summaryrefslogtreecommitdiffstats
path: root/kubernetes/onap
AgeCommit message (Collapse)AuthorFilesLines
2020-09-11[COMMON] Allow to set default password complexityKrzysztof Opasiak1-0/+5
With the introduction of common secret template many of ONAP passwords started being automatically generated. The algorithm that we use for this purpose allows to choose the complexity of generated password. By default we use "long" which contains special characters. Unfortunately this turns out to often cause some issue. To make our deployment more stable and user friendly lets allow the deployer to choose the desired password complexity. Issue-ID: OOM-2328 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ib7a412e19f6b44f20c8ac388393936cf5d967d4e (cherry picked from commit f5ee1c5aa533c47f93b091eafb366c4185b4ab49)
2020-07-02Merge "Revert "[COMMON] add pre upgrade script for mariadb-galera"" into ↵Krzysztof Opasiak1-10/+0
frankfurt
2020-06-25Revert "[COMMON] add pre upgrade script for mariadb-galera"Sylvain Desbureaux1-10/+0
This reverts commit f5993cdff9c9d873966d24e7987094fee4d13f0d. Reason for revert: upgrade script is not working well in all situations Issue-ID: INT-1633 Change-Id: Ic743f36fac73315eb10189e82cda80aa60e49af8 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-06-19[RELEASE] Change AppVersion for onap main chart6.0.0Sylvain Desbureaux1-1/+1
Issue-ID: OOM-2424 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Iee3f9b6e1dc0dd278c9c55d317827f16ac8b3389 (cherry picked from commit 9c2c7cfe29b0fb2cad1f13ab5b50e896aac1007a)
2020-06-10[COMMON] add pre upgrade script for mariadb-galeratringuyen1-0/+10
When upgrading from a version to another, it may be impossible to do it "simply" because of changes in immutable properties of statefulsets. We change that here by creating a temporary deployment which will hold the whole databases during the time the old statefulset gets destroyed and the new one gets created. Issue-ID: OOM-2316 Signed-off-by: tringuyen <tri.nguyen@tatacommunications.com> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I318d72830d5002f50597e23e0753e292f8b47c53 (cherry picked from commit eb9eb59171a43d25fb012aaad0a1d37ca86bc2bf)
2020-06-04[AAF] Add CMPv2 Cert ServiceEmmettCox2-0/+68
This new micro service allow retrieval of certificates using CMPv2 protocol and relay the requests to CA server (such as EJBCA provided in contrib folder). Issue-ID: AAF-1083 Change-Id: Ib3acba3d071533ad933d043f067147e8406d8fa8 Signed-off-by: EmmettCox <emmett.cox@est.tech> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> (cherry picked from commit bca68e048a74ac3754e76ed738090402f7cbfd13)
2020-05-04remove hardcoded MariaDB passwordJulienBe1-1/+1
This aligns with other changes on OOM. You can either supply a specific password or have it generated for you based on a master password Issue-ID: CLAMP-796, OJSI-188 Change-Id: If1b80fc47cf1033e094f8a106746d1e8c556c08b Signed-off-by: JulienBe <jb379x@att.com> Co-authored-by: sebdet <sebastien.determe@intl.att.com> [small updates in common secret template usage] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-04-24Merge "Create ONAP with minimal component count"Sylvain Desbureaux1-0/+139
2020-04-23Create ONAP with minimal component countLucjan Bryndza1-0/+139
Create onap with minimal component count Issue-ID: OOM-2385 Change-Id: Idf7b9f517e65274f6a288fde0d0462fd1cd93762 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-04-23[Sniro] Disable Sniro-emulator in "onap-all"Sylvain Desbureaux2-4/+0
Sniro emulator is not a component which will be part of the release. As such, we don't start it even in "all" ONAP. Issue-ID: OOM-2372 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib544f93ca51a42cd0b39637c14555cb9a3ecfda0
2020-04-22Merge "[POMBA] Disable pomba in "onap-all""Krzysztof Opasiak2-4/+0
2020-04-22Merge "[COMMON] templates for centralized logs"Krzysztof Opasiak2-1/+10
2020-04-22Merge "[LOG] Disable log in "onap-all""Krzysztof Opasiak2-4/+0
2020-04-22[COMMON] templates for centralized logsSylvain Desbureaux2-1/+10
Add three templates: * one for creating the sidecar * one for creating the configmap * one for creating the volumes Issue-ID: OOM-2370 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I34ac35a30b3ab892622431ee7c70277bc7b1f41d
2020-04-20Merge "[COMMON] helm chart for elastic db"Krzysztof Opasiak1-0/+4
2020-04-20[LOG] Disable log in "onap-all"Sylvain Desbureaux2-4/+0
Log is not a component which will be part of the release. As such, we don't start it even in "all" ONAP. Issue-ID: OOM-2370 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I0238632a3a62ad7cfeee3656afc74144a6337c46
2020-04-20[POMBA] Disable pomba in "onap-all"Sylvain Desbureaux2-4/+0
Pomba is not a component which will be part of the release. As such, we don't start it even in "all" ONAP. Issue-ID: OOM-2371 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I400601dee8e65b1c05948e3ccad99e84eb9c9119
2020-04-20Merge "Enable robot module in 5G Network Slicing use case override file"Sylvain Desbureaux1-1/+1
2020-04-20[COMMON] helm chart for elastic dbAlexander Dehn1-0/+4
Add elasticdb as common chart to oom Issue-ID: SDNC-1061 Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com> Change-Id: Id8c48113b8d4193d7f13991296f0307a29724c01 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-04-16Merge "[Contrib] Add EJBCA Server"Krzysztof Opasiak3-5/+29
2020-04-16Enable robot module in 5G Network Slicing use case override filezhangqingjie1-1/+1
Issue-ID: OOM-2365 Signed-off-by: zhangqingjie <zhangqingjie@huawei.com> Change-Id: I18b1c3198c669e7a7bda368f8d9ce8ba5790555b
2020-04-15[Contrib] Add EJBCA ServerSylvain Desbureaux3-5/+29
EJBCA Server is used to test that CMPv2 Certificate handling is well done in ONAP. Issue-ID: AAF-1083 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I5e2d25b68b5cd80d3c7bf282ce871dd81e711ff6
2020-04-09Enable NBI Module in 5G Network Slicing use case override filezhangqingjie1-1/+1
Issue-ID: OOM-2360 Enable NBI Module in 5G Network Slicing use case override file Signed-off-by: zhangqingjie <zhangqingjie@huawei.com> Change-Id: I05d53cd82a037b076b0935ad6a629d094415a3dc
2020-04-07AAF OOM 2.1.20ChrisC1-1/+1
Cleaned up up configs, JDK11 fixes, Hello and Agent works, now a model for Apps non-root fix Issue-ID: AAF-1081, AAF-1102 Signed-off-by: Instrumental <jgonap@stl.gathman.org> Signed-off-by: ChrisC <christophe.closset@intl.att.com> Change-Id: I4947075029db8abd7d2072b6b82064af8e2daa3e
2020-04-03[COMMON] Faster aafConfig templateSylvain Desbureaux1-1/+3
"index" function is bad in term of performance in Helm. Reworked the templates in order to avoid it. as certificates are retrieved at every boot (and as already present certs are deleted before), we don't need persistent storage Also set aafImage as a global variable in order to have a consistent use accross ONAP Issue-ID: EXTAPI-375 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie3f5ae5c2a37d816afc42d2c67ebe8e40e749c79
2020-04-02Bump chart versionSylvain Desbureaux2-33/+33
Use 6.0.0 in preparation for Frankfurt release Issue-ID: OOM-2320 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I8ad82dfdf48b56c38c0e85d640b18cc13c8d9e67
2020-03-13Add dcaemod chartsJack Lucas3-0/+8
Issue-ID: DCAEGEN2-1866 Change-Id: I0179e1e75529ad8017b1a5c23747dbd80aa6f625 Signed-off-by: Jack Lucas <jflucas@research.att.com> Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-03-09add yaml for 5G Network Slicing usecasezhangqingjie1-0/+172
Issue-ID: OOM-2329 supply a ONAP installation config file for 5G Network Slicing usecase, so that the user can easily install a minimum-scope ONAP with as few resources as possible. Signed-off-by: zhangqingjie <zhangqingjie@huawei.com> Change-Id: I728a0229296d62120418f654e4c3f50a2805a69e
2020-03-06[COMMON] Handle TLS/Non-TLS for ServiceSylvain Desbureaux1-0/+51
Current service and headlessService templates doesn't handle the fact that out of cluster ports must be TLS encrypted only. With a new (backward compatible) DSL, this is now possible. In values.yaml, all ports in service part with port AND plain_port will have the ability to be HTTP or HTTPS depending on the context. Per default, they'll be HTTPS. TLS choice will be done according this table: | tlsOverride | global.tlsEnabled | global.serviceMesh.enabled | global.serviceMesh.tls | result | |-------------|-------------------|----------------------------|------------------------|--------| | not present | not present | not present | any | true | | not present | not present | false | any | true | | not present | not present | true | false | true | | not present | not present | true | true | false | | not present | true | any | any | true | | not present | false | any | any | false | | true | any | any | any | true | | false | any | any | any | false | Service template will create one or two service templates according to this table: | serviceType | both_tls_and_plain | result | |---------------|--------------------|--------------| | ClusterIP | any | one Service | | Not ClusterIP | not present | one Service | | Not ClusterIP | false | one Service | | Not ClusterIP | true | two Services | If two services are created, one is ClusterIP with both crypted and plain ports and the other one is NodePort (or LoadBalancer) with crypted port only. Issue-ID: OOM-1936 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: If766dd73132022d1a6e578fd36113c461bb91ea5
2020-02-13[SO] Enable use of Keystone v3Sylvain Desbureaux1-1/+5
SO can handle keystone v3 but override file must be capable to handle this. If openStackKeystoneVersion is set to "KEYSTONE_V3" in so-catalog-db-adapter config part, SO will be able to use keystone v3 for OpenStack Issue-ID: OOM-2221 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I14db318d25842a08ef380f6edb708e26dae050ad
2020-02-04[COMMON] Create templates for services and PVSylvain Desbureaux1-1/+1
Proposition of common templates to make service declaration and PV declaration consistent accross OOM. Propositions of templates for sub parties of resource definitions such as metadatas, selector and containerPorts. I've also made an example with cassandra. Change-Id: I8b8aa8eb61dafba75e89add1979114a0eefce243 Issue-ID: OOM-1971 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-02-02Merge "Add ONAP core deployment type override"Borislav Glozman1-0/+134
2020-02-01[ONAP-wide] Replace .Release.Name with common.releaseKrzysztof Opasiak3-3/+3
ONAP is too big to be deployed using helm install so we need to use a custom helm plugin helm deploy. This script deloys onap component by component instead of deploying evrything at once. Unfortunately this script also modifies the helm release by appending component name to it. As a result of this behavior our objects are called for example: onap-mariadb-galera-mariadb-galera-0 instead of just being called onap-mariadb-galera-0. This patch simplifies this naming convention by replacing all direct usages of .Release.Name with common.release macro which strips the component specific part from the release name. Issue-ID: OOM-2275 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ia8cead50d305adb00eef666d0a1ace74479b5183
2020-01-29Add ONAP core deployment type overridePawel Wieczorek1-0/+134
This patch makes heavy use of Orange accomplishments [1][2][3]. This deployment override will probably succeed "minimal-onap.yaml" used in e.g. "integration/bootstrap/vagrant-minimal-onap" setup. Cassandra replicaCount is increased to 3 to allow reaching quorum. [1] https://gitlab.com/Orange-OpenSource/lfn/onap/onap_oom_automatic_installation [2] https://wiki.lfnetworking.org/display/LN/Call%20for%20ONAP%20DDF%20Topics%20-%20Prague%202020#CallforONAPDDFTopics-Prague2020-OOM-IntroductionofServicemesh [3] https://wiki.lfnetworking.org/download/attachments/25364127/OOM%20Service%20Mesh%20Prague.pptx Issue-ID: ONAPARC-551 Change-Id: Ibaec41f088f11f7fb4e7c476f742d12d29c5740b Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-01-17Add VID to onap-vfw overridesBrian Freeman1-1/+3
Issue-ID: OOM-2266 Change-Id: I0c571c765cb099b1f2e7886bc686e24a436f290e Signed-off-by: Brian Freeman <bf1936@att.com>
2019-12-16Enable Cassandra for AAI in minimal ONAP environmentPawel Wieczorek1-4/+4
Deployment of AAI component fails unless Cassandra is enabled in the cluster [1]. This patch also adds Cassandra to the list of enabled components and fixes minor typos in the documentation. [1] https://git.onap.org/aai/oom/tree/requirements.yaml#n23 Issue-ID: INT-1402 Change-Id: I5cb57e1909f749bb8d28fac0e5eeb09f6cfe4b33 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2019-12-11Merge "Example ingress configuration with vhosts"Borislav Glozman1-17/+11
2019-12-11Merge "[Common] Use global storage templates for PVC"Borislav Glozman2-6/+0
2019-12-06Merge "Vhosts support to the common ingress template"Sylvain Desbureaux1-1/+7
2019-12-05[Common] Use global storage templates for PVCSylvain Desbureaux2-6/+0
OOM has now templates in order to create the needed PVC, using: * a PV with a specific class when using a common nfs mount path between nodes (sames as today use) --> is the default behavior today * or a storage class if we want to use dynamic PV. On this case, we use (in order of priority): - persistence.storageClassOverride if set on the chart - global.persistence.storageClass if set globally - persistence.storageClass if set on the chart I've also aligned the PV creation of the different charts. I've also aligned the PVC creation of the different charts. I've removed unused mysql chart and (badly) used nfs-provisioner chart. I've also make cassandra backup work with dynamic PV (but RWX only for now). Change-Id: I0ea3f8c7514ca648d94b6c682684c06b822bbe0a Issue-ID: OOM-2229 Issue-ID: OOM-2228 Issue-ID: OOM-2227 Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-12-03Vhosts support to the common ingress templateLucjan Bryndza1-1/+7
Add virtual hosting support to the ingress common template Added support for global configuration path or virtual host based Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Change-Id: I6b1a0c9cfd0eb5c90a090058d5db70f8ee33731e Issue-ID: OOM-2125 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2019-11-26Example ingress configuration with vhostsLucjan Bryndza1-17/+11
Example ingress configuration with vhosting support. Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-2125 Change-Id: I62c818f8941871cbebdfbf1984e7b6eee7e1180d Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2019-11-07Attempt 2 at chart restructureUbuntu1-1/+1
Helm value override file now supports component-specific settings: dcae-bootstrap: enabled: true dcae-cloudify-manager: enabled: true dcae-config-binding-service: enabled: true dcae-healthcheck: enabled: true dcae-redis: enabled: true dcae-servicechange-handler: enabled: true dcae-inventory-api: enabled: true dcae-deployment-handler: enabled: true dcae-policy-handler: enabled: true dcae-dashboard: enabled: true Issue-ID: OOM-1574 Signed-off-by: Ubuntu <dgl@research.att.com> Change-Id: I85e0fe6ae19e176d954611549ec954a5fe662307 Signed-off-by: Ubuntu <dgl@research.att.com>
2019-10-02Increase liness/readiness timeout and periodBrian Freeman2-1/+35
Issue-ID: OOM-2059 Change-Id: I02bbdd5b06e7194434d761bcf1aebbd749c6f1d7 Signed-off-by: Brian Freeman <bf1936@att.com>
2019-10-02Improved nginx configuration overrridesLucjan Bryndza1-1/+18
Nginx ingress controller configuration sample adopted to the new ingress configuration common templates. Issue-ID: OOM-1508 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Change-Id: I1e8f069dbcff8ae3c927bad763d1bc2595cc9311 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2019-09-11Add cds to onap-all-ingress-nginx.yamlAbdelmuhaimen Seaudi1-0/+2
Issue-ID: OOM-2085 Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com> Change-Id: Iaabdf44581c6b0dc5e0600454a5ff9bcaeaba16c
2019-09-10Seperate CDS chart from SDNC in OOMAbdelmuhaimen Seaudi3-0/+8
Issue-ID: OOM-2085 Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com> Change-Id: I21fed8c9cf33967f62f156cac96deefdcb4f8d47 Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
2019-09-05Enforcement of Kube-Version constraint in MasterAkansha Dua1-0/+1
Issue-ID: OOM-2076 Signed-off-by: Akansha Dua <akansha.dua@amdocs.com> Change-Id: Ide894e27c417a3e2a010cbc24f18353ffe698ce5
2019-08-22Removing nginx-ingress from helm charts. It is running by default viaOndřej Šmalec2-6/+0
RKE. Issue-ID: OOM-2050 Signed-off-by: Ondřej Šmalec <o.smalec@partner.samsung.com> Change-Id: I72802282d296c6e1f23f96112a6406ded18aa5ab
2019-07-22Add nginx ingress configuration overridesLucjan Bryndza1-0/+80
Add example nginx ingress controller configuration overrides for testing purposes. Change-Id: Ibac181c4e79fab4cd5b63b28bf4f25912bfe4724 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-1508