summaryrefslogtreecommitdiffstats
path: root/openecomp-be/api/openecomp-sdc-rest-webapp
AgeCommit message (Collapse)AuthorFilesLines
2022-10-18Fix security risk 'Improper Input Validation'vasraz3-31/+51
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I6a52148aec3b567db43ec57109214e52d106f73c Issue-ID: SDC-4189
2022-10-14Move DefaultExceptionMapper to be used widelyvasraz4-239/+1
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I759b023cc37fa8c5eed8b01210bed4e91edb57cb Issue-ID: SDC-4189
2022-10-14Align 'org.eclipse.jetty'-version (9.4.49.v20220914)vasraz3-5/+26
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: If56735406d86bd42b57c2ccb1f23699c1685069b Issue-ID: SDC-4189
2022-10-04Fix bug 'X-Frame-Options not configured: Lack of clickjacking protection'vasraz2-2/+20
Add new Filter (ContentSecurityPolicyHeaderFilter) Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: Ic8151df64e4b95b3d59b44a5f74dd12210f55e87 Issue-ID: SDC-4192
2022-09-29Stepping version to 1.12.0 for start of LondonMichaelMorris44-44/+44
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4155 Change-Id: Ide5c76cbb332dbd03344fdb462e7feef91c9256e
2022-09-28Step version to 1.11.9-SNAPSHOTMichaelMorris44-44/+44
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4172 Change-Id: If2746847292bd769ef47c4628b5bafa7af2d69b9
2022-09-08Fix high-severity bug 'application exposed to path traversal attack'vasraz2-9/+17
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I7f4b1e8d083cc39f8e57dcedddecc6af56fdc9c2 Issue-ID: SDC-4169
2022-09-07Remove vulnerable dependenciesvasraz2-1/+13
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I791181a27fc0a5e538994133b892dd06d8f9d86a Issue-ID: SDC-4167
2022-08-17Update SDC version to 1.11.8-SNAPSHOTMichaelMorris44-44/+44
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4111 Change-Id: I39b23ed9e56a889f1f4a9fa7029a4758c4c9ba47
2022-08-15Step version to 1.11.7-SNAPSHOT1.11.7MichaelMorris44-44/+44
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4111 Change-Id: I42a9a518dc05a4fd42619fbd471955ddacd62dc3
2022-06-24Step version to 1.11.6-SNAPSHOTandre.schmid44-44/+44
Change-Id: Ie3f800c418b32bbf05fc8f984bba7ea419583d03 Issue-ID: SDC-4064 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-06-24Step version to 1.11.5-SNAPSHOTandre.schmid44-44/+44
Change-Id: Iee1394298e6afddf30e98c8e07a4ddacef95d55f Issue-ID: SDC-4064 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-05-31Delete VSP - Ensure complete deletion of VSP from DBfranciscovila2-1/+32
Delete data from tables still containing the deleted VSP id Issue-ID: SDC-4023 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: I0b389d22ccba1b888005a5bf3f1af000867e32c1
2022-05-27Fix 'VLM restore bug'vasraz2-14/+16
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: Ie89c9ce40f3ca841e27584d65fb0637e15be82c2 Issue-ID: SDC-4027
2022-05-27Step version to 1.11.4-SNAPSHOTMichaelMorris44-44/+44
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4008 Change-Id: I0570cc896a88c988d5b9cbf45b11f9648a88a932
2022-05-18Step version to 1.11.3-SNAPSHOTMichaelMorris44-44/+44
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3980 Change-Id: Ib1a7cae9f32c347c97157020e58188d802fd6068
2022-05-09VLM duplicate name gives generic errorfranciscovila1-1/+2
Provide user with specific error message when name is alrady in use Issue-ID: SDC-3991 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: I7d2c839d2ed14d17257adacfe2de6978ac0e61a4
2022-04-25Step version to 1.11.2-SNAPSHOTMichaelMorris44-44/+44
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3959 Change-Id: I684a792fa6cd7357da6754baa9edd1d723ecc08d
2022-04-21Support deletion of archived VLMs in onboardingstasys104-41/+65
Issue-ID: SDC-3968 Signed-off-by: stasys10 <stasys.jurgaitis@est.tech> Change-Id: I3f8a77e2ab40f7607920a781ac7ad2bb3c56741d
2022-04-21Check if VLM is used before deletingandre.schmid4-23/+372
Checks if the VLM is in use by any VSP before allowing to delete it. Add unit tests for the delete method, considering the restriction. Applies minor refactors with related code. Change-Id: I4ff6ddf3959a4ca92ab68b29c8913fc6f0ebdb3c Issue-ID: SDC-3966 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-04-15Fix incorrect version in 'metrics-rest'vasraz1-1/+1
Change-Id: I062b37e854e82fbf4095a8ed5c29a77418263176 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3971
2022-04-14Add application metrics in the onboarding backendandre.schmid7-0/+224
A new endpoint was introduced /onboarding-api/v1.0/actuator/prometheus in the onboarding backend, that returns application metrics in a format consumable by prometheus, using the micrometer library. Change-Id: I684b5cab55947c6bedee1b838343676489ad3ebf Issue-ID: SDC-3956 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-04-08Step version to 1.11.1-SNAPSHOTMichaelMorris43-43/+43
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3951 Change-Id: Ifee66e777462161952765dcbb84c3a8fb1634cd2
2022-04-07Fix error handling for VSP usage check in VFKrupaNagabhushan1-24/+40
Issue-ID: SDC-3953 Signed-off-by: KrupaNagabhushan <krupa.nagabhushan@est.tech> Change-Id: I37b2944672694ccdc9d8ee84a554b7284dbe7723
2022-04-04Log partial VSP deletionandre.schmid8-112/+294
Adds entries to the VSP activity log identifying the VSP versions deleted from the MinIO client, and also if the deletion was fully complete. If the VSP deletion from the database fails, there will be registry of what happened with the MinIO deletion. Do some refactor in the VendorSoftwareProductsImpl in relation to the VSP deletion flow and responses. Issue-ID: SDC-3931 Change-Id: I75cb9d7fb74a48db01b242a5f70fefa0a88faa0d Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-04-04Implement restore of partially deleted VSPvasraz3-128/+214
Change-Id: I790b6cd8494e8f35c3b9891304f15272e9769a68 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3935
2022-03-31Fix package storage and reducer config reloadandre.schmid4-74/+123
The package storage configuration was not being reloaded when a configuration file change was made. Increases OrchestrationTemplateCandidateImpl coverage by testing the upload to the artifact storage. Issue-ID: SDC-3934 Change-Id: I533b3c3a92cdadb60a375890da85ee053364e8af Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-03-29Restrict deletion of archived VSPs if used in VFfranciscovila5-3/+253
Verify if a VSP is used in a VF in SDC-BE before proceeding with the deletion of a VSP Issue-ID: SDC-3894 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: I7c8bdd55516a51cf8693cfdb8c109a7c20e7ea84
2022-03-28Implement VSP deletion from Storagevasraz2-68/+125
Change-Id: I06d86696570b2751f152dffc06fd580ef8c0c705 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3924
2022-03-24Delete VSP - Support deletion of archived VSPs in onboarding BEfranciscovila2-39/+203
Allow deletion of archived VSPs Issue-ID: SDC-3890 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: If1a5177a30fb0220392adcdf6bd6c4e71c37ce59
2022-03-23Step version to 1.11.0-SNAPSHOTMichaelMorris43-43/+43
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3909 Change-Id: I6d20e041b68afdc7ed6ffb900dcb372c1e600ee8
2022-03-22Step version to 1.10.3-SNAPSHOT1.10.3MichaelMorris43-43/+43
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3909 Change-Id: I7bb06e974320433d9f423be6f099d7811982eac0
2022-03-03Obtain upload lock before uploadingandre.schmid5-11/+115
Before uploading, the system will now set the status as uploading in order to have more control of the upload process and status. Without that the UI status updates could show up incorrectly. Also, this behaviour removes the need to upload a file to set the upload in progress, which avoids a concurrent upload try to upload a file if there is another upload in progress. Change-Id: Ic008560aa57e1ee7a50389ad26f1a8890f1cf198 Issue-ID: SDC-3888 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-02-26Implement improved MinIo clientvasraz2-8/+22
Change-Id: Ic9abd6b0bdaa17e9deff2279a64416d81f7ad606 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3886
2022-02-09Step version to 1.10.2-SNAPSHOTMichaelMorris43-43/+43
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3868 Change-Id: I8dc7701d6290bc95cf4ec90dae8653722a5c453f
2022-02-02Step version to 1.10.1-SNAPSHOTMichaelMorris43-43/+43
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3868 Change-Id: Ie6509f8b0d2fa0e67a78295d3b49689bc2931b8b
2022-01-31Obtain and control VSP package upload statusandre.schmid2-2/+9
Obtain the upload status and control the upload from the frontend perspective. Change-Id: Idcc921cf592efea33df35c557afcfae827af3a39 Issue-ID: SDC-3862 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-01-25Update onboarding upload status during processingandre.schmid7-17/+277
Updates the onboarding upload status during the VSP package processing Change-Id: Idc705220ad26e62577b52c6f9126aeae51a33fe0 Issue-ID: SDC-3848 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-01-21Onboarding upload controlandre.schmid16-88/+1134
Brings the initial structure to control asynchronously a VSP package upload during the onboarding. Instead of blocking the UI, the upload and processing status will be controlled by the backend, so the frontend can query it and control the behaviour of the UI. Updates the upload endpoint to obtain/verify an upload lock, and creates a second endpoint to check for the upload status. Change-Id: If1c43fb4f0b11e1d8a5627578bafc75f266393c2 Issue-ID: SDC-3826, SDC-3827 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-01-13Improve testing stabilityvasraz13-33/+33
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I3f631642a97e65d6628816767e0a5408f02f4bc6 Issue-ID: SDC-3839
2022-01-05Make configurable UI versionvasraz2-2/+0
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I410eaaf40106d869a8d50bdd547031430f4f1693 Issue-ID: SDC-3824
2021-12-07Fix vulnerable dependencyvasraz8-0/+48
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3795 Change-Id: Ib6f7902b2f8380ad9febcc2fad0374e8070af15c
2021-11-29Add VNFD to NSD when using S3 storagevasraz1-3/+9
Change-Id: I8eb810fadfe54b335647e71e21115514963b4be7 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3792
2021-11-15Fix critical cross site scriptingvasraz2-2/+2
Change-Id: I66a220f71a2e950055107a725191b46bcbe8c6a6 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3607 Issue-ID: SDC-3755
2021-11-05Large csar handling - object storevasraz2-63/+60
Change-Id: I4e88bd7bfcc1fdbc93d67da2682f2e873ba243c6 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3754
2021-10-01Step version for JakartaMichaelMorris43-43/+43
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3738 Change-Id: Id008db63021d07278bd17a6603d992a905237e41
2021-09-20Updated SDC version to 1.9.2-SNAPSHOT1.9.2MichaelMorris43-43/+43
Updated to release bug fixes on 1.9.1 for I release Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3694 Change-Id: Ifda88730a17f2ecabab0ac29128aaa23618bc4f8
2021-09-17Fix Update VSP when no version id is providedandre.schmid2-0/+15
Issue-ID: SDC-3730 Change-Id: Ic5a5a6ecf3b6775e022be649145e44b0907cbecf Signed-off-by: andre.schmid <andre.schmid@est.tech>
2021-09-13Update SDC version to 1.9.1-SNAPSHOT1.9.1MichaelMorris43-43/+43
Update version for M4 for I release Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3694 Change-Id: Ib7ea2917e57496ebd89a27693de60d4ea1aedc70
2021-08-26Validate the Resource Model before importing VSPandre.schmid1-6/+8
Validates the Resource Model selected during the Import VSP. This model must be aligned with one of the models that the imported VSP relates to. Fix VSP package retrieval to get the exact version from the VSP chosen during the Import VSP process. Introduces a client in the Catalog to retrieve from the Onboarding backend a VSP information using its Id and version Id. Change-Id: Ic8fb52b6daadc0e7203c81a9c15c3e46d5b9fffb Issue-ID: SDC-3675 Signed-off-by: andre.schmid <andre.schmid@est.tech>