summaryrefslogtreecommitdiffstats
path: root/kubernetes/clamp
AgeCommit message (Collapse)AuthorFilesLines
2020-09-02[CLAMP,COMMON] Escape special chars in mysql passwordsKrzysztof Opasiak1-1/+6
Fix both clamp and common mariadb-galera instances to make sure that special characters in passwords are escaped properly. Issue-ID: OOM-2328 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Iee48523d36d404ad7b21515f0d205f2f60a507ed
2020-07-29[CLAMP] Refer to docker.io mariadbsebdet1-1/+1
Remove the link to cached mariadb in nexus3.onap.org, use docker.io instead Issue-ID: CLAMP-855 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: I449298ae0188d1478cf4ae13383c00c5e921de88
2020-07-14Make CLAMP compatible with Kubernetes v1.17Magdalena_Biernacka6-6/+24
Issue-ID: OOM-2449 Signed-off-by: Magdalena Biernacka <magdalena.1.biernacka@nokia.com> Change-Id: I75090aac67139465bb5f4030129361ea771c11d2
2020-07-06Release Clamp 5.0.7sebdet2-2/+2
Release clamp 5.0.7 containing an important fix for clamp-857 Issue-ID: CLAMP-857 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: I94b0d11ca0e6fdf441784c8cb77860d002923dad (cherry picked from commit f80ad5609f2e271eaa9d3c9c693f5d5c289c250e)
2020-05-25[CLAMP] Allow to use ' in clamp mariadb passwordsKrzysztof Opasiak3-0/+213
' is one of characters that are placed in passwords by our default password generation algorith. As ' is a special character in SQL files we need to escape it before substituting environment variables in .sql file. Issue-ID: OOM-2317 Reported-by: Fiachra Corcoran <fiachra.corcoran@est.tech> Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I0423b0eaecf7cc16892c10b14881c4d09a24a1d0
2020-05-05Merge "[CLAMP] Configure Ingress for Kibana"Krzysztof Opasiak2-0/+21
2020-05-05[CLAMP] Configure Ingress for KibanaSylvain Desbureaux2-0/+21
Clamp Kibana didn't had a proper ingress, adding it. Issue-ID: OOM-2175 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I584bffc776789e7e527ffe24fb6ea73f42aebd59
2020-05-05Merge "remove hardcoded MariaDB password"Sylvain Desbureaux12-93/+113
2020-05-04remove hardcoded MariaDB passwordJulienBe12-93/+113
This aligns with other changes on OOM. You can either supply a specific password or have it generated for you based on a master password Issue-ID: CLAMP-796, OJSI-188 Change-Id: If1b80fc47cf1033e094f8a106746d1e8c556c08b Signed-off-by: JulienBe <jb379x@att.com> Co-authored-by: sebdet <sebastien.determe@intl.att.com> [small updates in common secret template usage] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-04-29Change ingress hosnames for exposed servicesLucjan Bryndza1-1/+1
Change ingress host to the required hostnames Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-2391 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-04-27Merge "[CLAMP] use common templates for logs"Krzysztof Opasiak10-59/+85
2020-04-22[CLAMP] use common templates for logsSylvain Desbureaux10-59/+85
Using the common templates for centralized logging. Issue-ID: OOM-2370 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I4824e11bd2be971d15e3a39510f544d2c36b05fd
2020-04-20Release Clamp 5.0.4sebdet1-1/+1
Release clamp 5.0.4 containing all the fixes from CLAMP-R6 Sprint 5 Issue-ID: CLAMP-822 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: I02cf0de0569f236f56be482a301ef61121c89ffb
2020-04-03Bump up clamp to 5.0.3sebdet2-2/+2
Due to some fixes for policy communication, we have to bump up clamp to 5.0.3 Issue-ID: CLAMP-819 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: I46eed4fa23e92002a6b80f4d1b00e5ba27b4edd2
2020-04-02Merge "Bump chart version"Morgan Richomme11-11/+11
2020-04-02Bump chart versionSylvain Desbureaux11-11/+11
Use 6.0.0 in preparation for Frankfurt release Issue-ID: OOM-2320 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I8ad82dfdf48b56c38c0e85d640b18cc13c8d9e67
2020-04-02Remove logback and bump up the clamp versionsebdet4-327/+3
Remove the logback file not used anymore and bump up clamp version Issue-ID: CLAMP-812 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: Ic3576039df21eb8aa27064188c56c0117aea1ceb
2020-03-31Merge "Update CLAMP deployment for Frankfurt release (RC0)"Sylvain Desbureaux7-63/+221
2020-03-30Update CLAMP deployment for Frankfurt release (RC0)sebdet7-63/+221
Update the SQL and settings of Clamp + set the docker image to current release Issue-ID: CLAMP-795 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: Idaa4935516237221c90c4cf9141136fa1e104a02
2020-03-03ES non-rootosgn422w3-3/+3
ElasticSearch run as non-root user Issue-ID: CLAMP-668 Change-Id: I786e2ff8babf4b78fa6dfdf63ff9cd486099fbac Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
2020-02-21move to OpenDistroosgn422w14-317/+108
move dashboard to Opendistro and certificate update Issue-ID: CLAMP-483 Change-Id: Ibaba1d517c13adeab611ab23749fb16295081372 Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
2020-02-01[ONAP-wide] Replace .Release.Name with common.releaseKrzysztof Opasiak23-49/+49
ONAP is too big to be deployed using helm install so we need to use a custom helm plugin helm deploy. This script deloys onap component by component instead of deploying evrything at once. Unfortunately this script also modifies the helm release by appending component name to it. As a result of this behavior our objects are called for example: onap-mariadb-galera-mariadb-galera-0 instead of just being called onap-mariadb-galera-0. This patch simplifies this naming convention by replacing all direct usages of .Release.Name with common.release macro which strips the component specific part from the release name. Issue-ID: OOM-2275 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ia8cead50d305adb00eef666d0a1ace74479b5183
2019-12-06[CLAMP] Use global storage templates for PVCSylvain Desbureaux4-15/+10
OOM has now templates in order to create the needed PVC, using: * a PV with a specific class when using a common nfs mount path between nodes (sames as today use) --> is the default behavior today * or a storage class if we want to use dynamic PV. On this case, we use (in order of priority): - persistence.storageClassOverride if set on the chart - global.persistence.storageClass if set globally - persistence.storageClass if set on the chart Change-Id: I2cc90fe7a22a04d47d406b854c3a75502e539a25 Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-12-04Add ingress controler support to CLAMPLucjan Bryndza2-0/+7
Issue-ID: OOM-2175 Change-Id: I15359ebc3116bf453c2a2b3ce706ead6024797bf Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2019-11-07Merge "Fix the nginx config"Sylvain Desbureaux1-0/+2
2019-11-05[CLAMP] set Mariadb PVC to RWOSylvain Desbureaux1-1/+1
Forgot Mariadb PVC in previous commit (https://gerrit.onap.org/r/c/oom/+/94610). Change-Id: I9e3d96eab8b6d6ada7d2ab406a8e72249c909aa4 Issue-ID: CLAMP-488 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-10-17Fix the nginx configsebdet1-0/+2
Fix nginx config so that AAF can work through it Issue-ID: CLAMP-519 Change-Id: Ica2d3ea6f6c4b19e019f3e7cf30e5b1372f07255 Signed-off-by: sebdet <sebastien.determe@intl.att.com>
2019-10-11Align on release 4.1.3sebdet10-871/+22
Align the charts on the 4.1.3 clamp containers + fix the dcae parameters to https4 + remove old db files Issue-ID: CLAMP-513 Change-Id: I0429d1888f78d1a0f5ed7543cf0f9bb9cd77e652 Signed-off-by: sebdet <sebastien.determe@intl.att.com>
2019-09-16Bump up clamp to 4.1.2sebdet4-4/+4
Bump up the version of clamp to 4.1.2 to take the latest changes Issue-ID: CLAMP-506 Change-Id: If77b23f5263affd34cce121ab6b6d905195321f0 Signed-off-by: sebdet <sebastien.determe@intl.att.com>
2019-09-09Add frontend containersebdet17-82/+485
Add the frontend container as the main chart, and add clamp-backend as the a sub chart Issue-ID: CLAMP-486 Change-Id: Ib02562d608011047157b77b302902de86c0d954d Signed-off-by: sebdet <sebastien.determe@intl.att.com>
2019-09-05Merge "Fix OOM Clamp"Mike Elliott8-11/+21
2019-09-05Fix OOM Clampsebdet8-11/+21
Fix the image name and SQL for mariadb as it has been updated Issue-ID: CLAMP-467 Change-Id: I0bb9bf48b86a8eb3cc7a0f74dd5a5f20e46e8b44 Signed-off-by: sebdet <sebastien.determe@intl.att.com>
2019-09-02Merge "Move CLAMP Storage access to RWO"Alexis de Talhouët1-1/+1
2019-09-02Merge "Use nodePortPrefix variable in CLAMP-mariadb service template"Borislav Glozman1-1/+1
2019-08-29Move CLAMP Storage access to RWOSylvain Desbureaux1-1/+1
Today when deploying CLAMP with OOM, the PersistentVolumeClaim needs the "ReadWriteMany" (or "RWX") capability. According to Kubernetes Documentation (https://kubernetes.io/docs/concepts/storage/persistent-volumes/#access-modes), ReadWriteMany stands for "the volume can be mounted as read-write by many nodes". That means that a particular PVC needs to be read and written from many pods. That also means that your code takes that into account and do the work to avoid write at the same place at the same time. An issue on RWX mode is that most "official" storage driver from Kubernetes doesn't support it (13 over the 19 drivers doesn't support it, espacially OpenStack, Amazon and Google storage classes). CLAMP PVC is used only for one ES instance. Thus we don't need RWX. Change-Id: I3a17195bca4f0f01b5cdb0d8e803bb2a8ab2dd38 Issue-ID: CLAMP-488 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-08-05Change dcae to httpssebdet1-1/+1
Change all dcae port to https even for inventory Issue-ID: CLAMP-412 Change-Id: Ie63ea0c11b96b08269439ed91e4f34d1b267cc9c Signed-off-by: sebdet <sebastien.determe@intl.att.com>
2019-08-02EarlyDrop and securityosgn422w7-5/+27
resolve security isue on kibana and release early drop CLAMP Issue-ID: CLAMP-419 Change-Id: I098f30d251f020470c0f1af1ce309a6a1a3b814d Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
2019-07-17Use nodePortPrefix variable in CLAMP-mariadb service templatePawel Wieczorek1-1/+1
Issue-ID: OOM-1272 Change-Id: I5aaaf20a2bf53134ec18943ada701383ec37ab9e Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-07-11Moving Helm Chart version for El AltoMike Elliott9-9/+9
Updating all helm chart versions to 5.0.0 for the El Alto release. Merge will be co-ordinated with the merge of a separate aai/oom patch. Please do not merge until this coordination has completed. Issue-ID: OOM-1980 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com> Change-Id: I31daaebeacea33565f13affd2fa28fb15fe948ba
2019-06-11Bump up clamp versionDeterme, Sebastien (sd378r)3-3/+3
Update clamp version to latest Issue-ID: CLAMP-408 Change-Id: I59b01cf3f9cdd37b5d0c48f63bea33d99040fea4 Signed-off-by: Determe, Sebastien (sd378r) <sebastien.determe@intl.att.com>
2019-05-31Bump up clamp versionDeterme, Sebastien (sd378r)3-3/+3
Update clamp version to latest Issue-ID: CLAMP-406 Change-Id: I05f5ae79a7856bffe671d806ab623313d6194727 Signed-off-by: Determe, Sebastien (sd378r) <sebastien.determe@intl.att.com>
2019-05-23kibana https onlyosgn422w6-3/+82
remove http access and allow only https for kibana UI Issue-ID: OJSI-147 Change-Id: I6026044c919abd51b8b6bd3b65f9552555c98e4c Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
2019-05-21Update clamp configDeterme, Sebastien (sd378r)1-3/+3
Update clamp policy urls to enable https by default, as it's enabled by default on policy engine Issue-ID: CLAMP-385 Change-Id: I802501b69da0f5639f01fa0e127a07e53199b8f7 Signed-off-by: Determe, Sebastien (sd378r) <sebastien.determe@intl.att.com>
2019-05-10Update CLAMP images tagsChrisC3-3/+3
Update to RC images for clamp (4.0.1) Issue-ID: CLAMP-377 Change-Id: I3b890652ebd7bb045976c19263b0dadf3f291642 Signed-off-by: ChrisC <christophe.closset@intl.att.com>
2019-05-09Add missing deployment urlDeterme, Sebastien (sd378r)1-2/+3
Add missing DCAE deployment url and creds for oom deployment Issue-ID: CLAMP-373 Change-Id: Ida189881960e006064fb3b5426ac7187e66e0483 Signed-off-by: Determe, Sebastien (sd378r) <sebastien.determe@intl.att.com>
2019-05-06Update DB with latestDeterme, Sebastien (sd378r)1-13/+13
Update DB with latest change for loop objects Issue-ID: CLAMP-368 Change-Id: Iad91362560a987a170a95e9b3959e1352296e610 Signed-off-by: Determe, Sebastien (sd378r) <sebastien.determe@intl.att.com>
2019-04-30Add new parameters for DCAEDeterme, Sebastien (sd378r)1-1/+3
Add missing user name and password for DCAE calls Issue-ID: CLAMP-358 Change-Id: I5070856baca16666565cfca540ad7f587dc22bdf Signed-off-by: Determe, Sebastien (sd378r) <sebastien.determe@intl.att.com>
2019-04-29Remove http portDeterme, Sebastien (sd378r)3-15/+5
Remove http by default for clamp and let the Https defined in OOM Issue-ID: CLAMP-363 Change-Id: Ib97248d775edd6b67a0158abc9dac8696cd42125 Signed-off-by: Determe, Sebastien (sd378r) <sebastien.determe@intl.att.com>
2019-04-26Add missing parametersDeterme, Sebastien (sd378r)2-109/+177
Add missing parameters for policy api host and port + creds + update logback Issue-ID: CLAMP-358 Change-Id: I62989efc7e8fef60c0b84c4b4425b1d24582d5c0 Signed-off-by: Determe, Sebastien (sd378r) <sebastien.determe@intl.att.com>
2019-04-25Bump up CLAMP imageYang Xu3-3/+3
Change-Id: I6a49d62a097102e7b14707582a98720493fc422b Issue-ID: CLAMP-358 Signed-off-by: Yang Xu <yang.xu3@huawei.com>