Age | Commit message (Collapse) | Author | Files | Lines |
|
AAF SMS was hardcoding its certificates in the container.
This patch makes use of certInitializer in order to retrieve "fresh"
certificates.
In order to use certInitiliazer in a sub component, we had to move
charts to component and add the right requirements.
Issue-ID: AAF-1159
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I6ec55eddffd54dd56b03cea1a6f0b437f8bfa299
(cherry picked from commit 0de302ad6212185c842ce7232319e19d994dd520)
|
|
This new micro service allow retrieval of certificates using CMPv2
protocol and relay the requests to CA server (such as EJBCA provided in
contrib folder).
Issue-ID: AAF-1083
Change-Id: Ib3acba3d071533ad933d043f067147e8406d8fa8
Signed-off-by: EmmettCox <emmett.cox@est.tech>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
(cherry picked from commit bca68e048a74ac3754e76ed738090402f7cbfd13)
|
|
aaf_agent image currently contains hardcoded truststores in order to
be able to connect to certman to retrieve certificate for given
component.
The goal is to remove hardcoded truststore from aaf_agent immage but
first we need to be sure that all its users are able to provide the
truststore to the pod as a configmap.
Issue-ID: AAF-1134
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ibe9de6ad7264c05aeca2af858918fc2b4d3a772b
(cherry picked from commit 95a5f84069703c583e49028b37003c73c03cc07d)
|
|
* changes:
DOC howto setup ingress on the Kubernetes cluster
Ingress quick start guide notice
|
|
User manual howto setup ingress controller on the kubernetes
cluster using Nginx and MetalLB
Issue-ID: OOM-1878
Change-Id: I0947c0060851fd7a43bfa92b0472b9ec898857b6
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
|
|
Notice about experimental ingress configuration
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Change-Id: I73f799d9fb254a5d40b1c7d22c75350010780a1d
Issue-ID: OOM-1878
|
|
Removal of tomcat and zookeeper as per latest music version..
Replaced with cassandra only and spring boot version of music,
adding support for https and running the music container under
a non-root user
Update oof-has music-api configuration, use https
Switch to music-api-springboot for all the ready.py
Issue-ID: MUSIC-572
Signed-off-by: Tschaen, Brendan <ctschaen@att.com>
Change-Id: Idbfac29cb5e9808787b5994e2575f055c292a146
Signed-off-by: vrvarma <vikas.varma@att.com>
|
|
This change addresses two issues:
MSB-467: Certificate in MSB is set to use *.zte.com.cn
MSB-462: Pods still run as root
These two issue have been fixed in docker images, but also need to be
reflected in K8s manifest.
Issue-ID: MSB-467
Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn>
Change-Id: Id67e521b3051e9651051083f05d9e54973803030
|
|
|
|
|
|
sdc.workflow.plugin.simpledemo.onap.org was missing in the list
Issue-ID: OOM-1368
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I40374b0302c9fe2729f86a212b185cc1f4351216
|
|
Update the versions on doc to the recommanded ones for Frankfurt.
Issue-ID: OOM-2367
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ie3b3511f01df6f62f98dbb80d15fe0c76de4edf4
|
|
Issue-ID: CLI-265
Signed-off-by: Kanagaraj Manickam <kanagaraj.manickam@huawei.com>
Change-Id: I4dc6cf5c9f7e8ec913491ea8580f414ab5ca199f
|
|
|
|
Issue-ID: OOM-2075
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I634ade031aa95f9c79abad8f1f59015085ebc525
|
|
|
|
Initial documentation update with the following changes:
* Remove last old release references
* Explain the "masterPassword" mandatory parameter
Issue-ID: OOM-2324
Issue-ID: OOM-1960
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib3b1ba7c585c7e27793329ec5eb43d797e23da99
|
|
Issue-ID: AAI-2869
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
Change-Id: I4a4b5f05ae149149137369cfb588b1c27e156281
|
|
AAF client cert moved to APPC
Helm chart, hence I added APPC
portion to the table
Issue-ID: APPC-1862
Change-Id: Ib84a66bbca8d818c36cfd9258d0dfbc1000f1265
Signed-off-by: Taka Cho <takamune.cho@att.com>
|
|
Add additional labels to create consistency across
all docs.
Issue-ID: CIMAN-376
Signed-off-by: Jessica Wagantall <jwagantall@linuxfoundation.org>
Change-Id: I6d3dd67adb6669fb897e4978cb88e3b7404d2897
|
|
|
|
New documentation generation system relies on disjoint documentations.
This patch adds an label for OOM release note with name being consistent
accross all ONAP components.
Issue-ID: CIMAN-33
Change-Id: I5e5fbe5d5038056a7a684828c9e02f082bfa7f0b
Signed-off-by: lf-jobbuilder <releng+lf-jobbuilder@linuxfoundation.org>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
New documentation generation system relies on disjoint documentations.
This patch adds an label for OOM main index with name being consistent
accross all ONAP components.
Issue-ID: CIMAN-376
Change-Id: I1c13b2c478857c45a30ec5e5fb4881934e6f70f3
Signed-off-by: lf-jobbuilder <releng+lf-jobbuilder@linuxfoundation.org>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
|
|
Making the charts consistent based on comments
Fixing oom gating issue related to busyBoxImage value not found
Moving and fixing cmso certs to this checkin
Adding oof-cmso to the hardcoded certificates list
Change-Id: Id48903ef7c38d69fcd8da5e067c2031359c94b56
Signed-off-by: vrvarma <vikas.varma@att.com>
Issue-ID: OPTFRA-720
|
|
Added the trust store provided by waqas to be included
with vnfm adapter jvm arguments.
Issue-ID: SO-2765
Signed-off-by: Ramesh Parthasarathy(rp6768)<ramesh.parthasarathy@att.com>
Change-Id: Ifbe7bd54dcf1f79b49bed1f887e472ad9b7ac634
|
|
Use 6.0.0 in preparation for Frankfurt release
Issue-ID: OOM-2320
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I8ad82dfdf48b56c38c0e85d640b18cc13c8d9e67
|
|
|
|
|
|
Updated truststore/keystore password for sdc cert.
Added truststore/keystore password to chef AUTO.json.
Updated deployment.yaml files to mount the cert files.
Issue-ID: SDC-2855
Signed-off-by: Krystian Kedron <k.kedron@partner.samsung.com>
Change-Id: Ifd0d45cc591a0624005f86d2e67e3c0bc490efd3
|
|
Workaround for retrieving ONAP root CA and keeping SO container being
run by no root user.
Issue-ID: SO-2730
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib1b48c0a6fcca359a780640b8c705e75fd78dc1a
|
|
haproxy, resources, traversal, schema-service, graphadmin,
babel, model-loader, aai-search-data
Issue-ID: AAI-2821
Change-Id: I4304053534a20ea1b51e05e285f0829403d2b2db
Signed-off-by: Jimmy Forsyth <jf2512@att.com>
|
|
Issue-ID: VID-784
Change-Id: I2393279cce83191e75730caaff1b57802857f0e9
Signed-off-by: Ittay Stern <ittay.stern@att.com>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
Some people weren't sure on which machine we have to install it.
Issue-ID: OOM-2061
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib46ac2211a716e04ce5b8d9394264bb7fd34a42c
|
|
Issue-ID: OOM-2204
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I1d17f027f81c2abc3fbf97973dd5076776b8499e
|
|
Current service and headlessService templates doesn't handle the fact
that out of cluster ports must be TLS encrypted only.
With a new (backward compatible) DSL, this is now possible.
In values.yaml, all ports in service part with port AND plain_port will
have the ability to be HTTP or HTTPS depending on the context.
Per default, they'll be HTTPS.
TLS choice will be done according this table:
| tlsOverride | global.tlsEnabled | global.serviceMesh.enabled | global.serviceMesh.tls | result |
|-------------|-------------------|----------------------------|------------------------|--------|
| not present | not present | not present | any | true |
| not present | not present | false | any | true |
| not present | not present | true | false | true |
| not present | not present | true | true | false |
| not present | true | any | any | true |
| not present | false | any | any | false |
| true | any | any | any | true |
| false | any | any | any | false |
Service template will create one or two service templates according to this table:
| serviceType | both_tls_and_plain | result |
|---------------|--------------------|--------------|
| ClusterIP | any | one Service |
| Not ClusterIP | not present | one Service |
| Not ClusterIP | false | one Service |
| Not ClusterIP | true | two Services |
If two services are created, one is ClusterIP with both crypted and plain
ports and the other one is NodePort (or LoadBalancer) with crypted port only.
Issue-ID: OOM-1936
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: If766dd73132022d1a6e578fd36113c461bb91ea5
|
|
Also add requirements for Frankfurt release
Issue-ID: OOM-1960
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Idaa4925515737221c90c4bf9141406fa1d428f15
|
|
Issue-ID: OOM-1966
Signed-off-by: ksinghn247 <kuldeepsinghn@hcl.com>
Change-Id: Iaff841695f0ef8513b202bc299ecc2785bf97ee0
|
|
Merging this will create
https://onap-oom.readthedocs.io
This build will run in parallel
to the current docs generation method
until we are ready to cut over.
Issue-ID: CIMAN-364
Signed-off-by: Jessica Wagantall <jwagantall@linuxfoundation.org>
Change-Id: I502ea73223a2fe2f7f8d235a3544a186ae3d45c1
|
|
Proposition of common templates to make service declaration and PV
declaration consistent accross OOM.
Propositions of templates for sub parties of resource definitions
such as metadatas, selector and containerPorts.
I've also made an example with cassandra.
Change-Id: I8b8aa8eb61dafba75e89add1979114a0eefce243
Issue-ID: OOM-1971
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
To improve readability and avoid confusion, this patch makes:
* all path names and package names - italics,
* all snippets as well as command names and arguments - fixed length.
Issue-ID: OOM-2207
Change-Id: Ib8075c25cb0479e56e3f7634639eb4d7556b36c7
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
Definition list syntax quick reference:
http://docutils.sourceforge.net/docs/user/rst/quickref.html#definition-lists
Issue-ID: OOM-2208
Change-Id: Iaab4b3befd92288813a70d4e1bac8c4c7bb6e4c6
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
This patch improves documentation readability by making all runnable
code snippets stand out.
Issue-ID: OOM-2207
Change-Id: I0ffd7892a6c3af4d91f5bdd9adb49c1e01a9c475
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
Literalinclude directive is not rendered as such unless separated from
the surrounding paragraphs by blank lines (like all paragraphs) [1].
[1] http://docutils.sourceforge.net/docs/ref/rst/restructuredtext.html#literal-blocks
Issue-ID: OOM-1612
Change-Id: I51e7f8f2f99dfe157b24fe7c5ae4d62281d72e86
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
This patch resolves issue with including non existent file in OOM
documentation. Included file has been removed in [1] and seems to be
replaced by "kubernetes/onap/values.yaml" from [2] (91% similarity [3]).
[1] ed5ff714fac29651318868a65267030e3c31c3ee (Change-Id: Ia51db5f1489e8d63fd7e1f10e80174eb9f182f0f)
[2] ac281bd0798ae7308402f4d19d537546d101afba (Change-Id: I4b74a3a8a35a178298af7205762e2aca7c65dda3)
[3] Similarity measured with:
$ git checkout ed5ff714^
$ wdiff --no-deleted --no-inserted --no-common --statistics \
kubernetes/onap/values.yaml docs/onap_values.yaml
Issue-ID: OOM-2203
Change-Id: I9634797c75f4da4652194f72190b21e30c4feb21
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
|
|
Issue-ID: OOM-2102
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
Change-Id: Ic973542b48e721808284d1a9bd705c06c24bc29c
|
|
El Alto High defects that are pushed to Frankfurt.
Issue-ID: OOM-2103
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
Change-Id: I2570d1e299072e1ac96dbc3fcbe19181cd568bd0
(cherry picked from commit f40ce5c9f5db76331d7aa895615c06a636d1940e)
|
|
Issue-ID: OOM-1577
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
Change-Id: I8314d029ac9acc3a35488a57a8eecd3d53aa3845
|
|
|
|
Issue-ID: OOM-2103
Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
Change-Id: I9a378602c8d73df4df2fef4fcf52b88fa5000eb6
|