aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/policy/components/policy-pap
AgeCommit message (Collapse)AuthorFilesLines
23 hours[POLICY] Remove DB JobsAndreas Geissler4-32/+22
Moved DB job tasks as initContainers to policy-api Created startup dependencies to policy-api pod for pods requiring the DB initialization Restructure the DB configuration in all values.yaml files Correct DB config of xacml-pdp Issue-ID: OOM-3327 Change-Id: Idaed73d8cb89ac2a5677a62f22271cf45b505ff9 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2025-03-11[POLICY] Update charts to use new label templates and further fixesAndreas Geissler4-15/+17
- Add monitoring configuration - Fix Kafka GroupID for User in xacml-pdp - add ToscaXacml.yaml file for policy-api - adjust timeouts in policy-pap Issue-ID: OOM-3336 Change-Id: I820eea34b90f6485a02d6ee1e49147e40f42fcb9 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2025-03-06[COMMON] Adjust the minimum resource settingsAndreas Geissler1-3/+3
Some pods don't start up in the small "flavour" setting due to resource limits. Issue-ID: OOM-3332 Change-Id: I940007e38431cd9cbd4de880b607c90982348671 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2025-02-14[POLICY] Update helm charts with latest released versionsadheli.tavares4-31/+6
- use R16 interim release versions for policy components - remove mariadb configurations for policy - remove execute permissions for yaml config files Issue-ID: POLICY-5285 Change-Id: I8cab7d7a2509286555634b851efb7fc13d314049 Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
2024-11-26[POLICY] Update docker images to latest versionsrameshiyer272-3/+3
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-5166 Change-Id: I1e81d5bbee812f584cd8ee769f95f9534a5cef9d Signed-off-by: rameshiyer27 <ramesh.murugan.iyer@est.tech>
2024-09-02[POLICY] Fix postgres support and SASLsaul.gill4-46/+43
Charts will allow mariadb or postgres Allow configuration of db choice globally Deleted jobs that aren't needed Altered db migrator script Allow SASL config in drools Drools chart fixed Removed readiness jobs for kafka Exposed more config for drools Issue-ID: POLICY-4943 Change-Id: I26c4a7c1adc2d615602e3e6495ecedfb017ef39e Signed-off-by: saul.gill <saul.gill@est.tech>
2024-08-02[POLICY] Fix Kyverno Policy violationsAndreas Geissler4-4/+35
- Add "archive" folder for removed policy-gui charts - Update all deployments/jobs to fix policies - Correct KafkaUser definition to avoid deprecated attribute - update xacml-pdp deployment to work with readOnlyFilesystem setting Issue-ID: OOM-3307 Change-Id: I579062c1c49923666c1d836f7324c8bbd7b88695 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-05-21[POLICY] Update docker images to latest versionssaul.gill1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4997 Change-Id: Ia874c6a050f9a0253628247519541e17d86d08cf Signed-off-by: saul.gill <saul.gill@est.tech>
2024-04-26[POLICY] Update docker images to latest versionssaul.gill1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4970 Change-Id: Ib431ebb448205fb79808dab8e1edc2c6aaaaf13c Signed-off-by: saul.gill <saul.gill@est.tech>
2024-04-13[COMMON] Remove hostPath entriesAndreas Geissler1-6/+0
As hostPath volumes violate Cluster policies, they are not allowed within pod definitions. In our case only the "etc/localtime" is mounted to get the timezone of the host, which is not required. Issue-ID: OOM-3287 Change-Id: I6c8c8ea4e982d7e95e73f5fed7fc07ed47ceaab7 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-04-11[COMMON] Update all ReadinessChecksAndreas Geissler1-3/+0
Use the new "service" feature of the readiness image to resolve startup dependencies. Issue-ID: OOM-3280 Change-Id: Ia331d51528676744e5e0479d1fd0ca02830c3499 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-04-08[POLICY] Add kafka support in policy chartsrameshiyer274-58/+6
Added kafka support in all policy charts. Dmaap option is removed Issue-ID: POLICY-4941 Change-Id: I015d303c11c04a64d815fe2f054919eca2252250 Signed-off-by: rameshiyer27 <ramesh.murugan.iyer@est.tech>
2024-03-20[COMMON] Make imagePullSecrets configurableAndreas Geissler1-2/+1
Currently in ONAP the imagePullSecrets is hardcoded to 'onap-docker-registry-key' which is created by the repository-wrapper component. With this change the secrets can be configured via setting global.imagePullSecrets and optionally per image if it is configured as map (image.pullSecrets) Issue-ID: OOM-3284 Change-Id: I8644f9b46043b6014219c42928e057b149df43a4 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-03-14[COMMON] Harmonize resource settings, Part 2Andreas Geissler1-2/+2
Some settings are still wrongly interpreted (e.g. 0.02Gi) Therefor they are changed to non-floating numbers (e.g. 20Mi) Issue-ID: OOM-3273 Change-Id: Icc88dead1ac5b1df8629d6adcc438a739e20522e Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-03-06[POLICY] Update docker images to latest versionssaul.gill2-3/+3
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4907 Change-Id: I2a03efe9e39db70fd60e0790f206ad92cd8fe42b Signed-off-by: Saul Gill <saul.gill@est.tech>
2024-02-28[COMMON] Harmonize resource settingsAndreas Geissler2-8/+15
Update all resource settings to the kubernetes recommended normalized form. Fix ReadinessCheck resource limits. Issue-ID: OOM-3273 Change-Id: Ie10903b801e4dc1689bcec092162d711a431a7a6 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-11-14[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4854 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I4a28d35bbdda2497faaa5c91baa42aaa9d398437
2023-10-18[OOM] Fixing k8s cpu limitsvladimir turok1-2/+2
Adding specific cpu limits for all oom components Issue-ID: OOM-3241 Change-Id: I0bbd973d91d11dbb0ffa5848f7c1ed5ebb5f54ba Signed-off-by: vladimir turok <vladimir.turok@t-systems.com>
2023-09-29[MARIADB][COMMON] Add support for mariadb-operatorAndreas Geissler1-1/+1
Add template functions for the mariadb-operator resources and update the mariadb-galera chart to support them Change the flag to "useOperator" in cassandra to the global setup and additional labels for cassandra resources Changed Policy DB users to support the new mariadb User and fixed db.sh script to wait for the DB user creation Use the new readiness image 5.0.1 with the "app-name" option Change the MariaDB-Galera Service to the "primary" to avoid Deadlocks Fix previous SDNC patch (https://gerrit.onap.org/r/c/oom/+/135308) and temporary disable MariaDB for SDNR, as it is not compatible to MariaDB 11 Issue-ID: OOM-3236 Change-Id: Ie63fcc9c6d5fa802d38c592b449e7ff8553c2ab9 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-07-14[OOM] Fixing k8s resources and limitsAndreas Geissler1-8/+8
This fix is adjusting OOM helm charts components resources limits and requests Issue-ID: OOM-3199 Signed-off-by: Vladimir Turok <vladimir.turok@t-systems.com> Change-Id: I56aeba925cda4984277ac7bbf23cfd158263d30f
2023-06-29[COMMON] Bump ONAP versionAndreas Geissler1-5/+5
Update chart versions to 13.0.0 for Montreal Issue-ID: OOM-3173 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ie53fd021f01e459c464e44f4459a73ba0b00c172
2023-05-05Merge "[POLICY] Update docker images to latest versions"Andreas Geissler5-62/+194
2023-05-04[POLICY] Update docker images to latest versionssaul.gill5-62/+194
The image versions in policy values.yaml files have been updated Added native configurable support in pap and api for strimzi Added configurable support in api and pap for postgres *** This commit is generated by a PF release script *** Issue-ID: POLICY-4648 Change-Id: Ia91ea4a8babc850d0854e299eb80541c1d38285d Signed-off-by: saul.gill <saul.gill@est.tech>
2023-04-21[POLICY][COMMON] Create Authorization Policies for PolicyAndrewLamb2-0/+23
Policy- Add initial authorized serviceaccounts for each sub component service Common- Change authorizationpolicy to match on the label app Issue-ID: OOM-3139 Change-Id: I411877b933d6dfcbdee633f1440d16c9658438e5 Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
2023-03-23[POLICY] Cleanup of Helmcharts from AAF/TLS optionsAndreas Geissler4-58/+5
Remove AAF options and Certificate settings Disable Istio Sidecar injection for DB jobs due to problems during DB Migration Extended the timeouts for clamp-runtime-acm Issue-ID: OOM-3120 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I802fa2038535524f4696513acd5aa7772e0a3f35
2023-03-05Merge "[COMMON] Fix resources indent"Andreas Geissler1-2/+1
2023-03-03[POLICY] Update docker images to latest versionssaul.gill2-1/+7
The image versions in policy values.yaml files have been updated Chart config update to match new images *** This commit is generated by a PF release script *** Issue-ID: POLICY-4570 Signed-off-by: saul.gill <saul.gill@est.tech> Change-Id: I347f3601c4a0d3c09cf5eaec6e8ed51878c1a02d Signed-off-by: saul.gill <saul.gill@est.tech>
2023-03-03[COMMON] Fix resources indentmiroslavmasaryk1-2/+1
Fix of resources template indent and therefore resources in components Issue-ID: OOM-3104 Signed-off-by: miroslavmasaryk <miroslav.masaryk@telekom.com> Change-Id: I825a3860db00cae4bb80b2aa2d82ac1a42b33124
2023-01-31[DMAAP] Remove AAF dependencyefiacor1-6/+6
Remove DMaaP NodePorts Update dmaap-bc postgres setup and dbc-client image used by DCAE Use the http port of the dbcClient in the dmaapProvisioning job Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: Ie4888b58b6f7e1405ed67625900da89e58b5cb79 Issue-ID: DMAAP-1573
2022-12-01[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4462 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I6154e8409900eca422f6b9392883d50232d1f573
2022-11-10[COMMON] Bump ONAP versionAndreas Geissler1-5/+5
Update chart versions 12.0.0 for London Issue-ID: OOM-3046 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ic196235ff4f6ae14a7ecad799bd75a9666b2594a
2022-10-26Merge "[POLICY] Correction on PAP MR connection port"Fiachra Corcoran1-1/+1
2022-10-21[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4408 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I668a2acadccf8d36ccd3b7c1fb21bcfbe59d80da Signed-off-by: liamfallon <liam.fallon@est.tech>
2022-10-17[POLICY] Correction on PAP MR connection portAndreas Geissler1-1/+1
On non-TLS setup the MR port is 3904 instead of 3905, which needs to be set in the papParameters file Issue-ID: OOM-3003 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ie5ee14209660f00e69b6e4b1df5a992731f500f6
2022-10-12[POLICY] Service Mesh Compliance for Policyamatthews3-10/+9
Updating the basic requirements for Service Mesh Compliance within Policy. Changing the DB jobs and updating the configuration files to use HTTP Issue-ID: OOM-2253 Change-Id: If1aed68f0ed2f00d6a5cf06e5f95837f9405f65b Signed-off-by: amatthews <adrian.matthews@est.tech> Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2022-09-23[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4343 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I96f9d8d2857976f22f503810ba1d9bb42133cd6b
2022-09-21[POLICY] Update strimzi config in policy helm chartsSirisha_Manchikanti2-7/+16
Added strimzi kafka user and topics for policy apex-pdp in relevant helm charts. Updated kafka configuration for policy component helm charts. Corrected policy-group configuration in PAP Issue-ID: POLICY-4134 Signed-off-by: Sirisha_Manchikanti <sirisha.manchikanti@est.tech> Change-Id: I0f38f4919898c04e4f4dadc820a7627eee6e022a
2022-07-25[POLICY] Add strimzi kafka config from helm chartsSirisha_Manchikanti3-0/+48
Add strimzi kafka user and topics for policy components in relevant helm charts. Issue-ID: POLICY-4133 Signed-off-by: Sirisha_Manchikanti <sirisha.manchikanti@est.tech> Change-Id: If0e1107c03acdfed83bfc359a45ad546d134bd30
2022-06-24[COMMON] Bump ONAP versionAndreas Geissler1-5/+5
Use version 11.0.0 for Kohn Issue-ID: OOM-2971 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Icc0e0839fc6def2035383b5fa4c9153fc15fafda
2022-05-04[POLICY] Upgrade image versionsjhh1-1/+1
These images tackle security issues in libraries. Issue-ID: POLICY-4071 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I88297b05f05e0a847d10333e60e665f89ccb424d
2022-04-22[POLICY] Update components to latest releasejhh1-1/+1
The exceptions are policy-drools-pdp, policy-xacml-pdp, and policy-gui that are handled in different reviews. Issue-ID: POLICY-4089 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I5d03ce22d9c69380c6f76b24383555cf71803ea4 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2022-04-22[POLICY] Disable prometheus monitoring by defaultRashmi Pujar2-5/+2
ServiceMonitor resource not part of native Kubernetes, it is a custom resource defined via Prometheus operator. Prometheus operator deployment is a pre-requisite to enable creating a ServiceMonitor objects. Issue-ID: POLICY-4096 Signed-off-by: Rashmi Pujar <rashmi.pujar1@bell.ca> Change-Id: Ia672d5d5982e61c00f8effccad0929240f54efb2
2022-04-22[POLICY] Increase hikari connection pool size for PAP & APIPrakhar Pandey1-0/+2
We saw some bottlenecks during S3P testing of API component due to the default connection pool size of 10. Setting it to 20 based on the number of parallel threads used for performance tests. The change is required because prior to spring boot migration (Istanbul and earlier), the default connection size was 32 so it was never a problem for running load tests. Issue-ID: POLICY-4007 Change-Id: Iaaa573d5fce0298e3aff05a27c2e845840a6cb06 Signed-off-by: Prakhar Pandey <prakhar.pandey@bell.ca>
2022-03-22[POLICY] OOM Jakarta changes for PAP,API & PDPsa.sreekumar5-111/+137
This review contains the below changes: 1) PAP config changes for spring boot migration 2) savePdpStatistics flag is disabled by default 3) DMaaP connectivity added to PAP consolidated healthcheck 4) Improve PAP & API readiness probe from TCP to HTTP GET based healthcheck api 5) API config changes for springboot migration 6) Update the docker image versions for Jakarta. Change-Id: I8dfc821b1245cd4ef6bdedad7802deb4ac3297e3 Issue-ID: POLICY-3750 Signed-off-by: a.sreekumar <ajith.sreekumar@bell.ca>
2022-03-21[POLICY] Enable prometheus integration for policy fwkRashmi Pujar2-0/+42
1. Define serviceMonitor for policy components 2. Changes to common serviceMonitor tpl file to include tls params in authentication config, and to provide ability to overrride labels. Issue-ID: POLICY-3779 Signed-off-by: Rashmi Pujar <rashmi.pujar1@bell.ca> Change-Id: I79441958698271d9118efb78cfd121433e201ebd
2022-01-11[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated and the CLAMP runtime configuration has been updated to use Spring style configuration *** This commit is generated by a PF release script *** Issue-ID: POLICY-3827 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I220773eb7728d8f5cff36faad388970e1732f12c Signed-off-by: liamfallon <liam.fallon@est.tech>
2021-12-14[POLICY] Change API and PAP usernamesadheli.tavares1-2/+2
- change references of healthcheck to policyadmin regarding API and PAP auth - add robot variables to accommodate the referred changes. Issue-ID: POLICY-3815 Change-Id: I318b7f44d9e7f554d98d845abd80cc6512831b78 Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
2021-12-07[GLOBAL] Migrate to helm v3efiacor2-35/+17
Move all Chart.yaml to use apiVersion: 2 Move dependencies from requirements.yaml to Chart.yaml Changes to all makeFiles Changes to helm deploy plugin Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I03c5290eee9e40f76eacbf171e774204cf5fb1c0 Issue-ID: OOM-2845
2021-10-31Merge "[POLICY] Add helm chart for policy participant"Sylvain Desbureaux1-4/+4
2021-10-30[POLICY] Add helm chart for policy participantrameshiyer271-4/+4
Added policy participant helm chart in CLAMP Issue-ID: POLICY-3593 Signed-off-by: zrrmmua <ramesh.murugan.iyer@est.tech> Change-Id: I8c4f14a8448a0850a0da303a929dd86b43c8370d