Age | Commit message (Collapse) | Author | Files | Lines |
|
* Update docs/submodules/integration.git from branch 'master'
to 5ece777e31795d3cbcfcc475d4e396386442b55e
- k8s: Call correct methods for API server auditing flags validation
Issue-ID: SECCOM-235
Change-Id: Ia5d75628b1c5211f378c239f84e9689d45697a04
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 91b130eec8a32e270f3e52f3ba10c4566383b1b2
- k8s: Validate API server request timeout
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.38).
Issue-ID: SECCOM-235
Change-Id: Ic1f175d577c79013ddb49e02b8de69137535c964
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 4dbeacb893fce6c6c6dad99cd691362fda48ec91
- k8s: Validate API server included authorization mode
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.32).
It also fixes wrong documentation comment for similar validator
(1.1.19).
Issue-ID: SECCOM-235
Change-Id: I00cb8a458871b091b16fe60fc0087b7972aa3b6b
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 944993869240ba58beab8958a61dacf927706a68
- k8s: Validate API server crypto ciphers in use
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.30).
It also covers its duplicate (1.1.39).
Issue-ID: SECCOM-235
Change-Id: I0f3031c080cf225e7c2c03e65dd0bfc780326307
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to fbbdbece6e69adeba811496af511e278881bdc79
- Fix hashbang in vCPE Python scripts
Change-Id: Id2b7ec151e1a006a5a85b8544e478fd9cf282715
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-220
|
|
* Update docs/submodules/integration.git from branch 'master'
to dbb3ba15b358043f9e45d8dd211ce1bd970fb08e
- Automate vCPE closed loop policy pushing
Added a library routine to set up CL policy
in an idempotent fashion.
Description of CL pushing related manual step
was removed from documentation.
Change-Id: I1fad5d71481252ce803dd58c6ccbbcfa0a4d246f
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: INT-1267
|
|
* Update docs/submodules/integration.git from branch 'master'
to 43fdf7b1938877fec2a10022a533c0491b6e8c95
- add terminate and del function to hpy_automation scripts
Change-Id: Ie669261bde3723d892706d3d767c08b325afc3e0
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 50fce384f46a6d961e8062abcffeca717edab725
- fix the typo error of hpy_automation scripts
Change-Id: I27b43d63042bdb46f1ff362335a26bf6726674a0
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to e8aa3f05cfbf878a7499000aca1257058c4e5d85
- SDNC SSL port, BRG category, DEBUG
Issue-ID: INT-1265
Change-Id: I4ea7bf282b7d8aad58645784317dea9edf373cff
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 2bbe21f6da8d63a75de0711859e55ab9ea7ad559
- Update INFO.yaml
Signed-off-by: Yang Xu <xuyang11@gmail.com>
Issue-ID: INT-1269
Change-Id: I9f76cdd3b53f9519017da851a59b8c7000334797
|
|
* Update docs/submodules/integration.git from branch 'master'
to 4e74a1e24e15b3db2216fb269a58cfc08e598f63
- k8s: Validate API server certificates and keys
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.22, 1.1.25 -
1.1.26 and 1.1.28).
Issue-ID: SECCOM-235
Change-Id: Ic61a796653dc868d20fe69c3ed508e7fa8ba52db
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 3e602597b036d29f77485f35c1f81a8cdb6f350b
- k8s: Validate API server Certificate Authorities
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.21, 1.1.29
and 1.1.31).
Issue-ID: SECCOM-235
Change-Id: Ia2f55f6962885a7aa878c970a406189902cfab10
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 2055f0878a7841f7d07eda60eac10034c4b22215
- k8s: Validate API server auditing flags
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.16 - 1.1.18).
Issue-ID: SECCOM-235
Change-Id: I27b63e37fc3203cf3574b9e1cdc43333041f2a36
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 6c95c5ca28dd3f48a58dc11cc9c17fd8b4934881
- k8s: Validate API server auditing is enabled
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.15).
Issue-ID: SECCOM-235
Change-Id: Ia1d27ed7a9e439bb0abf4bd8941bdd4573a50bd5
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 1ef8cebe0663ec14d00cd62884fe55060c0b04a2
- k8s: Group tests by flag type
Issue-ID: SECCOM-235
Change-Id: I25ebd2930afec6eb259f0a678fffbf7727eb315b
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to d515af5c7bddbbe3bebf3a6288fb3e43b234719a
- k8s: Validate API server not excluded authorization mode
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.19).
Issue-ID: SECCOM-235
Change-Id: I00c9600fd0d351afb7141a5fa16f348eab67b12d
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to a15076ddf4a07a05e03934939112cf011414d514
- k8s: Validate API server not excluded admission plugins
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.14).
Issue-ID: SECCOM-235
Change-Id: I63c2f8a5b94bfd6c9963805aae85595e6b6ad6d7
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to be56744a2aecf133fcb9972a241847bfcd012e76
- Fix rev level in license
Issue-ID: INT-1266
Change-Id: I822becff87484b79d3e7c744038b55943c1dddcb
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 0c724156389b7ff0947a3217a79d4aca382f2a82
- Updates for ssl sdc
Issue-ID: INT-1265
Change-Id: I64971740c8ae9aee60a06ca1d0e5ff02ccbc9a88
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 7d2784fb08be919121a0d394a7bc61f84de7e44b
- Add mr-sim log to console
Change-Id: I9697360d2ee5b8e95dacdb74a9a1a025a1a45e3c
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
Issue-ID: DCAEGEN2-1702
|
|
* Update docs/submodules/integration.git from branch 'master'
to efd65f9839f7379b590452ed31ab8605102904c3
- k8s: Validate API server included admission plugins
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.11 - 1.1.13,
1.1.24, 1.1.27, 1.1.33 and 1.1.36).
Issue-ID: SECCOM-235
Change-Id: I920bfd42014b8458126be251648f5bf3dcd84c16
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to aeaa5a1f5e57f63dd203db43fb6992ab1728c504
- k8s: Validate API server excluded admission plugins
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.10).
However, CIS Kubernetes Benchmark v1.3.0 mismatches official
documentation: Kubernetes 1.10+ already provides safe defaults from
security standpoint [1] (ONAP Casablanca uses 1.11).
Deprecated admission control plugin flag has also been validated since
it was still available in Kubernetes provided by Rancher [2].
[1] https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use
[2] https://github.com/rancher/rancher/issues/15064
Issue-ID: SECCOM-235
Change-Id: I0e8fe9f885861f155cb8265df085fa93dbdff6d2
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 0dc16f1f0c60625a1637ee1ec106a4df543dab92
- k8s: Add note on release-specific dependencies
Issue-ID: SECCOM-235
Change-Id: I35d3e3f413542c69718d17ae25f227275270c8cf
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 4b8acc9dff3df76a6fa25f3e2e29fe37ca073749
- Improve description of scale out use case
- Describe the ONAP flows
- Describe SO workflow
- Describe how to obtain a TOSCA template from SDC
Issue-ID: INT-1171
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I901ae1a85becbb549804f8307991cb592a251d6d
|
|
* Update docs/submodules/integration.git from branch 'master'
to 97919e81b8721ae451d3c18d6b5b16ea3b4566f3
- Fix DCAE cleanup process
Issue-ID: INT-479
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I360d9887842ac8e86e3a52f7a549367dc63ccb7d
|
|
* Update docs/submodules/integration.git from branch 'master'
to 00a07150311b6f6a8cc65360aa478d1a0fc20591
- Add sdc keyspaces and longer timeout
Issue-ID: INT-1244
Change-Id: I5bc0f4e02ac3d2d8df867f76327e588353c76da8
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 048e08954b756a4e18a7d665b744b477ec03f2f6
- Modified vFW DT Use case description
Description of policy configuration and typos fixed
Change-Id: Ib11df95b79987b85c15452d74a5644c152dcbfde
Signed-off-by: Lukasz Rajewski <lukasz.rajewski@orange.com>
Issue-ID: INT-751
|
|
* Update docs/submodules/integration.git from branch 'master'
to 0ca3d400f25810df7b1eb811dc529e0d1231a184
- Refactor healthcheck-k8s.py
Error reporting was improved by returning actual
error message from subprocess call to 'kubectl' command.
Code readability was improved by defining a dictionary
of endpoint names to check and their IPs.
Unsecure 'shell=True' property in Popen constructor for
kubectl command in SDNC DB was removed and command string
itself sanitized.
Overall code readability was improved by reusing common
commands in a loop.
Change-Id: I19f8f71e27196bb55a9be3d58cd0885ceba3af0c
Issue-ID: TEST-213
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to bfeeb24819035523222149d4fffdf9f7de363fc2
- Fix mispelled routine name in vcpe scripts
headbridge -> heatbridge
Change-Id: I49cc3af80b74a9d03612625be2a35e039e6d28e1
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: DOC-549
|
|
* Update docs/submodules/integration.git from branch 'master'
to 863af9a6582448560ca3d56852056658d0da16eb
- Remove hardcoded SDNC pod name in vcpe scripts
Sdnc pod name is set as a property in VcpeCommon
class and it should be used across the script.
Also removed hardcoded public net prefix in
get_pod_node_public_ip and use class property
where it's assigned.
Change-Id: I0308c808a764ff114fc43591aed34d9695207fe5
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-212
|
|
* Update docs/submodules/integration.git from branch 'master'
to 63929cfc099d8a39bf9854dd7fbb1f32490e1147
- Fixed Bugs in HPA automtion script
Signed-off-by: Itohan Ukponmwan <itohan.ukponmwan@intel.com>
Issue-ID: INT-1137
Change-Id: I89fefb02d7d58453d490499716c581cb66895b59
|
|
* Update docs/submodules/integration.git from branch 'master'
to 0b06f78094bf11112f57d32d741e349108c34042
- Better specifying parts supposed to be changed
Following params are needed minimum required to be changed or
cross-checked when vCPE is tried in different lab
Change-Id: I911acc682560c9a727d2e14ae1d4a22206d6e6f8
Issue-ID: TEST-208
Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to f1d0a8be232f7b6a4076acbe32dab8e15856c41e
- Add remarks related to Openstack's port security on vCPE
Extended anti-spoofing related notes with some hints on
dealing with Neutron's Port Security Extension Driver
which in some cases may prevent VNFs to function properly.
Change-Id: Icf4f44b8cbcaa70621bf21d5b72ff552be80d4e2
Issue-ID: DOC-549
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 73b02ed6a0c8c8942f2740034d6a2546a6551932
- Improve external_net_addr property description in vCPE scripts
Change-Id: Ie06109bb5c62d4132a5db8c6cfeb9d4c297d05a5
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-208
|
|
* Update docs/submodules/integration.git from branch 'master'
to a44882022c88882be472cfac49d53c17b4a25feb
- Deploy CDS in integration-override
Issue-ID: OOM-2085
Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
Change-Id: I324b58868286971c93a54ae269517e20b954d759
|
|
* Update docs/submodules/integration.git from branch 'master'
to 7a008fd29da0f41b8d74bac9f965f9acc272eecc
- Adding hint regarding dhcp anti-spoofing for vCPE
Adding instructions for bypassing DHCP anti-spoofing rules
preventing vCPE to work.
Change-Id: Ic0f92a40a41e5e20dc43c360e429baba44a46fa1
Issue-ID: DOC-549
Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to dd95f0285f8a986498e3b6146c16d23e09ab4490
- Fix the error of hpa when create ns
Change-Id: I6000c83a3a265a185dad8ac8ff90388df88850dd
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 4baa51c89bd56894646458273a62bf3b2963b298
- Update healthcheck-k8s script synopsis in vCPE manual
This reflects changes made in regard of input parameters
done in Change-Id: Ib6e2875f351f095bd64acd706a6060e169c54e79
Also contains minor fix for 'namespace' and 'environment' vars
usage which are unused otherwise.
Change-Id: Ie479400dfa0d61c89a256d4aafb2c2d184f9b935
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: INT-1213
|
|
* Update docs/submodules/integration.git from branch 'master'
to 98978513564b1f0fbb25d2d3888b7e603956baa1
- Update robot image
Issue-ID: INT-1217
Change-Id: I5d7802def53d986a0bed16151afa806cba96becb
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 7991fb82f45766c3488e66286989ad9a9ac39748
- Fix a bug in DFC CSIT
when mounting a shared volume, the uid:gid is changed automaticlly
which could cause potential unstable.
Change-Id: If6279489ba0ba3d24fdd6893e02d9babf29d7925
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 69311bf8082471be45574c9a99b23e31e606669c
- Updated README files and adaptation of consul/cbs config
Change-Id: I81494f56978a3d0ff06ec0d66968f33f08114103
Issue-ID: DCAEGEN2-1719
Signed-off-by: maximesson <maxime.bonneau@est.tech>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 6a5ec681a93a0ddf55080f164187791ed92578be
- Fix the bug of cli command error when onboard ns
Change-Id: I832a1cbbbf8b882089f941033fdc2acefce7e387
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
- Fix bug of cli command error when onboard vnf
Change-Id: I25ca6c5a2cdf6eaca44cdcdb3f94e55c6bad899a
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
- Fix invalid string error of vnf onboard
Change-Id: I1f0077554db7d37ed33c45cbc68d8fb554339539
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to a3324ab0a92e199b36767f9b13e14a5963e19c60
- SNDC preload change (http to https, 30202 to 30267)
Issue-ID: DOC-542
Signed-off-by: Rene_Robert <rene.robert@orange.com>
Change-Id: Ice1fc5853d9ad31e79ea8e941a8b053589b80a30
|
|
* Update docs/submodules/integration.git from branch 'master'
to 6e7e055e27731b451437aefa336d382f31cbc38c
- Update latest staging portal docker images
update to 2.6.0-STAGING-latest for now to test
Issue-ID: PORTAL-685
Signed-off-by: Welch, Lorraine (lb2391) <lb2391@att.com>
Change-Id: I5a49caa40c05569a1a5fea2f3378c2a9fd2c064f
Signed-off-by: Welch, Lorraine (lb2391) <lb2391@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to e2e071fd218bfb7253b71dacb5c3b500454517b3
- Update SDNC/CCSDK staging versions
Update staging versions of CDS and dgbuilder to 0.6-STAGING-latest
and of SDNC to 1.7-STAGING-latest
Change-Id: I4a2a5f3ecdc2ed6085aa31c9e16fe1352e52dbe1
Issue-ID: SDNC-874
Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to ec8c60c7c969f9fc2cdc98cdfd5c5f0ea85f5f6f
- Integrating DfC to use TLS sidecar container
Change-Id: I111bc5596346db70923645dcfe79af3e639c978c
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 796e8fe4255036b5785a2071ddd6a0240464556a
- Add tls-init-container to simulator
1.replace dr-sim/dr-redir-sim cert/key
2.update mr-sim, make it support https
3.update ftpes cert/key
Change-Id: I7bbde98f352d1e7d7c8775acf3d8af89a6ef7bdc
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 190a2f42b5c0af56b8c8da7e05a90ad3999598d3
- Bump infra components version up
Issue-ID: INT-1231
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I3b883ed67e7c34ddf6d92f7069c859a4496ae31f
|
|
* Update docs/submodules/integration.git from branch 'master'
to 48d1ab0ce03a5554e7354ef77319ca17d26821f5
- Add comment about how to get cluster-ip
Issue-ID: INT-1227
Signed-off-by: songgongjun <gongjun.song@intel.com>
Change-Id: I40a261079330ca00b9eb15d431fb3b7ae4c319cb
|
|
* Update docs/submodules/integration.git from branch 'master'
to c43d1bf4dd915011569ef9e2877517a273cb0476
- Add SO STAGING
Issue-ID: INT-1217
Change-Id: Id19619f999dbe00e8501cdc029a0bf5788efd28f
Signed-off-by: Brian Freeman <bf1936@att.com>
|