aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2020-05-05[DCAEGEN2][bootstrap] Use common secret template for postgres credentialsKrzysztof Opasiak4-143/+163
Even through we use common secret template both passwords are still hardcoded in common postgres chart but this will be removed as a final step just like we did for mariadb-galera. Issue-ID: OOM-2250 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Icaa5334d6ebad4fbce23ed4f59b74448c02783cf
2020-05-05Merge "Release RC1"Krzysztof Opasiak6-4/+50
2020-05-05Merge "remove hardcoded MariaDB password"Sylvain Desbureaux13-94/+114
2020-05-04Merge "Change ingress hosnames for exposed services"Sylvain Desbureaux19-16/+47
2020-05-04Merge "[COMMON|APPC|SDNC] add Ingress to dgbuilder"Krzysztof Opasiak3-0/+24
2020-05-04Merge "[POLICY] update images and fixes"Krzysztof Opasiak11-516/+27
2020-05-04Merge "Portal AAF REST API perm fixes for Roles"Sylvain Desbureaux6-22/+20
2020-05-04Release RC1Huabing Zhao6-4/+50
This change addresses two issues: MSB-467: Certificate in MSB is set to use *.zte.com.cn MSB-462: Pods still run as root These two issue have been fixed in docker images, but also need to be reflected in K8s manifest. Issue-ID: MSB-467 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: Id67e521b3051e9651051083f05d9e54973803030
2020-05-04remove hardcoded MariaDB passwordJulienBe13-94/+114
This aligns with other changes on OOM. You can either supply a specific password or have it generated for you based on a master password Issue-ID: CLAMP-796, OJSI-188 Change-Id: If1b80fc47cf1033e094f8a106746d1e8c556c08b Signed-off-by: JulienBe <jb379x@att.com> Co-authored-by: sebdet <sebastien.determe@intl.att.com> [small updates in common secret template usage] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-05-04Portal AAF REST API perm fixes for RolesChrisC6-22/+20
Fixed AAF REST API creds : reuse of X509 identity the use of javax.net.ssl variables overrides basic auth identity the fake password must be slightly updated in order to pass current decryption method in portal code Issue-ID: PORTAL-875 Change-Id: I0497df70f0ff9a30e4ccd634aff67467f5ae04df Signed-off-by: ChrisC <christophe.closset@intl.att.com>
2020-05-04[COMMON|APPC|SDNC] add Ingress to dgbuilderSylvain Desbureaux3-0/+24
Add Ingress for dgbuilder in common and update SDNC and APPC in order to use proper configuration. Issue-ID: OOM-2173 Issue-ID: OOM-2188 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib810ce3f4b3ff2ff3297c39be352d246aef6d7f1
2020-05-04Merge "Making mounted volume non-root"Sylvain Desbureaux1-0/+11
2020-05-01Update git submodulesMarco Platania1-0/+0
* Update kubernetes/robot from branch 'master' to c81062626b69160145baac5e6a5d670cb67211fa - Merge "Add instantiateVFWCLDN for DANOS" - Add instantiateVFWCLDN for DANOS Issue-ID: INT-1566 Change-Id: I48525947492061a98092f3b102ba240146a18e61 Signed-off-by: Brian Freeman <bf1936@att.com>
2020-05-01Update git submodulesmrichomme1-0/+0
* Update kubernetes/robot from branch 'master' to beea44604181479064665a2deb67d72c8c0e5d85 - [Integration][Testsuite] bump 1.6.1 version Issue-ID: INT-1567 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Ib337dc9134b54cadd9bb1ae7a2fa1fdfeaa42c4f
2020-04-30[POLICY] update images and fixesjhh11-516/+27
Issue-ID: POLICY-2510 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I1ac9698233d1b570ef3c5759742038c96015ba32 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-04-30Merge "Adding NSSMF adapter chart"Krzysztof Opasiak10-0/+561
2020-04-30Merge "[COMMON] Switch dgbuilder chart to new API"Krzysztof Opasiak1-4/+2
2020-04-30Update git submodulesmrichomme1-0/+0
* Update kubernetes/robot from branch 'master' to 1367bd680380828977982030eb9784250c579e25 - Use SPDX identifier for the license instead of putting an extract of the license Issue-ID: OOM-2389 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I7292b0b03dbf964d6aeaf987726e82ed7f0ba8b2
2020-04-30Adding NSSMF adapter chartjananib10-0/+561
OOM SO-NSSMF adapter Issue-ID: OOM-2343 Change-Id: I93c7bfc58601202dd61455431d2720162ee9e69c Signed-off-by: jananib <janani.b@huawei.com> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-04-29Change ingress hosnames for exposed servicesLucjan Bryndza19-16/+47
Change ingress host to the required hostnames Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-2391 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-04-29Merge "[CDS] Remove unused filebeat container."Krzysztof Opasiak1-22/+0
2020-04-29Merge "Changed http to https for SDK"Krzysztof Opasiak1-1/+1
2020-04-29Merge "Set sdc onboarding volume mount permissions"Sylvain Desbureaux3-0/+18
2020-04-29Set sdc onboarding volume mount permissionsMichaelMorris3-0/+18
Set the permissions of files in the sdc onboarding backend persistent volume for package certs to enable access by the process in the pod which now runs as non-root user (since SDC-2798) Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-2981 Change-Id: I6113f14ca9933e2fec2b565768ed5afbe3c18f21
2020-04-27[COMMON] Allow to use ' in mysql passwordsKrzysztof Opasiak3-1/+111
derivePassword which we use to generate our passwords includes ' in set of special characters that can be used in passwords. Current implementation of bitnami configure-mysql.sh simply concatenates password surrounded with '' rest of SQL query. This causes issues if password contains ' as it creates invalid SQL statement. To fix this issue we just patch the script and escape the special ' character in password. Issue-ID: OOM-2246 Reported-by: Mateusz Pilat <m.pilat@partner.samsung.com> Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I3d2150760755e55558e2045cbb7ca5693c8ab71f Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-04-27Merge "[APPC] Enable password generation for sdnctl"Krzysztof Opasiak1-1/+1
2020-04-27Merge "[APPC] Enable password generation for appcctl"Krzysztof Opasiak1-1/+1
2020-04-27Update git submodulesJames Forsyth1-0/+0
* Update kubernetes/aai from branch 'master' to 2d6141ab8bd7bfe58f5da0483e578032226e7ebb - Merge "Use released 1.6.8 container" - Use released 1.6.8 container Issue-ID: AAI-2883 Issue-ID: AAI-2593 Signed-off-by: Jimmy Forsyth <jf2512@att.com> Change-Id: I0dd8217c2fee8596e663d65206f92bc5446f02ea
2020-04-27Merge "[CLAMP] use common templates for logs"Krzysztof Opasiak10-59/+85
2020-04-27Merge "[POLICY] fix: Process also content of pd-pdp"Sylvain Desbureaux1-17/+16
2020-04-27Update git submodulesmrichomme1-0/+0
* Update kubernetes/robot from branch 'master' to b73d77ca2e9df3d7300ca85b5593d89a9271d13a - Bump teststuite 1.6.0 to OOM Master Issue-ID: INT-1558 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Iaf544043476e03589464d8e47ba4f89f7cbd8e5d
2020-04-24Changed http to https for SDKLorraine Welch1-1/+1
Issue-ID: PORTAL-890 Signed-off-by: Lorraine Welch <lb2391@att.com> Change-Id: I29db7da917f46a4bd3917fe1b71d714a9bf80022
2020-04-24[COMMON] Switch dgbuilder chart to new APIKrzysztof Opasiak1-4/+2
While working on password removal we added a new configuration node (config.db) which should be used for passing db credentials. Now when all user are switched to use new config options we can remove backward compatibility layer and start using new options. Issue-ID: OOM-2247 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I77876fbfc0a4af18fa36f0e8c5813a5e393a7e09
2020-04-24[APPC] Enable password generation for sdnctlKrzysztof Opasiak1-1/+1
Start using auto-generated password for sdnctl db instead of using the one hardcoded in values.yaml Issue-ID: OOM-2275 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I0a3b526387830d2bf44e88281896d0b87a92ce94
2020-04-24[APPC] Enable password generation for appcctlKrzysztof Opasiak1-1/+1
Start using auto-generated password for appcctl db instead of using the one hardcoded in values.yaml Issue-ID: OOM-2275 Change-Id: I3884a5b30a47d602b28136f984ebe4492ec43fb2 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-04-24Merge "Create ONAP with minimal component count"Sylvain Desbureaux1-0/+139
2020-04-24[POLICY] fix: Process also content of pd-pdpKrzysztof Opasiak1-17/+16
By mistake we've been processing only pe volume but recently we removed hardcoded passwords also from other files in pe-pdp. To fix this let's improve our init container and process files in both volumes. Issue-ID: POLICY-2516 Change-Id: Id97a64708803b72ab88362ccc5b88970661146e6 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-04-23Merge "[DMaaP MR] Remove "lost+found" in kafka PVC"Krzysztof Opasiak1-0/+1
2020-04-23Merge "[POLICY] Remove hardcoded credentials from policy-xacml-pdp"Krzysztof Opasiak3-5/+51
2020-04-23Merge "Update CDS application.properties"Morgan Richomme1-0/+4
2020-04-23Making mounted volume non-rootjananib1-0/+11
CDS non-root user addition Change-Id: I16a3c9b7de1ff74e4c6b208d49ab25664e580fbb Issue-ID: OOM-2386 Signed-off-by: jananib <janani.b@huawei.com>
2020-04-23Create ONAP with minimal component countLucjan Bryndza1-0/+139
Create onap with minimal component count Issue-ID: OOM-2385 Change-Id: Idf7b9f517e65274f6a288fde0d0462fd1cd93762 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-04-23[DMaaP MR] Remove "lost+found" in kafka PVCSylvain Desbureaux1-0/+1
When using a storage class, kafka data is set on top of a partition and then 'lost+found' ext4 folder, which is automatically created, is seen as a topic but with bad naming. So we remove this folder in the init script. Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: If04304326fc5478f791d8290b8ceb39753c59c2f
2020-04-23[Sniro] Disable Sniro-emulator in "onap-all"Sylvain Desbureaux2-4/+0
Sniro emulator is not a component which will be part of the release. As such, we don't start it even in "all" ONAP. Issue-ID: OOM-2372 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib544f93ca51a42cd0b39637c14555cb9a3ecfda0
2020-04-22Merge "[POLICY] Remove hardcoded credentials from policy-api"Krzysztof Opasiak3-5/+18
2020-04-22Merge "[POMBA] Disable pomba in "onap-all""Krzysztof Opasiak2-4/+0
2020-04-22Merge "[APPC] use common templates for logs"Krzysztof Opasiak4-30/+10
2020-04-22Merge "[COMMON] templates for centralized logs"Krzysztof Opasiak3-1/+63
2020-04-22[POLICY] Remove hardcoded credentials from policy-apiDominik Mizyn3-5/+18
This patch remove hardcoded healthcheck credentials from policy-api. Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: Ifc12d78fc1f7f00dd1466c32553453f0273661a3
2020-04-22Update CDS application.propertiesJulien Fontaine1-0/+4
Add property to disable publish audit service Add property to disable output logs from cmd-exec Issue-ID: CCSDK-2183 Signed-off-by: Julien Fontaine <julien.fontaine@bell.ca> Change-Id: Ie64c9110568ebc0ef4ca7fdf75d312dde4a7f893