:21 +0000 (16:44 +0000)]
Merge "Update oof so callback credentials" into frankfurt

3 years agoMerge "Naming micro-service - Helm chart values updates." into frankfurt
Sylvain Desbureaux [Mon, 25 May 2020 06:49:08 +0000 (06:49 +0000)]
Merge "Naming micro-service - Helm chart values updates." into frankfurt

3 years agothe final docker release for R6 47/108047/1
Taka Cho [Sat, 23 May 2020 13:27:19 +0000 (09:27 -0400)]
the final docker release for R6

the final docker release for R6

Issue-ID: APPC-1869
Change-Id: Ic16764a73e0cfafc4063048a94953878d900e5af
Signed-off-by: Taka Cho <takamune.cho@att.com>
3 years agoNaming micro-service - Helm chart values updates. 43/108043/1
bt2983 [Sun, 10 May 2020 21:12:55 +0000 (15:12 -0600)]
Naming micro-service - Helm chart values updates.

Changes requested by Yuriy. Updated Policy URL.

Issue-ID: CCSDK-1307

Signed-off-by: bt2983 <bt2983@att.com>
Change-Id: I8880fdc5a3a3611f036b3277991c5880f250f3f7
(cherry picked from commit 06961eb7abf0b71206f414e8a2456e0801e32ed0)

3 years agoUse non encrypted pwd for AAF communication 39/108039/1
ChrisC [Wed, 20 May 2020 12:50:23 +0000 (14:50 +0200)]
Use non encrypted pwd for AAF communication

Issue-ID: PORTAL-894
Signed-off-by: ChrisC <christophe.closset@intl.att.com>
Change-Id: Ide962ac7f02d17e4386002a891ab0cf22f38f656
(cherry picked from commit 98e52d2277d7ecf8aa3ae6fcc2d7cb748f659cb6)

3 years agoFix internal uri to modifyConfig 38/108038/1
Brian Freeman [Thu, 7 May 2020 12:29:23 +0000 (07:29 -0500)]
Fix internal uri to modifyConfig

Issue-ID: APPC-1876
Change-Id: If958102c146b5a7b2724e5291ca0d86870ce7869
Signed-off-by: Brian Freeman <bf1936@att.com>
(cherry picked from commit eaeafaa32c885c21bea8e1620585787e1bbe1dfd)

3 years agoMake Policy PAP exposition configurable 37/108037/1
Bruno Sakoto [Wed, 20 May 2020 11:25:41 +0000 (07:25 -0400)]
Make Policy PAP exposition configurable

Policy PAP endpoint exposition is made configurable using helm override
values when deploying. Available options for service type are:

* Cluster IP (default value)
* Node Port (by overriding policy.pap.service.type value with NodePort)

Issue-ID: POLICY-2514
Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca>
Change-Id: Ifc3ac09aeb9e8836c0ef15a8b5b60bd8e31dca03
(cherry picked from commit 425d5be006c212b3c02fb79405282e6148250eb2)

3 years agoFix policy api credentials for oof in oom 52/107852/1
vrvarma [Wed, 6 May 2020 18:58:35 +0000 (14:58 -0400)]
Fix policy api credentials for oof in oom

Change-Id: I1be525c47862697aa26d757675a2933896e4e487
Signed-off-by: vrvarma <vikas.varma@att.com>
Issue-ID: OPTFRA-750
(cherry picked from commit 7344c288f326851595ecd2971e91ea912a1853de)

3 years agoUpdate oof so callback credentials 51/107851/1
vrvarma [Mon, 18 May 2020 23:37:19 +0000 (19:37 -0400)]
Update oof so callback credentials

Update oof so callback credentials

Change-Id: I210c1fe8f89a486a740449b641f8ff94fd1d3a8e
Signed-off-by: vrvarma <vikas.varma@att.com>
Issue-ID: OPTFRA-756
(cherry picked from commit 26dbd2bb64f6489259fc46174d39cd67b3397cc4)

3 years agoMerge "add nssmf adpter endpoint and so infra endpoint, update the oof endpoint"...
Sylvain Desbureaux [Wed, 20 May 2020 12:40:18 +0000 (12:40 +0000)]
Merge "add nssmf adpter endpoint and so infra endpoint, update the oof endpoint" into frankfurt

3 years agoMerge "[POLICY] Remove hardcoded credentials from policy-apex-pdp" into frankfurt
Sylvain Desbureaux [Wed, 20 May 2020 07:28:09 +0000 (07:28 +0000)]
Merge "[POLICY] Remove hardcoded credentials from policy-apex-pdp" into frankfurt

3 years agoadd nssmf adpter endpoint and so infra endpoint, update the oof endpoint 45/107845/1
hetengjiao [Wed, 13 May 2020 09:51:36 +0000 (17:51 +0800)]
add nssmf adpter endpoint and so infra endpoint, update the oof endpoint

Issue-ID: SO-2921

Signed-off-by: hetengjiao <hetengjiao@chinamobile.com>
Change-Id: I28524030291cac3b5e4b04221ee23b8354872d73
(cherry picked from commit d24e56cf8b21b7ccab8305977b558ae0d2740ff2)

3 years agoMerge "Use SDC 1.6.5 containers" into frankfurt
Krzysztof Opasiak [Tue, 19 May 2020 22:09:24 +0000 (22:09 +0000)]
Merge "Use SDC 1.6.5 containers" into frankfurt

3 years agoMerge "[AAF] Augment CPU limit to locate" into frankfurt
Krzysztof Opasiak [Tue, 19 May 2020 22:04:52 +0000 (22:04 +0000)]
Merge "[AAF] Augment CPU limit to locate" into frankfurt

3 years ago[GENERIC] follow Frankfurt AAI/Robot branches 38/107838/1
Sylvain Desbureaux [Mon, 11 May 2020 13:41:59 +0000 (15:41 +0200)]
[GENERIC] follow Frankfurt AAI/Robot branches

Issue-ID: OOM-2406
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I83f3a48450d1c76de9b2dcf9400f8450a5d2d689
(cherry picked from commit 802d528a9ffa56dde7db0a8d6dd613f491188289)

3 years ago[AAF] Augment CPU limit to locate 37/107837/1
Sylvain Desbureaux [Thu, 14 May 2020 11:21:06 +0000 (13:21 +0200)]
[AAF] Augment CPU limit to locate

AAF locate may be long to start because of too small CPU limits.
Augmenting them in order to have a more reliable behavior

Issue-ID: OOM-2411
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Iefcd79ee66be56570a5df83111cbb6559346371e
(cherry picked from commit 4aff7f0653121f7114d42eec3d09531ac13c1e27)

3 years agoMerge "deploy.sh does not work on Mac os x because untar directory is created before...
Krzysztof Opasiak [Mon, 18 May 2020 16:43:18 +0000 (16:43 +0000)]
Merge "deploy.sh does not work on Mac os x because untar directory is created before helm fetch" into frankfurt

3 years ago[ESR] Force esr-server to run as non-root 89/107789/1
Krzysztof Opasiak [Thu, 14 May 2020 19:28:54 +0000 (21:28 +0200)]
[ESR] Force esr-server to run as non-root

Use securityContext to run esr-server as a non-root user.
Unfortunately esr-server docker is built in a way that doesn't allow use
to just change the user and continue using it. We need to make sure
that conf dir is writable for this user because this docker modifies
its configuration files from docker_entrypoint.sh

Issue-ID: AAI-2896
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: If6eba45c9571753fa9e5ce4f386c2e391788c734
(cherry picked from commit 1e6740ddde8f7040b204e63bc457c1f6bea90523)

3 years agoUpdate git submodules
Lucjan Bryndza [Mon, 18 May 2020 13:06:37 +0000 (15:06 +0200)]
Update git submodules

* Update kubernetes/robot from branch 'frankfurt'
  to fc6143a31ef4a55d649f8e5384f661671274331c
  - Replace config using ingress host port template

    Depending on the ingress robot configuration
    host and port template should choose ingress
    host and port or direct cluster host and port

    Change-Id: If1ba88c2fa14ca5d5dd21e559f08fb3fcc815792
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
    Issue-ID: OOM-2341
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
    (cherry picked from commit 77f1d25542848d7a5fd32f57436c9f413e0a5919)

  - Fix missing template arguments

    Fix missing template arguments for robot template
    ingress script

    Issue-ID: OOM-2341
    Change-Id: I93386cc010830cad3e9a05875f18d01c0a01b0e5
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
    (cherry picked from commit 84767148fb032832adfe4b85f2b6bcf311525bdb)

3 years agoMerge "[COMMON] Use "" instead of {} as a default value to avoid warning" into frankfurt
Sylvain Desbureaux [Mon, 18 May 2020 12:38:06 +0000 (12:38 +0000)]
Merge "[COMMON] Use "" instead of {} as a default value to avoid warning" into frankfurt

3 years agoMerge "[COMMON] Enable password generation in postgres" into frankfurt
Sylvain Desbureaux [Mon, 18 May 2020 12:36:47 +0000 (12:36 +0000)]
Merge "[COMMON] Enable password generation in postgres" into frankfurt

3 years agodeploy.sh does not work on Mac os x because untar directory is created before helm... 86/107786/1
yoonsoonjahng [Fri, 15 May 2020 22:18:23 +0000 (18:18 -0400)]
deploy.sh does not work on Mac os x because untar directory is created before helm fetch

Issue-ID: OOM-2407
Signed-off-by: yoonsoonjahng <yoonsoon.jahng@yoppworks.com>
Change-Id: I20e6169bd8c7794db4c6972bfd7bca4f0bf6a910

Change-Id: I01f8c26539e6ceb828a73458d74a8185e9a5081f
Signed-off-by: yoonsoonjahng <yoonsoon.jahng@yoppworks.com>
(cherry picked from commit 30ccad50e3af3cb5eea5bc88855f9bbb35682d02)

3 years ago[ESR] Force esr-gui to run as non-root 85/107785/2
Krzysztof Opasiak [Thu, 14 May 2020 17:41:20 +0000 (19:41 +0200)]
[ESR] Force esr-gui to run as non-root

Use securityContext to run esr-gui as a non-root user.
Unfortunately esr-gui docker is built in a way that doesn't allow use
to just change the user and continue using it. We need to copy tomcat
directory to volume to make sure that tomcat is able to create
additional directories after it starts.

Issue-ID: AAI-2896
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Iae060ea691ce492e8ccb2d540a48c085c0fd66ae
(cherry picked from commit 4c62d4db068a64494fd19870977c3eaa0b63c670)

3 years ago[COMMON] Enable password generation in postgres 84/107784/1
Krzysztof Opasiak [Thu, 14 May 2020 23:24:10 +0000 (01:24 +0200)]
[COMMON] Enable password generation in postgres

Issue-ID: OOM-2250
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ibad1e8d523d2a182d2f43e1ae2b46fff07c11e01
(cherry picked from commit b51ee37db0bf164fb24961c5f1146e22ea245dfa)

3 years ago[COMMON] Use "" instead of {} as a default value to avoid warning 83/107783/1
Krzysztof Opasiak [Fri, 15 May 2020 22:25:05 +0000 (00:25 +0200)]
[COMMON] Use "" instead of {} as a default value to avoid warning

After we upgraded our helm version we started getting below issues
with emails:

Warning: Merging destination map for chart 'curator'.
Overwriting table item 'image', with non table value:
onap/sdnc-image:1.8.2

To fix this let's just use "" instead of () for our daily operations.

Issue-ID: OOM-2412
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I5f2c215c281036a7eb921d6a805527c807a4aca9
(cherry picked from commit 8953675506f4b3807502a3be73b846ab5fe79c67)

3 years agoMerge "Fix: make all - returns multiple warnings" into frankfurt
Sylvain Desbureaux [Mon, 18 May 2020 09:26:08 +0000 (09:26 +0000)]
Merge "Fix: make all - returns multiple warnings" into frankfurt

3 years agoUpdate processor-db config with correct configuration 75/107575/1
Konrad Bańka [Thu, 14 May 2020 14:56:39 +0000 (16:56 +0200)]
Update processor-db config with correct configuration

Processor-db configuration allows CDS to access data in
sdnctl DB without enforcing users to provide such data in CBA.
This entry is now corrected allowing proper work for this feature.
Currently access to sdnctl DB is provided via root DB access,
but this should be further corrected in future.
Also removed unnecessary secret metaconfig - 'cds-db-root-pass'.

Issue-ID: CCSDK-2373
Signed-off-by: Konrad Bańka <k.banka@samsung.com>
Change-Id: Idf452fe5d42862e507b2d981af58b96931ee287c
(cherry picked from commit 031bdb7e4d16288782797ff97333842e6a3f9623)

3 years agoFix: make all - returns multiple warnings 70/107570/1
Mateusz Pilat [Fri, 15 May 2020 10:19:48 +0000 (12:19 +0200)]
Fix: make all - returns multiple warnings

 Issue-ID: OOM-2412

Signed-off-by: Mateusz Pilat <m.pilat@partner.samsung.com>
Change-Id: I7d02ebc6aa43a8e8aa89cea7860bba6b55723fa9
(cherry picked from commit 613343a914d86c84cf3e8bad12584a44b45d6ae2)

3 years agoMerge "bump the SO release version 1.6.1" into frankfurt
Krzysztof Opasiak [Fri, 15 May 2020 16:35:01 +0000 (16:35 +0000)]
Merge "bump the SO release version 1.6.1" into frankfurt

3 years agoMerge "update release version of modeling-etsicatalog" into frankfurt
Morgan Richomme [Fri, 15 May 2020 13:38:26 +0000 (13:38 +0000)]
Merge "update release version of modeling-etsicatalog" into frankfurt

3 years agoMerge "[POLICY] Remove hardcoded credentials from policy-distribution" into frankfurt
Sylvain Desbureaux [Fri, 15 May 2020 12:11:40 +0000 (12:11 +0000)]
Merge "[POLICY] Remove hardcoded credentials from policy-distribution" into frankfurt

3 years agoupdate release version of modeling-etsicatalog 67/107567/1
dyh [Wed, 13 May 2020 01:11:26 +0000 (09:11 +0800)]
update release version of modeling-etsicatalog

Issue-ID: MODELING-349
Change-Id: I52bb7f5f560fa3af6ece968b9c1e8ebc5331b813
Signed-off-by: dyh <dengyuanhong@chinamobile.com>
(cherry picked from commit 238a0ea1f83b64c1d5a4258fb8741542ac1fbf49)

3 years agoUpdate Docker Release version 66/107566/1
statta [Thu, 7 May 2020 15:10:28 +0000 (11:10 -0400)]
Update Docker Release version

Modify Update DB script.
Issue-ID: PORTAL-900, PORTAL-894
Signed-off-by: statta <statta@research.att.com>
Change-Id: I224826ef027e38d88f035fcef64969137154fd4d
(cherry picked from commit 65d1504ec789ee67496f66f985520aab58c5e4df)

3 years agoMerge "[AAF] SSHSM testCA request/values are too low" into frankfurt
Krzysztof Opasiak [Wed, 13 May 2020 22:52:38 +0000 (22:52 +0000)]
Merge "[AAF] SSHSM testCA request/values are too low" into frankfurt

3 years ago[DCAEGEN2] Remove Lost+Found in PVC 60/107560/1
Sylvain Desbureaux [Wed, 6 May 2020 15:40:20 +0000 (17:40 +0200)]
[DCAEGEN2] Remove Lost+Found in PVC

When using dynamic storage, "Lost+Found" may be present. Cloudify init
script doesn't work when it's the case, so we need to remove it.

Issue-ID: OOM-1227
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ie298c55aa997a441dde0bd45c452f41eb77ad495
(cherry picked from commit cfb7ff9315a0863c699acb018bfa947add0a1f25)

3 years ago[AAF] SSHSM testCA request/values are too low 59/107559/1
Sylvain Desbureaux [Wed, 13 May 2020 08:39:47 +0000 (10:39 +0200)]
[AAF] SSHSM testCA request/values are too low

When using requests/limits, testCA jobs gets OOMKIilled.
Giving more RAM in order to make it work.

Issue-ID: OOM-2408
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I221cba103a939b77009aa8c04da2425ab8eeae82
(cherry picked from commit 6c2cbff30b28610826b1c63244ba96c18d3ed4d8)

3 years ago[POLICY] Remove hardcoded credentials from policy-apex-pdp 58/107558/1
Dominik Mizyn [Tue, 21 Apr 2020 08:48:27 +0000 (10:48 +0200)]
[POLICY] Remove hardcoded credentials from policy-apex-pdp

This patch remove hardcoded healthcheck credentials and trustStorePassword
from policy-apex-pdp.

Issue-ID: OOM-2342
Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
Change-Id: Ie8800830919479b87d7a71dfafe934bb95839ede
(cherry picked from commit b8c44b484f4dbe628ceef49b628163ade47101bc)

3 years ago[POLICY] Remove hardcoded credentials from policy-distribution 57/107557/1
Dominik Mizyn [Tue, 14 Apr 2020 16:03:53 +0000 (18:03 +0200)]
[POLICY] Remove hardcoded credentials from policy-distribution

This patch remove hardcoded healthcheck credentials from
policy-distribution.

Issue-ID: OOM-2342
Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
Change-Id: I7c71fcceab030bd7858e8de9fe3f58451ac505d6
[Fix init container]
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
(cherry picked from commit 4aa534fa3920335f1ec899331b435ac6b8c8521b)

3 years agoMerge "[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt release" into frankfurt
Sylvain Desbureaux [Wed, 13 May 2020 11:13:28 +0000 (11:13 +0000)]
Merge "[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt release" into frankfurt

3 years agoUpdate git submodules
deen1985 [Wed, 13 May 2020 07:29:02 +0000 (09:29 +0200)]
Update git submodules

* Update kubernetes/robot from branch 'frankfurt'
  to 4a50a3b035623ab285263a9ebed5d98f33bc65fe
  - demo-k8s.sh -- robot heatbridge updated
    Inputs to heatbridge operation updated,
    Inputs description updated

Signed-off-by: deen1985 <damian.nowak@nokia.com>
    Change-Id: I96d89a7ed52850e5a9bbae2bb69177d25eb942ea
Signed-off-by: deen1985 <damian.nowak@nokia.com>
    Issue-ID: INT-1584
    (cherry picked from commit eed1fc5b5a55fc75935edda30cdee84542fedb4c)

  - Change ingress base hostname

    Change ingress base hostname to recommended value

    Issue-ID: OOM-2391
    Change-Id: Ica5ab275ed3eac2ec6f1669fc9ca32c29a2b12e6

  - Merge "Host and port template for ingress setup"
  - Merge "[ROBOT] Fix Ingress configuration"
  - Merge "ROBOT e2e test cases improvements for csar/zip tosca package validation in VNFSDK and SDC Onbarding fix in scrip required for Frankfurt"
  - ROBOT e2e test cases improvements for csar/zip tosca package validation in VNFSDK and SDC Onbarding fix in scrip required for Frankfurt

    Issue-ID: INT-1240

Signed-off-by: Krzysztof Kuzmicki <krzysztof.kuzmicki@nokia.com>
    Change-Id: I08584c00eaaa7cb84bcb055d1f7eee41d95d6019

  - [ROBOT] Fix Ingress configuration

    Set SSL to redirect as backend uses HTTPS.

    Issue-ID: OOM-2186
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
    Change-Id: I94cf20a016f1d1face44037d9912de774a5f338c

  - Host and port template for ingress setup

    Depending on the ingress robot configuration
    host and port template should choose ingress
    host and port or direct cluster host and port
    + alternarive ingress hostname in config file

    Change-Id: I04c13657f5c5cf8b5f5373897bdc551dc2efdf36
    Issue-ID: OOM-2341
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
3 years agoMerge "[Tree-wide] Make chart build process predictible" into frankfurt
Sylvain Desbureaux [Wed, 13 May 2020 07:06:19 +0000 (07:06 +0000)]
Merge "[Tree-wide] Make chart build process predictible" into frankfurt

3 years agoMerge "Revise dcae bootstrap version" into frankfurt
Sylvain Desbureaux [Tue, 12 May 2020 11:45:03 +0000 (11:45 +0000)]
Merge "Revise dcae bootstrap version" into frankfurt

3 years ago[Tree-wide] Make chart build process predictible 54/107354/1
Krzysztof Opasiak [Fri, 8 May 2020 16:56:39 +0000 (18:56 +0200)]
[Tree-wide] Make chart build process predictible

ONAP is built using plain makefile rules. List of targets is generated
using wildcard function. Based on make changelog:

http://git.savannah.gnu.org/cgit/make.git/tree/NEWS

since version 3.82 wildcard is not going to sort its results which
means that charts are being processed in an arbitrary order which may
lead to build failure due to missing dependencies.

Since version 4.3 make started sorting the wildcard results once again
which may lead to build issues.

To avoid that and make our builds predictible independently from
Makefile version let's make sure that we always sort wildcard results.

Addinally let's use 'file://' instead of '@local' for charts in common
to resolve dependencies between them.

Issue-ID: OOM-2399
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Iacb02dcdbd577ce0e9ca1078dd0586d296ec9375
(cherry picked from commit aae2da91becf5f1f56329d49656c1ad634917cba)

3 years agoMerge "Add Helm charts for CDS py-executor" into frankfurt
Sylvain Desbureaux [Tue, 12 May 2020 07:20:53 +0000 (07:20 +0000)]
Merge "Add Helm charts for CDS py-executor" into frankfurt

3 years agoRevise dcae bootstrap version 53/107353/1
Vijay Venkatesh Kumar [Wed, 6 May 2020 15:37:56 +0000 (15:37 +0000)]
Revise dcae bootstrap version

New bootstrap released for Son-handler
blueprint updates

Change-Id: I3bf4d177a6827ff6afe36a0d2130ccdc797ac099
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Issue-ID: DCAEGEN2-2216
Issue-ID: DCAEGEN2-2200
(cherry picked from commit 416658b118984aae23654dc0521027b86c277389)

3 years ago[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt release 51/107351/1
efiacor [Sun, 10 May 2020 14:42:34 +0000 (15:42 +0100)]
[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt release

Change-Id: I8b370e77407a3497d2fe46b207668dd234a24a80
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DCAEGEN2-2217
(cherry picked from commit b4ea1d79cdfdcc9f013a87f63f5ae386dbd8b137)

3 years agoMerge "[POLICY] put base64 password in xacml.properties" into frankfurt
Sylvain Desbureaux [Mon, 11 May 2020 13:17:11 +0000 (13:17 +0000)]
Merge "[POLICY] put base64 password in xacml.properties" into frankfurt

3 years agoAdd Helm charts for CDS py-executor 50/107350/1
Marek Szwalkiewicz [Mon, 2 Mar 2020 17:09:18 +0000 (17:09 +0000)]
Add Helm charts for CDS py-executor

Chart for deployment pod and service of py-executor. This chart
covers also artifact manager grpc server.

Issue-ID: OOM-2256
Change-Id: Iaf7c569ccaea4062bf16abe3c314a1b24940d4c5
Signed-off-by: Marek Szwalkiewicz <marek.szwalkiewicz@external.t-mobile.pl>
(cherry picked from commit a662568a444a4985068a96007290d1f480fe8547)

3 years agobump the SO release version 1.6.1 49/107349/1
seshukm [Mon, 11 May 2020 07:34:26 +0000 (13:04 +0530)]
bump the SO release version 1.6.1

Issue-ID: SO-2818

Signed-off-by: seshukm <seshu.kumar.m@huawei.com>
Change-Id: I99506f2bfb4aa9944dda9a23f6fbe0d66a60cb37

3 years agoMerge "[VNFSDK] Use common secret template for postgres credentials" into frankfurt
Sylvain Desbureaux [Mon, 11 May 2020 07:11:13 +0000 (07:11 +0000)]
Merge "[VNFSDK] Use common secret template for postgres credentials" into frankfurt

3 years agoUse SDC 1.6.5 containers 48/107348/1
Ofir Sonsino [Wed, 6 May 2020 13:04:06 +0000 (16:04 +0300)]
Use SDC 1.6.5 containers

Change-Id: I0e1e7ee475b57179b8580b610d5b74cdecd59859
Issue-ID: SDC-2942
Signed-off-by: Ofir Sonsino <os0695@intl.att.com>
(cherry picked from commit 4b7c876457872d01dedd97a45234e17e491516a2)

3 years ago[POLICY] put base64 password in xacml.properties 47/107347/1
jhh [Fri, 8 May 2020 17:28:27 +0000 (12:28 -0500)]
[POLICY] put base64 password in xacml.properties

In addition, remove heap mem sizing for drools too
as it is properly sized according to container allocated
resources.

Issue-ID: POLICY-2547
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Change-Id: I4e1e5eaef1cad924ac4c86e5248230aef1fad7d8
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
(cherry picked from commit ed6839f2fe2566741dcd49c8e59fdae519ce84b0)

3 years agoSet multicloud-k8s image to 0.6.0 44/107344/1
Eric Multanen [Wed, 6 May 2020 21:40:12 +0000 (14:40 -0700)]
Set multicloud-k8s image to 0.6.0

Update image for Frankfurt release.

Change-Id: Idc26b081694b8d7270fea81a30d595d41b6b9240
Issue-ID: OOM-2397
Signed-off-by: Eric Multanen <eric.w.multanen@intel.com>
(cherry picked from commit 0d36387da995a3e5100b4a99c3e05765ee3ed4cd)

3 years ago[VNFSDK] Use common secret template for postgres credentials 43/107343/2
Krzysztof Opasiak [Mon, 4 May 2020 23:42:23 +0000 (01:42 +0200)]
[VNFSDK] Use common secret template for postgres credentials

Even through we use common secret template both passwords are still
hardcoded in common postgres chart but this will be removed as a final
step just like we did for mariadb-galera.

Issue-ID: OOM-2250
Change-Id: I4ca210c99c27fbfbf74a467d72a81b2e38d8d800
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
(cherry picked from commit 79677d38adfb3de5a35c00cdb710f6325a8719a9)

3 years agoMerge "[AAF] v1.16+ compatible templates"
Krzysztof Opasiak [Thu, 7 May 2020 10:08:24 +0000 (10:08 +0000)]
Merge "[AAF] v1.16+ compatible templates"

3 years agoMerge "[SDNC] Use common aaf template in SDNC"
Sylvain Desbureaux [Thu, 7 May 2020 09:12:04 +0000 (09:12 +0000)]
Merge "[SDNC] Use common aaf template in SDNC"

3 years agoMerge changes I0947c006,I73f799d9
Sylvain Desbureaux [Thu, 7 May 2020 07:39:14 +0000 (07:39 +0000)]
Merge changes I0947c006,I73f799d9

* changes:
  DOC howto setup ingress on the Kubernetes cluster
  Ingress quick start guide notice

3 years agoMerge "[COMMON] Add new template for obtaining certificate"
Sylvain Desbureaux [Thu, 7 May 2020 06:43:13 +0000 (06:43 +0000)]
Merge "[COMMON] Add new template for obtaining certificate"

3 years agoUse RC1 version of CCSDK artifacts 60/107060/4
Dan Timoney [Mon, 4 May 2020 17:55:56 +0000 (13:55 -0400)]
Use RC1 version of CCSDK artifacts

Update helm charts to use RC1 version of CCSDK dockers

Issue-ID: CCSDK-2358
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Id247bdf3442084d724b84ed752956d08868c7ddf

3 years ago[COMMON] Add new template for obtaining certificate 68/107168/2
Krzysztof Opasiak [Thu, 30 Apr 2020 23:46:37 +0000 (01:46 +0200)]
[COMMON] Add new template for obtaining certificate

Add new template that can be used to obtain certificate by
component. Make also a PoC with NBI.

Strongly based on aaf-config template.

Issue-ID: AAF-1134
Change-Id: I10cb2a7b36a8dc436be337518cc15431aabbbc5d
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
3 years agoDOC howto setup ingress on the Kubernetes cluster 44/107244/3
Lucjan Bryndza [Wed, 6 May 2020 14:08:52 +0000 (14:08 +0000)]
DOC howto setup ingress on the Kubernetes cluster

User manual howto setup ingress controller on the kubernetes
cluster using Nginx and MetalLB

Issue-ID: OOM-1878
Change-Id: I0947c0060851fd7a43bfa92b0472b9ec898857b6
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
3 years agoMerge "[VNFSDK] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:05:47 +0000 (14:05 +0000)]
Merge "[VNFSDK] Fix Ingress configuration"

3 years agoMerge "[VID] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:05:26 +0000 (14:05 +0000)]
Merge "[VID] Fix Ingress configuration"

3 years agoMerge "[UUI] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:05:07 +0000 (14:05 +0000)]
Merge "[UUI] Fix Ingress configuration"

3 years agoMerge "[SDNC] Fix Ingress Configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:03:56 +0000 (14:03 +0000)]
Merge "[SDNC] Fix Ingress Configuration"

3 years agoMerge "[SDC] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:03:30 +0000 (14:03 +0000)]
Merge "[SDC] Fix Ingress configuration"

3 years agoMerge "[Portal] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:00:30 +0000 (14:00 +0000)]
Merge "[Portal] Fix Ingress configuration"

3 years agoMerge "[OOF] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 14:00:10 +0000 (14:00 +0000)]
Merge "[OOF] Fix Ingress configuration"

3 years agoMerge "[DMaaP] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:59:45 +0000 (13:59 +0000)]
Merge "[DMaaP] Fix Ingress configuration"

3 years agoMerge "[CLI] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:59:26 +0000 (13:59 +0000)]
Merge "[CLI] Fix Ingress configuration"

3 years agoMerge "[CDS] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:58:55 +0000 (13:58 +0000)]
Merge "[CDS] Fix Ingress configuration"

3 years agoMerge "[APPC] Fix Ingress configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:58:49 +0000 (13:58 +0000)]
Merge "[APPC] Fix Ingress configuration"

3 years agoMerge "[AAF] Fix AAF Configuration"
Krzysztof Opasiak [Wed, 6 May 2020 13:58:44 +0000 (13:58 +0000)]
Merge "[AAF] Fix AAF Configuration"

3 years ago[VNFSDK] Fix Ingress configuration 39/107239/1
Sylvain Desbureaux [Wed, 6 May 2020 13:27:37 +0000 (15:27 +0200)]
[VNFSDK] Fix Ingress configuration

Change port to HTTPS one
Set ssl to redirect.

Issue-ID: OOM-2192
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I4ca8b8debe721c86baf92ba947f891a120df5435

3 years ago[VID] Fix Ingress configuration 38/107238/1
Sylvain Desbureaux [Wed, 6 May 2020 13:26:57 +0000 (15:26 +0200)]
[VID] Fix Ingress configuration

Set SSL to redirect as backend is HTTPS.

Issue-ID: OOM-2191
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: If7dd2760af35f169cad1adcf7573352766beada2

3 years ago[UUI] Fix Ingress configuration 37/107237/1
Sylvain Desbureaux [Wed, 6 May 2020 13:25:54 +0000 (15:25 +0200)]
[UUI] Fix Ingress configuration

Set ssl to redirect when backend is HTTPS.

Issue-ID: OOM-2190
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I8275d31c8a6f07d42f178db15173665b998ef5e8

3 years ago[SDNC] Fix Ingress Configuration 36/107236/1
Sylvain Desbureaux [Wed, 6 May 2020 13:24:57 +0000 (15:24 +0200)]
[SDNC] Fix Ingress Configuration

Set redirect to true when backend is HTTPS.

Issue-ID: OOM-2188
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I787d5723b9e301f644aa0d6271980e3f58292cc2

3 years ago[SDC] Fix Ingress configuration 35/107235/1
Sylvain Desbureaux [Wed, 6 May 2020 13:24:04 +0000 (15:24 +0200)]
[SDC] Fix Ingress configuration

Set redirect for SSL when backend is HTTPS

Issue-ID: OOM-2187
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I2c1e9acfdaf427e85b78accaf2d26be48eed5f73

3 years ago[Portal] Fix Ingress configuration 34/107234/1
Sylvain Desbureaux [Wed, 6 May 2020 13:23:16 +0000 (15:23 +0200)]
[Portal] Fix Ingress configuration

Set redirect for SSL for HTTPS backend.

Issue-ID: OOM-2185
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I44c42968c2d3ab35c61920f47d3bd6c2ae3cd4dc

3 years ago[OOF] Fix Ingress configuration 33/107233/1
Sylvain Desbureaux [Wed, 6 May 2020 13:22:29 +0000 (15:22 +0200)]
[OOF] Fix Ingress configuration

Set redirect for SSL as backend is HTTPS.

Issue-ID: OOM-2182
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I7dca15d6a381048f8f07c81b2523a1b6ec0ae308

3 years ago[DMaaP] Fix Ingress configuration 32/107232/1
Sylvain Desbureaux [Wed, 6 May 2020 13:21:31 +0000 (15:21 +0200)]
[DMaaP] Fix Ingress configuration

Use HTTPS port
set redirect for ssl part.

Issue-ID: OOM-2179
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I83b30e7a21785f1018118f83db1fd3fe43db5f17