aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/onap
AgeCommit message (Collapse)AuthorFilesLines
2023-04-17[PLATFORM] Add OAuth2-Proxy to ONAPAndreas Geissler2-0/+3
As part of the ServiceMesh solution OAuth2-proxy will be used to enable a central authentication and authorization for ONAP Service Access. This patch delivers the function based on oauth2-proxy helmcharts: https://github.com/oauth2-proxy/manifests/tree/main/helm/oauth2-proxy Issue-ID: OOM-2489 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Iafa82813a7b9494cf13d77d47a39fc6030cb919b
2023-03-21[COMMON][SO] Create authorization policy templateAndrewLamb1-0/+5
Create template for istio authorization policies Issue-ID: OOM-3148 Change-Id: I081288e8e9b0e8347ee6fd0d656398126826c273 Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
2023-02-06[COMMON] Fix nodePort creation in _service.tplAndreas Geissler1-1/+1
In case of non-TLS service the nodePort was not reserved and missed to disable tls for the services (tlsEnabled) Issue-ID: OOM-3094 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I7f5102a499f4b262556787b5db682e28a9ebcf81
2023-02-03[AAF] Disable the AAF deployment in LondonAndreas Geissler2-3/+3
Disable the AAF in the values.yaml and in the default helm deployment Issue-ID: OOM-3094 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I1b0030dabacafe53261eefcdb8956508cc73163b
2023-02-02Merge "[PLATFORM] Add Keycloak ONAP REALM import"Andreas Geissler1-2/+6
2023-01-23[PLATFORM] Add Keycloak ONAP REALM importAndreas Geissler1-2/+6
As part of the ServiceMesh solution Keycloak will be used to enable a central authentication and authorization for ONAP Service Access. This chart provides the import of a default ONAP Realm to an existing Keycloak Instance (alternative to a combined KC+REALM installation). It contains clients for the planned portal-ng. Make all subcomponents selectable Issue-ID: OOM-3021 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I677a3b9e200299c2cde7774e09db6cf33ac510b7
2023-01-19[COMMON] Add pre/postfix and customized port option for Istio IngressAndreas Geissler2-3/+25
Add new options for the created Ingress URLs (preaddr, postaddr) and allow to create Ingress configurations using customized ports Correction added to the installation of the Ingress Gateway. Issue-ID: OOM-3084 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ib31050c169799409c6e968adce7ff41e215e3ff9
2023-01-11Merge "[VID] Remove VID charts and refs"Andreas Geissler12-30/+1
2023-01-09[DCAE] DCAEMOD deprecationVijay Venkatesh Kumar5-12/+0
DCAEMOD deprecatrion in London https://lists.onap.org/g/onap-tsc/topic/dcae_mod_eol_with_london/92490689 Change-Id: I0a7b5774e408bd2fcefa46c34077ef59be9eae52 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com> Issue-ID: DCAEGEN2-3278 Issue-ID: DCAEGEN2-3290
2022-12-20[VID] Remove VID charts and refsefiacor12-30/+1
Remove VID charts and all refs Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I167090a7d037e90484e42c6d12ec56ac329e1553 Issue-ID: OOM-3070
2022-12-14[APPC] Remove appc chart and refsefiacor14-62/+3
Removing appc chart Removing most appc refs Some SO data may need to be followed up with SO team Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I183e3dfb7e33a3ada1ac9925ee96b9f32d89bd5a Issue-ID: OOM-3069
2022-11-30Merge "[COMMON] Correct Ingress template to create Istio GW/VS"Fiachra Corcoran3-0/+20
2022-11-25[DMAAP-STRIMZI] Move strimzi kafka bridgeefiacor11-9/+132
Move kafka bridge to strimzi chart. Update the onap overrides. Clean up some config in strimzi kafka. Add override options to kafka chart. Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: Iaaac143f22cae1dbfa50e89b1838a00e37eebdaf Issue-ID: DMAAP-1834
2022-11-25[COMMON] Correct Ingress template to create Istio GW/VSAndreas Geissler3-0/+20
The template should create for each Ingress service a single Gateway/VirtualService Resource, small update of service template Issue-ID: OOM-3000 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I480f8c7b6b9ca3a84813a9e96c4d796d332facc7
2022-11-10[COMMON] Bump ONAP versionAndreas Geissler1-40/+40
Update chart versions 12.0.0 for London Issue-ID: OOM-3046 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ic196235ff4f6ae14a7ecad799bd75a9666b2594a
2022-11-10Merge "[DCAE] DCAEGEN2-Services Service Mesh Patch"Andreas Geissler1-0/+2
2022-11-09[DCAE] DCAEGEN2-Services Service Mesh Patchrope2521-0/+2
Service Mesh patch for DCAE, changing port names to http. Remove aaf-cm readiness check, set tlsServer to false (excluding restconf) Added environment variables to pods to solve CBS problems Disable VES authentcation in SM override Change-Id: I42a12912f471d89bd4ebc6181f5454140e54a605 Issue-ID: OOM-2820 Issue-ID: DCAEGEN2-3277 Signed-off-by: rope252 <gareth.roper@est.tech> Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
2022-11-08[RESOURCES] Tune sm-onap overrides for service meshMaciej Wereski1-0/+3
Make sure unneeded components are disabled. Issue-ID: OOM-2431 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: Ic57d4ba8bd8cefcb355ee85e6f8d14f05706bcb3
2022-08-23[PLATFORM] Create Ingress Certificates for ServiceMeshAndreas Geissler1-0/+148
Add issuers and self-signed certificates for the Ingress controller Additionally a new override file is created for Istio Ingress setup Issue-ID: OOM-3001 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I6da12e54ecc4bbb15e3bcf1aa259e50f5be320b6
2022-08-19[DCAE] Remove platform charts and overridesVijay Venkatesh Kumar13-36/+0
All platform components has been disabled/deprecated since Jakarta release Change-Id: I8837ad4e6b9ef20cd7c94fefd6ec4b9cb7b20b08 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com> Issue-ID: DCAEGEN2-3002 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
2022-08-17[COMMON] Update Makefiles to enable parallelizationAndreas Geissler1-15/+20
All Makefiles are updated to support SKIP_LINT option, have a defined order of compilation (common -> components) to support the parallel compilation of charts using: make all -j8 (for 8 Jobs). Additionally use cm-push instead of push to use the new K8S/Helm version Issue-ID: OOM-3011 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: If9903c9d5bc646b5ce54075acc616e98c4b6706e
2022-07-06[DCAE] Enable optional DCAE componentsVijay Venkatesh Kumar1-0/+39
All DCAE MS to be enabled for gating/daily/weekly KPI/SON-Handler Ms charts update to remove policy configuration dependency. Change-Id: Ia17da13cbfc8f1e7082b8b693e826b5f677c8cd1 Issue-ID: DCAEGEN2-3176 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
2022-06-30Merge "[COMMON] Bump ONAP version"Jack Lucas1-42/+42
2022-06-24[COMMON] Bump ONAP versionAndreas Geissler1-42/+42
Use version 11.0.0 for Kohn Issue-ID: OOM-2971 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Icc0e0839fc6def2035383b5fa4c9153fc15fafda
2022-05-27[RESOURCES] Enable strimzi in sm-onapMaciej Wereski1-1/+1
DMAAP won't deploy properly without strimzi. Issue-ID: DMAAP-1621 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I17929e7fab325ae0fe9097084370dbc9ddb4f21b
2022-04-29[COMMON][MARIABD] MariaDB ServiceMesh compatibilityAndreas Geissler1-1/+1
Update the port names of metrics and mariadb to match the istio requirements and update the timeouts. Fix mysql protocol setup for istio and update mariadb-init job to support istio sidecar communication. This is separated from a patch for CDS SM compatibility Issue-ID: OOM-2820 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I02c19c9fcfbd76a2cede0b924174ad81b45d719e
2022-04-21[MARIADB] Back to istanbul version of mariaDB imageMichal Jagiello1-1/+1
We have stability issues with MariaDB (which didn't occur on istanbul). Issue-ID: OOM-2963 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I23b31db06dd87a45a47c8b2741b36e6387e5d1ec
2022-04-06[PORTAL] Disable PortalMichal Jagiello1-1/+1
Portal is unmaintained and shouldn't be installed by default Issue-ID: OOM-2921 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I9e300651bee0abb0ad7de73649cc3a9b0aa84b28
2022-03-31[STRIMZI] Adding strimzi projectefiacor6-0/+14
Deploy a 2 node replica strimzi kafka cluster Reduce MR kafka to 1 replica Add kafka ready check to cps-temporal Update readthedocs with strimzi prerequisite Modify deploy.sh to deploy the strimzi kafka in advance Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I87e54ad69a174174cb86f096c07d58878e3ab14e Issue-ID: DMAAP-1621
2022-03-15Merge "[OOM][OOF-HAS] Use basic password strength to avoid dollar sign"Sylvain Desbureaux1-1/+1
2022-03-14[OOM][OOF-HAS] Use basic password strength to avoid dollar signMichal Jagiello1-1/+1
OOF HAS controller uses Python oslo library to manage config files. In Python configuration files dollar sign ($) is used to reference other values. If that sign is in generated password container can't parse configuration file and exits with error. Basic password strength means it will use only alphanumberic characters. Issue-ID: OPTFRA-1028 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: Id31d6f21f22dab93386ea36e2aa026f70367c2e0
2022-03-08[OOM] Disable VIDMichal Jagiello1-1/+1
VID is unmaintained and shouldn't be installed by default Issue-ID: OOM-2921 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I47d0ba365838f4673c9997648f6a066c217d66f1
2022-02-25Merge "[GLOBAL] Bump Kubectl image"Jack Lucas1-1/+1
2022-02-25Merge "[GLOBAL] Bump Nginx image"Jack Lucas1-1/+1
2022-02-25Merge "[GLOBAL] Bump busybox image"Jack Lucas1-1/+1
2022-02-25Merge "[AAF-SMS] Allow to disable CPS part"Jack Lucas3-0/+13
2022-02-24[GLOBAL] Bump busybox imageSylvain Desbureaux1-1/+1
Use busybox 1.34.1 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I9c03855a610577fe396095ae7e631d22c75d22f8
2022-02-23[GLOBAL] Bump Kubectl imageSylvain Desbureaux1-1/+1
Use kubectl 1.22.4 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I4501f5a91f0fe7d9b75abf7fdaaaf7405433fb16
2022-02-23[GLOBAL] Bump Nginx imageSylvain Desbureaux1-1/+1
Use nginx 1.21.4 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I2a391697c066a45845a45f605db1c578684e1feb
2022-02-15[RESOURCES] Enable service-mesh in sm-onapMaciej Wereski1-0/+5
sm-onap is intended to be used to test ONAP deployments with service mesh. Also disable filebeat as it is deprecated. Issue-ID: OOM-2431 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I63ce4ce0902e46664c888922d4790763980dfa68
2022-02-04[AAF-SMS] Allow to disable CPS partSylvain Desbureaux3-0/+13
AAF SMS is importing secrets in vault. CPS secret can be retrieved only if cps is enabled. this patch allows to disable CPS import in AAF SMS Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib33d2fe05bb6e13fb6322138161a13cdfd2cf522
2022-01-25[SDC] Service Mesh Compliance for SDCothman touijer1-0/+2
Adding basic requirements for Service Mesh Compliance within SDC. Change-Id: Ib9104ef2e8b6daf0b9b529288cee158b297ce9e4 Issue-ID: OOM-2253 Signed-off-by: rope252 <gareth.roper@est.tech> Signed-off-by: othman touijer <othman.touijer@soprasteria.com>
2022-01-05[MARIADB] Downgrade mariadb versionSylvain Desbureaux1-1/+1
Use version 10.6.5-debian-10-r28 instead of 10.6.5. Also align clamp and so to use the same version as the other ones Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie1db09b03daa1bb7792ee0ff6a73bd3483213e75
2021-12-15Merge "[GLOBAL] Bump Java JRE image"Krzysztof Opasiak1-1/+1
2021-12-15Merge "[GLOBAL] Bump curl image"Krzysztof Opasiak1-1/+1
2021-12-10[GLOBAL] Bump Java JRE imageSylvain Desbureaux1-1/+1
Use onap/integration-java11 11.0.0 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Id5aab493eebae3787d636c6a771c58d0b9d98558
2021-12-10[GLOBAL] Bump curl imageSylvain Desbureaux1-1/+1
Use curl 7.80.0 image for Jakarta Issue-ID: SECCOM-271 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ieb288a29acd36bacec9a36e06717514adce04bd3
2021-12-10[COMMON][MARIADB] Bump version to 10.6.5Sylvain Desbureaux1-1/+1
Bump version to the one asked by SECCOM. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I99a4c1e412a2288b595d78470dc433466586529b
2021-12-07[GLOBAL] Migrate to helm v3efiacor3-184/+183
Move all Chart.yaml to use apiVersion: 2 Move dependencies from requirements.yaml to Chart.yaml Changes to all makeFiles Changes to helm deploy plugin Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I03c5290eee9e40f76eacbf171e774204cf5fb1c0 Issue-ID: OOM-2845
2021-12-06[DMAAP][MR] Use startup probesSylvain Desbureaux1-7/+2
Instead of using long intial delay for readiness and liveness probes, use startup Probes with aggressive checks in order to detect start as fast as possible AND handles slow start cases. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Icb19ef62a4a8c52ac8800aa1dd4b71e350a6eeca