aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/common
AgeCommit message (Collapse)AuthorFilesLines
2022-03-03[DMAAP] Add pod security context to MR and othersrope2521-0/+2
Add security context to pods within DMAAP Change-Id: I86f7bd79e77dec33879f4ee3b599799705d40a24 Issue-ID: OOM-2913 Signed-off-by: rope252 <gareth.roper@est.tech>
2022-01-05[MARIADB] Downgrade mariadb versionSylvain Desbureaux2-2/+2
Use version 10.6.5-debian-10-r28 instead of 10.6.5. Also align clamp and so to use the same version as the other ones Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie1db09b03daa1bb7792ee0ff6a73bd3483213e75
2021-12-16Merge "[COMMON] Fix some array bashisms"Sylvain Desbureaux1-5/+5
2021-12-15[COMMON] Fix some array bashismsguillaume.lambert1-5/+5
pointed out by checkbashisms Issue-ID: OOM-2643 Signed-off-by: guillaume.lambert <guillaume.lambert@orange.com> Change-Id: Iac07813968e42af1f5a18b0cefb4aee85aa2b880
2021-12-15Merge "[GLOBAL] Bump Java JRE image"Krzysztof Opasiak1-1/+1
2021-12-15Merge "[GLOBAL] Bump curl image"Krzysztof Opasiak1-1/+1
2021-12-15Merge "[COMMON] Make our common charts compatible with helm 3.7+"Sylvain Desbureaux2-3/+2
2021-12-15Merge "[COMMON] Make namespace configurable"Sylvain Desbureaux2-3/+14
2021-12-14[COMMON] Make our common charts compatible with helm 3.7+Krzysztof Opasiak2-3/+2
Helm 3.7.0 introduced a new .Chart variable named IsRoot. In the same time they refactored the representation of .Chart and it no longer is a dictionary but a structure which confuses mergeOverride. In order to keep our tricks working we need to skip .Chart while doing a deepCopy of our current context. Issue-ID: OOM-1 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I230e2ba460ddf09377d8de6c1366d4fd82f764cd
2021-12-13Merge "[COMMON][MARIADB] Bump version to 10.6.5"Krzysztof Opasiak2-2/+2
2021-12-13Merge "[COMMON][MONGO] Bump Mongo to latest 4.x version"Krzysztof Opasiak1-1/+1
2021-12-10[GLOBAL] Bump Java JRE imageSylvain Desbureaux1-1/+1
Use onap/integration-java11 11.0.0 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Id5aab493eebae3787d636c6a771c58d0b9d98558
2021-12-10[GLOBAL] Bump curl imageSylvain Desbureaux1-1/+1
Use curl 7.80.0 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ieb288a29acd36bacec9a36e06717514adce04bd3
2021-12-10[COMMON] Changed mongo storage location to enable persistanceAndreas Geissler1-1/+18
Added initContainer to fix the permissions of the to be mounted volume and changed intent Issue-ID: OOM-2864 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I188d7f6002405e810dd54d1043824979b4d83d42
2021-12-10[COMMON][MARIADB] Bump version to 10.6.5Sylvain Desbureaux2-2/+2
Bump version to the one asked by SECCOM. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I99a4c1e412a2288b595d78470dc433466586529b
2021-12-10[COMMON][MONGO] Bump Mongo to latest 4.x versionSylvain Desbureaux1-1/+1
As we need to be on 4.4 before upgrading to 5.0, let's update to 4.4 for Jakarta and 5.x in Kohn release Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie72f83f5380d9d5f0427dbd4f0f9ba8fa97c8780
2021-12-09[COMMON] Make namespace configurablexuegao2-3/+14
Make the namespace parameter configurable for CertInitializer and ReadinessCheck Chart Issue-ID: OOM-2888 Signed-off-by: xuegao <xue.gao@intl.att.com> Change-Id: I5bb4e86be935921af1d852d6d7666fb5c8eaf725
2021-12-08[COMMON] Fix "local var=XX" bashismsguillaume.lambert1-1/+2
Variable attribute 'local' is not POSIX but is LSB supported. It is available in other shells such as ash or dash. And in ksh, local is the default scope of functions vaiables. Though, the syntax "local var=XX" is only supported and found in bash. Sadly, this is not detected by checkbashims. - fix "local var=XX" bashisms - add a manual command in tox.ini to detect them in the CI https://wiki.ubuntu.com/DashAsBinSh#local https://wiki.ubuntu.com/DashAsBinSh#declare_or_typeset https://stackoverflow.com/questions/12000949/scope-of-variables-in-ksh Issue-ID: OOM-2643 Signed-off-by: guillaume.lambert <guillaume.lambert@orange.com> Change-Id: Iff26e50cd352eeb760d923a4740a6f92184fe0f2
2021-12-07[GLOBAL] Migrate to helm v3efiacor60-690/+335
Move all Chart.yaml to use apiVersion: 2 Move dependencies from requirements.yaml to Chart.yaml Changes to all makeFiles Changes to helm deploy plugin Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I03c5290eee9e40f76eacbf171e774204cf5fb1c0 Issue-ID: OOM-2845
2021-11-10Merge "[AAI][BABEL] Remove Hardcoded certificates"Krzysztof Opasiak2-0/+6
2021-11-10Merge "Revert "[COMMON] Changed mongo storage location to enable persistance""Krzysztof Opasiak1-1/+1
2021-11-10[AAI][BABEL] Remove Hardcoded certificatesSylvain Desbureaux2-0/+6
Use Certinitializer in order to retrieve needed certificates. Change ModelLoader also as it needs valid certificate to communicate with Babel. Issue-ID: OOM-2693 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I64b8ede24643f942dc99956030c202c50d41ad1e
2021-11-09Revert "[COMMON] Changed mongo storage location to enable persistance"Sylvain Desbureaux1-1/+1
This reverts commit 0d9469d87c6173b20097499fea54013bd0f8169c. Reason for revert: it seems to not work in a lot of environments Issue-ID: OOM-2864 Change-Id: Ie7847f4522e3ac4ff7ef3e2de0021b7b2382aa33 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2021-11-08Merge "[ETCD] Give full FQDN name for etcd"Krzysztof Opasiak2-1/+2
2021-11-08Merge "[COMMON] Changed mongo storage location to enable persistance"Sylvain Desbureaux1-1/+1
2021-11-05[COMMON] Changed mongo storage location to enable persistanceAndreas Geissler1-1/+1
Changed the volume mounted from /var/lib/mongo to /data/db, which is the default storage location of mongo Issue-ID: OOM-2864 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Id054b36a9f8abea676e70511812d2aeb151d47e0
2021-11-02[COMMON] Add resources to log sidecar templateMaciej Wereski1-0/+7
Filebeat sidecar containers in many cases has resources set. As a result, in many components resources section is added manually, after usage of log template. This commit solves this situation Issue-ID: OOM-1 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I725a38eb9d4dffcc017c24399436ddfccdb91123
2021-10-31[CCSDK] Workaround for naming service host name verification issueDan Timoney2-1/+4
The naming service query to policy manager is failing host name verification. While this issue is under investigation, it can be worked around by configuring the naming service to disable host name verification. This requires a new version of the network-name-gen microservice (1.2.1), and a change to set a new env variable to disable host name verification (enabled by default if this variable is unset). Issue-ID: CCSDK-3501 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Ia471cd27ce16b6e79a3ce6708e08c7d5f239feb3
2021-10-31Merge "[SDNC] Bump version for Istanbul RC"Sylvain Desbureaux1-1/+1
2021-10-31[SDNC] Bump version for Istanbul RCDan Timoney1-1/+1
Bump version of SDNC and CCSDK images for Istanbul RC milestone. Issue-ID: SDNC-1615 Issue-ID: CCSDK-3483 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Id3a3627765e5623aa6cd8bffbfad1679ae6afef6
2021-10-29[COMMON] Log: add ability to set ConfigMap name in volumesMaciej Wereski1-2/+4
In case where subchart uses ConfigMap that was defined in parent chart, wrong chart name will be generated. This change allows to workaround that issue by supplying own prefix instead of generated one. Issue-ID: OOM-1 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: Ieed19d46e4205cd5b23b4c74af19c618a6e48466
2021-10-29[ETCD] Give full FQDN name for etcdSylvain Desbureaux2-1/+2
Some Kubernetes deployments needs the full fqdn and not just the first part in order to make etcd statefulset to work. Issue-ID: OPTFRA-981 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Idf384d2c65b13f64885429181c4fa2eba5ac4282
2021-10-15[COMMON] Bump ONAP versionSylvain Desbureaux54-93/+140
Use version 9.0.0 for Istanbul Also update the doc. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I03e11799bf487226784c98b04116f005c89d1e70
2021-10-15Merge "[COMMON] Fix timescaledb volume permission issue"Sylvain Desbureaux1-0/+16
2021-10-15Merge "[CPS] Use common postgres for CPS"Sylvain Desbureaux9-2/+339
2021-10-13[COMMON] Fix timescaledb volume permission issueRenu Kumari1-0/+16
- Added init-container to change mounted volume permission Issue-ID: CPS-667 Signed-off-by: Renu Kumari <renu.kumari@bell.ca> Change-Id: I3161400cbcf2de88580ea768c97212a2983f5fff
2021-10-12[CPS] Use common postgres for CPSAbdelmuhaimen Seaudi9-2/+339
Add option for CPS to use common postgres Issue-ID: OOM-2839 Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com> Change-Id: Ida133999f26cf50d59103aa30a90c97fba3e66a0
2021-10-12Merge "[COMMON] Add limits to timescale db"Sylvain Desbureaux2-31/+31
2021-10-11Merge "[DCAEGEN2] Update chart with service account"Krzysztof Opasiak1-1/+15
2021-10-10[DCAEGEN2] Update chart with service accountfarida azmy1-1/+15
Add service account to requirements.yaml, values.yaml and deployment/statefulset. Issue-ID: OOM-2726 Signed-off-by: farida azmy <farida.azmy.ext@orange.com> Co-authored-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6bafed3c621f4e7b1a307bc9338334586eb6795e Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
2021-10-10[COMMON] Add limits to timescale dbRenu Kumari2-31/+31
- Added resources limit similar to postgres in the timescaledb - Using common.podSecurityContext - removed init-container and it is handled by kubernetes if fsGroup is provided Issue-ID: CPS-667 Signed-off-by: Renu Kumari <renu.kumari@bell.ca> Change-Id: I944cc93526d0d89f32840450121c1ff608fdd4c5
2021-10-10[SDNC] Bump versions for IstanbulDan Timoney2-2/+2
Bump image versions for SDNC for Istanbul release Issue-ID: SDNC-1609 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Iecfb133ce8563ccfabf1a38af9d8c26d99d398f4
2021-10-04Merge "[COMMON] Update root certificates"Krzysztof Opasiak1-2172/+2719
2021-10-04Merge "[COMMON] Add and run pre-commit linters via tox"Sylvain Desbureaux1-3/+3
2021-10-01[COMMON] Update root certificatesSylvain Desbureaux1-2172/+2719
ONAP truststore is outdated so let's use one from Java 17 + add ONAP root CA. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: If8a7dbf4c876ce89cf04080a97a7f67803d66c5f
2021-09-30[COMMON] Run timescale with postgres userBruno Sakoto2-2/+16
Timescale container is ran with postgres user and group which are defined with uid 70 and gid 70. Data volume owner is changed for postgres. See also: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ Issue-ID: CPS-667 Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca> Change-Id: Ia87922ba68bb47a7a07aaf61f368143d970278b6
2021-09-26[COMMON] Add and run pre-commit linters via toxguillaume.lambert1-3/+3
- create a .pre-commit-config.yaml configuration file with * gitlint * trailing blanks linter * tabs removal linter - exclude .git folder from it - exclude Makefiles since tabs are mandatory by default in them - create a tox pre-commit profile to run it from tox note gitlint is not runnable at this pre-commit stage - create pre-commit-install and pre-commit-uninstall tox profiles to (un)install hooks locally and (un)perform tests at each "git commit" call (i.e. without calling manually the pre-commit tox profile) - precise pre-commit stages/types in the pre-commit configuration file so that hooks are installed correctly. This avoids messages about skipped tests when they are run at a wrong stage. Issue-ID: OOM-2643 Signed-off-by: guillaume.lambert <guillaume.lambert@orange.com> Change-Id: Ie95bb4f6f90be80b05a1398973caffeff7936881
2021-09-24Merge "[COMMON] Enforce checkbashisms tox profile"Krzysztof Opasiak3-4/+4
2021-09-22[COMMON] Fix genericKV cache generationKrzysztof Opasiak1-1/+10
Make sure that the envs sections gets tpl and cached properly. Issue-ID: OOM-1 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I4064bdf3204a61a30b7296503c99e7931bae8cd2
2021-09-22Merge "[SO] Add TLS configuration for SO API Ingress"Krzysztof Opasiak1-1/+3