aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/msb
AgeCommit message (Collapse)AuthorFilesLines
2024-04-13[COMMON] Remove hostPath entriesAndreas Geissler5-32/+0
As hostPath volumes violate Cluster policies, they are not allowed within pod definitions. In our case only the "etc/localtime" is mounted to get the timezone of the host, which is not required. Issue-ID: OOM-3287 Change-Id: I6c8c8ea4e982d7e95e73f5fed7fc07ed47ceaab7 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-04-11[COMMON] Update all ReadinessChecksAndreas Geissler4-4/+4
Use the new "service" feature of the readiness image to resolve startup dependencies. Issue-ID: OOM-3280 Change-Id: Ia331d51528676744e5e0479d1fd0ca02830c3499 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-03-20[COMMON] Make imagePullSecrets configurableAndreas Geissler5-10/+5
Currently in ONAP the imagePullSecrets is hardcoded to 'onap-docker-registry-key' which is created by the repository-wrapper component. With this change the secrets can be configured via setting global.imagePullSecrets and optionally per image if it is configured as map (image.pullSecrets) Issue-ID: OOM-3284 Change-Id: I8644f9b46043b6014219c42928e057b149df43a4 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-03-14[COMMON] Harmonize resource settings, Part 2Andreas Geissler9-18/+18
Some settings are still wrongly interpreted (e.g. 0.02Gi) Therefor they are changed to non-floating numbers (e.g. 20Mi) Issue-ID: OOM-3273 Change-Id: Icc88dead1ac5b1df8629d6adcc438a739e20522e Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-02-28[COMMON] Harmonize resource settingsAndreas Geissler9-40/+68
Update all resource settings to the kubernetes recommended normalized form. Fix ReadinessCheck resource limits. Issue-ID: OOM-3273 Change-Id: Ie10903b801e4dc1689bcec092162d711a431a7a6 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-10-18[OOM] Fixing k8s cpu limitsvladimir turok5-10/+10
Adding specific cpu limits for all oom components Issue-ID: OOM-3241 Change-Id: I0bbd973d91d11dbb0ffa5848f7c1ed5ebb5f54ba Signed-off-by: vladimir turok <vladimir.turok@t-systems.com>
2023-08-07[OOM] Fixing k8s ServiceAccountsvladimir turok10-182/+11
Adding service account for the jobs Cleanup MSB, ES and other common charts from AAF dependencies Issue-ID: OOM-3199 Issue-ID: OOM-3114 Issue-ID: OOM-3116 Change-Id: I55bf80876c9fb3b110e538ed1a5504e0dc1d4e1a Signed-off-by: vladimir turok <vladimir.turok@t-systems.com>
2023-07-14[OOM] Fixing k8s resources and limitsAndreas Geissler5-38/+38
This fix is adjusting OOM helm charts components resources limits and requests Issue-ID: OOM-3199 Signed-off-by: Vladimir Turok <vladimir.turok@t-systems.com> Change-Id: I56aeba925cda4984277ac7bbf23cfd158263d30f
2023-06-29[COMMON] Bump ONAP versionAndreas Geissler6-29/+29
Update chart versions to 13.0.0 for Montreal Issue-ID: OOM-3173 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ie53fd021f01e459c464e44f4459a73ba0b00c172
2023-04-17[MSB] Update msb gateway docker versionjinquanni2-2/+2
- updating msb-iag docker image to 1.6.0 - updating msb-eag docker image to 1.6.0 - Fixed the some security bug Issue-ID: MSB-750 Signed-off-by: jinquanni <ni.jinquan@zte.com.cn> Change-Id: I989daf86039c739b93faa68c808c8bb5bfafa0d5
2023-03-03[COMMON] Fix resources indentmiroslavmasaryk5-10/+5
Fix of resources template indent and therefore resources in components Issue-ID: OOM-3104 Signed-off-by: miroslavmasaryk <miroslav.masaryk@telekom.com> Change-Id: I825a3860db00cae4bb80b2aa2d82ac1a42b33124
2022-11-10[COMMON] Bump ONAP versionAndreas Geissler6-29/+29
Update chart versions 12.0.0 for London Issue-ID: OOM-3046 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ic196235ff4f6ae14a7ecad799bd75a9666b2594a
2022-10-21[COMMON] Harmonize all component ingress configAndreas Geissler4-4/+6
Harmonize all ingress definitions using schema: <component>-<application>-<api|ui> and adding plain_port attributes to support SM Issue-ID: OOM-3000 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I8212774ba194758d7cf23bc2085edcc4eacd2539
2022-09-27[MSB] Make MSB ServiceMesh compatibleAndreas Geissler6-117/+44
Use the Service templates and update the deployment definitions Issue-ID: OOM-3016 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I9ed22f03ea803aef0dce52c825011a2246e859db
2022-08-17[COMMON] Update Makefiles to enable parallelizationAndreas Geissler2-6/+20
All Makefiles are updated to support SKIP_LINT option, have a defined order of compilation (common -> components) to support the parallel compilation of charts using: make all -j8 (for 8 Jobs). Additionally use cm-push instead of push to use the new K8S/Helm version Issue-ID: OOM-3011 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: If9903c9d5bc646b5ce54075acc616e98c4b6706e
2022-06-24[COMMON] Bump ONAP versionAndreas Geissler6-29/+29
Use version 11.0.0 for Kohn Issue-ID: OOM-2971 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Icc0e0839fc6def2035383b5fa4c9153fc15fafda
2022-03-24[MSB] Update msb gateway docker versionjinquanni2-2/+2
Fixed the some security bug Issue-ID: MSB-654 Signed-off-by: jinquanni <ni.jinquan@zte.com.cn> Change-Id: Iaead5b50f9c2ce2ff9840d79d65e90027abf61e8
2021-12-07[GLOBAL] Migrate to helm v3efiacor14-176/+104
Move all Chart.yaml to use apiVersion: 2 Move dependencies from requirements.yaml to Chart.yaml Changes to all makeFiles Changes to helm deploy plugin Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I03c5290eee9e40f76eacbf171e774204cf5fb1c0 Issue-ID: OOM-2845
2021-11-18[MSB] Use log templateMaciej Wereski8-64/+30
Ability to turn off filebeat is needed as it is being deprecated. To achieve that existing log helper template is used. Issue-ID: OOM-1 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I70b6294e8a3d16d4086ac894617d5338094bed0f
2021-10-27[MSB] Update chart with service accountfarida azmy13-4/+41
Add service account to requirements, values and deployment/statefulset Issue-ID: OOM-2861 Signed-off-by: farida azmy <farida.azmy.ext@orange.com> Change-Id: I6670bde473aef92399acd35b1efbfd4743438ef6
2021-10-15[COMMON] Bump ONAP versionSylvain Desbureaux12-27/+36
Use version 9.0.0 for Istanbul Also update the doc. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I03e11799bf487226784c98b04116f005c89d1e70
2021-10-11[MSB] Update msb gateway docker versionjinquanni2-2/+2
Fixed MSB-593 packages update in direct dependencises for Istanbul. Issue-ID: MSB-610 Signed-off-by: jinquanni <ni.jinquan@zte.com.cn> Change-Id: I6e2e951fbee4fc70dc4d3f0be70f139a91732add
2021-10-04Merge "[COMMON] Add and run pre-commit linters via tox"Sylvain Desbureaux3-6/+6
2021-09-27Merge "[MSB]Update MSB docker images version"Sylvain Desbureaux3-3/+3
2021-09-26[COMMON] Add and run pre-commit linters via toxguillaume.lambert3-6/+6
- create a .pre-commit-config.yaml configuration file with * gitlint * trailing blanks linter * tabs removal linter - exclude .git folder from it - exclude Makefiles since tabs are mandatory by default in them - create a tox pre-commit profile to run it from tox note gitlint is not runnable at this pre-commit stage - create pre-commit-install and pre-commit-uninstall tox profiles to (un)install hooks locally and (un)perform tests at each "git commit" call (i.e. without calling manually the pre-commit tox profile) - precise pre-commit stages/types in the pre-commit configuration file so that hooks are installed correctly. This avoids messages about skipped tests when they are run at a wrong stage. Issue-ID: OOM-2643 Signed-off-by: guillaume.lambert <guillaume.lambert@orange.com> Change-Id: Ie95bb4f6f90be80b05a1398973caffeff7936881
2021-09-23[MSB]Update MSB docker images versionjinquanni3-3/+3
Updated the version of MSB images to 1.3.0 Issue-ID: MSB-610 Signed-off-by: jinquanni <ni.jinquan@zte.com.cn> Change-Id: I6265992e72ad934dbe6d7c0130b5d2ac86e5761c
2021-09-22[COMMON] Enforce checkbashisms tox profileGuillaume Lambert1-9/+4
- add checkbahims to tox.ini default profiles - remove -f options to unforce bashisms detection in explicit bash scripts and to differentiate treatments between bash and sh - migrate #!/bin/bash shebangs to #!/bin/sh for scripts without bashisms The following scripts have not been migrated since they still use bashisms difficult to migrate (mostly arrays - more details below) ./kubernetes/common/mariadb-init/resources/config/db_init.sh ./kubernetes/portal/components/portal-mariadb/resources/config/ \ mariadb/docker-entrypoint.sh ./kubernetes/helm/plugins/deploy/deploy.sh ./kubernetes/helm/plugins/undeploy/undeploy.sh ./kubernetes/sdnc/components/sdnc-prom/resources/bin/ensureSdncActive.sh $ find . -not -path '*/\.*' -name *.sh -exec checkbashisms -f {} + 2>&1\ | grep line | cut -d' ' -f 7- | sort | uniq -c | sort -k1,1nr 18 (bash arrays, ${name[0|*|@]}): 2 (declare): 1 ($FUNCNAME): 1 (shopt): 1 (trap with ERR|DEBUG|RETURN): https://mywiki.wooledge.org/Bashism#Arrays https://mywiki.wooledge.org/Bashism#Special_Variables https://mywiki.wooledge.org/Bashism#Builtins https://www.oilshell.org/release/0.5.alpha2/test/spec.wwz/builtin-trap.html Issue-ID: OOM-2643 Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com> Change-Id: Id06ad1d45004321a293bdd26038d8da5f7b6b4ac
2021-09-21Merge "[COMMON] Replace tabs by 4 ws in shell scripts"Sylvain Desbureaux1-1/+1
2021-09-20[COMMON] Replace tabs by 4 ws in shell scriptsguillaume.lambert1-1/+1
with the following command $ find . -not -path '*/\.*' -name *.sh -exec sed -i 's/\t/ /g' {} + then realign manually what deserves it and in particular, unindent some EOF scripting tags so they do not trigger errors. Issue-ID: OOM-2643 Signed-off-by: guillaume.lambert <guillaume.lambert@orange.com> Change-Id: Ibfa463ec8083d5a39de18a54d9c1d8746710fe03
2021-09-20[MSB]Update MSB docker images versionjinquanni3-3/+3
Updated the version of MSB's images. Issue-ID: MSB-537 Signed-off-by: jinquanni <ni.jinquan@zte.com.cn> Change-Id: I034005e3033640643d83f858c31020d18ce1787f
2021-09-06[COMMON] Fix ${foo:3[:1]} bashismsGuillaume Lambert1-1/+1
pointed out by checkbashisms Issue-ID: OOM-264 Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com> Change-Id: Ief3b2595a55f0e7a0a2e7ab05857848c99ce42f9
2021-06-21[COMMON] Add missing .helmignore files and "components/" entriesandreasgeissler1-0/+1
In order to save some space Issue-ID: OOM-2763 Signed-off-by: andreasgeissler <andreas-geissler@telekom.de> Change-Id: Ibbd8d5f713307ada76a0d04ede57d3c7696bcfe5
2021-05-02[MSB] Simplify cert retrieval scriptSylvain Desbureaux2-42/+24
As retrieving values is now done via a generic script, let's clean a little bit cert retrieval in order to remove unneeded part. Issue-ID: OOM-2688 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib53df46942e96a9ed9fb60a423eb4307f0b29988
2021-03-24[DOC][COMMON] Prepare Honolulu releaseSylvain Desbureaux12-26/+26
Updating the documentation and bumping version to 8.0.0 Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6f942f1466fed64264c44fb8fc0e1ffc93a98f18
2021-02-16[MSB] Use certInitializer for MSBSylvain Desbureaux18-177/+186
MSB is currently using an hardcoded certificate. In order to follow SECOMMON requirements, let's use a freshly generated certificate instead Issue-ID: MSB-521 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I157e44a6e30391c36c0142acfa08604c37b79cc4
2020-12-09[MSB] Change deprecated apiJakub Latusek1-1/+1
Signed-off-by: Jakub Latusek <j.latusek@samsung.com> Change-Id: I3d8c671fbe93db47232b57b9c8f2d6935a599b5f Issue-ID: OOM-2562
2020-11-30[MSB] Uses new tpls for repos / imagesSylvain Desbureaux52-40/+164
This commit makes MSB chart to use the new generator for repositories and images. As new templates doesn't work well with "sub charts", we move also subcharts to components folder. Issue-ID: OOM-2364 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I97de4e13d077a6b7139d98dcd855f93645489035
2020-11-30[COMMON][DOC] Bump version GuilinSylvain Desbureaux12-12/+12
Update charts and requirements to 7.0.0. Create release notes for Guilin Update documentation Issue-ID: OOM-2638 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I965ed6b6ebb7d74bfddaff73edd3dd55a657841c
2020-11-23[MSB] Make consul run as non-rootKrzysztof Opasiak4-0/+149
Start whole consul container as non-root and ensure that both dumb-init and consul are able to start and run as non-root. Issue-ID: REQ-362 Change-Id: If5a737953122cc6cd22b8d43ac603b40f4b22727 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-11-20[GENERIC] move from registry.hub.docker.com to docker.ioSylvain Desbureaux1-1/+1
`registry.hub.docker.com` needs authentication now, in contrary to previous behavior. As OOM deployments is unauthenticated when using docker hib repository, all OOM deployments is broken. `docker.io` seems to be still OK with unauthenticated requests so let's move to this endpoint. Issue-ID: OOM-2636 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Iea81b882d347124af22b0a9c408081706b1c6c6d
2020-10-21[MSB] change comment styleJakub Latusek15-0/+30
Signed-off-by: Jakub Latusek <j.latusek@samsung.com> Change-Id: Ie0801f4fb81d21842bfd49a63574952254eaa47f Issue-ID: OOM-2562
2020-09-08[MSB] Add logs to STDOUTDominik Mizyn3-0/+21
This commit add STDOUT appender to root level logging. Issue-ID: OOM-2514 Signed-off-by: Dominik Mizyn <d.mizyn@partner.samsung.com> Change-Id: I4b789abca452832d80ac77fdeb55bef83270ea17
2020-09-04[GENERAL] Use readiness container v3.0.1Sylvain Desbureaux8-16/+12
Readiness container v3.x and up are now present in ONAP main repository. They're also not using root user anymore and then script path has changed. Finally, "job_complete" script has been integrated in main "ready" script. As those changes are significant, we must upgrade all the components at once. Depends-On: I5afa83892043f4844afe12e61724a8d368a9f2e0 Issue-ID: OOM-2545 Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com> Change-Id: I0b4eb5dd86390273532d67d0a9696e1cfcadf110
2020-07-23[MSB] Make MSB compatible with Kubernetes v1.17Grzegorz-Lis5-5/+20
Issue-ID: OOM-2458 Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com> Change-Id: Iad18811736fca7a417714cc8b0885b12357846ad
2020-05-22Set certificate SAN as msb-iagHuabing Zhao4-18/+67
Also add helm certificate to be used within deployments. Issue-ID: MSB-467 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Signed-off-by: Konrad Bańka <k.banka@samsung.com> Change-Id: I1dabc31275edebd4a01be658e462a7d45497ce46
2020-05-05Merge "Release RC1"Krzysztof Opasiak5-4/+48
2020-05-04Release RC1Huabing Zhao5-4/+48
This change addresses two issues: MSB-467: Certificate in MSB is set to use *.zte.com.cn MSB-462: Pods still run as root These two issue have been fixed in docker images, but also need to be reflected in K8s manifest. Issue-ID: MSB-467 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: Id67e521b3051e9651051083f05d9e54973803030
2020-04-29Change ingress hosnames for exposed servicesLucjan Bryndza1-1/+1
Change ingress host to the required hostnames Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-2391 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-04-08Release MSB discovery 1.2.6 dockerHuabing Zhao3-3/+3
Issue-ID: MSB-456 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: I0c2df32ead7254d0b243d5120afed66e78785045
2020-04-02Bump chart versionSylvain Desbureaux12-12/+12
Use 6.0.0 in preparation for Frankfurt release Issue-ID: OOM-2320 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I8ad82dfdf48b56c38c0e85d640b18cc13c8d9e67