summaryrefslogtreecommitdiffstats
path: root/kubernetes/sdnc
AgeCommit message (Collapse)AuthorFilesLines
2020-03-30[SDNC] Use faster version of common secret templatesKrzysztof Opasiak26-69/+123
Issue-ID: OOM-2051 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I6cf72e3d6dcd8eab5f913b86febc7a21d02c1ecb
2020-03-20Merge "Eliminate unnecessary node ports"Krzysztof Opasiak2-25/+34
2020-03-19Correct defining dicts using yaml's anchorsKonrad Bańka1-5/+9
This commit corrects previous mistake assuming that parameter's nested content derived via "<<" operator can be overwritten with single value, while in practice, whole key would be change. For practical explanation, following entry: a: &a b: 1 c: d: 2 e: 3 x: <<: *a c: d: 10 Would yield following content: a: b: 1 c: d: 2 e: 3 x: b: 1 c: d: 10 And as we can see, "e" key is missing there. This commit correct this. Issue-ID: SDNC-1122 Signed-off-by: Konrad Bańka <k.banka@samsung.com> Change-Id: I15dfe0219ee1d6bcde7d29821ed2650bc8698244
2020-03-19Eliminate unnecessary node portsDan Timoney2-25/+34
Update SDNC config to eliminate unnecessary node ports. Issue-ID: SDNC-1120 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Ia5666fd02baa7383cc484a2e9a770907d81af128
2020-03-04[SDNC] Use common secret template in sdncKrzysztof Opasiak15-196/+322
Some passwords are still hardcoded but with this commit all components should be using passwords provided via secrets not directly as strings. A follow-up patch will remove hardcoded passwords where feasible. Issue-ID: OOM-2309 Change-Id: I047974506430cbb277200d0103bcc57a6fd8a83b Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-02-26[SDNC] Allow to use templates in external secret namesKrzysztof Opasiak4-7/+7
Issue-ID: OOM-2309 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I24fc7c69d6e7999c2ac8107c8d3ed3af22baae42
2020-02-24[SDNC] Use common secret template in sdnc-portalKrzysztof Opasiak7-48/+141
Whole SDNC strongly depends on the assumption that it is using a common mariadb-galera instance and that root password is secret password. Also user and password to sdnc DB is hardcoded. Let's start working on removing this assumption and component by component add support for local and shared mariadb instance without hardcoding any passwords to the database. In this patch all passwords are still hardcoded in the helm chart to not break other parts of SDNC. Those values will be removed in a final patch. Issue-ID: OOM-2309 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I5ca369f43e8863f9ae3ec3f5d648740808a5e099
2020-02-24[SDNC] Add missing inclusion of common secret templateKrzysztof Opasiak1-0/+15
Issue-ID: OOM-2309 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I6f08d537036576122fc2e7d941695434eaaf854e
2020-02-21Merge "[SDNC] Use common secret template in dmaap-listener"Krzysztof Opasiak6-17/+85
2020-02-21Merge "[SDNC] Use common secret template in ansible-server"Krzysztof Opasiak4-21/+107
2020-02-21[SDNC] Use common secret template in dmaap-listenerKrzysztof Opasiak6-17/+85
Whole SDNC strongly depends on the assumption that it is using a common mariadb-galera instance and that root password is secret password. Also user and password to sdnc DB is hardcoded. Let's start working on removing this assumption and component by component add support for local and shared mariadb instance without hardcoding any passwords to the database. In this patch all passwords are still hardcoded in the helm chart to not break other parts of SDNC. Those values will be removed in a final patch. Issue-ID: OOM-2309 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I3280f9d7ff4933d4e50b94ca248676ed9aa6688d
2020-02-21[SDNC] Use common secret template in ansible-serverKrzysztof Opasiak4-21/+107
Whole SDNC strongly depends on the assumption that it is using a common mariadb-galera instance and that root password is secret password. Also user and password to sdnc DB is hardcoded. Let's start working on removing this assumption and component by component add support for local and shared mariadb instance without hardcoding any passwords to the database. In this patch all passwords are still hardcoded in the helm chart to not break other parts of SDNC. Those values will be removed in a final patch. Issue-ID: OOM-2309 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Idb460e72301dd63082d7890d34fea923df3ac426
2020-02-20[SDNC] Use common secret template in ueb listenerKrzysztof Opasiak5-15/+113
Whole SDNC strongly depends on the assumption that it is using a common mariadb-galera instance and that root password is secret password. Also user and password to sdnc DB is hardcoded. Let's start working on removing this assumption and component by component add support for local and shared mariadb instance without hardcoding any passwords to the database. In this patchAll passwords are still hardcoded in the helm chart to not break other parts of SDNC. Those values will be removed in a final patch. Issue-ID: OOM-2309 Change-Id: Ie998b3c5775807ef096074b18a18a1773120c1d6 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-02-01[ONAP-wide] Replace .Release.Name with common.releaseKrzysztof Opasiak26-50/+50
ONAP is too big to be deployed using helm install so we need to use a custom helm plugin helm deploy. This script deloys onap component by component instead of deploying evrything at once. Unfortunately this script also modifies the helm release by appending component name to it. As a result of this behavior our objects are called for example: onap-mariadb-galera-mariadb-galera-0 instead of just being called onap-mariadb-galera-0. This patch simplifies this naming convention by replacing all direct usages of .Release.Name with common.release macro which strips the component specific part from the release name. Issue-ID: OOM-2275 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ia8cead50d305adb00eef666d0a1ace74479b5183
2020-01-21aaf auto cert generationAgarwal, Ruchira (ra1926)6-3/+108
Add support for AAF init container for config and cert generation Issue-ID: SDNC-755 Signed-off-by: Agarwal, Ruchira (ra1926) <ra1926@att.com> Change-Id: I06ee7921b6dbb1b4b9ca64cf276a374256af3a45 Signed-off-by: Agarwal, Ruchira (ra1926) <ra1926@att.com>
2019-12-18Merge "[SDNC] Use global storage templates for PVC"Borislav Glozman8-142/+189
2019-12-16[SDNC] Use global storage templates for PVCSylvain Desbureaux8-142/+189
OOM has now templates in order to create the needed PVC, using: * a PV with a specific class when using a common nfs mount path between nodes (sames as today use) --> is the default behavior today * or a storage class if we want to use dynamic PV. On this case, we use (in order of priority): - persistence.storageClassOverride if set on the chart - global.persistence.storageClass if set globally - persistence.storageClass if set on the chart I've also used "range" for PV creation of the statefulset I've created one file per PV (one for mdsal, one for certs). sdnc-prom was using hostpath directly on deployment, move to a PV/PVC. Change-Id: Id9eed3b13ac85595c386e380f41cfbc38b52c69f Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-12-11Merge changes I69ea7e5d,I75f7e823,I2ae6b0f2,I6f1591a6,I30c2e0de, ...Sylvain Desbureaux2-0/+7
* changes: Add ingress controler support to OOF Add ingress controler support to POMBA Add ingress controler support to SDC Add ingress controler support to DMAAP Add ingress controler support to SDNC Add ingress controler support to CDS
2019-12-03Update SDNC helm charts to use latest stable version 1.7.6Timoney, Dan (dt5972)5-5/+5
Update SDNC helm charts to use latest stable version (1.7.6) Change-Id: I98a360cd16e14d8da914278da2509e2c07c2cf5c Issue-ID: SDNC-992 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-11-27Add ingress controler support to SDNCLucjan Bryndza2-0/+7
Issue-ID: OOM-2188 Change-Id: I30c2e0dea0a1fc12fd82090610c7e38f577cc811 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2019-10-23Disable SDNC admin portalTimoney, Dan (dt5972)1-1/+1
Disable SDNC admin portal, due to security vulnerability. Change-Id: I6a54eb262b0a1e6694c6f6951587687466d54acc Issue-ID: SDNC-951 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-10-11Use SDNC 1.7.4 versionTimoney, Dan (dt5972)5-5/+5
Update SDNC helm charts to use version 1.7.4 (final El Alto release) Change-Id: I257ac3b4a5780f612e2bcb84950231ed07a96876 Issue-ID: SDNC-939 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-09-30Fix https config for admin portalTimoney, Dan (dt5972)2-6/+6
Fix config of admin portal to expose https instead of http Change-Id: Ie5d94921fd0fdbe0ea4866385f07fa8859ba59a6 Issue-ID: OJSI-98 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-09-23Update CCSDK/SDNC versions for RC0Timoney, Dan (dt5972)5-5/+5
Update CCSDK version to RCO (0.6.3) and update SDNC version to RC0 (1.7.3) Change-Id: I4af5684ecacd2cf8134a4db51684fb95b488d536 Issue-ID: SDNC-917 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-09-13Update SDNC/CCSDK versions to 1.7.2/0.6.2Timoney, Dan (dt5972)5-5/+5
Update versions of CCSDK and SDNC dockers to 0.6.2 / 1.7.2 Change-Id: Ib8294b292122c924fcbe29a02806dffd5ce935ec Issue-ID: SDNC-905 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-09-11Remove cds charts from sdnc requirementes.yamlAbdelmuhaimen Seaudi1-4/+0
Issue-ID: OOM-2085 Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com> Change-Id: Ife904f457d65aaaaf63e67b5c2d2db91ad1331ec
2019-09-11Merge "Change admportal port map"Brian Freeman1-2/+2
2019-09-10Seperate CDS chart from SDNC in OOMAbdelmuhaimen Seaudi1-1/+1
Issue-ID: OOM-2085 Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com> Change-Id: I21fed8c9cf33967f62f156cac96deefdcb4f8d47 Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
2019-09-05Change admportal port mapTimoney, Dan (dt5972)1-2/+2
Update SDNC admin portal to map https port (8443) to its node port instead of its http port (8543). Change-Id: Ibfc242853d28c4915d7150e41595edbcfa077447 Issue-ID: OJSI-98 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-08-31Update SDNC helm charts to use Neon versionTimoney, Dan (dt5972)7-37/+27
Update SDNC helm charts to use Neon-based El Alto images Change-Id: If91320bc663992355f665b3f57f77214e96985cd Issue-ID: SDNC-874 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-08-22Tune OpenDaylight parametersTimoney, Dan (dt5972)5-0/+283
Add files to tune akka settings in OpenDaylight. Also, added setenv to tune Java settings. Change-Id: I2071fceb48f990929cd9f4c885bd0c9f7db0263c Issue-ID: SDNC-858 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-08-20Remove http node portTimoney, Dan (dt5972)1-1/+0
Remove http node port 30202. Users should instead use https node port 30267 Change-Id: I44a907126384092b5f18ad85115c6269279c9d80 Issue-ID: OJSI-99 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-08-20Update SDNC versionTimoney, Dan (dt5972)5-5/+5
Update sdnc version to 1.6.2 to pick up fixes: SDNC-855 SDNC-853 Change-Id: I2ee5f3d892c9204d56ce7c92f5503b605a607de7 Issue-ID: SDNC-855 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-08-14Remove unneeded node port 32208Timoney, Dan (dt5972)2-2/+1
Remove unneeded node port 32208 to resolve issue identified with ssh port detected. Change-Id: Ibcbfd0621c2950a2ea3f429f8beb38d03e1910d3 Issue-ID: OJSI-183 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-08-08Update SDNC/CDS image versions for El Alto early dropTimoney, Dan (dt5972)7-6/+31
Update SDNC image versions for El Alto early drop (1.6.1 for SDNC, 0.5.1 for CCSDK) Change-Id: I48bb223116b4064b7f90847d90bd0453d311b09c Issue-ID: SDNC-827 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-07-14Merge "Initialize SDNC DB from init container"Borislav Glozman4-48/+159
2019-07-11Moving Helm Chart version for El AltoMike Elliott12-17/+17
Updating all helm chart versions to 5.0.0 for the El Alto release. Merge will be co-ordinated with the merge of a separate aai/oom patch. Please do not merge until this coordination has completed. Issue-ID: OOM-1980 Signed-off-by: Mike Elliott <mike.elliott@amdocs.com> Change-Id: I31daaebeacea33565f13affd2fa28fb15fe948ba
2019-07-10Initialize SDNC DB from init containerTimoney, Dan (dt5972)4-48/+159
Updated sdnc helm chart to initialize database from an init container instead of initializing in startup script. Change-Id: I4133c70a5805227d89eef84e46bea8555bf8133d Issue-ID: SDNC-797 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-06-11Update helm charts to use final version of SDNC and CDS docker imagesTimoney, Dan (dt5972)5-5/+5
Update helm charts to use final Dublin version of SDNC docker images (version 1.5.4) and CDS docker images (version 0.4.5) Change-Id: Ibb8ca03fe2a924329b39205bc14b165456e273b7 Issue-ID: SDNC-795 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-06-06Update sdnc/ccsdk versions to 1.5.3/0.4.4Timoney, Dan (dt5972)5-5/+5
Update SDNC and CCSDK versions to reflect latest CCSDK/SDNC docker versions Change-Id: I325a999a77e8e4e9ff7ba3ddbd99b5dc91c46695 Issue-ID: SDNC-793 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-05-29Update to latest SDNC and CCSDK containersTimoney, Dan (dt5972)5-5/+5
Update to use latest CCSDK and SDNC releases (0.4.3 and 1.5.2, respectively). Change-Id: I1412f5b3744a37db87b498650d06889fb90e2d0f Issue-ID: CCSDK-1362 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-05-20SDNC-766: Updating OOM startODL.shDarraghEgan1-0/+2
Changes have been made in the sdnc/oam repo that have not been refelected in the oom repo and this file needs to be updated so both scripts will be the same in each repo. Issue-ID: SDNC-766 Change-Id: I61ef6a09b9ddc3422c0f85ae89d13eb240361f6a Signed-off-by: DarraghEgan <darragh.egan@est.tech>
2019-05-08Change ownership of persistent vol mountTimoney, Dan (dt5972)2-1/+11
Persistent volumes must be writable by non-root user odl. So, change ownership of the mount to odl user. Change-Id: Ie2ff285bd623a7b69289bc438ff16a2724fd7ded Issue-ID: SDNC-749 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-05-02Update to use released SDNC/CDS artifactsTimoney, Dan (dt5972)5-5/+5
Update helm charts to use released version of CDS and SDNC artifacts. Change-Id: If7c537bb1ce8d991244bd2cfa536a95f8c377107 Issue-ID: SDNC-740 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-04-17Merge "SDNC using shared mariadb-galera cluster"Alexis de Talhouët20-59/+64
2019-04-12Disable sdnc-portalTimoney, Dan (dt5972)1-1/+1
Updated sdnc-portal values.yaml to prevent sdnc-portal from coming up when SDNC is started. The portal is not currently used and has security issues that need to be addressed before it should be used. Change-Id: I3b37e97cb212489ae9ef7f12e88e21823a97f2e4 Issue-ID: SDNC-702 Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
2019-04-12SDNC using shared mariadb-galera clusterMahendra Raghuwanshi20-59/+64
Change-Id: I41330836901ccf1fcbdd0f9d6e720ce13ea3a9ea Issue-ID: OOM-1651 Signed-off-by: Mahendra Raghuwanshi <mahendra.raghuwanshi@amdocs.com>
2019-04-05Merge SDNR change to sdnc startODL scriptHerbert Eiselt1-2/+46
Add SDNR feature and adjust netconf for cluster Change-Id: Idec95539d0becc2f4c09e71e4b66616328775956 Issue-ID: SDNC-721 Signed-off-by: Herbert Eiselt <herbert.eiselt@highstreet-technologies.com>
2019-03-25SDNC-665: Change to startODL for oam repoDarraghEgan1-0/+6
This is for the post operation of keystore to add new keystore to odl while it's coming up and also to add certificates and keys that are available to odl's keystore and truststore When sdnc/oam gets mounted and so does oom repo, the startODL.sh in the oam repo gets overwritten by the startODL.sh in the oom repo. This change updates the startODL.sh so both scripts will be the same in each repo Issue-ID: SDNC-665 Change-Id: Ie9096c4d68e8c0c88682d188194c386e69b0108d Signed-off-by: DarraghEgan <darragh.egan@est.tech>
2019-03-12SDNC-660: Helm integration for Netconf over TLSRahul Tyagi4-1/+90
This commit introduces a persistent volume for "NETCONF over TLS" usecase in SDNC, so that certificates can be fetched from persistence at deployment time of SDNC/ODL. This functionality can be enbaled/disabled using flag oom/kubernetes/sdnc/values.yaml values.certpersistence.enabled true/false. By default this is enabled (.i.e. true). Mounted paths are Host path : /dockerdata-nfs/sdnc/certs Container path : /opt/opendaylight/current/certs Issue-ID: SDNC-660 Change-Id: Iab2ecdfcb890b6dc779de12655f0fb7bd869fb0f Signed-off-by: Rahul Tyagi <rahul.tyagi@ericsson.com>