aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes
AgeCommit message (Collapse)AuthorFilesLines
2020-03-02[Consul] Remove nodeport on UISylvain Desbureaux1-1/+1
consul ui is on http mode. As nobody really looks at it, let's remove the nodeport and set it as ClusterIP. Issue-ID: OJSI-168 Issue-ID: OJSI-202 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: If114dac59c4fc919a0ab879ef7c5c2478f6a16d2
2020-03-02Merge "[SDNC] Add missing inclusion of common secret template"Krzysztof Opasiak1-0/+15
2020-02-29Merge "Added blueprint"Krzysztof Opasiak2-3/+39
2020-02-29Merge "tcagen2 prep + rls version updates"Krzysztof Opasiak4-3/+44
2020-02-29Merge "dcae sec updates for dashboard and inventory"Krzysztof Opasiak7-6/+117
2020-02-28Update git submodulesVenkata Harish Kajur1-0/+0
* Update kubernetes/aai from branch 'master' to ac0ea8aa12226ac95683838e92d22928eb221630 - Merge "Fix MSB config section" - Fix MSB config section Issue-ID: AAI-2809 Signed-off-by: Jimmy Forsyth <jf2512@att.com> Change-Id: I53bb71ce9d8989ee3d481bcf7f2db606455df1d3
2020-02-28tcagen2 prep + rls version updatesVijay Venkatesh Kumar4-3/+44
common mongo chart and input template for tca-gen2 VEScollector rls version for 7.1.1 support Heartbeat rls version for non root support Change-Id: Iea9c640411841553d79cee2b21447b87e2cd2a90 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com> Issue-ID: DCAEGEN2-1891 Issue-ID: DCAEGEN2-1907 Issue-ID: DCAEGEN2-2071 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
2020-02-28Added blueprintPawel2-3/+39
Added blueprint (for ves secure) and update blueprint (for ves insecure) Issue-ID: DCAEGEN2-1777 Signed-off-by: Pawel <pawel.kasperkiewicz@nokia.com> Change-Id: Iaf78187b8196944ecafcef19b1efec855a4d8922
2020-02-28Adding aaf-service to readiness check on dmaap-dr-provefiacor1-0/+2
Change-Id: I48313446853d9175ec41f288350bedbf6190c30c Signed-off-by: efiacor <fiachra.corcoran@est.tech> Issue-ID: DMAAP-1388
2020-02-27Change MsbAddress PortHePeng2-2/+2
Issue-ID: AAI-2734 Change-Id: I04b77796e51afa94832454e4316d415724230124 Signed-off-by: HePeng <he.peng6@zte.com.cn> [Remove space that breaks everything] Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-02-27dcae sec updates for dashboard and inventoryVijay Venkatesh Kumar7-6/+117
- Dashboard switched to https + non-root + portal sdk 2.6.0 - InventoryAPI keystore pwd read from file and filebeat support Change-Id: I40d2f6a8414f0a8fc8ed7b60ed0118e69cdbb2fd Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com> Issue-ID: DCAEGEN2-1592 Issue-ID: OJSI-159 Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
2020-02-27Merge "Temporarily remove the dependency on Cassandra"Brian Freeman2-0/+158
2020-02-27Merge "Cassandra 3 Upgrade"Krzysztof Opasiak27-827/+37
2020-02-27Added an SO K8S POD for SOL002 (Ve-Vnfm-Adapter)Piotr Borelowski6-0/+226
Ve-Vnfm-Adapter POD Issue-ID: OOM-2307 Signed-off-by: Piotr Borelowski <p.borelowski@partner.samsung.com> Change-Id: I2bb95b1867338964e3f3dce74e50ac3e11231bcd
2020-02-26Merge "[COMMON] Allow to choose between nodePortPrefix and nodePortPrefixExt"Borislav Glozman1-1/+4
2020-02-26Merge "Drop support for postgres-legacy common chart"Borislav Glozman19-1458/+2
2020-02-26Cassandra 3 Upgradeshrek200027-827/+37
Move OOM to use SDC cassandra 3 Issue-ID: SDC-2595 Signed-off-by: shrek2000 <oren.kleks@amdocs.com> Change-Id: Ie58f3420cad70fbed7931656a98951e69a4b7b4b Signed-off-by: shrek2000 <oren.kleks@amdocs.com>
2020-02-26SECCOM HTTPS communication vs. HTTP(TSC must have)hekeguang2-4/+5
Issue-ID: USECASEUI-356 Change-Id: Ibdaae24155992c0132254669c6173488d65227d6 Signed-off-by: hekeguang <hekeguang@chinamobile.com>
2020-02-24[SDNC] Add missing inclusion of common secret templateKrzysztof Opasiak1-0/+15
Issue-ID: OOM-2309 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I6f08d537036576122fc2e7d941695434eaaf854e
2020-02-24Merge "[DMaaP DR] Adding log level config to charts"Krzysztof Opasiak4-2/+9
2020-02-24[COMMON] Allow to choose between nodePortPrefix and nodePortPrefixExtKrzysztof Opasiak1-1/+4
Add the ability to specify whether a nodePortPrefix or nodePortPrefixExt should be used while defining a port using common service template. Now you can specify: ports: - name: http port: 9098 nodePort: "09" prefix: nodePortPrefixExt Issue-ID: OOM-1971 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ied78584e5b1c8f479ca180890df67ad4dee3501a
2020-02-22Drop support for postgres-legacy common chartKrzysztof Opasiak19-1458/+2
There is no need to maintain two postgres charts if all components can work with the newest version so let's remove the legacy one. Issue-ID: OOM-2310 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I8b399902e37fdec7e55552e7972daaf1c0c74cfe
2020-02-21Merge "Release 1.5.1 container"Krzysztof Opasiak1-1/+1
2020-02-21Merge "[SDNC] Use common secret template in dmaap-listener"Krzysztof Opasiak6-17/+85
2020-02-21Merge "[SDNC] Use common secret template in ansible-server"Krzysztof Opasiak4-21/+107
2020-02-21Merge "[SDNC] Use common secret template in ueb listener"Krzysztof Opasiak5-15/+113
2020-02-21Release 1.5.1 containerjimmy1-1/+1
Issue-ID: AAI-2734 Signed-off-by: Jimmy Forsyth <jf2512@att.com> Change-Id: I7ae419b70f3349e6d0d5007132cfc46ec3810c58
2020-02-21Merge "move to OpenDistro"Krzysztof Opasiak14-317/+108
2020-02-21Add Makefile option to skip lining of helm chartsKrzysztof Opasiak1-1/+7
For some reason after introducing our awesome templates to ONAP make command can take now quite a lot of time, which sometimes causes out CI jobs to fail. Command that takes so much time is helm lint. This patch adds a Makefile option that allows you to skip linting of helm charts and just build them. Example: make SKIP_LINT=TRUE Default behavior stays unchanged. Issue-ID: OOM-2055 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ic50bad0cc82892e1daecc5761d6144d788a79d9f
2020-02-21move to OpenDistroosgn422w14-317/+108
move dashboard to Opendistro and certificate update Issue-ID: CLAMP-483 Change-Id: Ibaba1d517c13adeab611ab23749fb16295081372 Signed-off-by: osgn422w <gervais-martial.ngueko@intl.att.com>
2020-02-21Merge "update msbPort"Sylvain Desbureaux1-1/+1
2020-02-21[SDNC] Use common secret template in dmaap-listenerKrzysztof Opasiak6-17/+85
Whole SDNC strongly depends on the assumption that it is using a common mariadb-galera instance and that root password is secret password. Also user and password to sdnc DB is hardcoded. Let's start working on removing this assumption and component by component add support for local and shared mariadb instance without hardcoding any passwords to the database. In this patch all passwords are still hardcoded in the helm chart to not break other parts of SDNC. Those values will be removed in a final patch. Issue-ID: OOM-2309 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I3280f9d7ff4933d4e50b94ca248676ed9aa6688d
2020-02-21[SDNC] Use common secret template in ansible-serverKrzysztof Opasiak4-21/+107
Whole SDNC strongly depends on the assumption that it is using a common mariadb-galera instance and that root password is secret password. Also user and password to sdnc DB is hardcoded. Let's start working on removing this assumption and component by component add support for local and shared mariadb instance without hardcoding any passwords to the database. In this patch all passwords are still hardcoded in the helm chart to not break other parts of SDNC. Those values will be removed in a final patch. Issue-ID: OOM-2309 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Idb460e72301dd63082d7890d34fea923df3ac426
2020-02-20[SDNC] Use common secret template in ueb listenerKrzysztof Opasiak5-15/+113
Whole SDNC strongly depends on the assumption that it is using a common mariadb-galera instance and that root password is secret password. Also user and password to sdnc DB is hardcoded. Let's start working on removing this assumption and component by component add support for local and shared mariadb instance without hardcoding any passwords to the database. In this patchAll passwords are still hardcoded in the helm chart to not break other parts of SDNC. Those values will be removed in a final patch. Issue-ID: OOM-2309 Change-Id: Ie998b3c5775807ef096074b18a18a1773120c1d6 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-02-20[DMaaP DR] Adding log level config to chartsefiacor4-2/+9
Change-Id: I3c34258810908b4eb26864f33ee1fc56216906a8 Signed-off-by: efiacor <fiachra.corcoran@est.tech> Issue-ID: DMAAP-1389
2020-02-20Merge "[COMMON] Use common mariadb-galera instance in network-name-gen"Sylvain Desbureaux3-15/+39
2020-02-20Merge "[OOF] Use common secret template for mariadb credentials"Sylvain Desbureaux8-54/+152
2020-02-20update msbPortdyh1-1/+1
Change-Id: Iff0251e5ccd432985d9b25ea80f004d7e772a652 Issue-ID: MODELING-317 Signed-off-by: dyh <dengyuanhong@chinamobile.com>
2020-02-19[COMMON] Use common mariadb-galera instance in network-name-genKrzysztof Opasiak3-15/+39
Improve usage of common secret template by removing all hardcoded values and use common mariadb-galera instance. Issue-ID: OOM-2249 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ia126a0b66d9e61c90114ff688cc52cc5fa4f5d58
2020-02-19Merge "[COMMON] Use common secret template in dgbuilder"Sylvain Desbureaux7-204/+119
2020-02-19Merge "[OOM] Bump postgresql version"Sylvain Desbureaux1-1/+1
2020-02-18Cluster Distributed lock service integration with OOM.Sebastien Premont-Tendland4-0/+107
Disabled by default. In order to enable cluster replicaCount should be higher than 2 and useScriptCompileCache is set to false. We need to disable script compile cache otherwise there is issue with updating CBA when running multiple replicas of blueprint processor. Issue-ID: CCSDK-2011 Signed-off-by: Sebastien Premont-Tendland <sebastien.premont@bell.ca> Change-Id: I6f6071556eb499832f9a765ba4c27100497c6e88
2020-02-18[OOM] Bump postgresql versionSylvain Desbureaux1-1/+1
Use version 10.11 deployed by crunchydata scripts version 4.2.1. this will: * remove some CVEs (in particular CVE-2019-10164) * use UTF-8 as default encoding Issue-ID: OOM-2290 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6f6ca18b48c435f55f5ffcb88e4f2dc83b758b84
2020-02-18Merge "[SO] Enable use of Keystone v3"Krzysztof Opasiak3-2/+8
2020-02-18Update git submodulesJames Forsyth1-0/+0
* Update kubernetes/aai from branch 'master' to 23f076495d36081f34a367067918d15fcc5ada8d - Merge "Add ingress controler support to AAI" - Add ingress controler support to AAI Issue-ID: OOM-2171 Signed-off-by: Lucjan Bryndza <l.bryndza@samsung.com> Change-Id: I9afdae36aa9afd1f80f88b5bb3a15935f9335a93
2020-02-18Merge "[SDC] Change default access mode for cert PVC"Krzysztof Opasiak1-1/+1
2020-02-18[COMMON] Use common secret template in dgbuilderKrzysztof Opasiak7-204/+119
Taken into account how "easy" it would be to modify the dgbuilder which is written in JavaScript (which is not my mother tongue to say the least) let's try to remove hardcoded passwords from config files without modifying the application container itself. In order to achieve this: 1) Remove createReleaseDir.sh script from the container as it is never used and contains a ton of passwords 2) Replace all sensitive values in config files with references to respective environment variables 3) Introduce init container that will run envsubst command on config files and copy them from ConfigMap value to the new volume which is backed by tmpfs so that the plain text passwords are never written to the disk For now all the hardcoded values are still there to minimize the risk of breaking the deployment but step by step they will be removed in next commits. Issue-ID: OOM-2247 Change-Id: I5a428e3415713857084ba6aaa6be9b04a8eb8c0f Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2020-02-18Merge "Removed use of vfc-redis from etsicatalog component"Sylvain Desbureaux2-4/+0
2020-02-17[OOF] Use common secret template for mariadb credentialsKrzysztof Opasiak8-54/+152
Remove all hardcoded credentials for mariadb and depend on common secret template to generate all passwords at the deployment time. Issue-ID: OOM-2292 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I54e57b317a8852469bcc11aabf6ddf0040ff5eb3
2020-02-17Merge "[DMaaP MR] Remove "lost+found" in kafka PVC"Krzysztof Opasiak1-0/+1