aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/common
AgeCommit message (Collapse)AuthorFilesLines
2022-09-28[PLATFROM] Update cert-manager release to 2.6.0Andreas Geissler1-1/+1
Update libraries to fix vulnerabilities Issue-ID: OOM-2985 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I8ac4a769a791ffb90dfd57358dd839c7a631c403
2022-08-31Merge "[COMMON] Disable Nodeports in _service template"Jack Lucas2-0/+5
2022-08-19[COMMON] Disable Nodeports in _service templateAndreas Geissler2-0/+5
When using the _service template in case of ServiceMesh a NodePort is changed to a ClusterIP Issue-ID: OOM-2013 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I42fa1af57dc393356990bedc3ec52babb4f6c09a
2022-08-19[COMMON] Add Istio IngressGateway configAndreas Geissler1-2/+103
In the _ingress.tpl create Gateway and VirtualService resources when SM is enabled, add ssl redirect and use plain_port, if it is defined in ingress config Issue-ID: OOM-3000 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I20c9f88573547fbad631df3c5e0fa17fbdeed80b
2022-08-18[CASSANDRA] Change values to makre Cassandra instances more stableMichal Jagiello1-4/+4
Based on Cassandra documentation enlarge limits of Cassandra pods and the heap size Issue-ID: AAI-3492 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I43e6eeb043b75e5bf5333a3fbdb66f832f01c867 (cherry picked from commit 56b8db227af43c0698eb877dc723f93ad5a0d812)
2022-08-17Merge "[COMMON] Update Makefiles to enable parallelization"Jack Lucas5-22/+65
2022-08-17[COMMON] Update Makefiles to enable parallelizationAndreas Geissler5-22/+65
All Makefiles are updated to support SKIP_LINT option, have a defined order of compilation (common -> components) to support the parallel compilation of charts using: make all -j8 (for 8 Jobs). Additionally use cm-push instead of push to use the new K8S/Helm version Issue-ID: OOM-3011 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: If9903c9d5bc646b5ce54075acc616e98c4b6706e
2022-08-02[DCAEGEN2-SVCS] Support config update via configMapJack Lucas1-21/+6
Change chart to mount application configuration configMap directly on the application container and rely on the DCAE SDK to do environment variable substitution on the configMap content. This allows changing configuration by editing the configMap without restarting the application. Remove message router authenticated topic provisioning from DCAE. Issue-ID: DCAEGEN2-2935 Signed-off-by: Jack Lucas <jflos@sonoris.net> Change-Id: I85139e64f8cb7e1b88f8fca8d5d84cc71f946290
2022-07-29[COMMON][CASSANDRA] Cassandra ServiceMesh ImprovementsAndreas Geissler1-1/+5
Disable inter-cluster ports from the Sidecar communication Issue-ID: OOM-2820 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ie9b523e881a6dd5bef62debdf208994d03a08f29
2022-07-08[COMMON][MARIABD] Fix MariaDB ServiceMesh compatibilityAndreas Geissler1-1/+2
Update the pod annotations to exclude the cluster communication ports from the SM sidecars. Fix mysql protocol setup fodddr istio and update mariadb-init job to support istio sidecar communication. This is separated from a patch for CDS SM compatibility Issue-ID: OOM-2820 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I9e839e019c948614fea7d4b3b5930270f7e7a7c6
2022-06-24[COMMON] Bump ONAP versionAndreas Geissler28-90/+90
Use version 11.0.0 for Kohn Issue-ID: OOM-2971 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Icc0e0839fc6def2035383b5fa4c9153fc15fafda
2022-06-23Merge "[COMMON][ELASTIC] ElasticSearch ServiceMesh compatibility"Jack Lucas3-5/+5
2022-06-23Merge "[SDNC] Update image to install final Jakarta fixes"Andreas Geissler1-1/+1
2022-06-22Merge "[COMMON] Network-name-gen and dgbuilder ServiceMesh compatibility"Jack Lucas3-6/+18
2022-06-22Merge "[COMMON] Elasticsearch ServiceMesh compatibility"Jack Lucas3-0/+18
2022-06-22Merge "[COMMON][POSTGRES] Make DB init jobs ServiceMesh compatible"Jack Lucas4-0/+14
2022-06-08[SDNC] Update image to install final Jakarta fixesDan Timoney1-1/+1
Update versions for SDNC images to install final Jakarta fixes. Issue-ID: SDNC-1706 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Ic0c7ddf9f61f020889aa814d7031f6f76a473a8f
2022-06-02[COMMON] Network-name-gen and dgbuilder ServiceMesh compatibilityRadoslaw Chmiel3-6/+18
Network-name-gen and dgbuilder charts changes to make it work with servicemesh Issue-ID: OOM-2982 Signed-off-by: Radoslaw Chmiel <r.chmiel@partner.samsung.com> Change-Id: I23bffe3f2de6196dbad1bbb03ea0c2fc46313865
2022-06-02[COMMON] Elasticsearch ServiceMesh compatibilityRadoslaw Chmiel3-0/+18
ElasticSearch charts changes to make it work with Istio Issue-ID: OOM-2979 Signed-off-by: Radoslaw Chmiel <r.chmiel@partner.samsung.com> Change-Id: Ieddea3342d4b27a6dda8f5075ad344b13ee310f7
2022-06-02[COMMON][ELASTIC] ElasticSearch ServiceMesh compatibilityAndreas Geissler3-5/+5
Rename the ES ports to fit to the Istio Naming schema. Issue-ID: OOM-2820 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I030c29883755dfaba7a76b167f2f7895a9d4521c
2022-05-31[COMMON][POSTGRES] Make DB init jobs ServiceMesh compatibleAndreas Geissler4-0/+14
Add wait cycles and sidecar deletion container to ETCD and POSTGRES init charts Issue-ID: OOM-2820 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Iddc8b7d161dddafe53efb0ce809542a60bd957b8
2022-05-12[COMMON][MARIADB] Corrected PeerAuthentication matchLabelsAndreas Geissler1-1/+1
The matchLabels should use the existing Label: app.kubernetes.io/name instead of adding a new label Issue-ID: OOM-2820 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I9d4405f2855f34cc32085ba571478dafa344e51e
2022-05-10[DMAAP-STRIMZI] Add strimzi kafka bridgeefiacor1-34/+0
Move DMaaP MR to use srimzi kafka Remove mr kafka and zookeeper Add strimzi kafka bridge to dmaap Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I3af65efd85b7dfb16c4682dd7607734fcd95adaf Issue-ID: DMAAP-1622
2022-04-29[COMMON][MARIABD] MariaDB ServiceMesh compatibilityAndreas Geissler7-15/+43
Update the port names of metrics and mariadb to match the istio requirements and update the timeouts. Fix mysql protocol setup for istio and update mariadb-init job to support istio sidecar communication. This is separated from a patch for CDS SM compatibility Issue-ID: OOM-2820 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I02c19c9fcfbd76a2cede0b924174ad81b45d719e
2022-04-21[MARIADB] Back to istanbul version of mariaDB imageMichal Jagiello2-2/+2
We have stability issues with MariaDB (which didn't occur on istanbul). Issue-ID: OOM-2963 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I23b31db06dd87a45a47c8b2741b36e6387e5d1ec
2022-04-19[CCSDK][SDNC] Install Jakarta versionsDan Timoney2-2/+2
Install Jakarta M4 versions of CCSDK and SDNC docker containers Issue-ID: CCSDK-3604 Issue-ID: SDNC-1672 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Ifd5da73e9fd6937e9e395522b49f60263f64d472
2022-04-11[CPS] Fix statefulset upgradeBruno Sakoto3-6/+10
Remove helm chart label from timescaledb statefulset fields for which updates are forbidden Issue-ID: CPS-857 Change-Id: I024ef0cd8c23c477e1d43a1a4ee9c5d6d1743f3b Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca>
2022-04-07[SDC][MariaDB] Increase persistance volume size of mariadb-galeraMichal Jagiello1-1/+1
We observed from time to time issues with fetching data from mariadb-galera. We suppose that can be related with too low persistence volume size of mariadb-galera. Increase that value and observe gating and daily. Issue-ID: SDC-3949 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I964351b755e11a513da42f1c11da86bb1130ad96
2022-04-06Merge "[CPS] Set postgres replica strategy"Jack Lucas1-0/+2
2022-03-31[CPS] Set postgres replica strategyBruno Sakoto1-0/+2
Strategy is set to Recreate instead of using default RollingUpdate Issue-ID: CPS-894 Change-Id: Ia5a5f54512baa6445a161c43075f0c29679691d0 Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca>
2022-03-28[GLOBAL] Allow anonymous access to main repoSylvain Desbureaux1-3/+6
Today, access to main repo (nexus3.onap.org:10001 by default) mandates an user configuration. If someone is proxying it with a repository with anonymous access, it may not work. This patch allows to remove authentication by setting user to empty string. Issue-ID: OOM-2928 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I379d43343694d7dcb9212687c5a8104cc8c77bc3
2022-03-22Merge "[POLICY] Enable prometheus integration for policy fwk"Sylvain Desbureaux1-0/+21
2022-03-22Merge "[COMMON][MARIADB] Fix backup job"Sylvain Desbureaux2-10/+36
2022-03-21Merge "[COMMON] Update Ingress API"Jack Lucas1-3/+10
2022-03-21[POLICY] Enable prometheus integration for policy fwkRashmi Pujar1-0/+21
1. Define serviceMonitor for policy components 2. Changes to common serviceMonitor tpl file to include tls params in authentication config, and to provide ability to overrride labels. Issue-ID: POLICY-3779 Signed-off-by: Rashmi Pujar <rashmi.pujar1@bell.ca> Change-Id: I79441958698271d9118efb78cfd121433e201ebd
2022-03-18[COMMON][MARIADB] Fix backup jobJozsef Csongvai2-10/+36
The backup job stopped working after upgrade to bitnami images. Mariabackup was not designed to work remotely, it is supposed to run on the database server. Because of this we need to mount the data pvc into the backup job pod. It will however connect to the database daemon using a hostname, so we need to connect to the first replica in the cluster. Also had to set readOnlyRootFilesystem=false and add emptyDir volumes to solve various permission issues. Issue-ID: OOM-2932 Signed-off-by: Jozsef Csongvai <jozsef.csongvai@bell.ca> Change-Id: I776903f9ec541f8dc5818b2ba4c1292226ec2bc6
2022-03-08Merge "[COMMON][MARIADB] Fix typo in bootstrap condition"Sylvain Desbureaux1-1/+1
2022-03-08Merge "[DMAAP] Add pod security context to MR and others"Sylvain Desbureaux1-0/+2
2022-03-07[COMMON][MARIADB] Fix typo in bootstrap conditionJozsef Csongvai1-1/+1
This was causing errors when using bootstrapFromNode Issue-ID: OOM-2933 Signed-off-by: Jozsef Csongvai <jozsef.csongvai@bell.ca> Change-Id: I55b49ad40b5f45b394acd064fcbc7f272298fde0
2022-03-04[COMMON] Update Ingress APIJack Lucas1-3/+10
Move from using the v1beta1 version of the Ingress API (deprecated in k8s v1.19 and not present in v1.22+) to the stable v1 version. Issue-ID: OOM-2926 Signed-off-by: Jack Lucas <jflos@sonoris.net> Change-Id: Icbd4bf3b8a8a0521160e277cde2977aef8a17faf
2022-03-03[DMAAP] Add pod security context to MR and othersrope2521-0/+2
Add security context to pods within DMAAP Change-Id: I86f7bd79e77dec33879f4ee3b599799705d40a24 Issue-ID: OOM-2913 Signed-off-by: rope252 <gareth.roper@est.tech>
2022-02-25Merge "[GLOBAL] Bump Kubectl image"Jack Lucas1-1/+1
2022-02-25Merge "[GLOBAL] Bump Nginx image"Jack Lucas1-1/+1
2022-02-25Merge "[GLOBAL] Bump busybox image"Jack Lucas1-1/+1
2022-02-24[GLOBAL] Bump busybox imageSylvain Desbureaux1-1/+1
Use busybox 1.34.1 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I9c03855a610577fe396095ae7e631d22c75d22f8
2022-02-23[GLOBAL] Bump Kubectl imageSylvain Desbureaux1-1/+1
Use kubectl 1.22.4 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I4501f5a91f0fe7d9b75abf7fdaaaf7405433fb16
2022-02-23[GLOBAL] Bump Nginx imageSylvain Desbureaux1-1/+1
Use nginx 1.21.4 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I2a391697c066a45845a45f605db1c578684e1feb
2022-02-22Merge "[COMMON] Export cassandra key metrics"Sylvain Desbureaux4-2/+130
2022-02-21Merge "[OOM] Avoid duplicate DrPublisher creation via DCAE"Sylvain Desbureaux2-4/+3
2022-02-21Merge "[MARIADB] Use common labels for the metrics Service selector"Sylvain Desbureaux1-2/+2