aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/policy/components/policy-xacml-pdp
AgeCommit message (Collapse)AuthorFilesLines
2024-08-02[POLICY] Fix Kyverno Policy violationsAndreas Geissler5-5/+85
- Add "archive" folder for removed policy-gui charts - Update all deployments/jobs to fix policies - Correct KafkaUser definition to avoid deprecated attribute - update xacml-pdp deployment to work with readOnlyFilesystem setting Issue-ID: OOM-3307 Change-Id: I579062c1c49923666c1d836f7324c8bbd7b88695 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-05-21[POLICY] Update docker images to latest versionssaul.gill1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4997 Change-Id: Ia874c6a050f9a0253628247519541e17d86d08cf Signed-off-by: saul.gill <saul.gill@est.tech>
2024-04-26[POLICY] Update docker images to latest versionssaul.gill1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4970 Change-Id: Ib431ebb448205fb79808dab8e1edc2c6aaaaf13c Signed-off-by: saul.gill <saul.gill@est.tech>
2024-04-13[COMMON] Remove hostPath entriesAndreas Geissler1-6/+0
As hostPath volumes violate Cluster policies, they are not allowed within pod definitions. In our case only the "etc/localtime" is mounted to get the timezone of the host, which is not required. Issue-ID: OOM-3287 Change-Id: I6c8c8ea4e982d7e95e73f5fed7fc07ed47ceaab7 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-04-08[POLICY] Add kafka support in policy chartsrameshiyer274-16/+82
Added kafka support in all policy charts. Dmaap option is removed Issue-ID: POLICY-4941 Change-Id: I015d303c11c04a64d815fe2f054919eca2252250 Signed-off-by: rameshiyer27 <ramesh.murugan.iyer@est.tech>
2024-03-20[COMMON] Make imagePullSecrets configurableAndreas Geissler1-2/+1
Currently in ONAP the imagePullSecrets is hardcoded to 'onap-docker-registry-key' which is created by the repository-wrapper component. With this change the secrets can be configured via setting global.imagePullSecrets and optionally per image if it is configured as map (image.pullSecrets) Issue-ID: OOM-3284 Change-Id: I8644f9b46043b6014219c42928e057b149df43a4 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-03-14[COMMON] Harmonize resource settings, Part 2Andreas Geissler1-2/+2
Some settings are still wrongly interpreted (e.g. 0.02Gi) Therefor they are changed to non-floating numbers (e.g. 20Mi) Issue-ID: OOM-3273 Change-Id: Icc88dead1ac5b1df8629d6adcc438a739e20522e Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-03-06[POLICY] Update docker images to latest versionssaul.gill2-3/+3
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4907 Change-Id: I2a03efe9e39db70fd60e0790f206ad92cd8fe42b Signed-off-by: Saul Gill <saul.gill@est.tech>
2024-02-28[COMMON] Harmonize resource settingsAndreas Geissler2-8/+15
Update all resource settings to the kubernetes recommended normalized form. Fix ReadinessCheck resource limits. Issue-ID: OOM-3273 Change-Id: Ie10903b801e4dc1689bcec092162d711a431a7a6 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-11-14[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4854 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I4a28d35bbdda2497faaa5c91baa42aaa9d398437
2023-10-18[OOM] Fixing k8s cpu limitsvladimir turok1-2/+2
Adding specific cpu limits for all oom components Issue-ID: OOM-3241 Change-Id: I0bbd973d91d11dbb0ffa5848f7c1ed5ebb5f54ba Signed-off-by: vladimir turok <vladimir.turok@t-systems.com>
2023-09-29[MARIADB][COMMON] Add support for mariadb-operatorAndreas Geissler1-1/+1
Add template functions for the mariadb-operator resources and update the mariadb-galera chart to support them Change the flag to "useOperator" in cassandra to the global setup and additional labels for cassandra resources Changed Policy DB users to support the new mariadb User and fixed db.sh script to wait for the DB user creation Use the new readiness image 5.0.1 with the "app-name" option Change the MariaDB-Galera Service to the "primary" to avoid Deadlocks Fix previous SDNC patch (https://gerrit.onap.org/r/c/oom/+/135308) and temporary disable MariaDB for SDNR, as it is not compatible to MariaDB 11 Issue-ID: OOM-3236 Change-Id: Ie63fcc9c6d5fa802d38c592b449e7ff8553c2ab9 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-07-14[OOM] Fixing k8s resources and limitsAndreas Geissler1-8/+8
This fix is adjusting OOM helm charts components resources limits and requests Issue-ID: OOM-3199 Signed-off-by: Vladimir Turok <vladimir.turok@t-systems.com> Change-Id: I56aeba925cda4984277ac7bbf23cfd158263d30f
2023-06-29[COMMON] Bump ONAP versionAndreas Geissler1-4/+4
Update chart versions to 13.0.0 for Montreal Issue-ID: OOM-3173 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ie53fd021f01e459c464e44f4459a73ba0b00c172
2023-05-05Merge "[POLICY] Update docker images to latest versions"Andreas Geissler1-6/+6
2023-05-04[POLICY] Update docker images to latest versionssaul.gill1-6/+6
The image versions in policy values.yaml files have been updated Added native configurable support in pap and api for strimzi Added configurable support in api and pap for postgres *** This commit is generated by a PF release script *** Issue-ID: POLICY-4648 Change-Id: Ia91ea4a8babc850d0854e299eb80541c1d38285d Signed-off-by: saul.gill <saul.gill@est.tech>
2023-04-21[POLICY][COMMON] Create Authorization Policies for PolicyAndrewLamb2-0/+42
Policy- Add initial authorized serviceaccounts for each sub component service Common- Change authorizationpolicy to match on the label app Issue-ID: OOM-3139 Change-Id: I411877b933d6dfcbdee633f1440d16c9658438e5 Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
2023-04-03[POLICY] Correct comtainer port in policy-xacml-pdpAndreas Geissler1-2/+1
Wrong port definition leads to missing Service selection Issue-ID: OOM-3120 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I0d843f6cff494e9062ee18321c5525499b868dcd
2023-03-23[POLICY] Cleanup of Helmcharts from AAF/TLS optionsAndreas Geissler5-90/+10
Remove AAF options and Certificate settings Disable Istio Sidecar injection for DB jobs due to problems during DB Migration Extended the timeouts for clamp-runtime-acm Issue-ID: OOM-3120 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I802fa2038535524f4696513acd5aa7772e0a3f35
2023-03-05Merge "[COMMON] Fix resources indent"Andreas Geissler1-2/+1
2023-03-03[POLICY] Update docker images to latest versionssaul.gill1-1/+1
The image versions in policy values.yaml files have been updated Chart config update to match new images *** This commit is generated by a PF release script *** Issue-ID: POLICY-4570 Signed-off-by: saul.gill <saul.gill@est.tech> Change-Id: I347f3601c4a0d3c09cf5eaec6e8ed51878c1a02d Signed-off-by: saul.gill <saul.gill@est.tech>
2023-03-03[COMMON] Fix resources indentmiroslavmasaryk1-2/+1
Fix of resources template indent and therefore resources in components Issue-ID: OOM-3104 Signed-off-by: miroslavmasaryk <miroslav.masaryk@telekom.com> Change-Id: I825a3860db00cae4bb80b2aa2d82ac1a42b33124
2023-01-31[DMAAP] Remove AAF dependencyefiacor1-2/+2
Remove DMaaP NodePorts Update dmaap-bc postgres setup and dbc-client image used by DCAE Use the http port of the dbcClient in the dmaapProvisioning job Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: Ie4888b58b6f7e1405ed67625900da89e58b5cb79 Issue-ID: DMAAP-1573
2022-12-01[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4462 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I6154e8409900eca422f6b9392883d50232d1f573
2022-11-10[COMMON] Bump ONAP versionAndreas Geissler1-5/+5
Update chart versions 12.0.0 for London Issue-ID: OOM-3046 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ic196235ff4f6ae14a7ecad799bd75a9666b2594a
2022-10-21[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4408 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I668a2acadccf8d36ccd3b7c1fb21bcfbe59d80da Signed-off-by: liamfallon <liam.fallon@est.tech>
2022-10-12[POLICY] Service Mesh Compliance for Policyamatthews3-6/+6
Updating the basic requirements for Service Mesh Compliance within Policy. Changing the DB jobs and updating the configuration files to use HTTP Issue-ID: OOM-2253 Change-Id: If1aed68f0ed2f00d6a5cf06e5f95837f9405f65b Signed-off-by: amatthews <adrian.matthews@est.tech> Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2022-09-28[POLICY] Update config and db-migrator to 2.5.0jhh1-2/+2
The db-migrator image is upgraded to the latest release. Additionally, config changes to allow DB customization are included. Issue-ID: POLICY-4343 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I9e531d3baf218a30a885bc4258f9fdeb36eaab99 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2022-09-23[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated *** This commit is generated by a PF release script *** Issue-ID: POLICY-4343 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I96f9d8d2857976f22f503810ba1d9bb42133cd6b
2022-06-24[COMMON] Bump ONAP versionAndreas Geissler1-5/+5
Use version 11.0.0 for Kohn Issue-ID: OOM-2971 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Icc0e0839fc6def2035383b5fa4c9153fc15fafda
2022-05-04[POLICY] Upgrade image versionsjhh1-1/+1
These images tackle security issues in libraries. Issue-ID: POLICY-4071 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I88297b05f05e0a847d10333e60e665f89ccb424d
2022-04-22[POLICY] Disable prometheus monitoring by defaultRashmi Pujar2-5/+2
ServiceMonitor resource not part of native Kubernetes, it is a custom resource defined via Prometheus operator. Prometheus operator deployment is a pre-requisite to enable creating a ServiceMonitor objects. Issue-ID: POLICY-4096 Signed-off-by: Rashmi Pujar <rashmi.pujar1@bell.ca> Change-Id: Ia672d5d5982e61c00f8effccad0929240f54efb2
2022-04-19[POLICY] Enhance liveness probes and metricsjhh2-2/+5
- added logback prometheus support for xacml and drools. - enabled enhanced healthchecks. - enabled enhanced liveness probes for drools pdp to detect stuck PDP application and restart it. - add prometheus servicemonitor for drools. - set latest docker image versions for drools-applications and xacml Issue-ID: POLICY-3386 Issue-ID: POLICY-4089 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I0ffd9bf93452f8a7a63deb33f2103f9b80476d07 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2022-03-22[POLICY] OOM Jakarta changes for PAP,API & PDPsa.sreekumar1-1/+1
This review contains the below changes: 1) PAP config changes for spring boot migration 2) savePdpStatistics flag is disabled by default 3) DMaaP connectivity added to PAP consolidated healthcheck 4) Improve PAP & API readiness probe from TCP to HTTP GET based healthcheck api 5) API config changes for springboot migration 6) Update the docker image versions for Jakarta. Change-Id: I8dfc821b1245cd4ef6bdedad7802deb4ac3297e3 Issue-ID: POLICY-3750 Signed-off-by: a.sreekumar <ajith.sreekumar@bell.ca>
2022-03-21[POLICY] Enable prometheus integration for policy fwkRashmi Pujar2-0/+47
1. Define serviceMonitor for policy components 2. Changes to common serviceMonitor tpl file to include tls params in authentication config, and to provide ability to overrride labels. Issue-ID: POLICY-3779 Signed-off-by: Rashmi Pujar <rashmi.pujar1@bell.ca> Change-Id: I79441958698271d9118efb78cfd121433e201ebd
2022-01-11[POLICY] Update docker images to latest versionsliamfallon1-1/+1
The image versions in policy values.yaml files have been updated and the CLAMP runtime configuration has been updated to use Spring style configuration *** This commit is generated by a PF release script *** Issue-ID: POLICY-3827 Signed-off-by: liamfallon <liam.fallon@est.tech> Change-Id: I220773eb7728d8f5cff36faad388970e1732f12c Signed-off-by: liamfallon <liam.fallon@est.tech>
2021-12-14[POLICY] Change API and PAP usernamesadheli.tavares1-1/+1
- change references of healthcheck to policyadmin regarding API and PAP auth - add robot variables to accommodate the referred changes. Issue-ID: POLICY-3815 Change-Id: I318b7f44d9e7f554d98d845abd80cc6512831b78 Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
2021-12-07[GLOBAL] Migrate to helm v3efiacor2-34/+17
Move all Chart.yaml to use apiVersion: 2 Move dependencies from requirements.yaml to Chart.yaml Changes to all makeFiles Changes to helm deploy plugin Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I03c5290eee9e40f76eacbf171e774204cf5fb1c0 Issue-ID: OOM-2845
2021-10-27[POLICY] Update core images/config for RC istanbulliamfallon1-1/+1
Updated images for all components. Issue-ID: POLICY-3696 Change-Id: Idf598cc4d59c7a67327fe470121b004c890343cc Signed-off-by: liamfallon <liam.fallon@est.tech>
2021-10-15[COMMON] Bump ONAP versionSylvain Desbureaux2-5/+7
Use version 9.0.0 for Istanbul Also update the doc. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I03e11799bf487226784c98b04116f005c89d1e70
2021-09-17[POLICY] Update core images/config for m4 istanbuljhh2-5/+8
New images and configuration for api, pap, distribution, pdpd, pdpx, pdpa and db components. Issue-ID: POLICY-3199 Issue-ID: POLICY-3456 Issue-ID: POLICY-3593 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I4572a3aeb8481d8d2ea671f67e105a05fc6ce1b8 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Signed-off-by: Jim Hahn <jrh3@att.com> Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Signed-off-by: Jim Hahn <jrh3@att.com> Signed-off-by: a.sreekumar <ajith.sreekumar@bell.ca> Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Signed-off-by: a.sreekumar <ajith.sreekumar@bell.ca>
2021-07-20[POLICY] Update chart with service accountfarida azmy3-0/+10
Add service account to requirements.yaml, values.yaml and deployment/statefulset Issue-ID: OOM-2725 Signed-off-by: farida azmy <farida.azmy.ext@orange.com> Co-authored-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I67c689d65ff004c3919256449d0bfaf976514a93
2021-05-02[POLICY] Simplify cert retrieval scriptSylvain Desbureaux1-4/+0
As retrieving values is now done via a generic script, let's clean a little bit cert retrieval in order to remove unneeded part. Issue-ID: OOM-2688 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ieec9fe0ba23c7d7125086e0882a20a038c25a128
2021-04-13[POLICY] Add date to logging timestampjhh1-2/+3
Policy components log the current time to stdout but not the actual date. This patch adds the date in UTC format Issue-ID: POLICY-3177 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: If86cad58115d9124e09a953c0aa807644830ad4b Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2021-03-25Merge "[DOC][COMMON] Prepare Honolulu release"Krzysztof Opasiak2-4/+4
2021-03-24[POLICY] Update RC0 released versionsjhh1-1/+1
apex image: onap/policy-apex-pdp:2.5.1 api image: onap/policy-api:2.4.1 distribution image: onap/policy-distribution:2.5.1 pdpd-cl image: onap/policy-pdpd-cl:1.8.1 pap image: onap/policy-pap:2.4.1 xacml-pdp image: onap/policy-xacml-pdp:2.4.1 policy-clamp-backend image: onap/policy-clamp-backend:6.0.2 policy-clamp-frontend image: onap/policy-clamp-frontend:6.0.2 Issue-ID: POLICY-3127 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I1381c9f310adb0b310262cd242ed4883388fcbc3 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2021-03-24[DOC][COMMON] Prepare Honolulu releaseSylvain Desbureaux2-4/+4
Updating the documentation and bumping version to 8.0.0 Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6f942f1466fed64264c44fb8fc0e1ffc93a98f18
2021-02-26[POLICY] Update released versionsjhh2-3/+4
Update released versions for M3 Honolulu Issue-ID: POLICY-3032 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: If87afd9a00e444265b91372d1f7201415284f6b5 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2021-02-16Add target-db property for OOM xacmlJim Hahn1-0/+1
The new version of eclipselink does not recognize mariadb by default. Added a property to make it work with xacml-pdp. None of the other policy components need an additional property (as far as I can tell). Issue-ID: POLICY-3005 Change-Id: I050ac85fd23c887009a095b08a9d6ef603b6de36 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-12-16[POLICY] Remove bash shellTaka Cho1-1/+1
removal any GPL-3.0 and plus license for detail, please see the below Issue-ID Issue-ID: POLICY-2847 Change-Id: I491c0762c9dc494092cbc4c66fed4a2c7d0a9ab2 Signed-off-by: Taka Cho <takamune.cho@att.com>