aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes
AgeCommit message (Collapse)AuthorFilesLines
2020-05-06[AAF] Fix AAF ConfigurationSylvain Desbureaux7-7/+7
set redirect to service providing SSL add ingress for aaf-oauth Issue-ID: OOM-2170 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Iec05ec5798cc8240ca45d7d08c973bc3516f5e8f
2020-05-06Merge "MUSIC spring boot helm charts (music-sb)"Sylvain Desbureaux39-1174/+744
2020-05-05Merge "[DCAEGEN2][dashboard] Use common secret template for postgres ↵Sylvain Desbureaux3-7/+29
credentials"
2020-05-05Merge "[DCAEGEN2][bootstrap] Use common secret template for postgres ↵Krzysztof Opasiak4-143/+163
credentials"
2020-05-05MUSIC spring boot helm charts (music-sb)Tschaen, Brendan39-1174/+744
Removal of tomcat and zookeeper as per latest music version.. Replaced with cassandra only and spring boot version of music, adding support for https and running the music container under a non-root user Update oof-has music-api configuration, use https Switch to music-api-springboot for all the ready.py Issue-ID: MUSIC-572 Signed-off-by: Tschaen, Brendan <ctschaen@att.com> Change-Id: Idbfac29cb5e9808787b5994e2575f055c292a146 Signed-off-by: vrvarma <vikas.varma@att.com>
2020-05-05Merge "[OOF] add Ingress to HAS API service"Krzysztof Opasiak2-0/+25
2020-05-05Merge "[COMMON] add missing ingress template"Krzysztof Opasiak1-0/+15
2020-05-05Merge "[CLAMP] Configure Ingress for Kibana"Krzysztof Opasiak2-0/+21
2020-05-05Merge "[NBI] add missing ingress template"Krzysztof Opasiak1-0/+15
2020-05-05[DCAEGEN2][bootstrap] Use common secret template for postgres credentialsKrzysztof Opasiak4-143/+163
Even through we use common secret template both passwords are still hardcoded in common postgres chart but this will be removed as a final step just like we did for mariadb-galera. Issue-ID: OOM-2250 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Icaa5334d6ebad4fbce23ed4f59b74448c02783cf
2020-05-05Merge "[Contrib] Make Postgres work when using dynamic PV"Krzysztof Opasiak2-2/+2
2020-05-05[DCAEGEN2][dashboard] Use common secret template for postgres credentialsKrzysztof Opasiak3-7/+29
Even through we use common secret template both passwords are still hardcoded in common postgres chart but this will be removed as a final step just like we did for mariadb-galera. Issue-ID: OOM-2250 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ic8d8a53093ccdf5f91a26ce9ac2734fe36ccca4f
2020-05-05Merge "Release RC1"Krzysztof Opasiak5-4/+48
2020-05-05[OOF] add Ingress to HAS API serviceSylvain Desbureaux2-0/+25
Adding the Ingresses to HAS API service. Issue-ID: OOM-2182 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6cfe4d014a18e693344e24f14c00f4108d9c15c9
2020-05-05[CLAMP] Configure Ingress for KibanaSylvain Desbureaux2-0/+21
Clamp Kibana didn't had a proper ingress, adding it. Issue-ID: OOM-2175 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I584bffc776789e7e527ffe24fb6ea73f42aebd59
2020-05-05[COMMON] add missing ingress templateSylvain Desbureaux1-0/+15
ingress template is needed to create ingress. Issue-ID: OOM-2173 Issue-ID: OOM-2188 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ia957cb25f3f76658affabd148aaa4118b2d7ea0c
2020-05-05[NBI] add missing ingress templateSylvain Desbureaux1-0/+15
ingress template is needed to create ingress. Issue-ID: OOM-2172 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I176f70600918def3d1fc43d9fdb35ca8d29653de
2020-05-05Merge "remove hardcoded MariaDB password"Sylvain Desbureaux13-94/+114
2020-05-04Merge "Change ingress hosnames for exposed services"Sylvain Desbureaux19-16/+47
2020-05-04Merge "[COMMON|APPC|SDNC] add Ingress to dgbuilder"Krzysztof Opasiak3-0/+24
2020-05-04Merge "[POLICY] update images and fixes"Krzysztof Opasiak11-516/+27
2020-05-04Merge "Portal AAF REST API perm fixes for Roles"Sylvain Desbureaux6-22/+20
2020-05-04Release RC1Huabing Zhao5-4/+48
This change addresses two issues: MSB-467: Certificate in MSB is set to use *.zte.com.cn MSB-462: Pods still run as root These two issue have been fixed in docker images, but also need to be reflected in K8s manifest. Issue-ID: MSB-467 Signed-off-by: Huabing Zhao <zhao.huabing@zte.com.cn> Change-Id: Id67e521b3051e9651051083f05d9e54973803030
2020-05-04remove hardcoded MariaDB passwordJulienBe13-94/+114
This aligns with other changes on OOM. You can either supply a specific password or have it generated for you based on a master password Issue-ID: CLAMP-796, OJSI-188 Change-Id: If1b80fc47cf1033e094f8a106746d1e8c556c08b Signed-off-by: JulienBe <jb379x@att.com> Co-authored-by: sebdet <sebastien.determe@intl.att.com> [small updates in common secret template usage] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-05-04Portal AAF REST API perm fixes for RolesChrisC6-22/+20
Fixed AAF REST API creds : reuse of X509 identity the use of javax.net.ssl variables overrides basic auth identity the fake password must be slightly updated in order to pass current decryption method in portal code Issue-ID: PORTAL-875 Change-Id: I0497df70f0ff9a30e4ccd634aff67467f5ae04df Signed-off-by: ChrisC <christophe.closset@intl.att.com>
2020-05-04[COMMON|APPC|SDNC] add Ingress to dgbuilderSylvain Desbureaux3-0/+24
Add Ingress for dgbuilder in common and update SDNC and APPC in order to use proper configuration. Issue-ID: OOM-2173 Issue-ID: OOM-2188 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib810ce3f4b3ff2ff3297c39be352d246aef6d7f1
2020-05-04Merge "Making mounted volume non-root"Sylvain Desbureaux1-0/+11
2020-05-01Update git submodulesMarco Platania1-0/+0
* Update kubernetes/robot from branch 'master' to c81062626b69160145baac5e6a5d670cb67211fa - Merge "Add instantiateVFWCLDN for DANOS" - Add instantiateVFWCLDN for DANOS Issue-ID: INT-1566 Change-Id: I48525947492061a98092f3b102ba240146a18e61 Signed-off-by: Brian Freeman <bf1936@att.com>
2020-05-01Update git submodulesmrichomme1-0/+0
* Update kubernetes/robot from branch 'master' to beea44604181479064665a2deb67d72c8c0e5d85 - [Integration][Testsuite] bump 1.6.1 version Issue-ID: INT-1567 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Ib337dc9134b54cadd9bb1ae7a2fa1fdfeaa42c4f
2020-04-30[POLICY] update images and fixesjhh11-516/+27
Issue-ID: POLICY-2510 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I1ac9698233d1b570ef3c5759742038c96015ba32 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-04-30Merge "Adding NSSMF adapter chart"Krzysztof Opasiak10-0/+561
2020-04-30Merge "[COMMON] Switch dgbuilder chart to new API"Krzysztof Opasiak1-4/+2
2020-04-30Update git submodulesmrichomme1-0/+0
* Update kubernetes/robot from branch 'master' to 1367bd680380828977982030eb9784250c579e25 - Use SPDX identifier for the license instead of putting an extract of the license Issue-ID: OOM-2389 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I7292b0b03dbf964d6aeaf987726e82ed7f0ba8b2
2020-04-30Adding NSSMF adapter chartjananib10-0/+561
OOM SO-NSSMF adapter Issue-ID: OOM-2343 Change-Id: I93c7bfc58601202dd61455431d2720162ee9e69c Signed-off-by: jananib <janani.b@huawei.com> Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-04-29Change ingress hosnames for exposed servicesLucjan Bryndza19-16/+47
Change ingress host to the required hostnames Change-Id: Ic78c8821e2e23e00943d8abdf7b2183b4d940c72 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-2391 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-04-29Merge "[CDS] Remove unused filebeat container."Krzysztof Opasiak1-22/+0
2020-04-29Merge "Changed http to https for SDK"Krzysztof Opasiak1-1/+1
2020-04-29Merge "Set sdc onboarding volume mount permissions"Sylvain Desbureaux3-0/+18
2020-04-29Set sdc onboarding volume mount permissionsMichaelMorris3-0/+18
Set the permissions of files in the sdc onboarding backend persistent volume for package certs to enable access by the process in the pod which now runs as non-root user (since SDC-2798) Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-2981 Change-Id: I6113f14ca9933e2fec2b565768ed5afbe3c18f21
2020-04-27[COMMON] Allow to use ' in mysql passwordsKrzysztof Opasiak3-1/+111
derivePassword which we use to generate our passwords includes ' in set of special characters that can be used in passwords. Current implementation of bitnami configure-mysql.sh simply concatenates password surrounded with '' rest of SQL query. This causes issues if password contains ' as it creates invalid SQL statement. To fix this issue we just patch the script and escape the special ' character in password. Issue-ID: OOM-2246 Reported-by: Mateusz Pilat <m.pilat@partner.samsung.com> Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I3d2150760755e55558e2045cbb7ca5693c8ab71f Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-04-27Merge "[APPC] Enable password generation for sdnctl"Krzysztof Opasiak1-1/+1
2020-04-27Merge "[APPC] Enable password generation for appcctl"Krzysztof Opasiak1-1/+1
2020-04-27Update git submodulesJames Forsyth1-0/+0
* Update kubernetes/aai from branch 'master' to 2d6141ab8bd7bfe58f5da0483e578032226e7ebb - Merge "Use released 1.6.8 container" - Use released 1.6.8 container Issue-ID: AAI-2883 Issue-ID: AAI-2593 Signed-off-by: Jimmy Forsyth <jf2512@att.com> Change-Id: I0dd8217c2fee8596e663d65206f92bc5446f02ea
2020-04-27Merge "[CLAMP] use common templates for logs"Krzysztof Opasiak10-59/+85
2020-04-27Merge "[POLICY] fix: Process also content of pd-pdp"Sylvain Desbureaux1-17/+16
2020-04-27Update git submodulesmrichomme1-0/+0
* Update kubernetes/robot from branch 'master' to b73d77ca2e9df3d7300ca85b5593d89a9271d13a - Bump teststuite 1.6.0 to OOM Master Issue-ID: INT-1558 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Iaf544043476e03589464d8e47ba4f89f7cbd8e5d
2020-04-24Changed http to https for SDKLorraine Welch1-1/+1
Issue-ID: PORTAL-890 Signed-off-by: Lorraine Welch <lb2391@att.com> Change-Id: I29db7da917f46a4bd3917fe1b71d714a9bf80022
2020-04-24[COMMON] Switch dgbuilder chart to new APIKrzysztof Opasiak1-4/+2
While working on password removal we added a new configuration node (config.db) which should be used for passing db credentials. Now when all user are switched to use new config options we can remove backward compatibility layer and start using new options. Issue-ID: OOM-2247 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I77876fbfc0a4af18fa36f0e8c5813a5e393a7e09
2020-04-24[APPC] Enable password generation for sdnctlKrzysztof Opasiak1-1/+1
Start using auto-generated password for sdnctl db instead of using the one hardcoded in values.yaml Issue-ID: OOM-2275 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I0a3b526387830d2bf44e88281896d0b87a92ce94
2020-04-24[APPC] Enable password generation for appcctlKrzysztof Opasiak1-1/+1
Start using auto-generated password for appcctl db instead of using the one hardcoded in values.yaml Issue-ID: OOM-2275 Change-Id: I3884a5b30a47d602b28136f984ebe4492ec43fb2 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>