summaryrefslogtreecommitdiffstats
path: root/kubernetes/consul
AgeCommit message (Collapse)AuthorFilesLines
2020-12-01[CONSUL] Make consul run as non-rootKrzysztof Opasiak4-13/+52
Use our recently build consul image (still based on the same old consul version) and modify the deployment to make sure that it is able to run as non-root user. Yes, I know that moving consul-server to component would be more proper solution but as this commit is supposed to be cherry-picked to guilin I've tried to make as little changes as possible. Issue-ID: REQ-362 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Idfc09ee225d4f89bb699683fa5e4ae3b86491c08
2020-11-26Merge "Revert "[CONSUL] Make consul server run as non-root"" into guilinKrzysztof Opasiak1-3/+1
2020-11-18Revert "[CONSUL] Make consul server run as non-root"Daniel Milaszkiewicz1-3/+1
Revert submission 114556 Reason for revert: Bug - OOM-2630 Reverted Changes: Ic1302ac28:[CONSUL] Make consul server run as non-root I43584b7f0:[CONSUL] Make consul run as non-root Issue-ID: OOM-2630 Change-Id: I3e96f85ad92239f6a3e3df019fc1f675b837ce0d Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> (cherry picked from commit 2e13371bd7a679e3b1cf0c9818c60bf6c8574a2d)
2020-11-18Revert "[CONSUL] Make consul run as non-root"Daniel Milaszkiewicz2-35/+9
Revert submission 114556 Reason for revert: Bug - OOM-2630 Reverted Changes: Ic1302ac28:[CONSUL] Make consul server run as non-root I43584b7f0:[CONSUL] Make consul run as non-root Issue-ID: OOM-2630 Change-Id: Ie80d50417418d182f3db54d103bac50dde0c6775 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> (cherry picked from commit 55913091b7deb8f73c026c53826608c8f7b51f17)
2020-11-03[CONSUL] Make consul server run as non-rootKrzysztof Opasiak1-1/+3
Modify the entrypoint to eliminate root process from container. Issue-ID: REQ-362 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ic1302ac2858dda1bac71be4449ea74cfc73ba197
2020-11-03[CONSUL] Make consul run as non-rootKrzysztof Opasiak2-9/+35
Use our recently build consul image (still based on the same old consul version) and modify the deployment to make sure that it is able to run as non-root user. Issue-ID: REQ-362 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I43584b7f07fda1943447a4e58ee7444d20660097
2020-10-27Merge "[CONSUL] Add limits to consul chart."Krzysztof Opasiak4-3/+57
2020-10-21[CONSUL] change comment styleJakub Latusek27-0/+54
Signed-off-by: Jakub Latusek <j.latusek@samsung.com> Change-Id: Ifc524b9818517d5c7741f11e09734300ef66ce77 Issue-ID: OOM-2562
2020-10-20[CONSUL] Add limits to consul chart.Sylvain Desbureaux4-3/+57
Having limits is important in order to have safe deployment. consul didn't had one so let's add them. Issue-ID: OOM-2230 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Idb49a5db304236c0786848acbc69c786084d7e33
2020-09-04[GENERAL] Use readiness container v3.0.1Sylvain Desbureaux2-4/+2
Readiness container v3.x and up are now present in ONAP main repository. They're also not using root user anymore and then script path has changed. Finally, "job_complete" script has been integrated in main "ready" script. As those changes are significant, we must upgrade all the components at once. Depends-On: I5afa83892043f4844afe12e61724a8d368a9f2e0 Issue-ID: OOM-2545 Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com> Change-Id: I0b4eb5dd86390273532d67d0a9696e1cfcadf110
2020-08-24[SDNC] Remove sdnc-portal componentDan Timoney1-21/+0
The sdnc-portal component is currently disabled due to known security vulnerabilities. This component is no longer supported - the developer left the project - and its functionality is not really needed. So, we are removing this component in Guilin. Issue-ID: SDNC-1236 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I45c7cad2102011fb25ca9f6707792dfd5c97624f
2020-07-10Make CONSUL compatible with Kubernetes v1.17Magdalena_Biernacka2-2/+2
Issue-ID: OOM-2451 Signed-off-by: Magdalena Biernacka <magdalena.1.biernacka@nokia.com> Change-Id: Idc86f18d1693e3b98188a3632343bf9b6ae3c7f5
2020-04-29Change ingress hosnames for exposed servicesLucjan Bryndza1-1/+1
Change ingress host to the required hostnames Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-2391 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-04-02Bump chart versionSylvain Desbureaux4-4/+4
Use 6.0.0 in preparation for Frankfurt release Issue-ID: OOM-2320 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I8ad82dfdf48b56c38c0e85d640b18cc13c8d9e67
2020-03-02[Consul] Remove nodeport on UISylvain Desbureaux1-1/+1
consul ui is on http mode. As nobody really looks at it, let's remove the nodeport and set it as ClusterIP. Issue-ID: OJSI-168 Issue-ID: OJSI-202 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: If114dac59c4fc919a0ab879ef7c5c2478f6a16d2
2020-02-01[ONAP-wide] Replace .Release.Name with common.releaseKrzysztof Opasiak6-12/+12
ONAP is too big to be deployed using helm install so we need to use a custom helm plugin helm deploy. This script deloys onap component by component instead of deploying evrything at once. Unfortunately this script also modifies the helm release by appending component name to it. As a result of this behavior our objects are called for example: onap-mariadb-galera-mariadb-galera-0 instead of just being called onap-mariadb-galera-0. This patch simplifies this naming convention by replacing all direct usages of .Release.Name with common.release macro which strips the component specific part from the release name. Issue-ID: OOM-2275 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ia8cead50d305adb00eef666d0a1ace74479b5183
2019-12-06Add ingress controler support to ConsulLucjan Bryndza2-1/+8
Issue-ID: OOM-2177 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Change-Id: Icf30714776cb038f10377c16d40585280910f9d7 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2019-09-02Delete oom for ocataHaibin Huang1-14/+0
Issue-ID: MULTICLOUD-775 Signed-off-by: Haibin Huang <haibin.huang@intel.com> Change-Id: Ieeab8ba5e6fd5f9d307f6ec996ca724058a08c1b
2019-07-11Moving Helm Chart version for El AltoMike Elliott4-4/+4
Updating all helm chart versions to 5.0.0 for the El Alto release. Merge will be co-ordinated with the merge of a separate aai/oom patch. Please do not merge until this coordination has completed. Issue-ID: OOM-1980 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com> Change-Id: I31daaebeacea33565f13affd2fa28fb15fe948ba
2019-03-25Add starlingx pluginHaibin Huang1-0/+14
Change-Id: Ifbe5637edeb22a748699ff923584a12bc47b44e9 Issue-ID: MULTICLOUD-428 Signed-off-by: Haibin Huang <haibin.huang@intel.com>
2019-02-10Update Chart version for Dublin ReleaseMike Elliott4-4/+4
All charts are being bumped from 3.0.0 to 4.0.0 for the Dublin release. In addition the requirement.yaml files have been updated to allow for chart versions that include timestamp suffix. A following on patch will take care of changes to the OOM Makefiles to support injection of the timestamp versions. Change-Id: Ie03d86fad2027e975e8b9106e3a828e4335037cb Issue-ID: OOM-1642 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
2018-10-10Merge "Add pike plugin"Alexis de Talhouët1-0/+14
2018-10-10Add pike pluginHuang Haibin1-0/+14
Change-Id: I36f00800cab85ba82ad35968b33222208ee7bc36 Issue-ID: MULTICLOUD-276 Signed-off-by: Huang Haibin <haibin.huang@intel.com>
2018-10-01Make AAF install credentials, the defaultJorge Hernandez1-1/+1
The credentials are defaulted to the demo AAF install accounts. These credentials will be used in the default ONAP installation, regardless AAF being used or not. This will allow external clients not to be reconfigured regardless of AAF being on or off. Change-Id: Ib7660f71793b0318b45469219b3802c1d1208a29 Signed-off-by: Jorge Hernandez <jh1730@att.com> Issue-ID: POLICY-1156 Signed-off-by: Jorge Hernandez <jh1730@att.com>
2018-09-24Update Chart versions to 3.0Mike Elliott4-4/+4
All Chart versions and requirement dependencies have been updated to 3.0 for Casablanca release. Change-Id: Iea57e5da09ea8a8bac0a415b9a6196151cbea10b Issue-ID: OOM-1354 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
2018-09-19Merge "Backup Task: consul configmap enabelling"Mandeep Khinda2-0/+15
2018-09-19Refactor MC windirver plugin namespaceBin Yang1-1/+1
Workaround the constraints of ISTIO which prohibit the usage of _ in the namespace Change-Id: I04b266ab8fc27bbd9058c7adab21e64543960815 Issue-ID: MULTICLOUD-335 Signed-off-by: Bin Yang <bin.yang@windriver.com>
2018-09-19Backup Task: consul configmap enabellingvaibhav_16dec2-0/+15
Issue-ID: OOM-1413 Change-Id: Iacde9533b7a65dbf468965de140a313a3b741adb Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>
2018-09-12use https for healthchecks and vfw scriptJorge Hernandez1-6/+6
Change-Id: I98f1bd5a354802ebf4be2356b97ec1bbdecce116 Signed-off-by: Jorge Hernandez <jh1730@att.com> Issue-ID: POLICY-1111
2018-09-05Apache 2 license addition for consul,appcMukul33-0/+316
Issue-ID: OOM-1308 Change-Id: I6cfe05841a17f81e862dfbf4bedaa4ba87f96e1e Signed-off-by: Mukul <mukul.joshi@amdocs.com>
2018-08-27Remove the hbase charts from aaiKajur, Harish (vk250x)3-55/+0
Issue-ID: AAI-1186 Change-Id: Ie4af7ac0032afea4f92ce63eef8a7117ce000bc7 Signed-off-by: Kajur, Harish (vk250x) <vk250x@att.com>
2018-08-03Merge "AAF Service Health Check"Mandeep Khinda1-0/+20
2018-07-15Merge "SDN-C Multi-site High-availability - Auto-failover"Borislav Glozman7-3/+91
2018-07-15SDN-C Multi-site High-availability - Auto-failoverMohammadreza Pasandideh7-3/+91
Change-Id: I4e028b31ce7a60154d2c04c63431c5ea996de8f8 Signed-off-by: Mohammadreza Pasandideh <mohammadreza.pasandideh@amdocs.com> Issue-ID: SDNC-213
2018-07-10Add apiVersion to service definitionKiran Kamineni1-0/+1
Adding apiVersion to the service definition for consul-server-ui. This is flagged as an error when using kubectl apply after generating template using helm template. Issue-ID: OOM-1280 Change-Id: Icb7378acbd66b851b6a83bfd8b30373e95cb15fd Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-05-25AAF Service Health CheckPriyanka1-0/+20
Issue-ID: OOM-27 Change-Id: I507bd7ae8f80a536c7e412ca924376750bcd54e2 Signed-off-by: Priyanka <Priyanka.Jain3@amdocs.com>
2018-05-24Merge "Add consul health check for SMS"Mike Elliott1-0/+17
2018-05-24Consul Health Check changes for MessageRouterPriyanka6-33/+32
Issue-ID: OOM-987 Change-Id: If55855dbadcb009da3e82a2a3aa05bd49915a517 Signed-off-by: Priyanka <Priyanka.Jain3@amdocs.com>
2018-05-23Add consul health check for SMSKiran Kamineni1-0/+17
Add consul based health check for Secret Management Service Issue-ID: AAF-274 Change-Id: Ic1763e317c93be232f5efb573239f12ca99b2589 Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>
2018-05-17Merge "clamphealth check"Mike Elliott1-0/+17
2018-05-17Merge "Clamp DB Health Check"Mike Elliott2-0/+31
2018-05-16Merge "policy healthcheck"Borislav Glozman2-0/+125
2018-05-16Clamp DB Health CheckPriyanka2-0/+31
Issue-ID: OOM-688 Change-Id: Ied8688fdfa7759b8b5f33b9914195d227eb08e48 Signed-off-by: Priyanka <Priyanka.Jain3@amdocs.com>
2018-05-16clamphealth checkPriyanka1-0/+17
Issue-ID: OOM-688 Change-Id: Ib1d2ae73f6026c161cb453ba6947d667d78a1d7a Signed-off-by: Priyanka <Priyanka.Jain3@amdocs.com>
2018-05-15policy healthcheckmayankg27032-0/+125
Change-Id: I470e2727ac907ac297839ecc1bf3b53de7f67750 Issue-ID: OOM-30 Signed-off-by: mayankg2703 <mayank.gupta@amdocs.com>
2018-05-15Consul Stateful SetPriyanka Jain6-36/+101
Issue-ID: OOM-1032 Change-Id: I911085dffc35067d844b5dcb286581fa0897a27a Signed-off-by: Priyanka Jain <Priyanka.Jain3@amdocs.com>
2018-05-14Config Changes in ConsulPriyanka Jain6-16/+16
Issue-ID: OOM-1031 Change-Id: Ic67cdafce7f070bb5a7c9958ca722fda6d77b32d Signed-off-by: Priyanka Jain <Priyanka.Jain3@amdocs.com>
2018-05-10Improve docker registry secret managementBorislavG2-2/+0
Change-Id: I2d1ff878c215becc9856af184eb0b11defd75e1d Issue-ID: OOM-1064 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-05-09Fixed remaining references to aai-servicejmac1-3/+3
Change-Id: I47b5ded80e27a98fc05a7ba1d00bf2de1af574e5 Signed-off-by: jmac <james.macnider@amdocs.com> Issue-ID: OOM-1041
2018-05-09Merge "Fix message-router-kafka references"Mandeep Khinda1-1/+1