summaryrefslogtreecommitdiffstats
path: root/kubernetes
AgeCommit message (Collapse)AuthorFilesLines
2021-02-16[MSB] Use certInitializer for MSBSylvain Desbureaux25-178/+217
MSB is currently using an hardcoded certificate. In order to follow SECOMMON requirements, let's use a freshly generated certificate instead Issue-ID: MSB-521 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I157e44a6e30391c36c0142acfa08604c37b79cc4
2021-02-12[AAF] Give `identities.dat` to working deploymentsSylvain Desbureaux6-36/+32
Today, `identities.dat` is put on cassandra deployment. But this file is actually needed by "working" deployments (at least certman and service) and not by cassandra. This patch removes it from cassandra deployments and add it to the other ones form "authz" family. Issue-ID: OOM-2678 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I2a4b68f73797cd6c369060481e169525829a4217
2021-02-11Merge "[DCAEGEN2] Update cm-container and consul-loader"Krzysztof Opasiak5-7/+6
2021-02-11Merge "[PORTAL][CASSANDRA] Configure Heap"Krzysztof Opasiak2-3/+17
2021-02-11Merge "[POLICY] Migration of clamp to policy area"Krzysztof Opasiak70-2963/+142
2021-02-11Merge "[AAI] Remove unused AAF proxies"Krzysztof Opasiak58-1370/+72
2021-02-11[POLICY] Migration of clamp to policy areasebdet70-2963/+142
Creation of the clamp subcharts + fusion of the clamp database to policy mariadb Issue-ID: POLICY-2951 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: I8192f82bc393e3fc8d5884d6ab73912a0466edcd Signed-off-by: sebdet <sebastien.determe@intl.att.com>
2021-02-10Merge "[COMMON] Create certManagerCertificate chart"Sylvain Desbureaux10-218/+306
2021-02-09[DCAEGEN2] Update cm-container and consul-loaderJack Lucas5-7/+6
cm-container 4.2.0 fixes a restart issue consul-loader-container 1.1.0 adds functionality needed for deploying DCAE microservices with Helm Issue-ID: DCAEGEN2-2581 Issue-ID: DCAEGEN2-2616 Signed-off-by: Jack Lucas <jflos@sonoris.net> Change-Id: I3999767d51ce7135c2783a7eee6dadd0b3270d4f
2021-02-08[PORTAL][CASSANDRA] Configure HeapSylvain Desbureaux2-3/+17
When on small flavor, limits set are too small to allow a smooth start of cassandra with usual Heap configurations. This patch adds heap configuration when on small. Issue-ID: PORTAL-1037 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Icdbc4fd5892c3f350642ffdd924e4c36f0135019
2021-02-07[MUSIC] Make MUSIC to use cert managerkrishnaa966-25/+28
Make music to use cert manager to generate and load the certificates Issue-ID: OOM-2673 Signed-off-by: Krishna Moorthy <krishna.moorthy6@wipro.com> Change-Id: I3c655107bebb969f317bcbe87cfc6a55a1821533
2021-02-05[COMMON] Create certManagerCertificate chartPiotr Marcinkiewicz10-218/+306
- Create certManagerCertificate chart for Certificate template - Change default values for duration and renewBefore - Add creation Secret with keystore password - Use template in SDNC (add volumes and volumesMounts) Issue-ID: OOM-2568 Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com> Change-Id: Ib70d91b599fa6813ed0a6d5b96206508f2fdafcf
2021-02-04Merge "[AAI] Templatize MSB services"Krzysztof Opasiak5-1676/+84
2021-02-04Merge "[COMMON] Fix Ingress templating"Krzysztof Opasiak1-7/+13
2021-02-04Merge "[DCAEGEN2] Updates to bootstrap and cm-container"Krzysztof Opasiak12-90/+44
2021-02-04Merge "[AAI] Use CertInitializer for AAI Proxy"Krzysztof Opasiak8-130/+48
2021-02-04Merge "[DCAE] Top up components version"Krzysztof Opasiak2-2/+2
2021-02-04[DMAAP][DR] Fix bad templatingSylvain Desbureaux2-2/+2
In DR deployments, use of `{{- end -}}` at the of affinity makes the next line to "glue" to resources information. And it seems that in recent kubernetes, it makes it break. Issue-ID: OOM-2671 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ief6fcdf18b9bea1bff728924d7c9a25465ac8a47
2021-02-02Merge "[COMMON][ETCD] Skip startup self-discovery for etcd nodes"Krzysztof Opasiak1-0/+4
2021-02-02[AAI] Use CertInitializer for AAI ProxySylvain Desbureaux8-130/+48
Instead of using an harcoded certificate for AAI Haproxy, let's use certInitializer in order to have a fresh one. Issue-ID: OOM-2654 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Id07af4084ae714bc7ba7132b218434229a0ba866
2021-02-02Merge "[AAI] AAI-EVENT publishing fix for https"Sylvain Desbureaux1-0/+2
2021-02-02Merge "[SDNC] Provide proxy settings for sdnr mountpointRegistrar"Sylvain Desbureaux3-0/+38
2021-02-02Merge "[PLATFORM] Update cert service images to 2.3.3"Sylvain Desbureaux4-7/+7
2021-02-01[AAI] AAI-EVENT publishing fix for httpsHarish Venkata Kajur1-0/+2
Updating the resources microservice to trust the onap certificates to fix the issue where the A&AI is unable to publish to AAI-EVENT topic because A&AI is not trusting the message router certificate Issue-ID: AAI-3219 Change-Id: I33d52a1f4593154ce123e7c67aee6dcdeedaf889 Signed-off-by: Harish Venkata Kajur <vk250x@att.com>
2021-02-01Merge "[DMAAP][MR] Service Mesh compatibility"Krzysztof Opasiak4-5/+7
2021-02-01[DCAE] Top up components versionTomasz Wrobel2-2/+2
- runtime-api to 1.2.1 - onboarding-api to 2.12.4 Issue-ID: DCAEGEN2-1179 Issue-ID: DCAEGEN2-2441 Issue-ID: DCAEGEN2-2546 Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com> Change-Id: I04dfb7c9dd9c797bf48f1fb507b84719f3f3b171
2021-01-28[DCAEGEN2] Updates to bootstrap and cm-containerJack Lucas12-90/+44
Update cm-container to 4.1.0 Update bootstrap to 3.0.0 Move plugin configuration from bootstrap to cm-container Remove unneeded inputs files Issue-ID: DCAEGEN2-2542 Issue-ID: DCAEGEN2-2582 Issue-ID: DCAEGEN2-2543 Issue-ID: DCAEGEN2-2383 Signed-off-by: Jack Lucas <jflos@sonoris.net> Change-Id: I30a3f549d9811adedc8472fd410038eaa068e771
2021-01-27[PLATFORM] Update cert service images to 2.3.3Joanna Jeremicz4-7/+7
Enhance CertServiceAPI response (include CMP server error messages) Fix KeyUsage extension sent to CMPv2 server Issue-ID: OOM-2658 Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com> Change-Id: Ic2c68b85fce08d20e423b316a3234e6f00799a42
2021-01-27Merge "[COMMON] Add template for CertServiceClient"Sylvain Desbureaux10-85/+284
2021-01-26[COMMON] Fix Ingress templatingSylvain Desbureaux1-7/+13
New TLS part of Ingress templating was broken. This commit fixes it. Issue-ID: OOM-2609 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I0b9b41e052911ef0064696ac7cf6ca8a274ae1dd
2021-01-25Merge "[PORTAL] Fix ONAP Portal redirect to internal port"Krzysztof Opasiak1-1/+1
2021-01-25[SDNC] Provide proxy settings for sdnr mountpointRegistrardemskeq83-0/+38
proxyUser, ProxyPassowrd and proxyUrl for jersey.config.client.proxy settings Issue-ID: OOM-2662 Signed-off-by: demskeq8 <alexander.dehn@highstreet-technologies.com> Change-Id: I9136e71153ccce88b8bc8a6501ebdea2eb3a93cb
2021-01-25Merge "[COMMON][MARIADB] Force Galera Node address"Krzysztof Opasiak1-0/+6
2021-01-25[COMMON][ETCD] Skip startup self-discovery for etcd nodesKonrad Bańka1-0/+4
Current startup script of etcd checks whether all assumed other nodes are already running, before proceeding. This check, however, also includes checking localhost, but due to using headless service statefulset pod DNS discovery, it doesnt succeed immediately. In some deployments k8s DNS server may be laggy, thus failing startup script to finish before liveness check. This patch fixes such failures of 1 pod etcd clusters, and improves startup time for any size ones. Signed-off-by: Konrad Bańka <k.banka@samsung.com> Issue-ID: OOM-2668 Change-Id: I2f9263a0f4964b0a495631775d0cbbceef25e85b
2021-01-22[AAI] Remove unused AAF proxiesSylvain Desbureaux58-1371/+72
Some AAI components have the ability of using AAF proxies for authentication. As AAF is deprecated and these proxies seems not to be used by anybody, let's remove them. Issue-ID: OOM-2663 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie78740eb452f1b28f031a97fe272f86acce1f8be
2021-01-21Merge "[COMMON][CERTS] Use sh to onboard custom certs"Krzysztof Opasiak2-7/+13
2021-01-21[DMAAP][MR] Service Mesh compatibilitySylvain Desbureaux4-5/+7
In order to make DMaaP Message Router to work, a change in Zookeeper has to be done so it's listening on all Interfaces. Also, rename service port names in order to follow istio best practices. Issue-ID: OOM-2233 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I4ed3426c57439d40ff48c7fbbc6d2e970924b7f2
2021-01-20[COMMON] Add template for CertServiceClientRemigiusz Janeczek10-85/+284
Create generic template to simplify CertServiceClient use Issue-ID: OOM-2568 Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com> Change-Id: I4fb9829b27b1dd13a9e7a098f807710cc5648438
2021-01-20Merge "[COMMON] Uses new generator for repos and images"Krzysztof Opasiak3-2/+3
2021-01-20Merge "[AAF] Externalizes init data out from aaf-cass"Krzysztof Opasiak24-14/+1663
2021-01-20[PORTAL] Fix ONAP Portal redirect to internal portmarcinrzepeckiwroc1-1/+1
Incorrect redirection to the login page. Unlogged user after entering to https://portal.api.simpledemo.onap.org:30225/ONAPPORTAL/app/applicationsHome should be redirected to https://portal.api.simpledemo.onap.org:30225/ONAPPORTAL/login.htm instead of http://portal.api.simpledemo.onap.org:8989/ONAPPORTAL/login.htm Issue-ID: PORTAL-1055 Signed-off-by: Marcin Rzepecki <marcin.rzepecki@nokia.com> Change-Id: I48673fa45aea66f664e9c22107fcaef00305264a
2021-01-20Merge "[SDNC] Move ODL persistent data to pvc"Sylvain Desbureaux4-48/+106
2021-01-20Merge "[SDNC] Bump versions for Guilin mtce release 1"Sylvain Desbureaux5-5/+5
2021-01-19[COMMON][CERTS] Use sh to onboard custom certsSylvain Desbureaux2-7/+13
Today, onboarding custom certificates relies on `bash`. But image used for that doesn't have bash. Therefore, we need to use `sh` in order to onboard the certs. Issue-ID: OOM-2666 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ia8087bd9484a013ac76044681059f634a4e45eb8
2021-01-19Merge "[OOF] Fix typo in license headers"Sylvain Desbureaux4-78/+79
2021-01-19[AAI] Templatize MSB servicesSylvain Desbureaux5-1676/+84
Instead of "hardcoding" all services, let's generate them with two values and shrink a little bit template. It also simplify the reading of the template. Issue-ID: OOM-2664 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I2a5f181fac93f34e074998aeaf82489f8305de1f
2021-01-18[COMMON][MARIADB] Force Galera Node addressSylvain Desbureaux1-0/+6
Bitnami init script can automatically choose the node address (which is the IP address of the container). Unfortunately, this doesn't work when on dual stack as both IP addresses with a space are given (see https://github.com/bitnami/charts/issues/4077). This patch force the IP address so we can get rid of this issue Issue-ID: OOM-2661 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I5dd2147df1932b1f0fdde7c2b55585cff45bab68
2021-01-18Merge "[DCAEGEN2] Update bootstrap to version 2.2.4"Sylvain Desbureaux1-1/+1
2021-01-18[OOF] Fix typo in license headerskrishnaa964-78/+79
Issue-ID: OPTFRA-886 Signed-off-by: Krishna Moorthy <krishna.moorthy6@wipro.com> Change-Id: I1e6475c90546a94051015732dc9730dc21cc591f
2021-01-18[COMMON] Uses new generator for repos and imagesSylvain Desbureaux3-2/+3
This commit makes common template to use the new generator for repositories and images. Issue-ID: OOM-2364 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I35123faf99ae3bffea68bc39776f320c4168b45f