aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/policy
AgeCommit message (Collapse)AuthorFilesLines
2018-05-06oom tweaks in pap configuration for pdp-x poolingJorge Hernandez3-4/+4
paplp_1 process is unused and causes intermittent bad behavior when issuing healthchecks. Since it provides no apparent benefit integrity monitor usage has been disabled. preloading policies apis are executed when the PAP come up. The PDP-Xs take longer to come up, therefore the push-policies script causes bad interactions. This operation has to be triggered after all the PDP-Xs are up and properly running, which is difficult to predict. Therefore, it is moved to a manual step execution. In the future, we could think of'how perhaps execute autonomously by some other means. It does not currently work as is, so it is disabled, at least temporarily, there were a couple problems with pap.conf, first the pdps hostname need to be explicitly provided, as PAP keeps a white list of pdp hosts that can connect to it and be served policies. Another limitation is the format, note the change to ";" to separate pdps, instead of ",". Further the automatic configuration sequence is only made for 1 PDP-X, does not work well when multiple PDP-Xs are provided, so for the first PDP-X, the credentials need to be explicitly added, otherwise, it denies access to PDP-Xs. Change-Id: I5d4a9a39822c036db26e97edb594ecaaa27f80d8 Issue-ID: POLICY-768 Signed-off-by: Jorge Hernandez <jh1730@att.com>
2018-04-26Merge "Policy Nexus component needs persistent volume"Mike Elliott4-0/+114
2018-04-26Policy Nexus component needs persistent volumeMahendra Raghuwanshi4-0/+114
Issue-ID: OOM-849 Change-Id: I86692b520f9661fac06cb0e9ea1d0373eb04df27 Signed-off-by: Mahendra Raghuwanshi <mahendra.raghuwanshi@amdocs.com>
2018-04-26Policy Config CorrectionMahendra Raghuwanshi8-11/+10
Issue-ID: OOM-1011 Change-Id: I85444ebb9df9368d96f55bb968291351c9d286d5 Signed-off-by: Mahendra Raghuwanshi <mahendra.raghuwanshi@amdocs.com>
2018-04-24Make all services independent of helm Release.NameBorislavG20-60/+66
Issue-ID: OOM-906 Change-Id: Ic65127d3981cb0a696c784392cab59fbf06b1e66 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-04-20Revert policy keystoreMike Elliott1-0/+0
See comment posted April 20th at 5:46pm under patch https://gerrit.onap.org/r/#/c/43601/ for details. Change-Id: I5b669b02b9b5a3a95aa7040847153564807d05df Issue-ID: POLICY-747 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com>
2018-04-18Support truststore with AAF root certsJorge Hernandez1-0/+0
Change-Id: Ib7f2e9ee556dd040b097e6f47453de6e231a56c8 Issue-ID: POLICY-747 Signed-off-by: Jorge Hernandez <jh1730@att.com>
2018-04-17Merge "changes to ensure pap/pdps comes healthy"Borislav Glozman2-1/+4
2018-04-17incorrect config map mountingmayankg27033-17/+34
Change-Id: I54dbc1ceaf46ddc54a9aeb8504f9dee30f042872 Issue-ID: OOM-918 Signed-off-by: mayankg2703 <mayank.gupta@amdocs.com>
2018-04-16changes to ensure pap/pdps comes healthyJorge Hernandez2-1/+4
Change-Id: I4ac01cabaaed0796659c22a545cc8be19138c6d1 Issue-ID: OOM-904 Signed-off-by: Jorge Hernandez <jh1730@att.com>
2018-04-16Merge "Update readiness-check version"Mike Elliott6-6/+6
2018-04-16Update readiness-check versionBorislavG6-6/+6
Readiness check version is not sinchronized in many pods This causing deployment failures. Issue-ID: OOM-936 Change-Id: Ieef91df17836adcdf24db536440d0a1624a50591 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-04-13Update Policy images to STAGINGPamela Dragosh2-2/+2
We have released artifacts and want to test with our STAGING docker image. Change-Id: I7885d433dc6c4c9499e90e4a1e7af6cb9e84889d Issue-ID: POLICY-708 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2018-04-12Merge "update nexus image references"Borislav Glozman2-16/+1
2018-04-11update drools container configurationJorge Hernandez4-5/+133
Change-Id: Iac0075c991c4e0a8e03c3f3b4bf440b704a089a8 Issue-ID: OOM-904 Signed-off-by: Jorge Hernandez <jh1730@att.com>
2018-04-10update nexus image referencesJorge Hernandez2-16/+1
Change-Id: Ieb9ce34ed15077e45680fe9ceef5957a05732936 Issue-ID: OOM-904 Signed-off-by: Jorge Hernandez <jh1730@att.com>
2018-03-29Correction in policy due to incorrect mergemayankg270332-75/+70
removing cli package change from policy patch Change-Id: I673cfb90f76df877bd9e69f9a185ae7c77ee4b9b Issue-ID: OOM-844 Signed-off-by: mayankg2703 <mayank.gupta@amdocs.com> Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2018-03-28Add Standardized Configuration to POLICYmayankg270397-1735/+3442
Change-Id: Iabdb2bba14b5095c08ff2920aec97a213e0acb30 Issue-ID: OOM-745 Signed-off-by: mayankg2703 <mayank.gupta@amdocs.com> Signed-off-by: Mike Elliott <mike.elliott@amdocs.com> Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2018-03-27Add standardized helm chart for logBorislavG2-1/+5
Change-Id: Ic9f0eb567716224893955d9379e9ed9308b9ea79 Issue-ID: OOM-740 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-03-22License addition in all yamlsvaibhav_16dec12-0/+168
Issue-ID: OOM-821 Change-Id: I627ac962afe8cd6bf2859a30a0e88f6c9ac89d34 Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>
2018-03-01Run all components in one namespaceBorislavG22-107/+133
Change-Id: I5fcd4d577c1fda4de27842807c7cf7a5d372756e Issue-ID: OOM-722 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2018-02-22policy - readiness image updatekerenj1-1/+1
changes can be seen in reviews: 31743 and 31721 Issue-ID: OOM-514 Change-Id: I001362b65b03137d996e93b1ace64438bcbf2d9c Signed-off-by: kerenj <keren.joseph@amdocs.com>
2018-02-15Replica Scaling of Policy Containervaibhav_16dec7-6/+14
Issue-ID: OOM-689 Change-Id: Iff389af637dec0b85e568dd9b4cfa641f11eb3fc Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>
2018-01-25Policy config segreggationvaibhav_16dec33-25/+1796
Issue-ID: OOM-553 Change-Id: I8dab41aea5b0fad1395f6deb47b2faa6f7dcbdbc Signed-off-by: vaibhav_16dec <vaibhav.chopra@amdocs.com>
2018-01-18Merge "Add update-vfw-op-policy.sh for OOM"Alexis de Talhouët1-0/+93
2018-01-18Fix policyAlexis de Talhouët6-18/+15
- remove useless init-check in deployment to match requirement from policy team: https://gerrit.onap.org/r/gitweb?p=policy/docker.git;a=blob;f=docker-compose.yml;h=96fd5073e9d51908dabd04643aa96b42820ac681;hb=HEAD - add missing drools port (9696) - update configuration files to reflect latest Change-Id: I3399c21a3357b649fdc078a0bd4ba4af1f751a9b Issue-ID: OOM-490 Signed-off-by: Alexis de Talhouët <adetalhouet89@gmail.com>
2018-01-18Add update-vfw-op-policy.sh for OOMAlexis de Talhouët1-0/+93
Include latest update: https://gerrit.onap.org/r/#/c/25887/ See POLICY-486 Change-Id: I74e6a02e8ef61fabd6739e7288b3e0dd915c214b Issue-ID: OOM-490 Signed-off-by: Alexis de Talhouët <adetalhouet89@gmail.com> (cherry picked from commit dc57f9c7ffb19d4d7c9bbfbf052209d659f593b4)
2018-01-18Disable persisting policy mariadbAlexis de Talhouët2-37/+0
See https://lists.onap.org/pipermail/onap-discuss/2018-January/007199.html Change-Id: Ib75fbb40e99b6c97ccee9285750c9463f9c6a4f8 Issue-ID: OOM-548 Signed-off-by: Alexis de Talhouët <adetalhouet89@gmail.com> (cherry picked from commit ccb051441f45e5cf7ee4fa8e59726e794741a2c9)
2017-12-15Merge "Migrate to R1 released docker images"Mandeep Khinda1-4/+4
2017-12-08Migrate to R1 released docker imagesAlexis de Talhouët1-4/+4
Change-Id: Iac46cbae69404d17e1f4e59f85ed18fc7ecd01dd Issue-ID: OOM-432 Signed-off-by: Alexis de Talhouët <adetalhouet89@gmail.com> (cherry picked from commit f033f949c49cc195be1f3a6bdf79759f7e0983ca)
2017-11-22Update annotations to spec for policyvasundhra5-178/+113
Issue-ID: OOM-406 Change-Id: I23e47dd28502cefc7b64fad7704aacdee51f1fc7 Signed-off-by: vasundhra <vasundhra.choudhary@amdocs.com>
2017-10-29Add option to disable specific deploymentsyuryn8-0/+26
Add option to disable any deployment by using conditions in helm templates. Each deployment will get helm parameter - boolean flag allowing to disable it. The flags can be listed in the custom values.yaml file that can be passed to the createAll script with '-v' command line option. Change-Id: I32b795de46c72915c2201c94c23f4e061971bb56 Issue-ID: OOM-380 Signed-off-by: yuryn <Yury.Novitsky@Amdocs.com>
2017-09-27added filebeat to all componentsyuryn4-0/+90
Deployment of: filebeat containar for each relevant component + chown of log dir to root - prevents filebeat complaining about filebeat file + ecomp web app renamed onap - fixed dep-pap.yaml + fixed multiple volumeMounts in vid-server Change-Id: I74f8f2abd5feeba1d37b044d2a023674fd41c994 Issue-ID:OOM-110 Signed-off-by: yuryn <Yury.Novitsky@Amdocs.com>
2017-09-26Revert "added filebeat to all components"Alexis de Talhouët4-90/+0
Pods aren't starting properly. Let's not take any risk, so reverting. 3m 18s 4 kubelet, kubernetes-5 spec.containers{vid-server} Normal Killing Killing container with id docker://vid-server:FailedPostStartHook This reverts commit 4ca69ea2b6a2aaaf0974953a3c3dec7694fdfcb0. Deployment of: filebeat containar for each relevant component Issue-ID:OOM-110 Change-Id: I7953ac3b0e2a4ecbdd1a7d2a48cb9a1964bf08ab Signed-off-by: Alexis de Talhouët <adetalhouet89@gmail.com>
2017-09-24added filebeat to all componentsItay Hassid4-0/+90
Deployment of: filebeat containar for each relevant component Issue-ID:OOM-110 Change-Id: I3605a975ee9dbe3e34b8fa6b17fef52e9d29b975 Signed-off-by: Itay Hassid <itay.hassid@amdocs.com>
2017-09-15Fix annotation issue for policyHuabingZhao1-2/+2
The json format is not correct due to lacking of a comma. Issue-Id: OOM-222 Change-Id: I5af614d02e8cddd96efa80d09d72dcf264756ae1 Signed-off-by: HuabingZhao <zhao.huabing@zte.com.cn>
2017-09-14Merge "Containers time zone sync"Mandeep Khinda6-0/+38
2017-09-14Containers time zone syncyuryn6-0/+38
Make sure time zones on the containers are in sync with the hosting machines Change-Id: Ie22608bda63cbcdf564f73adcdd3e829afad05ca Issue-ID: OOM-299 Signed-off-by: yuryn <Yury.Novitsky@Amdocs.com>
2017-09-14move policy config to onap 1.1Mandeep Khinda4-31/+6
was the cause of the robot failure for policy in oom Issue-ID: OOM-297 Change-Id: Iabb24cc7a007ef852cde3ebe2cbb9226bb4153b3 Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com> Signed-off-by: Ahmed Alabulrahman <ahmed.alabdulrahman@amdocs.com>
2017-09-13Revert "moving certs and keys to k8s secrets"Keren Joseph1-5/+0
This reverts commit 59ffd500ea34c201fbb3edc39e64655fa8381be0. Tested locally and does not work. DmaaP fails to come up causing many other pods to crash loop. failed to start container "dmaap": Error response from daemon: {"message":"invalid header field value "oci runtime error: container_linux.go:247:starting container process caused "process_linux.go:359: container init caused "rootfs_linux.go:53: mounting "/var/lib/kubelet/pods/9ae222e0-98a9-11e7-badd-02cfc855c3b9 /volumes/kubernetes.io~secret/mykey" to rootfs "/var/lib/docker/aufs/mnt /b92c56185f3371cb1f091679780d40797dd2c6124cd00cb8fe68da2b247363a8" at "/var/lib/docker/aufs/mnt/.../appl/dmaapMR1/etc/keyfile" caused "not a directory"""n""} Issue-ID: OOM-293 Change-Id: I348ffa14718bd6e89e99f2859cf6612c10370559 Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>
2017-09-13Fix persistent volumes for multiple onap instancesBorislavG1-3/+3
Deploy multiple namespaces fails due to existing persistence volumes. "persistent-volume "appc-db" already exists" Need to change all persistent volume names to include namespace. Change-Id: I40a3048bef14f813b133ea75e2f664f669183e82 Issue-ID: OOM-294 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2017-09-12moving certs and keys to k8s secretsKeren Joseph1-0/+5
changed location of used certs and keys files, updated deploy yamls and create/delete all Issue-ID: OOM-293 Change-Id: I53766b7028d6b725bf381875105b196246ff2ee1 Signed-off-by: Keren Joseph <keren.joseph@amdocs.com>
2017-09-08Merge "Policy 1.1 in Kubernetes"Mandeep Khinda8-93/+22
2017-09-08Policy 1.1 in KubernetesEric Au8-93/+22
- up verion containers to use 1.1 - pap and brmsgw report it is waiting for pap 9091 port to be open but pdp and pypdp reports pap 9091 port is open - removed push-policies.sh from 1.1 due to comment in CR - removed pypdp container from 1.1 due to comment in CR - removed pypdp.conf from 1.1 due to comment in CR - removed ip_addr.txt from 1.1 due to comment in CR Change-Id: Ibb685ec603a59dba56aa9673044ae1923d993191 Issue-Id: OOM-249 Signed-off-by: Eric Au <kachun.au@amdocs.com>
2017-09-06Persistent volumes for Database storageBorislavG2-0/+37
Addition of persistent volumes for all DBs including persistence of policy mariadb (with initial configuration data) Change-Id: I029e724c3f8bba7fe3599b0955a4a3d213c08163 Issue-ID: OOM-268 Signed-off-by: BorislavG <Borislav.Glozman@amdocs.com>
2017-09-05Merge "NodePort Helm Parametrization"Yury Novitsky2-6/+7
2017-09-01add service port to annotationHuabingZhao1-0/+2
Issue-Id: OOM-222 Change-Id: Iaebaf08d595adfeae405799572b10d59adad61a5 Signed-off-by: HuabingZhao <zhao.huabing@zte.com.cn>
2017-08-31NodePort Helm Parametrizationkerenj2-6/+7
parameterization of node ports, and create/delete update to fix multi ONAP instances creation(in diff NS). Issue-ID: OOM-52 Change-Id: Iaa3f5bc43f70b95cdc349389e25ef8b804a7a329 Signed-off-by: kerenj <keren.joseph@amdocs.com>
2017-08-30add service endpoint annotationHuabingZhao1-0/+18
Issue-Id: OOM-222 Change-Id: I9735c7bad45a8dad474a2ef66143e606868170d1 Signed-off-by: HuabingZhao <zhao.huabing@zte.com.cn>
2017-08-25refactor helm files to use namespace prefixMandeep Khinda9-32/+32
-removed the full namespace from each template. better lets us reuse variables. -made secret end up in a configurable namespace -fixed some bugs where secrets were missing -updated createAll and delete to make use of namespace prefix removing the need for seds to replace the word onap. *** all containers at this point come up in my env. except for aai model loader which is failing cause its still at 1.0 and its trying to talk to a 1.1 sdc and it doesnt auth properly. *** Issue-ID:OOM-215 Change-Id: I15815a01469786a391e272fde4bdaa53ff48091c Signed-off-by: Mandeep Khinda <mandeep.khinda@amdocs.com>