aboutsummaryrefslogtreecommitdiffstats
path: root/openecomp-be
AgeCommit message (Collapse)AuthorFilesLines
2022-10-18Fix security risk 'Improper Input Validation'vasraz7-32/+142
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I6a52148aec3b567db43ec57109214e52d106f73c Issue-ID: SDC-4189
2022-10-14Move DefaultExceptionMapper to be used widelyvasraz4-34/+29
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I759b023cc37fa8c5eed8b01210bed4e91edb57cb Issue-ID: SDC-4189
2022-10-14Align 'org.eclipse.jetty'-version (9.4.49.v20220914)vasraz25-7/+276
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: If56735406d86bd42b57c2ccb1f23699c1685069b Issue-ID: SDC-4189
2022-10-04Fix bug 'X-Frame-Options not configured: Lack of clickjacking protection'vasraz6-6/+70
Add new Filter (ContentSecurityPolicyHeaderFilter) Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: Ic8151df64e4b95b3d59b44a5f74dd12210f55e87 Issue-ID: SDC-4192
2022-09-29Stepping version to 1.12.0 for start of LondonMichaelMorris139-139/+139
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4155 Change-Id: Ide5c76cbb332dbd03344fdb462e7feef91c9256e
2022-09-28Step version to 1.11.9-SNAPSHOTMichaelMorris139-139/+139
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4172 Change-Id: If2746847292bd769ef47c4628b5bafa7af2d69b9
2022-09-14Fix 'Optional license in onboarding'-bugvasraz5-29/+40
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I6b63629e834b8a5002372d6af59ae0a3a9460542 Issue-ID: SDC-3601
2022-09-08Fix high-severity bug 'application exposed to path traversal attack'vasraz2-9/+17
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I7f4b1e8d083cc39f8e57dcedddecc6af56fdc9c2 Issue-ID: SDC-4169
2022-09-07Remove vulnerable dependenciesvasraz2-1/+13
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I791181a27fc0a5e538994133b892dd06d8f9d86a Issue-ID: SDC-4167
2022-08-26Improve error's message readabilityvasraz2-19/+16
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: Id8e9c3ce84c4f8b18a1c2fb564eb4347ce514adc Issue-ID: SDC-4143
2022-08-22Fix broken chef/berkshelf install in docker imagesvasraz2-0/+2
Set a specific version for the ruby gem "public_suffix", required by chef/berkshelf, to be compatible with the used version of ruby (2.5.0). Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I963a60206cb1f22296fcb5a9f763f326f629f077 Issue-ID: SDC-4139
2022-08-19Remove vulnerable dependencyvasraz2-0/+12
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I6aada4ea46fc62ea9d3d5387d39113b1942808d4 Issue-ID: SDC-4017
2022-08-17Update SDC version to 1.11.8-SNAPSHOTMichaelMorris139-139/+139
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4111 Change-Id: I39b23ed9e56a889f1f4a9fa7029a4758c4c9ba47
2022-08-15Step version to 1.11.7-SNAPSHOT1.11.7MichaelMorris139-139/+139
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4111 Change-Id: I42a9a518dc05a4fd42619fbd471955ddacd62dc3
2022-07-29Fix functionaljava dependency for onboardingKrupaNagabhushan2-4/+7
Issue-ID: SDC-4115 Signed-off-by: KrupaNagabhushan <krupa.nagabhushan@est.tech> Change-Id: I3873f2dcc47c34a53af34f89d6b001060d9d7d66
2022-07-15Remove unused dependency (functionaljava)vasraz3-6/+8
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I9d8806dc55fc1d377cdd366343fe898b46fc847d Issue-ID: SDC-4094
2022-06-24Step version to 1.11.6-SNAPSHOTandre.schmid139-139/+139
Change-Id: Ie3f800c418b32bbf05fc8f984bba7ea419583d03 Issue-ID: SDC-4064 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-06-24Step version to 1.11.5-SNAPSHOTandre.schmid139-139/+139
Change-Id: Iee1394298e6afddf30e98c8e07a4ddacef95d55f Issue-ID: SDC-4064 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-06-10Fix broken images build due to multipart-post gemvasraz2-0/+2
Maximum supported version of multipart-post, with the current images Ruby & RubyGems is 2.2.0. Forcing the 2.2.0 version. Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: Ie7a7232be817f005c36f09b023344b479c64457f Issue-ID: SDC-4041
2022-06-07Update vulnerable dependenciesvasraz1-0/+11
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I167b69de1736c81187ab3596169c6043108546b2 Issue-ID: SDC-4017
2022-05-31Delete VSP - Ensure complete deletion of VSP from DBfranciscovila5-4/+43
Delete data from tables still containing the deleted VSP id Issue-ID: SDC-4023 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: I0b389d22ccba1b888005a5bf3f1af000867e32c1
2022-05-27Fix 'VLM restore bug'vasraz2-14/+16
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: Ie89c9ce40f3ca841e27584d65fb0637e15be82c2 Issue-ID: SDC-4027
2022-05-27Step version to 1.11.4-SNAPSHOTMichaelMorris139-139/+139
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-4008 Change-Id: I0570cc896a88c988d5b9cbf45b11f9648a88a932
2022-05-18Step version to 1.11.3-SNAPSHOTMichaelMorris139-139/+139
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3980 Change-Id: Ib1a7cae9f32c347c97157020e58188d802fd6068
2022-05-18Onboarded ASD csar included in VF csarKrupaNagabhushan1-5/+6
Issue-ID: SDC-4003 Signed-off-by: KrupaNagabhushan <krupa.nagabhushan@est.tech> Change-Id: Ia85f36c8efca2c3a10ce92347fea5cc97dbd972b
2022-05-09VLM duplicate name gives generic errorfranciscovila1-1/+2
Provide user with specific error message when name is alrady in use Issue-ID: SDC-3991 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: I7d2c839d2ed14d17257adacfe2de6978ac0e61a4
2022-04-26Replace deprecated GEventEvaluator with JaninoEventEvaluatorvasraz4-22/+12
Change-Id: I21bfd0aaa66a32ecc1755cbe1efd78b0cd4254cf Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3984
2022-04-25Step version to 1.11.2-SNAPSHOTMichaelMorris139-139/+139
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3959 Change-Id: I684a792fa6cd7357da6754baa9edd1d723ecc08d
2022-04-21Support deletion of archived VLMs in onboardingstasys105-42/+66
Issue-ID: SDC-3968 Signed-off-by: stasys10 <stasys.jurgaitis@est.tech> Change-Id: I3f8a77e2ab40f7607920a781ac7ad2bb3c56741d
2022-04-21Check if VLM is used before deletingandre.schmid9-60/+434
Checks if the VLM is in use by any VSP before allowing to delete it. Add unit tests for the delete method, considering the restriction. Applies minor refactors with related code. Change-Id: I4ff6ddf3959a4ca92ab68b29c8913fc6f0ebdb3c Issue-ID: SDC-3966 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-04-15Fix incorrect version in 'metrics-rest'vasraz1-1/+1
Change-Id: I062b37e854e82fbf4095a8ed5c29a77418263176 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3971
2022-04-14Add application metrics in the onboarding backendandre.schmid7-0/+224
A new endpoint was introduced /onboarding-api/v1.0/actuator/prometheus in the onboarding backend, that returns application metrics in a format consumable by prometheus, using the micrometer library. Change-Id: I684b5cab55947c6bedee1b838343676489ad3ebf Issue-ID: SDC-3956 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-04-08Step version to 1.11.1-SNAPSHOTMichaelMorris138-138/+138
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3951 Change-Id: Ifee66e777462161952765dcbb84c3a8fb1634cd2
2022-04-07Fix error handling for VSP usage check in VFKrupaNagabhushan1-24/+40
Issue-ID: SDC-3953 Signed-off-by: KrupaNagabhushan <krupa.nagabhushan@est.tech> Change-Id: I37b2944672694ccdc9d8ee84a554b7284dbe7723
2022-04-04Log partial VSP deletionandre.schmid14-119/+321
Adds entries to the VSP activity log identifying the VSP versions deleted from the MinIO client, and also if the deletion was fully complete. If the VSP deletion from the database fails, there will be registry of what happened with the MinIO deletion. Do some refactor in the VendorSoftwareProductsImpl in relation to the VSP deletion flow and responses. Issue-ID: SDC-3931 Change-Id: I75cb9d7fb74a48db01b242a5f70fefa0a88faa0d Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-04-04Implement restore of partially deleted VSPvasraz3-128/+214
Change-Id: I790b6cd8494e8f35c3b9891304f15272e9769a68 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3935
2022-03-31Fix package storage and reducer config reloadandre.schmid6-77/+128
The package storage configuration was not being reloaded when a configuration file change was made. Increases OrchestrationTemplateCandidateImpl coverage by testing the upload to the artifact storage. Issue-ID: SDC-3934 Change-Id: I533b3c3a92cdadb60a375890da85ee053364e8af Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-03-31Fix isPmDictionary nullsafetyJozsef Csongvai1-1/+1
Issue-ID: SDC-3937 Change-Id: I24e7f6c64772b501b592e93c712cd8a9fbb78202 Signed-off-by: Jozsef Csongvai <jozsef.csongvai@bell.ca>
2022-03-29Restrict deletion of archived VSPs if used in VFfranciscovila8-4/+304
Verify if a VSP is used in a VF in SDC-BE before proceeding with the deletion of a VSP Issue-ID: SDC-3894 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: I7c8bdd55516a51cf8693cfdb8c109a7c20e7ea84
2022-03-28Copy entry_defintion_type to TOSCA.metafranciscovila12-56/+207
Copy "entry_defintion_type" from the manifest file of ASD package into the generated TOSCA.meta for the VSP package Issue-ID: SDC-3884 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: I35c4d0180529e8c60edc714aecadd0150cbd2c03
2022-03-28Create onboarding validator for ASD VSPsfranciscovila23-153/+1066
Create a new validator in SDC onboarding that will be used for ASD VSPs Issue-ID: SDC-3859 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: Ida192122a95414f7d18855fe2a993b269c55a91d
2022-03-28Implement VSP deletion from Storagevasraz3-68/+126
Change-Id: I06d86696570b2751f152dffc06fd580ef8c0c705 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3924
2022-03-24Delete VSP - Support deletion of archived VSPs in onboarding BEfranciscovila2-39/+203
Allow deletion of archived VSPs Issue-ID: SDC-3890 Signed-off-by: franciscovila <javier.paradela.vila@est.tech> Change-Id: If1a5177a30fb0220392adcdf6bd6c4e71c37ce59
2022-03-23Step version to 1.11.0-SNAPSHOTMichaelMorris138-138/+138
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3909 Change-Id: I6d20e041b68afdc7ed6ffb900dcb372c1e600ee8
2022-03-22Step version to 1.10.3-SNAPSHOT1.10.3MichaelMorris138-138/+138
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3909 Change-Id: I7bb06e974320433d9f423be6f099d7811982eac0
2022-03-08Rename ControlLoop to AutomationCompositionSirisha_Manchikanti2-4/+4
This commit is to keep ControlLoop nomenclature in SDC aligned to changes in https://jira.onap.org/browse/POLICY-3938 where "Control Loop" is renamed as "Automation Composition" Issue-ID: SDC-3891 Signed-off-by: Sirisha_Manchikanti <sirisha.manchikanti@est.tech> Change-Id: I8be013e564b780e9196c116d31b5c4c4d4b72662
2022-03-03Update vulnerable dependenciesvasraz1-1/+1
Change-Id: Id1098d2e0aceb3fb507e32994925d36f23ad8517 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3895
2022-03-03Obtain upload lock before uploadingandre.schmid5-11/+115
Before uploading, the system will now set the status as uploading in order to have more control of the upload process and status. Without that the UI status updates could show up incorrectly. Also, this behaviour removes the need to upload a file to set the upload in progress, which avoids a concurrent upload try to upload a file if there is another upload in progress. Change-Id: Ic008560aa57e1ee7a50389ad26f1a8890f1cf198 Issue-ID: SDC-3888 Signed-off-by: andre.schmid <andre.schmid@est.tech>
2022-02-26Implement improved MinIo clientvasraz8-18/+41
Change-Id: Ic9abd6b0bdaa17e9deff2279a64416d81f7ad606 Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Issue-ID: SDC-3886
2022-02-09Step version to 1.10.2-SNAPSHOTMichaelMorris138-138/+138
Signed-off-by: MichaelMorris <michael.morris@est.tech> Issue-ID: SDC-3868 Change-Id: I8dc7701d6290bc95cf4ec90dae8653722a5c453f