summaryrefslogtreecommitdiffstats
path: root/main/src
AgeCommit message (Collapse)AuthorFilesLines
2022-06-21Adding support for custom application metrics in Xacml-PDP.isaac6-90/+138
Issue-ID: POLICY-3762 Signed-off-by: isaac <isaac.adorno@att.com> Change-Id: I84b43ae3a61702ceaf9f526a1c537caa77802af6
2022-03-10Extending Prometheus counts to include permit / deny / indeterminantisaac1-0/+16
Issue-ID: POLICY-3762 Signed-off-by: isaac <isaac.adorno@att.com> Change-Id: I2ca7c9384316d08b13a7f90ba99975e602007351
2022-03-02Adding Prometheus counts to XacmlPdpStatisticsManagerisaac1-0/+19
Issue-ID: POLICY-3762 Signed-off-by: isaac <isaac.adorno@att.com> Change-Id: I865fc01dac91fe77421fc2fceb72eac49c9d8a78
2022-02-23Adding statistics to PDP Heartbeat Messagesisaac7-30/+173
Issue-ID: POLICY-3034 Signed-off-by: isaac <isaac.adorno@att.com> Change-Id: I495da4178b9715ec710fdc790f08faef0fc456d5
2022-02-08Fixing sonar issues in xacml-pdpisaac1-2/+2
Issue-ID: POLICY-3900 Signed-off-by: isaac <isaac.adorno@att.com> Change-Id: I29d22d1c6b690204270d87fff6ce42d9d00cef6a
2021-09-06Decrease eclipselink verbosity to warningjhh1-1/+1
Issue-ID: POLICY-3611 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I63b78252f7c46d039d3709c4356ebdef4f4a96c6
2021-08-30Add metrics to permanent servicesjhh1-1/+1
Issue-ID: POLICY-3531 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I30ac993f161f2ed7e86a968e3f51631d3654b516
2021-08-23Add filter to control xacml-pdp rest apiJim Hahn10-34/+287
Added a filter class for the REST server that only allows "API" services (i.e., decision API services) through when the API is enabled, disallowing them otherwise. The filter always allows PDP-wide services (e.g., "healthcheck"). Per review comments: - modified the new class to "implement Filter" rather than "extends AafFilter" Issue-ID: POLICY-3531 Change-Id: I7055e21045eea270e454a47a443b29476d9a85ee Signed-off-by: Jim Hahn <jrh3@att.com>
2021-08-23Merge "Fix junits broken by change in is-alive type"Jim Hahn1-1/+3
2021-08-23Fix junits broken by change in is-alive typeJim Hahn1-1/+3
Issue-ID: POLICY-3531 Change-Id: I5eadaa6dbb0c66940a5af0c552894a3d874d51a1 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-08-20Revert "Leave xacml-pdp REST server always running"Jim Hahn4-20/+43
This reverts commit 031a0fe51dff21445034befc8a6d8732622acd07. Issue-ID: POLICY-3531 Change-Id: I20eddfc11589b6ab4822a93b8c8c3d3f209537c0 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-08-19Wait for pdp-pap topic in xacml-pdpJim Hahn5-32/+168
Added code to use the new topic-checker functionality to verify communication on the PDP-PAP topic before sending the first heartbeat. This functionality can be disabled by setting probeHeartbeatTopicMs to 0 in the xacml config file. Issue-ID: POLICY-3531 Change-Id: I113792c67aa26fbb188767d3e973b21dbe04f570 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-08-17Synchronize updates to xacml-pdp stateJim Hahn2-6/+12
Perhaps this will fix the issue wherein xacml-pdp heartbeats continue to say "PASSIVE" even after it's set to "ACTIVE". Issue-ID: POLICY-3531 Change-Id: I6639ed7ca793a899f62e5c80b336408f5e8b2dc6 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-08-06Leave xacml-pdp REST server always runningJim Hahn4-47/+20
Liveness checks depend on the xacml-pdp REST server being available. However, the REST server is only running when PAP puts it in an active state. Modified the code to always leave it running. In a subsequent review, we should split the healthcheck REST service onto its own port so it can be left running, while the other services are started/stopped in response to PAP active/passive requests. Issue-ID: POLICY-3531 Change-Id: I412064abaf91bb966d40adc46cee771b3a0a5dfc Signed-off-by: Jim Hahn <jrh3@att.com>
2021-07-19Use new RestClientParameters class in xacml-pdpJim Hahn9-51/+59
Replaced generic BusTopicParams with more specific RestClientParameters. Also modified code to pass the HttpClient around instead of passing the client parameters around. Issue-ID: POLICY-3456 Change-Id: Ic07b710645eeab696e6df0a015171578ad08ca83 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-07-16Add exclusions parameterPamela Dragosh9-9/+164
Adds the exclusions parameter to exclude applications that are in the java classpath. This allows overriding default packaged applications with another that can support new policy types and/or modify existing functionality. Issue-ID: POLICY-3326 Change-Id: Iaad8d26fc4122ad17226ad1e83b72c9f284e6ebd Signed-off-by: Pamela Dragosh <pd1248@att.com>
2021-07-14Use lombok in xacml-pdpJim Hahn7-141/+31
Also: - changed a few fields to private/protected. - swwapped out gson for coder Issue-ID: POLICY-3400 Change-Id: I9a4dba939b77078f78583ada00af182b1a7d95c5 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-07-13Change config to add Application groupPamela Dragosh16-29/+160
First step for configuration which applications should be loaded and mapped to actions is to add a new parameter group for application parameters. Issue-ID: POLICY-3326 Change-Id: I3867b4e927d57e1e81519dee32d10eed3dabc667 Signed-off-by: Pamela Dragosh <pd1248@att.com>
2021-06-28Use unique name in xacml-pdp PdpStatus messagesJim Hahn4-11/+16
Added unique name to PdpStatus and HealthCheckReports. Issue-ID: POLICY-3410 Change-Id: Ife2248ffee9afae76f3eaab7f8b33dba8bdb4019 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-06-28Update xacml-pdp for checkstyle 8.43liamfallon1-44/+70
Updates are indentation changes on annotations. Issue-ID: POLICY-3209 Change-Id: I64ee5517996dbb2ae8a043d215c7ccddad121fe3 Signed-off-by: liamfallon <liam.fallon@est.tech>
2021-05-25Support delta policy lists in xacml-pdpJim Hahn2-33/+112
Updated xacml-pdp to use the deploy & undeploy lists in the PDP-UPDATE message. Added more code coverage to the junit test class. Per review: - added logging for unexpected cases Issue-ID: POLICY-3188 Change-Id: I0f899abcd497f7eb711d4df358e455fd2d50e904 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-05-06Fix sonars in xacml-pdpJim Hahn12-34/+33
Fixed: - use "var" instead of actual type Issue-ID: POLICY-3285 Change-Id: Id17142d1f2e3e5f9dfbffcb96aff7fe76321a56b Signed-off-by: Jim Hahn <jrh3@att.com>
2021-04-29Remove GroupValidationResultJim Hahn4-93/+49
Removed GroupValidationResult, replacing it with BeanValidationResult. Modified the ParameterGroup subclasses to use BeanValidator, adding annotations where needed to trigger the validations that had been automatically performed by GroupValidationResult. Issue-ID: POLICY-2059 Change-Id: I039f761745316fea41d63bdc885584c9a9c2bc6e Signed-off-by: Jim Hahn <jrh3@att.com>
2021-03-19Delete keystores from xacmlJim Hahn2-4/+4
The Keystore is no longer needed in the tarball, as it is supplied externally by the CSITs and Helm charts. Deleted that file. Also modified the junits to use utils-test to generates keystores at runtime, thus deleted the junit keystore file, too. Issue-ID: POLICY-3143 Change-Id: If4966538452a16b22ea3a338eb9656a295641402 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-03-17Change RestServerParameters to BusTopicParamsJim Hahn15-57/+61
HTTP client parameters should be based on BusTopicParams instead of RestServerParameters, modified the policyApiParameters. Issue-ID: POLICY-3147 Change-Id: I73aa34bec3ab7e27e7a3474260f411ed55b6f933 Signed-off-by: Jim Hahn <jrh3@att.com>
2021-03-16Update policy-keystore with newer certificatesjhh1-0/+0
Issue-ID: POLICY-3139 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: Ia0c86441b1c95b45959be070015ea57f106d7002
2021-02-18Fix sonars and target dirPamela Dragosh2-15/+8
Fix a couple of sonars introduced by the PdpType review. Also creation of a target directory below the xacml-pdp directory. Issue-ID: POLICY-3071 Change-Id: I9fe325d0a75970fbe3d42be36906013c1fc2ecb9 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2021-02-16Make xacml pdpType configurablePamela Dragosh13-24/+81
Adding code to enable the pdp type to be configurable. Issue-ID: POLICY-3071 Change-Id: I51c873f68bff1866c6b2e96958b6c33872aea2c8 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2021-02-11Fix sonars from dependency upgradeJim Hahn6-36/+26
The dependency upgrades in policy-parent caused some new sonars. In particular, initMocks() has been deprecated - replaced with calls to the Mockito Runner. Also removed unnecessary when() calls. Issue-ID: POLICY-2912 Change-Id: If386bd282635067a20045f2626af0cf5be49bc0e Signed-off-by: Jim Hahn <jrh3@att.com>
2021-02-10Upgrade dependenciesJim Hahn1-0/+1
Updated properties to work with the new version of eclipselink. Issue-ID: POLICY-3005 Change-Id: I88091a90387e235ef5c168de7a3275056327d83e Signed-off-by: Jim Hahn <jrh3@att.com>
2021-01-04Changed identifiers to concept identifiersliamfallon2-10/+11
The policy models tosca classes ToscaPolicyIdentifier and ToscaPolicyIdentifierOptVersion can be used to identify any TOSCA concept, not just TOSCA policies so they are renamed to ToscaConceptIdentifier and ToscaCinceptIdentifierOptVersion respectively. The class ToscaPolicyTypeIdentifier is redundant and is replaced by ToscaConceptIdentifier. Issue-ID: POLICY-2900 Change-Id: Id614bbed34ed8897e7e882b70147b98ffe90bf57 Signed-off-by: liamfallon <liam.fallon@est.tech>
2020-09-24update default keystoresjhh1-0/+0
Issue-ID: POLICY-2827 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: Icbe559ceb51f34ec7596516ba0ebe735e086b312
2020-08-25Merge "Add new Match application to XACML"Jim Hahn2-2/+33
2020-08-25Add new Match application to XACMLPamela Dragosh2-2/+33
Add new generic match application to XACML PDP. This app will allow ONAP users to design their own matchable policy types and use StdMatchableTranslator out-of-the box without any modification. Fills the gap left behind since "configure" via the Monitoring can support StdCombinedResultsTranslator, but the Optimization policy types have a specific "closest match" algorithm tied to them. Gives flexibility. removed unused import Issue-ID: POLICY-2596 Change-Id: I0aebae706fb9634e7bb13d78eff0ccc1ae4d752f Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2020-08-21Changes to make XACML container crash with non zero exitCodea.sreekumar1-2/+7
Change-Id: Id8c18b6888128a3efaa96f05d911fde5e6a92694 Issue-ID: POLICY-2757 Signed-off-by: a.sreekumar <ajith.sreekumar@bell.ca>
2020-08-19Remove old cdap policy typePamela Dragosh1-2/+2
Actually, this does not need to have any specific monitoring policy type designated because since Frankfurt we added the feature to support onap.monitoring.* Issue-ID: POLICY-2772 Change-Id: Ief24550c3e90b7a54ad3c1c381330580ca738798 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2020-08-17Add new guard filter policy type featurePamela Dragosh1-2/+2
* Added new Policy Guard filter Policy type. * Enhanced translator tests to ensure bad filter policies are detected. * Added new filter application test to ensure new guard propertly creates xacml policies. Issue-ID: POLICY-2590 Change-Id: Ifc047a33084ce45b67be98a61f660d7a8c9d8615 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2020-08-14Cleanup unused imports and deprecated methodsPamela Dragosh2-6/+4
Eclipse reports 2 unused imports and deprecated methods. Does not show up in sonar, but these are simple fixes. Issue-ID: POLICY-2590 Change-Id: I41b4b43e8d1d5e88c66a368b47482ef20297a4c1 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2020-07-01Replace try/catch blocks with assertj - xacml-pdpwaynedunican2-34/+29
Replaced try/catch blocks in policy/xacml-pdp with assertj assertions Issue-ID: POLICY-2451 Change-Id: I3e6947a61e0000561c7053a1cdede9ae5825e5ca Signed-off-by: waynedunican <wayne.dunican@est.tech>
2020-06-29Fix issues in xacml-pdp for new sonar rulesJim Hahn3-6/+4
Addressed issues reported due to updates to the sonar rules: - invoke only one method in a junit lambda - complete the assertion - use assertThat().exists(), canRead(), etc. Issue-ID: POLICY-2681 Change-Id: I2935f4d0295244ab3b11a57a3bc401c64b695fd1 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-06-19Changes for Checkstyle 8.32Taka Cho3-7/+6
Issue-ID: POLICY-2188 Change-Id: I64a115240a71e5014db9cfb66747887e156afb50 Signed-off-by: Taka Cho <takamune.cho@att.com>
2020-06-19xcaml-pdp sonar issue fixesTaka Cho3-12/+12
replace with '<>' and assert statements Issue-ID: POLICY-2616 Change-Id: Id999d3299918491c06918caaa28c44e2148574bc Signed-off-by: Taka Cho <takamune.cho@att.com>
2020-06-02Merge "Use OperationsHistory from models"Pamela Dragosh2-8/+8
2020-06-01Use OperationsHistory from modelsJim Hahn2-8/+8
Deleted Dbao and replaced it with the shared class in policy-models. Also had to update the queries and the persistence.xml accordingly. Issue-ID: POLICY-2581 Change-Id: I59dfa2f37c272796ccebc0f578c9f4e8e1b9c8ab Signed-off-by: Jim Hahn <jrh3@att.com>
2020-05-29Use default serialization providerJim Hahn2-5/+1
The default provider has been changed to gson, so the provider property no longer has to be set. Issue-ID: POLICY-1527 Change-Id: I21f5a3af2bc1d7fc10dc41f58e6e62a04f4bda77 Signed-off-by: Jim Hahn <jrh3@att.com>
2020-03-25Point to models 2.2.2Pamela Dragosh1-3/+2
Issue-ID: POLICY-2378 Change-Id: Iecf281253baae6548575890f0c919dedc36a3787 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2020-03-19Merge "Re-factor matchable to reduce complexity"Jim Hahn3-56/+89
2020-03-19Re-factor matchable to reduce complexityPamela Dragosh3-56/+89
This solution is much cleaner than what is in StdMatchableTranslator. Over 90% code coverage on it - utilizes a callback to retrieve DataType and PolicyTypes. Support for missing timestamp TOSCA type. Also can do a better job differentiating between a property contained in the policy vs a schema. Changed StdMatchableTranslator to utilize these classes. And removed the old spaghetti. Added some JUnit coverage for ToscaPolicyTranslatorUtils. Removed duplicate code in the XACML Native Exception classes. Issue-ID: POLICY-2242 Change-Id: I18f898d9e65f6da28e3b27517d40f8d389de18a0 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
2020-03-18renew policy certs till 03/17/2021jhh1-0/+0
Issue-ID: POLICY-2402 Signed-off-by: jhh <jorge.hernandez-herrero@att.com> Change-Id: I111f60b9ef60ee9524808653be020f94ae9db170
2020-03-14Add code coverage XacmlPolicyUtilsPamela Dragosh1-1/+1
Fix spelling error and add code cover >95% for the XacmlPolicyUtils. Issue-ID: POLICY-2242 Change-Id: I21f239e6bd42073ff84883d04f2b8bee1466b8e0 Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>