Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
Align Cert Service Api to RFC4210.
Fix Cert Service Client CA_NAME validation.
Fix Cert Service External Provider logging.
Issue-ID: OOM-2656
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I644946b139bd4879e44cdf705eadcc4c2c81a0e2
|
|
This commit introduces a template for requesting a cert-manager certificate.
See: https://cert-manager.io.
It consist of the following parts:
- a template for creating certificate in commons component
- a definition of a certifcate object in sdnc component
Issue-ID: OOM-2568
Signed-off-by: Jan Malkiewicz <jan.malkiewicz@nokia.com>
Change-Id: If58b8f12eff075d058db5a0fee3b2db5c2c93a17
|
|
Mariadb DB Galera containers version is outdated and unmaintained. We
need them to move to a new image provider.
As new image provider is not compatible with our old templates, we
also update the templates (by reworking bitnami mariadb-galera chart).
An update of global mariadb image is also done in order to match mariadb
galera version.
Issue-ID: OOM-1720
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib9976227759e90022183d4f37fc655143be4d6ac
|
|
Update cert service and cert service client to allow IPAddresses,
E-mails and URIs as SANs.
Update ejbca configuration with IPAddresses, E-mail and URIs.
Fix dcae bp inputs to use comma as SANs delimiter (from to allow
use of IPv6)
Issue-ID: OOM-2559
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I71bea7f63540eb5d345bce6867fa25e098353d6d
|
|
This commit makes SDNC chart to use the new generator for repositories and
images.
Issue-ID: OOM-2364
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Iec8379934829947be1cb466b007c949a8448e742
|
|
|
|
This commit makes Elasticsearcg template to use the new generator for
repositories and images.
Issue-ID: OOM-2364
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I20c18632234c864ef2a29e3cfb259c9838a8c4d6
|
|
Upgrade to version 2.0.4 of SDNC docker containers, which contain
fixes for the following High severity issues:
CCSDK-2979: devicemanager onf14 influences ietf-alarms.yang using devicemanagers
SDNC-1413: CCVPN - Transport Slicing: SDNC development - PATCH operation instead of POST
SDNC-1414: CCVPN - Transport Slicing: SDNC development - Need to unset a context variable in a for loop node in DG
Issue-ID: SDNC-1409
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Icf39ad2e8280ddd4cea53a54905b27f61bb05aab
|
|
|
|
|
|
fix deployment.yaml
Issue-ID: OOM-2600
Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com>
Change-Id: Id8f8f6c341bed30ce26cc061b47aeb6e312e7bfa
|
|
remove startup scripts
Issue-ID: OOM-2610
Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com>
Change-Id: Ia09de604cc502ecbbd7575cd5dd2374f253820ed
|
|
Update CertServiceClient to new version (2.1.0)
Issue-ID: OOM-2580
Signed-off-by: Maciej Malewski <maciej.malewski@nokia.com>
Change-Id: I8e7f42a5edb1832932eb8b6b66950612ec33a21f
|
|
Install version 2.0.2 of sdnc docker images, which contains a
fix to issue where AAI interface was failing due to failed
SSL certificate check.
Issue-ID: SDNC-1371
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Id14b823989cdd987d745d205458ec57712c2a3df
|
|
|
|
Bump image versions to use Guilin M4 version of SDNC images and of
CCSDK dgbuilder. Note - SDNR remains disabled in this commit pending
fix to its endpoint. Also, note that CDS version bump is not included -
that will be submitted as a separate review.
Issue-ID: SDNC-1355
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I8d660a8e303a18d4674f832b9239fa50c5abf3f2
|
|
Changes for 111973
Issue-ID: SDNC-1136
Signed-off-by: esobmar <mariusz.sobucki@est.tech>
Change-Id: If185ee3658b8f51a969bb3505f8bfb163cfea2a3
Signed-off-by: egernug <gerard.nugent@est.tech>
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
[Access EJBCA secret from cert service]
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
|
|
This change makes the following fixes to dgbuilder:
* Replace hard-coded certificate with certificate generated by
certInitializer
* Configure dgbuilder to use http instead of https if AAF is
disabled (i.e. global aafEnabled property = false)
* Add resource limits
Issue-ID: SDNC-1356
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I8ca97c6a44f62a0abe5b5a6f8564ebcd2e4addb1
|
|
fix issue in startOdl.oom.sh
Issue-ID: OOM-2561
Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com>
Change-Id: I1760155bf250dd7e3dd1c816b65df9b9c245de24
|
|
As diagnosed today if sdnc is enabled a different entrypoint for SDNC
is used. Unfortunately this makes SDNC reach AAI using a bad URL which
causes our e2e tests to fail.
As a temporary solution let's disable sdnrdb and hope that the team
will be able to debug this further and reenable it.
Issue-ID: SO-3216
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ib2cda39aefea84a4c930d996e53429f3f64a86ef
|
|
|
|
Readiness container v3.x and up are now present in ONAP main repository.
They're also not using root user anymore and then script path has
changed.
Finally, "job_complete" script has been integrated in main "ready"
script.
As those changes are significant, we must upgrade all the components at
once.
Depends-On: I5afa83892043f4844afe12e61724a8d368a9f2e0
Issue-ID: OOM-2545
Signed-off-by: Grzegorz Lis <grzegorz.lis@nokia.com>
Change-Id: I0b4eb5dd86390273532d67d0a9696e1cfcadf110
|
|
get image values from global busyboxRepository/busyboxImage
Issue-ID: OOM-2543
Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com>
Change-Id: I5f0ef76fb8072b45bd9ad10d8580484656049b76
Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com>
|
|
use disaggregated elasticserach DB from common
Issue-ID: SDNC-1165
Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com>
Change-Id: I0c6ac6549f6c144f0ed5a64ae76a1fa352f740d2
|
|
|
|
certInitializer
ONAP deployments may require the use of custom certificates. Instead of
manually adding certificates to the truststore file, users can now add
their .pem certificates under certInitializer/resources and have them
imported automatically by an init container. The updated truststore can
then be mounted to a component by providing a truststoreMountpath.
Issue-ID: OOM-2509
Signed-off-by: Jozsef Csongvai <jozsef.csongvai@bell.ca>
Change-Id: I896c729143346738e91fa57f895ba48043b253c1
|
|
The sdnc-portal component is currently disabled due to known security
vulnerabilities. This component is no longer supported - the developer
left the project - and its functionality is not really needed. So, we
are removing this component in Guilin.
Issue-ID: SDNC-1236
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I45c7cad2102011fb25ca9f6707792dfd5c97624f
|
|
Updated CDS versions to 0.7.5 and SDNC versions to 1.8.4 for Frankfurt mtce
release. Note: version 0.7.5 contains fix to remove hard-coded certs
from py-executor docker container.
Issue-ID: CCSDK-2519
Issue-ID: CCSDK-2399
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I8a6e02d94e9ab8108950543b6431c46fde2016dc
|
|
Update versions for SDNC and CCSDK dockers to reflect Frankfurt RC2
versions.
Issue-ID: SDNC-1171
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Iaf34379550d148a164341dac6c44fa20926b8ccb
|
|
Instead of copy-pasting code around aaf_agent usage let's use a common
template that automates this.
Issue-ID: AAF-1134
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I9b3c7aab73186c0bf1dfaa5fe21cf2f001ca8619
|
|
Instead of copy-pasting code around aaf_agent usage let's use a common
template that automates this.
Issue-ID: AAF-1134
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I66886290a1a13ca1c1d924b4d1128adc293b301c
|
|
|
|
Update helm charts to use RC1 version of CCSDK dockers
Issue-ID: CCSDK-2358
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Id247bdf3442084d724b84ed752956d08868c7ddf
|
|
Issue-ID: AAF-1134
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I62eb9f20c66e4b26bc4625b121e52cf70d2b4063
|
|
|
|
Add Ingress for dgbuilder in common and update SDNC and APPC in order to
use proper configuration.
Issue-ID: OOM-2173
Issue-ID: OOM-2188
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ib810ce3f4b3ff2ff3297c39be352d246aef6d7f1
|
|
Change ingress host to the required hostnames
Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
Issue-ID: OOM-2391
Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
|
|
Add elasticdb as common chart to oom
Issue-ID: SDNC-1061
Signed-off-by: Alexander Dehn <alexander.dehn@highstreet-technologies.com>
Change-Id: Id8c48113b8d4193d7f13991296f0307a29724c01
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
|
|
Update to use version 1.8.1 of SDNC images, which contain
fix for SDNC-1145 (pods still running as root)
Issue-ID: SDNC-1145
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ie596e45958d926e4742b688eec48b887326ddb60
|
|
Currently /opt/onap/ccsdk/data/properties directory with its
configfiles is saved in sdnc image and not provided via helm.
File "aaiclient.properties" stored there appears to be used for
determining AAI URI by directed graphs. In this patch,
aaiclient.properties provided by configmap is added to this directory,
with still being passed to previous one. This helps with following
error you could see in karaf logs:
2020-04-06T11:18:12,714 | WARN | qtp1411815619-117 | AAIService | 218 - org.onap.ccsdk.sli.adaptors.aai-service-provider - 0.7.1 | - 33 (update) | java.net.UnknownHostException: aai.api.simpledemo.onap.org
Issue-ID: SDNC-1130
Signed-off-by: Konrad Bańka <k.banka@samsung.com>
Change-Id: I8ed73f49092912419794abac1f8ccd6325672eb5
|
|
Update image versions for SDNC and CCSDK to use Frankfurt
M4 versions
Updated CDS versions to use repaired version 0.7.1
Reverted naming service to El Alto version (0.6.3) as
workaround while startup issue is investigated.
Issue-ID: SDNC-1110
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ie76466dd65a3a3dfb0df2aaa13f14c298bbc7c11
|
|
Issue-ID: OOM-2051
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I6cf72e3d6dcd8eab5f913b86febc7a21d02c1ecb
|
|
|
|
This commit corrects previous mistake assuming that
parameter's nested content derived via "<<" operator
can be overwritten with single value, while in practice,
whole key would be change.
For practical explanation, following entry:
a: &a
b: 1
c:
d: 2
e: 3
x:
<<: *a
c:
d: 10
Would yield following content:
a:
b: 1
c:
d: 2
e: 3
x:
b: 1
c:
d: 10
And as we can see, "e" key is missing there.
This commit correct this.
Issue-ID: SDNC-1122
Signed-off-by: Konrad Bańka <k.banka@samsung.com>
Change-Id: I15dfe0219ee1d6bcde7d29821ed2650bc8698244
|
|
Update SDNC config to eliminate unnecessary node ports.
Issue-ID: SDNC-1120
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ia5666fd02baa7383cc484a2e9a770907d81af128
|
|
Some passwords are still hardcoded but with this commit all components
should be using passwords provided via secrets not directly as strings.
A follow-up patch will remove hardcoded passwords where feasible.
Issue-ID: OOM-2309
Change-Id: I047974506430cbb277200d0103bcc57a6fd8a83b
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
|
|
Add support for AAF init container for config and cert generation
Issue-ID: SDNC-755
Signed-off-by: Agarwal, Ruchira (ra1926) <ra1926@att.com>
Change-Id: I06ee7921b6dbb1b4b9ca64cf276a374256af3a45
Signed-off-by: Agarwal, Ruchira (ra1926) <ra1926@att.com>
|
|
* changes:
Add ingress controler support to OOF
Add ingress controler support to POMBA
Add ingress controler support to SDC
Add ingress controler support to DMAAP
Add ingress controler support to SDNC
Add ingress controler support to CDS
|