summaryrefslogtreecommitdiffstats
path: root/kubernetes
AgeCommit message (Collapse)AuthorFilesLines
2019-11-21Add password generation templateKrzysztof Opasiak1-0/+62
Currently there is a number of hardcoded passwords in OOM helm charts that are reused for almost all ONAP deployments in different labs. One possible solution for this issue could be to generate a random password for every deployment but this may cause number of issues while doing helm upgrade. That's why instead of generating a random password we generate a password for particular use case, based on chart name, master password provided by the deployer and additional UID. This is done using derivePassword function so check its documentation for more details how this password is derived. From a user perspective, the most important fact is that he or she can achieve reproductible deployment. Every time when ONAP is deployed with the same masterPassword all derived passwords are going to be also the same. Issue-ID: OOM-2052 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I666d597e6daab8b79e630917ad75f17cc70f897b
2019-11-20Merge "Attempt 2 at chart restructure"Mike Elliott100-22/+80
2019-11-20Remove charts for multicloud-lenovoChangjun Wang8-406/+0
Remove charts for multicloud-lenovo Issue-ID: MULTICLOUD-737 Signed-off-by: Changjun Wang <310397125@qq.com> Change-Id: Id0ddd57ef620be7b03c524289efb70163d0f8828
2019-11-20Merge "Added 'pdpGroup' to policy-xacml-pdp parameters config file"Sylvain Desbureaux1-1/+2
2019-11-20Merge "Remove plain HTTP endpoint 30281"Sylvain Desbureaux1-1/+1
2019-11-20Merge "Remove plain HTTP endpoint 30285"Sylvain Desbureaux1-1/+1
2019-11-20Merge "Remove plain HTTP nodeport 30282"Sylvain Desbureaux2-4/+0
2019-11-20Merge "Remove plain HTTP endpoint 30280 from Nodeport"Sylvain Desbureaux1-3/+0
2019-11-19Remove plain HTTP endpoint 30281Huabing Zhao1-1/+1
Issue-ID: OJSI-140 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: I84f3272cbf2307a8015259842f30cc4e1b77c552
2019-11-19Remove plain HTTP endpoint 30285Huabing Zhao1-1/+1
Issue-ID: OJSI-186 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: I2e6e422e500ab84c48f6d6fa6acefc8feb826783
2019-11-19Remove plain HTTP nodeport 30282Huabing Zhao2-4/+0
Issue-ID: OJSI-141 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: I9d510ca293b7e43eecddd75fbfaa0e5acf74077e
2019-11-19Remove plain HTTP endpoint 30280 from NodeportHuabing Zhao1-3/+0
Issue-ID: OJSI-139 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: I643c4c7a51b05b462d280c903363d2372d3664db
2019-11-15Added 'pdpGroup' to policy-xacml-pdp parameters config fileHOCKLA1-1/+2
Issue-ID: POLICY-2229 Change-Id: Iffb9f40b174eae1e3b714e4ec5e8997c58d01a35 Signed-off-by: HOCKLA <ah999m@att.com>
2019-11-14correct cds-ui helm chartAbdelmuhaimen Seaudi1-1/+1
Issue-ID: OOM-2206 Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com> Change-Id: I5a66830a7aa128a0d75ed44ff5a06ae989be1d70
2019-11-13Update git submodulesBrian Freeman1-0/+0
* Update kubernetes/robot from branch 'master' to 31450dcb11d18b81098b43d0d0b7ecdb0d69e238 - SO VNFM HTTPS Issue-ID: SO-2517 Change-Id: I86c59908271b6a0686162c127edd6eb256b3ce6b Signed-off-by: Brian Freeman <bf1936@att.com>
2019-11-12Merge "VNFM-adapter health check failing"Morgan Richomme2-3/+13
2019-11-12Merge "change readiness logic for APPC docker"Sylvain Desbureaux1-3/+2
2019-11-08change readiness logic for APPC dockerTaka Cho1-3/+2
change to poke 8181 port Issue-ID: APPC-1792 Change-Id: I16160dde01c11c6625b407a1f5db4a24bc291df5 Signed-off-by: Taka Cho <takamune.cho@att.com>
2019-11-08VNFM-adapter health check failingMichaelMorris2-3/+13
Configured the VNFM adapter to support https as is being used by the health check request Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SO-2517 Change-Id: I2076a02788c2f74b90939a9e3684f917079cf7b2
2019-11-07Attempt 2 at chart restructureUbuntu100-22/+80
Helm value override file now supports component-specific settings: dcae-bootstrap: enabled: true dcae-cloudify-manager: enabled: true dcae-config-binding-service: enabled: true dcae-healthcheck: enabled: true dcae-redis: enabled: true dcae-servicechange-handler: enabled: true dcae-inventory-api: enabled: true dcae-deployment-handler: enabled: true dcae-policy-handler: enabled: true dcae-dashboard: enabled: true Issue-ID: OOM-1574 Signed-off-by: Ubuntu <dgl@research.att.com> Change-Id: I85e0fe6ae19e176d954611549ec954a5fe662307 Signed-off-by: Ubuntu <dgl@research.att.com>
2019-11-07Merge "Fix the nginx config"Sylvain Desbureaux1-0/+2
2019-11-07Merge "NBI to SDC: API is HTTPS with port 8443"Morgan Richomme1-1/+1
2019-11-07Merge "Remove unused properties from config files"Sylvain Desbureaux1-7/+0
2019-11-06NBI to SDC: API is HTTPS with port 8443Matthieu Geerebaert1-1/+1
Issue-ID: EXTAPI-341 Signed-off-by: MatthieuGeerebaert <matthieu.geerebaert@orange.com> Change-Id: I94b41e338d80939934c7d42fd518d0984cf89b92
2019-11-06Update git submodulesbdfreeman14211-0/+0
* Update kubernetes/robot from branch 'master' to 5526182fa60a7a61c8158c98b6be8dfc66c8330b - Revert VNFM https Issue-ID: OOM-2163 Change-Id: Ib5d07e2ddecbe8cdaf6d5e3ac7ae195cf6d33db4 Signed-off-by: bdfreeman1421 <bf1936@att.com>
2019-11-06Merge "[Portal] Adjust Pods Requests/Limits"Borislav Glozman6-23/+23
2019-11-06Merge "add properties for username and password"Borislav Glozman1-0/+5
2019-11-06Merge "[CLAMP] set Mariadb PVC to RWO"Borislav Glozman1-1/+1
2019-11-06Merge "[LOG] Move Elasticsearch PVC to RWO"Borislav Glozman1-2/+2
2019-11-06Merge "[POMBA] Move Elasticsearch PVC to RWO"Borislav Glozman1-1/+1
2019-11-06Merge "[POMBA] Move Data Router logs PVC to RWO"Borislav Glozman1-2/+2
2019-11-06add properties for username and passwordShaaban Ebrahim1-0/+5
Issue-ID: OOM-2164 Signed-off-by: Shaaban Ebrahim <shaaban.eltanany.ext@orange.com> Change-Id: Iace0b322d5d1a02ca25c0791936b0fc1a1e950e3
2019-11-06[Portal] Adjust Pods Requests/LimitsSylvain Desbureaux6-23/+23
I've adjusted the Requests / Limits of portal pods according to real usage of "Orange Openlab" and "Onap daily master". Calculation is the following: per deployment: * CPU/Mem requests is max of average from the two deployments * CPU/Mem limits is (max of max from the two deployments) * 1.2 Moved portal-widget CPU limit to 1 as it's not starting if set to lower than that. Full values are available on jira ticket (https://jira.onap.org/browse/PORTAL-517). Change-Id: Ic02fef386e05351a6fa9e47bf47d5c2046f490e3 Issue-ID: PORTAL-517 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Signed-off-by: Lorraine Welch <lb2391@att.com>
2019-11-06Remove unused properties from config filesKrzysztof Opasiak1-7/+0
DB and auth credentials are never extracted from this file thus it's better to remove them to avoid confusion. Issue-ID: OOM-2051 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I66b0cb61b17439496ed0e0c8d9529ad730823d61
2019-11-05[POMBA] Move Data Router logs PVC to RWOSylvain Desbureaux1-2/+2
Data Router pods writes logs directly in the PVC within generic name files: debian@control01-onap-master:~$ ls -l /dockerdata-nfs/onap-pomba/pomba/data-router/logs/application.log -rw-r--r-- 1 root root 125 Nov 5 09:56 /dockerdata-nfs/onap-pomba/pomba/data-router/logs/application.log debian@control01-onap-master:~$ ls -l /dockerdata-nfs/onap-pomba/pomba/data-router/logs/ total 4 drwxr-xr-x 2 root root 76 Nov 5 09:56 AAI-DR -rw-r--r-- 1 root root 125 Nov 5 09:56 application.log drwxr-xr-x 3 root root 18 Nov 5 09:54 data-router debian@control01-onap-master:~$ ls -l /dockerdata-nfs/onap-pomba/pomba/data-router/logs/data-router/ total 0 drwxrwxrwx 2 root root 6 Nov 5 09:54 logs debian@control01-onap-master:~$ ls -l /dockerdata-nfs/onap-pomba/pomba/data-router/logs/data-router/logs/ total 0 debian@control01-onap-master:~$ ls -l /dockerdata-nfs/onap-pomba/pomba/data-router/logs/AAI-DR/ total 12 -rw-r--r-- 1 root root 0 Nov 5 09:56 audit.log -rw-r--r-- 1 root root 0 Nov 5 09:56 debug.log -rw-r--r-- 1 root root 7519 Nov 5 09:56 error.log -rw-r--r-- 1 root root 666 Nov 5 09:56 metrics.log Thus if two pods were writing, there would be issue as each one would want to write. Then this PVC must be used by one POD only and RWO is sufficent Change-Id: I0087487fba715b4b0804de51544238f08fed1d3c Issue-ID: LOG-1114 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-11-05[POMBA] Move Elasticsearch PVC to RWOSylvain Desbureaux1-1/+1
Elasticsearch PVC is only used by elasticsearch POD. As ES doesn't support several writes per different instances on the same folder, RWO PVC is sufficient. Change-Id: I6b7c91174f4f485dc6e3b6e34111fe4fc2bb0469 Issue-ID: LOG-1114 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-11-05[LOG] Move Elasticsearch PVC to RWOSylvain Desbureaux1-2/+2
Elasticsearch PVC is only used by elasticsearch POD. As ES doesn't support several writes per different instances on the same folder, RWO PVC is sufficient Change-Id: Ie2cb4eadf8ee0c8ff1acf7e2ba172763c89583f3 Issue-ID: LOG-1114 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-11-05[APPC] Move Ansible server PVC to RWOSylvain Desbureaux1-3/+1
As ansible server is a statefulset with PVC template written in the statefulset, you'll have one PVC per ansible server. Thus ReadWriteMany (RWX) is not necessary and RWO is sufficient. Change-Id: I735891be2a098303ce85e21da7c8dc8b1ea20371 Issue-ID: APPC-1710 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-11-05[CLAMP] set Mariadb PVC to RWOSylvain Desbureaux1-1/+1
Forgot Mariadb PVC in previous commit (https://gerrit.onap.org/r/c/oom/+/94610). Change-Id: I9e3d96eab8b6d6ada7d2ab406a8e72249c909aa4 Issue-ID: CLAMP-488 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-10-31Update git submodulesKajur, Harish (vk250x)1-0/+0
* Update kubernetes/aai from branch 'master' to 81954e51ef4c04fb08182d779f4871dfca766221 - Update schema service to use v17 to v19 Issue-ID: AAI-2607 Change-Id: Ia49109e37af5092a5394d69a69dd9ad0fb14e2d7 Signed-off-by: Kajur, Harish (vk250x) <vk250x@att.com>
2019-10-30Merge "[NBI] Use mariadb-galera from common"Borislav Glozman13-431/+18
2019-10-30Merge "[Music] Adjust Pods Requests/Limits"Borislav Glozman6-26/+49
2019-10-29Merge "bump the SO version to 1.5.3"Brian Freeman10-10/+10
2019-10-29[Music] Adjust Pods Requests/LimitsSylvain Desbureaux6-26/+49
I've adjusted the Requests / Limits of portal pods according to real usage of "Orange Openlab" and "Onap daily master". Calculation is the following: per deployment: * CPU/Mem requests is max of average from the two deployments * CPU/Mem limits is (max of max from the two deployments) * 1.2 Change-Id: I3fce54e6be495a7014bf346d66721976fa2dab8b Issue-ID: MUSIC-533 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2019-10-29Merge "Updated The Version of Holmes"Borislav Glozman1-2/+2
2019-10-29Merge "AAF cert dist for DMaaP DR"Borislav Glozman17-161/+322
2019-10-29Merge "Add policy update notification topic to OOM"Borislav Glozman1-0/+5
2019-10-29Merge "Enabled HTTPS for sdc-workflow-designer"Borislav Glozman4-43/+16
2019-10-29Merge "Move AWX postgres and Netbox posgtres PVC to RWO"Borislav Glozman3-3/+3
2019-10-29Merge "Remove unused PVC from mariadb-galera chart"Borislav Glozman1-48/+0