aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes
AgeCommit message (Collapse)AuthorFilesLines
2020-05-14[ESR] Force esr-server to run as non-rootKrzysztof Opasiak1-0/+29
Use securityContext to run esr-server as a non-root user. Unfortunately esr-server docker is built in a way that doesn't allow use to just change the user and continue using it. We need to make sure that conf dir is writable for this user because this docker modifies its configuration files from docker_entrypoint.sh Issue-ID: AAI-2896 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: If6eba45c9571753fa9e5ce4f386c2e391788c734
2020-05-14[ESR] Force esr-gui to run as non-rootKrzysztof Opasiak1-2/+31
Use securityContext to run esr-gui as a non-root user. Unfortunately esr-gui docker is built in a way that doesn't allow use to just change the user and continue using it. We need to copy tomcat directory to volume to make sure that tomcat is able to create additional directories after it starts. Issue-ID: AAI-2896 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Iae060ea691ce492e8ccb2d540a48c085c0fd66ae
2020-05-14[DMAAP] Use common aaf template in dmaap-bcKrzysztof Opasiak6-109/+18
Instead of copy-pasting code around aaf_agent usage let's use a common template that automates this. Issue-ID: AAF-1134 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I42bb5a8840701dfd99488df9913a5ffd01b17f64
2020-05-14[COMMON] Fix certInitializerKrzysztof Opasiak1-5/+5
By mistage aaf-agent-certs volume was created only if aaf_add_config option was set. This is incorrect as it should be created always. Issue-ID: AAF-1134 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I6172d2cbb781db4a26e09b7c4c324e985978b31e
2020-05-13Merge "[POLICY] Remove hardcoded credentials from policy-distribution"Krzysztof Opasiak4-9/+101
2020-05-13Merge "[POLICY] Remove hardcoded credentials from policy-apex-pdp"Krzysztof Opasiak5-4/+64
2020-05-13Merge "[AAF] SSHSM testCA request/values are too low"Krzysztof Opasiak1-2/+2
2020-05-13Merge "[DCAEGEN2] Remove Lost+Found in PVC"Krzysztof Opasiak2-0/+15
2020-05-13Merge "Fix SDNC DMAAP consumer properties in HELM charts"Sylvain Desbureaux3-7/+7
2020-05-13[DCAEGEN2] Remove Lost+Found in PVCSylvain Desbureaux2-0/+15
When using dynamic storage, "Lost+Found" may be present. Cloudify init script doesn't work when it's the case, so we need to remove it. Issue-ID: OOM-1227 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie298c55aa997a441dde0bd45c452f41eb77ad495
2020-05-13[AAF] SSHSM testCA request/values are too lowSylvain Desbureaux1-2/+2
When using requests/limits, testCA jobs gets OOMKIilled. Giving more RAM in order to make it work. Issue-ID: OOM-2408 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I221cba103a939b77009aa8c04da2425ab8eeae82
2020-05-12Fix SDNC DMAAP consumer properties in HELM chartsSandeep Shah3-7/+7
Minor configuration changes required in 3 SDNC DMAAP listener/consumer properties Issue-ID: OOM-2400 Signed-off-by: SandeepLinux <Sandeep.Shah@ibm.com> Change-Id: I640ee1fd2d9b764c8ac406b30cb775ea6ae2d4e8
2020-05-12Merge "Fix internal uri to modifyConfig"Sylvain Desbureaux1-1/+1
2020-05-12Merge "[Tree-wide] Make chart build process predictible"Morgan Richomme33-22/+72
2020-05-12Merge "[COMMON] Override truststore in aaf_agent image"Sylvain Desbureaux4-1/+2235
2020-05-12Merge "[DMAAP] Use common secret template for postgres creds"Sylvain Desbureaux4-6/+45
2020-05-11Merge "Revise dcae bootstrap version"Krzysztof Opasiak1-1/+1
2020-05-11Update git submodulesSylvain Desbureaux1-0/+0
* Update kubernetes/aai from branch 'master' to d687fd0c9efe31e93287da11e3e390984a5fb6ce - [AAI] Fix Ingress configuration Set SSL to redirect when backend uses HTTPS. Issue-ID: OOM-2171 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Id9e7cf211f5c180ee5901463a63535892b221d84
2020-05-11Merge "[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt release"Sylvain Desbureaux1-0/+1
2020-05-11[POLICY] Remove hardcoded credentials from policy-apex-pdpDominik Mizyn5-4/+64
This patch remove hardcoded healthcheck credentials and trustStorePassword from policy-apex-pdp. Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: Ie8800830919479b87d7a71dfafe934bb95839ede
2020-05-11Update git submodulesLucjan Bryndza1-0/+0
* Update kubernetes/robot from branch 'master' to 1bc31c7d76408bdf2267bf72bf3b1b1e18e2367f - Change ingress base hostname Change ingress base hostname to recommended value Issue-ID: OOM-2391 Change-Id: Ica5ab275ed3eac2ec6f1669fc9ca32c29a2b12e6
2020-05-11Update git submodulesMorgan Richomme1-0/+0
* Update kubernetes/robot from branch 'master' to c3148590e3da989daebfba6e721e7a53706dda87 - Merge "Host and port template for ingress setup" - Host and port template for ingress setup Depending on the ingress robot configuration host and port template should choose ingress host and port or direct cluster host and port + alternarive ingress hostname in config file Change-Id: I04c13657f5c5cf8b5f5373897bdc551dc2efdf36 Issue-ID: OOM-2341 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com>
2020-05-11Merge "Add Helm charts for CDS py-executor"Sylvain Desbureaux6-0/+276
2020-05-11[DMAAP-DR] Bug fix DCAEGEN2-2217 for Frankfurt releaseefiacor1-0/+1
Change-Id: I8b370e77407a3497d2fe46b207668dd234a24a80 Signed-off-by: efiacor <fiachra.corcoran@est.tech> Issue-ID: DCAEGEN2-2217
2020-05-09Merge "[POLICY] put base64 password in xacml.properties"Krzysztof Opasiak3-8/+7
2020-05-08[POLICY] put base64 password in xacml.propertiesjhh3-8/+7
In addition, remove heap mem sizing for drools too as it is properly sized according to container allocated resources. Issue-ID: POLICY-2547 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I4e1e5eaef1cad924ac4c86e5248230aef1fad7d8 Signed-off-by: jhh <jorge.hernandez-herrero@att.com>
2020-05-08Merge "Set multicloud-k8s image to 0.6.0"Krzysztof Opasiak1-1/+1
2020-05-08[Tree-wide] Make chart build process predictibleKrzysztof Opasiak33-22/+72
ONAP is built using plain makefile rules. List of targets is generated using wildcard function. Based on make changelog: http://git.savannah.gnu.org/cgit/make.git/tree/NEWS since version 3.82 wildcard is not going to sort its results which means that charts are being processed in an arbitrary order which may lead to build failure due to missing dependencies. Since version 4.3 make started sorting the wildcard results once again which may lead to build issues. To avoid that and make our builds predictible independently from Makefile version let's make sure that we always sort wildcard results. Addinally let's use 'file://' instead of '@local' for charts in common to resolve dependencies between them. Issue-ID: OOM-2399 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Iacb02dcdbd577ce0e9ca1078dd0586d296ec9375
2020-05-08Merge "[VNFSDK] Use common secret template for postgres credentials"Morgan Richomme6-9/+104
2020-05-08[POLICY] Remove hardcoded credentials from policy-distributionDominik Mizyn4-9/+101
This patch remove hardcoded healthcheck credentials from policy-distribution. Issue-ID: OOM-2342 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I7c71fcceab030bd7858e8de9fe3f58451ac505d6 [Fix init container] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-05-08Update git submodulesMorgan Richomme1-0/+0
* Update kubernetes/robot from branch 'master' to 91827be0924c4db10687474ed5db2f7c63f6568a - Merge "[ROBOT] Fix Ingress configuration" - [ROBOT] Fix Ingress configuration Set SSL to redirect as backend uses HTTPS. Issue-ID: OOM-2186 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I94cf20a016f1d1face44037d9912de774a5f338c
2020-05-08Set multicloud-k8s image to 0.6.0Eric Multanen1-1/+1
Update image for Frankfurt release. Change-Id: Idc26b081694b8d7270fea81a30d595d41b6b9240 Issue-ID: OOM-2397 Signed-off-by: Eric Multanen <eric.w.multanen@intel.com>
2020-05-08Merge "Update Docker Release version"Krzysztof Opasiak2-2/+2
2020-05-08Merge "Fix name convention issue (SDC-WORKFLOW)"Krzysztof Opasiak2-3/+3
2020-05-07Merge "Use SDC 1.6.5 containers"Krzysztof Opasiak4-7/+7
2020-05-07Update Docker Release versionstatta2-2/+2
Modify Update DB script. Issue-ID: PORTAL-900, PORTAL-894 Signed-off-by: statta <statta@research.att.com> Change-Id: I224826ef027e38d88f035fcef64969137154fd4d
2020-05-07Add Helm charts for CDS py-executorMarek Szwalkiewicz6-0/+276
Chart for deployment pod and service of py-executor. This chart covers also artifact manager grpc server. Issue-ID: OOM-2256 Change-Id: Iaf7c569ccaea4062bf16abe3c314a1b24940d4c5 Signed-off-by: Marek Szwalkiewicz <marek.szwalkiewicz@external.t-mobile.pl>
2020-05-07Fix internal uri to modifyConfigBrian Freeman1-1/+1
Issue-ID: APPC-1876 Change-Id: If958102c146b5a7b2724e5291ca0d86870ce7869 Signed-off-by: Brian Freeman <bf1936@att.com>
2020-05-07Update git submodulesMarcin Przybysz1-0/+0
* Update kubernetes/robot from branch 'master' to 64233373f3e5699d3cc7b154cedeb7d70826a667 - Merge "ROBOT e2e test cases improvements for csar/zip tosca package validation in VNFSDK and SDC Onbarding fix in scrip required for Frankfurt" - ROBOT e2e test cases improvements for csar/zip tosca package validation in VNFSDK and SDC Onbarding fix in scrip required for Frankfurt Issue-ID: INT-1240 Signed-off-by: Krzysztof Kuzmicki <krzysztof.kuzmicki@nokia.com> Change-Id: I08584c00eaaa7cb84bcb055d1f7eee41d95d6019
2020-05-07Merge "[AAF] v1.16+ compatible templates"Krzysztof Opasiak50-1872/+656
2020-05-07Merge "[SDNC] Use common aaf template in SDNC"Sylvain Desbureaux3-60/+39
2020-05-07Merge "[COMMON] Add new template for obtaining certificate"Sylvain Desbureaux9-25/+270
2020-05-06[COMMON] Override truststore in aaf_agent imageKrzysztof Opasiak4-1/+2235
aaf_agent image currently contains hardcoded truststores in order to be able to connect to certman to retrieve certificate for given component. The goal is to remove hardcoded truststore from aaf_agent immage but first we need to be sure that all its users are able to provide the truststore to the pod as a configmap. Issue-ID: AAF-1134 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ibe9de6ad7264c05aeca2af858918fc2b4d3a772b
2020-05-06Use RC1 version of CCSDK artifactsDan Timoney10-10/+10
Update helm charts to use RC1 version of CCSDK dockers Issue-ID: CCSDK-2358 Signed-off-by: Dan Timoney <dtimoney@att.com> Change-Id: Id247bdf3442084d724b84ed752956d08868c7ddf
2020-05-06Use SDC 1.6.5 containersOfir Sonsino4-7/+7
Change-Id: I0e1e7ee475b57179b8580b610d5b74cdecd59859 Issue-ID: SDC-2942 Signed-off-by: Ofir Sonsino <os0695@intl.att.com>
2020-05-06[COMMON] Add new template for obtaining certificateKrzysztof Opasiak9-25/+270
Add new template that can be used to obtain certificate by component. Make also a PoC with NBI. Strongly based on aaf-config template. Issue-ID: AAF-1134 Change-Id: I10cb2a7b36a8dc436be337518cc15431aabbbc5d Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-05-06Revise dcae bootstrap versionVijay Venkatesh Kumar1-1/+1
New bootstrap released for Son-handler blueprint updates Change-Id: I3bf4d177a6827ff6afe36a0d2130ccdc797ac099 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com> Issue-ID: DCAEGEN2-2216 Issue-ID: DCAEGEN2-2200
2020-05-06Merge "[VNFSDK] Fix Ingress configuration"Krzysztof Opasiak1-2/+2
2020-05-06Merge "[VID] Fix Ingress configuration"Krzysztof Opasiak1-2/+2
2020-05-06Merge "[UUI] Fix Ingress configuration"Krzysztof Opasiak2-2/+2