aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/policy/components/policy-xacml-pdp
AgeCommit message (Collapse)AuthorFilesLines
2023-10-18[OOM] Fixing k8s cpu limitsvladimir turok1-2/+2
Adding specific cpu limits for all oom components Issue-ID: OOM-3241 Change-Id: I0bbd973d91d11dbb0ffa5848f7c1ed5ebb5f54ba Signed-off-by: vladimir turok <vladimir.turok@t-systems.com>
2023-09-29[MARIADB][COMMON] Add support for mariadb-operatorAndreas Geissler1-1/+1
Add template functions for the mariadb-operator resources and update the mariadb-galera chart to support them Change the flag to "useOperator" in cassandra to the global setup and additional labels for cassandra resources Changed Policy DB users to support the new mariadb User and fixed db.sh script to wait for the DB user creation Use the new readiness image 5.0.1 with the "app-name" option Change the MariaDB-Galera Service to the "primary" to avoid Deadlocks Fix previous SDNC patch (https://gerrit.onap.org/r/c/oom/+/135308) and temporary disable MariaDB for SDNR, as it is not compatible to MariaDB 11 Issue-ID: OOM-3236 Change-Id: Ie63fcc9c6d5fa802d38c592b449e7ff8553c2ab9 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-07-14[OOM] Fixing k8s resources and limitsAndreas Geissler1-8/+8
This fix is adjusting OOM helm charts components resources limits and requests Issue-ID: OOM-3199 Signed-off-by: Vladimir Turok <vladimir.turok@t-systems.com> Change-Id: I56aeba925cda4984277ac7bbf23cfd158263d30f
2023-06-29[COMMON] Bump ONAP versionAndreas Geissler1-4/+4
Update chart versions to 13.0.0 for Montreal Issue-ID: OOM-3173 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ie53fd021f01e459c464e44f4459a73ba0b00c172
2023-05-05Merge "[POLICY] Update docker images to latest versions"Andreas Geissler1-6/+6
2023-05-04[POLICY] Update docker images to latest versionssaul.gill1-6/+6
The image versions in policy values.yaml files have been updated Added native configurable support in pap and api for strimzi Added configurable support in api and pap for postgres *** This commit is generated by a PF release script *** Issue-ID: POLICY-4648 Change-Id: Ia91ea4a8babc850d0854e299eb80541c1d38285d Signed-off-by: saul.gill <saul.gill@est.tech>
2023-04-21[POLICY][COMMON] Create Authorization Policies for PolicyAndrewLamb2-0/+42
Policy- Add initial authorized serviceaccounts for each sub component service Common- Change authorizationpolicy to match on the label app Issue-ID: OOM-3139 Change-Id: I411877b933d6dfcbdee633f1440d16c9658438e5 Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
2023-04-03[POLICY] Correct comtainer port in policy-xacml-pdpAndreas Geissler1-2/+1
Wrong port definition leads to missing Service selection Issue-ID: OOM-3120 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I0d843f6cff494e9062ee18321c5525499b868dcd
2023-03-23[POLICY] Cleanup of Helmcharts from AAF/TLS optionsAndreas Geissler5-90/+10
Remove AAF options and Certificate settings Disable Istio Sidecar injection for DB jobs due to problems during DB Migration Extended the timeouts for clamp-runtime-acm Issue-ID: OOM-3120 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I802fa2038535524f4696513acd5aa7772e0a3f35
2023-03-05Merge "[COMMON] Fix resources indent"Andreas Geissler1-2/+1
2023-03-03[POLICY] Update docker images to latest versionssaul.gill1-1/+1
The image versions in policy values.yaml files have been updated Chart config update to match new images *** This commit is generated by a PF release script *** Issue-ID: POLICY-4570 Signed-off-by: saul.gill <saul.gill@est.tech> Change-Id: I347f3601c4a0d3c09cf5eaec6e8ed51878c1a02d Signed-off-by: saul.gill <saul.gill@est.tech>
2023-03-03[COMMON] Fix resources indentmiroslavmasaryk1-2/+1
Fix of resources template indent and therefore resources in components Issue-ID: OOM-3104 Signed-off-by: miroslavmasaryk <miroslav.masaryk@telekom.com> Change-Id: I825a3860db00cae4bb80b2aa2d82ac1a42b33124
2023-01-31[DMAAP] Remove AAF dependencyefiacor1-2/+2
Remove DMaaP NodePorts Update dmaap-bc postgres setup and dbc-client image used by DCAE Use the http port of the dbcClient in the dmaapProvisioning job Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: Ie4888b58b6f7e1405ed67625900da89e58b5cb79 Issue-ID: DMAAP-1573
2022-12-01[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4462 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I6154e8409900eca422f6b9392883d50232d1f573
2022-11-10[COMMON] Bump ONAP versionAndreas Geissler1-5/+5
Update chart versions 12.0.0 for London Issue-ID: OOM-3046 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ic196235ff4f6ae14a7ecad799bd75a9666b2594a
2022-10-21[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4408 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I668a2acadccf8d36ccd3b7c1fb21bcfbe59d80da Signed-off-by: liamfallon <liam.fallon@est.tech>
2022-10-12[POLICY] Service Mesh Compliance for Policyamatthews3-6/+6
Updating the basic requirements for Service Mesh Compliance within Policy. Changing the DB jobs and updating the configuration files to use HTTP Issue-ID: OOM-2253 Change-Id: If1aed68f0ed2f00d6a5cf06e5f95837f9405f65b Signed-off-by: amatthews <adrian.matthews@est.tech> Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2022-09-28[POLICY] Update config and db-migrator to 2.5.0jhh1-2/+2
The db-migrator image is upgraded to the latest release. Additionally, config changes to allow DB customization are included. Issue-ID: POLICY-4343 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I9e531d3baf218a30a885bc4258f9fdeb36eaab99 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2022-09-23[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4343 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I96f9d8d2857976f22f503810ba1d9bb42133cd6b
2022-06-24[COMMON] Bump ONAP versionAndreas Geissler1-5/+5
Use version 11.0.0 for Kohn Issue-ID: OOM-2971 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Icc0e0839fc6def2035383b5fa4c9153fc15fafda
2022-05-04[POLICY] Upgrade image versionsjhh1-1/+1
These images tackle security issues in libraries. Issue-ID: POLICY-4071 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I88297b05f05e0a847d10333e60e665f89ccb424d
2022-04-22[POLICY] Disable prometheus monitoring by defaultRashmi Pujar2-5/+2
ServiceMonitor resource not part of native Kubernetes, it is a custom resource defined via Prometheus operator. Prometheus operator deployment is a pre-requisite to enable creating a ServiceMonitor objects. Issue-ID: POLICY-4096 Signed-off-by: Rashmi Pujar <rashmi.pujar1@bell.ca> Change-Id: Ia672d5d5982e61c00f8effccad0929240f54efb2
2022-04-19[POLICY] Enhance liveness probes and metricsjhh2-2/+5
- added logback prometheus support for xacml and drools. - enabled enhanced healthchecks. - enabled enhanced liveness probes for drools pdp to detect stuck PDP application and restart it. - add prometheus servicemonitor for drools. - set latest docker image versions for drools-applications and xacml Issue-ID: POLICY-3386 Issue-ID: POLICY-4089 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I0ffd9bf93452f8a7a63deb33f2103f9b80476d07 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2022-03-22[POLICY] OOM Jakarta changes for PAP,API & PDPsa.sreekumar1-1/+1
This review contains the below changes: 1) PAP config changes for spring boot migration 2) savePdpStatistics flag is disabled by default 3) DMaaP connectivity added to PAP consolidated healthcheck 4) Improve PAP & API readiness probe from TCP to HTTP GET based healthcheck api 5) API config changes for springboot migration 6) Update the docker image versions for Jakarta. Change-Id: I8dfc821b1245cd4ef6bdedad7802deb4ac3297e3 Issue-ID: POLICY-3750 Signed-off-by: a.sreekumar <ajith.sreekumar@bell.ca>
2022-03-21[POLICY] Enable prometheus integration for policy fwkRashmi Pujar2-0/+47
1. Define serviceMonitor for policy components 2. Changes to common serviceMonitor tpl file to include tls params in authentication config, and to provide ability to overrride labels. Issue-ID: POLICY-3779 Signed-off-by: Rashmi Pujar <rashmi.pujar1@bell.ca> Change-Id: I79441958698271d9118efb78cfd121433e201ebd
2022-01-11[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated and the CLAMP runtime configuration has been updated to use Spring style configuration *** This commit is generated by a PF release script *** Issue-ID: POLICY-3827 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I220773eb7728d8f5cff36faad388970e1732f12c Signed-off-by: liamfallon <liam.fallon@est.tech>
2021-12-14[POLICY] Change API and PAP usernamesadheli.tavares1-1/+1
- change references of healthcheck to policyadmin regarding API and PAP auth - add robot variables to accommodate the referred changes. Issue-ID: POLICY-3815 Change-Id: I318b7f44d9e7f554d98d845abd80cc6512831b78 Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
2021-12-07[GLOBAL] Migrate to helm v3efiacor2-34/+17
Move all Chart.yaml to use apiVersion: 2 Move dependencies from requirements.yaml to Chart.yaml Changes to all makeFiles Changes to helm deploy plugin Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I03c5290eee9e40f76eacbf171e774204cf5fb1c0 Issue-ID: OOM-2845
2021-10-27[POLICY] Update core images/config for RC istanbulliamfallon1-1/+1
Updated images for all components. Issue-ID: POLICY-3696 Change-Id: Idf598cc4d59c7a67327fe470121b004c890343cc Signed-off-by: liamfallon <liam.fallon@est.tech>
2021-10-15[COMMON] Bump ONAP versionSylvain Desbureaux2-5/+7
Use version 9.0.0 for Istanbul Also update the doc. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I03e11799bf487226784c98b04116f005c89d1e70
2021-09-17[POLICY] Update core images/config for m4 istanbuljhh2-5/+8
New images and configuration for api, pap, distribution, pdpd, pdpx, pdpa and db components. Issue-ID: POLICY-3199 Issue-ID: POLICY-3456 Issue-ID: POLICY-3593 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I4572a3aeb8481d8d2ea671f67e105a05fc6ce1b8 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Signed-off-by: Jim Hahn <jrh3@att.com> Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Signed-off-by: Jim Hahn <jrh3@att.com> Signed-off-by: a.sreekumar <ajith.sreekumar@bell.ca> Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Signed-off-by: a.sreekumar <ajith.sreekumar@bell.ca>
2021-07-20[POLICY] Update chart with service accountfarida azmy3-0/+10
Add service account to requirements.yaml, values.yaml and deployment/statefulset Issue-ID: OOM-2725 Signed-off-by: farida azmy <farida.azmy.ext@orange.com> Co-authored-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I67c689d65ff004c3919256449d0bfaf976514a93
2021-05-02[POLICY] Simplify cert retrieval scriptSylvain Desbureaux1-4/+0
As retrieving values is now done via a generic script, let's clean a little bit cert retrieval in order to remove unneeded part. Issue-ID: OOM-2688 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ieec9fe0ba23c7d7125086e0882a20a038c25a128
2021-04-13[POLICY] Add date to logging timestampjhh1-2/+3
Policy components log the current time to stdout but not the actual date. This patch adds the date in UTC format Issue-ID: POLICY-3177 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: If86cad58115d9124e09a953c0aa807644830ad4b Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2021-03-25Merge "[DOC][COMMON] Prepare Honolulu release"Krzysztof Opasiak2-4/+4
2021-03-24[POLICY] Update RC0 released versionsjhh1-1/+1
apex image: onap/policy-apex-pdp:2.5.1 api image: onap/policy-api:2.4.1 distribution image: onap/policy-distribution:2.5.1 pdpd-cl image: onap/policy-pdpd-cl:1.8.1 pap image: onap/policy-pap:2.4.1 xacml-pdp image: onap/policy-xacml-pdp:2.4.1 policy-clamp-backend image: onap/policy-clamp-backend:6.0.2 policy-clamp-frontend image: onap/policy-clamp-frontend:6.0.2 Issue-ID: POLICY-3127 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I1381c9f310adb0b310262cd242ed4883388fcbc3 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2021-03-24[DOC][COMMON] Prepare Honolulu releaseSylvain Desbureaux2-4/+4
Updating the documentation and bumping version to 8.0.0 Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6f942f1466fed64264c44fb8fc0e1ffc93a98f18
2021-02-26[POLICY] Update released versionsjhh2-3/+4
Update released versions for M3 Honolulu Issue-ID: POLICY-3032 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: If87afd9a00e444265b91372d1f7201415284f6b5 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2021-02-16Add target-db property for OOM xacmlJim Hahn1-0/+1
The new version of eclipselink does not recognize mariadb by default. Added a property to make it work with xacml-pdp. None of the other policy components need an additional property (as far as I can tell). Issue-ID: POLICY-3005 Change-Id: I050ac85fd23c887009a095b08a9d6ef603b6de36 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-12-16[POLICY] Remove bash shellTaka Cho1-1/+1
removal any GPL-3.0 and plus license for detail, please see the below Issue-ID Issue-ID: POLICY-2847 Change-Id: I491c0762c9dc494092cbc4c66fed4a2c7d0a9ab2 Signed-off-by: Taka Cho <takamune.cho@att.com>
2020-11-30[COMMON][DOC] Bump version GuilinSylvain Desbureaux2-4/+4
Update charts and requirements to 7.0.0. Create release notes for Guilin Update documentation Issue-ID: OOM-2638 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I965ed6b6ebb7d74bfddaff73edd3dd55a657841c
2020-11-27[POLICY] Uses new tpls for repos / imagesSylvain Desbureaux3-6/+6
This commit makes Policy chart to use the new generator for repositories and images. Issue-ID: OOM-2364 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ibc592fdc393e37c075ce905027d49d70fcbe4d84
2020-10-22Merge "[POLICY] Update Policy image versions"Sylvain Desbureaux1-1/+1
2020-10-21[POLICY] Update Policy image versionsJim Hahn1-1/+1
Update version numbers for all Policy images. Issue-ID: POLICY-2869 Change-Id: Ia5afdf328fd3ddf3b665446cf0950d65522181d5 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-10-21[POLICY] change comment styleJakub Latusek6-0/+12
Signed-off-by: Jakub Latusek <j.latusek@samsung.com> Change-Id: I1ef11f209f5070f6f6b9f512f92a704ac08f3529 Issue-ID: OOM-2562
2020-10-09[POLICY]release new imagesTaka Cho3-3/+3
1. releasing new policy docker 2. remove BASE64 password 3. remove legacy operation type in apex Issue-ID: POLICY-2770 Change-Id: Ic1c8315687cb726c3888a4345bc163d42994fa52 Signed-off-by: Taka Cho <takamune.cho@att.com>
2020-09-28[POLICY] Remove field undefined in deploymentJakub Latusek1-2/+0
Field emptyDir is defined in Deployment.spec.template.spec.volumes Signed-off-by: Jakub Latusek <j.latusek@samsung.com> Issue-ID: OOM-2562 Change-Id: I4e52f585eebfe10138d1b22a5c8a127845560996
2020-09-11[POLICY] new image versionsjhh2-2/+1
- Changes needed to support the new images. - Add resources to galera config job (POLICY-2820) Issue-ID: POLICY-2789 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: Id3b87a5931c64f729afcf77861d12fd5e25a5531 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-09-04[GENERAL] Use readiness container v3.0.1Sylvain Desbureaux2-4/+3
Readiness container v3.x and up are now present in ONAP main repository. They're also not using root user anymore and then script path has changed. Finally, "job_complete" script has been integrated in main "ready" script. As those changes are significant, we must upgrade all the components at once. Depends-On: I5afa83892043f4844afe12e61724a8d368a9f2e0 Issue-ID: OOM-2545 Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com> Change-Id: I0b4eb5dd86390273532d67d0a9696e1cfcadf110
2020-08-27[POLICY] certInit support + refactoringjhh10-0/+655
Several changes are including in this patch: - certInitializer support (POLICY-2615, REQ-361) - renamed policy objects to start with "policy-" prefix (POLICY-1000) - add resources section to components that did not have or had it incorrectly set up rendering null (POLICY-2502) - Removal of legacy policy-engine components (POLICY-2743) - Miscellaneous refactoring of charts (POLICY-2745) - update pdp legacy reference to policy-xacml-pdp from pdp (legacy) Issue-ID: POLICY-2615 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I8b6984a663bbb14d331a366ec02b6dd38755cde7 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>