summaryrefslogtreecommitdiffstats
path: root/kubernetes/policy
AgeCommit message (Collapse)AuthorFilesLines
2021-02-16Add target-db property for OOM xacmlJim Hahn1-0/+1
The new version of eclipselink does not recognize mariadb by default. Added a property to make it work with xacml-pdp. None of the other policy components need an additional property (as far as I can tell). Issue-ID: POLICY-3005 Change-Id: I050ac85fd23c887009a095b08a9d6ef603b6de36 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-02-11[POLICY] Migration of clamp to policy areasebdet28-1/+1469
Creation of the clamp subcharts + fusion of the clamp database to policy mariadb Issue-ID: POLICY-2951 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: I8192f82bc393e3fc8d5884d6ab73912a0466edcd Signed-off-by: sebdet <sebastien.determe@intl.att.com>
2020-12-17Merge "[COMMON][MARIADB] Upgrade Mariadb DB galera version"Krzysztof Opasiak1-16/+16
2020-12-16[POLICY] Remove bash shellTaka Cho7-7/+7
removal any GPL-3.0 and plus license for detail, please see the below Issue-ID Issue-ID: POLICY-2847 Change-Id: I491c0762c9dc494092cbc4c66fed4a2c7d0a9ab2 Signed-off-by: Taka Cho <takamune.cho@att.com>
2020-12-14[COMMON][MARIADB] Upgrade Mariadb DB galera versionSylvain Desbureaux1-16/+16
Mariadb DB Galera containers version is outdated and unmaintained. We need them to move to a new image provider. As new image provider is not compatible with our old templates, we also update the templates (by reworking bitnami mariadb-galera chart). An update of global mariadb image is also done in order to match mariadb galera version. Issue-ID: OOM-1720 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib9976227759e90022183d4f37fc655143be4d6ac
2020-11-30[COMMON][DOC] Bump version GuilinSylvain Desbureaux16-38/+38
Update charts and requirements to 7.0.0. Create release notes for Guilin Update documentation Issue-ID: OOM-2638 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I965ed6b6ebb7d74bfddaff73edd3dd55a657841c
2020-11-27[POLICY] Uses new tpls for repos / imagesSylvain Desbureaux24-46/+47
This commit makes Policy chart to use the new generator for repositories and images. Issue-ID: OOM-2364 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ibc592fdc393e37c075ce905027d49d70fcbe4d84
2020-11-18[POLICY] Use apex 2.4.4 and drools 1.7.5Jim Hahn3-2/+3
Update version numbers for some Policy images. Fixed the following issues: - match prov-status with both "ACTIVE" and "active" in drools-apps - close stdin & stdout in apex-pdp CLI editor - add stringify method to apex-pdp execution context - set dmaap fetch timeout for apex-pdp Issue-ID: POLICY-2893 Change-Id: I30017d6f2f01034b2f8721c800925dcab79672b3 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-10-22Merge "[POLICY] Update Policy image versions"Sylvain Desbureaux6-6/+6
2020-10-22Merge "[Tree-wide] Add helmignore to ignore components"Sylvain Desbureaux1-0/+1
2020-10-21[POLICY] Update Policy image versionsJim Hahn6-6/+6
Update version numbers for all Policy images. Issue-ID: POLICY-2869 Change-Id: Ia5afdf328fd3ddf3b665446cf0950d65522181d5 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-10-21[POLICY] change comment styleJakub Latusek38-0/+76
Signed-off-by: Jakub Latusek <j.latusek@samsung.com> Change-Id: I1ef11f209f5070f6f6b9f512f92a704ac08f3529 Issue-ID: OOM-2562
2020-10-21[Tree-wide] Add helmignore to ignore componentsKrzysztof Opasiak1-0/+1
components directory takes up a lot of space and is included during helm package Lets remove it using .helmignore This is just a copy of idea showed in: "[OOF] Add helmignore to ignore components" by krishnaa96 <krishna.moorthy6@wipro.com> Issue-ID: OOM-2534 Suggested-by: krishnaa96 <krishna.moorthy6@wipro.com> Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I25c82e79ba2c472b7761a63365573188ab8db56b
2020-10-20Merge "Update makefiles to use specific helm version"Krzysztof Opasiak2-8/+10
2020-10-20[POLICY] Change policy-distribution configurationRam Krishna Verma1-1/+1
policy-distribution was failing to connect with SDC. After debugging, we found that SDC has been changed recently to expect common.namespace appended with the "message-router" host name. Example - "message-router.onap". Hence, updated the policy-distribution configuration to append common.namespace with the message-router host name. The fix is tested in PFPP lab. Issue-ID: POLICY-2861 Change-Id: I898b24199fdfc06ab63813f5df78f51b2f141e94 Signed-off-by: Ram Krishna Verma <ram_krishna.verma@bell.ca>
2020-10-16Update makefiles to use specific helm versionJakub Latusek2-8/+10
Helm is now called by HELM_BIN variable which by default is set to helm and makefiles use helm from path. HELM_BIN can be overwritten so user can have two version of helm in system and choose which one to use. Signed-off-by: Jakub Latusek <j.latusek@samsung.com> Issue-ID: OOM-2562 Change-Id: I0917796aafe234e87afa0ac3c4c15720296276d5
2020-10-10[policy] release pdp-cl 1.7.3Taka Cho1-1/+1
Issue-ID: POLICY-2839 Change-Id: Id29259a12c438f5be692791a5617c5db623028af Signed-off-by: Taka Cho <takamune.cho@att.com>
2020-10-09[POLICY]release new imagesTaka Cho14-17/+13
1. releasing new policy docker 2. remove BASE64 password 3. remove legacy operation type in apex Issue-ID: POLICY-2770 Change-Id: Ic1c8315687cb726c3888a4345bc163d42994fa52 Signed-off-by: Taka Cho <takamune.cho@att.com>
2020-09-30Merge "[POLICY] Remove field undefined in deployment"Sylvain Desbureaux1-2/+0
2020-09-28[POLICY] Remove field undefined in deploymentJakub Latusek1-2/+0
Field emptyDir is defined in Deployment.spec.template.spec.volumes Signed-off-by: Jakub Latusek <j.latusek@samsung.com> Issue-ID: OOM-2562 Change-Id: I4e52f585eebfe10138d1b22a5c8a127845560996
2020-09-25[POLICY] update preloaded types for api:2.3.1jhh1-2/+3
Issue-ID: POLICY-2846 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: Ic11248cd11c58a6a1a5d887c3c6b73e66e722848
2020-09-14Merge "[POLICY] new image versions"Sylvain Desbureaux15-11/+34
2020-09-11[POLICY] new image versionsjhh15-11/+34
- Changes needed to support the new images. - Add resources to galera config job (POLICY-2820) Issue-ID: POLICY-2789 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: Id3b87a5931c64f729afcf77861d12fd5e25a5531 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-09-11[TREE-WIDE] Use faster version of common secret templateKrzysztof Opasiak2-3/+3
Replace all calls to common.secret with a faster version to save some linting time. Issue-ID: OOM-2248 Change-Id: I3372c87226d5dd8b7468ebed2d77e7ceceba5777 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-09-04[GENERAL] Use readiness container v3.0.1Sylvain Desbureaux13-30/+23
Readiness container v3.x and up are now present in ONAP main repository. They're also not using root user anymore and then script path has changed. Finally, "job_complete" script has been integrated in main "ready" script. As those changes are significant, we must upgrade all the components at once. Depends-On: I5afa83892043f4844afe12e61724a8d368a9f2e0 Issue-ID: OOM-2545 Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com> Change-Id: I0b4eb5dd86390273532d67d0a9696e1cfcadf110
2020-08-27[POLICY] certInit support + refactoringjhh124-3736/+1495
Several changes are including in this patch: - certInitializer support (POLICY-2615, REQ-361) - renamed policy objects to start with "policy-" prefix (POLICY-1000) - add resources section to components that did not have or had it incorrectly set up rendering null (POLICY-2502) - Removal of legacy policy-engine components (POLICY-2743) - Miscellaneous refactoring of charts (POLICY-2745) - update pdp legacy reference to policy-xacml-pdp from pdp (legacy) Issue-ID: POLICY-2615 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I8b6984a663bbb14d331a366ec02b6dd38755cde7 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-08-03Merge "[POLICY] Make POLICY compatible with Kubernetes v1.17"Krzysztof Opasiak10-10/+28
2020-07-31[POLICY] Add logback configuration filesBruno Sakoto6-0/+743
Have logging configuration files available in charts and log to stdout by default Issue-ID: POLICY-2682 Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca> Change-Id: Ic247723f31bd99c3c2801343cbb4ab42e6319e01
2020-07-31[POLICY] Make POLICY compatible with Kubernetes v1.17Grzegorz-Lis10-10/+28
Issue-ID: OOM-2462 Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com> Change-Id: Ieda79c0c1109823bef82b714dc7b97b3a84a31c2
2020-07-28Update config of policy/distribution chartRam Krishna Verma1-16/+0
HpaDecoder has been deprecated from policy distribution codebase. Updating the config file to remove the same. Issue-ID: POLICY-2477 Change-Id: I867e64db1c388e84e42a305f803335a09324777f Signed-off-by: Ram Krishna Verma <ram_krishna.verma@bell.ca>
2020-07-13[POLICY] update released imagesjhh8-6/+8
- update to the latest released images versions. - added fetchTimeout configuration to XACML-PDP and PAP for POLICY-2702. Issue-ID: POLICY-2695 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I492212e3920f93d42870ca20b7d0ca38c7841831
2020-05-27Refactor Policy PAP for common service templateBruno Sakoto3-45/+14
Issue-ID: POLICY-2514 Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca> Change-Id: I3021081f3e9d1a3cec079fdaf4595689d25571fb
2020-05-22[POLICY] frankfurt RC2 imagesjhh10-11/+11
Issue-ID: POLICY-2514 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: Id2597d80cfd5c43992e8d0435a2aca4312a3c796 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-05-20Make Policy PAP exposition configurableBruno Sakoto2-0/+11
Policy PAP endpoint exposition is made configurable using helm override values when deploying. Available options for service type are: * Cluster IP (default value) * Node Port (by overriding policy.pap.service.type value with NodePort) Issue-ID: POLICY-2514 Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca> Change-Id: Ifc3ac09aeb9e8836c0ef15a8b5b60bd8e31dca03
2020-05-13Merge "[POLICY] Remove hardcoded credentials from policy-distribution"Krzysztof Opasiak4-9/+101
2020-05-11[POLICY] Remove hardcoded credentials from policy-apex-pdpDominik Mizyn5-4/+64
This patch remove hardcoded healthcheck credentials and trustStorePassword from policy-apex-pdp. Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: Ie8800830919479b87d7a71dfafe934bb95839ede
2020-05-08[POLICY] put base64 password in xacml.propertiesjhh3-8/+7
In addition, remove heap mem sizing for drools too as it is properly sized according to container allocated resources. Issue-ID: POLICY-2547 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I4e1e5eaef1cad924ac4c86e5248230aef1fad7d8 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-05-08[POLICY] Remove hardcoded credentials from policy-distributionDominik Mizyn4-9/+101
This patch remove hardcoded healthcheck credentials from policy-distribution. Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I7c71fcceab030bd7858e8de9fe3f58451ac505d6 [Fix init container] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-05-04Merge "Change ingress hosnames for exposed services"Sylvain Desbureaux1-0/+6
2020-04-30[POLICY] update images and fixesjhh11-516/+27
Issue-ID: POLICY-2510 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I1ac9698233d1b570ef3c5759742038c96015ba32 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-04-29Change ingress hosnames for exposed servicesLucjan Bryndza1-0/+6
Change ingress host to the required hostnames Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-2391 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-04-24[POLICY] fix: Process also content of pd-pdpKrzysztof Opasiak1-17/+16
By mistake we've been processing only pe volume but recently we removed hardcoded passwords also from other files in pe-pdp. To fix this let's improve our init container and process files in both volumes. Issue-ID: POLICY-2516 Change-Id: Id97a64708803b72ab88362ccc5b88970661146e6 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-04-23Merge "[POLICY] Remove hardcoded credentials from policy-xacml-pdp"Krzysztof Opasiak3-5/+51
2020-04-22[POLICY] Remove hardcoded credentials from policy-apiDominik Mizyn3-5/+18
This patch remove hardcoded healthcheck credentials from policy-api. Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: Ifc12d78fc1f7f00dd1466c32553453f0273661a3
2020-04-22[POLICY] Remove hardcoded credentials from policy-xacml-pdpDominik Mizyn3-5/+51
This patch remove hardcoded healthcheck credentials from policy-xacml-pdp Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I49db16a852412bad79f092232bcd2ba97eac7170
2020-04-20Merge "[POLICY] Use common secret template in pdp"Krzysztof Opasiak3-4/+38
2020-04-20Merge "[Policy] Remove hardcoded credentials from pap"Krzysztof Opasiak3-6/+46
2020-04-20[POLICY] Use common secret template in pdpDominik Mizyn3-4/+38
Use common secret template in pdp module instead of hardcoding them For now creds are hardcoded but this will be remove in further commits. Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I091e5390c1ef7d98f0c4fb1cb5f6ca2d099e387f
2020-04-17[POLICY] legacy PDP healtchcheck removedjhh1-1/+1
It may be causing some flakiness with some healthchecks passing in OOM builds. Not sure the root cause, as the problem happens occassionally, may be a race condition or something else (legacy PDP and dependent components may take some time to initialize). Issue-ID: POLICY-2471 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I8ab7c8c563c1db13b2a99aa8cb6f3c022c625642
2020-04-17[Policy] Remove hardcoded credentials from papDominik Mizyn3-6/+46
This patch remove hardcoded healthcheck credentials from pap. Issue-ID: OOM-2342 Change-Id: I8dc2a1b0a84a18215403aabc8ae9b2a25387c3d7 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>