Age | Commit message (Collapse) | Author | Files | Lines |
|
* Update docs/submodules/integration.git from branch 'master'
to 2bbe21f6da8d63a75de0711859e55ab9ea7ad559
- Update INFO.yaml
Signed-off-by: Yang Xu <xuyang11@gmail.com>
Issue-ID: INT-1269
Change-Id: I9f76cdd3b53f9519017da851a59b8c7000334797
|
|
* Update docs/submodules/integration.git from branch 'master'
to 4e74a1e24e15b3db2216fb269a58cfc08e598f63
- k8s: Validate API server certificates and keys
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.22, 1.1.25 -
1.1.26 and 1.1.28).
Issue-ID: SECCOM-235
Change-Id: Ic61a796653dc868d20fe69c3ed508e7fa8ba52db
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 3e602597b036d29f77485f35c1f81a8cdb6f350b
- k8s: Validate API server Certificate Authorities
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.21, 1.1.29
and 1.1.31).
Issue-ID: SECCOM-235
Change-Id: Ia2f55f6962885a7aa878c970a406189902cfab10
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 2055f0878a7841f7d07eda60eac10034c4b22215
- k8s: Validate API server auditing flags
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.16 - 1.1.18).
Issue-ID: SECCOM-235
Change-Id: I27b63e37fc3203cf3574b9e1cdc43333041f2a36
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 6c95c5ca28dd3f48a58dc11cc9c17fd8b4934881
- k8s: Validate API server auditing is enabled
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.15).
Issue-ID: SECCOM-235
Change-Id: Ia1d27ed7a9e439bb0abf4bd8941bdd4573a50bd5
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 1ef8cebe0663ec14d00cd62884fe55060c0b04a2
- k8s: Group tests by flag type
Issue-ID: SECCOM-235
Change-Id: I25ebd2930afec6eb259f0a678fffbf7727eb315b
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to d515af5c7bddbbe3bebf3a6288fb3e43b234719a
- k8s: Validate API server not excluded authorization mode
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.19).
Issue-ID: SECCOM-235
Change-Id: I00c9600fd0d351afb7141a5fa16f348eab67b12d
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to a15076ddf4a07a05e03934939112cf011414d514
- k8s: Validate API server not excluded admission plugins
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.14).
Issue-ID: SECCOM-235
Change-Id: I63c2f8a5b94bfd6c9963805aae85595e6b6ad6d7
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to be56744a2aecf133fcb9972a241847bfcd012e76
- Fix rev level in license
Issue-ID: INT-1266
Change-Id: I822becff87484b79d3e7c744038b55943c1dddcb
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 0c724156389b7ff0947a3217a79d4aca382f2a82
- Updates for ssl sdc
Issue-ID: INT-1265
Change-Id: I64971740c8ae9aee60a06ca1d0e5ff02ccbc9a88
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 7d2784fb08be919121a0d394a7bc61f84de7e44b
- Add mr-sim log to console
Change-Id: I9697360d2ee5b8e95dacdb74a9a1a025a1a45e3c
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
Issue-ID: DCAEGEN2-1702
|
|
* Update docs/submodules/integration.git from branch 'master'
to efd65f9839f7379b590452ed31ab8605102904c3
- k8s: Validate API server included admission plugins
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.11 - 1.1.13,
1.1.24, 1.1.27, 1.1.33 and 1.1.36).
Issue-ID: SECCOM-235
Change-Id: I920bfd42014b8458126be251648f5bf3dcd84c16
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to aeaa5a1f5e57f63dd203db43fb6992ab1728c504
- k8s: Validate API server excluded admission plugins
This patch verifies if CIS Kubernetes Benchmark v1.3.0 section
regarding master node configuration is satisfied (1.1.10).
However, CIS Kubernetes Benchmark v1.3.0 mismatches official
documentation: Kubernetes 1.10+ already provides safe defaults from
security standpoint [1] (ONAP Casablanca uses 1.11).
Deprecated admission control plugin flag has also been validated since
it was still available in Kubernetes provided by Rancher [2].
[1] https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use
[2] https://github.com/rancher/rancher/issues/15064
Issue-ID: SECCOM-235
Change-Id: I0e8fe9f885861f155cb8265df085fa93dbdff6d2
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 0dc16f1f0c60625a1637ee1ec106a4df543dab92
- k8s: Add note on release-specific dependencies
Issue-ID: SECCOM-235
Change-Id: I35d3e3f413542c69718d17ae25f227275270c8cf
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 4b8acc9dff3df76a6fa25f3e2e29fe37ca073749
- Improve description of scale out use case
- Describe the ONAP flows
- Describe SO workflow
- Describe how to obtain a TOSCA template from SDC
Issue-ID: INT-1171
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I901ae1a85becbb549804f8307991cb592a251d6d
|
|
* Update docs/submodules/integration.git from branch 'master'
to 97919e81b8721ae451d3c18d6b5b16ea3b4566f3
- Fix DCAE cleanup process
Issue-ID: INT-479
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I360d9887842ac8e86e3a52f7a549367dc63ccb7d
|
|
* Update docs/submodules/integration.git from branch 'master'
to 00a07150311b6f6a8cc65360aa478d1a0fc20591
- Add sdc keyspaces and longer timeout
Issue-ID: INT-1244
Change-Id: I5bc0f4e02ac3d2d8df867f76327e588353c76da8
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 048e08954b756a4e18a7d665b744b477ec03f2f6
- Modified vFW DT Use case description
Description of policy configuration and typos fixed
Change-Id: Ib11df95b79987b85c15452d74a5644c152dcbfde
Signed-off-by: Lukasz Rajewski <lukasz.rajewski@orange.com>
Issue-ID: INT-751
|
|
* Update docs/submodules/integration.git from branch 'master'
to 0ca3d400f25810df7b1eb811dc529e0d1231a184
- Refactor healthcheck-k8s.py
Error reporting was improved by returning actual
error message from subprocess call to 'kubectl' command.
Code readability was improved by defining a dictionary
of endpoint names to check and their IPs.
Unsecure 'shell=True' property in Popen constructor for
kubectl command in SDNC DB was removed and command string
itself sanitized.
Overall code readability was improved by reusing common
commands in a loop.
Change-Id: I19f8f71e27196bb55a9be3d58cd0885ceba3af0c
Issue-ID: TEST-213
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to bfeeb24819035523222149d4fffdf9f7de363fc2
- Fix mispelled routine name in vcpe scripts
headbridge -> heatbridge
Change-Id: I49cc3af80b74a9d03612625be2a35e039e6d28e1
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: DOC-549
|
|
* Update docs/submodules/integration.git from branch 'master'
to 863af9a6582448560ca3d56852056658d0da16eb
- Remove hardcoded SDNC pod name in vcpe scripts
Sdnc pod name is set as a property in VcpeCommon
class and it should be used across the script.
Also removed hardcoded public net prefix in
get_pod_node_public_ip and use class property
where it's assigned.
Change-Id: I0308c808a764ff114fc43591aed34d9695207fe5
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-212
|
|
* Update docs/submodules/integration.git from branch 'master'
to 63929cfc099d8a39bf9854dd7fbb1f32490e1147
- Fixed Bugs in HPA automtion script
Signed-off-by: Itohan Ukponmwan <itohan.ukponmwan@intel.com>
Issue-ID: INT-1137
Change-Id: I89fefb02d7d58453d490499716c581cb66895b59
|
|
* Update docs/submodules/integration.git from branch 'master'
to 0b06f78094bf11112f57d32d741e349108c34042
- Better specifying parts supposed to be changed
Following params are needed minimum required to be changed or
cross-checked when vCPE is tried in different lab
Change-Id: I911acc682560c9a727d2e14ae1d4a22206d6e6f8
Issue-ID: TEST-208
Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to f1d0a8be232f7b6a4076acbe32dab8e15856c41e
- Add remarks related to Openstack's port security on vCPE
Extended anti-spoofing related notes with some hints on
dealing with Neutron's Port Security Extension Driver
which in some cases may prevent VNFs to function properly.
Change-Id: Icf4f44b8cbcaa70621bf21d5b72ff552be80d4e2
Issue-ID: DOC-549
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 73b02ed6a0c8c8942f2740034d6a2546a6551932
- Improve external_net_addr property description in vCPE scripts
Change-Id: Ie06109bb5c62d4132a5db8c6cfeb9d4c297d05a5
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: TEST-208
|
|
* Update docs/submodules/integration.git from branch 'master'
to a44882022c88882be472cfac49d53c17b4a25feb
- Deploy CDS in integration-override
Issue-ID: OOM-2085
Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
Change-Id: I324b58868286971c93a54ae269517e20b954d759
|
|
* Update docs/submodules/integration.git from branch 'master'
to 7a008fd29da0f41b8d74bac9f965f9acc272eecc
- Adding hint regarding dhcp anti-spoofing for vCPE
Adding instructions for bypassing DHCP anti-spoofing rules
preventing vCPE to work.
Change-Id: Ic0f92a40a41e5e20dc43c360e429baba44a46fa1
Issue-ID: DOC-549
Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to dd95f0285f8a986498e3b6146c16d23e09ab4490
- Fix the error of hpa when create ns
Change-Id: I6000c83a3a265a185dad8ac8ff90388df88850dd
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 4baa51c89bd56894646458273a62bf3b2963b298
- Update healthcheck-k8s script synopsis in vCPE manual
This reflects changes made in regard of input parameters
done in Change-Id: Ib6e2875f351f095bd64acd706a6060e169c54e79
Also contains minor fix for 'namespace' and 'environment' vars
usage which are unused otherwise.
Change-Id: Ie479400dfa0d61c89a256d4aafb2c2d184f9b935
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Issue-ID: INT-1213
|
|
* Update docs/submodules/integration.git from branch 'master'
to 98978513564b1f0fbb25d2d3888b7e603956baa1
- Update robot image
Issue-ID: INT-1217
Change-Id: I5d7802def53d986a0bed16151afa806cba96becb
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 7991fb82f45766c3488e66286989ad9a9ac39748
- Fix a bug in DFC CSIT
when mounting a shared volume, the uid:gid is changed automaticlly
which could cause potential unstable.
Change-Id: If6279489ba0ba3d24fdd6893e02d9babf29d7925
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 69311bf8082471be45574c9a99b23e31e606669c
- Updated README files and adaptation of consul/cbs config
Change-Id: I81494f56978a3d0ff06ec0d66968f33f08114103
Issue-ID: DCAEGEN2-1719
Signed-off-by: maximesson <maxime.bonneau@est.tech>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 6a5ec681a93a0ddf55080f164187791ed92578be
- Fix the bug of cli command error when onboard ns
Change-Id: I832a1cbbbf8b882089f941033fdc2acefce7e387
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
- Fix bug of cli command error when onboard vnf
Change-Id: I25ca6c5a2cdf6eaca44cdcdb3f94e55c6bad899a
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
- Fix invalid string error of vnf onboard
Change-Id: I1f0077554db7d37ed33c45cbc68d8fb554339539
Issue-ID: INT-1239
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to a3324ab0a92e199b36767f9b13e14a5963e19c60
- SNDC preload change (http to https, 30202 to 30267)
Issue-ID: DOC-542
Signed-off-by: Rene_Robert <rene.robert@orange.com>
Change-Id: Ice1fc5853d9ad31e79ea8e941a8b053589b80a30
|
|
* Update docs/submodules/integration.git from branch 'master'
to 6e7e055e27731b451437aefa336d382f31cbc38c
- Update latest staging portal docker images
update to 2.6.0-STAGING-latest for now to test
Issue-ID: PORTAL-685
Signed-off-by: Welch, Lorraine (lb2391) <lb2391@att.com>
Change-Id: I5a49caa40c05569a1a5fea2f3378c2a9fd2c064f
Signed-off-by: Welch, Lorraine (lb2391) <lb2391@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to e2e071fd218bfb7253b71dacb5c3b500454517b3
- Update SDNC/CCSDK staging versions
Update staging versions of CDS and dgbuilder to 0.6-STAGING-latest
and of SDNC to 1.7-STAGING-latest
Change-Id: I4a2a5f3ecdc2ed6085aa31c9e16fe1352e52dbe1
Issue-ID: SDNC-874
Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to ec8c60c7c969f9fc2cdc98cdfd5c5f0ea85f5f6f
- Integrating DfC to use TLS sidecar container
Change-Id: I111bc5596346db70923645dcfe79af3e639c978c
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 796e8fe4255036b5785a2071ddd6a0240464556a
- Add tls-init-container to simulator
1.replace dr-sim/dr-redir-sim cert/key
2.update mr-sim, make it support https
3.update ftpes cert/key
Change-Id: I7bbde98f352d1e7d7c8775acf3d8af89a6ef7bdc
Issue-ID: DCAEGEN2-1702
Signed-off-by: ecaiyanlinux <martin.c.yan@est.tech>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 190a2f42b5c0af56b8c8da7e05a90ad3999598d3
- Bump infra components version up
Issue-ID: INT-1231
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: I3b883ed67e7c34ddf6d92f7069c859a4496ae31f
|
|
* Update docs/submodules/integration.git from branch 'master'
to 48d1ab0ce03a5554e7354ef77319ca17d26821f5
- Add comment about how to get cluster-ip
Issue-ID: INT-1227
Signed-off-by: songgongjun <gongjun.song@intel.com>
Change-Id: I40a261079330ca00b9eb15d431fb3b7ae4c319cb
|
|
* Update docs/submodules/integration.git from branch 'master'
to c43d1bf4dd915011569ef9e2877517a273cb0476
- Add SO STAGING
Issue-ID: INT-1217
Change-Id: Id19619f999dbe00e8501cdc029a0bf5788efd28f
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to eac325e0847a395aeb928689fa1dbca516864c62
- Add staging image override
Issue-ID: INT-1217
Change-Id: I3b4f83552856d8551bba4787899d8901845fc4e6
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 48d30546f897c3980186b886fa0635ca47bc500e
- Ingest onap-lab-ci jjb's
Issue-ID: INT-1215
Change-Id: I448fb7a147daa26d760df6c83fef75aa69f05879
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 7138060f1d84cf233a56e72403ca19113a553a95
- Fix doc nit in Robot section
Issue-ID: DOC-534
Change-Id: Ibd4856a1b75d75fe786c7aa1d5337fa7972387a0
Signed-off-by: umry8364 <morgan.richomme@orange.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 995fd6e9bb0368ebbf87f38bd207c4a818443991
- Making environment name configurable in vcpe healthcheck
Improving handling of arguments in healthcheck-k8s.py,
making environment name configurable.
Issue-ID: INT-1213
Change-Id: Ib6e2875f351f095bd64acd706a6060e169c54e79
Signed-off-by: Michal Ptacek <m.ptacek@partner.samsung.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to 1d313be98083464b7674a54d5e1f93cad44d4417
- Add a section on Robot in the doc
Issue-ID: DOC-534
Change-Id: I62be1a4b8eac385015dac519023db4fb7e6bd4dd
Signed-off-by: umry8364 <morgan.richomme@orange.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to bad325eb02edc5ac00e45d15cc9a3f9dcf5aadc5
- Make cleanup script more generic
- Fix usage instructions
- Correct wrong input sequence
Issue-ID: INT-1073
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: Ic01eb302d92d893d17eb71a9341be514cb12dc3f
|
|
* Update docs/submodules/integration.git from branch 'master'
to c80274e413a8bc8a47a831ad79d16f801dfc5af2
- Add preload description to scale out doc
Issue-ID: INT-1171
Signed-off-by: Marco Platania <platania@research.att.com>
Change-Id: Ia6f7d8276b720bdf0ff1f71d5f1ba66535283751
|
|
* Update docs/submodules/integration.git from branch 'master'
to 6caf15bc6aaac7d746c6f78b1b25b85f476e253d
- add -n onap and job to cleanup
Issue-ID: INT-1204
Change-Id: I907bb48c2eee62d9448c99a49e4446771113ceff
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update docs/submodules/integration.git from branch 'master'
to fa357dfc37bb5a71689a8390a287f7ec74a3fdd9
- Simulator integration for CSIT of generalized DfC
Issue-ID: DCAEGEN2-1719
Change-Id: I963cfaef30bc4e85d76fecddd310f091e8c00bd0
Signed-off-by: TamasBakai <tamas.bakai@est.tech>
|