aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2019-07-08k8s: Relax kublet HTTPS connection requirementPawel Wieczorek2-6/+7
According to kube-apiserver documentation [1] and CIS guideline 1.1.4 option "--kubelet-https=" might be absent in API server configuration. It has secure configuration (being set to "true") by default. [1] https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/ Issue-ID: SECCOM-235 Change-Id: I604cdcace03f65185aab6a0b34d48cfec94277ab Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-08k8s: Make Rancher CLI provisioner configurablePawel Wieczorek1-5/+20
Apparently Linux AMD64 machines are not the only ones used for ONAP development (author meant no harm). Issue-ID: SECCOM-235 Change-Id: Ia78a02fb82dc5752d6b8fd2cef8e6ef583fd3ca6 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-08k8s: Make Rancher CLI provisioner reusablePawel Wieczorek2-9/+14
Having Rancher CLI proves itself useful on development machines as well. Issue-ID: SECCOM-235 Change-Id: I0de3109e1236cf6dc9cbc825342593041dcfdf2c Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-08k8s: Add Rancher CLI to test environmentPawel Wieczorek1-0/+9
Issue-ID: SECCOM-235 Change-Id: I46e2f8d61c3a82613b665fb6d9b57431bb2a1868 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-08k8s: Add virtual environment for testingPawel Wieczorek4-0/+143
This patch adds simplified ONAP deployment environment (Kubernetes cluster managed by Rancher). Its purpose is to provide cluster defaults for inspection without the need to access actual ONAP application deployment. Default node customization scripts were extracted ("tools/get_customization_scripts.sh" run within "tools/imported/" directory) from official documentation [1] and imported here in order not to introduce runtime online dependencies. This environment should probably be migrated in future to more appropriate place like devtool [2] (or at least use the same Vagrant boxes). [1] https://docs.onap.org/en/casablanca/submodules/oom.git/docs/oom_setup_kubernetes_rancher.html [2] https://git.onap.org/integration/devtool Issue-ID: SECCOM-235 Change-Id: I57f9f3caac0e8b391e9ed480f6bebba98e006882 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-08k8s: Validate API server address and port flagsPawel Wieczorek2-2/+37
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections regarding master node configuration are satisfied (1.1.6 and 1.1.7). Issue-ID: SECCOM-235 Change-Id: I5f215a6642b177e85d7e1c70860ba0c7e558ec4e Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-08k8s: Validate API server boolean flagsPawel Wieczorek2-1/+107
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections regarding master node configuration are satisfied (1.1.1 - 1.1.5, 1.1.8, 1.1.9, 1.1.20 and 1.1.23). Issue-ID: SECCOM-235 Change-Id: Ib964b5111b616a891c3963ef9695af660810e8ba Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-08k8s: Add documentation on runtime dependenciesPawel Wieczorek1-0/+12
Issue-ID: SECCOM-235 Change-Id: I370636220151a5755f467055418f866afe11d5d9 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-01Issue-ID: INT-1129Rene_Robert1-37/+74
some changes in usecase description Signed-off-by: Rene_Robert <rene.robert@orange.com> Change-Id: I487b778dd899dc522aacd162e01efc61eafe9c43
2019-06-28Adding document for vfw/edgex use caseAkhila Kishore2-0/+623
Adding the setup instructions for vFW/EdgeX usecases. Removed whitespaces. Issue-ID: MULTICLOUD-692 Signed-off-by: Akhila Kishore <akhila.kishore@intel.com> Change-Id: I87a99ad2fce1a936334145ffe5cbf25e3133d93d
2019-06-28Add BBS installation documentationPérez Caparrós David, INI-INO-ECO-HCT1-2/+232
Detailed installation and configuration steps Issue-ID: DOC-448 Signed-off-by: Pérez Caparrós David, INI-INO-ECO-HCT <David.PerezCaparros@swisscom.com> Change-Id: I12584072cf63a95c057762022753251e2195b571
2019-06-27Decommission java and docker manifestsGary Wu11-886/+10
Issue-ID: INT-1128 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: Id8b3f228f0813a82e871feb57cc865905dff9988
2019-06-27Add integration and oom branch params in deploy.shGary Wu1-7/+22
Issue-ID: INT-1117 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: I47d33ffeeb739a6f6fe3b768ccfd147add1de254
2019-06-27Add a known issue in vCPE docYang Xu1-1/+1
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1127 Change-Id: I3354f5a468c79c83a40550fd8bcb20f9858b37a8
2019-06-26Correct use-case descriptionEric Debeau1-4/+4
Minor editorial corrections Issue-ID: INT-1104 Signed-off-by: Eric Debeau <eric.debeau@orange.com> Change-Id: I1ed77383f9b35226c1b2c40b64b861bbb9be70a1
2019-06-26Update vCPE use case docYang Xu1-22/+45
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1104 Change-Id: I77f6a796dba7e6bfb155ccb1c82281ab31c17446
2019-06-26Clean up vCPE scriptYang Xu8-71/+23
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-847 Change-Id: I1158442cd73c6e0d943e9cc111cb12dae1381d36
2019-06-25update ccvpn release noteyangyanyj1-1/+30
Issue-ID: INT-1123 Change-Id: Ie29dfc7ec8d598d0620a135a174e80ee20d540d9 Signed-off-by: yangyanyj <yangyanyj@chinamobile.com>
2019-06-24k8s: Obtain relevant information from RancherPawel Wieczorek2-0/+95
This patch introduces Rancher queries using its CLI client. It depends on having utility binary located in PATH and providing configuration file prior first use. Issue-ID: SECCOM-235 Change-Id: Idb011e27b4801c5700b4482656463849736298da Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-06-24Update Dublin Integration release notesYang Xu2-3/+3
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1119 Change-Id: I00e6d1354f1ca79f9210e1c53ab309756dd6e742 (cherry picked from commit e3f80591ed1f83df13a5fd4593dafb0160ff2aa2)
2019-06-22Tune deployment performanceGary Wu2-1/+4
Increase number of NFS server threads. Decrease helm deploy delay. Issue-ID: INT-1117 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: I819e9a14eec71cf0fa1c44ab15c52c2df527996e
2019-06-22Remove temporary APPC image overrideGary Wu1-1/+0
Issue-ID: INT-1055 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: Id223251d14aa6d3b6e759eafe95330d005dd3d30
2019-06-21Make /dockerdata-nfs a ZFS volume with compressionGary Wu3-7/+32
Issue-ID: INT-1117 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: I2b5cdb332702a3599b2faa4d180f68decb7a199b
2019-06-21Update ONAP OOM installation docs for DublinGary Wu1-14/+11
Issue-ID: INT-1104 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: Ia3b855e8a3c673b7861cb38469dbc8664d290a53
2019-06-21Rename rancher VM to nfsGary Wu10-133/+84
Issue-ID: INT-1117 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: I97b333d61c2f12036f5a2e864fab160eacfb8b69
2019-06-21Rename wind river lab tenantGary Wu1-1/+1
Issue-ID: INT-1117 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: I4d66a00b38bd2b74902f35c7b4db512beb23352f
2019-06-21Update integration release noteYang Xu2-2/+16
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1104 Change-Id: I05922e8424551e60617dfe9edda251b695fcb5fd
2019-06-21Update CM use case docYang Xu1-68/+243
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1104 Change-Id: I991301886aec371f554eb0f076a9360910ee24d9
2019-06-21Move teardown script to RKE script directoryGary Wu8-134/+139
Also rename various Integration tenants Issue-ID: INT-1117 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: I7422088bdcb9ae8fbbf76bab0517f466d1279df3
2019-06-21Dublin S3P Stability and Resilience Test ResultsGary Wu1-25/+28
Issue-ID: INT-1104 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: Iec987bb6f1f2ca7a41cfea506b3140dc67b476d4
2019-06-21Integration doc for 5G-Configuration Over NETCONFtragait1-0/+34
Issue-ID: INT-895 Signed-off-by: tragait <rahul.tyagi@ericsson.com> Change-Id: Ic16584b15579e1e3976a9dff69d9cd5888576072 Signed-off-by: tragait <rahul.tyagi@ericsson.com>
2019-06-21Add release notes for oparent dublinGary Wu1-2/+11
Issue-ID: INT-1104 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: I0f26c9a01b7bce373325f2472e67f1ba5187b99c
2019-06-21Remove vCPE with TOSCA from usecase listYang Xu1-2/+0
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1104 Change-Id: Ia72ffa9e13ef62fea8a23da1ec4a2a757a11fabc
2019-06-20update AAF for Dublin/ElAltoInstrumental2-34/+34
Issue-ID: AAF-854 Change-Id: Ie9f5cdb4befe634e3b4932277e396e1eefdd6bb0 Signed-off-by: Instrumental <jonathan.gathman@att.com>
2019-06-20Update docsYang Xu2-2/+4
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1104 Change-Id: I0438f949d211b58c1ffb1361b63f8c5ff0e5eddf
2019-06-20k8s: Add basic structure for validation toolPawel Wieczorek5-0/+58
This patch introduces CLI utility for checking if Kubernetes cluster follows security recommendations. Provided Makefile simplifies setup process by setting appropriate environment variables for the build. Further information can be found in README. Provided symlink allows proper document rendering on VCS hosting site. Issue-ID: SECCOM-235 Change-Id: I4a1337c9834322ee4fd742a9ccb979b9bc505f75 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-06-19Update vFW HPA documentationItohan2-12/+19
Change-Id: I54499946156fa76dc88469b6fea5f26cd5d35e95 Issue-ID: DOC-484 Signed-off-by: Itohan Ukponmwan <itohan.ukponmwan@intel.com>
2019-06-19Enable appc clusteringGary Wu1-2/+3
Temporarily use a SNAPSHOT APPC image until a new image is released. Issue-ID: INT-1055 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: Ic6119621c0b48e20f1f12088edbcac67d9b786a1
2019-06-19Fix bullet list warnings in docs BBSPérez Caparrós David, INI-INO-ECO-HCT1-17/+7
Fix issue "Bullet list ends without a blank line; unexpected unindent." in docs_BBS Issue-ID: DOC-448 Signed-off-by: Pérez Caparrós David, INI-INO-ECO-HCT <David.PerezCaparros@swisscom.com> Change-Id: Ieebf1b5bd89be5163900c9cc0267c8c8d9a931a2
2019-06-19Add doc for IPsec with HPA use caseRuoyu Ying2-0/+810
Add documentation for IPsec with HPA use case. Issue-ID: DOC-484 Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com> Change-Id: Ibcdb383c4582de3e66b60b1b2dbfd454942aa16a
2019-06-19Update docsYang Xu2-25/+41
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1109 Change-Id: I69c90d8152f780e0e438236d3cec4a3ef0fead17
2019-06-19Add script to set vfwcl loop name in consulGary Wu1-0/+31
Issue-ID: INT-1104 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: I719803b68cfff224ccf22f1b92613bf254a452b9
2019-06-18Add BBS doc link to index pagePérez Caparrós David, INI-INO-ECO-HCT1-3/+3
In docs_usecases, link to BBS use case doc file is missing Issue-ID: DOC-448 Signed-off-by: Pérez Caparrós David, INI-INO-ECO-HCT <David.PerezCaparros@swisscom.com> Change-Id: Ie59ce5b5c4af2ab3e75ad345e94a8ca0f7654048
2019-06-18Add BBS use case dev guide to integrationPérez Caparrós David, INI-INO-ECO-HCT3-0/+65
Add BBS use case details and dev guide to integration section in readthedocs Issue-ID: DOC-448 Signed-off-by: Pérez Caparrós David, INI-INO-ECO-HCT <David.PerezCaparros@swisscom.com> Change-Id: I9fc7923842388e4941f4e53433d2f8cb6134caa9
2019-06-18Update OOF-PCI use case docs for dublinReshmasree1-8/+17
Signed-off-by: Reshmasree <reshmasree.chamarthi2@wipro.com> Issue-ID: DOC-483 Change-Id: Ieec26756fb32d7295786b42028de2c33bc4269d7
2019-06-17Fixes for vfwclosedloopGary Wu1-21/+20
Issue-ID: INT-1104 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: Idf175f818ed6af867ed9224fb9270f58f63a2242
2019-06-18update usecase-ui image versionguochuyicmri2-3/+3
Change-Id: Id3a30c2d826fa97e4cd5789d3e6d6bb787b32e43 Issue-ID: USECASEUI-276 Signed-off-by: guochuyicmri <guochuyi@chinamobile.com>
2019-06-17Updates for vfwclosedloopBrian Freeman1-3/+33
Issue-ID: INT-1104 Change-Id: If15291766a61305ac1cd02f812750d688db4e763 Signed-off-by: Brian Freeman <bf1936@att.com>
2019-06-17Disable APPC clustering for 72hr testingGary Wu1-2/+2
Issue-ID: INT-1055 Signed-off-by: Gary Wu <gary.wu@futurewei.com> Change-Id: Id926ae9fe44e66cde45c53958895405910f5e56a
2019-06-17Update vCPE use case docYang Xu1-5/+134
Signed-off-by: Yang Xu <yang.xu@futurewei.com> Issue-ID: INT-1108 Change-Id: I4f137fc044dc036d74c78f209d29c41a666dec59