aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/aai/components/aai-resources/templates
AgeCommit message (Collapse)AuthorFilesLines
3 days[AAI] Fix Kyverno Policy violationsAndreas Seelinger5-81/+23
- Refactored code for readiness check and use library readinessCheck - Fixed securityContext settings - Limit emptyVolume size and make it configurable - Important: Need to use aai-haproxy docker image version >= 1.15.2 - Refactore meta labels and use common.labels instead Issue-ID: AAI-4044 Change-Id: I346316e64cb67222836951cf12b3772bbf509c6a Signed-off-by: Andreas Seelinger <andreas.seelinger@accenture.com>
2024-11-04[AAI] 15.0.0 chart releaseFiete Ostkamp3-28/+56
- update graphadmin image (1.14.7 -> 1.15.1) - update babel image (1.13.3 -> 1.13.4) - update resources image (1.14.7 -> 1.15.1) - make logging partially configurable and less verbose Issue-ID: AAI-4047 Change-Id: I78695dfccab88244bf119a4fc8877c1b9ddf90c2 Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2024-08-19[AAI] Release 14.0.1 chart with Janusgraph update to 0.6.0Fiete Ostkamp1-1/+2
- 1.14.5 images for resources, traversal and graphadmin with Janusgraph update (0.5.3 -> 0.6.0) - cleanup janusgraph-realtime.properties file since the 'cassandra' storage.backend option is not supported anymore - use more descriptive port names for schema-service - reduce terminationGracePeriodSeconds of pods to enable quicker deployment - declare pod revisionHistoryLimit for all components - make root log level configurable for all components (via log.level.root) Issue-ID: AAI-3950 Change-Id: I6221963139fcf4b748167940b6e59367661ba1e5 Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2024-07-12[AAI] Use 1.14.4 imagesFiete Ostkamp1-8/+1
- deploy 1.14.4 images - increase AAI chart version to 14.0.1 - change sidecar killer job to use wget instead of curl Issue-ID: AAI-3926 Change-Id: I405b52169006800b63fc76568482b4347c99c0b4 Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2024-07-01[AAI] Release version 1.14.0 of AAIFiete Ostkamp2-36/+38
- change major version to 14.X.X - use 1.14.0 images that contain Janusgraph update from 0.2.3 to 0.3.3 - add options for enabling profiling via jmx or remote debugging - use better port names in the chart Issue-ID: AAI-3876 Change-Id: Idb3a3fdf97df76c217c285ed47405fefaa31301d Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2024-05-20[AAI] Helm changes for DMaaP deprecationKv2-0/+38
- Helm changes for DMaaP deprecation in A&AI Issue-ID: OOM-3297 Change-Id: I6a601c4c9958fb6817872520c259525eb650d0c9 Signed-off-by: Kv <vani.kv@accenture.com>
2024-04-11[COMMON] Update all ReadinessChecksAndreas Geissler1-7/+3
Use the new "service" feature of the readiness image to resolve startup dependencies. Issue-ID: OOM-3280 Change-Id: Ia331d51528676744e5e0479d1fd0ca02830c3499 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-03-25Merge "[AAI] Kyverno - disallow-host-path policy"Lukasz Rajewski1-6/+0
2024-03-24[AAI] Kyverno - disallow-host-path policyFiete Ostkamp1-6/+0
- remove hostPath mounting of /etc/localtime Issue-ID: AAI-3803 Change-Id: Ia5d1bfef1581a5e3f1b2ed3869ad1f840337f969 Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2024-03-20[COMMON] Make imagePullSecrets configurableAndreas Geissler1-2/+1
Currently in ONAP the imagePullSecrets is hardcoded to 'onap-docker-registry-key' which is created by the repository-wrapper component. With this change the secrets can be configured via setting global.imagePullSecrets and optionally per image if it is configured as map (image.pullSecrets) Issue-ID: OOM-3284 Change-Id: I8644f9b46043b6014219c42928e057b149df43a4 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-03-14[COMMON] Harmonize resource settings, Part 2Andreas Geissler1-2/+2
Some settings are still wrongly interpreted (e.g. 0.02Gi) Therefor they are changed to non-floating numbers (e.g. 20Mi) Issue-ID: OOM-3273 Change-Id: Icc88dead1ac5b1df8629d6adcc438a739e20522e Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-02-28[COMMON] Harmonize resource settingsAndreas Geissler1-0/+7
Update all resource settings to the kubernetes recommended normalized form. Fix ReadinessCheck resource limits. Issue-ID: OOM-3273 Change-Id: Ie10903b801e4dc1689bcec092162d711a431a7a6 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-01-16[AAI] Add options for remote debugging and profilingFiete Ostkamp1-0/+15
- add debug.enabled value for enabling debugging [1] - add profiling.enabled value for enabling probiling [2] - only expose debug port (5005) if debug.enabled=true [1] appropriate jvm args will be added and the debug port will be exposed on the pod [2] appropriate jvm args will be added and the 9999 port used for profiling via jmx will be exposed Issue-ID: AAI-3730 Change-Id: I1d83a6ac1875ba63e710e86d4fcbfc8924810292 Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2023-10-25[AAI] Add variables for HEAP and METASPACE sizesAndreas Geissler1-0/+6
Add environment variables for aai-resources and aai-traversal pods to set the HEAP and METASPACE sizes Issue-ID: OOM-3248 Change-Id: Ifd28915564bb9309f679c5c7a2e56149aee27a57 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-09-29[MARIADB][COMMON] Add support for mariadb-operatorAndreas Geissler1-1/+1
Add template functions for the mariadb-operator resources and update the mariadb-galera chart to support them Change the flag to "useOperator" in cassandra to the global setup and additional labels for cassandra resources Changed Policy DB users to support the new mariadb User and fixed db.sh script to wait for the DB user creation Use the new readiness image 5.0.1 with the "app-name" option Change the MariaDB-Galera Service to the "primary" to avoid Deadlocks Fix previous SDNC patch (https://gerrit.onap.org/r/c/oom/+/135308) and temporary disable MariaDB for SDNR, as it is not compatible to MariaDB 11 Issue-ID: OOM-3236 Change-Id: Ie63fcc9c6d5fa802d38c592b449e7ff8553c2ab9 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-07-19[AAI] Update Version labels in deploymentsAndreas Geissler1-4/+4
Add "" to the version label to interpret it as string Issue-ID: OOM-3228 Change-Id: Ib3af1e6b4caaf4d2153bd73211e0bd7c1b1ccb96 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-07-18[AAI] Fix Istio compatibility and add Job ServiceAccountAndreas Geissler2-2/+24
Add labels for "version" and "name", add port name in deployment Add missing Service account in Job definitions Issue-ID: OOM-3229 Issue-ID: OOM-3228 Change-Id: I65c188f4c029b94cc0dc77ebe9e00bfc9a0cb27a Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-05-26[AAI] Create Authorization Policies for AAIAndrewLamb1-0/+17
- Create Authorization Policies for AAI - Add initial authorized serviceAccounts for each sub-component service Issue-ID: OOM-3126 Change-Id: Ic7fdaf595ae3534805a39859fe8e02b81999bef3 Signed-off-by: amatthews <adrian.matthews@est.tech> Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
2023-03-29[AAI] Remove AAF/TLS config from chartsefiacor3-79/+6
Remove aaf and tls config from aai charts Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: Ibb26e7ae00eb6b5a65ec2263b8f57ad6fb345892 Issue-ID: OOM-3111
2023-03-03[COMMON] Fix resources indentmiroslavmasaryk1-1/+1
Fix of resources template indent and therefore resources in components Issue-ID: OOM-3104 Signed-off-by: miroslavmasaryk <miroslav.masaryk@telekom.com> Change-Id: I825a3860db00cae4bb80b2aa2d82ac1a42b33124
2022-11-23[AAI] Service monitor for scraping prometheus metricsleila3-0/+13
Changes are done for aai resources graphadmin and traversal Session affinity for aai resources traversal and aai haproxy Issue-ID: AAI-3599 Signed-off-by: leila <leila.nishimwe@bell.ca> Change-Id: Ib3853c45051ca8e9c025bd0d6e700a08a54cb1a9
2022-09-27[AAI] OOM AAI resources healthcheck based on Cassandra DB HealthcheckRommel Pawar1-2/+20
Use echo endpoint for aai-resources liveness and readiness probes Updated aai resources docker image Issue-ID: AAI-3528 Signed-off-by: Rommel Pawar <rommel.pawar@bell.ca> Change-Id: I2ceb489142063189d39ec271d3ea82e00e781b75
2021-11-02[AAI] Use log templateMaciej Wereski1-19/+4
Ability to turn off filebeat is needed as it is being deprecated. To achieve that existing log helper template is used. Issue-ID: OOM-1 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I730b5463fea750594a23ce391c352959d166195e
2021-09-14Merge "[AAI] Service Mesh compatibility"Sylvain Desbureaux1-2/+2
2021-09-13[AAI] Service Mesh compatibilityosk114611-2/+2
This patch makes AAI to work on service mesh by removing https calls from everywhere. It allows also to use AAI on an environment without need of TLS. Issue-ID: OOM-2670 Signed-off-by: Ondrej Frindrich <ondrej1.frindrich@orange.com> Change-Id: I19adabc7b33c1ada243ec16f77dbf8fde19b1386
2021-09-03[AAI] Added Rolling Update StrategyM.Hosnidokht1-0/+23
Addded preStop hook to let long-running tasks be finished before the SIGTERM is invoked Issue-ID: AAI-3368 Signed-off-by: Mohammad Hosnidokht <mohammad.hosnidokht@yoppworks.com> Change-Id: I02cc0068a3588d94b3da9414685e6cd798e9976f
2021-07-20[AAI] Update chart with service accountfarida azmy1-0/+1
Add service account to requirements.yaml, values.yaml and deployment/statefulset Issue-ID: OOM-2704 Signed-off-by: farida azmy <farida.azmy.ext@orange.com> Co-authored-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Id03799f7a7ed1a031c7d819999496b18bac80881
2021-06-16[AAI] Update truststore path to generated certificate locationHarish Venkata Kajur1-1/+1
After the change to use the generated certificate the path to where the truststoreONAPAll.jks is changed so updating location to match that Issue-ID: AAI-3350 Change-Id: Ic20cd2c87eb66ca098dcc232d8629fd7d25d8413 Signed-off-by: Harish Venkata Kajur <vk250x@att.com>
2021-03-29[AAI] Simplify cert retrieval scriptSylvain Desbureaux1-2/+2
As retrieving values is now done via a generic script, let's clean a little bit cert retrieval in order to be faster. Issue-ID: OOM-2688 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I98dc2add27f39f615f34b319ea88edeeac987334
2021-02-22[AAI][RESOURCES] Remove Hardcoded certificatesSylvain Desbureaux4-50/+30
Use Certinitializer in order to retrieve needed certificates. Issue-ID: OOM-2655 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie05936be0f513c76ea4dce31b8a460056b79a4b0
2021-02-11Merge "[AAI] Remove unused AAF proxies"Krzysztof Opasiak4-244/+41
2021-02-04Merge "[AAI] Templatize MSB services"Krzysztof Opasiak1-1120/+15
2021-02-01[AAI] AAI-EVENT publishing fix for httpsHarish Venkata Kajur1-0/+2
Updating the resources microservice to trust the onap certificates to fix the issue where the A&AI is unable to publish to AAI-EVENT topic because A&AI is not trusting the message router certificate Issue-ID: AAI-3219 Change-Id: I33d52a1f4593154ce123e7c67aee6dcdeedaf889 Signed-off-by: Harish Venkata Kajur <vk250x@att.com>
2021-01-22[AAI] Remove unused AAF proxiesSylvain Desbureaux4-244/+41
Some AAI components have the ability of using AAF proxies for authentication. As AAF is deprecated and these proxies seems not to be used by anybody, let's remove them. Issue-ID: OOM-2663 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie78740eb452f1b28f031a97fe272f86acce1f8be
2021-01-19[AAI] Templatize MSB servicesSylvain Desbureaux1-1120/+15
Instead of "hardcoding" all services, let's generate them with two values and shrink a little bit template. It also simplify the reading of the template. Issue-ID: OOM-2664 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I2a5f181fac93f34e074998aeaf82489f8305de1f
2020-12-11[AAI] Make AAI helm3 compatibleSylvain Desbureaux3-0/+6
Helm3 doesn't like empty components with only license headers so we remove them as much as possible. Issue-ID: OOM-2562 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I26b790965d2926792f801b87294d15a074de7be6
2020-12-07[AAI] Uses new tpls for repos / imagesSylvain Desbureaux1-57/+50
This commit makes AAI chart to use the new generator for repositories and images. Issue-ID: OOM-2364 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I601be377556d16580f2eda6d00d144fb4a21b445
2020-12-02[AAI] Reintegrate AAI OOM charts in main repoSylvain Desbureaux3-0/+1687
AAI chart is currently in its own directory. As a lot will be done in the charts with tight coordination between "common" part and components parts, it's a lot easier to have everything in a same place for now. Issue-ID: OOM-2513 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I5e27f7de286bf74e6d3a443e1cb31f63b3d83265 [Update aai to commit 18d4bd165e12cb4d03baa318e506f0dda381cd89] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>