aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/aaf
AgeCommit message (Collapse)AuthorFilesLines
2018-10-16Merge "Add sshsm hardware security support charts"Borislav Glozman23-0/+1100
2018-10-15Replace liveness probe & update imagesMike Elliott10-11/+11
Updating to latest snapshot images. File-based "wait" being replaced with standard port-based liveness probe to fix cassandra from not starting for AAF. Change-Id: If08d6bbf766abfcebe14d23894cde9c21c96c510 Issue-ID: AAF-557 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
2018-10-12Merge "Add sms preload job that preloads secrets"Alexis de Talhouët4-0/+241
2018-10-11Add sshsm hardware security support chartsKiran Kamineni23-0/+1100
Add charts that support hardware security in AAF This includes two sub charts, abrmd and distcenter By default tpm requirement is disabled via the global.tpm flag. Issue-ID: AAF-409 Change-Id: Ia3f5948891638bc281ad4585818274fc71564bdd Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-10-11refactor AAF casablanca chartsMandeep Khinda56-1528/+421
Issue-ID: AAF-539 Change-Id: Id1f263d526ef5fa88c6cd25f7ed1779d3a0cd2ee Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2018-10-09Add sms preload job that preloads secretsKiran Kamineni4-0/+241
Add a preload job that loads secrets from config files into secret management service after it comes up. P1: Includes osdf.json which contains secrets for oof-osdf P2: Add has.json for oof-has Issue-ID: AAF-548 Change-Id: Ib03cf6771a445be8ab00621cf26ca0e902af4ab3 Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-10-02commiting resource limit for onap-aaf componentdsingh.27815-237/+233
cleaning up merge conflict implementing template reducing overly large resource limits adding limits to aaf-sms. Issue-ID: OOM-1146 Change-Id: Idac679dc9be94ab92ea95c38f9f237af65307131 Signed-off-by: dsingh.278 <dsingh.278@gmail.com> Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2018-09-25Updating charts to use common resource templateMandeep Khinda11-15/+15
Issue-ID: OOM-1145 Change-Id: I1510339a820802554b6e8b9a201619ef66be17a0 Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2018-09-25adding unlimited resource limitMandeep Khinda7-8/+8
Adds the ability to turn them off if they are found to cause issues also cleaning up some whitespace Issue-ID: OOM-1145 Change-Id: Idf0ee21f70e1bf65813b7f51ea028f2783a01cf8 Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2018-09-24Update Chart versions to 3.0Mike Elliott13-13/+13
All Chart versions and requirement dependencies have been updated to 3.0 for Casablanca release. Change-Id: Iea57e5da09ea8a8bac0a415b9a6196151cbea10b Issue-ID: OOM-1354 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
2018-09-19updating gerritBranch to masterMandeep Khinda1-1/+1
some charts internally pull config/scripts from gerrit to bootstrap. They are currently bootstrapping with the beijing branch. Issue-ID: OOM-1425 Change-Id: I0ab0a054e9cc6ed6b23704404d80588f53530fa2 Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2018-09-19Sync values from docker-manifest-staging fileAlexis de Talhouët9-9/+9
Change-Id: Ic8f11dc20c425aab144fe28a5e761552eb7b025b Issue-ID: OOM-1422 Signed-off-by: Alexis de Talhouët <adetalhouet89@gmail.com>
2018-09-06Merge "Add config file for pkcs11"Mandeep Khinda1-0/+1
2018-08-30Apache2 License additiontoshrajbhardwaj5-65/+67
Issue-ID: OOM-1306 Change-Id: I1a617718006ee845d675fead74ce075c3390ac2f Signed-off-by: toshrajbhardwaj <toshrajbhardwaj@gmail.com>
2018-08-29Add config file for pkcs11Manjunath Ranganathaiah1-0/+1
This file will be used by ca property file to trigger pkcs11 keystore to be used by local CA Change-Id: I7dd5d668bbf438d4a0e347835ca92ae9202f3a50 Issue-ID: AAF-413 Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>
2018-08-24Merge "License Task for VID,AAF,CLI,SNIRO"Mike Elliott26-6/+367
2018-08-23License Task for VID,AAF,CLI,SNIROvaibhavjayas26-6/+367
Issue-ID: OOM-1304 Signed-off-by: vaibhavjayas <vaibhav.jayas@amdocs.com> Change-Id: I601eaabf6e4487a5eda90f6117d55fcbfe0e7d6b
2018-08-14Add readiness step for deploymentKiran Kamineni3-3/+20
Using an initContainer and to start SMS only after vault and consul have already started. This prevents restarts of the sms container. Issue-ID: AAF-421 Change-Id: Ied3264711d5d931a1d18523eadcc84e188ededa5 Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-06-27Merge "Fix Policy Nexus liveness initialDelaySeconds"Mandeep Khinda1-1/+1
2018-06-11Use 2.0.0-ONAP tag instead beijing branch2.0.0-ONAP2.0.0-ONAPGary Wu1-1/+1
To ensure reproducible deployments, change gerrit branches to 2.0.0-ONAP tag instead of using the beijing branch since the beijing branches are not locked. Change-Id: I30bbece5fa2e0b8622db948d45e08a46ecf43ece Issue-ID: INT-506 Signed-off-by: Gary Wu <gary.i.wu@huawei.com>
2018-06-07Change gerrit branches to beijingGary Wu1-1/+1
Change-Id: I840e9aada77fa297273ef5b32663f70ca4aac371 Issue-ID: INT-506 Signed-off-by: Gary Wu <gary.i.wu@huawei.com>
2018-06-07Remove stderr/stdout redirection from CommandInstrumental7-7/+7
Issue-ID: AAF-353 Change-Id: Ief7a3dda7160e385c15ed0be7e158c7de3af8cdd Signed-off-by: Instrumental <jonathan.gathman@att.com>
2018-06-07Merge "Fix AAF CS startup timeouts"Mike Elliott2-3/+3
2018-06-07Merge "Replace AAF Certs"Borislav Glozman2-0/+0
2018-06-07Fix AAF CS startup timeoutsBorislavG2-3/+3
Change-Id: I8140e6c392726e78e0a2c9b18337fa712eb9d944 Issue-ID: OOM-1128 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-06-06Sync docker image versions from manifestGary Wu2-2/+2
Sync docker image versions from docker manifest commit b075c2738d81c258f2157eb329241b00e27938ec Change-Id: I3aab98252d3318431cc4ce49221f552d7bc57b7d Issue-ID: OOM-1053 Signed-off-by: Gary Wu <gary.i.wu@huawei.com>
2018-06-05Sync docker image versions from manifestGary Wu7-7/+7
Sync docker image versions from docker manifest commit fa290e17ced19e893b3f7cf8e070f459c3aeea07 Change-Id: Id185e51667d9b2dd8f0f77046ac044690d09b0ea Issue-ID: OOM-1053 Signed-off-by: Gary Wu <gary.i.wu@huawei.com>
2018-06-05Replace AAF CertsInstrumental2-0/+0
Issue-ID: AAF-346 Change-Id: Ie56c187e4c8ca7a0abad170a7b3a5571084ff566 Signed-off-by: Instrumental <jonathan.gathman@att.com>
2018-05-15Enable https endpoint for SMSKiran Kamineni6-18/+24
SMS got a new SAN certificate and we are using that in this deployment now. Applications will now query on https://aaf-sms.onap This should also fix the failing healthcheck for SMS -P3: Changing liveness and readiness probes to use https instead of tcp which was throwing up TLS error spam on the server Issue-ID: AAF-284 Change-Id: I654eced0bb75c8b5c807c45773f308d824dfb571 Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-05-11Update readiness-check to 2.0.0Gary Wu7-7/+7
Change-Id: I3477393d2ba98fe1d48561efc6991e88d8e03793 Issue-ID: OOM-1076 Signed-off-by: Gary Wu <gary.i.wu@huawei.com>
2018-05-10Improve docker registry secret managementBorislavG12-12/+0
Change-Id: I2d1ff878c215becc9856af184eb0b11defd75e1d Issue-ID: OOM-1064 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-05-08Remove AAF truststore files from configmapMike Elliott10-602/+28
Moved security-related files from the configmap to an init container, to dramatically reduce the overall size of the ONAP deployment configmap. Change-Id: I5e1c176f14d2e010c69e6c1e86c487583ed18f59 Issue-ID: OOM-1061 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
2018-05-08Sync docker image images with docker-manifest.csvGary Wu2-2/+2
Update the docker image versions in the OOM helm charts with the versions specified in the docker-manifest.csv in the integration repo. Change-Id: I38bd9e98ae1b15ed4bbc68051b8516f311aa8db0 Issue-ID: OOM-1053 Signed-off-by: Gary Wu <gary.i.wu@huawei.com>
2018-05-08fixing duplicate nodeport with SOMandeep Khinda1-1/+1
47 is free.. Issue-ID: OOM-930 Change-Id: I90d008bb77cfa1107f85d10c96482fe2693c400a Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2018-05-07AAF ChartsMahendra Raghuwanshi90-293/+3517
-PS3-MK -renaming charts to remove hyphen -refactoring service name configuration. It wasn't quite correct the way it was. It was taking the chart name as the service name and not using the values.yaml from the top level chart as intended. -Jonathan asked to name the main app service "aaf-service and cassandra to "aaf-cass" as this is what is in the cert -squashed https://gerrit.onap.org/r/#/c/45923/1 into this commit. -updated robot to the latest settings Robot tests are failing but all pods come up. I think this can be merged and the AAF team investigate the robot health issue in a running system -PS4-MK -reverting sms changes and taking the latest from master -removing repository from the global section of the aaf values. -this was causing all images to be pulled from nexus3.onap.org which was failing to pull images that come from docker hub. There is supposed to be a proxy through nexus3 to dockerhub but maybe we are missing something. -PS5-MK -removing nodeports from non gui related charts. There are conflicts -PS6-Kiran -Adding imagepullsecrets for aaf-sms-vault subchart -updated image repository to pull from nexus3 -tested and works now and should fix the pull errors -PS7-Kiran -Previous patch picked up a couple of unintended changes -Reverting them -PS8-MK -removing names from identities -using https for robot test Issue-ID: OOM-930 Change-Id: I98f40ef5af03dda73aebf12f6fa48d928915ab34 Signed-off-by: Mahendra Raghuwanshi <mahendra.raghuwanshi@amdocs.com> Add Beijing CQLs into OOM Issue-ID: AAF-114 Change-Id: I2c2d46738ba0885c41f710997d4b212b6ce4d2de Signed-off-by: Instrumental <jonathan.gathman@att.com> Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com> Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-04-25Adding Quorum client sub chart for smsKiran Kamineni20-7/+387
SMS uses vault for its backend which needs an unseal operation to proceed. Quorumclient provides the unseal operation via 3 replicas that store each unseal shard and provide it during unseal. Issue-ID: AAF-255 Change-Id: I62db7a450e1e81aa6bfb2cc5b9da29ce99efd24b Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-04-24Make all services independent of helm Release.NameBorislavG6-6/+8
Issue-ID: OOM-906 Change-Id: Ic65127d3981cb0a696c784392cab59fbf06b1e66 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-04-16Update readiness-check versionBorislavG2-2/+2
Readiness check version is not sinchronized in many pods This causing deployment failures. Issue-ID: OOM-936 Change-Id: Ieef91df17836adcdf24db536440d0a1624a50591 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-04-11Merge "Using .values.service.name for service URL"Borislav Glozman5-8/+5
2018-04-10Using .values.service.name for service URLKiran Kamineni5-8/+5
Use .values.service.name to get the service URL prefix Using common.namepace was an error Issue-ID: AAF-162 Change-Id: I11daa933b9f3a767aea7eac512bd09f4589fcde5 Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-04-08aaf mapping fixKeren Joseph5-0/+0
Issue-ID: OOM-888 Change-Id: I005c686239e366318f08ec3b810ca2b1d3dbda56 Signed-off-by: Keren Joseph <keren.joseph@amdocs.com>
2018-04-05Add support for secret management serviceKiran Kamineni16-7/+637
Adding Helm charts for deployment of secret management service. Adding them as a subchart under aaf. Solved the values problem by using env variable to pass values to SMS about the backend service URL Issue-ID: AAF-162 Change-Id: Iac7973fdf38281a1d1b6ccb0fbfb5c3a052ac7ae Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com> Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
2018-03-28Add standardized helm chart for aafkj16-196/+475
AAF crashes due to "could not find or load main class org.onap.aaf.authz.service.AuthAPI" see https://jira.onap.org/browse/OOM-324 Issue-ID: OOM-732 Change-Id: I1c5f93d6e9a4d91224bfc0df2894ca7ab7d1de38 Signed-off-by: kj <keren.joseph@amdocs.com>
2018-03-22License addition in all yamlsvaibhav_16dec7-0/+98
Issue-ID: OOM-821 Change-Id: I627ac962afe8cd6bf2859a30a0e88f6c9ac89d34 Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>
2018-03-07Replica scaling of Clamp and AAF conatinervaibhav_16dec3-1/+4
Issue-ID: OOM-691 Change-Id: Idea9ebc33310cbaf823163cccd6c816477661118 Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>
2018-03-01Run all components in one namespaceBorislavG5-6/+6
Change-Id: I5fcd4d577c1fda4de27842807c7cf7a5d372756e Issue-ID: OOM-722 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-02-22AAF - readiness image updatekerenj1-1/+1
Issue-ID: OOM-514 Change-Id: I3533bafa88341e6895132ba8fda2fb8fc4e27210 Signed-off-by: kerenj <keren.joseph@amdocs.com>
2018-01-25AAF config seggregationvaibhav_16dec9-5/+451
Issue-ID: OOM-554 Change-Id: I24367eac50b3d46be964a6d60e24b317af376c3e Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>
2017-11-23Update annotations to spec for aafkiranya1-27/+16
Issue-ID: OOM-457 Change-Id: I556adf3714119d8ab8515d36303809b36cbe65f4 Signed-off-by: kiranya <kiran.yadav@amdocs.com>
2017-10-29Add option to disable specific deploymentsyuryn3-0/+8
Add option to disable any deployment by using conditions in helm templates. Each deployment will get helm parameter - boolean flag allowing to disable it. The flags can be listed in the custom values.yaml file that can be passed to the createAll script with '-v' command line option. Change-Id: I32b795de46c72915c2201c94c23f4e061971bb56 Issue-ID: OOM-380 Signed-off-by: yuryn <Yury.Novitsky@Amdocs.com>