summaryrefslogtreecommitdiffstats
path: root/docs/oom_hardcoded_certificates.rst
AgeCommit message (Collapse)AuthorFilesLines
2020-06-08[AAF SMS] Use certInitializer for certificatesSylvain Desbureaux1-0/+2
AAF SMS was hardcoding its certificates in the container. This patch makes use of certInitializer in order to retrieve "fresh" certificates. In order to use certInitiliazer in a sub component, we had to move charts to component and add the right requirements. Issue-ID: AAF-1159 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6ec55eddffd54dd56b03cea1a6f0b437f8bfa299
2020-05-28[AAF] Add CMPv2 Cert ServiceEmmettCox1-0/+2
This new micro service allow retrieval of certificates using CMPv2 protocol and relay the requests to CA server (such as EJBCA provided in contrib folder). Issue-ID: AAF-1083 Change-Id: Ib3acba3d071533ad933d043f067147e8406d8fa8 Signed-off-by: EmmettCox <emmett.cox@est.tech> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-05-06[COMMON] Override truststore in aaf_agent imageKrzysztof Opasiak1-2/+4
aaf_agent image currently contains hardcoded truststores in order to be able to connect to certman to retrieve certificate for given component. The goal is to remove hardcoded truststore from aaf_agent immage but first we need to be sure that all its users are able to provide the truststore to the pod as a configmap. Issue-ID: AAF-1134 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ibe9de6ad7264c05aeca2af858918fc2b4d3a772b
2020-05-05MUSIC spring boot helm charts (music-sb)Tschaen, Brendan1-0/+2
Removal of tomcat and zookeeper as per latest music version.. Replaced with cassandra only and spring boot version of music, adding support for https and running the music container under a non-root user Update oof-has music-api configuration, use https Switch to music-api-springboot for all the ready.py Issue-ID: MUSIC-572 Signed-off-by: Tschaen, Brendan <ctschaen@att.com> Change-Id: Idbfac29cb5e9808787b5994e2575f055c292a146 Signed-off-by: vrvarma <vikas.varma@att.com>
2020-05-04Release RC1Huabing Zhao1-0/+2
This change addresses two issues: MSB-467: Certificate in MSB is set to use *.zte.com.cn MSB-462: Pods still run as root These two issue have been fixed in docker images, but also need to be reflected in K8s manifest. Issue-ID: MSB-467 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: Id67e521b3051e9651051083f05d9e54973803030
2020-04-16Add HTTPS ceritificate in CLI OOM chartsjitendra sharma1-0/+2
Issue-ID: CLI-265 Signed-off-by: Kanagaraj Manickam <kanagaraj.manickam@huawei.com> Change-Id: I4dc6cf5c9f7e8ec913491ea8580f414ab5ca199f
2020-04-15Update sparky-be server certJimmy Forsyth1-0/+2
Issue-ID: AAI-2869 Signed-off-by: Jimmy Forsyth <jf2512@att.com> Change-Id: I4a4b5f05ae149149137369cfb588b1c27e156281
2020-04-14Add APPC to cert tableTaka Cho1-0/+4
AAF client cert moved to APPC Helm chart, hence I added APPC portion to the table Issue-ID: APPC-1862 Change-Id: Ib84a66bbca8d818c36cfd9258d0dfbc1000f1265 Signed-off-by: Taka Cho <takamune.cho@att.com>
2020-04-07Merge "Add optf-cmso oom helm charts"Krzysztof Opasiak1-0/+6
2020-04-06Add optf-cmso oom helm chartsvrvarma1-0/+6
Making the charts consistent based on comments Fixing oom gating issue related to busyBoxImage value not found Moving and fixing cmso certs to this checkin Adding oof-cmso to the hardcoded certificates list Change-Id: Id48903ef7c38d69fcd8da5e067c2031359c94b56 Signed-off-by: vrvarma <vikas.varma@att.com> Issue-ID: OPTFRA-720
2020-04-05Added trust store for SOL003 Adapter & ETSI Catalog ManagerRamesh Parthasarathy1-0/+2
Added the trust store provided by waqas to be included with vnfm adapter jvm arguments. Issue-ID: SO-2765 Signed-off-by: Ramesh Parthasarathy(rp6768)<ramesh.parthasarathy@att.com> Change-Id: Ifbe7bd54dcf1f79b49bed1f887e472ad9b7ac634
2020-04-02Updated sdc cert.k.kedron1-0/+2
Updated truststore/keystore password for sdc cert. Added truststore/keystore password to chef AUTO.json. Updated deployment.yaml files to mount the cert files. Issue-ID: SDC-2855 Signed-off-by: Krystian Kedron <k.kedron@partner.samsung.com> Change-Id: Ifd0d45cc591a0624005f86d2e67e3c0bc490efd3
2020-03-31[SO] Onboard ONAP CA during init phaseSylvain Desbureaux1-15/+37
Workaround for retrieving ONAP root CA and keeping SO container being run by no root user. Issue-ID: SO-2730 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib1b48c0a6fcca359a780640b8c705e75fd78dc1a
2020-03-30Add server cert info for AAI mSJimmy Forsyth1-5/+15
haproxy, resources, traversal, schema-service, graphadmin, babel, model-loader, aai-search-data Issue-ID: AAI-2821 Change-Id: I4304053534a20ea1b51e05e285f0829403d2b2db Signed-off-by: Jimmy Forsyth <jf2512@att.com>
2020-03-19New VID certificate valid until: Mar 17, 2021Ittay Stern1-0/+18
Issue-ID: VID-784 Change-Id: I2393279cce83191e75730caaff1b57802857f0e9 Signed-off-by: Ittay Stern <ittay.stern@att.com> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>