summaryrefslogtreecommitdiffstats
path: root/kubernetes
AgeCommit message (Collapse)AuthorFilesLines
2020-05-18[ESR] Force esr-server to run as non-rootKrzysztof Opasiak1-0/+29
Use securityContext to run esr-server as a non-root user. Unfortunately esr-server docker is built in a way that doesn't allow use to just change the user and continue using it. We need to make sure that conf dir is writable for this user because this docker modifies its configuration files from docker_entrypoint.sh Issue-ID: AAI-2896 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: If6eba45c9571753fa9e5ce4f386c2e391788c734 (cherry picked from commit 1e6740ddde8f7040b204e63bc457c1f6bea90523)
2020-05-18Update git submodulesLucjan Bryndza1-0/+0
* Update kubernetes/robot from branch 'frankfurt' to fc6143a31ef4a55d649f8e5384f661671274331c - Replace config using ingress host port template Depending on the ingress robot configuration host and port template should choose ingress host and port or direct cluster host and port Change-Id: If1ba88c2fa14ca5d5dd21e559f08fb3fcc815792 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Issue-ID: OOM-2341 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> (cherry picked from commit 77f1d25542848d7a5fd32f57436c9f413e0a5919) - Fix missing template arguments Fix missing template arguments for robot template ingress script Issue-ID: OOM-2341 Change-Id: I93386cc010830cad3e9a05875f18d01c0a01b0e5 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> (cherry picked from commit 84767148fb032832adfe4b85f2b6bcf311525bdb)
2020-05-18Merge "[COMMON] Use "" instead of {} as a default value to avoid warning" ↵Sylvain Desbureaux1-1/+1
into frankfurt
2020-05-18Merge "[COMMON] Enable password generation in postgres" into frankfurtSylvain Desbureaux1-3/+3
2020-05-18[ESR] Force esr-gui to run as non-rootKrzysztof Opasiak1-2/+31
Use securityContext to run esr-gui as a non-root user. Unfortunately esr-gui docker is built in a way that doesn't allow use to just change the user and continue using it. We need to copy tomcat directory to volume to make sure that tomcat is able to create additional directories after it starts. Issue-ID: AAI-2896 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Iae060ea691ce492e8ccb2d540a48c085c0fd66ae (cherry picked from commit 4c62d4db068a64494fd19870977c3eaa0b63c670)
2020-05-18[COMMON] Enable password generation in postgresKrzysztof Opasiak1-3/+3
Issue-ID: OOM-2250 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ibad1e8d523d2a182d2f43e1ae2b46fff07c11e01 (cherry picked from commit b51ee37db0bf164fb24961c5f1146e22ea245dfa)
2020-05-18[COMMON] Use "" instead of {} as a default value to avoid warningKrzysztof Opasiak1-1/+1
After we upgraded our helm version we started getting below issues with emails: Warning: Merging destination map for chart 'curator'. Overwriting table item 'image', with non table value: onap/sdnc-image:1.8.2 To fix this let's just use "" instead of () for our daily operations. Issue-ID: OOM-2412 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I5f2c215c281036a7eb921d6a805527c807a4aca9 (cherry picked from commit 8953675506f4b3807502a3be73b846ab5fe79c67)
2020-05-18Merge "Fix: make all - returns multiple warnings" into frankfurtSylvain Desbureaux1-1/+1
2020-05-16Update processor-db config with correct configurationKonrad Bańka4-17/+17
Processor-db configuration allows CDS to access data in sdnctl DB without enforcing users to provide such data in CBA. This entry is now corrected allowing proper work for this feature. Currently access to sdnctl DB is provided via root DB access, but this should be further corrected in future. Also removed unnecessary secret metaconfig - 'cds-db-root-pass'. Issue-ID: CCSDK-2373 Signed-off-by: Konrad Bańka <k.banka@samsung.com> Change-Id: Idf452fe5d42862e507b2d981af58b96931ee287c (cherry picked from commit 031bdb7e4d16288782797ff97333842e6a3f9623)
2020-05-15Fix: make all - returns multiple warningsMateusz Pilat1-1/+1
Issue-ID: OOM-2412 Signed-off-by: Mateusz Pilat <m.pilat@partner.samsung.com> Change-Id: I7d02ebc6aa43a8e8aa89cea7860bba6b55723fa9 (cherry picked from commit 613343a914d86c84cf3e8bad12584a44b45d6ae2)
2020-05-15Merge "bump the SO release version 1.6.1" into frankfurtKrzysztof Opasiak12-12/+12
2020-05-15Merge "update release version of modeling-etsicatalog" into frankfurtMorgan Richomme1-1/+1
2020-05-15Merge "[POLICY] Remove hardcoded credentials from policy-distribution" into ↵Sylvain Desbureaux4-9/+101
frankfurt
2020-05-15update release version of modeling-etsicatalogdyh1-1/+1
Issue-ID: MODELING-349 Change-Id: I52bb7f5f560fa3af6ece968b9c1e8ebc5331b813 Signed-off-by: dyh <dengyuanhong@chinamobile.com> (cherry picked from commit 238a0ea1f83b64c1d5a4258fb8741542ac1fbf49)
2020-05-14Update Docker Release versionstatta2-2/+2
Modify Update DB script. Issue-ID: PORTAL-900, PORTAL-894 Signed-off-by: statta <statta@research.att.com> Change-Id: I224826ef027e38d88f035fcef64969137154fd4d (cherry picked from commit 65d1504ec789ee67496f66f985520aab58c5e4df)
2020-05-13Merge "[AAF] SSHSM testCA request/values are too low" into frankfurtKrzysztof Opasiak1-2/+2
2020-05-13[DCAEGEN2] Remove Lost+Found in PVCSylvain Desbureaux2-0/+15
When using dynamic storage, "Lost+Found" may be present. Cloudify init script doesn't work when it's the case, so we need to remove it. Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie298c55aa997a441dde0bd45c452f41eb77ad495 (cherry picked from commit cfb7ff9315a0863c699acb018bfa947add0a1f25)
2020-05-13[AAF] SSHSM testCA request/values are too lowSylvain Desbureaux1-2/+2
When using requests/limits, testCA jobs gets OOMKIilled. Giving more RAM in order to make it work. Issue-ID: OOM-2408 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I221cba103a939b77009aa8c04da2425ab8eeae82 (cherry picked from commit 6c2cbff30b28610826b1c63244ba96c18d3ed4d8)
2020-05-13[POLICY] Remove hardcoded credentials from policy-distributionDominik Mizyn4-9/+101
This patch remove hardcoded healthcheck credentials from policy-distribution. Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I7c71fcceab030bd7858e8de9fe3f58451ac505d6 [Fix init container] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> (cherry picked from commit 4aa534fa3920335f1ec899331b435ac6b8c8521b)
2020-05-13Merge "[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt release" into frankfurtSylvain Desbureaux1-0/+1
2020-05-13Update git submodulesdeen19851-0/+0
* Update kubernetes/robot from branch 'frankfurt' to 4a50a3b035623ab285263a9ebed5d98f33bc65fe - demo-k8s.sh -- robot heatbridge updated Inputs to heatbridge operation updated, Inputs description updated Signed-off-by: deen1985 <damian.nowak@nokia.com> Change-Id: I96d89a7ed52850e5a9bbae2bb69177d25eb942ea Signed-off-by: deen1985 <damian.nowak@nokia.com> Issue-ID: INT-1584 (cherry picked from commit eed1fc5b5a55fc75935edda30cdee84542fedb4c) - Change ingress base hostname Change ingress base hostname to recommended value Issue-ID: OOM-2391 Change-Id: Ica5ab275ed3eac2ec6f1669fc9ca32c29a2b12e6 - Merge "Host and port template for ingress setup" - Merge "[ROBOT] Fix Ingress configuration" - Merge "ROBOT e2e test cases improvements for csar/zip tosca package validation in VNFSDK and SDC Onbarding fix in scrip required for Frankfurt" - ROBOT e2e test cases improvements for csar/zip tosca package validation in VNFSDK and SDC Onbarding fix in scrip required for Frankfurt Issue-ID: INT-1240 Signed-off-by: Krzysztof Kuzmicki <krzysztof.kuzmicki@nokia.com> Change-Id: I08584c00eaaa7cb84bcb055d1f7eee41d95d6019 - [ROBOT] Fix Ingress configuration Set SSL to redirect as backend uses HTTPS. Issue-ID: OOM-2186 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I94cf20a016f1d1face44037d9912de774a5f338c - Host and port template for ingress setup Depending on the ingress robot configuration host and port template should choose ingress host and port or direct cluster host and port + alternarive ingress hostname in config file Change-Id: I04c13657f5c5cf8b5f5373897bdc551dc2efdf36 Issue-ID: OOM-2341 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-05-13Merge "[Tree-wide] Make chart build process predictible" into frankfurtSylvain Desbureaux33-22/+72
2020-05-12Merge "Revise dcae bootstrap version" into frankfurtSylvain Desbureaux1-1/+1
2020-05-12[Tree-wide] Make chart build process predictibleKrzysztof Opasiak33-22/+72
ONAP is built using plain makefile rules. List of targets is generated using wildcard function. Based on make changelog: http://git.savannah.gnu.org/cgit/make.git/tree/NEWS since version 3.82 wildcard is not going to sort its results which means that charts are being processed in an arbitrary order which may lead to build failure due to missing dependencies. Since version 4.3 make started sorting the wildcard results once again which may lead to build issues. To avoid that and make our builds predictible independently from Makefile version let's make sure that we always sort wildcard results. Addinally let's use 'file://' instead of '@local' for charts in common to resolve dependencies between them. Issue-ID: OOM-2399 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Iacb02dcdbd577ce0e9ca1078dd0586d296ec9375 (cherry picked from commit aae2da91becf5f1f56329d49656c1ad634917cba)
2020-05-12Merge "Add Helm charts for CDS py-executor" into frankfurtSylvain Desbureaux6-0/+276
2020-05-11Revise dcae bootstrap versionVijay Venkatesh Kumar1-1/+1
New bootstrap released for Son-handler blueprint updates Change-Id: I3bf4d177a6827ff6afe36a0d2130ccdc797ac099 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com> Issue-ID: DCAEGEN2-2216 Issue-ID: DCAEGEN2-2200 (cherry picked from commit 416658b118984aae23654dc0521027b86c277389)
2020-05-11[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt releaseefiacor1-0/+1
Change-Id: I8b370e77407a3497d2fe46b207668dd234a24a80 Signed-off-by: efiacor <fiachra.corcoran@est.tech> Issue-ID: DCAEGEN2-2217 (cherry picked from commit b4ea1d79cdfdcc9f013a87f63f5ae386dbd8b137)
2020-05-11Merge "[POLICY] put base64 password in xacml.properties" into frankfurtSylvain Desbureaux3-8/+7
2020-05-11Add Helm charts for CDS py-executorMarek Szwalkiewicz6-0/+276
Chart for deployment pod and service of py-executor. This chart covers also artifact manager grpc server. Issue-ID: OOM-2256 Change-Id: Iaf7c569ccaea4062bf16abe3c314a1b24940d4c5 Signed-off-by: Marek Szwalkiewicz <marek.szwalkiewicz@external.t-mobile.pl> (cherry picked from commit a662568a444a4985068a96007290d1f480fe8547)
2020-05-11bump the SO release version 1.6.1seshukm12-12/+12
Issue-ID: SO-2818 Signed-off-by: seshukm <seshu.kumar.m@huawei.com> Change-Id: I99506f2bfb4aa9944dda9a23f6fbe0d66a60cb37
2020-05-11Merge "[VNFSDK] Use common secret template for postgres credentials" into ↵Sylvain Desbureaux6-9/+104
frankfurt
2020-05-09[POLICY] put base64 password in xacml.propertiesjhh3-8/+7
In addition, remove heap mem sizing for drools too as it is properly sized according to container allocated resources. Issue-ID: POLICY-2547 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I4e1e5eaef1cad924ac4c86e5248230aef1fad7d8 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> (cherry picked from commit ed6839f2fe2566741dcd49c8e59fdae519ce84b0)
2020-05-08Set multicloud-k8s image to 0.6.0Eric Multanen1-1/+1
Update image for Frankfurt release. Change-Id: Idc26b081694b8d7270fea81a30d595d41b6b9240 Issue-ID: OOM-2397 Signed-off-by: Eric Multanen <eric.w.multanen@intel.com> (cherry picked from commit 0d36387da995a3e5100b4a99c3e05765ee3ed4cd)
2020-05-08[VNFSDK] Use common secret template for postgres credentialsKrzysztof Opasiak6-9/+104
Even through we use common secret template both passwords are still hardcoded in common postgres chart but this will be removed as a final step just like we did for mariadb-galera. Issue-ID: OOM-2250 Change-Id: I4ca210c99c27fbfbf74a467d72a81b2e38d8d800 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> (cherry picked from commit 79677d38adfb3de5a35c00cdb710f6325a8719a9)
2020-05-07Merge "[AAF] v1.16+ compatible templates"Krzysztof Opasiak50-1872/+656
2020-05-07Merge "[SDNC] Use common aaf template in SDNC"Sylvain Desbureaux3-60/+39
2020-05-07Merge "[COMMON] Add new template for obtaining certificate"Sylvain Desbureaux9-25/+270
2020-05-06Use RC1 version of CCSDK artifactsDan Timoney10-10/+10
Update helm charts to use RC1 version of CCSDK dockers Issue-ID: CCSDK-2358 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Id247bdf3442084d724b84ed752956d08868c7ddf
2020-05-06[COMMON] Add new template for obtaining certificateKrzysztof Opasiak9-25/+270
Add new template that can be used to obtain certificate by component. Make also a PoC with NBI. Strongly based on aaf-config template. Issue-ID: AAF-1134 Change-Id: I10cb2a7b36a8dc436be337518cc15431aabbbc5d Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-05-06Merge "[VNFSDK] Fix Ingress configuration"Krzysztof Opasiak1-2/+2
2020-05-06Merge "[VID] Fix Ingress configuration"Krzysztof Opasiak1-2/+2
2020-05-06Merge "[UUI] Fix Ingress configuration"Krzysztof Opasiak2-2/+2
2020-05-06Merge "[SDNC] Fix Ingress Configuration"Krzysztof Opasiak2-0/+21
2020-05-06Merge "[SDC] Fix Ingress configuration"Krzysztof Opasiak2-5/+2
2020-05-06Merge "[Portal] Fix Ingress configuration"Krzysztof Opasiak1-1/+1
2020-05-06Merge "[OOF] Fix Ingress configuration"Krzysztof Opasiak1-1/+1
2020-05-06Merge "[DMaaP] Fix Ingress configuration"Krzysztof Opasiak1-1/+1
2020-05-06Merge "[CLI] Fix Ingress configuration"Krzysztof Opasiak1-1/+1
2020-05-06Merge "[CDS] Fix Ingress configuration"Krzysztof Opasiak1-3/+3
2020-05-06Merge "[APPC] Fix Ingress configuration"Krzysztof Opasiak1-1/+1