summaryrefslogtreecommitdiffstats
path: root/kubernetes/sdnc
AgeCommit message (Collapse)AuthorFilesLines
2022-01-06[SDNC] Log4shell fixDan Timoney5-5/+5
This update remediates the log4shell security vulnerability in SDNC by installing updated versions of the SDNc images which have been patched. Issue-ID: CCSDK-3556 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I63377cd21254b70a83a7302841cb5ac12f19d422
2021-12-14[SDNC] Mediate log4shell vulnerabilityDan Timoney3-0/+6
Add Java system property setting to remediate day zero vulnerability, pending more permanent fix (upgrade CCSDK/SDNC to log4j v2.15.0, and upgrade to a version of OpenDaylight that has upgraded as well). Issue-ID: CCSDK-3556 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Id2a9e2743490daa23f3fa51f10a43beb91290e0b
2021-12-08[COMMON] Fix & add to bashisms CI failover scriptsguillaume.lambert1-3/+3
Issue-ID: OOM-2643 Signed-off-by: guillaume.lambert <guillaume.lambert@orange.com> Change-Id: Icf139e50d44aed0315d0e4cb21c59ad05a5a3bdb
2021-12-07[GLOBAL] Migrate to helm v3efiacor14-218/+135
Move all Chart.yaml to use apiVersion: 2 Move dependencies from requirements.yaml to Chart.yaml Changes to all makeFiles Changes to helm deploy plugin Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I03c5290eee9e40f76eacbf171e774204cf5fb1c0 Issue-ID: OOM-2845
2021-11-29Merge "[SDNC] Add Ves collector config"Krzysztof Opasiak2-2/+39
2021-11-16[SDNC] Add Ves collector configsebdet2-2/+39
Add the Ves collector configuration to the sdnc chart so that it can be disabled/enabled Issue-ID: OOM-2863 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: I7039c4ab53b80a96f05bcf3fa8ef30224f15a96b
2021-11-15Merge "[SDNC] Fix dependencies for SDNRONLY mode"Sylvain Desbureaux1-2/+4
2021-11-09Merge "[SDNC] Use log template"Sylvain Desbureaux4-29/+9
2021-11-09[SDNC] Fix dependencies for SDNRONLY modedemskeq81-2/+4
readiness check for sdnrdb-init-job Issue-ID: OOM-2876 Signed-off-by: demskeq8 <alexander.dehn@highstreet-technologies.com> Change-Id: Ie101a27736e8a5fc7c29017414ae49a8d11b3f7f
2021-11-09Merge "[SDNC] Sdnc pod restart stucks in readiness check for sdnrdb-init-job"Sylvain Desbureaux1-2/+2
2021-11-08[SDNC] Use log templateMaciej Wereski4-29/+9
Ability to turn off filebeat is needed as it is being deprecated. To achieve that existing log helper template is used. Issue-ID: OOM-1 Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com> Change-Id: I92749a252a7983f12c3136e996eb7f2e29f1e69d
2021-11-08[SDNC] Sdnc pod restart stucks in readiness check for sdnrdb-init-jobdemskeq81-2/+2
change readiness check from container to job Issue-ID: OOM-2875 Signed-off-by: demskeq8 <alexander.dehn@highstreet-technologies.com> Change-Id: I613f58988dd007f03b949b20570564e28aa5db52
2021-11-03[SDNC] Version bump for final Istanbul imageDan Timoney5-5/+5
Bump SDNC images to version 2.2.2, final Istanbul release version Issue-ID: SDNC-1610 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I340cc2a1c32534d561c121fc3cd33ab82c800f02
2021-10-31[SDNC] Bump version for Istanbul RCDan Timoney5-5/+5
Bump version of SDNC and CCSDK images for Istanbul RC milestone. Issue-ID: SDNC-1615 Issue-ID: CCSDK-3483 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Id3a3627765e5623aa6cd8bffbfad1679ae6afef6
2021-10-15[COMMON] Bump ONAP versionSylvain Desbureaux12-37/+49
Use version 9.0.0 for Istanbul Also update the doc. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I03e11799bf487226784c98b04116f005c89d1e70
2021-10-10[SDNC] Bump versions for IstanbulDan Timoney6-6/+6
Bump image versions for SDNC for Istanbul release Issue-ID: SDNC-1609 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Iecfb133ce8563ccfabf1a38af9d8c26d99d398f4
2021-09-26[COMMON] Add and run pre-commit linters via toxguillaume.lambert3-7/+7
- create a .pre-commit-config.yaml configuration file with * gitlint * trailing blanks linter * tabs removal linter - exclude .git folder from it - exclude Makefiles since tabs are mandatory by default in them - create a tox pre-commit profile to run it from tox note gitlint is not runnable at this pre-commit stage - create pre-commit-install and pre-commit-uninstall tox profiles to (un)install hooks locally and (un)perform tests at each "git commit" call (i.e. without calling manually the pre-commit tox profile) - precise pre-commit stages/types in the pre-commit configuration file so that hooks are installed correctly. This avoids messages about skipped tests when they are run at a wrong stage. Issue-ID: OOM-2643 Signed-off-by: guillaume.lambert <guillaume.lambert@orange.com> Change-Id: Ie95bb4f6f90be80b05a1398973caffeff7936881
2021-09-22[COMMON] Enforce checkbashisms tox profileGuillaume Lambert2-4/+4
- add checkbahims to tox.ini default profiles - remove -f options to unforce bashisms detection in explicit bash scripts and to differentiate treatments between bash and sh - migrate #!/bin/bash shebangs to #!/bin/sh for scripts without bashisms The following scripts have not been migrated since they still use bashisms difficult to migrate (mostly arrays - more details below) ./kubernetes/common/mariadb-init/resources/config/db_init.sh ./kubernetes/portal/components/portal-mariadb/resources/config/ \ mariadb/docker-entrypoint.sh ./kubernetes/helm/plugins/deploy/deploy.sh ./kubernetes/helm/plugins/undeploy/undeploy.sh ./kubernetes/sdnc/components/sdnc-prom/resources/bin/ensureSdncActive.sh $ find . -not -path '*/\.*' -name *.sh -exec checkbashisms -f {} + 2>&1\ | grep line | cut -d' ' -f 7- | sort | uniq -c | sort -k1,1nr 18 (bash arrays, ${name[0|*|@]}): 2 (declare): 1 ($FUNCNAME): 1 (shopt): 1 (trap with ERR|DEBUG|RETURN): https://mywiki.wooledge.org/Bashism#Arrays https://mywiki.wooledge.org/Bashism#Special_Variables https://mywiki.wooledge.org/Bashism#Builtins https://www.oilshell.org/release/0.5.alpha2/test/spec.wwz/builtin-trap.html Issue-ID: OOM-2643 Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com> Change-Id: Id06ad1d45004321a293bdd26038d8da5f7b6b4ac
2021-09-20[COMMON] Replace tabs by 4 ws in shell scriptsguillaume.lambert2-6/+4
with the following command $ find . -not -path '*/\.*' -name *.sh -exec sed -i 's/\t/ /g' {} + then realign manually what deserves it and in particular, unindent some EOF scripting tags so they do not trigger errors. Issue-ID: OOM-2643 Signed-off-by: guillaume.lambert <guillaume.lambert@orange.com> Change-Id: Ibfa463ec8083d5a39de18a54d9c1d8746710fe03
2021-08-28[SDNC] Fix MDSAL data not retained across restartsSatoshi Fujii1-1/+1
From ODL Aluminium, MDSAL journal dir is changed to /opt/opendaylight/segmented-journal . journalPath should be updated to make it retained across pod restarts. Issue-ID: SDNC-1593 Signed-off-by: Satoshi Fujii <fujii-satoshi@jp.fujitsu.com> Change-Id: I67cc2f9b428316922ccca5ab072bb127891ef018
2021-08-17[SDNC] Update chart with service accountfarida azmy18-1/+61
Add service account to chart Issue-ID: OOM-2719 Signed-off-by: farida azmy <farida.azmy.ext@orange.com> Change-Id: I263f53a60e32867f61b2d85cc4dc8a78d9701449
2021-07-12[SDNC] Fix indent level for nodeSelector and affinitySatoshi Fujii7-68/+45
When nodeSelector was given by values or override.yaml, helm deploy was failed due to wrong indentation in helm charts. This change fixed indentation level for nodeSelector and affinity in pod spec. Issue-ID: SDNC-1565 Signed-off-by: Satoshi Fujii <fujii-satoshi@jp.fujitsu.com> Change-Id: Ie5446928e3f32d9333c04245fc0d2c0f98b3b4e7
2021-06-24[COMMON] Fix some bashismsGuillaume Lambert3-5/+5
pointed out by checkbashisms: - variable name HOSTNAME - source instead of . - sleep with suffix - string increments And migrate a few shebangs to /bin/sh Issue-ID: OOM-2643 Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com> Change-Id: I653c14454a3232b5a349ca1564ece53ddc94289d
2021-06-23[COMMON] Revert "[COMMON] Fix a few bashisms"Krzysztof Opasiak3-5/+5
This reverts commit 62178a49cc9e4088019d426636657d9f2980d242. This commit introduced regression on portal db config job which is now unable to start: /usr/local/bin/docker-entrypoint.sh: line 114: syntax error near unexpected token `(' Issue-ID: OOM-1 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I3cb72cd7625b180b364b713fe942d5956736ebef
2021-06-15[COMMON] Fix a few bashismsGuillaume Lambert3-5/+5
pointed out by checkbashisms: - variable name HOSTNAME - source instead of . - variable increments - sleep with suffix And migrate a few shebangs to /bin/sh Issue-ID: OOM-2643 Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com> Change-Id: I82981bcff17e88cf824935b841ce37a585ddde00
2021-06-11Merge "[COMMON][DGBUILDER] Update chart with service account"Sylvain Desbureaux1-0/+2
2021-06-10Merge "[COMMON] Remove CertService client mechanism"Sylvain Desbureaux4-12/+4
2021-06-10[COMMON][DGBUILDER] Update chart with service accountfarida azmy1-0/+2
Add service account to requirements.yaml, values.yaml and deployment/statefulset Issue-ID: OOM-2720 Signed-off-by: farida azmy <farida.azmy.ext@orange.com> Change-Id: Iefe02cad5b2069879d043d17465f248f1f731519
2021-06-08[COMMON] Remove CertService client mechanismPiotr Marcinkiewicz4-12/+4
- Remove cmpv2Certificate chart in order to deprecate CertService client mechanism. - Remove CertServiceClient init containers in SDNC. - Replace CMPv2CertManagerIntegration with cmpv2Enabled flag Issue-ID: OOM-2744 Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com> Change-Id: I8c818fcf64a029552c8833f68b6ae95fad379c8d
2021-06-01[CCSDK] Fix pnf-reg and fault message lostSatoshi Fujii1-2/+0
CCSDK mountpoint-registrar bundle consumes SEC_FAULT_OUTPUT and VES_PNFREG_OUTPUT DMaaP topics. Currently dmaap timeout is set to 50000, which is much longer than jersey.config.client.readTimeout=25000. The bundle is giving up connection before dmaap timeout and that could cause message lost if message arrived after client timeout. This change remove the inappropriate timeout value from the property file so that the bundle uses default timeout value defined in java class. Issue-ID: CCSDK-3320 Signed-off-by: Satoshi Fujii <fujii-satoshi@jp.fujitsu.com> Change-Id: I638af7c1f737b0904cb21c8121f2a08b2737d94b
2021-05-19Merge "[SDNC] Fix SDNC charts to make it work with aaf disabled"Sylvain Desbureaux1-1/+1
2021-05-17[SDNC] Fix SDNC charts to make it work with aaf disabledMarat Salakhutdinov1-1/+1
Fix SDNC service template to make it work with aaf disabled. Issue-ID: OOM-2748 Signed-off-by: Marat Salakhutdinov <marat.salakhutdinov@bell.ca> Change-Id: Ic0ac6bcb12cfc86d7b338da21d621e35e94b03c0
2021-05-12[SDNC] Install latest service release (SR3) of OpenDaylight AluminumDan Timoney5-5/+5
This version bump installs the latest service release of OpenDaylight Aluminum (SR3). This was released too late for inclusion in the initial Honolulu release, but contains bug fixes that are needed for SDN-R and so is being released as part of the Honolulu maintenance release Issue-ID: SDNC-1542 Issue-ID: CCSDK-3285 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I8b2c9763958bd33d41560d609c31bdc2f46cdcce
2021-05-07[SDNC] Support CallHomedemskeq83-0/+34
Expose netconf callHome port as node port Issue-ID: OOM-2721 Signed-off-by: demskeq8 <alexander.dehn@highstreet-technologies.com> Change-Id: I0b4205755a9e9e66fc23b4e1dc6cabe985bc859e
2021-04-27Merge "[COMMON] Fix condition equality bashisms"Krzysztof Opasiak4-4/+4
2021-04-27Merge "[PLATFORM] Generate Cert-Service certs with Cert-Manager"Sylvain Desbureaux1-0/+1
2021-04-22[SDNC] Bump version to install license/bug fixDan Timoney5-5/+5
Version bump on sdnc images to install license fix to address issue identified in latest license scan, and to install fix for bug in basic_vm_model test (SDNC-1515) Issue-ID: SDNC-1507 Issue-ID: SDNC-1515 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I80721c0ce88ce2654b637d7f6748441496a684e6
2021-04-22[PLATFORM] Generate Cert-Service certs with Cert-ManagerPiotr Marcinkiewicz1-0/+1
Utilize Cert-Manager to secure communication between Cert-Service and its clients, adjust templates and configs. Issue-ID: OOM-2712 Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com> Change-Id: I96426b1a184b4d254575e76d29214d9deda08cce Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
2021-04-19Merge "[COMMON] Fix function declarations bashisms"Sylvain Desbureaux1-1/+1
2021-04-16[COMMON] Fix condition equality bashismsGuillaume Lambert4-4/+4
pointed out by checkbashisms. $ mycmd=$(tox -e checkbashisms | grep "(should be 'b = a')" | sed -e "s@^[^.]*\(.[^ ]*\) line \([0-9]*\) .*@sed -i -e '\2s/==/=/g' \1;@") $ eval $mycmd Issue-ID: OOM-2643 Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com> Change-Id: I9032130bc4717e111de11a73187c2f1052376e45
2021-04-14[COMMON] Fix function declarations bashismsGuillaume Lambert1-1/+1
pointed out by checkbashisms. $ mycmd=$(tox -e checkbashisms | grep "^possible .*'function' is useless " | sed -e "s@^[^.]*\(.[^ ]*\) line \([0-9]*\) .*@sed -i -e '\2s/functio n \\\([^ ()]*\\\) *(\\\?)\\\?/\\\1 ()/\' -e '\2s/(){/() {/' \1;@") $ eval $mycmd Issue-ID: OOM-2643 Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com> Change-Id: Ic41c8ba8288b7a90db9f5775cd601c09ff2ab663
2021-04-13[COMMON] Fix shell scripts missing shebangsGuillaume Lambert1-2/+2
pointed out by checkbashisms. $ tox -e checkbashisms |grep 'interpreter line' | cut -d' ' -f2 |xargs grep -lv '#!/bin/sh' | xargs sed -i -e '1i#!/bin/sh' -e '1i\\' plus manual fixes Issue-ID: OOM-2643 Signed-off-by: Guillaume Lambert <guillaume.lambert@orange.com> Change-Id: Ic41fec6ebadd162cecf889f2b119ac82551bd21d
2021-04-06Merge "[SDNC] Add readiness check for sdnc-dbinit job"Sylvain Desbureaux1-0/+2
2021-04-06Merge "[SDNC] Enable SDNC to use external oauth provider"Sylvain Desbureaux5-6/+66
2021-04-02[SDNC] Enable SDNC to use external oauth providerdemskeq85-6/+66
- add additional environment variables - add config file for external oauth-providers Issue-ID: OOM-2675 Signed-off-by: demskeq8 <alexander.dehn@highstreet-technologies.com> Change-Id: I235d3f46f5d109a1e82bdaa3c9de97508116fbe3 [Improve secretes handling] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2021-04-02[SDNC] Add readiness check for sdnc-dbinit jobDan Timoney1-0/+2
sdnc container needs to wait for completion of its dbinit job before coming online. This appears to be root cause for a recurring issue we have seen in gating runs and in weekly run, where we see errors that directed graphs are missing. Issue-ID: SDNC-1512 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I3fb9dad6b36fc8a549094e94b0a6a8936f9a4916 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2021-03-31[CCSDK-SDNC] Bump versions for HonoluluDan Timoney6-5/+167
Bump versions of CCSDK (including CDS) and SDNC images for SDNC Honolulu release. Fixed issues found in CDS command-executor and py-executor pods. Added missing env variable settings. Issue-ID: CCSDK-3125 Issue-ID: SDNC-1473 Issue-ID: CCSDK-3192 Issue-ID: CCSDK-3197 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Id3bbe696313c568dc9ffb328715a7fc572330411
2021-03-24[DOC][COMMON] Prepare Honolulu releaseSylvain Desbureaux12-36/+34
Updating the documentation and bumping version to 8.0.0 Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6f942f1466fed64264c44fb8fc0e1ffc93a98f18
2021-03-21[SDNC] Check existance of DB user before creationandreasgeissler1-2/+2
When installing SDNC in a local DB, the execution of the DB initialisation job fails as the user already exists and granting the privileges to the DB is not executed. This patch will only create the user and DB if not already present. Issue-ID: OOM-2705 Signed-off-by: andreasgeissler <andreas-geissler@telekom.de> Change-Id: Iabfc90829cea1f98181caf3367c8f2b78de96c7f
2021-03-18[SDNC] Change path to daexim directory 2demskeq82-11/+1
remove wrong daexim link Issue-ID: SDNC-1475 Change-Id: I52d1da10082a6fee846461ce18fc0913aea85e18 Signed-off-by: demskeq8 <alexander.dehn@highstreet-technologies.com>