aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes
AgeCommit message (Collapse)AuthorFilesLines
2020-11-25[MSB] Make consul run as non-rootKrzysztof Opasiak4-0/+149
Start whole consul container as non-root and ensure that both dumb-init and consul are able to start and run as non-root. Issue-ID: REQ-362 Change-Id: If5a737953122cc6cd22b8d43ac603b40f4b22727 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> (cherry picked from commit bc6a6674f749efc1693c4b6bd58a27f8c37a0ae0)
2020-11-25Merge "[CCSDK/CDS] Bump CDS version for final Guilin release" into guilinSylvain Desbureaux5-5/+5
2020-11-24Merge "[SDC] Bring back sdc onboarding volume mount permissions" into guilinKrzysztof Opasiak1-0/+21
2020-11-24[CCSDK/CDS] Bump CDS version for final Guilin releaseDan Timoney5-5/+5
This installs version 1.0.2 of the CCSDK CDS docker containers, which contains the following fix: CCSDK-2980: BlueprintWebClientService should not encode already encoded uri CCSDK-2914: CDS Blueprocessor certificate issue with AAI ' Issue-ID: CCSDK-2973 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I4aa15faa96dbb029135749a6888b431c2ee52d3a (cherry picked from commit c100dc5c0a66c83474468161018b5e30b0e1015a)
2020-11-23[CCSDK] Make a1policymanagement react on ConfigMap updatesKonrad Bańka5-3/+114
Updated Deployment spec to template ConfigMap files in runtime allowing live reaction of application to config changes. Provided Configmaps with scripts to handle monitoring configmap-provided files. Updated envsubst to explicitly point to downloaded version. Issue-ID: CCSDK-2958 Signed-off-by: Konrad Bańka <k.banka@samsung.com> Change-Id: I22e18f2838c0956f899cb9fa96d9fd862e6c6942 (cherry picked from commit 52c38b98b8410de74e545f5cd7f79c2d959bc81a)
2020-11-22[SDC] Bring back sdc onboarding volume mount permissionsKrzysztof Kuzmicki1-0/+21
Set the permissions of files in the sdc onboarding backend persistent volume for package certs to enable access by the process in the pod which now runs as non-root user (since SDC-2798) Withdrawal of part of the change I2c895a8d8e7c25e11a2a1e997735d2e7b2d258aa Commit https://gerrit.onap.org/r/c/oom/+/111513 Signed-off-by: Krzysztof Kuzmicki <krzysztof.kuzmicki@nokia.com> Issue-ID: SDC-3385 Change-Id: I627922f80728ebf1e42a0c9b39d0e95fa3f7ec7c
2020-11-20Merge "[DCAE] VES-http input override" into guilinSylvain Desbureaux1-3/+3
2020-11-20Merge "[SDC] Release 1.7.3 images" into guilinSylvain Desbureaux5-7/+7
2020-11-20Merge "[CLAMP] Update BE/FE images to move to 5.1.5" into guilinSylvain Desbureaux2-2/+2
2020-11-20Merge "[Modeling] Update image of etsicatalog" into guilinSylvain Desbureaux1-1/+1
2020-11-20Merge "[DCAE] Revise bootstrap and vescollector version" into guilinSylvain Desbureaux1-2/+2
2020-11-19[POLICY] Use apex 2.4.4 and drools 1.7.5Jim Hahn3-2/+3
Update version numbers for some Policy images. Fixed the following issues: - update default branch to guilin - match prov-status with both "ACTIVE" and "active" in drools-apps - close stdin & stdout in apex-pdp CLI editor - add stringify method to apex-pdp execution context - set dmaap fetch timeout for apex-pdp Issue-ID: POLICY-2893 Change-Id: I30017d6f2f01034b2f8721c800925dcab79672b3 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-11-19[DCAE] VES-http input overridevv770d1-3/+3
Service name change to avoid conflict with VES-TLS Change-Id: I68cb87de1e1707fe8d7b37ae361baa95fd5e6f64 Signed-off-by: vv770d <vv770d@att.com> Issue-ID: DCAEGEN2-2520 (cherry picked from commit a778de366ed274e43348f3dc4347d4ee5bb95ea9)
2020-11-19[DCAE] Revise bootstrap and vescollector versionvv770d1-2/+2
k8s-bootstrap-container 2.1.8 includes blueprint revision for below components Son-handler 2.1.2 Holmes 1.2.9 Slice-Analysis 1.0.1 Pm-Maper 1.4.2 VesCollector 1.7.9 Change-Id: Id2a4f494d68ae1aea0708f5bfb799c1606fb8e57 Signed-off-by: vv770d <vv770d@att.com> Issue-ID: DCAEGEN2-2495 Issue-ID: DCAEGEN2-2500 Issue-ID: HOLMES-369 Issue-ID: HOLMES-368 Issue-ID: DCAEGEN2-2485 Issue-ID: DCAEGEN2-2480 Signed-off-by: vv770d <vv770d@att.com> (cherry picked from commit c6dcdee798b4580fc006f3b2b4db6d163f79b12f)
2020-11-19[Modeling] Update image of etsicatalogdyh1-1/+1
Change-Id: Ib697ce6b9e1e7f2abb819bc718b1cb855b0e7fdb Issue-ID: MODELING-448 Signed-off-by: dyh <dengyuanhong@chinamobile.com> (cherry picked from commit 81e83aed0461044ef8c0d2de7d483e3966ffd403)
2020-11-19Merge "Revert "[CONSUL] Make consul run as non-root"" into guilinKrzysztof Opasiak2-35/+9
2020-11-19Merge "[OOF] Bump OSDF to 3.0.2" into guilinSylvain Desbureaux2-2/+5
2020-11-18Revert "[CONSUL] Make consul run as non-root"Daniel Milaszkiewicz2-35/+9
Revert submission 114556 Reason for revert: Bug - OOM-2630 Reverted Changes: Ic1302ac28:[CONSUL] Make consul server run as non-root I43584b7f0:[CONSUL] Make consul run as non-root Issue-ID: OOM-2630 Change-Id: Ie80d50417418d182f3db54d103bac50dde0c6775 Signed-off-by: Daniel Milaszkiewicz <daniel.milaszkiewicz@nokia.com> (cherry picked from commit 55913091b7deb8f73c026c53826608c8f7b51f17)
2020-11-18[CLAMP] Update BE/FE images to move to 5.1.5sebdet2-2/+2
Update FE/BE to latest clamp images Issue-ID: CLAMP-978 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: Iacd1c050c6d9f7b1aa55edfb11127e6858e00ac6 (cherry picked from commit f0d27cb7e6c5a0722509d2069aa603002d763d9e)
2020-11-18[SO] Bump container versions to 1.7.10Kalkere Ramesh, Sharan10-10/+10
SO 1.7.10 containers are release containers so-bpmn-infra: 1.7.10 so-catalog-db-adapter: 1.7.10 so-monitoring: 1.7.10 so/nssmf-adapter: 1.7.10 so/openstack-adapter: 1.7.10 so/request-db-adapter: 1.7.10 so/sdc-controller: 1.7.10 so/sdnc-adapter: 1.7.10 so/vnfm-adapter:1.7.10 so/api-handler-infra:1.7.10 Issue-ID: SO-3346 Change-Id: I450734f8b4704c767c330deff8a830ae84ba3d2c Signed-off-by: Kalkere Ramesh, Sharan <sk720x@att.com> (cherry picked from commit df29b1e09931b7e0f4c7cd4bfb363a707a201deb)
2020-11-18[OOF] Bump OSDF to 3.0.2krishnaa962-2/+5
Issue-ID: OPTFRA-871 Signed-off-by: Krishna Moorthy <krishna.moorthy6@wipro.com> Change-Id: I64b7e6dbacbc627e55d28dafc5254cbeac74b821 (cherry picked from commit bdad855eac00576618dc1533fabbd131f5a1afcf)
2020-11-17[SDC] Release 1.7.3 imagessebdet4-7/+7
Release the 1.7.3 images for all sdc components Issue-ID: SDC-3364 Signed-off-by: sebdet <sebastien.determe@intl.att.com> Change-Id: Icd873c8d5a2147e62938bf7fdd6da7b60bcf3c59
2020-11-16Update git submodulesBrian Freeman1-0/+0
* Update kubernetes/robot from branch 'master' to 4e61a1c981b7e00846c0ca2857cd32be027294e1 - Update script and artifact default value Issue-ID: INT-1779 Change-Id: Iaa41b42a091b182a30d3b1215ad22555e78bfc6c Signed-off-by: Brian Freeman <bf1936@att.com>
2020-11-13[DCAE] Revise bootstrap and vescollector versionvv770d1-2/+2
k8s-bootstrap-container 2.1.8 includes blueprint revision for below components Son-handler 2.1.2 Holmes 1.2.9 Slice-Analysis 1.0.1 Pm-Maper 1.4.2 VesCollector 1.7.9 Change-Id: Id2a4f494d68ae1aea0708f5bfb799c1606fb8e57 Signed-off-by: vv770d <vv770d@att.com> Issue-ID: DCAEGEN2-2495 Issue-ID: DCAEGEN2-2500 Issue-ID: HOLMES-369 Issue-ID: HOLMES-368 Issue-ID: DCAEGEN2-2485 Issue-ID: DCAEGEN2-2480 Signed-off-by: vv770d <vv770d@att.com>
2020-11-13Merge "[SO] Register Etsi Nfvo in MSB"Sylvain Desbureaux1-2/+2
2020-11-13Merge "[CCSDK] Fix for naming service"Sylvain Desbureaux1-1/+1
2020-11-13Merge "[Tree-wide] Update helm repo after build"Sylvain Desbureaux1-5/+14
2020-11-13Merge "[SO] Bump container versions to 1.7.9 "Sylvain Desbureaux10-10/+10
2020-11-12[CCSDK] Fix for naming serviceDan Timoney1-1/+1
Updated version of network-name-gen microservice to 1.0.2, which contains fix for database initialization error (CCSDK-2978). Issue-ID: CCSDK-2978 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: I25fb44188086181714cfdd3b864ad69bad8f28bf
2020-11-12[SO] Bump container versions to 1.7.9 seshukm10-10/+10
SO 1.7.9 containers are release containers so-bpmn-infra: 1.7.9 so-catalog-db-adapter: 1.7.9 so-monitoring: 1.7.9 so/nssmf-adapter: 1.7.9 so/openstack-adapter: 1.7.9 so/request-db-adapter: 1.7.9 so/sdc-controller: 1.7.9 so/sdnc-adapter: 1.7.9 so/vnfm-adapter:1.7.9 so/api-handler-infra:1.7.9 Issue-ID: SO-3216 Signed-off-by: seshukm <seshu.kumar.m@huawei.com> Change-Id: I14d3347225dc1a6c072dbb2e56e5bb985867f25a
2020-11-10[SO] Register Etsi Nfvo in MSBAndrewLamb1-2/+2
Small change so that NFVO registers in MSB correctly Issue-ID: SO-3225 Change-Id: If734b1455cb5a9a31ec64f2df92ddd8239004bea Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
2020-11-09Merge "[PORTAL] Update image versions"Sylvain Desbureaux4-5/+5
2020-11-06Merge "[SDNC][CCSDK] Update SDNC and CCSDK image versions for Guilin RC1"Krzysztof Opasiak10-10/+10
2020-11-06Merge "[SO] Disable SO-VE-VNFM per default"Krzysztof Opasiak1-1/+1
2020-11-06Merge "[DCAE]Fixed MSB Registration Bugs"Krzysztof Opasiak1-2/+2
2020-11-06[Tree-wide] Update helm repo after buildKrzysztof Opasiak1-5/+14
Helm 3 no longer supports creation of a local repo as helm 2 did. Now we need to use external component named chartmuseum to provide us repo for helm charts. When we start chartmuseum for the first time repo is empty and during our build process we successively built helm charts to it. As a last chart we always build our umbrella chart called onap and also push it to repo. Unfortunately our local helm cache is unaware that this new chart is now available untill we push sth else or execute helm repo update which leads to really cryptic deployment failures. To mitigate this issue let's add a new target helm-repo-update which will be executed right after onap and just make sure that our local cache is up to date. WARNING: If you are using helm v3 and you build a single component for the first time on this machine or version of chart for the component that you are building has just changed recently it's not enough to run: $ make <component> You need to also run: $ make helm-repo-update after successful build of your component. Issue-ID: OOM-2562 Change-Id: I77020a3fb5666106b86c6a76477a57d9dd5af047 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-11-06Update git submoduleswreehil1-0/+0
* Update kubernetes/aai from branch 'master' to 9eef36ac7a12292e749104dd5a7fa17e35bdfecc - [AAI] Bump Schema Service Use latest schema service version for helping the ccvpn network slicing use case with an edge multiplicity issue. Issue-ID: AAI-3212 Signed-off-by: wreehil <wr148d@att.com> Change-Id: I878e0c1f7b664fc97adf3256e97b79e351828ee0
2020-11-06Merge "Revert "[SO] helm chart for cnf-adapter""Krzysztof Opasiak13-582/+56
2020-11-06Merge "[SO] SOL003 adapter,bpmn-infra, nfvo HTTPs to HTTP"Sylvain Desbureaux3-12/+4
2020-11-06Update git submodulesMorgan Richomme1-0/+0
* Update kubernetes/robot from branch 'master' to f3afcb0e60f54840d386084ee3ee2e364b2650f1 - Merge "[SO] SOL003 adapter,bpmn-infra, nfvo HTTPs to HTTP" - [SO] SOL003 adapter,bpmn-infra, nfvo HTTPs to HTTP Removing https communication as SO SOL003 Adapter has used its own keystore for communications with bpmn-infra and etsi-nfvo with hardcoded password.Common way of certicates will break existing communication so going for HTTP path due to time constraint . Will revisit security in Honululu as part of https://jira.onap.org/browse/SO-3350 epic. Change-Id: I75acd05feb4b244892261cf9c95d33a78dbe687d Issue-ID: SO-3349 Signed-off-by: Mukesh <mukeshsharma@est.tech>
2020-11-06Merge "[SDC] Re-enable the cert storage"Sylvain Desbureaux3-0/+86
2020-11-06Merge "[CLI] Set Release version of Guilin"Sylvain Desbureaux1-1/+1
2020-11-06Merge "[SDNC] fix broken sdnc-web deployment"Sylvain Desbureaux3-6/+22
2020-11-06Update git submodulesmrichomme1-0/+0
* Update kubernetes/robot from branch 'master' to 3b9adc67e6ae2a65480d80dc50cee88b674604a3 - [Testsuite] bump version 1.7.2 for Guilin RC1 Issue-ID: INT-1768 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I533da0afac4f853c6ef018f978f05df00e05087e
2020-11-05Merge "[SDNC] Change sdnc to single startup script solution"Sylvain Desbureaux4-508/+2
2020-11-05Merge "[Tree-wide] Remove pnda charts from OOM"Sylvain Desbureaux20-933/+0
2020-11-05[SO] SOL003 adapter,bpmn-infra, nfvo HTTPs to HTTPMukeshKumar3-12/+4
Removing https communication as SO SOL003 Adapter has used its own keystore for communications with bpmn-infra and etsi-nfvo with hardcoded password.Common way of certicates will break existing communication so going for HTTP path due to time constraint . Will revisit security in Honululu as part of https://jira.onap.org/browse/SO-3350 epic. Change-Id: I521d9be9007f229919fb5d88f476a692faae10e1 Issue-ID: SO-3349 Signed-off-by: Mukesh <mukeshsharma@est.tech>
2020-11-05Revert "[SO] helm chart for cnf-adapter"Sylvain Desbureaux13-582/+56
This reverts commit a2145f7fa5a4bfadf6782333a879e75730da4f8e. Reason for revert: it seems to have weird consequences when bumping so version Issue-ID: SO-3164 Change-Id: Ibf869be9e9dcba915a738605af6d4f823742fbea Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
2020-11-05Merge "[SO] Disable SO-APPC per default"Krzysztof Opasiak1-1/+1
2020-11-05Merge "[SO] don't use SO repositoryOverride for soHelper"Krzysztof Opasiak1-1/+1