diff options
5 files changed, 191 insertions, 28 deletions
diff --git a/docs/sections/guides/infra_guides/oom_infra_base_config_setup.rst b/docs/sections/guides/infra_guides/oom_infra_base_config_setup.rst index f25f4e716c..db8d37ddff 100644 --- a/docs/sections/guides/infra_guides/oom_infra_base_config_setup.rst +++ b/docs/sections/guides/infra_guides/oom_infra_base_config_setup.rst @@ -65,14 +65,14 @@ Validate the installation:: :: NAME STATUS ROLES AGE VERSION - onap-control-1 Ready controlplane,etcd 3h53m v1.27.5 - onap-control-2 Ready controlplane,etcd 3h53m v1.27.5 - onap-k8s-1 Ready worker 3h53m v1.27.5 - onap-k8s-2 Ready worker 3h53m v1.27.5 - onap-k8s-3 Ready worker 3h53m v1.27.5 - onap-k8s-4 Ready worker 3h53m v1.27.5 - onap-k8s-5 Ready worker 3h53m v1.27.5 - onap-k8s-6 Ready worker 3h53m v1.27.5 + onap-control-1 Ready controlplane,etcd 3h53m v1.28.6 + onap-control-2 Ready controlplane,etcd 3h53m v1.28.6 + onap-k8s-1 Ready worker 3h53m v1.28.6 + onap-k8s-2 Ready worker 3h53m v1.28.6 + onap-k8s-3 Ready worker 3h53m v1.28.6 + onap-k8s-4 Ready worker 3h53m v1.28.6 + onap-k8s-5 Ready worker 3h53m v1.28.6 + onap-k8s-6 Ready worker 3h53m v1.28.6 Install & configure helm @@ -249,8 +249,16 @@ Install Istio Basic Platform - Create an override for istiod (e.g. istiod.yaml) to add the oauth2-proxy as external authentication provider and apply some specific config settings + Be aware, that from Istio version 1.21.0 the format of the values.yaml changes. + Additionally a new feature (Native Sidecars) can be enabled, if it is enabled in + Kubernetes (version > 1.28) - .. collapse:: istiod.yaml + .. collapse:: istiod.yaml (version => 1.21) + + .. include:: ../../resources/yaml/istiod-1_21.yaml + :code: yaml + + .. collapse:: istiod.yaml (version < 1.21) .. include:: ../../resources/yaml/istiod.yaml :code: yaml diff --git a/docs/sections/guides/infra_guides/oom_infra_deployment_requirements.rst b/docs/sections/guides/infra_guides/oom_infra_deployment_requirements.rst index 4b2a7528cb..11377235bc 100644 --- a/docs/sections/guides/infra_guides/oom_infra_deployment_requirements.rst +++ b/docs/sections/guides/infra_guides/oom_infra_deployment_requirements.rst @@ -50,7 +50,7 @@ The versions of software that are supported and tested by OOM are as follows: ============== =========== ======= ======== ======== ============= ======== London 1.23.8 3.8.2 1.23.x 20.10.x 1.12.2 0.35.0 Montreal 1.27.5 3.12.3 1.27.x 20.10.x 1.13.2 0.36.1 - New Delhi 1.27.5 3.12.3 1.27.x 20.10.x 1.13.2 0.40.0 + New Delhi 1.28.6 3.13.1 1.28.x 20.10.x 1.14.4 0.41.0 ============== =========== ======= ======== ======== ============= ======== .. table:: OOM Software Requirements (production) @@ -60,7 +60,7 @@ The versions of software that are supported and tested by OOM are as follows: ============== ====== ============ ============== London 1.17.2 v0.6.2 19.0.3-legacy Montreal 1.19.3 v1.0.0 19.0.3-legacy - New Delhi 1.19.3 v1.0.0 22.0.4 + New Delhi 1.21.0 v1.0.0 22.0.4 ============== ====== ============ ============== .. table:: OOM Software Requirements (optional) @@ -70,5 +70,5 @@ The versions of software that are supported and tested by OOM are as follows: ============== ================= ========== ================= London 45.x 1.6.1 Montreal 45.x 1.10.2 0.23.1 - New Delhi 45.x 1.11.0 0.24.0 + New Delhi 45.x 1.16.0 0.28.1 ============== ================= ========== ================= diff --git a/docs/sections/release_notes/release-notes-montreal.rst b/docs/sections/release_notes/release-notes-montreal.rst new file mode 100644 index 0000000000..aa0b84ac07 --- /dev/null +++ b/docs/sections/release_notes/release-notes-montreal.rst @@ -0,0 +1,131 @@ +.. This work is licensed under a Creative Commons Attribution 4.0 + International License. +.. http://creativecommons.org/licenses/by/4.0 +.. (c) ONAP Project and its contributors +.. _release_notes_montreal: + +:orphan: + +************************************* +ONAP Operations Manager Release Notes +************************************* + +Previous Release Notes +====================== + +- :ref:`London <release_notes_london>` +- :ref:`Kohn <release_notes_kohn>` +- :ref:`Jakarta <release_notes_jakarta>` +- :ref:`Istanbul <release_notes_istanbul>` +- :ref:`Honolulu <release_notes_honolulu>` +- :ref:`Guilin <release_notes_guilin>` +- :ref:`Frankfurt <release_notes_frankfurt>` +- :ref:`El Alto <release_notes_elalto>` +- :ref:`Dublin <release_notes_dublin>` +- :ref:`Casablanca <release_notes_casablanca>` +- :ref:`Beijing <release_notes_beijing>` +- :ref:`Amsterdam <release_notes_amsterdam>` + +Abstract +======== + +This document provides the release notes for the Montreal release. + +Summary +======= + + + +Release Data +============ + ++--------------------------------------+--------------------------------------+ +| **Project** | OOM | +| | | ++--------------------------------------+--------------------------------------+ +| **Docker images** | N/A | +| | | ++--------------------------------------+--------------------------------------+ +| **Release designation** | Montreal | +| | | ++--------------------------------------+--------------------------------------+ +| **Release date** | 2023/12/14 | +| | | ++--------------------------------------+--------------------------------------+ + +New features +------------ + +* Introduction of "Production" ONAP setup, including: + + * Besides the Istio Ingress APIs now the support for `Gateway-API`_ + is added to the templates, which includes: + + * TCP Routes + * UDP Routes + +* Update of Helmcharts to use common templates and practices +* Default support for Cassandra 4.x using k8ssandra-operator +* Default support for MariaDB 11.x using mariadb-operator + +**Bug fixes** + +A list of issues resolved in this release can be found here: +https://jira.onap.org/projects/OOM/versions/11501 + +**Known Issues** + +* Components not working under ServiceMesh + + * SO Monitor UI + * Policy UI + +Deliverables +------------ + +Software Deliverables +~~~~~~~~~~~~~~~~~~~~~ + +OOM provides `Helm charts <https://nexus3.onap.org/service/rest/repository/browse/onap-helm-release/>`_ + +Documentation Deliverables +~~~~~~~~~~~~~~~~~~~~~~~~~~ + +- :ref:`Project Description <oom_project_description>` - a guide for developers of OOM +- :ref:`oom_dev_guide` - a guide for developers of OOM +- :ref:`oom_infra_guide` - a guide for those setting up the environments that OOM will use +- :ref:`oom_deploy_guide` - a guide for those deploying OOM on an existing cloud +- :ref:`oom_user_guide` - a guide for operators of an OOM instance +- :ref:`oom_access_info_guide` - a guide for operators who require access to OOM applications + +Known Limitations, Issues and Workarounds +========================================= + +Known Vulnerabilities +--------------------- + + +Workarounds +----------- + +Security Notes +-------------- + +**Fixed Security Issues** + +References +========== + +For more information on the ONAP Istanbul release, please see: + +#. `ONAP Home Page`_ +#. `ONAP Documentation`_ +#. `ONAP Release Downloads`_ +#. `ONAP Wiki Page`_ + + +.. _`ONAP Home Page`: https://www.onap.org +.. _`ONAP Wiki Page`: https://wiki.onap.org +.. _`ONAP Documentation`: https://docs.onap.org +.. _`ONAP Release Downloads`: https://git.onap.org +.. _`Gateway-API`: https://istio.io/latest/docs/tasks/traffic-management/ingress/gateway-api/ diff --git a/docs/sections/release_notes/release-notes.rst b/docs/sections/release_notes/release-notes.rst index 0df9483e95..879f16fb4c 100644 --- a/docs/sections/release_notes/release-notes.rst +++ b/docs/sections/release_notes/release-notes.rst @@ -11,6 +11,7 @@ ONAP Operations Manager Release Notes Previous Release Notes ====================== +- :ref:`Montreal <release_notes_montreal>` - :ref:`London <release_notes_london>` - :ref:`Kohn <release_notes_kohn>` - :ref:`Jakarta <release_notes_jakarta>` @@ -27,7 +28,7 @@ Previous Release Notes Abstract ======== -This document provides the release notes for the Montreal release. +This document provides the release notes for the New Delhi release. Summary ======= @@ -44,39 +45,41 @@ Release Data | **Docker images** | N/A | | | | +--------------------------------------+--------------------------------------+ -| **Release designation** | Montreal | +| **Release designation** | New Delhi | | | | +--------------------------------------+--------------------------------------+ -| **Release date** | 2023/12/xx | +| **Release date** | 2024/06/13 | | | | +--------------------------------------+--------------------------------------+ New features ------------ -* Introduction of "Production" ONAP setup, including: +* authentication (14.0.0) - add configurable Keycloak Realm and enable Ingress + Interface Authentication and Authorization +* Update the helm common templates (13.2.0) to: - * Besides the Istio Ingress APIs now the support for `Gateway-API`_ - is added to the templates, which includes: + * Support the latest Database Operators: - * TCP Routes - * UDP Routes + * MariaDB-Operator (0.28.1) + * K8ssandra-Operator (v0.16.0) + * Postgres-Operator (CrunchyData) (5.5.0) -* Update of Helmcharts to use common templates and practices -* Default support for Cassandra 4.x using k8ssandra-operator -* Default support for MariaDB 11.x using mariadb-operator +* cassandra (13.1.0) - support for new K8ssandra-Operator +* mariadb-galera (13.1.0) - support for new MariaDB-Operator +* mongodb (14.12.3) - update to latest bitnami chart version +* postgres (13.1.0) - support for new Postgres-Operator +* postgres-init (13.0.1) - support for new Postgres-Operator +* readinessCheck (13.1.0) - added check for "Service" readiness +* serviceAccount (13.0.1) - add default role creation **Bug fixes** A list of issues resolved in this release can be found here: -https://jira.onap.org/projects/OOM/versions/11501 +https://jira.onap.org/projects/OOM/versions/11502 **Known Issues** -* Components not working under ServiceMesh - - * SO Monitor UI - * Policy UI Deliverables ------------ diff --git a/docs/sections/resources/yaml/istiod-1_21.yaml b/docs/sections/resources/yaml/istiod-1_21.yaml new file mode 100644 index 0000000000..d85ec1137f --- /dev/null +++ b/docs/sections/resources/yaml/istiod-1_21.yaml @@ -0,0 +1,21 @@ +defaults: + #global: + #logging: + # level: "default:debug" + meshConfig: + rootNamespace: istio-config + # Controls if sidecar is injected at the front of the container list and blocks the start of the other containers until the proxy is ready + holdApplicationUntilProxyStarts: true + extensionProviders: + - name: oauth2-proxy + envoyExtAuthzHttp: + service: oauth2-proxy.default.svc.cluster.local + port: 80 + timeout: 1.5s + includeHeadersInCheck: ["authorization", "cookie"] + headersToUpstreamOnAllow: ["x-forwarded-access-token", "authorization", "path", "x-auth-request-user", "x-auth-request-email", "x-auth-request-access-token"] + headersToDownstreamOnDeny: ["content-type", "set-cookie"] + pilot: + env: + PILOT_HTTP10: true + ENABLE_NATIVE_SIDECARS: true
\ No newline at end of file |