Age | Commit message (Collapse) | Author | Files | Lines |
|
Even through we use common secret template both passwords are still
hardcoded in common postgres chart but this will be removed as a final
step just like we did for mariadb-galera.
Issue-ID: OOM-2250
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ic8d8a53093ccdf5f91a26ce9ac2734fe36ccca4f
|
|
|
|
Adding the Ingresses to HAS API service.
Issue-ID: OOM-2182
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I6cfe4d014a18e693344e24f14c00f4108d9c15c9
|
|
Clamp Kibana didn't had a proper ingress, adding it.
Issue-ID: OOM-2175
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I584bffc776789e7e527ffe24fb6ea73f42aebd59
|
|
ingress template is needed to create ingress.
Issue-ID: OOM-2173
Issue-ID: OOM-2188
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ia957cb25f3f76658affabd148aaa4118b2d7ea0c
|
|
ingress template is needed to create ingress.
Issue-ID: OOM-2172
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I176f70600918def3d1fc43d9fdb35ca8d29653de
|
|
|
|
Issue-ID: AAF-1134
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I62eb9f20c66e4b26bc4625b121e52cf70d2b4063
|
|
|
|
|
|
|
|
|
|
Use the different "common" templates in order to create consistent and
v1.16+ compatible templates for the different resources of AAF
Issue-ID: AAF-1122
Issue-ID: OOM-1971
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Iefc1391211a69b6584ea127066ce430d4f5eb389
|
|
This change addresses two issues:
MSB-467: Certificate in MSB is set to use *.zte.com.cn
MSB-462: Pods still run as root
These two issue have been fixed in docker images, but also need to be
reflected in K8s manifest.
Issue-ID: MSB-467
Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn>
Change-Id: Id67e521b3051e9651051083f05d9e54973803030
|
|
This aligns with other changes on OOM.
You can either supply a specific password or
have it generated for you based on a master password
Issue-ID: CLAMP-796, OJSI-188
Change-Id: If1b80fc47cf1033e094f8a106746d1e8c556c08b
Signed-off-by: JulienBe <jb379x@att.com>
Co-authored-by: sebdet <sebastien.determe@intl.att.com>
[small updates in common secret template usage]
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
Fixed AAF REST API creds : reuse of X509 identity
the use of javax.net.ssl variables overrides basic auth identity
the fake password must be slightly updated in order to pass current decryption method in portal code
Issue-ID: PORTAL-875
Change-Id: I0497df70f0ff9a30e4ccd634aff67467f5ae04df
Signed-off-by: ChrisC <christophe.closset@intl.att.com>
|
|
Add Ingress for dgbuilder in common and update SDNC and APPC in order to
use proper configuration.
Issue-ID: OOM-2173
Issue-ID: OOM-2188
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib810ce3f4b3ff2ff3297c39be352d246aef6d7f1
|
|
|
|
* Update kubernetes/robot from branch 'master'
to c81062626b69160145baac5e6a5d670cb67211fa
- Merge "Add instantiateVFWCLDN for DANOS"
- Add instantiateVFWCLDN for DANOS
Issue-ID: INT-1566
Change-Id: I48525947492061a98092f3b102ba240146a18e61
Signed-off-by: Brian Freeman <bf1936@att.com>
|
|
* Update kubernetes/robot from branch 'master'
to beea44604181479064665a2deb67d72c8c0e5d85
- [Integration][Testsuite] bump 1.6.1 version
Issue-ID: INT-1567
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: Ib337dc9134b54cadd9bb1ae7a2fa1fdfeaa42c4f
|
|
Issue-ID: POLICY-2510
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
Change-Id: I1ac9698233d1b570ef3c5759742038c96015ba32
Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
|
|
|
|
|
|
* Update kubernetes/robot from branch 'master'
to 1367bd680380828977982030eb9784250c579e25
- Use SPDX identifier for the license
instead of putting an extract of the license
Issue-ID: OOM-2389
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I7292b0b03dbf964d6aeaf987726e82ed7f0ba8b2
|
|
OOM SO-NSSMF adapter
Issue-ID: OOM-2343
Change-Id: I93c7bfc58601202dd61455431d2720162ee9e69c
Signed-off-by: jananib <janani.b@huawei.com>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
Change ingress host to the required hostnames
Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Issue-ID: OOM-2391
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
|
|
|
|
|
|
Related to https://gerrit.onap.org/r/c/sdc/sdc-workflow-designer/+/102754
Issue-ID: SDC-2334
Issue-ID: SDC-2335
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech>
Change-Id: Id976e039a2779af6d7d95c13935da3dd3dc1141f
|
|
|
|
Set the permissions of files in the sdc onboarding backend persistent volume for package certs to enable access by the process in the pod which now runs as non-root user (since SDC-2798)
Signed-off-by: MichaelMorris <michael.morris@est.tech>
Issue-ID: SDC-2981
Change-Id: I6113f14ca9933e2fec2b565768ed5afbe3c18f21
|
|
derivePassword which we use to generate our passwords includes ' in
set of special characters that can be used in passwords.
Current implementation of bitnami configure-mysql.sh simply
concatenates password surrounded with '' rest of SQL query. This
causes issues if password contains ' as it creates invalid SQL statement.
To fix this issue we just patch the script and escape the special '
character in password.
Issue-ID: OOM-2246
Reported-by: Mateusz Pilat <m.pilat@partner.samsung.com>
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I3d2150760755e55558e2045cbb7ca5693c8ab71f
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
|
|
|
|
* Update kubernetes/aai from branch 'master'
to 2d6141ab8bd7bfe58f5da0483e578032226e7ebb
- Merge "Use released 1.6.8 container"
- Use released 1.6.8 container
Issue-ID: AAI-2883
Issue-ID: AAI-2593
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
Change-Id: I0dd8217c2fee8596e663d65206f92bc5446f02ea
|
|
|
|
|
|
* Update kubernetes/robot from branch 'master'
to b73d77ca2e9df3d7300ca85b5593d89a9271d13a
- Bump teststuite 1.6.0 to OOM Master
Issue-ID: INT-1558
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: Iaf544043476e03589464d8e47ba4f89f7cbd8e5d
|
|
Issue-ID: PORTAL-890
Signed-off-by: Lorraine Welch <lb2391@att.com>
Change-Id: I29db7da917f46a4bd3917fe1b71d714a9bf80022
|
|
While working on password removal we added a new configuration
node (config.db) which should be used for passing db credentials. Now
when all user are switched to use new config options we can remove
backward compatibility layer and start using new options.
Issue-ID: OOM-2247
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I77876fbfc0a4af18fa36f0e8c5813a5e393a7e09
|
|
Start using auto-generated password for sdnctl db instead of using the
one hardcoded in values.yaml
Issue-ID: OOM-2275
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I0a3b526387830d2bf44e88281896d0b87a92ce94
|
|
Start using auto-generated password for appcctl db instead of using the
one hardcoded in values.yaml
Issue-ID: OOM-2275
Change-Id: I3884a5b30a47d602b28136f984ebe4492ec43fb2
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
|
|
By mistake we've been processing only pe volume but recently we
removed hardcoded passwords also from other files in pe-pdp.
To fix this let's improve our init container and process files in both
volumes.
Issue-ID: POLICY-2516
Change-Id: Id97a64708803b72ab88362ccc5b88970661146e6
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
|
|
|
|
|
|
CDS non-root user addition
Change-Id: I16a3c9b7de1ff74e4c6b208d49ab25664e580fbb
Issue-ID: OOM-2386
Signed-off-by: jananib <janani.b@huawei.com>
|
|
Create onap with minimal component count
Issue-ID: OOM-2385
Change-Id: Idf7b9f517e65274f6a288fde0d0462fd1cd93762
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
|
|
postgres was not working with dynamic PV because of lost+found folder.
We changed the mount path to make it work.
Issue-ID: OOM-1227
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Id15fd089c56e339dbc5939cd28207b535e8ab86b
|