summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2020-01-23[SDC] Change default access mode for cert PVCSylvain Desbureaux1-1/+1
sdc-onboarding-be PVC is currently using ReadOnlyMany mode. Unfortunately, this mode is not well supported. As this PVC is used only by sdc-onboarding-be pod, we can move to ReadWriteOnce, which is well supported Issue-ID: SDC-2549 Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Icc33d5d04cbdec846dbb1d609d52f0426b91483e
2020-01-22Update git submodulesSylvain Desbureaux1-0/+0
* Update kubernetes/robot from branch 'master' to 4bd799e5dbcbf2131a685bf73319e962ace86f5c - Move Storage access to RWO Today when deploying Robot with OOM, the PersistentVolumeClaim needs the "ReadWriteMany" (or "RWX") capability. According to Kubernetes Documentation (https://kubernetes.io/docs/concepts/storage/persistent-volumes/#access-modes), ReadWriteMany stands for "the volume can be mounted as read-write by many nodes". That means that a particular PVC needs to be read and written from many pods. That also means that your code takes that into account and do the work to avoid write at the same place at the same time. An issue on RWX mode is that most "official" storage driver from Kubernetes doesn't support it (13 over the 19 drivers doesn't support it, espacially OpenStack, Amazon and Google storage classes). Robot PVC is used only for one Robot instance. Thus we don't need RWX. Issue-ID: INT-1230 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I300e34a9d4be40b36153812d2a99c458cae6b2c9
2020-01-22Merge "aaf auto cert generation"Sylvain Desbureaux6-3/+108
2020-01-21aaf auto cert generationAgarwal, Ruchira (ra1926)6-3/+108
Add support for AAF init container for config and cert generation Issue-ID: SDNC-755 Signed-off-by: Agarwal, Ruchira (ra1926) <ra1926@att.com> Change-Id: I06ee7921b6dbb1b4b9ca64cf276a374256af3a45 Signed-off-by: Agarwal, Ruchira (ra1926) <ra1926@att.com>
2020-01-21Merge "Add CDS application properties for custom headers for aai calls"Sylvain Desbureaux1-0/+3
2020-01-21Merge "[COMMON] Improve mariadb-init job script"Sylvain Desbureaux2-17/+26
2020-01-21Merge "Update SO-VNFM-Adapter override.yaml for ETSI"Sylvain Desbureaux2-1/+10
2020-01-20Merge "[COMMON] Use deployment for postgresql"Mike Elliott36-9/+1894
2020-01-20Update git submodulesDaniel Rose1-0/+0
* Update kubernetes/robot from branch 'master' to 80a8b8c11d94af39ed26701dc10f2d3fc9e9a042 - Merge "Add ingress controler support to ROBOT" - Add ingress controler support to ROBOT Issue-ID: OOM-2186 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Change-Id: Id6b6f6d1a5d9ea83f73b914509098f7711a6418a
2020-01-17Update git submodulesJames Forsyth1-0/+0
* Update kubernetes/aai from branch 'master' to c8663688eb2755ca5adc4f570c7acf76b6f9a077 - Merge "Remove the usage of uuidv4 since it was causing the deployment to change at every "helm deploy" causing AAI ha proxy pod to restart and cause AAI outage." - Remove the usage of uuidv4 since it was causing the deployment to change at every "helm deploy" causing AAI ha proxy pod to restart and cause AAI outage. Issue-ID: OOM-2226 Signed-off-by: Sebastien Premont-Tendland <sebastien.premont@bell.ca> Change-Id: I03aa47240251fe182ecd841a99a9b99a20c88d65
2020-01-17Update git submodulesrajendrajaiswal1-0/+0
* Update kubernetes/robot from branch 'master' to ff678657c0fa534840d063131432e1994829f660 - Update DCAE username and password Change-Id: I575be45bbbd2c53a897eac87f303e45cc2fce976 Issue-ID: INT-1375 Signed-off-by: rajendrajaiswal <rajendra.jaiswal@ericsson.com>
2020-01-16OOM-2261 readiness-check does not track DaemonSetdfx19711-1/+17
Issue-ID: OOM-2261 Signed-off-by: Avi Ziv<avi.ziv@amdocs.com> Change-Id: I7f220f8b6b64165c33ed8d707834091240136199 Signed-off-by: Avi Ziv<avi.ziv@amdocs.com> Change-Id: I7f220f8b6b64165c33ed8d707834091240136199
2020-01-15Merge "Add ingress controler support to APPC"Sylvain Desbureaux4-0/+14
2020-01-15Update SO-VNFM-Adapter override.yaml for ETSIrope2522-1/+10
Change-Id: I6b99ccf9bd50d2ec50693df9d4122417b22bcf7a Issue-ID: SO-2575 Signed-off-by: rope252 <gareth.roper@est.tech>
2020-01-13[Contrib] Force version on AWXSylvain Desbureaux1-3/+3
As latest are buggy Change-Id: I8bad9075bc7f4cbcb4bd8274bfbef3d24b15f843 Issue-ID: OOM-2260 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-01-13Update git submodulesHarish Venkata Kajur1-0/+0
* Update kubernetes/aai from branch 'master' to d801a6ee395220b11bfac773c3111489282e735c - Use the frankfurt release data router image Issue-ID: AAI-2727 Change-Id: I85fc2b830156e913abc845b91348990ff2127b20 Signed-off-by: Harish Venkata Kajur <vk250x@att.com>
2020-01-13[COMMON] Improve mariadb-init job scriptKrzysztof Opasiak2-17/+26
Replace two sets of commands with a simple loop. Issue-ID: OOM-2248 Change-Id: I83a748cdad256e7206310d45a987530b4acc621b Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-01-12Merge "VID: Update to version 6.0.1"Sylvain Desbureaux1-1/+1
2020-01-10Merge "[DMaaP] Wait for AAF locate before AAF config"Mike Elliott1-0/+14
2020-01-10Merge "[POMBA] Use global storage templates for PVC"Mike Elliott8-37/+158
2020-01-09VID: Update to version 6.0.1Ittay Stern1-1/+1
Release 6.0.1 supports the current OOM chart setup (without VID_KEYSTORE_PASSWORD workaround). Issue-ID: VID-650 Issue-ID: VID-716 Change-Id: Ie326a9b0cc5c892f815470384b92938ab2312c62 Signed-off-by: Ittay Stern <ittay.stern@att.com>
2020-01-08Add CDS application properties for custom headers for aai callsJozsef Csongvai1-0/+3
Issue-ID: CCSDK-2020 Signed-off-by: Jozsef Csongvai <jozsef.csongvai@bell.ca> Change-Id: Ifebfdaef0907ce441e567d1ff1fc105e0be62243
2020-01-08Enabling logback file to be loaded using configmap for policy componentsa.sreekumar5-6/+10
Change-Id: Ic73ad605ac3aca689221afed258eb3673398e425 Issue-ID: POLICY-2308 Signed-off-by: a.sreekumar <ajith.sreekumar@est.tech>
2020-01-07Merge changes I78e22429,Ic101f384,I8dd4128bSylvain Desbureaux8-38/+307
* changes: Use common secret template in mariadb-galera Improve common secret template Add secret template to common templates
2020-01-07Merge "Update Validation topic passwords for obfuscation"Sylvain Desbureaux3-3/+3
2020-01-07Merge "Fix multicloud log message output issue"Sylvain Desbureaux4-4/+4
2020-01-03ignore tables case in policy galera mariadbjhh1-0/+3
For compatibility reasons with the legacy pap, console, brmsgw and pdp-x. Issue-ID: POLICY-2320 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I4fa05e1862acccecb468045a5ff58a84d92b1c26
2019-12-27[DMaaP] Wait for AAF locate before AAF configSylvain Desbureaux1-0/+14
AAF config needs to have aaf locate service up and running in order to work properly (if not, it won't really crash but won't have done the real work). As per https://kubernetes.io/docs/concepts/workloads/pods/init-containers/#understanding-init-containers, "Each init container must complete must complete successfully before the next one starts". Adding a wait for readiness container before aaf config init containers should then do the job. Change-Id: Ida047728e4f14320ada8052c707b458450f4923b Issue-ID: DMAAP-1362 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-12-21Use common secret template in mariadb-galeraKrzysztof Opasiak7-38/+31
Instead of defining the secret in some custom way let's use the common template (common.secret). To avoid some issues in ONAP components that depend on this chart let's do not remove for now the default username and password. We will do this when all services properly utylize secrets to store mariadb credentials. Issue-ID: OOM-2053 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I78e224299cccd9632192ee03a45cd077e6f0906f
2019-12-18Merge "Give user link to submodule instructions"Borislav Glozman1-3/+16
2019-12-18Give user link to submodule instructionsUbuntu1-3/+16
Issue-ID: OOM-2245 Signed-off-by: Ubuntu <dgl@research.att.com> Change-Id: Ie5e63a847904c67be1804e97afac8b2a058685a6 Signed-off-by: Ubuntu <dgl@research.att.com>
2019-12-18Merge "[DMaaP] Use global storage templates for PVC"Borislav Glozman12-158/+236
2019-12-18Merge "VID: Remove VID_KEYSTORE_PASSWORD workaround"Borislav Glozman1-2/+0
2019-12-18Merge "[SDNC] Use global storage templates for PVC"Borislav Glozman8-142/+189
2019-12-18Update Validation topic passwords for obfuscationLeonard, Mark (ml401d)3-3/+3
Change the dummy password values to OBF: so that the properties files will load correctly at application start-up. Change-Id: I1903026ca57db460c41163e1f7dc42a02fd3c2e2 Issue-ID: AAI-2110 Signed-off-by: Leonard, Mark (ml401d) <ml401d@att.com>
2019-12-17Merge "Enable Cassandra for AAI in minimal ONAP environment"Sylvain Desbureaux1-4/+4
2019-12-17Merge "Secure FE communications to the workflow backend"Sylvain Desbureaux11-87/+71
2019-12-17Merge "Remove old nginx configurtion from the SDC"Sylvain Desbureaux1-1/+0
2019-12-17Remove old nginx configurtion from the SDCLucjan Bryndza1-1/+0
Remove not longer suported and incompatibile option from the SDC nginx ingress configuration Issue-ID: OOM-2187 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Change-Id: I5bddbc8400569cc8a58c48cd15ca00991336e1c8
2019-12-17[COMMON] Use deployment for postgresqlSylvain Desbureaux36-9/+1894
Instead of statefulset + inner work in the container, use deployments in order to be more reliable Change-Id: Icf4fe1303ae3489c822558e28bb08b69af2d4970 Issue-ID: OOM-2234 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-12-17Merge "VID logging adjustments"Sylvain Desbureaux1-299/+386
2019-12-17Secure FE communications to the workflow backendIlanaP11-87/+71
Update of the workflow fe and be charts to secure the communications and to start the backend server is https mode with a secured connection to SDC Issue-ID: OOM-1954 Signed-off-by: IlanaP <ilanap@amdocs.com> Change-Id: Ia3c4c714e317b8f8b6b4ee9245daa50eea50275f Signed-off-by: IlanaP <ilanap@amdocs.com>
2019-12-16Improve common secret templateKrzysztof Opasiak1-15/+248
Improve common secret template by adding: - ability to generate secrets if they are not provided - ability to fail the deployment if marked secret is not provided - support for using already existing secret instead of creating a new one Issue-ID: OOM-2053 Change-Id: Ic101f384f7c767702f646eb0e879ec80bf9a6334 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2019-12-16Add secret template to common templatesKajur, Harish (vk250x)1-0/+43
Separated from change: I65f9891f1d3586c0633b252a47b461c887d5b8ad to allow the template to be easily merged to master. Issue-ID: OOM-1971 Change-Id: I8dd4128bfa6e614ba5ddd084c45ca008e4da87ad Signed-off-by: Kajur, Harish (vk250x) <vk250x@att.com> [Separate from other changes, add license header, update commit message] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2019-12-16Enable Cassandra for AAI in minimal ONAP environmentPawel Wieczorek1-4/+4
Deployment of AAI component fails unless Cassandra is enabled in the cluster [1]. This patch also adds Cassandra to the list of enabled components and fixes minor typos in the documentation. [1] https://git.onap.org/aai/oom/tree/requirements.yaml#n23 Issue-ID: INT-1402 Change-Id: I5cb57e1909f749bb8d28fac0e5eeb09f6cfe4b33 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-12-16Merge "DMaaP switch from HTTP to HTTPS"Sylvain Desbureaux1-1/+1
2019-12-16[SDNC] Use global storage templates for PVCSylvain Desbureaux8-142/+189
OOM has now templates in order to create the needed PVC, using: * a PV with a specific class when using a common nfs mount path between nodes (sames as today use) --> is the default behavior today * or a storage class if we want to use dynamic PV. On this case, we use (in order of priority): - persistence.storageClassOverride if set on the chart - global.persistence.storageClass if set globally - persistence.storageClass if set on the chart I've also used "range" for PV creation of the statefulset I've created one file per PV (one for mdsal, one for certs). sdnc-prom was using hostpath directly on deployment, move to a PV/PVC. Change-Id: Id9eed3b13ac85595c386e380f41cfbc38b52c69f Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-12-15VID: Remove VID_KEYSTORE_PASSWORD workaroundIttay Stern1-2/+0
Workaround is no longer needed, after CATALINA_OPTS parameters are late-evaluated. See commit https://gerrit.onap.org/r/c/vid/+/99583 (change id Ife2a2e92b3745691cc45590d1afd1688d918048f). Issue-ID: VID-650 Change-Id: Ibb27d050632e8ce9b96da6e4033840380d1f3f72 Signed-off-by: Ittay Stern <ittay.stern@att.com>
2019-12-13Fix multicloud log message output issueBin Yang4-4/+4
The log config error results in log output failure Change-Id: I6451e678c3ac509ed676699ac048200feebc6ab8 Issue-ID: MULTICLOUD-966 Signed-off-by: Bin Yang <bin.yang@windriver.com>
2019-12-12[DMaaP] Use global storage templates for PVCSylvain Desbureaux12-158/+236
OOM has now templates in order to create the needed PVC, using: * a PV with a specific class when using a common nfs mount path between nodes (sames as today use) --> is the default behavior today * or a storage class if we want to use dynamic PV. On this case, we use (in order of priority): - persistence.storageClassOverride if set on the chart - global.persistence.storageClass if set globally - persistence.storageClass if set on the chart I've also split the 3 PV from dr-node into 3 files and used range so the number of PV is the same as number of PODs. Change-Id: I46b4e62042ea8330bef8cdc1561fa8bbf3f25d12 Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>