Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
1. Make changes in order to allow performing KUR/CR in EJBCA:
- Add Certificate Update Admin role
- Enable EndEntityAuthentication module
- Create and set CA with constant UID
- Add configuration for provider.
2. Update CertService, which provides with new certificate update
endpoint.
3. Update release-notes.
Issue-ID: OOM-2753
Issue-ID: OOM-2754
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I9cb0cb4d6d6939ad229a4ea254f2bc35d45a3d52
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
|
|
Integration team believes that it will have no impact
assuming that ESR is not used directly.
Some AAI API mentions ESR but no direct call to ESR in the tests.
This gate shall prove it or not...
Issue-ID: INT-1972
Signed-off-by: morganrol <morgan.richomme@orange.com>
Change-Id: If37199dc25fa9c268baa1dc88921aa22d6cb7277
|
|
pointed out by checkbashisms:
- variable name HOSTNAME
- source instead of .
- sleep with suffix
- string increments
And migrate a few shebangs to /bin/sh
Issue-ID: OOM-2643
Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com>
Change-Id: I653c14454a3232b5a349ca1564ece53ddc94289d
|
|
This reverts commit 62178a49cc9e4088019d426636657d9f2980d242.
This commit introduced regression on portal db config job which is now
unable to start:
/usr/local/bin/docker-entrypoint.sh: line 114: syntax error near unexpected token `('
Issue-ID: OOM-1
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I3cb72cd7625b180b364b713fe942d5956736ebef
|
|
pointed out by checkbashisms:
- variable name HOSTNAME
- source instead of .
- variable increments
- sleep with suffix
And migrate a few shebangs to /bin/sh
Issue-ID: OOM-2643
Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com>
Change-Id: I82981bcff17e88cf824935b841ce37a585ddde00
|
|
- remove certificate generation deployment
- change certificate secret for provider (from server to client)
- correct documentation
Issue-ID: OOM-2712
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I21a8e277e1fd5f5190c7b67fb6ef97c1b3355230
|
|
Updating release notes to match work done for Honolulu.
Issue-ID: OOM-1
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib63c3ad04efead593ec8ff941f2877b76455cbc3
|
|
Utilize Cert-Manager to secure communication between
Cert-Service and its clients, adjust templates and
configs.
Issue-ID: OOM-2712
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I96426b1a184b4d254575e76d29214d9deda08cce
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
|
|
This patch adds a table of contents to make
it more convenient to browse through the
document
Issue-ID: OOM-2701
Signed-off-by: Sylwia Jakubek <sylwia.jakubek@nokia.com>
Change-Id: I3fcfaac2bd1ef00db6482db7826edc8567f10296
|
|
This is to update outdated command output versions and options
Change-Id: I9cf7a5f8344767146739084f63b512ca39a02cec
Issue-ID: OOM-2602
Signed-off-by: ramagp <ramakrishnagp@aarnanetworks.com>
|
|
Updating the documentation and bumping version to 8.0.0
Issue-ID: OOM-1
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I6f942f1466fed64264c44fb8fc0e1ffc93a98f18
|
|
Guidelines for installation of Prometheus Stack and Cert-Manager
Issue-ID: OOM-2701
Signed-off-by: Sylwia Jakubek <sylwia.jakubek@nokia.com>
Change-Id: Id8d9787109df7a90eb1f938836e75cbdd3a904b8
|
|
CPS Helm charts added
Issue-ID: CPS-7
Co-authored-by: puthuparambil.aditya <aditya.puthuparambil@bell.ca>
Co-authored-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Co-authored-by: Bruno Sakoto <bruno.sakoto@bell.ca>
Signed-off-by: Claudio David Gasparini <claudio.gasparini@pantheon.tech>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Signed-off-by: puthuparambil.aditya <aditya.puthuparambil@bell.ca>
Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca>
Change-Id: I027e5e4b3eec78ce889168f8796d55e6f9fd9be6
Signed-off-by: puthuparambil.aditya <aditya.puthuparambil@bell.ca>
|
|
|
|
inspired from openStack
https://github.com/openstack/qa-specs/blob/master/tox.ini
https://doughellmann.com/blog/tag/sphinxcontrib-spelling/
https://pypi.org/project/sphinxcontrib-spelling/
Issue-ID: OOM-2648
Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com>
Change-Id: Ia341f96a906c82f88257a885fd66005450a15d16
|
|
In contrary to helm v2 behaviour helm v3 does not automatically create
namespace even if "--namespace" option is passed to it's "install" or "upgrade"
subcommand. Additional flag "--create-namespace" has to be set. Alternatively
namespace can be created manually before running "helm deploy" without that
flag.
Change-Id: I3c425667db3065e2aa04a8f140e1037d5080c96a
Issue-ID: OOM-2562
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
|
|
For helm v3 the correct syntax for "search" command is
"helm search repo [keyword]"
Change-Id: Ie2c824ce5c0cdd38dd38de3b621e8302685dd743
Issue-ID: OOM-2562
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
|
|
- sphinx-build '-W' option needed only once
- remove docs/tox.ini since
* same profiles are declared in tox.ini
* once run from the docs folder, this generates invalid files
in doc/.tox for linters setup (e.g. docs/.tox/[..]/invalid.rst).
They can cause warnings treated as errors by root tox profiles.
- modify requirements.txt to force a sphinxcontrib-needs version prior
to 0.6.0 . This latest version introduces a new services support
functionality that cannot be easily disabled here and that requires
additional configuration parameters to link GitHub issues.
We cannot provide these parameters since this project uses JIRA.
As a result, sphinx generates a warning treated as an error
that makes the gate fail.
https://sphinxcontrib-needs.readthedocs.io/en/service/services/index.html
Issue-ID: OOM-2648
Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com>
Change-Id: I14e9045482750f15a3e5e98af47197e2c9f60f60
|
|
This is to add few commands and notes under quick start guide
Change-Id: I871348bfabb23c0fe302a6a3992bedb15682715d
Issue-ID: OOM-2540
Signed-off-by: ramagp <ramakrishnagp@aarnanetworks.com>
|
|
add :orphan: directive because guilin release note is not in toctree.
Issue-ID: OOM-2646
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I81a051e82c44f71b31595da2d485e595adc81cf1
|
|
|
|
|
|
Mariadb DB Galera containers version is outdated and unmaintained. We
need them to move to a new image provider.
As new image provider is not compatible with our old templates, we
also update the templates (by reworking bitnami mariadb-galera chart).
An update of global mariadb image is also done in order to match mariadb
galera version.
Issue-ID: OOM-1720
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib9976227759e90022183d4f37fc655143be4d6ac
|
|
|
|
This is to describe openstack parameters in example override files
Change-Id: Ic03897f60317169360d9a0984d3ba4a64963bbe4
Issue-ID: OOM-2541
Signed-off-by: ramagp <ramakrishnagp@aarnanetworks.com>
|
|
Add 3 automated doc linting (sphinx building, linkchecking and doc8) in
order to have an error free documentations
Fix also issues found by these linters in order to start without errors.
Issue-ID: OOM-2648
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I318718c956020412a120ba3caeb9e21d35a99833
|
|
Automated setup of "kubernetes/platform/components/oom-cert-service"
requires having Docker in the deployment environment. Previously Docker
was required only on Kubernetes cluster nodes.
Issue-ID: OOM-2526
Change-Id: Ibe3353df62483af418803e5fba230d9f06d063cd
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
|
|
Instead of globally choosing between virtualhosts and path based
ingress, it's better to allow to choose it per component.
Issue-ID: OOM-2641
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I952826d03722693ebae7c95a083b95bf83752d68
|
|
|
|
conf.py => use add_css_file as recommended
oom_developer_guide.rst => suppres anchor for nexus link
oom_user_guide.rst =>
- modify anchor for K8S link
- add `` fo http example to avoid link to be checked
For release-notes-<Release>.rst and oom_hardcoded_certificates.rst =>
- add :orphan: directive because rst file not in toctree
Issue-ID: OOM-2646
Signed-off-by: Eric Debeau <eric.debeau@orange.com>
Change-Id: Icfecde7807e2417a1825f25a1d57a1830c4222a0
|
|
Document helm 3 deployment as our experimental feature.
Issue-ID: OOM-2562
Change-Id: I188f53d7b90657d710109e6966220e0cfb9db8be
Signed-off-by: Jakub Latusek <j.latusek@samsung.com>
[Fix issues reported in review]
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
With predictable chart build process running "make onap" after "make
all" is no longer necessary.
Issue-ID: OOM-2399
Change-Id: I4db334aaf5371e5a40b3f1458e61a432d33297e3
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
|
|
This commit adds change to the Verify ONAP installation step to add
another command in oom_quickstart_guide documentation section.
Change-Id: I16ace8c330abdd7a073b8c5ca289522533b7522e
Issue-ID: OOM-2548
Signed-off-by: ramagp <ramakrishnagp@aarnanetworks.com>
|
|
Update charts and requirements to 7.0.0.
Create release notes for Guilin
Update documentation
Issue-ID: OOM-2638
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I965ed6b6ebb7d74bfddaff73edd3dd55a657841c
|
|
|
|
Change-Id: I11bd3ceacf8baa89fe78d318f12a25ced5e8b51b
Issue-ID: OOM-2530
Signed-off-by: ramagp <ramakrishnagp@aarnanetworks.com>
|
|
Helm is now called by HELM_BIN variable which by default is set to helm
and makefiles use helm from path. HELM_BIN can be overwritten so user
can have two version of helm in system and choose which one to use.
Signed-off-by: Jakub Latusek <j.latusek@samsung.com>
Issue-ID: OOM-2562
Change-Id: I0917796aafe234e87afa0ac3c4c15720296276d5
|
|
Readiness container v3.x and up are now present in ONAP main repository.
They're also not using root user anymore and then script path has
changed.
Finally, "job_complete" script has been integrated in main "ready"
script.
As those changes are significant, we must upgrade all the components at
once.
Depends-On: I5afa83892043f4844afe12e61724a8d368a9f2e0
Issue-ID: OOM-2545
Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com>
Change-Id: I0b4eb5dd86390273532d67d0a9696e1cfcadf110
|
|
Correct different RST files to remove warnings generated by Doc8
- long lines
- yaml code bad formated
- tabulation
Add a new file to store the hardcoded certificates
(easier to manage with a CSV file than a RST table)
Correct some minor editorial errors
Issue-ID: OOM-2542
Signed-off-by: Eric Debeau <eric.debeau@orange.com>
Change-Id: I89bfea619fbeda581dc04ca2abea80adfe1a8a02
|
|
Change-Id: I677ccc5048130c605bb06d0031508d62947d50b5
Signed-off-by: deen1985 <damian.nowak@nokia.com>
Issue-ID: OOM-2531
|
|
The version given for Frankfurt version is not the right one. So we fix
it with this commit.
Issue-ID: OOM-2424
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I9e24f0b15d821904e70d758a978c2979a530adf0
|
|
|
|
Create release note for Frankfurt
Issue-ID: OOM-2382
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ia78f6eee0dd07b0ebba84c8c714c6a95e4d99a34
|
|
|
|
The git clone command was missing the automatic retrieve of submodules.
Issue-ID: DOC-618
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ic43fa71c3b931b21160095ed9a9f4e48f733cbf4
|
|
AAF SMS was hardcoding its certificates in the container.
This patch makes use of certInitializer in order to retrieve "fresh"
certificates.
In order to use certInitiliazer in a sub component, we had to move
charts to component and add the right requirements.
Issue-ID: AAF-1159
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I6ec55eddffd54dd56b03cea1a6f0b437f8bfa299
|
|
This new micro service allow retrieval of certificates using CMPv2
protocol and relay the requests to CA server (such as EJBCA provided in
contrib folder).
Issue-ID: AAF-1083
Change-Id: Ib3acba3d071533ad933d043f067147e8406d8fa8
Signed-off-by: EmmettCox <emmett.cox@est.tech>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|