summaryrefslogtreecommitdiffstats
path: root/kubernetes
AgeCommit message (Collapse)AuthorFilesLines
2020-12-01[CONSUL] Make consul run as non-rootKrzysztof Opasiak4-13/+52
Use our recently build consul image (still based on the same old consul version) and modify the deployment to make sure that it is able to run as non-root user. Yes, I know that moving consul-server to component would be more proper solution but as this commit is supposed to be cherry-picked to guilin I've tried to make as little changes as possible. Issue-ID: REQ-362 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Idfc09ee225d4f89bb699683fa5e4ae3b86491c08
2020-11-30Merge "[COMMON] Readiness check has an improper image" into guilinKrzysztof Opasiak1-0/+2
2020-11-30Merge "Drop repo name in Helm's v3 "repo update" subcommand" into guilinKrzysztof Opasiak1-1/+1
2020-11-30Merge "[PLATFORM] Add new fake deployment to fix offline certificates ↵Sylvain Desbureaux4-3/+47
generation" into guilin
2020-11-26Drop repo name in Helm's v3 "repo update" subcommandBartek Grzybowski1-1/+1
"helm repo update" accepts no arguments Change-Id: I216d50d9fa98f59191795f5625ec835158458978 Issue-ID: OOM-2562 Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com> (cherry picked from commit 380f9b87472820704216ed057a77c622200ccd56)
2020-11-26Merge "Revert "[CONSUL] Make consul server run as non-root"" into guilinKrzysztof Opasiak1-3/+1
2020-11-26Merge "[SDNC] Upgrade to final SDNC Guilin docker version" into guilinKrzysztof Opasiak5-5/+5
2020-11-26[COMMON] Readiness check has an improper imageSylvain Desbureaux1-0/+2
when repository is not globally set, readinessCheck gives back "empty" value for repository, leading to a bad rendered chart. Issue-ID: OOM-2592 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ic4e8553ca4dfed8e476ecb743d4434e0562ba295
2020-11-26[PLATFORM] Add new fake deployment to fix offline certificates generationAdam Wudzinski4-3/+47
Add new fake deployment to CertService, controlled by new global flag global.offlineDeployment, which is disabled as default. Change Makefile to use java image from ONAP Nexus for certificate generation. Signed-off-by: Adam Wudzinski <adam.wudzinski@nokia.com> Issue-ID: OOM-2588 Change-Id: I2f9fe4b626604c5bfd8512449d893015bdc6ca98
2020-11-25[MSB] Make consul run as non-rootKrzysztof Opasiak4-0/+149
Start whole consul container as non-root and ensure that both dumb-init and consul are able to start and run as non-root. Issue-ID: REQ-362 Change-Id: If5a737953122cc6cd22b8d43ac603b40f4b22727 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> (cherry picked from commit bc6a6674f749efc1693c4b6bd58a27f8c37a0ae0)
2020-11-25Merge "[CCSDK/CDS] Bump CDS version for final Guilin release" into guilinSylvain Desbureaux5-5/+5
2020-11-24Merge "[SDC] Bring back sdc onboarding volume mount permissions" into guilinKrzysztof Opasiak1-0/+21
2020-11-24[CCSDK/CDS] Bump CDS version for final Guilin releaseDan Timoney5-5/+5
This installs version 1.0.2 of the CCSDK CDS docker containers, which contains the following fix: CCSDK-2980: BlueprintWebClientService should not encode already encoded uri CCSDK-2914: CDS Blueprocessor certificate issue with AAI ' Issue-ID: CCSDK-2973 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I4aa15faa96dbb029135749a6888b431c2ee52d3a (cherry picked from commit c100dc5c0a66c83474468161018b5e30b0e1015a)
2020-11-24[SDNC] Upgrade to final SDNC Guilin docker versionDan Timoney5-5/+5
Upgrade to version 2.0.4 of SDNC docker containers, which contain fixes for the following High severity issues: CCSDK-2979: devicemanager onf14 influences ietf-alarms.yang using devicemanagers SDNC-1413: CCVPN - Transport Slicing: SDNC development - PATCH operation instead of POST SDNC-1414: CCVPN - Transport Slicing: SDNC development - Need to unset a context variable in a for loop node in DG Issue-ID: SDNC-1409 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Icf39ad2e8280ddd4cea53a54905b27f61bb05aab (cherry picked from commit aa79ff6292bffc9a78b1893759eb0a86cc96c436)
2020-11-23[CCSDK] Make a1policymanagement react on ConfigMap updatesKonrad Bańka5-3/+114
Updated Deployment spec to template ConfigMap files in runtime allowing live reaction of application to config changes. Provided Configmaps with scripts to handle monitoring configmap-provided files. Updated envsubst to explicitly point to downloaded version. Issue-ID: CCSDK-2958 Signed-off-by: Konrad Bańka <k.banka@samsung.com> Change-Id: I22e18f2838c0956f899cb9fa96d9fd862e6c6942 (cherry picked from commit 52c38b98b8410de74e545f5cd7f79c2d959bc81a)
2020-11-22[SDC] Bring back sdc onboarding volume mount permissionsKrzysztof Kuzmicki1-0/+21
Set the permissions of files in the sdc onboarding backend persistent volume for package certs to enable access by the process in the pod which now runs as non-root user (since SDC-2798) Withdrawal of part of the change I2c895a8d8e7c25e11a2a1e997735d2e7b2d258aa Commit https://gerrit.onap.org/r/c/oom/+/111513 Signed-off-by: Krzysztof Kuzmicki <krzysztof.kuzmicki@nokia.com> Issue-ID: SDC-3385 Change-Id: I627922f80728ebf1e42a0c9b39d0e95fa3f7ec7c
2020-11-20Merge "[DCAE] VES-http input override" into guilinSylvain Desbureaux1-3/+3
2020-11-20Merge "[SDC] Release 1.7.3 images" into guilinSylvain Desbureaux5-7/+7
2020-11-20Merge "[CLAMP] Update BE/FE images to move to 5.1.5" into guilinSylvain Desbureaux2-2/+2
2020-11-20Merge "[Modeling] Update image of etsicatalog" into guilinSylvain Desbureaux1-1/+1
2020-11-20Merge "[DCAE] Revise bootstrap and vescollector version" into guilinSylvain Desbureaux1-2/+2
2020-11-19[POLICY] Use apex 2.4.4 and drools 1.7.5Jim Hahn3-2/+3
Update version numbers for some Policy images. Fixed the following issues: - update default branch to guilin - match prov-status with both "ACTIVE" and "active" in drools-apps - close stdin & stdout in apex-pdp CLI editor - add stringify method to apex-pdp execution context - set dmaap fetch timeout for apex-pdp Issue-ID: POLICY-2893 Change-Id: I30017d6f2f01034b2f8721c800925dcab79672b3 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-11-19[DCAE] VES-http input overridevv770d1-3/+3
Service name change to avoid conflict with VES-TLS Change-Id: I68cb87de1e1707fe8d7b37ae361baa95fd5e6f64 Signed-off-by: vv770d <vv770d@att.com> Issue-ID: DCAEGEN2-2520 (cherry picked from commit a778de366ed274e43348f3dc4347d4ee5bb95ea9)
2020-11-19[DCAE] Revise bootstrap and vescollector versionvv770d1-2/+2
k8s-bootstrap-container 2.1.8 includes blueprint revision for below components Son-handler 2.1.2 Holmes 1.2.9 Slice-Analysis 1.0.1 Pm-Maper 1.4.2 VesCollector 1.7.9 Change-Id: Id2a4f494d68ae1aea0708f5bfb799c1606fb8e57 Signed-off-by: vv770d <vv770d@att.com> Issue-ID: DCAEGEN2-2495 Issue-ID: DCAEGEN2-2500 Issue-ID: HOLMES-369 Issue-ID: HOLMES-368 Issue-ID: DCAEGEN2-2485 Issue-ID: DCAEGEN2-2480 Signed-off-by: vv770d <vv770d@att.com> (cherry picked from commit c6dcdee798b4580fc006f3b2b4db6d163f79b12f)
2020-11-19[Modeling] Update image of etsicatalogdyh1-1/+1
Change-Id: Ib697ce6b9e1e7f2abb819bc718b1cb855b0e7fdb Issue-ID: MODELING-448 Signed-off-by: dyh <dengyuanhong@chinamobile.com> (cherry picked from commit 81e83aed0461044ef8c0d2de7d483e3966ffd403)
2020-11-19Merge "Revert "[CONSUL] Make consul run as non-root"" into guilinKrzysztof Opasiak2-35/+9
2020-11-19Merge "[OOF] Bump OSDF to 3.0.2" into guilinSylvain Desbureaux2-2/+5
2020-11-18Revert "[CONSUL] Make consul server run as non-root"Daniel Milaszkiewicz1-3/+1
Revert submission 114556 Reason for revert: Bug - OOM-2630 Reverted Changes: Ic1302ac28:[CONSUL] Make consul server run as non-root I43584b7f0:[CONSUL] Make consul run as non-root Issue-ID: OOM-2630 Change-Id: I3e96f85ad92239f6a3e3df019fc1f675b837ce0d Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> (cherry picked from commit 2e13371bd7a679e3b1cf0c9818c60bf6c8574a2d)
2020-11-18Revert "[CONSUL] Make consul run as non-root"Daniel Milaszkiewicz2-35/+9
Revert submission 114556 Reason for revert: Bug - OOM-2630 Reverted Changes: Ic1302ac28:[CONSUL] Make consul server run as non-root I43584b7f0:[CONSUL] Make consul run as non-root Issue-ID: OOM-2630 Change-Id: Ie80d50417418d182f3db54d103bac50dde0c6775 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> (cherry picked from commit 55913091b7deb8f73c026c53826608c8f7b51f17)
2020-11-18[CLAMP] Update BE/FE images to move to 5.1.5sebdet2-2/+2
Update FE/BE to latest clamp images Issue-ID: CLAMP-978 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: Iacd1c050c6d9f7b1aa55edfb11127e6858e00ac6 (cherry picked from commit f0d27cb7e6c5a0722509d2069aa603002d763d9e)
2020-11-18[SO] Bump container versions to 1.7.10Kalkere Ramesh, Sharan10-10/+10
SO 1.7.10 containers are release containers so-bpmn-infra: 1.7.10 so-catalog-db-adapter: 1.7.10 so-monitoring: 1.7.10 so/nssmf-adapter: 1.7.10 so/openstack-adapter: 1.7.10 so/request-db-adapter: 1.7.10 so/sdc-controller: 1.7.10 so/sdnc-adapter: 1.7.10 so/vnfm-adapter:1.7.10 so/api-handler-infra:1.7.10 Issue-ID: SO-3346 Change-Id: I450734f8b4704c767c330deff8a830ae84ba3d2c Signed-off-by: Kalkere Ramesh, Sharan <sk720x@att.com> (cherry picked from commit df29b1e09931b7e0f4c7cd4bfb363a707a201deb)
2020-11-18[OOF] Bump OSDF to 3.0.2krishnaa962-2/+5
Issue-ID: OPTFRA-871 Signed-off-by: Krishna Moorthy <krishna.moorthy6@wipro.com> Change-Id: I64b7e6dbacbc627e55d28dafc5254cbeac74b821 (cherry picked from commit bdad855eac00576618dc1533fabbd131f5a1afcf)
2020-11-17[SDC] Release 1.7.3 imagessebdet4-7/+7
Release the 1.7.3 images for all sdc components Issue-ID: SDC-3364 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: Icd873c8d5a2147e62938bf7fdd6da7b60bcf3c59
2020-11-16Update git submodulesBrian Freeman1-0/+0
* Update kubernetes/robot from branch 'master' to 4e61a1c981b7e00846c0ca2857cd32be027294e1 - Update script and artifact default value Issue-ID: INT-1779 Change-Id: Iaa41b42a091b182a30d3b1215ad22555e78bfc6c Signed-off-by: Brian Freeman <bf1936@att.com>
2020-11-13[DCAE] Revise bootstrap and vescollector versionvv770d1-2/+2
k8s-bootstrap-container 2.1.8 includes blueprint revision for below components Son-handler 2.1.2 Holmes 1.2.9 Slice-Analysis 1.0.1 Pm-Maper 1.4.2 VesCollector 1.7.9 Change-Id: Id2a4f494d68ae1aea0708f5bfb799c1606fb8e57 Signed-off-by: vv770d <vv770d@att.com> Issue-ID: DCAEGEN2-2495 Issue-ID: DCAEGEN2-2500 Issue-ID: HOLMES-369 Issue-ID: HOLMES-368 Issue-ID: DCAEGEN2-2485 Issue-ID: DCAEGEN2-2480 Signed-off-by: vv770d <vv770d@att.com>
2020-11-13Merge "[SO] Register Etsi Nfvo in MSB"Sylvain Desbureaux1-2/+2
2020-11-13Merge "[CCSDK] Fix for naming service"Sylvain Desbureaux1-1/+1
2020-11-13Merge "[Tree-wide] Update helm repo after build"Sylvain Desbureaux1-5/+14
2020-11-13Merge "[SO] Bump container versions to 1.7.9 "Sylvain Desbureaux10-10/+10
2020-11-12[CCSDK] Fix for naming serviceDan Timoney1-1/+1
Updated version of network-name-gen microservice to 1.0.2, which contains fix for database initialization error (CCSDK-2978). Issue-ID: CCSDK-2978 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I25fb44188086181714cfdd3b864ad69bad8f28bf
2020-11-12[SO] Bump container versions to 1.7.9 seshukm10-10/+10
SO 1.7.9 containers are release containers so-bpmn-infra: 1.7.9 so-catalog-db-adapter: 1.7.9 so-monitoring: 1.7.9 so/nssmf-adapter: 1.7.9 so/openstack-adapter: 1.7.9 so/request-db-adapter: 1.7.9 so/sdc-controller: 1.7.9 so/sdnc-adapter: 1.7.9 so/vnfm-adapter:1.7.9 so/api-handler-infra:1.7.9 Issue-ID: SO-3216 Signed-off-by: seshukm <seshu.kumar.m@huawei.com> Change-Id: I14d3347225dc1a6c072dbb2e56e5bb985867f25a
2020-11-10[SO] Register Etsi Nfvo in MSBAndrewLamb1-2/+2
Small change so that NFVO registers in MSB correctly Issue-ID: SO-3225 Change-Id: If734b1455cb5a9a31ec64f2df92ddd8239004bea Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
2020-11-09Merge "[PORTAL] Update image versions"Sylvain Desbureaux4-5/+5
2020-11-06Merge "[SDNC][CCSDK] Update SDNC and CCSDK image versions for Guilin RC1"Krzysztof Opasiak10-10/+10
2020-11-06Merge "[SO] Disable SO-VE-VNFM per default"Krzysztof Opasiak1-1/+1
2020-11-06Merge "[DCAE]Fixed MSB Registration Bugs"Krzysztof Opasiak1-2/+2
2020-11-06[Tree-wide] Update helm repo after buildKrzysztof Opasiak1-5/+14
Helm 3 no longer supports creation of a local repo as helm 2 did. Now we need to use external component named chartmuseum to provide us repo for helm charts. When we start chartmuseum for the first time repo is empty and during our build process we successively built helm charts to it. As a last chart we always build our umbrella chart called onap and also push it to repo. Unfortunately our local helm cache is unaware that this new chart is now available untill we push sth else or execute helm repo update which leads to really cryptic deployment failures. To mitigate this issue let's add a new target helm-repo-update which will be executed right after onap and just make sure that our local cache is up to date. WARNING: If you are using helm v3 and you build a single component for the first time on this machine or version of chart for the component that you are building has just changed recently it's not enough to run: $ make <component> You need to also run: $ make helm-repo-update after successful build of your component. Issue-ID: OOM-2562 Change-Id: I77020a3fb5666106b86c6a76477a57d9dd5af047 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-11-06Update git submoduleswreehil1-0/+0
* Update kubernetes/aai from branch 'master' to 9eef36ac7a12292e749104dd5a7fa17e35bdfecc - [AAI] Bump Schema Service Use latest schema service version for helping the ccvpn network slicing use case with an edge multiplicity issue. Issue-ID: AAI-3212 Signed-off-by: wreehil <wr148d@att.com> Change-Id: I878e0c1f7b664fc97adf3256e97b79e351828ee0
2020-11-06Merge "Revert "[SO] helm chart for cnf-adapter""Krzysztof Opasiak13-582/+56
2020-11-06Merge "[SO] SOL003 adapter,bpmn-infra, nfvo HTTPs to HTTP"Sylvain Desbureaux3-12/+4