Age | Commit message (Collapse) | Author | Files | Lines |
|
* Update docs/submodules/oom.git from branch 'master'
to 6e61631cd701db5f31559b7c065ddea3d85bd426
- Merge "Fix yamllint error in info file"
- Fix yamllint error in info file
Each changes item needs its own list
this can be seen in the changed code
Also, remove other repositories.
Each repository in ONAP requires its own info file
and so we cannot include multiple repos in a single
info file
Issue-ID: CIMAN-33
Signed-off-by: Aric Gardner <agardner@linuxfoundation.org>
Change-Id: Id23288f9a5bddd3f0a1f52d56d072ef90b8a8f9b
|
|
* Update docs/submodules/oom.git from branch 'master'
to 6f42bd0de9f69673d1ae24089238004007f5e476
- Merge "[SO] Enable use of Keystone v3"
- [SO] Enable use of Keystone v3
SO can handle keystone v3 but override file must be capable to handle
this.
If openStackKeystoneVersion is set to "KEYSTONE_V3" in
so-catalog-db-adapter config part, SO will be able to use keystone v3
for OpenStack
Issue-ID: OOM-2221
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I14db318d25842a08ef380f6edb708e26dae050ad
|
|
* Update docs/submodules/oom.git from branch 'master'
to 69aebb9de15d8f5a8ee9b457c301944a3b416183
- Update git submodules
* Update kubernetes/aai from branch 'master'
to 23f076495d36081f34a367067918d15fcc5ada8d
- Merge "Add ingress controler support to AAI"
- Add ingress controler support to AAI
Issue-ID: OOM-2171
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Change-Id: I9afdae36aa9afd1f80f88b5bb3a15935f9335a93
|
|
* Update docs/submodules/oom.git from branch 'master'
to 63307ec8c80e82d9763d48f6497940bdcabde404
- Merge "[SDC] Change default access mode for cert PVC"
- [SDC] Change default access mode for cert PVC
sdc-onboarding-be PVC is currently using ReadOnlyMany mode. Unfortunately,
this mode is not well supported.
As this PVC is used only by sdc-onboarding-be pod, we can move to
ReadWriteOnce, which is well supported
Issue-ID: SDC-2549
Issue-ID: OOM-1227
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Icc33d5d04cbdec846dbb1d609d52f0426b91483e
|
|
* Update docs/submodules/oom.git from branch 'master'
to a1f85b8cf2438c8096de910687a4621b94df3165
- Merge "Removed use of vfc-redis from etsicatalog component"
- Removed use of vfc-redis from etsicatalog component
Change-Id: Ie00783e0e55136aa40a8c3cf266ebc486240e308
Issue-ID: MODELING-307
Signed-off-by: hongyuzhao <zhao.hongyu@zte.com.cn>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 1a3678797eae08ff2acd5c02aa25a21be5328d1a
- Merge "[DMaaP MR] Remove "lost+found" in kafka PVC"
- [DMaaP MR] Remove "lost+found" in kafka PVC
When using a storage class, kafka data is set on top of a partition and
then 'lost+found' ext4 folder, which is automatically created, is seen
as a topic but with bad naming.
So we remove this folder in the init script.
Issue-ID: OOM-1227
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I397e3d1f29fce9f6c77423ffa4375daffbd2a256
|
|
* Update docs/submodules/oom.git from branch 'master'
to 4d5d90ebbf6d6d36f6d12803208527f51541957f
- Merge "DNS test server for ingress controller"
- DNS test server for ingress controller
Testing ingress controller based on virtual hosts
requires a lot of entries in the /etc/hosts.
The better way is to create DNS server for testing purposes.
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Issue-ID: OOM-2289
Change-Id: I2ab104c7391e9634972931ac7e79bec5711d2b39
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 00355f15f66bcc32d9d954beb5952c66f980927a
- Merge "[COMMON] fix primary PVC for postgres template"
- [COMMON] fix primary PVC for postgres template
The last line of the template rewrites PVC storage class and thus the
behavior is not the expected one.
This patch removes the faulty (and unecessary) line.
Issue-ID: OOM-1227
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ia0e2f6fbd7d40bbf0de719bbf35f0f0424e1a076
|
|
* Update docs/submodules/oom.git from branch 'master'
to 4eddfbdf9caabe3ce30937d78b1bfe8aad72f8f9
- Merge "[VID] Don't hardcode mariadb-galera password"
- [VID] Don't hardcode mariadb-galera password
Let's use common secret template to generate user credentials for VID
DB and depend on mariadb-galera to generate secure enough root
password.
Issue-ID: OOM-2293
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ib474e202e9e35e6b2959d29648f542a89c87a4e5
|
|
* Update docs/submodules/oom.git from branch 'master'
to b845a69e4a72b5401b13b51b7d9a5f44b31f0293
- Merge "[AAF] Loosen the limits for some AAF Components"
- [AAF] Loosen the limits for some AAF Components
aaf-locate anf aaf-cm limits may have been a bit too stringent.
giving some space to these components
Issue-ID: OOM-2230
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Id295f3e42bd7220144e5990322e9e6043e087e0e
|
|
* Update docs/submodules/oom.git from branch 'master'
to 8c46f98951d2c8abe4a661b193dff5b5721f062a
- Add new committer to INFO.yaml
Updating to include Krzysztof Opasiak as new commiter.
Issue-ID: OOM-1980
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ied757ed38935d87134286e474e67978e849e1fd2
|
|
* Update docs/submodules/oom.git from branch 'master'
to 7d05036254727b7309a85eb85a82eb634085790a
- Merge "Fix external secret name in mariadb-init"
- Fix external secret name in mariadb-init
mariadb-init chart should play nicely with mariadb-galera as it
simplifies migration to common mariadb instance.
Unfortunately after adding the support for common secret template I
didn't pay enough attention to consistent naming convention and
mariadb-galera and mariadb-init chart ended up being incompatible. To
fix that let's just rename the mariadb-init chart config option to
match exactly the one used in mariadb-galera chart.
Issue-ID: OOM-2248
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I621804821292e2bd0b5b1dd3f010629d1cb5471f
|
|
* Update docs/submodules/oom.git from branch 'master'
to 40f25fdbf7f3818946cbe5f5cbd31cf9469cc037
- Merge "Fix the wrong MSB_PROTO env value"
- Fix the wrong MSB_PROTO env value
Issue-ID: MULTICLOUD-978
Signed-off-by: Bin Yang <bin.yang@windriver.com>
Change-Id: I128421b36def6e974cde12093717cfe9e78b5b5f
|
|
* Update docs/submodules/oom.git from branch 'master'
to a0aa40a2c9be7bd95599fa5973d88d981685722f
- Merge "Fix multicloud logging issue"
- Fix multicloud logging issue
Change-Id: Icd3631e329b7834c716fd9299007e1644d139822
Issue-ID: OOM-2130
Signed-off-by: eHanan <eoin.hanan@est.tech>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 8ee574a9419e4a13b627a6d706da58d1ddfdabaa
- Update git submodules
* Update kubernetes/aai from branch 'master'
to 764cd8514707c1630dbfa6792b8d15953d5b9a59
- Use v1.6.4 of resources
Issue-ID: AAI-2796
Change-Id: I865ce2259fe7112c60ca9ab6ab6a6222b20f0527
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to c70bc7e2bb69ee409d78ba433dbff30f2cac04b9
- Pick up new tls init container
Remove unneeded dashboard inputs file
Prepend release name to filebeat configmap name
Issue-ID: DCAEGEN2-917
Issue-ID: DCAEGEN2-1923
Issue-ID: DCAEGEN2-1805
Signed-off-by: Jack Lucas <jflucas@research.att.com>
Change-Id: I53ef20046d7e16c4e0a2defd41c846d91af4ec09
|
|
* Update docs/submodules/oom.git from branch 'master'
to 4e7114252d86f891420318391bcfb6d0f929ed56
- Merge "Make use msb iag with https"
- Make use msb iag with https
Change-Id: I8602f2cbe425a061470e62d2a6fc490904f42256
Issue-ID: VFC-1601
Signed-off-by: yangyan <yangyanyj@chinamobile.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to e661fb39459ddef74def3e1259f9191a5a7386dc
- Merge "Enable underscore in headers in nginx config"
- Enable underscore in headers in nginx config
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Issue-ID: PORTAL-806
Change-Id: I9bd2cc1f01a13d198d705affe3cc56be96dd5ce0
|
|
* Update docs/submodules/oom.git from branch 'master'
to 69de2245d6d24d036cefe77bf381083659b66436
- Merge "These OOM changes are related AAF Integration"
- These OOM changes are related AAF Integration
Here we have the ability to optionally disable AAF integration.
A global variable global.security.aaf.enabled=true
will turn on AAF security. with global.security.aaf.enabled=false
it will use spring.security to ensure backward compatibilty. updated
based on review comments
Issue-ID: SO-2452
Signed-off-by: Ramesh Parthasarathy(rp6768)<ramesh.parthasarathy@att.com>
Change-Id: Ia83622ad681cfd122ee906ccd1654b10b5e31fe4
|
|
* Update docs/submodules/oom.git from branch 'master'
to da11ca1cf371bf25936553f518b0cba2b2e0304f
- Merge "Sync up the properties file with current CDS version."
- Sync up the properties file with current CDS version.
File application.properties needs to be synced from time to time between oom charts and
original CDS code.
Issue-ID: CCSDK-1922
Change-Id: Id2a62ce92e8708b7352ca2d21b248b0887fcb5c8
Signed-off-by: Marek Szwalkiewicz <marek.szwalkiewicz@external.t-mobile.pl>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 7666e28582a01f62080f1c76185fce1b3e91ab14
- Merge "[APPC] Fix APPC health check failure"
- [APPC] Fix APPC health check failure
In commit:
e74ed5cd24d ("[APPC] Don't hardcode mariadb root password")
startOdl.sh script has been updated to take the root password from the
environment variable. Unfortunately there was a typo in variable name
which resulted in using empty string instead of password.
Issue-ID: APPC-1830
Fixes: e74ed5cd24d ("[APPC] Don't hardcode mariadb root password")
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I537e3e24ee4bbbc20d5ebc07dddd9f0d3cbe26d8
|
|
* Update docs/submodules/oom.git from branch 'master'
to d0712e374891dc161d44403a98d4ec999f06541f
- Update git submodules
* Update kubernetes/robot from branch 'master'
to 591bfdea4f1d833abee3c7e60f084da546d9082a
- Create INFO.yaml for testsuite/oom
same contributors than testsuite
Issue-ID: INT-1386
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I37465c46dd5b025cf284157df4a12b140eb9d487
|
|
* Update docs/submodules/oom.git from branch 'master'
to a8d9663f1e84d021f5a1be309aabd3f13cb8c91d
- Merge "Bump dmaap-dr image versions"
- Bump dmaap-dr image versions
# Also, need to add ready check for aaf-cm
Change-Id: I757f56f5eaa79c1cbecec43aeb99f2701afd7fae
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1195
|
|
* Update docs/submodules/oom.git from branch 'master'
to e383b3255e8c26f76d97dc33214c1e4f25c6aa6f
- [NBI] Don't hardcode mariadb-galera password
Let's use common secret template to generate user credentials for NBI
DB and depend on mariadb-galera to generate secure enough root
password.
BTW.
Don't be surprised for now mariadb-galera has a hardcoded root
password but as soon as we move all charts that use it to common
secret template it will be auto generated.
Issue-ID: OOM-2291
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I5d16f6c26aa63a46db98ba3dab3a76267b4049f1
|
|
* Update docs/submodules/oom.git from branch 'master'
to 0c458968744127785300aa32345b64be882f93bb
- [COMMON] Remove pgpool
It seems that pgpool is never thus there is no need to spend
time moving it to common secret template
Issue-ID: OOM-2250
Change-Id: I237f9e01cec80bd47ff47c7eb4db282471cfad07
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to f1f945b51303ad1ace8c2268b0a0f39bcb549d0b
- [COMMON] Use common secret template in postgres
Use common secret template for storing DB credentials
Issue-ID: OOM-2250
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ic640bba21a368cf3dd7d3a712abd13907b86a217
|
|
* Update docs/submodules/oom.git from branch 'master'
to ac651828821791f9475d997e1f55658b3662c184
- Merge "[COMMON] Share deployment configuration in Postgres"
- [COMMON] Share deployment configuration in Postgres
When I did diff between deployment-primary and deployment-replica it
turned out that this is pretty much the same file apart from primary
and replica words.
To avoid making the same changes in both files, let's just introduce a
template that can be included with parameter.
Issue-ID: OOM-2246
Change-Id: Ia13b993b9f23008d6be6b3d0e8b745446048de4e
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 7247de21ba24468145defa6e03b799e12d24eec7
- Merge "[OOF] fix secret names for mariadb-galera"
- [OOF] fix secret names for mariadb-galera
It looks like AAF issues masked my real mistakes of letting
some of oof services failing because of bad secret names.
Let's fix that quickly by just setting them to the corrent names
temporarly as later oof will be ported to use common secret template
anyway.
Issue-ID: OOM-2053
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I9de1804dbd5399df25a3ef98354f41d39d073bf7
|
|
* Update docs/submodules/oom.git from branch 'master'
to 069a2274c2c108c201872e612a4dad22be397c98
- Merge "update DMaaP MR docker image version to 1.1.17"
- update DMaaP MR docker image version to 1.1.17
Issue-ID: DMAAP-1356
Change-Id: Ia4e662a284270a1cbd369738f336fe4be1f5dae6
Signed-off-by: su622b <su622b@att.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to d8f3b8c97a44c06b6e3bd34b6ce1528e2c18be6d
- Update git submodules
* Update kubernetes/robot from branch 'master'
to df719f4a3e63cff0d5d832945f0b8ba18230635c
- [ONAP-wide] Replace .Release.Name with common.release
ONAP is too big to be deployed using helm install so we need to
use a custom helm plugin helm deploy. This script deloys onap
component by component instead of deploying evrything at
once. Unfortunately this script also modifies the helm release by
appending component name to it.
As a result of this behavior our objects are called for example:
onap-mariadb-galera-mariadb-galera-0
instead of just being called onap-mariadb-galera-0.
This patch simplifies this naming convention by replacing all direct
usages of .Release.Name with common.release macro which strips the
component specific part from the release name.
Issue-ID: OOM-2275
Change-Id: I3384bf30c663764339b0b41527ca4eb7168f0d49
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 39180c61bcbd8785c84a1f9fd8ff30a6dc594e5d
- Merge "[COMMON] Create templates for services and PV"
- [COMMON] Create templates for services and PV
Proposition of common templates to make service declaration and PV
declaration consistent accross OOM.
Propositions of templates for sub parties of resource definitions
such as metadatas, selector and containerPorts.
I've also made an example with cassandra.
Change-Id: I8b8aa8eb61dafba75e89add1979114a0eefce243
Issue-ID: OOM-1971
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 0ccdd6c9f20793ae46d0b39650d314e01ddec908
- Removing pass_enc_key from DMaaP prov props
# Also adding AAF ready check for dr-node
Change-Id: I7e6fc29a7f5607cc168f9fd61642a40a9185c55b
Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Issue-ID: DMAAP-1367
|
|
* Update docs/submodules/oom.git from branch 'master'
to 00fd764cb5bdfd020e05a2391639857f6181f0cb
- Merge "Enable multicloud openstack https endpoints"
- Enable multicloud openstack https endpoints
Make use of msb iag with https as well
Issue-ID: MULTICLOUD-978
Signed-off-by: Bin Yang <bin.yang@windriver.com>
Change-Id: I79c988e2ac13f1c11be8ca5ac9ccd44c21418cb4
|
|
* Update docs/submodules/oom.git from branch 'master'
to d622ece51e323fe4586a85d81bf014bfa61bca40
- Merge "Fix problem with wrong volume mount names"
- Fix problem with wrong volume mount names
Issue-ID: DMAAP-1378
Signed-off-by: Marcin Przybysz <marcin.przybysz@nokia.com>
Change-Id: Ibac712760dca757475e57129cc1857be5c1086e0
|
|
* Update docs/submodules/oom.git from branch 'master'
to 0f3e13456f6a311786d29e7a2a560070e3d96e81
- Update git submodules
* Update kubernetes/aai from branch 'master'
to 1c9c9bba658057f6147276fba4f84e7db9117e70
- [ONAP-wide] Replace .Release.Name with common.release
ONAP is too big to be deployed using helm install so we need to
use a custom helm plugin helm deploy. This script deloys onap
component by component instead of deploying evrything at
once. Unfortunately this script also modifies the helm release by
appending component name to it.
As a result of this behavior our objects are called for example:
onap-mariadb-galera-mariadb-galera-0
instead of just being called onap-mariadb-galera-0.
This patch simplifies this naming convention by replacing all direct
usages of .Release.Name with common.release macro which strips the
component specific part from the release name.
Issue-ID: OOM-2275
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I450057f5b4a10842f09665ecccc58e4ed727cd89
|
|
* Update docs/submodules/oom.git from branch 'master'
to a4f3a79f2fc88ef8e50d2cc99c0fae90ec3874f1
- Merge "Revert "Make cassandra service mesh compliant""
- Revert "Make cassandra service mesh compliant"
This reverts commit 239bb3e18494584587ee1a6eb482f022b9e32d44.
Reason for revert: mandatory template functions not merged yet
Issue-ID: OOM-2252
Change-Id: I80444a7103e12aea4568f03ded08e348bba927fb
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 397205f1b895260c37fbb9a328d403a4155fc148
- Merge "Expose multicloud endpoints in https"
- Expose multicloud endpoints in https
Make use of msb iag with https as well
Change-Id: I46320cb7a3012320091b8b802ed8531285b78b45
Issue-ID: MULTICLOUD-978
Signed-off-by: Bin Yang <bin.yang@windriver.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to e458f88788240c0bcf17e7085d5c1af488bc749c
- Merge "Update PRH version to 1.5.0"
- Update PRH version to 1.5.0
Issue-ID: OOM-2281
Signed-off-by: Piotr Wielebski <piotr.wielebski@nokia.com>
Change-Id: I0330b2c239af12f48202062954a623c18ca1ac7f
|
|
* Update docs/submodules/oom.git from branch 'master'
to e328b5616a196dee6db02a89441ac83ed88817dd
- Merge "Add override flag to the ingress template"
- Add override flag to the ingress template
Issue-ID: OOM-2267
Change-Id: I0ee8b3bc35d5f71dda6322b35766b3dec105b9c0
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to f41e2c488b8ec1a5383bfae264012ed6dba17ade
- Merge "redis config optimization"
- redis config optimization
- replication count set to 3
- removing nodeport
Change-Id: Ie3431c59ffdd44f207eddfbc013ab4fc3f6ed5f9
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Issue-ID: DCAEGEN2-1720
Issue-ID: OJSI-187
|
|
* Update docs/submodules/oom.git from branch 'master'
to 296586004fb38f102847935899e58555c0968ec1
- Merge "Update ves collector image"
- Update ves collector image
Issue-ID: OOM-2280
Signed-off-by: Pawel <pawel.kasperkiewicz@nokia.com>
Change-Id: Iaa80eb212ba0c31ffdceb79e776cd92d38b304d6
|
|
* Update docs/submodules/oom.git from branch 'master'
to 284aa85f5b5b3ad1b13f07d6fee3ed163a22eb13
- Merge "[Modeling] Use common secret template for mariadb root password"
- [Modeling] Use common secret template for mariadb root password
Remove hardcoded root password from the modeling chart.
Because of huge number of issues in modeling docker image
(see onap-discuss for details) I don't want to touch it.
That's why I just made an awful hack to concatenate DB
username and password before the entrypoint script.
Please keep in mind that this eliminates only hardcoded
root password but there is plenty of other credentials that
are boiled into container image (DB, SDC, VCF-REDIS(!) etc).
Issue-ID: OOM-2286
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Id85a03ec7f55885b606179d10e8b6528c6cb6947
|
|
* Update docs/submodules/oom.git from branch 'master'
to 239bb3e18494584587ee1a6eb482f022b9e32d44
- [COMMON] Make cassandra service mesh compliant
When service mesh is enabled, cassandra needs to listen to `127.0.0.1`
instead of POD_IP but must broadcast using POD_IP.
Change-Id: If96acd56a092a893f524a69ee83406c9cb70b3e7
Issue-ID: OOM-2252
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 0256e4b2031cec54abd07e7c6745176b83815cb4
- Merge "[Modeling] Move mariadb-galera to etsicatalog"
- [Modeling] Move mariadb-galera to etsicatalog
etsicatalog is the only component inside modeling which use this DB
thus there is no point to keep it outside of this component.
Passwords and other bad stuff is left intentionally as this is just a
first patch for this transition.
Issue-ID: OOM-2286
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I4f592b736a86c7acf9ee43b0f6e136e5f1506847
|
|
* Update docs/submodules/oom.git from branch 'master'
to f37261b53a7d07d6046c6710b5828e70ead678d0
- Merge "[APPC] Don't hardcode mariadb root password"
- [APPC] Don't hardcode mariadb root password
You should never ever assume that secretpassword is a production
ready password for your mariadb-galera instance. Instead let's
just share a secret with our instance of mariadb-galera.
Issue-ID: OOM-2275
Change-Id: I25486ad81a2ec428dbbd379ab3529c84f55acc4b
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 5878b3db688aa32ffa4af2e88ba96eaf68f92871
- Merge "[COMMON] Don't create dummy mysql DB by default in a shared instance"
- [COMMON] Don't create dummy mysql DB by default in a shared instance
When deploying a shared mariadb-galera instance using common chart
a dummy database is created based on the default values n the chart.
This is obviously unnecessary and creates an obviousl security issue.
That's why let's make sure that when we deploy a shared mariadb
instance no dummy databases are created.
Issue-ID: OOM-2053
Change-Id: I1130cb8eb555b15a2d8b365102d69e32259233eb
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 7643b7c45ee95f722f21fc10e9ea19273fd0fdb4
- Merge "[COMMON] Allow to lint chart without master password"
- [COMMON] Allow to lint chart without master password
When you type make in kubernetes directory all charts are linted.
If one of them try to generate password whole linting process
ends with an error because masterPassword has not been provided
and there is no default value for it.
To avoid this issue but still don't provide any default value
whcih would be obviously insecure in this context, let's just
test current release name. If it matches "testRelease" we treat whis
as a special case and use predefined master key.
Security implication:
You should never, ever name your productional deployment "testRelease"
nor use it as a master password.
Issue-ID: OOM-2052
Change-Id: I7a2132e81f6910dfea562e8930c7eacd7aa7a00b
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to 3aa87a5a64a786b56d1c4242062ed1cecc6c6f3d
- Merge "[COMMON] Make network-name-gen use common secrets template"
- [COMMON] Make network-name-gen use common secrets template
For now we use it only for DB secret but in a future also
other secrets should be replaced.
Issue-ID: OOM-2249
Change-Id: Ie6515806c39c6a2cd94be378b5210156b78f4afb
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to c59a59bb4a05ef49132701904635e525d36a2925
- Merge "[COMMON] Provide convenience templates for mariadb secrets"
- [COMMON] Provide convenience templates for mariadb secrets
Usage of plain strings is very fragile especially when you try
to change them. That's why instead of depending on strings let's
just define a few convenience templates to be used in projects
that use mariadb-galera chart.
Issue-ID: OOM-2249
Change-Id: Ib867d34090b06a15ea3898a9524f5e3d04a656c0
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
* Update docs/submodules/oom.git from branch 'master'
to c3cb0527a0400d82668f660bb1126d10dbb77370
- Merge "[COMMON] Expose common.secret.genName template"
- [COMMON] Expose common.secret.genName template
This template used to be for internal use only but it turned out
to be very useful in number of places so let's just expose it.
Issue-ID: OOM-2249
Change-Id: I57cd31681fb5edb4ac95b0b7b2446a364ce826d2
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|