aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/common
AgeCommit message (Collapse)AuthorFilesLines
2020-09-09[COMMON] Make mongo run as non-rootKrzysztof Opasiak2-0/+10
Use our helper template and k8s features to make mongodb run as a non-root user as per Guiling requirements. Issue-ID: DCAEGEN2-2424 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I44bc079a2cc49dc1b0f1da88e220290098e909d5
2020-09-08Merge "[CLAMP,COMMON] Escape special chars in mysql passwords"Sylvain Desbureaux1-2/+3
2020-09-07Merge "[COMMON] Use faster version of common secret template"Krzysztof Opasiak3-27/+23
2020-09-07Merge "[COMMON] Allow to initialize custom mariadb instance"Krzysztof Opasiak2-5/+14
2020-09-07Merge "[COMMON/elasticsearch] Avoid 'Warning: Merging destination map for ↵Sylvain Desbureaux9-72/+64
chart'"
2020-09-07Merge "[COMMON] Allow to set default password complexity"Sylvain Desbureaux1-1/+14
2020-09-06[COMMON] Use faster version of common secret templateKrzysztof Opasiak3-27/+23
Replace all calls to common.secret in mariadb-init with the faster version common.secretFast to save some linting time. Issue-ID: OOM-2248 Change-Id: Id1658b46f3322ecc68155fafd72480e922978369 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-09-06[COMMON] Allow to initialize custom mariadb instanceKrzysztof Opasiak2-5/+14
Add the ability to use mariadb-init to create databases in any mariadb-galera instace not only the common one. Issue-ID: OPTFRA-800 Change-Id: Idfeacc9af49620378eb5b06ae3628f92e740cc65 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-09-04[GENERAL] Use readiness container v3.0.1Sylvain Desbureaux24-69/+52
Readiness container v3.x and up are now present in ONAP main repository. They're also not using root user anymore and then script path has changed. Finally, "job_complete" script has been integrated in main "ready" script. As those changes are significant, we must upgrade all the components at once. Depends-On: I5afa83892043f4844afe12e61724a8d368a9f2e0 Issue-ID: OOM-2545 Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com> Change-Id: I0b4eb5dd86390273532d67d0a9696e1cfcadf110
2020-09-02[COMMON] Allow to set default password complexityKrzysztof Opasiak1-1/+14
With the introduction of common secret template many of ONAP passwords started being automatically generated. The algorithm that we use for this purpose allows to choose the complexity of generated password. By default we use "long" which contains special characters. Unfortunately this turns out to often cause some issue. To make our deployment more stable and user friendly lets allow the deployer to choose the desired password complexity. Issue-ID: OOM-2328 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ib7a412e19f6b44f20c8ac388393936cf5d967d4e
2020-09-02[COMMON/elasticsearch] Avoid 'Warning: Merging destination map for chart'Alexander Dehn9-72/+64
restructure values for docker image name:tag Issue-ID: OOM-2533 Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com> Change-Id: I7c02fe543b4f96871c3ade80c7b51c68627cb269
2020-09-02[CLAMP,COMMON] Escape special chars in mysql passwordsKrzysztof Opasiak1-2/+3
Fix both clamp and common mariadb-galera instances to make sure that special characters in passwords are escaped properly. Issue-ID: OOM-2328 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Iee48523d36d404ad7b21515f0d205f2f60a507ed
2020-09-01Merge "[SDNC] oom for clustered disaggregated SDN-R"Sylvain Desbureaux2-2/+2
2020-08-31[SDNC] oom for clustered disaggregated SDN-RAlexander Dehn2-2/+2
use disaggregated elasticserach DB from common Issue-ID: SDNC-1165 Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com> Change-Id: I0c6ac6549f6c144f0ed5a64ae76a1fa352f740d2
2020-08-27Fix of mariadb-galera backup charts.Marat Salakhutdinov1-0/+5
Issue-ID: OOM-2525 Signed-off-by: Marat Salakhutdinov <marat.salakhutdinov@bell.ca> Change-Id: I7ea70454368c68e3a264a181a57fae7bad1219d1
2020-08-26Merge "Fix cassandra backup."Sylvain Desbureaux3-5/+6
2020-08-25[COMMON] Enable importing custom certificates to truststore using ↵Jozsef Csongvai3-3/+144
certInitializer ONAP deployments may require the use of custom certificates. Instead of manually adding certificates to the truststore file, users can now add their .pem certificates under certInitializer/resources and have them imported automatically by an init container. The updated truststore can then be mounted to a component by providing a truststoreMountpath. Issue-ID: OOM-2509 Signed-off-by: Jozsef Csongvai <jozsef.csongvai@bell.ca> Change-Id: I896c729143346738e91fa57f895ba48043b253c1
2020-08-25Merge "[COMMON] new logConfiguration chart"Krzysztof Opasiak4-0/+92
2020-07-30Fix cassandra backup.Marat Salakhutdinov3-5/+6
Issue-ID: OOM-2528 Signed-off-by: Marat Salakhutdinov <marat.salakhutdinov@bell.ca> Change-Id: I210cd4bd8e0edf363d37ab7fc4f9f47e018010be
2020-07-30[DCAEGEN2] Add config supporting request CMPv2 certsPiotr Marcinkiewicz3-0/+65
Add configuration supporting dealing with CMPv2 certs in K8s plugin. Remove outputType from global values to allow it be specific for service. Issue-ID: DCAEGEN2-2252 Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com> Change-Id: Iedb9c3f63a539a386b9abd5d257c54f5ce023662
2020-07-22[COMMON] new logConfiguration chartSylvain Desbureaux4-0/+92
This new chart allows to set the same log level accross components in ONAP. As other similar templates, default value will be retrieved (`logConfiguration.logLevel`) but can be overrided: - globally by setting global.logLevel - per component basis by setting `logConfiguration.logLevelOverride` per component basis Issue-ID: OOM-2515 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I18196b56bb4f8732d42271d7c93c1a0f71bfac58
2020-07-16[COMMON] Use readinessCheck template inside certInitializerKrzysztof Opasiak3-20/+10
Instead of manually creating readiness init container let's use our dedicated template for this. Issue-ID: OOM-2511 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Idb112e864b7899e7a1e76d139c6cc6a94851a090
2020-07-16[COMMON] Fix name generation in readinessCheck templateKrzysztof Opasiak1-6/+19
According to docummentation readinessCheck template accept wait_for value in a type of list. Unfortunately in that case it generated the init container name with -- as the name key was empty. This commit fixes this and ensures acceptance of both simple and extended format for wait_for value. Issue-ID: OOM-2511 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ia345251f01ade5191f0a06d6eaec41cdd6a53459
2020-07-14Merge "[COMMON] Make MariaDB compatible with Kubernetes v1.17"Krzysztof Opasiak2-2/+5
2020-07-13Merge "[COMMON] Allow to read replicaset status"Krzysztof Opasiak1-0/+4
2020-07-13[COMMON] Make MariaDB compatible with Kubernetes v1.17milaszki2-2/+5
Issue-ID: OOM-2482 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> Change-Id: I5dbe0b168535d48068a93dd3494a59bf90ea2a6f
2020-07-09Merge "Make COMMON/NETWORK-NAME-GEN compatible with Kubernetes v1.17"Sylvain Desbureaux1-1/+4
2020-07-08Merge "[COMMON] fix logic of post upgrade hook script to handle upgrade run ↵Sylvain Desbureaux2-2/+120
without any changes to charts that could cause loss of all data."
2020-07-08Merge "Make COMMON/MONGO compatible with Kubernetes v1.17"Krzysztof Opasiak1-1/+4
2020-07-08Merge "Make COMMON/DGBUILDER compatible with Kubernetes v1.17"Sylvain Desbureaux1-1/+4
2020-07-08Merge "Make COMMON/MUSIC compatible with Kubernetes v1.17"Sylvain Desbureaux1-1/+4
2020-07-08Merge "Make COMMON/ETCD compatible with Kubernetes v1.17"Sylvain Desbureaux1-1/+4
2020-07-07Make COMMON/NETWORK-NAME-GEN compatible with Kubernetes v1.17milaszki1-1/+4
Issue-ID: OOM-2485 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> Change-Id: I4e284a877298e9c013926bc0a84fa535d7eafda9
2020-07-07Make COMMON/MUSIC compatible with Kubernetes v1.17milaszki1-1/+4
Issue-ID: OOM-2484 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> Change-Id: I8b89986cb73f9d7dedadacf88243623e7e91041f
2020-07-07Make COMMON/MONGO compatible with Kubernetes v1.17milaszki1-1/+4
Issue-ID: OOM-2483 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> Change-Id: If96bd1c72aa571314fc8665d382252b531554146
2020-07-07Make COMMON/ETCD compatible with Kubernetes v1.17milaszki1-1/+4
Issue-ID: OOM-2481 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> Change-Id: I3d2e249bfd158575c67eaf5600cdae1921bd3b2e
2020-07-07Make COMMON/DGBUILDER compatible with Kubernetes v1.17milaszki1-1/+4
Issue-ID: OOM-2480 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> Change-Id: I0813ab2921cdaa2f8e3bc4de1a1b4779dc2d5c86
2020-07-07Make COMMON/POSTGRES compatible with Kubernetes v1.17milaszki1-1/+4
Issue-ID: OOM-2479 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> Change-Id: Ic64b84db2c192cd5d737b5ef6d59aa4b4c20a48e
2020-07-06Merge "[COMMON] Allow to use ' in mariadb-init"Krzysztof Opasiak1-1/+4
2020-07-06[COMMON] Allow to read replicaset statusSylvain Desbureaux1-0/+4
readiness check needs also to read replicaset status from extensions API. Issue-ID: OOM-1971 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie8f271ef7a4411340299ff7635594b66a1a1c8fd
2020-07-03Make COMMON/COMMON compatible with Kubernetes v1.17Krzysztof Kuzmicki1-1/+1
Issue-ID: OOM-2478 Signed-off-by: Krzysztof Kuzmicki <krzysztof.kuzmicki@nokia.com> Change-Id: I7ec0b7469c1525fc1d73adaa7a8893d6effc6141
2020-07-02[COMMON] Allow to use ' in mariadb-initKrzysztof Opasiak1-1/+4
' is one of characters that are placed in passwords by our default password generation algorith. As ' is a special character in SQL we need to escape it before concatenating it with SQL command. Let's also add set -e to fail if any of databases has not been created Issue-ID: OOM-2436 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ida8c75639eaa4049e3f874d30666f1fe4dc02e12
2020-07-01[COMMON] fix logic of post upgrade hook script to handle upgrade run without ↵Marat Salakhutdinov2-2/+120
any changes to charts that could cause loss of all data. Issue-ID: OOM-2442 Signed-off-by: Marat Salakhutdinov <marat.salakhutdinov@bell.ca> Change-Id: Ifd3bbc0f63e95b1c8797ecd09a891195faafc8c2
2020-06-26[COMMON] Templates for services accounts and rolesSylvain Desbureaux6-0/+227
Create a common chart that will create the relevant service accounts / roles and role binding for ONAP components. Issue-ID: OOM-1971 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I687ef6debe679b5f7f250d75d93ee4da84d97104
2020-06-11[COMMON] Fix bad subchartDot retrievingSylvain Desbureaux1-2/+2
readinessCheck was retrieving "subchartDot" in string format and not in "object" format. This commit fixes it Issue-ID: OOM-1971 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I04060f973d283802e6269dc67370a336c5bcf95e
2020-06-10Merge "[COMMON] add pre upgrade script for mariadb-galera"Sylvain Desbureaux6-3/+323
2020-06-05[COMMON] add pre upgrade script for mariadb-galeratringuyen6-3/+323
When upgrading from a version to another, it may be impossible to do it "simply" because of changes in immutable properties of statefulsets. We change that here by creating a temporary deployment which will hold the whole databases during the time the old statefulset gets destroyed and the new one gets created. Issue-ID: OOM-2316 Signed-off-by: tringuyen <tri.nguyen@tatacommunications.com> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I318d72830d5002f50597e23e0753e292f8b47c53
2020-06-02[common] Make sure that we declare repository in certInitializerKrzysztof Opasiak2-1/+2
Not all components declare repository in the global section which may lead to some error when processing just a single component instead of whole onap. To avoid this let's make sure that cerInitializer sets repository url internally. Issue-ID: OOM-2416 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I4fd2a235b188c7ee09d0173dbaa873141187a077
2020-05-28Update SDNC/CCSDK to Frankfurt RC2 versionsDan Timoney1-1/+1
Update versions for SDNC and CCSDK dockers to reflect Frankfurt RC2 versions. Issue-ID: SDNC-1171 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Iaf34379550d148a164341dac6c44fa20926b8ccb
2020-05-27Merge "[COMMON] Use common aaf template in elasticsearch"Sylvain Desbureaux4-60/+26