Triggered by Gerrit: https://gerrit.o-ran-sc.org/r/c/it/dep/+/13637 Running as SYSTEM [EnvInject] - Loading node environment variables. Building remotely on prd-ubuntu1804-docker-4c-4g-7953 (ubuntu1804-docker-4c-4g) in workspace /w/workspace/it-dep-helm-docker-verify-all [ssh-agent] Looking for ssh-agent implementation... [ssh-agent] Exec ssh-agent (binary ssh-agent on a remote machine) $ ssh-agent SSH_AUTH_SOCK=/tmp/ssh-nFT4yRujmc79/agent.2135 SSH_AGENT_PID=2137 [ssh-agent] Started. Running ssh-add (command line suppressed) Identity added: /w/workspace/it-dep-helm-docker-verify-all@tmp/private_key_9559047882551416076.key (jenkins-ssh) [ssh-agent] Using credentials jenkins (jenkins) The recommended git tool is: NONE using credential jenkins Wiping out workspace first. Cloning the remote Git repository Cloning repository ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/it/dep > git init /w/workspace/it-dep-helm-docker-verify-all # timeout=10 Fetching upstream changes from ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/it/dep > git --version # timeout=10 > git --version # 'git version 2.17.1' using GIT_SSH to set credentials jenkins > git fetch --tags --progress -- ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/it/dep +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/it/dep # timeout=10 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/it/dep # timeout=10 Fetching upstream changes from ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/it/dep using GIT_SSH to set credentials jenkins > git fetch --tags --progress -- ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/it/dep refs/changes/37/13637/1 # timeout=10 > git rev-parse a94986ba3de190d5850fbf22efbf7df265afc392^{commit} # timeout=10 JENKINS-19022: warning: possible memory leak due to Git plugin usage; see: https://plugins.jenkins.io/git/#remove-git-plugin-buildsbybranch-builddata-script Checking out Revision a94986ba3de190d5850fbf22efbf7df265afc392 (refs/changes/37/13637/1) > git config core.sparsecheckout # timeout=10 > git checkout -f a94986ba3de190d5850fbf22efbf7df265afc392 # timeout=10 Commit message: "Kongpvc update for kind cluster" > git rev-parse FETCH_HEAD^{commit} # timeout=10 > git rev-list --no-walk 506e0a0bd2094a1ee4d65ff7a161c8e5518aa2d8 # timeout=10 provisioning config files... copy managed file [npmrc] to file:/home/jenkins/.npmrc copy managed file [pipconf] to file:/home/jenkins/.config/pip/pip.conf [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins5630755867513389391.sh ---> python-tools-install.sh Setup pyenv: * system (set by /opt/pyenv/version) * 3.8.13 (set by /opt/pyenv/version) * 3.9.13 (set by /opt/pyenv/version) * 3.10.6 (set by /opt/pyenv/version) lf-activate-venv(): INFO: Creating python3 venv at /tmp/venv-qgG6 lf-activate-venv(): INFO: Save venv in file: /tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: lftools lf-activate-venv(): INFO: Adding /tmp/venv-qgG6/bin to PATH Generating Requirements File Python 3.10.6 pip 24.2 from /tmp/venv-qgG6/lib/python3.10/site-packages/pip (python 3.10) appdirs==1.4.4 argcomplete==3.5.1 aspy.yaml==1.3.0 attrs==24.2.0 autopage==0.5.2 beautifulsoup4==4.12.3 boto3==1.35.42 botocore==1.35.42 bs4==0.0.2 cachetools==5.5.0 certifi==2024.8.30 cffi==1.17.1 cfgv==3.4.0 chardet==5.2.0 charset-normalizer==3.4.0 click==8.1.7 cliff==4.7.0 cmd2==2.4.3 cryptography==3.3.2 debtcollector==3.0.0 decorator==5.1.1 defusedxml==0.7.1 Deprecated==1.2.14 distlib==0.3.9 dnspython==2.7.0 docker==4.2.2 dogpile.cache==1.3.3 durationpy==0.9 email_validator==2.2.0 filelock==3.16.1 future==1.0.0 gitdb==4.0.11 GitPython==3.1.43 google-auth==2.35.0 httplib2==0.22.0 identify==2.6.1 idna==3.10 importlib-resources==1.5.0 iso8601==2.1.0 Jinja2==3.1.4 jmespath==1.0.1 jsonpatch==1.33 jsonpointer==3.0.0 jsonschema==4.23.0 jsonschema-specifications==2024.10.1 keystoneauth1==5.8.0 kubernetes==31.0.0 lftools==0.37.10 lxml==5.3.0 MarkupSafe==3.0.1 msgpack==1.1.0 multi_key_dict==2.0.3 munch==4.0.0 netaddr==1.3.0 netifaces==0.11.0 niet==1.4.2 nodeenv==1.9.1 oauth2client==4.1.3 oauthlib==3.2.2 openstacksdk==4.0.0 os-client-config==2.1.0 os-service-types==1.7.0 osc-lib==3.1.0 oslo.config==9.6.0 oslo.context==5.6.0 oslo.i18n==6.4.0 oslo.log==6.1.2 oslo.serialization==5.5.0 oslo.utils==7.3.0 packaging==24.1 pbr==6.1.0 platformdirs==4.3.6 prettytable==3.11.0 pyasn1==0.6.1 pyasn1_modules==0.4.1 pycparser==2.22 pygerrit2==2.0.15 PyGithub==2.4.0 PyJWT==2.9.0 PyNaCl==1.5.0 pyparsing==2.4.7 pyperclip==1.9.0 pyrsistent==0.20.0 python-cinderclient==9.6.0 python-dateutil==2.9.0.post0 python-heatclient==4.0.0 python-jenkins==1.8.2 python-keystoneclient==5.5.0 python-magnumclient==4.7.0 python-openstackclient==7.1.3 python-swiftclient==4.6.0 PyYAML==6.0.2 referencing==0.35.1 requests==2.32.3 requests-oauthlib==2.0.0 requestsexceptions==1.4.0 rfc3986==2.0.0 rpds-py==0.20.0 rsa==4.9 ruamel.yaml==0.18.6 ruamel.yaml.clib==0.2.8 s3transfer==0.10.3 simplejson==3.19.3 six==1.16.0 smmap==5.0.1 soupsieve==2.6 stevedore==5.3.0 tabulate==0.9.0 toml==0.10.2 tomlkit==0.13.2 tqdm==4.66.5 typing_extensions==4.12.2 tzdata==2024.2 urllib3==1.26.20 virtualenv==20.26.6 wcwidth==0.2.13 websocket-client==1.8.0 wrapt==1.16.0 xdg==6.0.0 xmltodict==0.14.2 yq==3.4.3 provisioning config files... copy managed file [global-settings] to file:/w/workspace/it-dep-helm-docker-verify-all@tmp/config12153643560096467173tmp copy managed file [it-dep-settings] to file:/w/workspace/it-dep-helm-docker-verify-all@tmp/config998129823563083803tmp [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins3780596697263328215.sh ---> docker-login.sh nexus3.o-ran-sc.org:10001 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.o-ran-sc.org:10002 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.o-ran-sc.org:10003 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.o-ran-sc.org:10004 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded ---> docker-login.sh ends [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins14737325437973955522.sh [it-dep-helm-docker-verify-all] $ /bin/sh -xe /tmp/jenkins10334891035998638857.sh [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content DOCKER_ROOT=$WORKSPACE CONTAINER_TAG_YAML_DIR= CONTAINER_TAG_METHOD=latest [EnvInject] - Variables injected successfully. [it-dep-helm-docker-verify-all] $ /bin/bash -l /tmp/jenkins11476243438559888104.sh ---> docker-get-container-tag.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/it-dep-helm-docker-verify-all/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-qgG6 from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: yq lf-activate-venv(): INFO: Adding /tmp/venv-qgG6/bin to PATH ---> Docker image tag found: latest [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties file path 'env_docker_inject.txt' [EnvInject] - Variables injected successfully. [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content DOCKER_ARGS=-f ci/Dockerfile DOCKER_ROOT=/w/workspace/it-dep-helm-docker-verify-all CONTAINER_PULL_REGISTRY=nexus3.o-ran-sc.org:10001 CONTAINER_PUSH_REGISTRY=nexus3.o-ran-sc.org:10004 DOCKER_NAME=o-ran-sc/it-dep-helm [EnvInject] - Variables injected successfully. [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins13409003622616572571.sh ---> docker-build.sh Docker version 24.0.2, build cb74dfc Building image: nexus3.o-ran-sc.org:10004/o-ran-sc/it-dep-helm:latest docker build -f ci/Dockerfile -t nexus3.o-ran-sc.org:10004/o-ran-sc/it-dep-helm:latest . #1 [internal] load build definition from Dockerfile #1 transferring dockerfile: 1.33kB done #1 DONE 0.1s #2 [internal] load .dockerignore #2 transferring context: 2B done #2 DONE 0.1s #3 [internal] load metadata for docker.io/library/ubuntu:18.04 #3 DONE 1.1s #4 [internal] load build context #4 DONE 0.0s #5 [1/7] FROM docker.io/library/ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98 #5 resolve docker.io/library/ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98 0.1s done #5 sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98 1.33kB / 1.33kB done #5 sha256:dca176c9663a7ba4c1f0e710986f5a25e672842963d95b960191e2d9f7185ebe 424B / 424B done #5 sha256:f9a80a55f492e823bf5d51f1bd5f87ea3eed1cb31788686aa99a2fb61a27af6a 2.30kB / 2.30kB done #5 sha256:7c457f213c7634afb95a0fb2410a74b7b5bc0ba527033362c240c7a11bef4331 0B / 25.69MB 0.1s #5 sha256:7c457f213c7634afb95a0fb2410a74b7b5bc0ba527033362c240c7a11bef4331 2.10MB / 25.69MB 0.2s #5 ... #4 [internal] load build context #4 transferring context: 13.80MB 0.2s done #4 DONE 0.3s #5 [1/7] FROM docker.io/library/ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98 #5 sha256:7c457f213c7634afb95a0fb2410a74b7b5bc0ba527033362c240c7a11bef4331 12.58MB / 25.69MB 0.3s #5 sha256:7c457f213c7634afb95a0fb2410a74b7b5bc0ba527033362c240c7a11bef4331 22.02MB / 25.69MB 0.4s #5 sha256:7c457f213c7634afb95a0fb2410a74b7b5bc0ba527033362c240c7a11bef4331 25.69MB / 25.69MB 0.5s done #5 extracting sha256:7c457f213c7634afb95a0fb2410a74b7b5bc0ba527033362c240c7a11bef4331 #5 extracting sha256:7c457f213c7634afb95a0fb2410a74b7b5bc0ba527033362c240c7a11bef4331 0.9s done #5 DONE 1.7s #6 [2/7] RUN apt-get update && apt-get -y install curl ca-certificates wget #6 0.516 Get:1 http://security.ubuntu.com/ubuntu bionic-security InRelease [102 kB] #6 0.649 Get:2 http://archive.ubuntu.com/ubuntu bionic InRelease [242 kB] #6 0.912 Get:3 http://security.ubuntu.com/ubuntu bionic-security/multiverse amd64 Packages [23.8 kB] #6 1.000 Get:4 http://security.ubuntu.com/ubuntu bionic-security/universe amd64 Packages [1637 kB] #6 1.302 Get:5 http://security.ubuntu.com/ubuntu bionic-security/main amd64 Packages [3373 kB] #6 1.388 Get:6 http://archive.ubuntu.com/ubuntu bionic-updates InRelease [102 kB] #6 1.416 Get:7 http://security.ubuntu.com/ubuntu bionic-security/restricted amd64 Packages [1688 kB] #6 1.564 Get:8 http://archive.ubuntu.com/ubuntu bionic-backports InRelease [102 kB] #6 1.741 Get:9 http://archive.ubuntu.com/ubuntu bionic/multiverse amd64 Packages [186 kB] #6 1.817 Get:10 http://archive.ubuntu.com/ubuntu bionic/restricted amd64 Packages [13.5 kB] #6 1.822 Get:11 http://archive.ubuntu.com/ubuntu bionic/universe amd64 Packages [11.3 MB] #6 2.707 Get:12 http://archive.ubuntu.com/ubuntu bionic/main amd64 Packages [1344 kB] #6 2.769 Get:13 http://archive.ubuntu.com/ubuntu bionic-updates/restricted amd64 Packages [1728 kB] #6 2.854 Get:14 http://archive.ubuntu.com/ubuntu bionic-updates/universe amd64 Packages [2411 kB] #6 2.954 Get:15 http://archive.ubuntu.com/ubuntu bionic-updates/multiverse amd64 Packages [30.8 kB] #6 2.955 Get:16 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 Packages [3786 kB] #6 3.161 Get:17 http://archive.ubuntu.com/ubuntu bionic-backports/main amd64 Packages [64.0 kB] #6 3.162 Get:18 http://archive.ubuntu.com/ubuntu bionic-backports/universe amd64 Packages [20.6 kB] #6 3.927 Fetched 28.2 MB in 4s (7974 kB/s) #6 3.927 Reading package lists... #6 5.146 Reading package lists... #6 6.182 Building dependency tree... #6 6.351 Reading state information... #6 6.475 The following additional packages will be installed: #6 6.475 krb5-locales libasn1-8-heimdal libcurl4 libgssapi-krb5-2 libgssapi3-heimdal #6 6.475 libhcrypto4-heimdal libheimbase1-heimdal libheimntlm0-heimdal #6 6.475 libhx509-5-heimdal libk5crypto3 libkeyutils1 libkrb5-26-heimdal libkrb5-3 #6 6.475 libkrb5support0 libldap-2.4-2 libldap-common libnghttp2-14 libpsl5 #6 6.475 libroken18-heimdal librtmp1 libsasl2-2 libsasl2-modules libsasl2-modules-db #6 6.476 libsqlite3-0 libssl1.1 libwind0-heimdal openssl publicsuffix #6 6.477 Suggested packages: #6 6.477 krb5-doc krb5-user libsasl2-modules-gssapi-mit #6 6.477 | libsasl2-modules-gssapi-heimdal libsasl2-modules-ldap libsasl2-modules-otp #6 6.477 libsasl2-modules-sql #6 6.567 The following NEW packages will be installed: #6 6.568 ca-certificates curl krb5-locales libasn1-8-heimdal libcurl4 #6 6.568 libgssapi-krb5-2 libgssapi3-heimdal libhcrypto4-heimdal libheimbase1-heimdal #6 6.568 libheimntlm0-heimdal libhx509-5-heimdal libk5crypto3 libkeyutils1 #6 6.568 libkrb5-26-heimdal libkrb5-3 libkrb5support0 libldap-2.4-2 libldap-common #6 6.568 libnghttp2-14 libpsl5 libroken18-heimdal librtmp1 libsasl2-2 #6 6.568 libsasl2-modules libsasl2-modules-db libsqlite3-0 libssl1.1 libwind0-heimdal #6 6.568 openssl publicsuffix wget #6 6.855 0 upgraded, 31 newly installed, 0 to remove and 1 not upgraded. #6 6.855 Need to get 5161 kB of archives. #6 6.855 After this operation, 15.7 MB of additional disk space will be used. #6 6.855 Get:1 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libssl1.1 amd64 1.1.1-1ubuntu2.1~18.04.23 [1303 kB] #6 7.920 Get:2 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 openssl amd64 1.1.1-1ubuntu2.1~18.04.23 [614 kB] #6 7.964 Get:3 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 ca-certificates all 20230311ubuntu0.18.04.1 [151 kB] #6 7.974 Get:4 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libsqlite3-0 amd64 3.22.0-1ubuntu0.7 [499 kB] #6 8.010 Get:5 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 krb5-locales all 1.16-2ubuntu0.4 [13.4 kB] #6 8.012 Get:6 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libkrb5support0 amd64 1.16-2ubuntu0.4 [30.9 kB] #6 8.055 Get:7 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libk5crypto3 amd64 1.16-2ubuntu0.4 [85.3 kB] #6 8.060 Get:8 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libkeyutils1 amd64 1.5.9-9.2ubuntu2.1 [8764 B] #6 8.061 Get:9 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libkrb5-3 amd64 1.16-2ubuntu0.4 [278 kB] #6 8.081 Get:10 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libgssapi-krb5-2 amd64 1.16-2ubuntu0.4 [122 kB] #6 8.090 Get:11 http://archive.ubuntu.com/ubuntu bionic/main amd64 libpsl5 amd64 0.19.1-5build1 [41.8 kB] #6 8.189 Get:12 http://archive.ubuntu.com/ubuntu bionic/main amd64 publicsuffix all 20180223.1310-1 [97.6 kB] #6 8.193 Get:13 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 wget amd64 1.19.4-1ubuntu2.2 [316 kB] #6 8.204 Get:14 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libroken18-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [42.3 kB] #6 8.205 Get:15 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libasn1-8-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [175 kB] #6 8.324 Get:16 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libheimbase1-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [30.3 kB] #6 8.326 Get:17 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libhcrypto4-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [85.9 kB] #6 8.329 Get:18 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libwind0-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [48.0 kB] #6 8.331 Get:19 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libhx509-5-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [107 kB] #6 8.334 Get:20 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libkrb5-26-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [207 kB] #6 8.341 Get:21 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libheimntlm0-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [14.8 kB] #6 8.459 Get:22 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libgssapi3-heimdal amd64 7.5.0+dfsg-1ubuntu0.4 [96.7 kB] #6 8.463 Get:23 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libsasl2-modules-db amd64 2.1.27~101-g0780600+dfsg-3ubuntu2.4 [15.0 kB] #6 8.464 Get:24 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libsasl2-2 amd64 2.1.27~101-g0780600+dfsg-3ubuntu2.4 [49.2 kB] #6 8.466 Get:25 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libldap-common all 2.4.45+dfsg-1ubuntu1.11 [15.8 kB] #6 8.595 Get:26 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libldap-2.4-2 amd64 2.4.45+dfsg-1ubuntu1.11 [154 kB] #6 8.603 Get:27 http://archive.ubuntu.com/ubuntu bionic/main amd64 libnghttp2-14 amd64 1.30.0-1ubuntu1 [77.8 kB] #6 8.605 Get:28 http://archive.ubuntu.com/ubuntu bionic/main amd64 librtmp1 amd64 2.4+20151223.gitfa8646d.1-1 [54.2 kB] #6 8.606 Get:29 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libcurl4 amd64 7.58.0-2ubuntu3.24 [221 kB] #6 8.612 Get:30 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 curl amd64 7.58.0-2ubuntu3.24 [159 kB] #6 8.618 Get:31 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 libsasl2-modules amd64 2.1.27~101-g0780600+dfsg-3ubuntu2.4 [48.9 kB] #6 8.727 debconf: delaying package configuration, since apt-utils is not installed #6 8.759 Fetched 5161 kB in 2s (2533 kB/s) #6 8.826 Selecting previously unselected package libssl1.1:amd64. #6 8.826 (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 4050 files and directories currently installed.) #6 8.834 Preparing to unpack .../00-libssl1.1_1.1.1-1ubuntu2.1~18.04.23_amd64.deb ... #6 8.850 Unpacking libssl1.1:amd64 (1.1.1-1ubuntu2.1~18.04.23) ... #6 9.007 Selecting previously unselected package openssl. #6 9.009 Preparing to unpack .../01-openssl_1.1.1-1ubuntu2.1~18.04.23_amd64.deb ... #6 9.016 Unpacking openssl (1.1.1-1ubuntu2.1~18.04.23) ... #6 9.327 Selecting previously unselected package ca-certificates. #6 9.329 Preparing to unpack .../02-ca-certificates_20230311ubuntu0.18.04.1_all.deb ... #6 9.336 Unpacking ca-certificates (20230311ubuntu0.18.04.1) ... #6 9.552 Selecting previously unselected package libsqlite3-0:amd64. #6 9.554 Preparing to unpack .../03-libsqlite3-0_3.22.0-1ubuntu0.7_amd64.deb ... #6 9.561 Unpacking libsqlite3-0:amd64 (3.22.0-1ubuntu0.7) ... #6 9.657 Selecting previously unselected package krb5-locales. #6 9.660 Preparing to unpack .../04-krb5-locales_1.16-2ubuntu0.4_all.deb ... #6 9.666 Unpacking krb5-locales (1.16-2ubuntu0.4) ... #6 9.730 Selecting previously unselected package libkrb5support0:amd64. #6 9.734 Preparing to unpack .../05-libkrb5support0_1.16-2ubuntu0.4_amd64.deb ... #6 9.745 Unpacking libkrb5support0:amd64 (1.16-2ubuntu0.4) ... #6 9.808 Selecting previously unselected package libk5crypto3:amd64. #6 9.811 Preparing to unpack .../06-libk5crypto3_1.16-2ubuntu0.4_amd64.deb ... #6 9.818 Unpacking libk5crypto3:amd64 (1.16-2ubuntu0.4) ... #6 9.888 Selecting previously unselected package libkeyutils1:amd64. #6 9.890 Preparing to unpack .../07-libkeyutils1_1.5.9-9.2ubuntu2.1_amd64.deb ... #6 9.897 Unpacking libkeyutils1:amd64 (1.5.9-9.2ubuntu2.1) ... #6 9.969 Selecting previously unselected package libkrb5-3:amd64. #6 9.972 Preparing to unpack .../08-libkrb5-3_1.16-2ubuntu0.4_amd64.deb ... #6 9.979 Unpacking libkrb5-3:amd64 (1.16-2ubuntu0.4) ... #6 10.09 Selecting previously unselected package libgssapi-krb5-2:amd64. #6 10.09 Preparing to unpack .../09-libgssapi-krb5-2_1.16-2ubuntu0.4_amd64.deb ... #6 10.10 Unpacking libgssapi-krb5-2:amd64 (1.16-2ubuntu0.4) ... #6 10.19 Selecting previously unselected package libpsl5:amd64. #6 10.19 Preparing to unpack .../10-libpsl5_0.19.1-5build1_amd64.deb ... #6 10.20 Unpacking libpsl5:amd64 (0.19.1-5build1) ... #6 10.26 Selecting previously unselected package publicsuffix. #6 10.26 Preparing to unpack .../11-publicsuffix_20180223.1310-1_all.deb ... #6 10.27 Unpacking publicsuffix (20180223.1310-1) ... #6 10.33 Selecting previously unselected package wget. #6 10.33 Preparing to unpack .../12-wget_1.19.4-1ubuntu2.2_amd64.deb ... #6 10.34 Unpacking wget (1.19.4-1ubuntu2.2) ... #6 10.43 Selecting previously unselected package libroken18-heimdal:amd64. #6 10.43 Preparing to unpack .../13-libroken18-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 10.44 Unpacking libroken18-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 10.52 Selecting previously unselected package libasn1-8-heimdal:amd64. #6 10.52 Preparing to unpack .../14-libasn1-8-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 10.53 Unpacking libasn1-8-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 10.62 Selecting previously unselected package libheimbase1-heimdal:amd64. #6 10.62 Preparing to unpack .../15-libheimbase1-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 10.63 Unpacking libheimbase1-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 10.69 Selecting previously unselected package libhcrypto4-heimdal:amd64. #6 10.69 Preparing to unpack .../16-libhcrypto4-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 10.70 Unpacking libhcrypto4-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 10.78 Selecting previously unselected package libwind0-heimdal:amd64. #6 10.78 Preparing to unpack .../17-libwind0-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 10.79 Unpacking libwind0-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 10.85 Selecting previously unselected package libhx509-5-heimdal:amd64. #6 10.86 Preparing to unpack .../18-libhx509-5-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 10.86 Unpacking libhx509-5-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 10.93 Selecting previously unselected package libkrb5-26-heimdal:amd64. #6 10.93 Preparing to unpack .../19-libkrb5-26-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 10.94 Unpacking libkrb5-26-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 11.03 Selecting previously unselected package libheimntlm0-heimdal:amd64. #6 11.03 Preparing to unpack .../20-libheimntlm0-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 11.04 Unpacking libheimntlm0-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 11.10 Selecting previously unselected package libgssapi3-heimdal:amd64. #6 11.10 Preparing to unpack .../21-libgssapi3-heimdal_7.5.0+dfsg-1ubuntu0.4_amd64.deb ... #6 11.11 Unpacking libgssapi3-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 11.17 Selecting previously unselected package libsasl2-modules-db:amd64. #6 11.17 Preparing to unpack .../22-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3ubuntu2.4_amd64.deb ... #6 11.17 Unpacking libsasl2-modules-db:amd64 (2.1.27~101-g0780600+dfsg-3ubuntu2.4) ... #6 11.23 Selecting previously unselected package libsasl2-2:amd64. #6 11.23 Preparing to unpack .../23-libsasl2-2_2.1.27~101-g0780600+dfsg-3ubuntu2.4_amd64.deb ... #6 11.24 Unpacking libsasl2-2:amd64 (2.1.27~101-g0780600+dfsg-3ubuntu2.4) ... #6 11.31 Selecting previously unselected package libldap-common. #6 11.31 Preparing to unpack .../24-libldap-common_2.4.45+dfsg-1ubuntu1.11_all.deb ... #6 11.31 Unpacking libldap-common (2.4.45+dfsg-1ubuntu1.11) ... #6 11.40 Selecting previously unselected package libldap-2.4-2:amd64. #6 11.41 Preparing to unpack .../25-libldap-2.4-2_2.4.45+dfsg-1ubuntu1.11_amd64.deb ... #6 11.42 Unpacking libldap-2.4-2:amd64 (2.4.45+dfsg-1ubuntu1.11) ... #6 11.49 Selecting previously unselected package libnghttp2-14:amd64. #6 11.50 Preparing to unpack .../26-libnghttp2-14_1.30.0-1ubuntu1_amd64.deb ... #6 11.50 Unpacking libnghttp2-14:amd64 (1.30.0-1ubuntu1) ... #6 11.57 Selecting previously unselected package librtmp1:amd64. #6 11.57 Preparing to unpack .../27-librtmp1_2.4+20151223.gitfa8646d.1-1_amd64.deb ... #6 11.58 Unpacking librtmp1:amd64 (2.4+20151223.gitfa8646d.1-1) ... #6 11.64 Selecting previously unselected package libcurl4:amd64. #6 11.65 Preparing to unpack .../28-libcurl4_7.58.0-2ubuntu3.24_amd64.deb ... #6 11.65 Unpacking libcurl4:amd64 (7.58.0-2ubuntu3.24) ... #6 11.73 Selecting previously unselected package curl. #6 11.73 Preparing to unpack .../29-curl_7.58.0-2ubuntu3.24_amd64.deb ... #6 11.73 Unpacking curl (7.58.0-2ubuntu3.24) ... #6 11.80 Selecting previously unselected package libsasl2-modules:amd64. #6 11.80 Preparing to unpack .../30-libsasl2-modules_2.1.27~101-g0780600+dfsg-3ubuntu2.4_amd64.deb ... #6 11.81 Unpacking libsasl2-modules:amd64 (2.1.27~101-g0780600+dfsg-3ubuntu2.4) ... #6 11.89 Setting up libnghttp2-14:amd64 (1.30.0-1ubuntu1) ... #6 11.91 Setting up libldap-common (2.4.45+dfsg-1ubuntu1.11) ... #6 11.93 Setting up libpsl5:amd64 (0.19.1-5build1) ... #6 11.96 Setting up libsasl2-modules-db:amd64 (2.1.27~101-g0780600+dfsg-3ubuntu2.4) ... #6 11.98 Setting up libsasl2-2:amd64 (2.1.27~101-g0780600+dfsg-3ubuntu2.4) ... #6 12.00 Setting up libroken18-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 12.03 Setting up librtmp1:amd64 (2.4+20151223.gitfa8646d.1-1) ... #6 12.05 Setting up libkrb5support0:amd64 (1.16-2ubuntu0.4) ... #6 12.07 Setting up krb5-locales (1.16-2ubuntu0.4) ... #6 12.09 Setting up publicsuffix (20180223.1310-1) ... #6 12.12 Setting up libssl1.1:amd64 (1.1.1-1ubuntu2.1~18.04.23) ... #6 12.19 debconf: unable to initialize frontend: Dialog #6 12.19 debconf: (TERM is not set, so the dialog frontend is not usable.) #6 12.19 debconf: falling back to frontend: Readline #6 12.19 debconf: unable to initialize frontend: Readline #6 12.19 debconf: (Can't locate Term/ReadLine.pm in @INC (you may need to install the Term::ReadLine module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.26.1 /usr/local/share/perl/5.26.1 /usr/lib/x86_64-linux-gnu/perl5/5.26 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.26 /usr/share/perl/5.26 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at /usr/share/perl5/Debconf/FrontEnd/Readline.pm line 7.) #6 12.19 debconf: falling back to frontend: Teletype #6 12.23 Setting up libheimbase1-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 12.25 Setting up openssl (1.1.1-1ubuntu2.1~18.04.23) ... #6 12.28 Setting up wget (1.19.4-1ubuntu2.2) ... #6 12.31 Setting up libsqlite3-0:amd64 (3.22.0-1ubuntu0.7) ... #6 12.33 Setting up libkeyutils1:amd64 (1.5.9-9.2ubuntu2.1) ... #6 12.35 Setting up libsasl2-modules:amd64 (2.1.27~101-g0780600+dfsg-3ubuntu2.4) ... #6 12.38 Setting up ca-certificates (20230311ubuntu0.18.04.1) ... #6 12.46 debconf: unable to initialize frontend: Dialog #6 12.46 debconf: (TERM is not set, so the dialog frontend is not usable.) #6 12.46 debconf: falling back to frontend: Readline #6 12.46 debconf: unable to initialize frontend: Readline #6 12.46 debconf: (Can't locate Term/ReadLine.pm in @INC (you may need to install the Term::ReadLine module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.26.1 /usr/local/share/perl/5.26.1 /usr/lib/x86_64-linux-gnu/perl5/5.26 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.26 /usr/share/perl/5.26 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at /usr/share/perl5/Debconf/FrontEnd/Readline.pm line 7.) #6 12.46 debconf: falling back to frontend: Teletype #6 12.87 Updating certificates in /etc/ssl/certs... #6 13.49 137 added, 0 removed; done. #6 13.56 Setting up libk5crypto3:amd64 (1.16-2ubuntu0.4) ... #6 13.58 Setting up libwind0-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 13.60 Setting up libasn1-8-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 13.62 Setting up libhcrypto4-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 13.64 Setting up libhx509-5-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 13.67 Setting up libkrb5-3:amd64 (1.16-2ubuntu0.4) ... #6 13.69 Setting up libkrb5-26-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 13.71 Setting up libheimntlm0-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 13.74 Setting up libgssapi-krb5-2:amd64 (1.16-2ubuntu0.4) ... #6 13.76 Setting up libgssapi3-heimdal:amd64 (7.5.0+dfsg-1ubuntu0.4) ... #6 13.79 Setting up libldap-2.4-2:amd64 (2.4.45+dfsg-1ubuntu1.11) ... #6 13.81 Setting up libcurl4:amd64 (7.58.0-2ubuntu3.24) ... #6 13.84 Setting up curl (7.58.0-2ubuntu3.24) ... #6 13.87 Processing triggers for libc-bin (2.27-3ubuntu1.6) ... #6 13.90 Processing triggers for ca-certificates (20230311ubuntu0.18.04.1) ... #6 13.91 Updating certificates in /etc/ssl/certs... #6 14.35 0 added, 0 removed; done. #6 14.35 Running hooks in /etc/ca-certificates/update.d... #6 14.35 done. #6 DONE 15.8s #7 [3/7] RUN wget https://get.helm.sh/helm-v2.17.0-linux-amd64.tar.gz && tar -xvf ../helm-v2.17.0-linux-amd64.tar.gz && mv linux-amd64/helm /usr/local/bin/helm #7 0.493 --2024-10-17 21:38:45-- https://get.helm.sh/helm-v2.17.0-linux-amd64.tar.gz #7 0.495 Resolving get.helm.sh (get.helm.sh)... 13.107.246.69, 2620:1ec:bdf::69 #7 0.497 Connecting to get.helm.sh (get.helm.sh)|13.107.246.69|:443... connected. #7 0.506 HTTP request sent, awaiting response... 200 OK #7 0.515 Length: 25097357 (24M) [application/x-tar] #7 0.516 Saving to: 'helm-v2.17.0-linux-amd64.tar.gz' #7 0.516 #7 0.516 0K .......... .......... .......... .......... .......... 0% 20.1M 1s #7 0.518 50K .......... .......... .......... .......... .......... 0% 29.1M 1s #7 0.520 100K .......... .......... .......... .......... .......... 0% 55.4M 1s #7 0.521 150K .......... .......... .......... .......... .......... 0% 33.9M 1s #7 0.522 200K .......... .......... .......... .......... .......... 1% 37.4M 1s #7 0.523 250K .......... .......... .......... .......... .......... 1% 31.8M 1s #7 0.525 300K .......... .......... .......... .......... .......... 1% 37.9M 1s #7 0.526 350K .......... .......... .......... .......... .......... 1% 31.7M 1s #7 0.528 400K .......... .......... .......... .......... .......... 1% 33.5M 1s #7 0.529 450K .......... .......... .......... .......... .......... 2% 68.1M 1s #7 0.530 500K .......... .......... .......... .......... .......... 2% 82.7M 1s #7 0.530 550K .......... .......... .......... .......... .......... 2% 39.1M 1s #7 0.532 600K .......... .......... .......... .......... .......... 2% 32.8M 1s #7 0.533 650K .......... .......... .......... .......... .......... 2% 27.5M 1s #7 0.535 700K .......... .......... .......... .......... .......... 3% 31.7M 1s #7 0.536 750K .......... .......... .......... .......... .......... 3% 46.6M 1s #7 0.538 800K .......... .......... .......... .......... .......... 3% 32.9M 1s #7 0.539 850K .......... .......... .......... .......... .......... 3% 36.2M 1s #7 0.540 900K .......... .......... .......... .......... .......... 3% 34.6M 1s #7 0.542 950K .......... .......... .......... .......... .......... 4% 114M 1s #7 0.542 1000K .......... .......... .......... .......... .......... 4% 51.7M 1s #7 0.543 1050K .......... .......... .......... .......... .......... 4% 88.2M 1s #7 0.544 1100K .......... .......... .......... .......... .......... 4% 95.8M 1s #7 0.544 1150K .......... .......... .......... .......... .......... 4% 69.9M 1s #7 0.545 1200K .......... .......... .......... .......... .......... 5% 164M 1s #7 0.545 1250K .......... .......... .......... .......... .......... 5% 40.6M 1s #7 0.546 1300K .......... .......... .......... .......... .......... 5% 111M 1s #7 0.547 1350K .......... .......... .......... .......... .......... 5% 93.0M 1s #7 0.547 1400K .......... .......... .......... .......... .......... 5% 105M 1s #7 0.548 1450K .......... .......... .......... .......... .......... 6% 150M 1s #7 0.548 1500K .......... .......... .......... .......... .......... 6% 90.3M 0s #7 0.549 1550K .......... .......... .......... .......... .......... 6% 43.7M 0s #7 0.550 1600K .......... .......... .......... .......... .......... 6% 93.6M 0s #7 0.550 1650K .......... .......... .......... .......... .......... 6% 68.5M 0s #7 0.551 1700K .......... .......... .......... .......... .......... 7% 113M 0s #7 0.551 1750K .......... .......... .......... .......... .......... 7% 82.5M 0s #7 0.552 1800K .......... .......... .......... .......... .......... 7% 89.9M 0s #7 0.553 1850K .......... .......... .......... .......... .......... 7% 136M 0s #7 0.553 1900K .......... .......... .......... .......... .......... 7% 267M 0s #7 0.553 1950K .......... .......... .......... .......... .......... 8% 49.6M 0s #7 0.554 2000K .......... .......... .......... .......... .......... 8% 59.9M 0s #7 0.555 2050K .......... .......... .......... .......... .......... 8% 101M 0s #7 0.556 2100K .......... .......... .......... .......... .......... 8% 52.1M 0s #7 0.556 2150K .......... .......... .......... .......... .......... 8% 251M 0s #7 0.557 2200K .......... .......... .......... .......... .......... 9% 187M 0s #7 0.557 2250K .......... .......... .......... .......... .......... 9% 106M 0s #7 0.557 2300K .......... .......... .......... .......... .......... 9% 115M 0s #7 0.558 2350K .......... .......... .......... .......... .......... 9% 90.7M 0s #7 0.558 2400K .......... .......... .......... .......... .......... 9% 105M 0s #7 0.559 2450K .......... .......... .......... .......... .......... 10% 84.5M 0s #7 0.559 2500K .......... .......... .......... .......... .......... 10% 146M 0s #7 0.560 2550K .......... .......... .......... .......... .......... 10% 82.3M 0s #7 0.560 2600K .......... .......... .......... .......... .......... 10% 195M 0s #7 0.560 2650K .......... .......... .......... .......... .......... 11% 61.7M 0s #7 0.561 2700K .......... .......... .......... .......... .......... 11% 127M 0s #7 0.562 2750K .......... .......... .......... .......... .......... 11% 161M 0s #7 0.562 2800K .......... .......... .......... .......... .......... 11% 105M 0s #7 0.562 2850K .......... .......... .......... .......... .......... 11% 46.4M 0s #7 0.563 2900K .......... .......... .......... .......... .......... 12% 130M 0s #7 0.564 2950K .......... .......... .......... .......... .......... 12% 139M 0s #7 0.564 3000K .......... .......... .......... .......... .......... 12% 141M 0s #7 0.565 3050K .......... .......... .......... .......... .......... 12% 129M 0s #7 0.565 3100K .......... .......... .......... .......... .......... 12% 59.0M 0s #7 0.566 3150K .......... .......... .......... .......... .......... 13% 57.9M 0s #7 0.567 3200K .......... .......... .......... .......... .......... 13% 145M 0s #7 0.567 3250K .......... .......... .......... .......... .......... 13% 88.5M 0s #7 0.567 3300K .......... .......... .......... .......... .......... 13% 148M 0s #7 0.568 3350K .......... .......... .......... .......... .......... 13% 53.5M 0s #7 0.569 3400K .......... .......... .......... .......... .......... 14% 166M 0s #7 0.569 3450K .......... .......... .......... .......... .......... 14% 89.0M 0s #7 0.570 3500K .......... .......... .......... .......... .......... 14% 70.0M 0s #7 0.570 3550K .......... .......... .......... .......... .......... 14% 55.0M 0s #7 0.571 3600K .......... .......... .......... .......... .......... 14% 85.9M 0s #7 0.572 3650K .......... .......... .......... .......... .......... 15% 324M 0s #7 0.572 3700K .......... .......... .......... .......... .......... 15% 97.2M 0s #7 0.572 3750K .......... .......... .......... .......... .......... 15% 121M 0s #7 0.573 3800K .......... .......... .......... .......... .......... 15% 60.7M 0s #7 0.574 3850K .......... .......... .......... .......... .......... 15% 109M 0s #7 0.574 3900K .......... .......... .......... .......... .......... 16% 270M 0s #7 0.574 3950K .......... .......... .......... .......... .......... 16% 57.1M 0s #7 0.575 4000K .......... .......... .......... .......... .......... 16% 61.1M 0s #7 0.576 4050K .......... .......... .......... .......... .......... 16% 129M 0s #7 0.576 4100K .......... .......... .......... .......... .......... 16% 96.0M 0s #7 0.577 4150K .......... .......... .......... .......... .......... 17% 79.1M 0s #7 0.577 4200K .......... .......... .......... .......... .......... 17% 12.8M 0s #7 0.581 4250K .......... .......... .......... .......... .......... 17% 126M 0s #7 0.582 4300K .......... .......... .......... .......... .......... 17% 67.7M 0s #7 0.582 4350K .......... .......... .......... .......... .......... 17% 52.4M 0s #7 0.583 4400K .......... .......... .......... .......... .......... 18% 125M 0s #7 0.584 4450K .......... .......... .......... .......... .......... 18% 130M 0s #7 0.584 4500K .......... .......... .......... .......... .......... 18% 97.5M 0s #7 0.584 4550K .......... .......... .......... .......... .......... 18% 57.7M 0s #7 0.585 4600K .......... .......... .......... .......... .......... 18% 43.2M 0s #7 0.586 4650K .......... .......... .......... .......... .......... 19% 168M 0s #7 0.587 4700K .......... .......... .......... .......... .......... 19% 82.6M 0s #7 0.587 4750K .......... .......... .......... .......... .......... 19% 54.3M 0s #7 0.588 4800K .......... .......... .......... .......... .......... 19% 47.0M 0s #7 0.589 4850K .......... .......... .......... .......... .......... 19% 66.6M 0s #7 0.590 4900K .......... .......... .......... .......... .......... 20% 47.0M 0s #7 0.591 4950K .......... .......... .......... .......... .......... 20% 233M 0s #7 0.591 5000K .......... .......... .......... .......... .......... 20% 70.1M 0s #7 0.592 5050K .......... .......... .......... .......... .......... 20% 43.2M 0s #7 0.593 5100K .......... .......... .......... .......... .......... 21% 24.9M 0s #7 0.595 5150K .......... .......... .......... .......... .......... 21% 133M 0s #7 0.595 5200K .......... .......... .......... .......... .......... 21% 141M 0s #7 0.596 5250K .......... .......... .......... .......... .......... 21% 54.0M 0s #7 0.597 5300K .......... .......... .......... .......... .......... 21% 90.9M 0s #7 0.597 5350K .......... .......... .......... .......... .......... 22% 166M 0s #7 0.598 5400K .......... .......... .......... .......... .......... 22% 149M 0s #7 0.598 5450K .......... .......... .......... .......... .......... 22% 118M 0s #7 0.598 5500K .......... .......... .......... .......... .......... 22% 77.2M 0s #7 0.599 5550K .......... .......... .......... .......... .......... 22% 96.0M 0s #7 0.599 5600K .......... .......... .......... .......... .......... 23% 65.5M 0s #7 0.600 5650K .......... .......... .......... .......... .......... 23% 67.6M 0s #7 0.601 5700K .......... .......... .......... .......... .......... 23% 72.4M 0s #7 0.602 5750K .......... .......... .......... .......... .......... 23% 125M 0s #7 0.602 5800K .......... .......... .......... .......... .......... 23% 56.6M 0s #7 0.603 5850K .......... .......... .......... .......... .......... 24% 210M 0s #7 0.603 5900K .......... .......... .......... .......... .......... 24% 18.3M 0s #7 0.606 5950K .......... .......... .......... .......... .......... 24% 79.4M 0s #7 0.606 6000K .......... .......... .......... .......... .......... 24% 64.3M 0s #7 0.607 6050K .......... .......... .......... .......... .......... 24% 73.4M 0s #7 0.608 6100K .......... .......... .......... .......... .......... 25% 219M 0s #7 0.608 6150K .......... .......... .......... .......... .......... 25% 64.7M 0s #7 0.609 6200K .......... .......... .......... .......... .......... 25% 129M 0s #7 0.609 6250K .......... .......... .......... .......... .......... 25% 142M 0s #7 0.610 6300K .......... .......... .......... .......... .......... 25% 107M 0s #7 0.610 6350K .......... .......... .......... .......... .......... 26% 53.7M 0s #7 0.611 6400K .......... .......... .......... .......... .......... 26% 176M 0s #7 0.611 6450K .......... .......... .......... .......... .......... 26% 105M 0s #7 0.612 6500K .......... .......... .......... .......... .......... 26% 113M 0s #7 0.612 6550K .......... .......... .......... .......... .......... 26% 60.7M 0s #7 0.613 6600K .......... .......... .......... .......... .......... 27% 78.0M 0s #7 0.614 6650K .......... .......... .......... .......... .......... 27% 114M 0s #7 0.614 6700K .......... .......... .......... .......... .......... 27% 176M 0s #7 0.614 6750K .......... .......... .......... .......... .......... 27% 64.2M 0s #7 0.615 6800K .......... .......... .......... .......... .......... 27% 61.6M 0s #7 0.616 6850K .......... .......... .......... .......... .......... 28% 127M 0s #7 0.616 6900K .......... .......... .......... .......... .......... 28% 92.0M 0s #7 0.617 6950K .......... .......... .......... .......... .......... 28% 115M 0s #7 0.617 7000K .......... .......... .......... .......... .......... 28% 39.6M 0s #7 0.618 7050K .......... .......... .......... .......... .......... 28% 62.0M 0s #7 0.619 7100K .......... .......... .......... .......... .......... 29% 253M 0s #7 0.619 7150K .......... .......... .......... .......... .......... 29% 86.6M 0s #7 0.620 7200K .......... .......... .......... .......... .......... 29% 103M 0s #7 0.620 7250K .......... .......... .......... .......... .......... 29% 71.4M 0s #7 0.621 7300K .......... .......... .......... .......... .......... 29% 142M 0s #7 0.621 7350K .......... .......... .......... .......... .......... 30% 212M 0s #7 0.621 7400K .......... .......... .......... .......... .......... 30% 260M 0s #7 0.622 7450K .......... .......... .......... .......... .......... 30% 187M 0s #7 0.622 7500K .......... .......... .......... .......... .......... 30% 106M 0s #7 0.622 7550K .......... .......... .......... .......... .......... 31% 79.8M 0s #7 0.623 7600K .......... .......... .......... .......... .......... 31% 217M 0s #7 0.623 7650K .......... .......... .......... .......... .......... 31% 65.4M 0s #7 0.624 7700K .......... .......... .......... .......... .......... 31% 103M 0s #7 0.624 7750K .......... .......... .......... .......... .......... 31% 108M 0s #7 0.625 7800K .......... .......... .......... .......... .......... 32% 105M 0s #7 0.625 7850K .......... .......... .......... .......... .......... 32% 87.5M 0s #7 0.626 7900K .......... .......... .......... .......... .......... 32% 156M 0s #7 0.626 7950K .......... .......... .......... .......... .......... 32% 58.6M 0s #7 0.627 8000K .......... .......... .......... .......... .......... 32% 63.2M 0s #7 0.628 8050K .......... .......... .......... .......... .......... 33% 109M 0s #7 0.628 8100K .......... .......... .......... .......... .......... 33% 219M 0s #7 0.629 8150K .......... .......... .......... .......... .......... 33% 71.6M 0s #7 0.629 8200K .......... .......... .......... .......... .......... 33% 92.8M 0s #7 0.630 8250K .......... .......... .......... .......... .......... 33% 177M 0s #7 0.630 8300K .......... .......... .......... .......... .......... 34% 132M 0s #7 0.630 8350K .......... .......... .......... .......... .......... 34% 53.0M 0s #7 0.631 8400K .......... .......... .......... .......... .......... 34% 304M 0s #7 0.631 8450K .......... .......... .......... .......... .......... 34% 107M 0s #7 0.632 8500K .......... .......... .......... .......... .......... 34% 124M 0s #7 0.632 8550K .......... .......... .......... .......... .......... 35% 59.6M 0s #7 0.633 8600K .......... .......... .......... .......... .......... 35% 88.7M 0s #7 0.634 8650K .......... .......... .......... .......... .......... 35% 144M 0s #7 0.634 8700K .......... .......... .......... .......... .......... 35% 158M 0s #7 0.634 8750K .......... .......... .......... .......... .......... 35% 69.6M 0s #7 0.635 8800K .......... .......... .......... .......... .......... 36% 61.4M 0s #7 0.636 8850K .......... .......... .......... .......... .......... 36% 110M 0s #7 0.636 8900K .......... .......... .......... .......... .......... 36% 156M 0s #7 0.637 8950K .......... .......... .......... .......... .......... 36% 115M 0s #7 0.637 9000K .......... .......... .......... .......... .......... 36% 28.5M 0s #7 0.639 9050K .......... .......... .......... .......... .......... 37% 111M 0s #7 0.639 9100K .......... .......... .......... .......... .......... 37% 103M 0s #7 0.640 9150K .......... .......... .......... .......... .......... 37% 79.3M 0s #7 0.640 9200K .......... .......... .......... .......... .......... 37% 160M 0s #7 0.641 9250K .......... .......... .......... .......... .......... 37% 152M 0s #7 0.641 9300K .......... .......... .......... .......... .......... 38% 68.7M 0s #7 0.642 9350K .......... .......... .......... .......... .......... 38% 140M 0s #7 0.642 9400K .......... .......... .......... .......... .......... 38% 82.5M 0s #7 0.643 9450K .......... .......... .......... .......... .......... 38% 60.6M 0s #7 0.643 9500K .......... .......... .......... .......... .......... 38% 102M 0s #7 0.644 9550K .......... .......... .......... .......... .......... 39% 112M 0s #7 0.644 9600K .......... .......... .......... .......... .......... 39% 54.8M 0s #7 0.645 9650K .......... .......... .......... .......... .......... 39% 46.3M 0s #7 0.646 9700K .......... .......... .......... .......... .......... 39% 116M 0s #7 0.647 9750K .......... .......... .......... .......... .......... 39% 99.7M 0s #7 0.647 9800K .......... .......... .......... .......... .......... 40% 93.8M 0s #7 0.648 9850K .......... .......... .......... .......... .......... 40% 250M 0s #7 0.648 9900K .......... .......... .......... .......... .......... 40% 291M 0s #7 0.648 9950K .......... .......... .......... .......... .......... 40% 79.7M 0s #7 0.649 10000K .......... .......... .......... .......... .......... 41% 125M 0s #7 0.649 10050K .......... .......... .......... .......... .......... 41% 155M 0s #7 0.649 10100K .......... .......... .......... .......... .......... 41% 60.0M 0s #7 0.650 10150K .......... .......... .......... .......... .......... 41% 31.3M 0s #7 0.652 10200K .......... .......... .......... .......... .......... 41% 61.0M 0s #7 0.653 10250K .......... .......... .......... .......... .......... 42% 99.1M 0s #7 0.653 10300K .......... .......... .......... .......... .......... 42% 81.3M 0s #7 0.654 10350K .......... .......... .......... .......... .......... 42% 62.5M 0s #7 0.655 10400K .......... .......... .......... .......... .......... 42% 249M 0s #7 0.655 10450K .......... .......... .......... .......... .......... 42% 232M 0s #7 0.655 10500K .......... .......... .......... .......... .......... 43% 241M 0s #7 0.655 10550K .......... .......... .......... .......... .......... 43% 66.2M 0s #7 0.656 10600K .......... .......... .......... .......... .......... 43% 85.3M 0s #7 0.656 10650K .......... .......... .......... .......... .......... 43% 137M 0s #7 0.657 10700K .......... .......... .......... .......... .......... 43% 75.6M 0s #7 0.657 10750K .......... .......... .......... .......... .......... 44% 219M 0s #7 0.657 10800K .......... .......... .......... .......... .......... 44% 58.0M 0s #7 0.658 10850K .......... .......... .......... .......... .......... 44% 82.7M 0s #7 0.659 10900K .......... .......... .......... .......... .......... 44% 95.8M 0s #7 0.660 10950K .......... .......... .......... .......... .......... 44% 134M 0s #7 0.660 11000K .......... .......... .......... .......... .......... 45% 95.2M 0s #7 0.660 11050K .......... .......... .......... .......... .......... 45% 141M 0s #7 0.661 11100K .......... .......... .......... .......... .......... 45% 249M 0s #7 0.661 11150K .......... .......... .......... .......... .......... 45% 228M 0s #7 0.661 11200K .......... .......... .......... .......... .......... 45% 155M 0s #7 0.661 11250K .......... .......... .......... .......... .......... 46% 242M 0s #7 0.663 11300K .......... .......... .......... .......... .......... 46% 38.5M 0s #7 0.663 11350K .......... .......... .......... .......... .......... 46% 129M 0s #7 0.663 11400K .......... .......... .......... .......... .......... 46% 153M 0s #7 0.664 11450K .......... .......... .......... .......... .......... 46% 277M 0s #7 0.664 11500K .......... .......... .......... .......... .......... 47% 280M 0s #7 0.664 11550K .......... .......... .......... .......... .......... 47% 63.8M 0s #7 0.665 11600K .......... .......... .......... .......... .......... 47% 116M 0s #7 0.665 11650K .......... .......... .......... .......... .......... 47% 112M 0s #7 0.666 11700K .......... .......... .......... .......... .......... 47% 96.7M 0s #7 0.666 11750K .......... .......... .......... .......... .......... 48% 49.2M 0s #7 0.667 11800K .......... .......... .......... .......... .......... 48% 47.1M 0s #7 0.668 11850K .......... .......... .......... .......... .......... 48% 104M 0s #7 0.669 11900K .......... .......... .......... .......... .......... 48% 73.8M 0s #7 0.669 11950K .......... .......... .......... .......... .......... 48% 123M 0s #7 0.670 12000K .......... .......... .......... .......... .......... 49% 264M 0s #7 0.670 12050K .......... .......... .......... .......... .......... 49% 338M 0s #7 0.670 12100K .......... .......... .......... .......... .......... 49% 312M 0s #7 0.670 12150K .......... .......... .......... .......... .......... 49% 49.7M 0s #7 0.671 12200K .......... .......... .......... .......... .......... 49% 149M 0s #7 0.671 12250K .......... .......... .......... .......... .......... 50% 123M 0s #7 0.673 12300K .......... .......... .......... .......... .......... 50% 253M 0s #7 0.673 12350K .......... .......... .......... .......... .......... 50% 207M 0s #7 0.673 12400K .......... .......... .......... .......... .......... 50% 202M 0s #7 0.673 12450K .......... .......... .......... .......... .......... 51% 207M 0s #7 0.673 12500K .......... .......... .......... .......... .......... 51% 71.5M 0s #7 0.673 12550K .......... .......... .......... .......... .......... 51% 196M 0s #7 0.674 12600K .......... .......... .......... .......... .......... 51% 93.5M 0s #7 0.674 12650K .......... .......... .......... .......... .......... 51% 105M 0s #7 0.675 12700K .......... .......... .......... .......... .......... 52% 76.1M 0s #7 0.675 12750K .......... .......... .......... .......... .......... 52% 39.9M 0s #7 0.676 12800K .......... .......... .......... .......... .......... 52% 72.1M 0s #7 0.677 12850K .......... .......... .......... .......... .......... 52% 99.6M 0s #7 0.678 12900K .......... .......... .......... .......... .......... 52% 113M 0s #7 0.678 12950K .......... .......... .......... .......... .......... 53% 75.8M 0s #7 0.679 13000K .......... .......... .......... .......... .......... 53% 238M 0s #7 0.680 13050K .......... .......... .......... .......... .......... 53% 188M 0s #7 0.680 13100K .......... .......... .......... .......... .......... 53% 211M 0s #7 0.680 13150K .......... .......... .......... .......... .......... 53% 171M 0s #7 0.680 13200K .......... .......... .......... .......... .......... 54% 130M 0s #7 0.680 13250K .......... .......... .......... .......... .......... 54% 107M 0s #7 0.681 13300K .......... .......... .......... .......... .......... 54% 57.8M 0s #7 0.681 13350K .......... .......... .......... .......... .......... 54% 124M 0s #7 0.682 13400K .......... .......... .......... .......... .......... 54% 82.1M 0s #7 0.682 13450K .......... .......... .......... .......... .......... 55% 193M 0s #7 0.683 13500K .......... .......... .......... .......... .......... 55% 86.1M 0s #7 0.683 13550K .......... .......... .......... .......... .......... 55% 83.9M 0s #7 0.684 13600K .......... .......... .......... .......... .......... 55% 285M 0s #7 0.684 13650K .......... .......... .......... .......... .......... 55% 152M 0s #7 0.685 13700K .......... .......... .......... .......... .......... 56% 226M 0s #7 0.685 13750K .......... .......... .......... .......... .......... 56% 225M 0s #7 0.685 13800K .......... .......... .......... .......... .......... 56% 74.4M 0s #7 0.685 13850K .......... .......... .......... .......... .......... 56% 86.0M 0s #7 0.686 13900K .......... .......... .......... .......... .......... 56% 55.2M 0s #7 0.687 13950K .......... .......... .......... .......... .......... 57% 46.0M 0s #7 0.688 14000K .......... .......... .......... .......... .......... 57% 79.6M 0s #7 0.689 14050K .......... .......... .......... .......... .......... 57% 313M 0s #7 0.689 14100K .......... .......... .......... .......... .......... 57% 60.0M 0s #7 0.690 14150K .......... .......... .......... .......... .......... 57% 56.5M 0s #7 0.690 14200K .......... .......... .......... .......... .......... 58% 119M 0s #7 0.691 14250K .......... .......... .......... .......... .......... 58% 115M 0s #7 0.691 14300K .......... .......... .......... .......... .......... 58% 288M 0s #7 0.691 14350K .......... .......... .......... .......... .......... 58% 286M 0s #7 0.692 14400K .......... .......... .......... .......... .......... 58% 239M 0s #7 0.692 14450K .......... .......... .......... .......... .......... 59% 299M 0s #7 0.692 14500K .......... .......... .......... .......... .......... 59% 176M 0s #7 0.692 14550K .......... .......... .......... .......... .......... 59% 134M 0s #7 0.693 14600K .......... .......... .......... .......... .......... 59% 136M 0s #7 0.693 14650K .......... .......... .......... .......... .......... 59% 108M 0s #7 0.693 14700K .......... .......... .......... .......... .......... 60% 51.9M 0s #7 0.694 14750K .......... .......... .......... .......... .......... 60% 133M 0s #7 0.695 14800K .......... .......... .......... .......... .......... 60% 196M 0s #7 0.695 14850K .......... .......... .......... .......... .......... 60% 91.7M 0s #7 0.696 14900K .......... .......... .......... .......... .......... 60% 142M 0s #7 0.697 14950K .......... .......... .......... .......... .......... 61% 212M 0s #7 0.697 15000K .......... .......... .......... .......... .......... 61% 85.6M 0s #7 0.697 15050K .......... .......... .......... .......... .......... 61% 154M 0s #7 0.697 15100K .......... .......... .......... .......... .......... 61% 107M 0s #7 0.697 15150K .......... .......... .......... .......... .......... 62% 82.1M 0s #7 0.698 15200K .......... .......... .......... .......... .......... 62% 93.5M 0s #7 0.698 15250K .......... .......... .......... .......... .......... 62% 110M 0s #7 0.699 15300K .......... .......... .......... .......... .......... 62% 128M 0s #7 0.699 15350K .......... .......... .......... .......... .......... 62% 121M 0s #7 0.700 15400K .......... .......... .......... .......... .......... 63% 70.0M 0s #7 0.700 15450K .......... .......... .......... .......... .......... 63% 102M 0s #7 0.701 15500K .......... .......... .......... .......... .......... 63% 192M 0s #7 0.701 15550K .......... .......... .......... .......... .......... 63% 129M 0s #7 0.702 15600K .......... .......... .......... .......... .......... 63% 81.5M 0s #7 0.702 15650K .......... .......... .......... .......... .......... 64% 96.5M 0s #7 0.703 15700K .......... .......... .......... .......... .......... 64% 95.7M 0s #7 0.703 15750K .......... .......... .......... .......... .......... 64% 205M 0s #7 0.703 15800K .......... .......... .......... .......... .......... 64% 86.8M 0s #7 0.704 15850K .......... .......... .......... .......... .......... 64% 38.0M 0s #7 0.705 15900K .......... .......... .......... .......... .......... 65% 112M 0s #7 0.706 15950K .......... .......... .......... .......... .......... 65% 106M 0s #7 0.706 16000K .......... .......... .......... .......... .......... 65% 168M 0s #7 0.706 16050K .......... .......... .......... .......... .......... 65% 108M 0s #7 0.707 16100K .......... .......... .......... .......... .......... 65% 240M 0s #7 0.707 16150K .......... .......... .......... .......... .......... 66% 95.7M 0s #7 0.708 16200K .......... .......... .......... .......... .......... 66% 228M 0s #7 0.708 16250K .......... .......... .......... .......... .......... 66% 87.4M 0s #7 0.708 16300K .......... .......... .......... .......... .......... 66% 130M 0s #7 0.709 16350K .......... .......... .......... .......... .......... 66% 75.8M 0s #7 0.709 16400K .......... .......... .......... .......... .......... 67% 89.9M 0s #7 0.710 16450K .......... .......... .......... .......... .......... 67% 267M 0s #7 0.710 16500K .......... .......... .......... .......... .......... 67% 98.9M 0s #7 0.711 16550K .......... .......... .......... .......... .......... 67% 65.5M 0s #7 0.711 16600K .......... .......... .......... .......... .......... 67% 126M 0s #7 0.712 16650K .......... .......... .......... .......... .......... 68% 110M 0s #7 0.712 16700K .......... .......... .......... .......... .......... 68% 286M 0s #7 0.712 16750K .......... .......... .......... .......... .......... 68% 68.7M 0s #7 0.713 16800K .......... .......... .......... .......... .......... 68% 103M 0s #7 0.713 16850K .......... .......... .......... .......... .......... 68% 120M 0s #7 0.714 16900K .......... .......... .......... .......... .......... 69% 165M 0s #7 0.714 16950K .......... .......... .......... .......... .......... 69% 69.8M 0s #7 0.715 17000K .......... .......... .......... .......... .......... 69% 70.4M 0s #7 0.716 17050K .......... .......... .......... .......... .......... 69% 202M 0s #7 0.716 17100K .......... .......... .......... .......... .......... 69% 93.5M 0s #7 0.716 17150K .......... .......... .......... .......... .......... 70% 65.4M 0s #7 0.717 17200K .......... .......... .......... .......... .......... 70% 93.5M 0s #7 0.718 17250K .......... .......... .......... .......... .......... 70% 183M 0s #7 0.718 17300K .......... .......... .......... .......... .......... 70% 219M 0s #7 0.718 17350K .......... .......... .......... .......... .......... 70% 129M 0s #7 0.719 17400K .......... .......... .......... .......... .......... 71% 68.2M 0s #7 0.719 17450K .......... .......... .......... .......... .......... 71% 82.3M 0s #7 0.720 17500K .......... .......... .......... .......... .......... 71% 165M 0s #7 0.720 17550K .......... .......... .......... .......... .......... 71% 111M 0s #7 0.721 17600K .......... .......... .......... .......... .......... 72% 111M 0s #7 0.721 17650K .......... .......... .......... .......... .......... 72% 87.7M 0s #7 0.722 17700K .......... .......... .......... .......... .......... 72% 65.1M 0s #7 0.722 17750K .......... .......... .......... .......... .......... 72% 152M 0s #7 0.723 17800K .......... .......... .......... .......... .......... 72% 136M 0s #7 0.723 17850K .......... .......... .......... .......... .......... 73% 87.1M 0s #7 0.724 17900K .......... .......... .......... .......... .......... 73% 98.4M 0s #7 0.724 17950K .......... .......... .......... .......... .......... 73% 228M 0s #7 0.725 18000K .......... .......... .......... .......... .......... 73% 64.8M 0s #7 0.725 18050K .......... .......... .......... .......... .......... 73% 103M 0s #7 0.725 18100K .......... .......... .......... .......... .......... 74% 78.6M 0s #7 0.726 18150K .......... .......... .......... .......... .......... 74% 199M 0s #7 0.726 18200K .......... .......... .......... .......... .......... 74% 141M 0s #7 0.727 18250K .......... .......... .......... .......... .......... 74% 82.5M 0s #7 0.727 18300K .......... .......... .......... .......... .......... 74% 77.1M 0s #7 0.728 18350K .......... .......... .......... .......... .......... 75% 133M 0s #7 0.728 18400K .......... .......... .......... .......... .......... 75% 90.2M 0s #7 0.729 18450K .......... .......... .......... .......... .......... 75% 111M 0s #7 0.729 18500K .......... .......... .......... .......... .......... 75% 57.9M 0s #7 0.730 18550K .......... .......... .......... .......... .......... 75% 164M 0s #7 0.730 18600K .......... .......... .......... .......... .......... 76% 115M 0s #7 0.731 18650K .......... .......... .......... .......... .......... 76% 59.6M 0s #7 0.732 18700K .......... .......... .......... .......... .......... 76% 97.5M 0s #7 0.732 18750K .......... .......... .......... .......... .......... 76% 101M 0s #7 0.733 18800K .......... .......... .......... .......... .......... 76% 192M 0s #7 0.733 18850K .......... .......... .......... .......... .......... 77% 107M 0s #7 0.733 18900K .......... .......... .......... .......... .......... 77% 119M 0s #7 0.734 18950K .......... .......... .......... .......... .......... 77% 98.7M 0s #7 0.734 19000K .......... .......... .......... .......... .......... 77% 88.9M 0s #7 0.735 19050K .......... .......... .......... .......... .......... 77% 95.2M 0s #7 0.735 19100K .......... .......... .......... .......... .......... 78% 209M 0s #7 0.736 19150K .......... .......... .......... .......... .......... 78% 186M 0s #7 0.736 19200K .......... .......... .......... .......... .......... 78% 78.5M 0s #7 0.736 19250K .......... .......... .......... .......... .......... 78% 86.4M 0s #7 0.737 19300K .......... .......... .......... .......... .......... 78% 108M 0s #7 0.737 19350K .......... .......... .......... .......... .......... 79% 86.3M 0s #7 0.738 19400K .......... .......... .......... .......... .......... 79% 76.8M 0s #7 0.739 19450K .......... .......... .......... .......... .......... 79% 183M 0s #7 0.739 19500K .......... .......... .......... .......... .......... 79% 104M 0s #7 0.739 19550K .......... .......... .......... .......... .......... 79% 62.0M 0s #7 0.740 19600K .......... .......... .......... .......... .......... 80% 109M 0s #7 0.741 19650K .......... .......... .......... .......... .......... 80% 79.6M 0s #7 0.741 19700K .......... .......... .......... .......... .......... 80% 198M 0s #7 0.742 19750K .......... .......... .......... .......... .......... 80% 83.3M 0s #7 0.742 19800K .......... .......... .......... .......... .......... 80% 84.7M 0s #7 0.743 19850K .......... .......... .......... .......... .......... 81% 228M 0s #7 0.743 19900K .......... .......... .......... .......... .......... 81% 299M 0s #7 0.743 19950K .......... .......... .......... .......... .......... 81% 336M 0s #7 0.743 20000K .......... .......... .......... .......... .......... 81% 85.8M 0s #7 0.744 20050K .......... .......... .......... .......... .......... 82% 92.4M 0s #7 0.744 20100K .......... .......... .......... .......... .......... 82% 120M 0s #7 0.745 20150K .......... .......... .......... .......... .......... 82% 66.7M 0s #7 0.745 20200K .......... .......... .......... .......... .......... 82% 142M 0s #7 0.746 20250K .......... .......... .......... .......... .......... 82% 93.1M 0s #7 0.746 20300K .......... .......... .......... .......... .......... 83% 133M 0s #7 0.747 20350K .......... .......... .......... .......... .......... 83% 100M 0s #7 0.747 20400K .......... .......... .......... .......... .......... 83% 156M 0s #7 0.747 20450K .......... .......... .......... .......... .......... 83% 123M 0s #7 0.748 20500K .......... .......... .......... .......... .......... 83% 358M 0s #7 0.748 20550K .......... .......... .......... .......... .......... 84% 447M 0s #7 0.748 20600K .......... .......... .......... .......... .......... 84% 65.8M 0s #7 0.749 20650K .......... .......... .......... .......... .......... 84% 89.1M 0s #7 0.749 20700K .......... .......... .......... .......... .......... 84% 150M 0s #7 0.750 20750K .......... .......... .......... .......... .......... 84% 169M 0s #7 0.750 20800K .......... .......... .......... .......... .......... 85% 79.0M 0s #7 0.751 20850K .......... .......... .......... .......... .......... 85% 73.4M 0s #7 0.751 20900K .......... .......... .......... .......... .......... 85% 118M 0s #7 0.752 20950K .......... .......... .......... .......... .......... 85% 245M 0s #7 0.752 21000K .......... .......... .......... .......... .......... 85% 90.5M 0s #7 0.752 21050K .......... .......... .......... .......... .......... 86% 74.7M 0s #7 0.753 21100K .......... .......... .......... .......... .......... 86% 106M 0s #7 0.754 21150K .......... .......... .......... .......... .......... 86% 148M 0s #7 0.754 21200K .......... .......... .......... .......... .......... 86% 121M 0s #7 0.754 21250K .......... .......... .......... .......... .......... 86% 75.3M 0s #7 0.755 21300K .......... .......... .......... .......... .......... 87% 88.6M 0s #7 0.756 21350K .......... .......... .......... .......... .......... 87% 138M 0s #7 0.756 21400K .......... .......... .......... .......... .......... 87% 222M 0s #7 0.756 21450K .......... .......... .......... .......... .......... 87% 109M 0s #7 0.757 21500K .......... .......... .......... .......... .......... 87% 90.2M 0s #7 0.757 21550K .......... .......... .......... .......... .......... 88% 137M 0s #7 0.758 21600K .......... .......... .......... .......... .......... 88% 99.9M 0s #7 0.758 21650K .......... .......... .......... .......... .......... 88% 140M 0s #7 0.758 21700K .......... .......... .......... .......... .......... 88% 122M 0s #7 0.759 21750K .......... .......... .......... .......... .......... 88% 69.2M 0s #7 0.759 21800K .......... .......... .......... .......... .......... 89% 126M 0s #7 0.760 21850K .......... .......... .......... .......... .......... 89% 84.5M 0s #7 0.760 21900K .......... .......... .......... .......... .......... 89% 351M 0s #7 0.760 21950K .......... .......... .......... .......... .......... 89% 66.7M 0s #7 0.761 22000K .......... .......... .......... .......... .......... 89% 91.5M 0s #7 0.762 22050K .......... .......... .......... .......... .......... 90% 101M 0s #7 0.762 22100K .......... .......... .......... .......... .......... 90% 180M 0s #7 0.762 22150K .......... .......... .......... .......... .......... 90% 51.1M 0s #7 0.763 22200K .......... .......... .......... .......... .......... 90% 117M 0s #7 0.764 22250K .......... .......... .......... .......... .......... 90% 345M 0s #7 0.764 22300K .......... .......... .......... .......... .......... 91% 148M 0s #7 0.765 22350K .......... .......... .......... .......... .......... 91% 303M 0s #7 0.765 22400K .......... .......... .......... .......... .......... 91% 60.9M 0s #7 0.765 22450K .......... .......... .......... .......... .......... 91% 71.4M 0s #7 0.766 22500K .......... .......... .......... .......... .......... 92% 125M 0s #7 0.766 22550K .......... .......... .......... .......... .......... 92% 106M 0s #7 0.767 22600K .......... .......... .......... .......... .......... 92% 48.2M 0s #7 0.768 22650K .......... .......... .......... .......... .......... 92% 68.8M 0s #7 0.768 22700K .......... .......... .......... .......... .......... 92% 84.6M 0s #7 0.769 22750K .......... .......... .......... .......... .......... 93% 182M 0s #7 0.769 22800K .......... .......... .......... .......... .......... 93% 103M 0s #7 0.770 22850K .......... .......... .......... .......... .......... 93% 116M 0s #7 0.770 22900K .......... .......... .......... .......... .......... 93% 83.4M 0s #7 0.771 22950K .......... .......... .......... .......... .......... 93% 112M 0s #7 0.771 23000K .......... .......... .......... .......... .......... 94% 74.0M 0s #7 0.772 23050K .......... .......... .......... .......... .......... 94% 83.4M 0s #7 0.773 23100K .......... .......... .......... .......... .......... 94% 86.5M 0s #7 0.773 23150K .......... .......... .......... .......... .......... 94% 106M 0s #7 0.774 23200K .......... .......... .......... .......... .......... 94% 55.5M 0s #7 0.774 23250K .......... .......... .......... .......... .......... 95% 86.7M 0s #7 0.775 23300K .......... .......... .......... .......... .......... 95% 60.7M 0s #7 0.776 23350K .......... .......... .......... .......... .......... 95% 124M 0s #7 0.776 23400K .......... .......... .......... .......... .......... 95% 78.9M 0s #7 0.777 23450K .......... .......... .......... .......... .......... 95% 86.2M 0s #7 0.777 23500K .......... .......... .......... .......... .......... 96% 76.5M 0s #7 0.778 23550K .......... .......... .......... .......... .......... 96% 57.5M 0s #7 0.779 23600K .......... .......... .......... .......... .......... 96% 105M 0s #7 0.779 23650K .......... .......... .......... .......... .......... 96% 140M 0s #7 0.780 23700K .......... .......... .......... .......... .......... 96% 124M 0s #7 0.780 23750K .......... .......... .......... .......... .......... 97% 145M 0s #7 0.780 23800K .......... .......... .......... .......... .......... 97% 136M 0s #7 0.781 23850K .......... .......... .......... .......... .......... 97% 144M 0s #7 0.781 23900K .......... .......... .......... .......... .......... 97% 161M 0s #7 0.781 23950K .......... .......... .......... .......... .......... 97% 114M 0s #7 0.782 24000K .......... .......... .......... .......... .......... 98% 59.6M 0s #7 0.783 24050K .......... .......... .......... .......... .......... 98% 79.6M 0s #7 0.783 24100K .......... .......... .......... .......... .......... 98% 115M 0s #7 0.785 24150K .......... .......... .......... .......... .......... 98% 393M 0s #7 0.785 24200K .......... .......... .......... .......... .......... 98% 380M 0s #7 0.785 24250K .......... .......... .......... .......... .......... 99% 407M 0s #7 0.785 24300K .......... .......... .......... .......... .......... 99% 305M 0s #7 0.785 24350K .......... .......... .......... .......... .......... 99% 382M 0s #7 0.785 24400K .......... .......... .......... .......... .......... 99% 317M 0s #7 0.785 24450K .......... .......... .......... .......... .......... 99% 348M 0s #7 0.785 24500K ......... 100% 572M=0.3s #7 0.785 #7 0.785 2024-10-17 21:38:45 (88.9 MB/s) - 'helm-v2.17.0-linux-amd64.tar.gz' saved [25097357/25097357] #7 0.785 #7 0.788 linux-amd64/ #7 0.788 linux-amd64/README.md #7 0.788 linux-amd64/LICENSE #7 0.788 linux-amd64/helm #7 1.073 linux-amd64/tiller #7 DONE 1.6s #8 [4/7] RUN helm init -c --skip-repos #8 0.497 Creating /root/.helm #8 0.497 Creating /root/.helm/repository #8 0.497 Creating /root/.helm/repository/cache #8 0.497 Creating /root/.helm/repository/local #8 0.497 Creating /root/.helm/plugins #8 0.498 Creating /root/.helm/starters #8 0.498 Creating /root/.helm/cache/archive #8 0.498 Creating /root/.helm/repository/repositories.yaml #8 0.498 $HELM_HOME has been configured at /root/.helm. #8 0.498 Not installing Tiller due to 'client-only' flag having been set #8 DONE 0.7s #9 [5/7] COPY . /tmp/it-dep #9 DONE 0.3s #10 [6/7] RUN rm -rf /tmp/it-dep/smo-install #10 DONE 0.6s #11 [7/7] RUN /tmp/it-dep/bin/verify-ric-charts #11 0.521 Package ric-common and serve it using Helm local repo #11 0.696 Successfully packaged chart and saved it to: /tmp/ric-common-3.3.2.tgz #11 0.765 Successfully packaged chart and saved it to: /tmp/aux-common-3.0.0.tgz #11 0.830 Make sure that helm local repo is added #11 0.884 Error: no repo named "local" found #11 0.940 Error: no repo named "stable" found #11 0.998 "local" has been added to your repositories #11 1.000 Create array of helm charts #11 1.006 *************************************** #11 1.006 Remove nonrtric parent chart from linting as its a conceptual visualization of Nonrtric components. This chart doesn't contain any templates & it's primarily #11 1.006 used for grouping of all Nonrtric components in deployment #11 1.007 Update chart dependency for directory /tmp/it-dep/bin/../ric-common/Common-Template/helm/ric-common #11 1.063 No requirements found in /tmp/it-dep/ric-common/Common-Template/helm/ric-common/charts. #11 1.128 *************************************************************************************************************** #11 1.130 ==> Linting /tmp/it-dep/bin/../ric-common/Common-Template/helm/ric-common #11 1.130 [INFO] Chart.yaml: icon is recommended #11 1.130 #11 1.130 1 chart(s) linted, no failures #11 1.131 *************************************************************************************************************** #11 1.200 *************************************************************************************************************** #11 2.205 *************************************************************************************************************** #11 2.205 Skip Nonrtric Parent chart #11 2.205 Update chart dependency for directory /tmp/it-dep/bin/../ric-common/Common-Template/helm/aux-common #11 2.261 No requirements found in /tmp/it-dep/ric-common/Common-Template/helm/aux-common/charts. #11 2.325 *************************************************************************************************************** #11 2.326 ==> Linting /tmp/it-dep/bin/../ric-common/Common-Template/helm/aux-common #11 2.326 [INFO] Chart.yaml: icon is recommended #11 2.326 #11 2.326 1 chart(s) linted, no failures #11 2.328 *************************************************************************************************************** #11 2.386 *************************************************************************************************************** #11 3.390 *************************************************************************************************************** #11 3.390 Update chart dependency for directory /tmp/it-dep/bin/../ric-aux/helm/portal #11 3.449 Hang tight while we grab the latest from your chart repositories... #11 3.452 ...Successfully got an update from the "local" chart repository #11 3.452 Update Complete. #11 3.464 Saving 1 charts #11 3.464 Downloading aux-common from repo http://127.0.0.1:8879/charts #11 3.465 Deleting outdated charts #11 3.629 *************************************************************************************************************** #11 3.631 ==> Linting /tmp/it-dep/bin/../ric-aux/helm/portal #11 3.631 [INFO] Chart.yaml: icon is recommended #11 3.631 #11 3.631 1 chart(s) linted, no failures #11 3.633 *************************************************************************************************************** #11 3.817 *************************************************************************************************************** #11 3.818 --- #11 3.818 # Source: portal/charts/portal-app/templates/secret.yaml #11 3.818 # Copyright © 2018 Amdocs, Bell Canada, AT&T #11 3.818 # #11 3.818 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.818 # you may not use this file except in compliance with the License. #11 3.818 # You may obtain a copy of the License at #11 3.818 # #11 3.818 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.818 # #11 3.818 # Unless required by applicable law or agreed to in writing, software #11 3.818 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.818 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.818 # See the License for the specific language governing permissions and #11 3.818 # limitations under the License. #11 3.818 #11 3.818 apiVersion: v1 #11 3.818 kind: Secret #11 3.818 metadata: #11 3.818 name: release-name-portal-app-authz-onapportal #11 3.818 namespace: default #11 3.818 labels: #11 3.818 app: portal-app #11 3.818 chart: portal-app-5.0.0 #11 3.818 release: release-name #11 3.818 heritage: Tiller #11 3.818 type: Opaque #11 3.818 data: #11 3.818 keystoreONAPPortal.p12: MIIQSwIBAzCCEAQGCSqGSIb3DQEHAaCCD/UEgg/xMIIP7TCCBYkGCSqGSIb3DQEHAaCCBXoEggV2MIIFcjCCBW4GCyqGSIb3DQEMCgECoIIE+zCCBPcwKQYKKoZIhvcNAQwBAzAbBBTWXnoxFf3v9aWjQIbZ9DknmPpY6gIDAMNQBIIEyIrc0+lEJTBzC/fQj3Y4UuMJfkM6whIGZXlclCjl/R6VskwiWK7kZVoAXVEJFGnJTWtOEUpeVEO7/N5Hrn5PpAGxbrLI6Vil24E4U3CrYdUCMykL8WZhbwGOFDR/kTEU7XBxgcLxmGdMJybJFi7kFcqcZv7XsJCpDDs/SV+iuad89ISSjq4oZJWNW/Cyjs1wGFdN0RXNSUft48c/lVgBPVXVbCvah4UuhO4BDhJl8kNI6I2YNvDEXQro/SNGUgHNC++/ukLdqeO0aH88nSk5BhhjbdQHnYWn/HYXB5Ip+VEb2LQYobcBCLvZqsD/Hlxf0B669xwOL9NA5TXl+ZiKCQi6RPi162D8JK5S8W4IuRMdMawqvVh8PXRi14jT4F8/nsM8N41kdXiyiU6XQ9D8R5A2G9VVJuq54zTH1hRzxfggXU54i9MMoq9hlW8azvfbgLN/GjCeDwxDz4cklgU1Kig60/K3bi0JPlQmPGPexmDy4E24yF03mLTodu88Bry8kwy2gdotP+Fv0PCpsTcDaoUeuf60oku8a8orKn3XsJBjOi0QD4vaPXZdX6A6CeJ9m/+YbbmuI/bJ5Nfr5+IVfqkcopc0r7zNJjp1xHqtFOa7KexxR21D0A7DJULdhyDvJF2sryWGn5ETD/aT+H56Kr9yLTwkndfcVW0FMuAyf7+WtSpgev55JkaUv+zCaRkAsSZPxkRIVPpEwVeQO+5vhgJCcaH5ytVkDf6/yZByRpTO5FJhLdd/p2QEP1BwouKt/lUnrCsyhpA7V+eHXsXW4Xs+Q94nPvtjtmhL5Ll8YTr7Y1nudifSA78ySxD6zO1fcOM2ODnaI7XDtIsKrILhzTECWmnnMBI3D4WAICOJdjJjr5z6h7GJFK2NbQCmG92KLC0y2NGhyZY+b98gXmVWgXowKUzYntfTG/8NNYFL74jlohGImmavriK3Ez0OnlXN6dR8knn2IOBO3V0TaPBlX1Qf1Mc0nyGtCbg59hSQdqHQEyazqgTonSGRRA5HpWIxtgitIMk9AsgFcDEYJ8ba5+8hN0Wl13rwt1rXw0wfPgWD8CA+8NKu4Hypggmkzw6BDRWAD0+NLeqdikuY+vxxsvfs07zJH6whbnE2jH/myI6ke+RlzUxXyJcKrOJ4LX0qemVtT48Ty7f7QPV3M+k4Q4NaPctRVURotzSOrRF1i784gqoqrvXnuKutS8AuGyf44IqswH/pcuZziynCeDbYh3kIVR5D01l3NPA7PZ8A1ZgTS18ud3R/U2UKkjDF+KNgl9aDGzMfqcXiL832whJHcWV+4C5OCwel8ytBl65ER+d+JFZ/LV5C1Rr7cCxxIIQOYOTwv3KN9WaaHzTQunImy4vsxk3QQbPQVgLy4rqSaLyF6c3RDB39Voxu6HMPabiOJ7rS6DQK7IjBayaQhPAxrq9doEd/7il1cjh1fcyzuK5+mTftMvpDcoYbuZjCbvBRAoH057hrpiLgSquDukLBWx0ZChmyiwDAn8Ih68tlh4Qs3N9sp0Zrof1hfCShXdkqvJDJs8uUC8uWvDCuDY2Sv84xyZ+W5cKdBK7/S36dIvJUactRv2m1wpry+7Gg7cv4VxEDCOBRJ7oWc+XtIBMBh7BEnD5pmayBbzFgMDsGCSqGSIb3DQEJFDEuHiwAcABvAHIAdABhAGwAQABwAG8AcgB0AGEAbAAuAG8AbgBhAHAALgBvAHIAZzAhBgkqhkiG9w0BCRUxFAQSVGltZSAxNTU1MzYzMzY0ODk1MIIKXAYJKoZIhvcNAQcGoIIKTTCCCkkCAQAwggpCBgkqhkiG9w0BBwEwKQYKKoZIhvcNAQwBBjAbBBSF1hwE38DZpWCsgtBjySJZs5PMHAIDAMNQgIIKCPYGcosLQc1AGpvImu/ayQtEf+9gSxhCsez0giXlY2f4b4abGDNa50bi8rLNJMYqY5bJcKppCNiaSQcy44eaUAjg5bsBvBxCk8S73oC21Ih5Uhjucj0bFGuq5AiQ9kBdkJfigq97a8AEvBj0vPYhzw9Co65Zn0AZ5PyNVr9XMf7AF91SMfQ/ZuMllCpNH6d/UnziP70CLycES9EU/59kl2sTSfFVEi9UyD1Yphh8YPZTbdzFqRR7E+t7uVrXtQTfGdM7hROFNEB98HVbd4iL1EFhlRT1ZXC4pjx2qpqLtjPgd3WyKT22/LQK4HveJs7NkNVv0DwUPcFb2rvpszfLmVYXQx5COXByU9vBFt/Vk9wOvvur0HmRvheCKX1teXamsElnyJrNeCHDVTKVmiu3otGu2KSo0pxUkOvJnGdeCfFlyTcQIXTpvltbCEDi/UrotSkbNMtJ9OwXDXn36s7rnlI3q90B2E3ISFFj115DmFt9VgXqGqftT0TEs6/5hJqurnx+o+XrX3FiOlRmWuOP85uSFZ92IyDE56qOVwuQrYEm3iB9z9ZONQg83eBFgjQr1rPcO7Ha9IxOyj7vFYOkxmjuYkmAUfW8UPlXorCo8QI0/4llQkMdMw9CvXay7DytozBElYErqulw5uk23rVLSOciT1znwPlk8KiGo5Wl9B9WDq9O8wgZR8lwGnhC5VDxGskjItyAXo28YFzQzAPKWHTQrok125XtqR4piJG1MEekIgtPHkcRs2fBHPSSOUMqwBJFybSnC9kcc63WE3WyHMXSU3ky0w8zDVm3D8EUTZ4VKkRvKnK/gGTNcqDVKF5DurOAwCQJT63MWXK5WMrVTJaO32UxK7p44fDQN0NPPTz1b26ETg4XlEYhwuGlZ3gnYIhabxaqf54d/hqofgIKIp95DTr8ptRhD/05QwiXIYsoZiBn/CqrTx/YrlOP6klEw/qd0b/ohBZrzqIT8s1HNHlZulMJrFafMsRQIGC20m17BXsG52TMuZ226qVt/7RyU/q/XKTPYqE5s55IHEnqL7Jx2EEE2CbQ+vx143qytepAuOP9mcCXdtl5eUrvmgMsyKodXeoz2yvQY+I9hP6Dh9AYIhSlNk0fCHZ35sOQtnDYL+e3fhlnXQPEzAA58+mgsvN9B7BMO2uuEAHYSq4qb6pzmcvKbQ200+uIiwizz3U2Szxt/dh0EdUr/itW549z/y7YZmexrQbsQiQCjCw8Aut0TlMix/C1cQQKgTyivTuNBHy9vhGsllePcNv96blNJzCJlq0LZzZUiETNjA2PiZ8EAfAdSl2RLkT7x2sPPjVf0eldBl1eC9lqdHsm0Pd8yrmLbWD8WjFe5UcT7PiFh/47Kj/ZeOjL/GtCRP9B1Qqhr9/nwkInUs9Hw98wi3ONXzqN24Hix7e+6QWVQrW1ap8jbJPBNEW6jHLpwEJVW5NKJsQLRLKr7+9s/9pShhHAGNp5ISjgfr2AmquB0SSsUCFH2fIYuPuzS76248TbXM9Mx3KWnWZjADCAjMkTWXoL2byLnJaxVqjri2bRvcN8DUH/QBFnWyPIaIP1pfrs5q4eBhsYkkx80UchsGNsuHu8zQbhE/OSb7NLIfCc8JJbOoyXoUKDc/8TA5SRpbUQDLJ8bfliVXjxwfa145GJG5xhjJwFgc5izhIYkmvRwkfNFwmQ2Ll3tPCAUgcS/S43xp0O/bX3KcbrFULe+GKu4cb4L7uC7XZz4UAa2zqFh8sV/GM3v0fehBWLZjLXMt/x7qiM1OxGSrKXpUcqW3h+5cNyVPT/kbl9R/YU4sXhQhU0RiBi7lQ5r//1nXHmXJxe3kkLlwGOh/d88F7+BDW5AP9xbZcemz6yzTuCO79bSWW9MEq7dtEvddD+nhPuzXkG7nYegD3wZDyieGBYMGZARrSN1mqSgqJ4IjVnl//PauwnHge+Xezf5dvmym3R47wqsFJb5rROtzWmIpbcKY28r5wmijoB2mgvN2IsKnpIZZQxAJNSnfHes6ZdML+MUYRft80hU56QBvgttFzk43IpX+TO2C2ZPRiBfAUhvNchjIEa1T3UHTSHydbIxE9UY5LiKilQO37HkwW78ZP/b+R9Mlo7VAjerCNo2ekQ+nUt1JH9EmHmTf7+lTZMGVz+ei+OCLCi4ftQIBNtdsiNunWmg4//29hYuTVwuhpaFWQGbouNWRjEZWQtKCeGseXRk8r3HOBIDyx/gRHbFb2gU+ghKxf0JtVq7W7GaBhwltn/mNo2lGFnZniBrUrHhrZeeCZNbTmQzM5RVbmBddXtBX2gaixX6nqHQIUX30XIKJ3I4P+VnxUTpq0CFp8+/3DRj6TI9L6EJKCG5cikblpa13LKkHWvnxhHo9Ma/nlTo7/CHZw2XmY9nN9PqAr/6rHgHVWiob9/87NUs1n/6bVfdOFWKijbjVjeUw0fFbSDfZWVfEGMmeK09lKiknqsAX3+hI/OOhkt7aX3dLsbF0M5g0STnfCTWF8SbOb+g/V5PdX+OgbGKkQmPQ3tlfkZv3+WrUC0gRdGMjgLWhswWkXGtRcywaEDFEN0myPXckcwgxbofm91vEydomarsQqfzmYWbiHSaZ7/+PMamqp9PCJ9rgX9yk8jOqFOaQcVOiuJY1pdZAEWFFAulLsBmfdz1EQVNaYvu22vw6UiyQ/Cn1f2CR/i/y4wvYbnu8YKFjjbK19F11EBeGUCaLMcG8DIIW8j34E8CKo35frPQQUyH2AjeGJ39WVIY03YjaMBPEICaS/wFi92eFLybBo2qYE4UYdL7JYg+E6bMKGfQ9o8vm1ZcnRnkWLt1g5gySLGuBnJRhQ+8NkSLFI28iz7o94IKmY4OY/AwPCnzNKUYWu/zZfyB4mUZRUkIdrdcTigGqZazttYjyL6PFLpUY8sCpTjWkzqcWAS5W2jq1754SIqzLcTdBkxJ8O3zjDWajUEI2iIHpfT8OI7pCY2HEucpMAItpBKTZduJL25lItwAtW7XatEPQ8OToa8MK64oSRuhlEHYF4RbcBy1tXjf+FZMW699Nvw1hOOXSlQQtKLpHnbHOBF3lSZItn9fd/i/UmyA1VD8nnZjgYFUpaZNdKLnbOkLP4IkaygoEuse9axRkuUbTJW2N5CgXqTa65xLGUpTws3NNrhQDOAYy7CPtLPr/WH48CUG1wuBbQoj79c8gM7cLzH/h17epXATwwYY9XTKt+GKK0nYzEVjj2YBymCfzgZMpx5shNvomW48r51qiP7mX6EkhgpAVI5/OaKglYNv5GzoBqv0NRdl61rO31WcfHLmnxhcoi3OsuupvCzxFBM4bdk8/UFyQQqw7JTu/I9xJa14HbYA0ZBpQWa7rriS1dRMWku1TlqurnRA40DxRX7RVsyeqJURHJCr8JJkwJc29Jd/TaYGzsaCInn3fakheV8YzA+MCEwCQYFKw4DAhoFAAQUGf3Zyi0XQ9iQsn2rWPylRey55rIEFEYSqmWPWoHf0iQ6ijwLHOOHsmzfAgMBhqA= #11 3.818 truststoreONAPall.jks: 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 #11 3.818 #11 3.818 #11 3.818 --- #11 3.818 # Source: portal/charts/portal-mariadb/templates/secrets.yaml #11 3.818 # Copyright © 2017 Amdocs, Bell Canada #11 3.818 # Modifications Copyright © 2018 AT&T #11 3.818 # #11 3.818 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.818 # you may not use this file except in compliance with the License. #11 3.818 # You may obtain a copy of the License at #11 3.818 # #11 3.818 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.818 # #11 3.818 # Unless required by applicable law or agreed to in writing, software #11 3.818 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.818 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.818 # See the License for the specific language governing permissions and #11 3.818 # limitations under the License. #11 3.818 #11 3.818 apiVersion: v1 #11 3.818 kind: Secret #11 3.818 metadata: #11 3.818 name: release-name-portal-db #11 3.818 namespace: default #11 3.818 labels: #11 3.818 app: portal-db #11 3.818 chart: portal-mariadb-5.0.0 #11 3.818 release: release-name #11 3.818 heritage: Tiller #11 3.818 type: Opaque #11 3.818 data: #11 3.818 db-root-password: "QWExMjM0NTY=" #11 3.818 #11 3.818 --- #11 3.818 # Source: portal/charts/portal-app/templates/configmap.yaml #11 3.818 # Copyright © 2017 Amdocs, Bell Canada #11 3.818 # #11 3.818 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.818 # you may not use this file except in compliance with the License. #11 3.818 # You may obtain a copy of the License at #11 3.818 # #11 3.818 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.818 # #11 3.818 # Unless required by applicable law or agreed to in writing, software #11 3.818 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.818 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.818 # See the License for the specific language governing permissions and #11 3.818 # limitations under the License. #11 3.818 #11 3.818 apiVersion: v1 #11 3.818 kind: ConfigMap #11 3.818 metadata: #11 3.818 name: release-name-portal-app-onapportal #11 3.818 namespace: default #11 3.818 labels: #11 3.818 app: portal-app #11 3.818 chart: portal-app-5.0.0 #11 3.818 release: release-name #11 3.818 heritage: Tiller #11 3.818 data: #11 3.818 fusion.properties: "# Copyright © 2018 Amdocs, Bell Canada, AT&T\n# Modifications #11 3.818 Copyright © 2018 AT&T\n#\n# Licensed under the Apache License, Version 2.0 (the #11 3.818 \"License\");\n# you may not use this file except in compliance with the License.\n# #11 3.818 You may obtain a copy of the License at\n#\n# http://www.apache.org/licenses/LICENSE-2.0\n#\n# #11 3.818 Unless required by applicable law or agreed to in writing, software\n# distributed #11 3.818 under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR #11 3.818 CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific #11 3.818 language governing permissions and\n# limitations under the License.\n\n# domain #11 3.818 settings\n#domain_class_location =\n\n# validator settings\n#default_error_message #11 3.818 = Default error message\n\nlogin_url_no_ret_val = http://portal.api.simpledemo.onap.org:8989/ONAPPORTAL/login.htm\n\nuser_attribute_name #11 3.818 \ = user\n\n# User Session settings\nroles_attribute_name = roles\nrole_functions_attribute_name #11 3.818 = role_functions\n\n# menu settings\nmenu_query_name = menuData\napplication_menu_set_name #11 3.818 \ = APP\napplication_menu_attribute_name = applicationMenuData\nbusiness_direct_menu_set_name #11 3.818 \ = BD\nbusiness_direct_menu_attribute_name = businessDirectMenuData\n\n# #11 3.818 ECOMP settings\necomp_app_id = 1\n# Role settings\nsys_admin_role_id = 1\naccount_admin_role_id #11 3.818 = 999\nrestricted_app_role_id = 900\n\n# Home Page index html\nhome_page \t\t\t\t\t= #11 3.818 /index.html\n\nauthentication_mechanism =DBAUTH\n\nlogin.error.hrid.empty = Login #11 3.818 failed, please contact system administrator.\nlogin.error.hrid.not-found = User #11 3.818 not found, please contact system administrator.\nlogin.error.user.inactive = Account #11 3.818 is disabled, please contact system administrator.\n\n#\n# Number of seconds to poll #11 3.818 health (database operational, etc.)\n#\nhealth_poll_interval_seconds = 5\n#\n# If #11 3.818 a component is down a log entry will be written that triggers an alert. This parameter #11 3.818 specifies how often this alert should be triggered\n# if the component remains down. #11 3.818 \ For example a value of 30, would translate to 30 * 60 seconds = 1800 seconds, #11 3.818 or every 30 minutes\n#\nhealth_fail_alert_every_x_intervals = 30\n" #11 3.818 logback.xml: "\r\n\r\n\r\n\r\n\r\n\t\r\n\t\r\n\r\n\t\r\n\t\r\n\r\n\t\r\n\t\r\n\t\r\n\t\r\n\r\n\t\r\n\t\r\n\t\r\n\t\r\n\t\r\n\t\r\n\t\r\n\r\n\t\r\n\t\r\n\r\n\t\r\n\r\n\t\r\n\r\n\t\r\n\r\n\t\r\n \t\r\n\r\n\t\r\n\t\r\n\t\r\n\t\r\n\t\t\r\n\t\t\t${applicationLoggerPattern}\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\r\n\t\r\n\r\n\t\r\n\r\n\r\n\t\r\n\t\t${logDirectory}/${generalLogName}.log\r\n\t\t\r\n\t\t\t\r\n\t\t\t${logDirectory}/${generalLogName}.log.%d{yyyy-MM-dd}.zip\r\n\t\t\t\r\n\t\t\t30\r\n\t\t\r\n\t\t\r\n\t\t\t${applicationLoggerPattern}\r\n\t\t\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t256\r\n\t\t\r\n \ttrue\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\r\n\r\n\t\r\n\t\r\n\r\n\t\r\n\t\r\n\r\n\t\r\n\t\r\n\r\n\t\r\n\r\n\t\r\n\t\t${logDirectory}/${auditLogName}.log\r\n\t\t\r\n\t\t\t\r\n\t\t\t${logDirectory}/${auditLogName}.log.%d{yyyy-MM-dd}.zip\r\n\t\t\t\r\n\t\t\t30\r\n\t\t\r\n\t\t\r\n\t\t\t${auditLoggerPattern}\r\n\t\t\r\n\t\r\n\t\r\n\t\t256\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t${logDirectory}/${metricsLogName}.log\r\n\t\t\r\n\t\t\t\r\n\t\t\t${logDirectory}/${metricsLogName}.log.%d{yyyy-MM-dd}.zip\r\n\t\t\t\r\n\t\t\t30\r\n\t\t\r\n\t\t\r\n\t\t\t${metricsLoggerPattern}\r\n\t\t\r\n\t\r\n\r\n\r\n\t\r\n\t\t256\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t${logDirectory}/${errorLogName}.log\r\n\t\t\r\n\t\t\t\r\n\t\t\t${logDirectory}/${errorLogName}.log.%d{yyyy-MM-dd}.zip\r\n\t\t\t\r\n\t\t\t30\r\n\t\t\r\n\t\t\r\n\t\t\t${errorLoggerPattern}\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t256\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t${debugLogDirectory}/${debugLogName}.log\r\n\t\t\r\n\t\t\t\r\n\t\t\t${logDirectory}/${debugLogName}.log.%d{yyyy-MM-dd}.zip\r\n\t\t\t\r\n\t\t\t30\r\n\t\t\r\n\t\t\r\n\t\t\t${defaultLoggerPattern}\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t256\r\n\t\t\r\n\t\ttrue\r\n\t\r\n\r\n\r\n\t\r\n\t\r\n\t\r\n\t\r\n\t\t\r\n\t\r\n\r\n\t\r\n\r\n\t\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t\r\n\t\r\n\r\n\t\r\n\t\t\r\n\t\r\n\r\n\r\n" #11 3.818 music.properties: | #11 3.818 # Copyright © 2018 Amdocs, Bell Canada, AT&T #11 3.818 # #11 3.818 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.818 # you may not use this file except in compliance with the License. #11 3.818 # You may obtain a copy of the License at #11 3.818 # #11 3.818 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.818 # #11 3.818 # Unless required by applicable law or agreed to in writing, software #11 3.818 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.818 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.818 # See the License for the specific language governing permissions and #11 3.818 # limitations under the License. #11 3.818 #11 3.818 #11 3.818 music.version = v2 #11 3.818 music.keyspace = keyspaces #11 3.818 music.session.keyspace = portal #11 3.818 music.tables = tables #11 3.818 music.session.attr.tables = spring_session_attributes #11 3.818 music.session.meta.tables = spring_session #11 3.818 music.consistency.info = type #11 3.818 music.consistency.info.value = eventual #11 3.818 music.cache = false #11 3.818 music.session.max.inactive.interval.seconds = 1800 #11 3.818 music.serialize.compress = true #11 3.818 #11 3.818 #By default it's eventual #11 3.818 music.atomic.get = false #11 3.818 music.atomic.put = true #11 3.818 cassandra.host=portal-cassandra #11 3.818 zookeeper.host=portal-zookeeper #11 3.818 cassandra.user=root #11 3.818 cassandra.password=Aa123456 #11 3.818 openid-connect.properties: | #11 3.818 # Copyright © 2018 Amdocs, Bell Canada, AT&T #11 3.818 # #11 3.818 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.818 # you may not use this file except in compliance with the License. #11 3.818 # You may obtain a copy of the License at #11 3.818 # #11 3.818 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.818 # #11 3.818 # Unless required by applicable law or agreed to in writing, software #11 3.818 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.818 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.818 # See the License for the specific language governing permissions and #11 3.818 # limitations under the License. #11 3.818 #11 3.818 authentication_server_url = http://portal.api.simpledemo.onap.org:8383/openid-connect-server-webapp/ #11 3.818 ecomp_openid_connect_client = http://portal.api.simpledemo.onap.org:8989/ONAPPORTAL/openid_connect_login #11 3.818 ecomp_redirect_uri = http://portal.api.simpledemo.onap.org:8989/ONAPPORTAL/welcome.htm #11 3.818 portal.properties: | #11 3.818 # Copyright © 2018 Amdocs, Bell Canada, AT&T #11 3.818 # #11 3.818 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.818 # you may not use this file except in compliance with the License. #11 3.818 # You may obtain a copy of the License at #11 3.818 # #11 3.818 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.818 # #11 3.818 # Unless required by applicable law or agreed to in writing, software #11 3.818 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.818 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.818 # See the License for the specific language governing permissions and #11 3.818 # limitations under the License. #11 3.818 #11 3.818 # Not used by portal #11 3.818 portal.api.impl.class = org.onap.portalsdk.core.onboarding.client.OnBoardingApiServiceImpl.not.used.by.portal #11 3.818 portal.api.prefix = /api #11 3.818 max.idle.time = 5 #11 3.818 user.attribute.name = user_attribute #11 3.818 #11 3.818 # for single sign on #11 3.818 ecomp_redirect_url = http://portal.api.simpledemo.onap.org:30225/ONAPPORTAL/login.htm #11 3.818 #11 3.818 # URL of the ECOMP Portal REST API #11 3.818 ecomp_rest_url = http://portal.api.simpledemo.onap.org:8989/ONAPPORTAL/auxapi #11 3.818 #11 3.818 ueb_listeners_enable = true #11 3.818 #11 3.818 ueb_app_key = 7GkVcrO6sIDb3ngW #11 3.818 ueb_app_secret = uCYgKjWKK5IxPGNNZzYSSWo9 #11 3.818 ueb_app_mailbox_name = ECOMP-PORTAL-INBOX #11 3.818 #11 3.818 ueb_url_list = message-router #11 3.818 ecomp_portal_inbox_name = ECOMP-PORTAL-INBOX #11 3.818 #11 3.818 # Consumer group name for UEB topic. #11 3.818 # Use the special tag to generate a unique one for each sdk-app server. #11 3.818 ueb_app_consumer_group_name = {UUID} #11 3.818 #11 3.818 role_access_centralized = remote #11 3.818 #11 3.818 ext_req_connection_timeout = 15000 #11 3.818 ext_req_read_timeout = 20000 #11 3.818 system.properties: "# Copyright © 2018 Amdocs, Bell Canada, AT&T\n#\n# Licensed under #11 3.818 the Apache License, Version 2.0 (the \"License\");\n# you may not use this file #11 3.818 except in compliance with the License.\n# You may obtain a copy of the License at\n#\n# #11 3.818 \ http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable #11 3.818 law or agreed to in writing, software\n# distributed under the License is distributed #11 3.818 on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express #11 3.818 or implied.\n# See the License for the specific language governing permissions and\n# #11 3.818 limitations under the License.\n\n#mysql\ndb.driver = org.mariadb.jdbc.Driver\ndb.connectionURL #11 3.818 = jdbc:mariadb:failover://portal-db:3306/portal\ndb.userName =root\ndb.password #11 3.818 =Aa123456\ndb.hib.dialect = org.hibernate.dialect.MySQLDialect\ndb.min_pool_size #11 3.818 = 5\ndb.max_pool_size = 10\nhb.dialect = org.hibernate.dialect.MySQLDialect\nhb.show_sql #11 3.818 = false\nhb.db_reconnect = true\nhb.idle_connection_test_period = 3600\n\napp_display_name #11 3.818 = Portal\nfiles_path = /tmp\ncontext_root = ONAPPORTAL\n# menu settings\nmenu_query_name #11 3.818 \ = menuData\nmenu_properties_file_location = /WEB-INF/fusion/menu/\napplication_menu_set_name #11 3.818 \ = APP\napplication_menu_attribute_name = applicationMenuData\napplication_menu_properties_name #11 3.818 \ = menu.properties\nbusiness_direct_menu_set_name = BD\nbusiness_direct_menu_properties_name #11 3.818 = bd.menu.properties\nbusiness_direct_menu_attribute_name = businessDirectMenuData\n\napplication_user_id #11 3.818 \ = 30000\npost_default_role_id = 1\n\n#Enable Fusion Mobile capabilities #11 3.818 for the application\nmobile_enable\t\t\t \t = false\n\ncache_config_file_path #11 3.818 \ = /WEB-INF/conf/cache.ccf\ncache_switch = 1\ncache_load_on_startup #11 3.818 \ = false\n\nuser_name\t\t\t\t\t = fullName\ndecryption_key\t\t\t\t = AGLDdG4D04BKm2IxIWEr8o==\n\n\n#Cron #11 3.818 Schedules\ncron_site_name = one\nlog_cron = #11 3.818 0 * * * * ? *\nsessiontimeout_feed_cron\t = 0 0/5 * * * ? *\n\n#Front end URL\nfrontend_url #11 3.818 \ = https://portal.api.simpledemo.onap.org:30225/ONAPPORTAL/applicationsHome\n\n\n# #11 3.818 An Unqiue 128-bit value defined to indentify a specific version of\n# ECOMP Portal #11 3.818 deployed on a specific virtual machine.\n# This value must be generated and updated #11 3.818 at the time of\n# the deployment.\n# Online Unique UUID generator - https://www.uuidgenerator.net/\ninstance_uuid #11 3.818 \t\t\t\t= 90bc9497-10e6-49fe-916b-dcdfaa972383\n\nelastic_search_url \t\t\t= http://\ncontact_us_link\t\t\t\t= #11 3.818 http://\nuser_guide_link = http://\n\n# Contact Us page properties\nush_ticket_url\t\t\t\t= #11 3.818 http://\nfeedback_email_address\t\t= portal@lists.onap.org\nportal_info_url\t\t\t\t= #11 3.818 https://\n\n#Online user bar refresh interval, in seconds\nonline_user_update_rate #11 3.818 \ = 30\n\n#Online user bar refresh total duration, in seconds\nonline_user_update_duration #11 3.818 \ = 300\n\n#authenticate user server\nauthenticate_user_server=http://portal.api.simpledemo.onap.org:8383/openid-connect-server-webapp/allUsers\n\n#window #11 3.818 width threshold to collapse left/right menu when page onload\nwindow_width_threshold_left_menu #11 3.818 = 1400\nwindow_width_threshold_right_menu = 1350\n\n# User notification refresh #11 3.818 interval and duration, in seconds\nnotification_update_rate = 90\nnotification_update_duration #11 3.818 = 900\n\n#Microservices Related Properties for Portal\nmicroservices.widget.protocol #11 3.818 = http\nmicroservices.widget.hostname = portal-widget\nmicroservices.widget.username #11 3.818 = widget_user\nmicroservices.widget.password = M+KcrCMVrR1rAxtiFE49n1uXC3FCkNBqFgeYsubEC/U=\n#This #11 3.818 property won't be needed after consul is functional on VMs -\nmicroservices.widget.local.port #11 3.818 = 8082\nmicroservices.m-learn.local.port = 8083\n#HALO API enable flag\nexternal_access_enable #11 3.818 = false\n\n#delete auditlog from number of days ago\nauditlog_del_day_from = 365\n\n#External #11 3.818 system notification URL\nexternal_system_notification_url= https://jira.onap.org/browse/\n\n# #11 3.818 External Access System Basic Auth Credentials & Rest endpoint(These credentials #11 3.818 doesn't work as these are place holders for now)\next_central_access_user_name = #11 3.818 aaf_admin@people.osaaf.org\next_central_access_password = VTCIC7wfMI0Zy61wkqKQC0bF0EK2YmL2JLl1fQU2YC4=\next_central_access_url #11 3.818 = https://aaf-service.onap:8100/authz/\next_central_access_user_domain = @people.osaaf.org\n\n# #11 3.818 External Central Auth system access\nremote_centralized_system_access = true\n\n#cookie #11 3.818 domain\ncookie_domain = onap.org\n" #11 3.818 #11 3.818 server.xml: "\n\n\n\n \n \n \n \n \n \n \n \n\n \n \n \n \n \n\n #11 3.819 \ \n \n\n \n #11 3.819 \ \n\n\n \n \n \n \n \n \n\t\n\t \n\n \n #11 3.819 \ \n\n\n #11 3.819 \ \n\n \n #11 3.819 \ \n\n \n \n\n #11 3.819 \ \n \n #11 3.819 \ \n \n \n\n \n\n #11 3.819 \ \n \n\n #11 3.819 \ \n #11 3.819 \ \n\n \n \n \n" #11 3.819 #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-cassandra/templates/configmap.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: v1 #11 3.819 kind: ConfigMap #11 3.819 metadata: #11 3.819 name: release-name-portal-cassandra-docker-entry-initd #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-cassandra #11 3.819 chart: portal-cassandra-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 data: #11 3.819 portal.cql: | #11 3.819 // Copyright © 2018 Amdocs, Bell Canada, AT&T #11 3.819 // #11 3.819 // Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 // you may not use this file except in compliance with the License. #11 3.819 // You may obtain a copy of the License at #11 3.819 // #11 3.819 // http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 // #11 3.819 // Unless required by applicable law or agreed to in writing, software #11 3.819 // distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 // See the License for the specific language governing permissions and #11 3.819 // limitations under the License. #11 3.819 #11 3.819 CREATE KEYSPACE IF NOT EXISTS portal #11 3.819 WITH REPLICATION = { #11 3.819 'class' : 'SimpleStrategy', #11 3.819 'replication_factor': 1 #11 3.819 } #11 3.819 AND DURABLE_WRITES = true; #11 3.819 #11 3.819 #11 3.819 CREATE TABLE portal.spring_session ( #11 3.819 primary_id text PRIMARY KEY, #11 3.819 creation_time text, #11 3.819 expiry_time text, #11 3.819 last_access_time text, #11 3.819 max_inactive_interval text, #11 3.819 principal_name text, #11 3.819 session_id text, #11 3.819 vector_ts text #11 3.819 ) WITH bloom_filter_fp_chance = 0.01 #11 3.819 AND caching = {'keys': 'ALL', 'rows_per_partition': '10'} #11 3.819 AND comment = '' #11 3.819 AND compaction = {'class': 'org.apache.cassandra.db.compaction.SizeTieredCompactionStrategy', 'max_threshold': '32', 'min_threshold': '4'} #11 3.819 AND compression = {'chunk_length_in_kb': '64', 'class': 'org.apache.cassandra.io.compress.LZ4Compressor'} #11 3.819 AND crc_check_chance = 1.0 #11 3.819 AND dclocal_read_repair_chance = 0.1 #11 3.819 AND default_time_to_live = 0 #11 3.819 AND gc_grace_seconds = 864000 #11 3.819 AND max_index_interval = 2048 #11 3.819 AND memtable_flush_period_in_ms = 0 #11 3.819 AND min_index_interval = 128 #11 3.819 AND read_repair_chance = 0.0 #11 3.819 AND speculative_retry = '99PERCENTILE'; #11 3.819 #11 3.819 #11 3.819 CREATE TABLE portal.spring_session_attributes ( #11 3.819 primary_id text, #11 3.819 attribute_name text, #11 3.819 attribute_bytes blob, #11 3.819 vector_ts text, #11 3.819 PRIMARY KEY (primary_id, attribute_name) #11 3.819 ) WITH CLUSTERING ORDER BY (attribute_name ASC) #11 3.819 AND bloom_filter_fp_chance = 0.01 #11 3.819 AND caching = {'keys': 'ALL', 'rows_per_partition': '1'} #11 3.819 AND comment = '' #11 3.819 AND compaction = {'class': 'org.apache.cassandra.db.compaction.SizeTieredCompactionStrategy', 'max_threshold': '32', 'min_threshold': '4'} #11 3.819 AND compression = {'chunk_length_in_kb': '64', 'class': 'org.apache.cassandra.io.compress.LZ4Compressor'} #11 3.819 AND crc_check_chance = 1.0 #11 3.819 AND dclocal_read_repair_chance = 0.1 #11 3.819 AND default_time_to_live = 0 #11 3.819 AND gc_grace_seconds = 864000 #11 3.819 AND max_index_interval = 2048 #11 3.819 AND memtable_flush_period_in_ms = 0 #11 3.819 AND min_index_interval = 128 #11 3.819 AND read_repair_chance = 0.0 #11 3.819 AND speculative_retry = '99PERCENTILE'; #11 3.819 portal_single.cql: "// Copyright © 2018 Amdocs, Bell Canada, AT&T\r\n//\r\n// Licensed #11 3.819 under the Apache License, Version 2.0 (the \"License\");\r\n// you may not use this #11 3.819 file except in compliance with the License.\r\n// You may obtain a copy of the License #11 3.819 at\r\n//\r\n// http://www.apache.org/licenses/LICENSE-2.0\r\n//\r\n// Unless #11 3.819 required by applicable law or agreed to in writing, software\r\n// distributed under #11 3.819 the License is distributed on an \"AS IS\" BASIS,\r\n// WITHOUT WARRANTIES OR CONDITIONS #11 3.819 OF ANY KIND, either express or implied.\r\n// See the License for the specific language #11 3.819 governing permissions and\r\n// limitations under the License.\r\n\r\n\r\nCREATE #11 3.819 KEYSPACE IF NOT EXISTS admin\r\n WITH REPLICATION = {\r\n 'class' : 'SimpleStrategy',\r\n #11 3.819 \ 'replication_factor': 1\r\n }\r\n AND DURABLE_WRITES = true;\r\n \r\nCREATE #11 3.819 TABLE IF NOT EXISTS admin.keyspace_master (\r\n uuid uuid,\r\n keyspace_name #11 3.819 text,\r\n application_name text,\r\n is_api boolean,\r\n password text,\r\n #11 3.819 \ username text,\r\n is_aaf boolean,\r\n PRIMARY KEY (uuid)\r\n);\r\n\r\n\r\nCREATE #11 3.819 KEYSPACE IF NOT EXISTS portal\r\n WITH REPLICATION = {\r\n 'class' : 'SimpleStrategy',\r\n #11 3.819 \ 'replication_factor': 1\r\n }\r\n AND DURABLE_WRITES = true;\r\n\r\n\r\nCREATE #11 3.819 TABLE portal.spring_session (\r\n primary_id text PRIMARY KEY,\r\n creation_time #11 3.819 text,\r\n expiry_time text,\r\n last_access_time text,\r\n max_inactive_interval #11 3.819 text,\r\n principal_name text,\r\n session_id text,\r\n vector_ts text\r\n) #11 3.819 WITH bloom_filter_fp_chance = 0.01\r\n AND caching = {'keys': 'ALL', 'rows_per_partition': #11 3.819 '10'}\r\n AND comment = ''\r\n AND compaction = {'class': 'org.apache.cassandra.db.compaction.SizeTieredCompactionStrategy', #11 3.819 'max_threshold': '32', 'min_threshold': '4'}\r\n AND compression = {'chunk_length_in_kb': #11 3.819 '64', 'class': 'org.apache.cassandra.io.compress.LZ4Compressor'}\r\n AND crc_check_chance #11 3.819 = 1.0\r\n AND dclocal_read_repair_chance = 0.1\r\n AND default_time_to_live #11 3.819 = 0\r\n AND gc_grace_seconds = 864000\r\n AND max_index_interval = 2048\r\n #11 3.819 \ AND memtable_flush_period_in_ms = 0\r\n AND min_index_interval = 128\r\n #11 3.819 \ AND read_repair_chance = 0.0\r\n AND speculative_retry = '99PERCENTILE';\r\n\r\n\r\nCREATE #11 3.819 TABLE portal.spring_session_attributes (\r\n primary_id text,\r\n attribute_name #11 3.819 text,\r\n attribute_bytes blob,\r\n vector_ts text,\r\n PRIMARY KEY (primary_id, #11 3.819 attribute_name)\r\n) WITH CLUSTERING ORDER BY (attribute_name ASC)\r\n AND bloom_filter_fp_chance #11 3.819 = 0.01\r\n AND caching = {'keys': 'ALL', 'rows_per_partition': '1'}\r\n AND #11 3.819 comment = ''\r\n AND compaction = {'class': 'org.apache.cassandra.db.compaction.SizeTieredCompactionStrategy', #11 3.819 'max_threshold': '32', 'min_threshold': '4'}\r\n AND compression = {'chunk_length_in_kb': #11 3.819 '64', 'class': 'org.apache.cassandra.io.compress.LZ4Compressor'}\r\n AND crc_check_chance #11 3.819 = 1.0\r\n AND dclocal_read_repair_chance = 0.1\r\n AND default_time_to_live #11 3.819 = 0\r\n AND gc_grace_seconds = 864000\r\n AND max_index_interval = 2048\r\n #11 3.819 \ AND memtable_flush_period_in_ms = 0\r\n AND min_index_interval = 128\r\n #11 3.819 \ AND read_repair_chance = 0.0\r\n AND speculative_retry = '99PERCENTILE';\r\n #11 3.819 \ \r\n\r\n\r\nCREATE KEYSPACE IF NOT EXISTS portalsdk\r\n WITH REPLICATION #11 3.819 = {\r\n 'class' : 'SimpleStrategy',\r\n 'replication_factor': 1\r\n #11 3.819 \ }\r\n AND DURABLE_WRITES = true;\r\n\r\n\r\nCREATE TABLE portalsdk.spring_session #11 3.819 (\r\n primary_id text PRIMARY KEY,\r\n creation_time text,\r\n expiry_time #11 3.819 text,\r\n last_access_time text,\r\n max_inactive_interval text,\r\n principal_name #11 3.819 text,\r\n session_id text,\r\n vector_ts text\r\n) WITH bloom_filter_fp_chance #11 3.819 = 0.01\r\n AND caching = {'keys': 'ALL', 'rows_per_partition': '10'}\r\n AND #11 3.819 comment = ''\r\n AND compaction = {'class': 'org.apache.cassandra.db.compaction.SizeTieredCompactionStrategy', #11 3.819 'max_threshold': '32', 'min_threshold': '4'}\r\n AND compression = {'chunk_length_in_kb': #11 3.819 '64', 'class': 'org.apache.cassandra.io.compress.LZ4Compressor'}\r\n AND crc_check_chance #11 3.819 = 1.0\r\n AND dclocal_read_repair_chance = 0.1\r\n AND default_time_to_live #11 3.819 = 0\r\n AND gc_grace_seconds = 864000\r\n AND max_index_interval = 2048\r\n #11 3.819 \ AND memtable_flush_period_in_ms = 0\r\n AND min_index_interval = 128\r\n #11 3.819 \ AND read_repair_chance = 0.0\r\n AND speculative_retry = '99PERCENTILE';\r\n\r\n\r\nCREATE #11 3.819 TABLE portalsdk.spring_session_attributes (\r\n primary_id text,\r\n attribute_name #11 3.819 text,\r\n attribute_bytes blob,\r\n vector_ts text,\r\n PRIMARY KEY (primary_id, #11 3.819 attribute_name)\r\n) WITH CLUSTERING ORDER BY (attribute_name ASC)\r\n AND bloom_filter_fp_chance #11 3.819 = 0.01\r\n AND caching = {'keys': 'ALL', 'rows_per_partition': '1'}\r\n AND #11 3.819 comment = ''\r\n AND compaction = {'class': 'org.apache.cassandra.db.compaction.SizeTieredCompactionStrategy', #11 3.819 'max_threshold': '32', 'min_threshold': '4'}\r\n AND compression = {'chunk_length_in_kb': #11 3.819 '64', 'class': 'org.apache.cassandra.io.compress.LZ4Compressor'}\r\n AND crc_check_chance #11 3.819 = 1.0\r\n AND dclocal_read_repair_chance = 0.1\r\n AND default_time_to_live #11 3.819 = 0\r\n AND gc_grace_seconds = 864000\r\n AND max_index_interval = 2048\r\n #11 3.819 \ AND memtable_flush_period_in_ms = 0\r\n AND min_index_interval = 128\r\n #11 3.819 \ AND read_repair_chance = 0.0\r\n AND speculative_retry = '99PERCENTILE';" #11 3.819 portalsdk.cql: | #11 3.819 // Copyright © 2018 Amdocs, Bell Canada, AT&T #11 3.819 // #11 3.819 // Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 // you may not use this file except in compliance with the License. #11 3.819 // You may obtain a copy of the License at #11 3.819 // #11 3.819 // http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 // #11 3.819 // Unless required by applicable law or agreed to in writing, software #11 3.819 // distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 // See the License for the specific language governing permissions and #11 3.819 // limitations under the License. #11 3.819 #11 3.819 CREATE KEYSPACE IF NOT EXISTS portalsdk #11 3.819 WITH REPLICATION = { #11 3.819 'class' : 'SimpleStrategy', #11 3.819 'replication_factor': 1 #11 3.819 } #11 3.819 AND DURABLE_WRITES = true; #11 3.819 #11 3.819 #11 3.819 CREATE TABLE portalsdk.spring_session ( #11 3.819 primary_id text PRIMARY KEY, #11 3.819 creation_time text, #11 3.819 expiry_time text, #11 3.819 last_access_time text, #11 3.819 max_inactive_interval text, #11 3.819 principal_name text, #11 3.819 session_id text, #11 3.819 vector_ts text #11 3.819 ) WITH bloom_filter_fp_chance = 0.01 #11 3.819 AND caching = {'keys': 'ALL', 'rows_per_partition': '10'} #11 3.819 AND comment = '' #11 3.819 AND compaction = {'class': 'org.apache.cassandra.db.compaction.SizeTieredCompactionStrategy', 'max_threshold': '32', 'min_threshold': '4'} #11 3.819 AND compression = {'chunk_length_in_kb': '64', 'class': 'org.apache.cassandra.io.compress.LZ4Compressor'} #11 3.819 AND crc_check_chance = 1.0 #11 3.819 AND dclocal_read_repair_chance = 0.1 #11 3.819 AND default_time_to_live = 0 #11 3.819 AND gc_grace_seconds = 864000 #11 3.819 AND max_index_interval = 2048 #11 3.819 AND memtable_flush_period_in_ms = 0 #11 3.819 AND min_index_interval = 128 #11 3.819 AND read_repair_chance = 0.0 #11 3.819 AND speculative_retry = '99PERCENTILE'; #11 3.819 #11 3.819 #11 3.819 CREATE TABLE portalsdk.spring_session_attributes ( #11 3.819 primary_id text, #11 3.819 attribute_name text, #11 3.819 attribute_bytes blob, #11 3.819 vector_ts text, #11 3.819 PRIMARY KEY (primary_id, attribute_name) #11 3.819 ) WITH CLUSTERING ORDER BY (attribute_name ASC) #11 3.819 AND bloom_filter_fp_chance = 0.01 #11 3.819 AND caching = {'keys': 'ALL', 'rows_per_partition': '1'} #11 3.819 AND comment = '' #11 3.819 AND compaction = {'class': 'org.apache.cassandra.db.compaction.SizeTieredCompactionStrategy', 'max_threshold': '32', 'min_threshold': '4'} #11 3.819 AND compression = {'chunk_length_in_kb': '64', 'class': 'org.apache.cassandra.io.compress.LZ4Compressor'} #11 3.819 AND crc_check_chance = 1.0 #11 3.819 AND dclocal_read_repair_chance = 0.1 #11 3.819 AND default_time_to_live = 0 #11 3.819 AND gc_grace_seconds = 864000 #11 3.819 AND max_index_interval = 2048 #11 3.819 AND memtable_flush_period_in_ms = 0 #11 3.819 AND min_index_interval = 128 #11 3.819 AND read_repair_chance = 0.0 #11 3.819 AND speculative_retry = '99PERCENTILE'; #11 3.819 #11 3.819 #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-mariadb/templates/configmap.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: v1 #11 3.819 kind: ConfigMap #11 3.819 metadata: #11 3.819 name: release-name-portal-db-mariadb #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-db #11 3.819 chart: portal-mariadb-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 data: #11 3.819 docker-entrypoint.sh: "#!/bin/bash\nset -eo pipefail\nshopt -s nullglob\n\n# if command #11 3.819 starts with an option, prepend mysqld\nif [ \"${1:0:1}\" = '-' ]; then\n set #11 3.819 -- mysqld \"$@\"\nfi\n\n# skip setup if they want an option that stops mysqld\nwantHelp=\nfor #11 3.819 arg; do\n case \"$arg\" in\n -'?'|--help|--print-defaults|-V|--version)\n #11 3.819 \ wantHelp=1\n break\n ;;\n #11 3.819 \ esac\ndone\n\n# usage: file_env VAR [DEFAULT]\n# ie: file_env 'XYZ_DB_PASSWORD' #11 3.819 'example'\n# (will allow for \"$XYZ_DB_PASSWORD_FILE\" to fill in the value of\n# #11 3.819 \ \"$XYZ_DB_PASSWORD\" from a file, especially for Docker's secrets feature)\nfile_env() #11 3.819 {\n local var=\"$1\"\n local fileVar=\"${var}_FILE\"\n local #11 3.819 def=\"${2:-}\"\n if [ \"${!var:-}\" ] && [ \"${!fileVar:-}\" ]; then\n echo #11 3.819 >&2 \"error: both $var and $fileVar are set (but are exclusive)\"\n exit #11 3.819 1\n fi\n local val=\"$def\"\n if [ \"${!var:-}\" ]; then\n #11 3.819 \ val=\"${!var}\"\n elif [ \"${!fileVar:-}\" ]; then\n val=\"$(< #11 3.819 \"${!fileVar}\")\"\n fi\n export \"$var\"=\"$val\"\n unset #11 3.819 \"$fileVar\"\n}\n\n_check_config() {\n toRun=( \"$@\" --verbose --help --log-bin-index=\"$(mktemp #11 3.819 -u)\" )\n if ! errors=\"$(\"${toRun[@]}\" 2>&1 >/dev/null)\"; then\n cat #11 3.819 >&2\t<<-EOM\n\n\t\t\t\tERROR: mysqld failed while attempting to check config\n\t\t\t\tcommand #11 3.819 was: \"${toRun[*]}\"\n\n\t\t\t\t$errors\n\t\t\t\tEOM\n exit 1\n fi\n}\n\n# #11 3.819 Fetch value from server config\n# We use mysqld --verbose --help instead of my_print_defaults #11 3.819 because the\n# latter only show values present in config files, and not server defaults\n_get_config() #11 3.819 {\n local conf=\"$1\"; shift\n \"$@\" --verbose --help --log-bin-index=\"$(mktemp #11 3.819 -u)\" 2>/dev/null | awk '$1 == \"'\"$conf\"'\" { print $2; exit }'\n}\n\n# allow #11 3.819 the container to be started with `--user`\nif [ \"$1\" = 'mysqld' -a -z \"$wantHelp\" #11 3.819 -a \"$(id -u)\" = '0' ]; then\n _check_config \"$@\"\n DATADIR=\"$(_get_config #11 3.819 'datadir' \"$@\")\"\n mkdir -p \"$DATADIR\"\n find \"$DATADIR\" \\! #11 3.819 -user mysql -exec chown mysql '{}' +\n exec gosu mysql \"$BASH_SOURCE\" \"$@\"\nfi\n\nif #11 3.819 [ \"$1\" = 'mysqld' -a -z \"$wantHelp\" ]; then\n # still need to check config, #11 3.819 container may have started with --user\n _check_config \"$@\"\n # #11 3.819 Get config\n DATADIR=\"$(_get_config 'datadir' \"$@\")\"\n\n if [ #11 3.819 ! -d \"$DATADIR/mysql\" ]; then\n file_env 'MYSQL_ROOT_PASSWORD'\n #11 3.819 \ if [ -z \"$MYSQL_ROOT_PASSWORD\" -a -z \"$MYSQL_ALLOW_EMPTY_PASSWORD\" #11 3.819 -a -z \"$MYSQL_RANDOM_ROOT_PASSWORD\" ]; then\n echo >&2 #11 3.819 'error: database is uninitialized and password option is not specified '\n echo #11 3.819 >&2 ' You need to specify one of MYSQL_ROOT_PASSWORD, MYSQL_ALLOW_EMPTY_PASSWORD #11 3.819 and MYSQL_RANDOM_ROOT_PASSWORD'\n exit 1\n fi\n\n #11 3.819 \ mkdir -p \"$DATADIR\"\n\n echo 'Initializing database'\n #11 3.819 \ # \"Other options are passed to mysqld.\" (so we pass all \"mysqld\" #11 3.819 arguments directly here)\n mysql_install_db --datadir=\"$DATADIR\" #11 3.819 --rpm \"${@:2}\"\n echo 'Database initialized'\n\n SOCKET=\"$(_get_config #11 3.819 'socket' \"$@\")\"\n \"$@\" --skip-networking --socket=\"${SOCKET}\" #11 3.819 &\n pid=\"$!\"\n\n mysql=( mysql --protocol=socket #11 3.819 -uroot -hlocalhost --socket=\"${SOCKET}\" )\n\n for i in {60..0}; #11 3.819 do\n if echo 'SELECT 1' | \"${mysql[@]}\" &> /dev/null; then\n #11 3.819 \ break\n fi\n echo #11 3.819 'MySQL init process in progress...'\n sleep 1\n done\n #11 3.819 \ if [ \"$i\" = 0 ]; then\n echo >&2 'MySQL #11 3.819 init process failed.'\n exit 1\n fi\n\n if #11 3.819 [ -z \"$MYSQL_INITDB_SKIP_TZINFO\" ]; then\n # sed is for #11 3.819 https://bugs.mysql.com/bug.php?id=20545\n mysql_tzinfo_to_sql #11 3.819 /usr/share/zoneinfo | sed 's/Local time zone must be set--see zic manual page/FCTY/' #11 3.819 | \"${mysql[@]}\" mysql\n fi\n\n if [ ! -z \"$MYSQL_RANDOM_ROOT_PASSWORD\" #11 3.819 ]; then\n export MYSQL_ROOT_PASSWORD=\"$(pwgen -1 32)\"\n #11 3.819 \ echo \"GENERATED ROOT PASSWORD: $MYSQL_ROOT_PASSWORD\"\n #11 3.819 \ fi\n\n rootCreate=\n # default root #11 3.819 to listen for connections from anywhere\n file_env 'MYSQL_ROOT_HOST' #11 3.819 '%'\n if [ ! -z \"$MYSQL_ROOT_HOST\" -a \"$MYSQL_ROOT_HOST\" != 'localhost' #11 3.819 ]; then\n # no, we don't care if read finds a terminating #11 3.819 character in this heredoc\n # https://unix.stackexchange.com/questions/265149/why-is-set-o-errexit-breaking-this-read-heredoc-expression/265151#265151\n #11 3.819 \ read -r -d '' rootCreate\t<<-EOSQL || true\n\t\t\t\t\t\tCREATE #11 3.819 USER 'root'@'${MYSQL_ROOT_HOST}' IDENTIFIED BY '${MYSQL_ROOT_PASSWORD}' ;\n\t\t\t\t\t\tGRANT #11 3.819 ALL ON *.* TO 'root'@'${MYSQL_ROOT_HOST}' WITH GRANT OPTION ;\n\t\t\t\t\t\tEOSQL\n #11 3.819 \ fi\n\n \"${mysql[@]}\"\t<<-EOSQL\n\t\t\t\t\t\t-- #11 3.819 What's done in this file shouldn't be replicated\n\t\t\t\t\t\t-- or products like #11 3.819 mysql-fabric won't work\n\t\t\t\t\t\tSET @@SESSION.SQL_LOG_BIN=0;\n\n\t\t\t\t\t\tDELETE #11 3.819 FROM mysql.user WHERE user NOT IN ('mysql.sys', 'mysqlxsys', 'root') OR host NOT #11 3.819 IN ('localhost') ;\n\t\t\t\t\t\tSET PASSWORD FOR 'root'@'localhost'=PASSWORD('${MYSQL_ROOT_PASSWORD}') #11 3.819 ;\n\t\t\t\t\t\tGRANT ALL ON *.* TO 'root'@'localhost' WITH GRANT OPTION ;\n\t\t\t\t\t\t${rootCreate}\n\t\t\t\t\t\tDROP #11 3.819 DATABASE IF EXISTS test ;\n\t\t\t\t\t\tFLUSH PRIVILEGES ;\n\t\t\t\t\tEOSQL\n\n if #11 3.819 [ ! -z \"$MYSQL_ROOT_PASSWORD\" ]; then\n mysql+=( -p\"${MYSQL_ROOT_PASSWORD}\" #11 3.819 )\n fi\n\n file_env 'MYSQL_DATABASE'\n if #11 3.819 [ \"$MYSQL_DATABASE\" ]; then\n echo \"CREATE DATABASE IF #11 3.819 NOT EXISTS \\`$MYSQL_DATABASE\\` ;\" | \"${mysql[@]}\"\n mysql+=( #11 3.819 \"$MYSQL_DATABASE\" )\n fi\n\n file_env 'MYSQL_USER'\n #11 3.819 \ file_env 'MYSQL_PASSWORD'\n if [ \"$MYSQL_USER\" #11 3.819 -a \"$MYSQL_PASSWORD\" ]; then\n echo \"CREATE USER '$MYSQL_USER'@'%' #11 3.819 IDENTIFIED BY '$MYSQL_PASSWORD' ;\" | \"${mysql[@]}\"\n\n if #11 3.819 [ \"$MYSQL_DATABASE\" ]; then\n echo \"GRANT ALL #11 3.819 ON \\`$MYSQL_DATABASE\\`.* TO '$MYSQL_USER'@'%' ;\" | \"${mysql[@]}\"\n fi\n #11 3.819 \ fi\n\n echo\n for f in /docker-entrypoint-initdb.d/*; #11 3.819 do\n case \"$f\" in\n *.sh) #11 3.819 \ echo \"$0: running $f\"; . \"$f\" ;;\n *.sql) #11 3.819 \ echo \"$0: running $f\"; \"${mysql[@]}\" < \"$f\"; echo ;;\n *.sql.gz) #11 3.819 echo \"$0: running $f\"; gunzip -c \"$f\" | \"${mysql[@]}\"; echo ;;\n *) #11 3.819 \ echo \"$0: ignoring $f\" ;;\n esac\n echo\n #11 3.819 \ done\n\n if ! kill -s TERM \"$pid\" || ! wait \"$pid\"; #11 3.819 then\n echo >&2 'MySQL init process failed.'\n exit #11 3.819 1\n fi\n\n echo\n echo 'MySQL init #11 3.819 process done. Ready for start up.'\n echo\n fi\nfi\n\nexec #11 3.819 \"$@\"" #11 3.819 oom_updates.sql: "/*\n# Copyright © 2018 Amdocs, Bell Canada, AT&T\n#\n# Licensed #11 3.819 under the Apache License, Version 2.0 (the \"License\");\n# you may not use this #11 3.819 file except in compliance with the License.\n# You may obtain a copy of the License #11 3.819 at\n#\n# http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required #11 3.819 by applicable law or agreed to in writing, software\n# distributed under the License #11 3.819 is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY #11 3.819 KIND, either express or implied.\n# See the License for the specific language governing #11 3.819 permissions and\n# limitations under the License.\n\n*/\n\nUSE portal;\n/*\nAny #11 3.819 updates required by OOM to the portaldb are made here.\n1. split up SDC-FE and SDC-BE. #11 3.819 \ Originally both FE and BE point to the same IP\nwhile the OOM K8s version has #11 3.819 these service split up.\n*/\n-- app_url is the FE, app_rest_endpoint is the BE\n--portal-sdk #11 3.819 => TODO: doesn't open a node port yet\nupdate fn_app set app_url = 'http://portal-sdk.simpledemo.onap.org:30212/ONAPPORTALSDK/welcome.htm', #11 3.819 app_rest_endpoint = 'http://portal-sdk:8080/ONAPPORTALSDK/api/v3' where app_name #11 3.819 = 'xDemo App';\n--dmaap-bc => the dmaap-bc doesn't open a node port..\nupdate fn_app #11 3.819 set app_url = 'http://dmaap-bc.simpledemo.onap.org:/ECOMPDBCAPP/dbc#/dmaap', #11 3.819 app_rest_endpoint = 'http://dmaap-bc:8989/ECOMPDBCAPP/api/v2' where app_name = 'DMaaP #11 3.819 Bus Ctrl';\n--sdc-be => 8443:30204, 8080:30205\n--sdc-fe => 8181:30206, 9443:30207\nupdate #11 3.819 fn_app set app_url = 'http://sdc.api.fe.simpledemo.onap.org:30206/sdc1/portal', #11 3.819 app_rest_endpoint = 'http://sdc-be:8080/api/v3' where app_name = 'SDC';\n--pap => #11 3.819 8443:30219\nupdate fn_app set app_url = 'https://policy.api.simpledemo.onap.org:30219/onap/policy', #11 3.819 app_rest_endpoint = 'https://pap:8443/onap/api/v3' where app_name = 'Policy';\n--vid #11 3.819 => 8080:30200\nupdate fn_app set app_url = 'https://vid.api.simpledemo.onap.org:30200/vid/welcome.htm', #11 3.819 app_rest_endpoint = 'https://vid:8443/vid/api/v3' where app_name = 'Virtual Infrastructure #11 3.819 Deployment';\n--sparky => TODO: sparky doesn't open a node port yet\nupdate fn_app #11 3.819 set app_url = 'https://aai.ui.simpledemo.onap.org:30220/services/aai/webapp/index.html#/viewInspect', #11 3.819 app_rest_endpoint = 'https://aai-sparky-be.default:8000/api/v2' where #11 3.819 app_name = 'A&AI UI';\n--cli => 8080:30260\nupdate fn_app set app_url = 'http://cli.api.simpledemo.onap.org:30260/', #11 3.819 app_type = 1 where app_name = 'CLI';\n--msb-iag => 80:30280\nupdate fn_app set app_url #11 3.819 = 'http://msb.api.simpledemo.onap.org:30280/iui/microservices/default.html' #11 3.819 where app_name = 'MSB';\n\n\n\nINSERT IGNORE INTO `fn_app` (`app_id`, `app_name`, #11 3.819 `app_image_url`, `app_description`, `app_notes`, `app_url`, `app_alternate_url`, #11 3.819 `app_rest_endpoint`, `ml_app_name`, `ml_app_admin_id`, `mots_id`, `app_password`, #11 3.819 `open`, `enabled`, `thumbnail`, `app_username`, `ueb_key`, `ueb_secret`, `ueb_topic_name`, #11 3.819 `app_type`,`auth_central`,`auth_namespace`) VALUES\n(12, 'RIC-Dashboard', '', NULL, #11 3.819 NULL, 'https://dashboard-entry:32443', #11 3.819 '','http://service-ricaux-dashboard-http:8080/api/v3', '', '', NULL, 'password', #11 3.819 'N', 'Y', NULL, 'Default', 'ueb_key', 'ueb_secret', 'ECOMP-PORTAL-OUTBOX', 1,'N',NULL);\n\n\n/*\nCreate #11 3.819 SO-Monitoring App\n*/\nINSERT IGNORE INTO `fn_app` (`app_id`, `app_name`, `app_image_url`, #11 3.819 `app_description`, `app_notes`, `app_url`, `app_alternate_url`, `app_rest_endpoint`, #11 3.819 `ml_app_name`, `ml_app_admin_id`, `mots_id`, `app_password`, `open`, `enabled`, #11 3.819 `thumbnail`, `app_username`, `ueb_key`, `ueb_secret`, `ueb_topic_name`, `app_type`,`auth_central`,`auth_namespace`) #11 3.819 VALUES\n(10, 'SO-Monitoring', 'images/cache/portal-345993588_92550.png', NULL, NULL, #11 3.819 'http://so-monitoring:30224', #11 3.819 NULL, 'http://so-monitoring:30224', '', '', NULL, 'password', 'Y', 'Y', NULL, 'user', #11 3.819 '', '', '', 1,'N','SO-Monitoring');\n\n/*\nAdd SO Monitoring to Default apps\n*/\nINSERT #11 3.819 IGNORE INTO `fn_pers_user_app_sel` VALUES (10,1,10,'S');\n\n/*\nAdd Contact information #11 3.819 for SO Monitoring\n*/\nINSERT IGNORE INTO `fn_app_contact_us` (app_id, contact_name, #11 3.819 contact_email, url, active_yn, description) VALUES ( 10,\"SO Team\",\"so@lists.onap.org\",\"https://wiki.onap.org/display/DW/Approved+Projects\",NULL, #11 3.819 \"Service Orchestration (SO).\");\n\n/*\nAdditionally, some more update statments; #11 3.819 these should be refactored to another SQL file in future releases \n*/\n\n-- portal\nupdate #11 3.819 fn_app set auth_central = 'Y' , auth_namespace = 'org.onap.portal' where app_id #11 3.819 = 1;\n-- portal-sdk\nupdate fn_app set app_username='Default', app_password='2VxipM8Z3SETg32m3Gp0FvKS6zZ2uCbCw46WDyK6T5E=', #11 3.819 ueb_key='ueb_key' where app_id = 2;\n-- SDC\nupdate fn_app set app_username='sdc', #11 3.819 app_password='j85yNhyIs7zKYbR1VlwEfNhS6b7Om4l0Gx5O8931sCI=', ueb_key='ueb_key' where #11 3.819 app_id = 4;\n-- policy\nupdate fn_app set app_username='Default', app_password='2VxipM8Z3SETg32m3Gp0FvKS6zZ2uCbCw46WDyK6T5E=', #11 3.819 ueb_key='ueb_key_5', auth_central = 'Y' , auth_namespace = 'org.onap.policy' where #11 3.819 app_id = 5;\n-- vid\nupdate fn_app set app_username='Default', app_password='2VxipM8Z3SETg32m3Gp0FvKS6zZ2uCbCw46WDyK6T5E=', #11 3.819 ueb_key='2Re7Pvdkgw5aeAUD', auth_central = 'Y' , auth_namespace = 'org.onap.vid' #11 3.819 where app_id = 6;\n-- aai sparky\nupdate fn_app set app_username='aaiui', app_password='4LK69amiIFtuzcl6Gsv97Tt7MLhzo03aoOx7dTvdjKQ=', #11 3.819 ueb_key='ueb_key_7' where app_id = 7;\n\n\n/*\nReplace spaces with underscores for #11 3.819 role names to match AAF role names\n*/\nUPDATE fn_role SET role_name= REPLACE(role_name, #11 3.819 ' ', '_') WHERE active_yn= 'Y';\n\n\n\nInsert into fn_user_role (USER_ID,ROLE_ID,PRIORITY,APP_ID) #11 3.819 values (1,999,null,12);\n\nINSERT IGNORE INTO `fn_pers_user_app_sel` (`id`,`user_id`,`app_id`,`status_cd`) #11 3.819 \ VALUES (12,1,12,'S');\n\ncommit;\n" #11 3.819 #11 3.819 #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/templates/configmap.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: v1 #11 3.819 kind: ConfigMap #11 3.819 metadata: #11 3.819 name: portal-filebeat #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal #11 3.819 chart: portal-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 data: #11 3.819 filebeat.yml: | #11 3.819 # Copyright © 2018 Amdocs, Bell Canada, AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 filebeat.prospectors: #11 3.819 #it is mandatory, in our case it's log #11 3.819 - input_type: log #11 3.819 #This is the canolical path as mentioned in logback.xml, *.* means it will monitor all files in the directory. #11 3.819 paths: #11 3.819 - /var/log/onap/*/*/*/*.log #11 3.819 - /var/log/onap/*/*/*.log #11 3.819 - /var/log/onap/*/*.log #11 3.819 #Files older than this should be ignored.In our case it will be 48 hours i.e. 2 days. It is a helping flag for clean_inactive #11 3.819 ignore_older: 48h #11 3.819 # Remove the registry entry for a file that is more than the specified time. In our case it will be 96 hours, i.e. 4 days. It will help to keep registry records with in limit #11 3.819 clean_inactive: 96h #11 3.819 #11 3.819 #11 3.819 # Name of the registry file. If a relative path is used, it is considered relative to the #11 3.819 # data path. Else full qualified file name. #11 3.819 #filebeat.registry_file: ${path.data}/registry #11 3.819 #11 3.819 #11 3.819 output.logstash: #11 3.819 #List of logstash server ip addresses with port number. #11 3.819 #But, in our case, this will be the loadbalancer IP address. #11 3.819 #For the below property to work the loadbalancer or logstash should expose 5044 port to listen the filebeat events or port in the property should be changed appropriately. #11 3.819 hosts: ["log-ls:5044"] #11 3.819 #If enable will do load balancing among availabe Logstash, automatically. #11 3.819 loadbalance: true #11 3.819 #11 3.819 #The list of root certificates for server verifications. #11 3.819 #If certificate_authorities is empty or not set, the trusted #11 3.819 #certificate authorities of the host system are used. #11 3.819 #ssl.certificate_authorities: $ssl.certificate_authorities #11 3.819 #11 3.819 #The path to the certificate for SSL client authentication. If the certificate is not specified, #11 3.819 #client authentication is not available. #11 3.819 #ssl.certificate: $ssl.certificate #11 3.819 #11 3.819 #The client certificate key used for client authentication. #11 3.819 #ssl.key: $ssl.key #11 3.819 #11 3.819 #The passphrase used to decrypt an encrypted key stored in the configured key file #11 3.819 #ssl.key_passphrase: $ssl.key_passphrase #11 3.819 #11 3.819 #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-cassandra/templates/pv.yaml #11 3.819 kind: PersistentVolume #11 3.819 apiVersion: v1 #11 3.819 metadata: #11 3.819 name: release-name-portal-cassandra #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-cassandra #11 3.819 chart: "portal-cassandra-5.0.0" #11 3.819 release: "release-name" #11 3.819 heritage: "Tiller" #11 3.819 name: release-name-portal-cassandra #11 3.819 spec: #11 3.819 capacity: #11 3.819 storage: 2Gi #11 3.819 accessModes: #11 3.819 - ReadWriteMany #11 3.819 persistentVolumeReclaimPolicy: Retain #11 3.819 hostPath: #11 3.819 path: /dockerdata-nfs/release-name/portal/cassandra/data #11 3.819 nodeAffinity: #11 3.819 required: #11 3.819 nodeSelectorTerms: #11 3.819 - matchExpressions: #11 3.819 - key: portal-storage #11 3.819 operator: In #11 3.819 values: #11 3.819 - enable #11 3.819 storageClassName: "manual" #11 3.819 --- #11 3.819 # Source: portal/charts/portal-cassandra/templates/pvc.yaml #11 3.819 kind: PersistentVolumeClaim #11 3.819 apiVersion: v1 #11 3.819 metadata: #11 3.819 name: release-name-portal-cassandra #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-cassandra #11 3.819 chart: "portal-cassandra-5.0.0" #11 3.819 release: "release-name" #11 3.819 heritage: "Tiller" #11 3.819 spec: #11 3.819 selector: #11 3.819 matchLabels: #11 3.819 name: release-name-portal-cassandra #11 3.819 accessModes: #11 3.819 - ReadWriteMany #11 3.819 resources: #11 3.819 requests: #11 3.819 storage: 2Gi #11 3.819 storageClassName: "manual" #11 3.819 --- #11 3.819 # Source: portal/charts/portal-app/templates/service.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: v1 #11 3.819 kind: Service #11 3.819 metadata: #11 3.819 name: portal-app #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-app #11 3.819 chart: portal-app-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 annotations: #11 3.819 msb.onap.org/service-info: '[ #11 3.819 { #11 3.819 "serviceName": "portal", #11 3.819 "version": "v2", #11 3.819 "url": "/", #11 3.819 "protocol": "REST" #11 3.819 "port": "8989", #11 3.819 "visualRange":"1" #11 3.819 } #11 3.819 ]' #11 3.819 spec: #11 3.819 type: LoadBalancer #11 3.819 ports: #11 3.819 - port: 8989 #11 3.819 targetPort: 8080 #11 3.819 nodePort: 30215 #11 3.819 name: portal-app #11 3.819 - port: 8006 #11 3.819 targetPort: 8005 #11 3.819 nodePort: 30213 #11 3.819 name: portal-app2 #11 3.819 - port: 8010 #11 3.819 targetPort: 8009 #11 3.819 nodePort: 30214 #11 3.819 name: portal-app3 #11 3.819 - port: 8443 #11 3.819 targetPort: 8443 #11 3.819 nodePort: 30225 #11 3.819 name: portal-app4 #11 3.819 selector: #11 3.819 app: portal-app #11 3.819 release: release-name #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-cassandra/templates/service.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: v1 #11 3.819 kind: Service #11 3.819 metadata: #11 3.819 name: portal-cassandra #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-cassandra #11 3.819 chart: portal-cassandra-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 spec: #11 3.819 type: ClusterIP #11 3.819 ports: #11 3.819 - port: 9160 #11 3.819 targetPort: 9160 #11 3.819 name: portal-cassandra #11 3.819 - port: 7000 #11 3.819 targetPort: 7000 #11 3.819 name: portal-cassandra2 #11 3.819 - port: 7001 #11 3.819 targetPort: 7001 #11 3.819 name: portal-cassandra3 #11 3.819 - port: 7199 #11 3.819 targetPort: 7199 #11 3.819 name: portal-cassandra4 #11 3.819 - port: 9042 #11 3.819 targetPort: 9042 #11 3.819 name: portal-cassandra5 #11 3.819 selector: #11 3.819 app: portal-cassandra #11 3.819 release: release-name #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-mariadb/templates/service.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: v1 #11 3.819 kind: Service #11 3.819 metadata: #11 3.819 name: portal-db #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-db #11 3.819 chart: portal-mariadb-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 spec: #11 3.819 type: ClusterIP #11 3.819 ports: #11 3.819 - port: 3306 #11 3.819 targetPort: 3306 #11 3.819 name: portal-db #11 3.819 selector: #11 3.819 app: portal-db #11 3.819 release: release-name #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-zookeeper/templates/service.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: v1 #11 3.819 kind: Service #11 3.819 metadata: #11 3.819 name: portal-zookeeper #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-zookeeper #11 3.819 chart: portal-zookeeper-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 spec: #11 3.819 type: ClusterIP #11 3.819 ports: #11 3.819 - port: 2181 #11 3.819 targetPort: 2181 #11 3.819 name: portal-zk #11 3.819 selector: #11 3.819 app: portal-zookeeper #11 3.819 release: release-name #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-app/templates/deployment.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: apps/v1 #11 3.819 kind: Deployment #11 3.819 metadata: #11 3.819 name: release-name-portal-app #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-app #11 3.819 chart: portal-app-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 spec: #11 3.819 replicas: 1 #11 3.819 selector: #11 3.819 matchLabels: #11 3.819 app: portal-app #11 3.819 release: release-name #11 3.819 template: #11 3.819 metadata: #11 3.819 labels: #11 3.819 app: portal-app #11 3.819 release: release-name #11 3.819 spec: #11 3.819 initContainers: #11 3.819 - name: portal-app-job-completion #11 3.819 image: "oomk8s/readiness-check:2.0.0" #11 3.819 imagePullPolicy: "Always" #11 3.819 command: #11 3.819 - /root/job_complete.py #11 3.819 args: #11 3.819 - --job-name #11 3.819 - release-name-portal-db-config #11 3.819 env: #11 3.819 - name: NAMESPACE #11 3.819 valueFrom: #11 3.819 fieldRef: #11 3.819 apiVersion: v1 #11 3.819 fieldPath: metadata.namespace #11 3.819 containers: #11 3.819 - name: portal-app #11 3.819 image: "nexus3.onap.org:10001/onap/portal-app:2.5.0" #11 3.819 imagePullPolicy: Always #11 3.819 command: #11 3.819 - /start-apache-tomcat.sh #11 3.819 - -i #11 3.819 - "" #11 3.819 - -n #11 3.819 - "" #11 3.819 env: #11 3.819 - name: CATALINA_OPTS #11 3.819 value: > #11 3.819 -Djavax.net.ssl.keyStore=/opt/apache-tomcat-8.0.37/truststoreONAPall.jks #11 3.819 -Djavax.net.ssl.keyStorePassword=changeit #11 3.819 -Djavax.net.ssl.trustStore=/opt/apache-tomcat-8.0.37/truststoreONAPall.jks #11 3.819 -Djavax.net.ssl.trustStorePassword=changeit #11 3.819 - name: javax.net.ssl.keyStore #11 3.819 value: /opt/apache-tomcat-8.0.37/truststoreONAPall.jks #11 3.819 - name: javax.net.ssl.keyStorePassword #11 3.819 value: changeit #11 3.819 - name: javax.net.ssl.trustStore #11 3.819 value: /opt/apache-tomcat-8.0.37/truststoreONAPall.jks #11 3.819 - name: javax.net.ssl.trustStorePassword #11 3.819 value: changeit #11 3.819 ports: #11 3.819 - containerPort: 8080 #11 3.819 - containerPort: 8005 #11 3.819 - containerPort: 8009 #11 3.819 - containerPort: 8443 #11 3.819 livenessProbe: #11 3.819 tcpSocket: #11 3.819 port: 8080 #11 3.819 initialDelaySeconds: 10 #11 3.819 periodSeconds: 10 #11 3.819 readinessProbe: #11 3.819 tcpSocket: #11 3.819 port: 8080 #11 3.819 initialDelaySeconds: 10 #11 3.819 periodSeconds: 10 #11 3.819 volumeMounts: #11 3.819 - mountPath: /etc/localtime #11 3.819 name: localtime #11 3.819 readOnly: true #11 3.819 - name: properties-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/webapps/ONAPPORTAL/WEB-INF/fusion/conf/fusion.properties" #11 3.819 subPath: fusion.properties #11 3.819 - name: properties-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/webapps/ONAPPORTAL/WEB-INF/classes/openid-connect.properties" #11 3.819 subPath: openid-connect.properties #11 3.819 - name: properties-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/webapps/ONAPPORTAL/WEB-INF/conf/system.properties" #11 3.819 subPath: system.properties #11 3.819 - name: properties-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/webapps/ONAPPORTAL/WEB-INF/classes/portal.properties" #11 3.819 subPath: portal.properties #11 3.819 - name: properties-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/webapps/ONAPPORTAL/WEB-INF/classes/music.properties" #11 3.819 subPath: music.properties #11 3.819 - name: properties-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/webapps/ONAPPORTAL/WEB-INF/classes/logback.xml" #11 3.819 subPath: logback.xml #11 3.819 - name: properties-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/conf/server.xml" #11 3.819 subPath: server.xml #11 3.819 - name: authz-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/keystoreONAPPortal.p12" #11 3.819 subPath: keystoreONAPPortal.p12 #11 3.819 - name: authz-onapportal #11 3.819 mountPath: "/opt/apache-tomcat-8.0.37/truststoreONAPall.jks" #11 3.819 subPath: truststoreONAPall.jks #11 3.819 - name: var-log-onap #11 3.819 mountPath: /var/log/onap #11 3.819 resources: #11 3.819 limits: #11 3.819 cpu: 2 #11 3.819 memory: 10Gi #11 3.819 requests: #11 3.819 cpu: 1 #11 3.819 memory: 6Gi #11 3.819 #11 3.819 - name: filebeat-onap #11 3.819 image: "docker.elastic.co/beats/filebeat:5.5.0" #11 3.819 imagePullPolicy: Always #11 3.819 volumeMounts: #11 3.819 - mountPath: /usr/share/filebeat/filebeat.yml #11 3.819 name: filebeat-conf #11 3.819 subPath: filebeat.yml #11 3.819 - name: portal-data-filebeat #11 3.819 mountPath: /usr/share/filebeat/data #11 3.819 - name: var-log-onap #11 3.819 mountPath: /var/log/onap #11 3.819 volumes: #11 3.819 - name: localtime #11 3.819 hostPath: #11 3.819 path: /etc/localtime #11 3.819 - name: properties-onapportal #11 3.819 configMap: #11 3.819 name: release-name-portal-app-onapportal #11 3.819 defaultMode: 0755 #11 3.819 - name: authz-onapportal #11 3.819 secret: #11 3.819 secretName: release-name-portal-app-authz-onapportal #11 3.819 - name: filebeat-conf #11 3.819 configMap: #11 3.819 name: portal-filebeat #11 3.819 - name: var-log-onap #11 3.819 emptyDir: {} #11 3.819 - name: portal-data-filebeat #11 3.819 emptyDir: {} #11 3.819 - name: portal-tomcat-logs #11 3.819 emptyDir: {} #11 3.819 imagePullSecrets: #11 3.819 - name: "default-docker-registry-key" #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-cassandra/templates/deployment.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: apps/v1 #11 3.819 kind: Deployment #11 3.819 metadata: #11 3.819 name: release-name-portal-cassandra #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-cassandra #11 3.819 chart: portal-cassandra-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 spec: #11 3.819 replicas: 1 #11 3.819 selector: #11 3.819 matchLabels: #11 3.819 app: portal-cassandra #11 3.819 release: release-name #11 3.819 template: #11 3.819 metadata: #11 3.819 labels: #11 3.819 app: portal-cassandra #11 3.819 release: release-name #11 3.819 spec: #11 3.819 containers: #11 3.819 - name: portal-cassandra #11 3.819 image: "nexus3.onap.org:10001/onap/music/cassandra_music:3.0.0" #11 3.819 imagePullPolicy: Always #11 3.819 ports: #11 3.819 - containerPort: 9160 #11 3.819 - containerPort: 7000 #11 3.819 - containerPort: 7001 #11 3.819 - containerPort: 7199 #11 3.819 - containerPort: 9042 #11 3.819 #11 3.819 livenessProbe: #11 3.819 exec: #11 3.819 command: #11 3.819 - /bin/bash #11 3.819 - -c #11 3.819 - nodetool status | grep $POD_IP | awk '$1!="UN" { exit 1; }' #11 3.819 initialDelaySeconds: 10 #11 3.819 periodSeconds: 10 #11 3.819 #11 3.819 readinessProbe: #11 3.819 exec: #11 3.819 command: #11 3.819 - /bin/bash #11 3.819 - -c #11 3.819 - nodetool status | grep $POD_IP | awk '$1!="UN" { exit 1; }' #11 3.819 initialDelaySeconds: 10 #11 3.819 periodSeconds: 10 #11 3.819 env: #11 3.819 - name: CASSUSER #11 3.819 value: "root" #11 3.819 - name: CASSPASS #11 3.819 value: "Aa123456" #11 3.819 - name: JVM_OPTS #11 3.819 value: "-Xmx2536m -Xms2536m" #11 3.819 - name: POD_IP #11 3.819 valueFrom: #11 3.819 fieldRef: #11 3.819 fieldPath: status.podIP #11 3.819 volumeMounts: #11 3.819 - mountPath: /etc/localtime #11 3.819 name: localtime #11 3.819 readOnly: true #11 3.819 - name: cassandra-docker-entrypoint-initdb #11 3.819 mountPath: /docker-entrypoint-initdb.d/aaa_portal_single.cql #11 3.819 subPath: portal_single.cql #11 3.819 - name: release-name-portal-cassandra-data #11 3.819 mountPath: /var/lib/cassandra/data #11 3.819 resources: #11 3.819 limits: #11 3.819 cpu: 2 #11 3.819 memory: 8Gi #11 3.819 requests: #11 3.819 cpu: 1 #11 3.819 memory: 4Gi #11 3.819 #11 3.819 volumes: #11 3.819 - name: cassandra-docker-entrypoint-initdb #11 3.819 configMap: #11 3.819 name: release-name-portal-cassandra-docker-entry-initd #11 3.819 - name: localtime #11 3.819 hostPath: #11 3.819 path: /etc/localtime #11 3.819 - name: release-name-portal-cassandra-data #11 3.819 persistentVolumeClaim: #11 3.819 claimName: release-name-portal-cassandra #11 3.819 imagePullSecrets: #11 3.819 - name: "default-docker-registry-key" #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-mariadb/templates/deployment.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: apps/v1 #11 3.819 kind: Deployment #11 3.819 metadata: #11 3.819 name: release-name-portal-db #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-db #11 3.819 chart: portal-mariadb-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 spec: #11 3.819 replicas: 1 #11 3.819 selector: #11 3.819 matchLabels: #11 3.819 app: portal-db #11 3.819 release: release-name #11 3.819 template: #11 3.819 metadata: #11 3.819 labels: #11 3.819 app: portal-db #11 3.819 release: release-name #11 3.819 spec: #11 3.819 containers: #11 3.819 - name: portal-db #11 3.819 image: "nexus3.onap.org:10001/onap/portal-db:2.5.0" #11 3.819 imagePullPolicy: Always #11 3.819 ports: #11 3.819 - containerPort: 3306 #11 3.819 # disable liveness probe when breakpoints set in debugger #11 3.819 # so K8s doesn't restart unresponsive container #11 3.819 livenessProbe: #11 3.819 tcpSocket: #11 3.819 port: 3306 #11 3.819 initialDelaySeconds: 450 #11 3.819 periodSeconds: 10 #11 3.819 readinessProbe: #11 3.819 tcpSocket: #11 3.819 port: 3306 #11 3.819 initialDelaySeconds: 30 #11 3.819 periodSeconds: 10 #11 3.819 env: #11 3.819 - name: MYSQL_HOST #11 3.819 value: "portal-db" #11 3.819 - name: MYSQL_ROOT_PASSWORD #11 3.819 valueFrom: #11 3.819 secretKeyRef: #11 3.819 name: release-name-portal-db #11 3.819 key: db-root-password #11 3.819 volumeMounts: #11 3.819 - mountPath: /var/lib/mysql #11 3.819 name: mariadb-data #11 3.819 - mountPath: /etc/localtime #11 3.819 name: localtime #11 3.819 readOnly: true #11 3.819 - mountPath: /usr/local/bin/docker-entrypoint.sh #11 3.819 subPath: docker-entrypoint.sh #11 3.819 name: docker-entry #11 3.819 resources: #11 3.819 limits: #11 3.819 cpu: 800m #11 3.819 memory: 1Gi #11 3.819 requests: #11 3.819 cpu: 400m #11 3.819 memory: 500Mi #11 3.819 #11 3.819 volumes: #11 3.819 - name: mariadb-data #11 3.819 emptyDir: {} #11 3.819 - name: localtime #11 3.819 hostPath: #11 3.819 path: /etc/localtime #11 3.819 - name: docker-entry #11 3.819 configMap: #11 3.819 name: release-name-portal-db-mariadb #11 3.819 defaultMode: 0755 #11 3.819 imagePullSecrets: #11 3.819 - name: "default-docker-registry-key" #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-zookeeper/templates/deployment.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: apps/v1 #11 3.819 kind: Deployment #11 3.819 metadata: #11 3.819 name: release-name-portal-zookeeper #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-zookeeper #11 3.819 chart: portal-zookeeper-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 spec: #11 3.819 replicas: 1 #11 3.819 selector: #11 3.819 matchLabels: #11 3.819 app: portal-zookeeper #11 3.819 release: release-name #11 3.819 template: #11 3.819 metadata: #11 3.819 labels: #11 3.819 app: portal-zookeeper #11 3.819 release: release-name #11 3.819 spec: #11 3.819 containers: #11 3.819 - name: portal-zookeeper #11 3.819 image: "nexus3.onap.org:10001/zookeeper:3.4" #11 3.819 imagePullPolicy: Always #11 3.819 ports: #11 3.819 - containerPort: 2181 #11 3.819 livenessProbe: #11 3.819 tcpSocket: #11 3.819 port: 2181 #11 3.819 initialDelaySeconds: 10 #11 3.819 periodSeconds: 10 #11 3.819 readinessProbe: #11 3.819 tcpSocket: #11 3.819 port: 2181 #11 3.819 initialDelaySeconds: 10 #11 3.819 periodSeconds: 10 #11 3.819 volumeMounts: #11 3.819 - mountPath: /etc/localtime #11 3.819 name: localtime #11 3.819 readOnly: true #11 3.819 resources: #11 3.819 limits: #11 3.819 cpu: 500m #11 3.819 memory: 600Mi #11 3.819 requests: #11 3.819 cpu: 250m #11 3.819 memory: 300Mi #11 3.819 #11 3.819 volumes: #11 3.819 - name: localtime #11 3.819 hostPath: #11 3.819 path: /etc/localtime #11 3.819 imagePullSecrets: #11 3.819 - name: "default-docker-registry-key" #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-mariadb/templates/job.yaml #11 3.819 # Copyright © 2017 Amdocs, Bell Canada #11 3.819 # Modifications Copyright © 2018 AT&T #11 3.819 # #11 3.819 # Licensed under the Apache License, Version 2.0 (the "License"); #11 3.819 # you may not use this file except in compliance with the License. #11 3.819 # You may obtain a copy of the License at #11 3.819 # #11 3.819 # http://www.apache.org/licenses/LICENSE-2.0 #11 3.819 # #11 3.819 # Unless required by applicable law or agreed to in writing, software #11 3.819 # distributed under the License is distributed on an "AS IS" BASIS, #11 3.819 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 3.819 # See the License for the specific language governing permissions and #11 3.819 # limitations under the License. #11 3.819 #11 3.819 apiVersion: batch/v1 #11 3.819 kind: Job #11 3.819 metadata: #11 3.819 name: release-name-portal-db-config #11 3.819 namespace: default #11 3.819 labels: #11 3.819 app: portal-db-job #11 3.819 chart: portal-mariadb-5.0.0 #11 3.819 release: release-name #11 3.819 heritage: Tiller #11 3.819 spec: #11 3.819 template: #11 3.819 metadata: #11 3.819 labels: #11 3.819 app: portal-db-job #11 3.819 release: release-name #11 3.819 spec: #11 3.819 restartPolicy: Never #11 3.819 initContainers: #11 3.819 - name: portal-db-init-readiness #11 3.819 image: "oomk8s/readiness-check:2.0.0" #11 3.819 imagePullPolicy: Always #11 3.819 command: #11 3.819 - /root/ready.py #11 3.819 args: #11 3.819 - --container-name #11 3.819 - portal-db #11 3.819 env: #11 3.819 - name: NAMESPACE #11 3.819 valueFrom: #11 3.819 fieldRef: #11 3.819 apiVersion: v1 #11 3.819 fieldPath: metadata.namespace #11 3.819 containers: #11 3.819 - name: portal-db-job #11 3.819 image: "oomk8s/mariadb-client-init:3.0.0" #11 3.819 imagePullPolicy: Always #11 3.819 env: #11 3.819 - name: DB_HOST #11 3.819 value: "portal-db" #11 3.819 - name: DB_USER #11 3.819 value: root #11 3.819 - name: DB_PASS #11 3.819 valueFrom: #11 3.819 secretKeyRef: {name: release-name-portal-db, key: db-root-password} #11 3.819 - name: SQL_SRC_DIR #11 3.819 value: portal/deliveries #11 3.819 - name: portal-db-oom-update-job #11 3.819 image: "oomk8s/mariadb-client-init:3.0.0" #11 3.819 imagePullPolicy: Always #11 3.819 env: #11 3.819 - name: DB_HOST #11 3.819 value: "portal-db" #11 3.819 - name: DB_USER #11 3.819 value: root #11 3.819 - name: DB_PORT #11 3.819 value: "3306" #11 3.819 - name: DB_PASS #11 3.819 valueFrom: #11 3.819 secretKeyRef: {name: release-name-portal-db, key: db-root-password} #11 3.819 command: #11 3.819 - /bin/sh #11 3.819 - -x #11 3.819 - -c #11 3.819 - "mysql -vv --user=$DB_USER --password=$DB_PASS --host=$DB_HOST --port=$DB_PORT < /tmp/oom_updates.sql" #11 3.819 volumeMounts: #11 3.819 - name: portal-mariadb-sql #11 3.819 mountPath: /tmp/oom_updates.sql #11 3.819 subPath: oom_updates.sql #11 3.819 volumes: #11 3.819 - name: portal-mariadb-sql #11 3.819 configMap: #11 3.819 name: release-name-portal-db-mariadb #11 3.819 imagePullSecrets: #11 3.819 - name: "default-docker-registry-key" #11 3.819 restartPolicy: Never #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-mariadb/templates/pv.yaml #11 3.819 #11 3.819 --- #11 3.819 # Source: portal/charts/portal-mariadb/templates/pvc.yaml #11 3.819 #11 4.827 *************************************************************************************************************** #11 4.827 Update chart dependency for directory /tmp/it-dep/bin/../ric-aux/helm/aaf #11 4.885 Hang tight while we grab the latest from your chart repositories... #11 4.887 ...Successfully got an update from the "local" chart repository #11 4.887 Update Complete. #11 4.902 Saving 1 charts #11 4.902 Downloading aux-common from repo http://127.0.0.1:8879/charts #11 4.904 Deleting outdated charts #11 5.100 *************************************************************************************************************** #11 5.101 ==> Linting /tmp/it-dep/bin/../ric-aux/helm/aaf #11 5.101 [INFO] Chart.yaml: icon is recommended #11 5.101 #11 5.101 1 chart(s) linted, no failures #11 5.103 *************************************************************************************************************** #11 5.355 *************************************************************************************************************** #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/templates/secret.yaml #11 5.356 # Copyright 2018 Intel Corporation, Inc #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Secret #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm #11 5.356 namespace: default #11 5.356 type: Opaque #11 5.356 data: #11 5.356 prk_passwd: Y0hKcGJXRnllWEJoYzNOM2IzSmtDZz09Cg== #11 5.356 srk_handle: TUhnNE1UQXdNREF5TXdvPQo= #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-quorumclient/templates/configmap.yaml #11 5.356 # Copyright 2018 Intel Corporation, Inc #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: ConfigMap #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-quorumclient #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-quorumclient #11 5.356 chart: aaf-sms-quorumclient-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 data: #11 5.356 config.json: |- #11 5.356 { #11 5.356 "url":"https://aaf-sms.default:10443", #11 5.356 "cafile": "/quorumclient/certs/aaf_root_ca.cer", #11 5.356 "clientcert":"client.cert", #11 5.356 "clientkey":"client.key", #11 5.356 "timeout":"10s" #11 5.356 } #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-vault/templates/configmap.yaml #11 5.356 # Copyright 2018 Intel Corporation, Inc #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: ConfigMap #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-vault-vault #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-vault #11 5.356 chart: aaf-sms-vault-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 data: #11 5.356 config.json: | #11 5.356 {"disable_mlock":true,"listener":{"tcp":{"address":"[::]:8200","tls_disable":true}},"storage":{"consul":{"address":"localhost:8500","path":"smsvault"}}} #11 5.356 --- #11 5.356 apiVersion: v1 #11 5.356 kind: ConfigMap #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-vault-consul #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-vault #11 5.356 chart: aaf-sms-vault-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 data: #11 5.356 config.json: | #11 5.356 {"data_dir":"/consul/data","log_level":"INFO","ports":{"http":8500,"https":-1},"server":true} #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/templates/configmap.yaml #11 5.356 #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: ConfigMap #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms #11 5.356 chart: aaf-sms-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 data: #11 5.356 smsconfig.json: | #11 5.356 {"cafile":"/sms/certs/aaf_root_ca.cer","password":"c2VjcmV0bWFuYWdlbWVudHNlcnZpY2VzZWNyZXRwYXNzd29yZA==","servercert":"/sms/certs/aaf-sms.pub","serverkey":"/sms/certs/aaf-sms.pr","smsdbaddress":"http://aaf-sms-db:8200"} #11 5.356 --- #11 5.356 apiVersion: v1 #11 5.356 kind: ConfigMap #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-preload #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-preload #11 5.356 chart: aaf-sms-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 data: #11 5.356 has.json: | #11 5.356 { #11 5.356 "domain": { #11 5.356 "name": "has", #11 5.356 "secrets": [ #11 5.356 { #11 5.356 "name": "aai", #11 5.356 "values": { #11 5.356 "username": "oof@oof.onap.org", #11 5.356 "password": "demo123456!" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "conductor_api", #11 5.356 "values": { #11 5.356 "username": "admin1", #11 5.356 "password": "plan.15" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "sdnc", #11 5.356 "values": { #11 5.356 "username": "admin", #11 5.356 "password": "Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "music_api", #11 5.356 "values": { #11 5.356 "aafuser": "conductor", #11 5.356 "aafpass": "c0nduct0r", #11 5.356 "aafns": "conductor" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "aaf_api", #11 5.356 "values": { #11 5.356 "username": "aaf_admin@people.osaaf.org", #11 5.356 "password": "demo123456!", #11 5.356 "aaf_conductor_user": "oof@oof.onap.org" #11 5.356 } #11 5.356 } #11 5.356 ] #11 5.356 } #11 5.356 } #11 5.356 osdf.json: |- #11 5.356 { #11 5.356 "domain": { #11 5.356 "name": "osdf", #11 5.356 "secrets": [ #11 5.356 { #11 5.356 "name": "so", #11 5.356 "values": { #11 5.356 "UserName": "", #11 5.356 "Password": "" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "conductor", #11 5.356 "values": { #11 5.356 "UserName": "admin1", #11 5.356 "Password": "plan.15" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "policyPlatform", #11 5.356 "values": { #11 5.356 "UserName": "testpdp", #11 5.356 "Password": "alpha123" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "policyClient", #11 5.356 "values": { #11 5.356 "UserName": "python", #11 5.356 "Password": "test" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "dmaap", #11 5.356 "values": { #11 5.356 "UserName": "NA", #11 5.356 "Password": "NA" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "sdc", #11 5.356 "values": { #11 5.356 "UserName": "NA", #11 5.356 "Password": "NA" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "osdfPlacement", #11 5.356 "values": { #11 5.356 "UserName": "test", #11 5.356 "Password": "testpwd" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "osdfPlacementSO", #11 5.356 "values": { #11 5.356 "UserName": "so_test", #11 5.356 "Password": "so_testpwd" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "osdfPlacementVFC", #11 5.356 "values": { #11 5.356 "UserName": "vfc_test", #11 5.356 "Password": "vfc_testpwd" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "osdfCMScheduler", #11 5.356 "values": { #11 5.356 "UserName": "test1", #11 5.356 "Password": "testpwd1" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "configDb", #11 5.356 "values": { #11 5.356 "UserName": "osdf", #11 5.356 "Password": "passwd" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "pciHMS", #11 5.356 "values": { #11 5.356 "UserName": "", #11 5.356 "Password": "" #11 5.356 } #11 5.356 }, #11 5.356 { #11 5.356 "name": "osdfPCIOpt", #11 5.356 "values": { #11 5.356 "UserName": "pci_test", #11 5.356 "Password": "pci_testpwd" #11 5.356 } #11 5.356 } #11 5.356 ] #11 5.356 } #11 5.356 } #11 5.356 #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/charts/aaf-sshsm-distcenter/templates/configmap.yaml #11 5.356 apiVersion: v1 #11 5.356 kind: ConfigMap #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-distcenter #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm-distcenter #11 5.356 chart: aaf-sshsm-distcenter-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 data: #11 5.356 {} #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-cass/templates/pv.yaml #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-cass-pv #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-cass #11 5.356 chart: "aaf-cass-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf-cass #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 20Gi #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 persistentVolumeReclaimPolicy: Retain #11 5.356 hostPath: #11 5.356 path: /dockerdata-nfs/release-name/cass #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-hello/templates/aaf-hello-pv.yaml #11 5.356 ######### #11 5.356 ## ============LICENSE_START==================================================== #11 5.356 ## org.onap.aaf #11 5.356 ## =========================================================================== #11 5.356 ## Copyright (c) 2017 AT&T Intellectual Property. All rights reserved. #11 5.356 ## =========================================================================== #11 5.356 ## Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 ## you may not use this file except in compliance with the License. #11 5.356 ## You may obtain a copy of the License at #11 5.356 ## #11 5.356 ## http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 ## #11 5.356 ## Unless required by applicable law or agreed to in writing, software #11 5.356 ## distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 ## See the License for the specific language governing permissions and #11 5.356 ## limitations under the License. #11 5.356 ## ============LICENSE_END==================================================== #11 5.356 ## #11 5.356 #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-hello-pv #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-hello-hello #11 5.356 chart: "aaf-hello-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf-hello #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 40M #11 5.356 accessModes: #11 5.356 - ReadWriteMany #11 5.356 persistentVolumeReclaimPolicy: Delete #11 5.356 hostPath: #11 5.356 path: /mnt/data/aaf/hello #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-quorumclient/templates/pv.yaml #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-quorumclient #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-quorumclient #11 5.356 chart: "aaf-sms-quorumclient-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf-sms-quorumclient #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 10Mi #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 persistentVolumeReclaimPolicy: Retain #11 5.356 hostPath: #11 5.356 path: /dockerdata-nfs/release-name/sms/quorum/data #11 5.356 nodeAffinity: #11 5.356 required: #11 5.356 nodeSelectorTerms: #11 5.356 - matchExpressions: #11 5.356 - key: aaf-storage #11 5.356 operator: In #11 5.356 values: #11 5.356 - enable #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-vault/templates/pv.yaml #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-vault #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-vault #11 5.356 chart: "aaf-sms-vault-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf-sms-vault #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 2Gi #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 persistentVolumeReclaimPolicy: Retain #11 5.356 hostPath: #11 5.356 path: /dockerdata-nfs/release-name/sms/consul/data #11 5.356 nodeAffinity: #11 5.356 required: #11 5.356 nodeSelectorTerms: #11 5.356 - matchExpressions: #11 5.356 - key: aaf-storage #11 5.356 operator: In #11 5.356 values: #11 5.356 - enable #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/templates/pv.yaml #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms #11 5.356 chart: "aaf-sms-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf-sms #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 1Gi #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 persistentVolumeReclaimPolicy: Retain #11 5.356 hostPath: #11 5.356 path: /dockerdata-nfs/release-name/sms/auth #11 5.356 nodeAffinity: #11 5.356 required: #11 5.356 nodeSelectorTerms: #11 5.356 - matchExpressions: #11 5.356 - key: aaf-storage #11 5.356 operator: In #11 5.356 values: #11 5.356 - enable #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/charts/aaf-sshsm-distcenter/templates/pv.yaml #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-distcenter #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm-distcenter #11 5.356 chart: "aaf-sshsm-distcenter-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf-sshsm-distcenter #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 10Mi #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 persistentVolumeReclaimPolicy: Retain #11 5.356 hostPath: #11 5.356 path: /dockerdata-nfs/release-name/sshsm/distcenter/data #11 5.356 nodeAffinity: #11 5.356 required: #11 5.356 nodeSelectorTerms: #11 5.356 - matchExpressions: #11 5.356 - key: aaf-storage #11 5.356 operator: In #11 5.356 values: #11 5.356 - enable #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/templates/pv.yaml #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-data #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm #11 5.356 chart: "aaf-sshsm-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf-sshsm-data #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 10Mi #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 persistentVolumeReclaimPolicy: Retain #11 5.356 hostPath: #11 5.356 path: /dockerdata-nfs/release-name/sshsm/data #11 5.356 nodeAffinity: #11 5.356 required: #11 5.356 nodeSelectorTerms: #11 5.356 - matchExpressions: #11 5.356 - key: aaf-storage #11 5.356 operator: In #11 5.356 values: #11 5.356 - enable #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-dbus #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm #11 5.356 chart: "aaf-sshsm-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf-sshsm-dbus #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 10Mi #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 persistentVolumeReclaimPolicy: Retain #11 5.356 hostPath: #11 5.356 path: /dockerdata-nfs/release-name/sshsm/dbus #11 5.356 nodeAffinity: #11 5.356 required: #11 5.356 nodeSelectorTerms: #11 5.356 - matchExpressions: #11 5.356 - key: aaf-storage #11 5.356 operator: In #11 5.356 values: #11 5.356 - enable #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/templates/aaf-config-pv.yaml #11 5.356 ######### #11 5.356 ## ============LICENSE_START==================================================== #11 5.356 ## org.onap.aaf #11 5.356 ## =========================================================================== #11 5.356 ## Copyright (c) 2017 AT&T Intellectual Property. All rights reserved. #11 5.356 ## =========================================================================== #11 5.356 ## Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 ## you may not use this file except in compliance with the License. #11 5.356 ## You may obtain a copy of the License at #11 5.356 ## #11 5.356 ## http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 ## #11 5.356 ## Unless required by applicable law or agreed to in writing, software #11 5.356 ## distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 ## See the License for the specific language governing permissions and #11 5.356 ## limitations under the License. #11 5.356 ## ============LICENSE_END==================================================== #11 5.356 ## #11 5.356 #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-config-pv #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-config #11 5.356 chart: "aaf-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 2Gi #11 5.356 accessModes: #11 5.356 - ReadWriteMany #11 5.356 persistentVolumeReclaimPolicy: Delete #11 5.356 hostPath: #11 5.356 path: /mnt/data/aaf/config #11 5.356 nodeAffinity: #11 5.356 required: #11 5.356 nodeSelectorTerms: #11 5.356 - matchExpressions: #11 5.356 - key: aaf-storage #11 5.356 operator: In #11 5.356 values: #11 5.356 - enable #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/templates/aaf-status-pv.yaml #11 5.356 ######### #11 5.356 ## ============LICENSE_START==================================================== #11 5.356 ## org.onap.aaf #11 5.356 ## =========================================================================== #11 5.356 ## Copyright (c) 2017 AT&T Intellectual Property. All rights reserved. #11 5.356 ## =========================================================================== #11 5.356 ## Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 ## you may not use this file except in compliance with the License. #11 5.356 ## You may obtain a copy of the License at #11 5.356 ## #11 5.356 ## http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 ## #11 5.356 ## Unless required by applicable law or agreed to in writing, software #11 5.356 ## distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 ## See the License for the specific language governing permissions and #11 5.356 ## limitations under the License. #11 5.356 ## ============LICENSE_END==================================================== #11 5.356 ## #11 5.356 #11 5.356 kind: PersistentVolume #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-status-pv #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-status #11 5.356 chart: "aaf-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 name: release-name-aaf #11 5.356 spec: #11 5.356 capacity: #11 5.356 storage: 2M #11 5.356 accessModes: #11 5.356 - ReadWriteMany #11 5.356 persistentVolumeReclaimPolicy: Delete #11 5.356 hostPath: #11 5.356 path: /dockerdata-nfs/release-name/status #11 5.356 nodeAffinity: #11 5.356 required: #11 5.356 nodeSelectorTerms: #11 5.356 - matchExpressions: #11 5.356 - key: aaf-storage #11 5.356 operator: In #11 5.356 values: #11 5.356 - enable #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-cass/templates/pvc.yaml #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-cass-pvc #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-cass #11 5.356 chart: "aaf-cass-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-cass #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 20Gi #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-hello/templates/aaf-hello-pvc.yaml #11 5.356 ######### #11 5.356 ## ============LICENSE_START==================================================== #11 5.356 ## org.onap.aaf #11 5.356 ## =========================================================================== #11 5.356 ## Copyright (c) 2017 AT&T Intellectual Property. All rights reserved. #11 5.356 ## =========================================================================== #11 5.356 ## Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 ## you may not use this file except in compliance with the License. #11 5.356 ## You may obtain a copy of the License at #11 5.356 ## #11 5.356 ## http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 ## #11 5.356 ## Unless required by applicable law or agreed to in writing, software #11 5.356 ## distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 ## See the License for the specific language governing permissions and #11 5.356 ## limitations under the License. #11 5.356 ## ============LICENSE_END==================================================== #11 5.356 ## #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-hello-pvc #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-hello #11 5.356 chart: "aaf-hello-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-hello-hello #11 5.356 accessModes: #11 5.356 - ReadWriteMany #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 40M #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-quorumclient/templates/pvc.yaml #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-quorumclient #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-quorumclient #11 5.356 chart: "aaf-sms-quorumclient-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 name: release-name-aaf-sms-quorumclient #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 10Mi #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-vault/templates/pvc.yaml #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-vault #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-vault #11 5.356 chart: "aaf-sms-vault-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 name: release-name-aaf-sms-vault #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 2Gi #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/templates/pvc.yaml #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms #11 5.356 chart: "aaf-sms-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 1Gi #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/charts/aaf-sshsm-distcenter/templates/pvc.yaml #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-distcenter #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm-distcenter #11 5.356 chart: "aaf-sshsm-distcenter-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 name: release-name-aaf-sshsm-distcenter #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 10Mi #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/templates/pvc.yaml #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-data #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm #11 5.356 chart: "aaf-sshsm-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 name: release-name-aaf-sshsm-data #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 10Mi #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-dbus #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm #11 5.356 chart: "aaf-sshsm-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 name: release-name-aaf-sshsm-dbus #11 5.356 accessModes: #11 5.356 - ReadWriteOnce #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 10Mi #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/templates/aaf-config-pvc.yaml #11 5.356 ######### #11 5.356 ## ============LICENSE_START==================================================== #11 5.356 ## org.onap.aaf #11 5.356 ## =========================================================================== #11 5.356 ## Copyright (c) 2017 AT&T Intellectual Property. All rights reserved. #11 5.356 ## =========================================================================== #11 5.356 ## Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 ## you may not use this file except in compliance with the License. #11 5.356 ## You may obtain a copy of the License at #11 5.356 ## #11 5.356 ## http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 ## #11 5.356 ## Unless required by applicable law or agreed to in writing, software #11 5.356 ## distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 ## See the License for the specific language governing permissions and #11 5.356 ## limitations under the License. #11 5.356 ## ============LICENSE_END==================================================== #11 5.356 ## #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-config-pvc #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf #11 5.356 chart: "aaf-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-config #11 5.356 accessModes: #11 5.356 - ReadWriteMany #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 2Gi #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/templates/aaf-status-pvc.yaml #11 5.356 ######### #11 5.356 ## ============LICENSE_START==================================================== #11 5.356 ## org.onap.aaf #11 5.356 ## =========================================================================== #11 5.356 ## Copyright (c) 2017 AT&T Intellectual Property. All rights reserved. #11 5.356 ## =========================================================================== #11 5.356 ## Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 ## you may not use this file except in compliance with the License. #11 5.356 ## You may obtain a copy of the License at #11 5.356 ## #11 5.356 ## http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 ## #11 5.356 ## Unless required by applicable law or agreed to in writing, software #11 5.356 ## distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 ## See the License for the specific language governing permissions and #11 5.356 ## limitations under the License. #11 5.356 ## ============LICENSE_END==================================================== #11 5.356 ## #11 5.356 kind: PersistentVolumeClaim #11 5.356 apiVersion: v1 #11 5.356 metadata: #11 5.356 name: release-name-aaf-status-pvc #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf #11 5.356 chart: "aaf-5.0.0" #11 5.356 release: "release-name" #11 5.356 heritage: "Tiller" #11 5.356 spec: #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-status #11 5.356 accessModes: #11 5.356 - ReadWriteMany #11 5.356 resources: #11 5.356 requests: #11 5.356 storage: 2M #11 5.356 storageClassName: "manual" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-cass/templates/service.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-cass #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-cass #11 5.356 chart: aaf-cass-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 # annotations: #11 5.356 # service.alpha.kubernetes.io/tolerate-unready-endpoints: "true" #11 5.356 spec: #11 5.356 type: ClusterIP #11 5.356 ports: #11 5.356 - name: storage #11 5.356 protocol: TCP #11 5.356 port: 7000 #11 5.356 containerPort: 7000 #11 5.356 - name: ssl-storage #11 5.356 protocol: TCP #11 5.356 port: 7001 #11 5.356 containerPort: 7001 #11 5.356 - name: native-trans #11 5.356 protocol: TCP #11 5.356 port: 9042 #11 5.356 containerPort: 9042 #11 5.356 - name: rpc #11 5.356 protocol: TCP #11 5.356 port: 9160 #11 5.356 containerPort: 9160 #11 5.356 selector: #11 5.356 app: aaf-cass #11 5.356 release: release-name #11 5.356 clusterIP: None #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-cm/templates/service.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-cm #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-cm #11 5.356 chart: aaf-cm-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 ports: #11 5.356 - port: 8150 #11 5.356 nodePort: 31114 #11 5.356 name: aaf-cm #11 5.356 selector: #11 5.356 app: aaf-cm #11 5.356 release: release-name #11 5.356 type: "NodePort" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-fs/templates/service.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-fs #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-fs #11 5.356 chart: aaf-fs-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 ports: #11 5.356 - port: 8096 #11 5.356 nodePort: 31115 #11 5.356 name: aaf-hello #11 5.356 selector: #11 5.356 app: aaf-fs #11 5.356 release: release-name #11 5.356 type: "NodePort" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-gui/templates/service.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-gui #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-gui #11 5.356 chart: aaf-gui-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 ports: #11 5.356 - port: 8200 #11 5.356 nodePort: 31113 #11 5.356 name: aaf-gui #11 5.356 selector: #11 5.356 app: aaf-gui #11 5.356 release: release-name #11 5.356 type: "NodePort" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-hello/templates/service.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-hello #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-hello #11 5.356 chart: aaf-hello-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 ports: #11 5.356 - port: 8130 #11 5.356 nodePort: 31119 #11 5.356 name: aaf-hello #11 5.356 selector: #11 5.356 app: aaf-hello #11 5.356 release: release-name #11 5.356 type: "NodePort" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-locate/templates/service.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-locate #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-locate #11 5.356 chart: aaf-locate-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 ports: #11 5.356 - port: 8095 #11 5.356 nodePort: 31111 #11 5.356 name: aaf-locate #11 5.356 selector: #11 5.356 app: aaf-locate #11 5.356 release: release-name #11 5.356 type: "NodePort" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-oauth/templates/service.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-oauth #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-oauth #11 5.356 chart: aaf-oauth-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 ports: #11 5.356 - port: 8140 #11 5.356 nodePort: 31112 #11 5.356 name: aaf-oauth #11 5.356 selector: #11 5.356 app: aaf-oauth #11 5.356 release: release-name #11 5.356 type: "NodePort" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-service/templates/service.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-service #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-service #11 5.356 chart: aaf-service-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 ports: #11 5.356 - port: 8100 #11 5.356 nodePort: 31110 #11 5.356 name: aaf-service #11 5.356 selector: #11 5.356 app: aaf-service #11 5.356 release: release-name #11 5.356 type: "NodePort" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-vault/templates/service.yaml #11 5.356 # Copyright 2018 Intel Corporation, Inc #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-sms-db #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: release-name-aaf-sms-vault #11 5.356 chart: aaf-sms-vault-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 type: ClusterIP #11 5.356 ports: #11 5.356 - name: aaf-sms-db #11 5.356 port: 8200 #11 5.356 targetPort: 8200 #11 5.356 protocol: TCP #11 5.356 selector: #11 5.356 app: aaf-sms-vault #11 5.356 release: release-name #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/templates/service.yaml #11 5.356 # Copyright 2018 Intel Corporation, Inc #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: v1 #11 5.356 kind: Service #11 5.356 metadata: #11 5.356 name: aaf-sms #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: release-name-aaf-sms #11 5.356 chart: aaf-sms-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 type: ClusterIP #11 5.356 ports: #11 5.356 - name: #11 5.356 port: 10443 #11 5.356 targetPort: 10443 #11 5.356 protocol: TCP #11 5.356 selector: #11 5.356 app: aaf-sms #11 5.356 release: release-name #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-cass/templates/deployment.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 name: release-name-aaf-cass #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-cass #11 5.356 chart: aaf-cass-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-cass #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-cass #11 5.356 release: release-name #11 5.356 spec: #11 5.356 containers: #11 5.356 - name: aaf-cass #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_cass:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 # installing with cmd "onap" will not only initialize the DB, but add ONAP bootstrap data as well #11 5.356 command: ["/bin/bash","/opt/app/aaf/cass_init/cmd.sh","onap"] #11 5.356 lifecycle: #11 5.356 preStop: #11 5.356 exec: #11 5.356 command: ["/bin/sh","-c","rm /opt/app/aaf/status/aaf-cass"] #11 5.356 ports: #11 5.356 - name: storage #11 5.356 containerPort: 7000 #11 5.356 - name: ssl-storage #11 5.356 containerPort: 7001 #11 5.356 - name: native-trans #11 5.356 containerPort: 9042 #11 5.356 - name: rpc #11 5.356 containerPort: 9160 #11 5.356 env: #11 5.356 - name: CASSANDRA_CLUSTER_NAME #11 5.356 value: osaaf #11 5.356 - name: CASSANDRA_DC #11 5.356 value: dc1 #11 5.356 - name: HEAP_NEWSIZE #11 5.356 value: 512M #11 5.356 - name: MAX_HEAP_SIZE #11 5.356 value: 1024M #11 5.356 - name: MY_POD_NAME #11 5.356 valueFrom: #11 5.356 fieldRef: #11 5.356 fieldPath: metadata.name #11 5.356 - name: MY_POD_NAMESPACE #11 5.356 valueFrom: #11 5.356 fieldRef: #11 5.356 fieldPath: metadata.namespace #11 5.356 - name: MY_POD_IP #11 5.356 valueFrom: #11 5.356 fieldRef: #11 5.356 fieldPath: status.podIP #11 5.356 volumeMounts: #11 5.356 - mountPath: /var/lib/cassandra #11 5.356 name: aaf-cass-vol #11 5.356 - mountPath: /opt/app/aaf/status #11 5.356 name: aaf-status-vol #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 livenessProbe: #11 5.356 tcpSocket: #11 5.356 port: 9042 #11 5.356 initialDelaySeconds: 120 #11 5.356 periodSeconds: 10 #11 5.356 readinessProbe: #11 5.356 tcpSocket: #11 5.356 port: 9042 #11 5.356 initialDelaySeconds: 5 #11 5.356 periodSeconds: 10 #11 5.356 resources: #11 5.356 null #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: aaf-status-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-status-pvc #11 5.356 - name: aaf-cass-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-cass-pvc #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-cm/templates/deployment.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-cm #11 5.356 chart: aaf-cm-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 name: release-name-aaf-cm #11 5.356 namespace: default #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-cm #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-cm #11 5.356 release: release-name #11 5.356 spec: #11 5.356 initContainers: #11 5.356 - name: aaf-cm-config-container #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_config:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 command: ["bash","-c","cd /opt/app/aaf_config && bin/pod_wait.sh config aaf-service remove && bin/agent.sh"] #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 env: #11 5.356 - name: aaf_env #11 5.356 value: "DEV" #11 5.356 - name: cadi_latitude #11 5.356 value: "38.0" #11 5.356 - name: cadi_longitude #11 5.356 value: "-72.0" #11 5.356 - name: cadi_x509_issuers #11 5.356 value: "CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US:CN=intermediateCA_7, OU=OSAAF, O=ONAP, C=US" #11 5.356 - name: aaf_locate_url #11 5.356 value: "https://aaf-locate.default:8095" #11 5.356 - name: aaf_locator_container #11 5.356 value: "oom" #11 5.356 - name: aaf_release #11 5.356 value: "El Alto" #11 5.356 - name: aaf_locator_container_ns #11 5.356 value: "default" #11 5.356 - name: aaf_locator_public_fqdn #11 5.356 value: "aaf.osaaf.org" #11 5.356 - name: aaf_locator_name #11 5.356 value: "%NS.%N" #11 5.356 - name: aaf_locator_name_oom #11 5.356 value: "%CNS.%NS.%N" #11 5.356 - name: cm_always_ignore_ips #11 5.356 value: "true" #11 5.356 - name: CASSANDRA_CLUSTER #11 5.356 value: "aaf-cass.default" #11 5.356 # - name: CASSANDRA_USER #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PASSWORD #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PORT #11 5.356 # value: "" #11 5.356 containers: #11 5.356 - name: aaf-cm #11 5.356 command: ["/bin/bash","-c","cd /opt/app/aaf && /bin/bash bin/pod_wait.sh aaf-cm aaf-locate && exec bin/cm"] #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_core:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 livenessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8150 #11 5.356 initialDelaySeconds: 120 #11 5.356 periodSeconds: 10 #11 5.356 readinessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8150 #11 5.356 initialDelaySeconds: 5 #11 5.356 periodSeconds: 10 #11 5.356 resources: #11 5.356 null #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: aaf-status-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-status-pvc #11 5.356 - name: aaf-config-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-config-pvc #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-fs/templates/deployment.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-fs #11 5.356 chart: aaf-fs-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 name: release-name-aaf-fs #11 5.356 namespace: default #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-fs #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-fs #11 5.356 release: release-name #11 5.356 spec: #11 5.356 initContainers: #11 5.356 - name: aaf-fs-config-container #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_config:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 command: ["bash","-c","cd /opt/app/aaf_config && bin/pod_wait.sh config aaf-service remove && bin/agent.sh"] #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 env: #11 5.356 - name: aaf_env #11 5.356 value: "DEV" #11 5.356 - name: cadi_latitude #11 5.356 value: "38.0" #11 5.356 - name: cadi_longitude #11 5.356 value: "-72.0" #11 5.356 - name: cadi_x509_issuers #11 5.356 value: "CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US:CN=intermediateCA_7, OU=OSAAF, O=ONAP, C=US" #11 5.356 - name: aaf_locate_url #11 5.356 value: "https://aaf-locate.default:8095" #11 5.356 - name: aaf_locator_container #11 5.356 value: "oom" #11 5.356 - name: aaf_release #11 5.356 value: "El Alto" #11 5.356 - name: aaf_locator_container_ns #11 5.356 value: "default" #11 5.356 - name: aaf_locator_public_fqdn #11 5.356 value: "aaf.osaaf.org" #11 5.356 - name: aaf_locator_name #11 5.356 value: "%NS.%N" #11 5.356 - name: aaf_locator_name_oom #11 5.356 value: "%CNS.%NS.%N" #11 5.356 - name: cm_always_ignore_ips #11 5.356 value: "true" #11 5.356 - name: CASSANDRA_CLUSTER #11 5.356 value: "aaf-cass.default" #11 5.356 # - name: CASSANDRA_USER #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PASSWORD #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PORT #11 5.356 # value: "" #11 5.356 containers: #11 5.356 - name: aaf-fs #11 5.356 command: ["/bin/bash","-c","cd /opt/app/aaf && /bin/bash bin/pod_wait.sh aaf-fs aaf-locate && exec bin/fs"] #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_core:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 livenessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8096 #11 5.356 initialDelaySeconds: 120 #11 5.356 periodSeconds: 10 #11 5.356 readinessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8096 #11 5.356 initialDelaySeconds: 5 #11 5.356 periodSeconds: 10 #11 5.356 resources: #11 5.356 null #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: aaf-status-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-status-pvc #11 5.356 - name: aaf-config-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-config-pvc #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-gui/templates/deployment.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-gui #11 5.356 chart: aaf-gui-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 name: release-name-aaf-gui #11 5.356 namespace: default #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-gui #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-gui #11 5.356 release: release-name #11 5.356 spec: #11 5.356 initContainers: #11 5.356 - name: aaf-gui-config-container #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_config:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 command: ["bash","-c","cd /opt/app/aaf_config && bin/pod_wait.sh config aaf-service remove && bin/agent.sh"] #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 env: #11 5.356 - name: aaf_env #11 5.356 value: "DEV" #11 5.356 - name: cadi_latitude #11 5.356 value: "38.0" #11 5.356 - name: cadi_longitude #11 5.356 value: "-72.0" #11 5.356 - name: cadi_x509_issuers #11 5.356 value: "CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US:CN=intermediateCA_7, OU=OSAAF, O=ONAP, C=US" #11 5.356 - name: aaf_locate_url #11 5.356 value: "https://aaf-locate.default:8095" #11 5.356 - name: aaf_locator_container #11 5.356 value: "oom" #11 5.356 - name: aaf_release #11 5.356 value: "El Alto" #11 5.356 - name: aaf_locator_container_ns #11 5.356 value: "default" #11 5.356 - name: aaf_locator_public_fqdn #11 5.356 value: "aaf.osaaf.org" #11 5.356 - name: aaf_locator_name #11 5.356 value: "%NS.%N" #11 5.356 - name: aaf_locator_name_oom #11 5.356 value: "%CNS.%NS.%N" #11 5.356 - name: cm_always_ignore_ips #11 5.356 value: "true" #11 5.356 - name: CASSANDRA_CLUSTER #11 5.356 value: "aaf-cass.default" #11 5.356 # - name: CASSANDRA_USER #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PASSWORD #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PORT #11 5.356 # value: "" #11 5.356 containers: #11 5.356 - name: aaf-gui #11 5.356 command: ["/bin/bash","-c","cd /opt/app/aaf && /bin/bash bin/pod_wait.sh aaf-gui aaf-locate && exec bin/gui"] #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_core:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 livenessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8200 #11 5.356 initialDelaySeconds: 120 #11 5.356 periodSeconds: 10 #11 5.356 readinessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8200 #11 5.356 initialDelaySeconds: 5 #11 5.356 periodSeconds: 10 #11 5.356 resources: #11 5.356 null #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: aaf-status-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-status-pvc #11 5.356 - name: aaf-config-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-config-pvc #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-hello/templates/deployment.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-hello #11 5.356 chart: aaf-hello-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 name: release-name-aaf-hello #11 5.356 namespace: default #11 5.356 spec: #11 5.356 replicas: 0 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-hello #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-hello #11 5.356 release: release-name #11 5.356 spec: #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: aaf-hello-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-hello-pvc #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 initContainers: #11 5.356 - name: aaf-hello-config #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_agent:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-hello-vol #11 5.356 # NOTE: Before this, need Liveness Attached to aaf-certman #11 5.356 command: ["bash","-c","exec /opt/app/aaf_config/bin/agent.sh"] #11 5.356 env: #11 5.356 - name: APP_FQI #11 5.356 value: "aaf@aaf.osaaf.org" #11 5.356 - name: aaf_locate_url #11 5.356 value: "https://aaf-locate.default:8095" #11 5.356 - name: aaf_locator_container #11 5.356 value: "oom" #11 5.356 - name: aaf_locator_container_ns #11 5.356 value: "default" #11 5.356 - name: aaf_locator_fqdn #11 5.356 value: "aaf-hello" #11 5.356 - name: aaf_locator_app_ns #11 5.356 value: "org.osaaf.aaf" #11 5.356 - name: DEPLOY_FQI #11 5.356 value: "deployer@people.osaaf.org" #11 5.356 # Note: We want to put this in Secrets or at LEAST ConfigMaps #11 5.356 - name: DEPLOY_PASSWORD #11 5.356 value: "demo123456!" #11 5.356 # Note: want to put this on Nodes, evenutally #11 5.356 - name: cadi_longitude #11 5.356 value: "-72.0" #11 5.356 - name: cadi_latitude #11 5.356 value: "38.0" #11 5.356 # Hello specific. Clients don't don't need this, unless Registering with AAF Locator #11 5.356 - name: aaf_locator_public_fqdn #11 5.356 value: "aaf.osaaf.org" #11 5.356 containers: #11 5.356 - name: aaf-hello #11 5.356 command: ["bash","-c","cd /opt/app/aaf && if [ ! -d /opt/app/osaaf/etc ]; then cp -Rf etc logs /opt/app/osaaf; fi && exec bin/hello"] #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_hello:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-hello-vol #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 livenessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8130 #11 5.356 initialDelaySeconds: 120 #11 5.356 periodSeconds: 10 #11 5.356 readinessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8130 #11 5.356 initialDelaySeconds: 5 #11 5.356 periodSeconds: 10 #11 5.356 resources: #11 5.356 null #11 5.356 #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-locate/templates/deployment.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-locate #11 5.356 chart: aaf-locate-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 name: release-name-aaf-locate #11 5.356 namespace: default #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-locate #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-locate #11 5.356 release: release-name #11 5.356 spec: #11 5.356 initContainers: #11 5.356 - name: aaf-locate-config-container #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_config:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 command: ["bash","-c","cd /opt/app/aaf_config && bin/pod_wait.sh config aaf-service remove && bin/agent.sh"] #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 env: #11 5.356 - name: aaf_env #11 5.356 value: "DEV" #11 5.356 - name: cadi_latitude #11 5.356 value: "38.0" #11 5.356 - name: cadi_longitude #11 5.356 value: "-72.0" #11 5.356 - name: cadi_x509_issuers #11 5.356 value: "CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US:CN=intermediateCA_7, OU=OSAAF, O=ONAP, C=US" #11 5.356 - name: aaf_locate_url #11 5.356 value: "https://aaf-locate.default:8095" #11 5.356 - name: aaf_locator_container #11 5.356 value: "oom" #11 5.356 - name: aaf_release #11 5.356 value: "El Alto" #11 5.356 - name: aaf_locator_container_ns #11 5.356 value: "default" #11 5.356 - name: aaf_locator_public_fqdn #11 5.356 value: "aaf.osaaf.org" #11 5.356 - name: aaf_locator_name #11 5.356 value: "%NS.%N" #11 5.356 - name: aaf_locator_name_oom #11 5.356 value: "%CNS.%NS.%N" #11 5.356 - name: cm_always_ignore_ips #11 5.356 value: "true" #11 5.356 - name: CASSANDRA_CLUSTER #11 5.356 value: "aaf-cass.default" #11 5.356 # - name: CASSANDRA_USER #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PASSWORD #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PORT #11 5.356 # value: "" #11 5.356 containers: #11 5.356 - name: aaf-locate #11 5.356 command: ["/bin/bash","-c","cd /opt/app/aaf && /bin/bash bin/pod_wait.sh aaf-locate aaf-service && exec bin/locate"] #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_core:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 livenessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8095 #11 5.356 initialDelaySeconds: 120 #11 5.356 periodSeconds: 10 #11 5.356 readinessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8095 #11 5.356 initialDelaySeconds: 5 #11 5.356 periodSeconds: 10 #11 5.356 resources: #11 5.356 null #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: aaf-status-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-status-pvc #11 5.356 - name: aaf-config-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-config-pvc #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-oauth/templates/deployment.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-oauth #11 5.356 chart: aaf-oauth-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 name: release-name-aaf-oauth #11 5.356 namespace: default #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-oauth #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-oauth #11 5.356 release: release-name #11 5.356 spec: #11 5.356 initContainers: #11 5.356 - name: aaf-oauth-config-container #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_config:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 command: ["bash","-c","cd /opt/app/aaf_config && bin/pod_wait.sh config aaf-service remove && bin/agent.sh"] #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 env: #11 5.356 - name: aaf_env #11 5.356 value: "DEV" #11 5.356 - name: cadi_latitude #11 5.356 value: "38.0" #11 5.356 - name: cadi_longitude #11 5.356 value: "-72.0" #11 5.356 - name: cadi_x509_issuers #11 5.356 value: "CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US:CN=intermediateCA_7, OU=OSAAF, O=ONAP, C=US" #11 5.356 - name: aaf_locate_url #11 5.356 value: "https://aaf-locate.default:8095" #11 5.356 - name: aaf_locator_container #11 5.356 value: "oom" #11 5.356 - name: aaf_release #11 5.356 value: "El Alto" #11 5.356 - name: aaf_locator_container_ns #11 5.356 value: "default" #11 5.356 - name: aaf_locator_public_fqdn #11 5.356 value: "aaf.osaaf.org" #11 5.356 - name: aaf_locator_name #11 5.356 value: "%NS.%N" #11 5.356 - name: aaf_locator_name_oom #11 5.356 value: "%CNS.%NS.%N" #11 5.356 - name: cm_always_ignore_ips #11 5.356 value: "true" #11 5.356 - name: CASSANDRA_CLUSTER #11 5.356 value: "aaf-cass.default" #11 5.356 # - name: CASSANDRA_USER #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PASSWORD #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PORT #11 5.356 # value: "" #11 5.356 containers: #11 5.356 - name: aaf-oauth #11 5.356 command: ["/bin/bash","-c","cd /opt/app/aaf && /bin/bash bin/pod_wait.sh aaf-oauth aaf-service && exec bin/oauth"] #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_core:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 livenessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8140 #11 5.356 initialDelaySeconds: 120 #11 5.356 periodSeconds: 10 #11 5.356 readinessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8140 #11 5.356 initialDelaySeconds: 5 #11 5.356 periodSeconds: 10 #11 5.356 resources: #11 5.356 null #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: aaf-status-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-status-pvc #11 5.356 - name: aaf-config-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-config-pvc #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-service/templates/deployment.yaml #11 5.356 # Copyright © 2017 Amdocs, Bell Canada #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-service #11 5.356 chart: aaf-service-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 name: release-name-aaf-service #11 5.356 namespace: default #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-service #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-service #11 5.356 release: release-name #11 5.356 spec: #11 5.356 initContainers: #11 5.356 - name: aaf-service-config-container #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_config:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 command: ["bash","-c","cd /opt/app/aaf_config && bin/pod_wait.sh config nc aaf-cass.default 9042 sleep 15 remove && bin/agent.sh"] #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 env: #11 5.356 - name: aaf_env #11 5.356 value: "DEV" #11 5.356 - name: cadi_latitude #11 5.356 value: "38.0" #11 5.356 - name: cadi_longitude #11 5.356 value: "-72.0" #11 5.356 - name: cadi_x509_issuers #11 5.356 value: "CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US:CN=intermediateCA_7, OU=OSAAF, O=ONAP, C=US" #11 5.356 - name: aaf_locate_url #11 5.356 value: "https://aaf-locate.default:8095" #11 5.356 - name: aaf_locator_container #11 5.356 value: "oom" #11 5.356 - name: aaf_release #11 5.356 value: "El Alto" #11 5.356 - name: aaf_locator_container_ns #11 5.356 value: "default" #11 5.356 - name: aaf_locator_public_fqdn #11 5.356 value: "aaf.osaaf.org" #11 5.356 - name: aaf_locator_name #11 5.356 value: "%NS.%N" #11 5.356 - name: aaf_locator_name_oom #11 5.356 value: "%CNS.%NS.%N" #11 5.356 - name: cm_always_ignore_ips #11 5.356 value: "true" #11 5.356 - name: CASSANDRA_CLUSTER #11 5.356 value: "aaf-cass.default" #11 5.356 # - name: CASSANDRA_USER #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PASSWORD #11 5.356 # value: "" #11 5.356 # - name: CASSANDRA_PORT #11 5.356 # value: "" #11 5.356 containers: #11 5.356 - name: aaf-service #11 5.356 command: ["/bin/bash","-c","cd /opt/app/aaf && bin/pod_wait.sh aaf-service aaf-cass && exec bin/service"] #11 5.356 image: nexus3.onap.org:10001/onap/aaf/aaf_core:2.1.15 #11 5.356 imagePullPolicy: Always #11 5.356 env: #11 5.356 - name: cm_always_ignore_ips #11 5.356 value: "true" #11 5.356 lifecycle: #11 5.356 preStop: #11 5.356 exec: #11 5.356 command: ["/bin/sh","-c","rm /opt/app/aaf/status/aaf-service* && echo $HOSTNAME >> aaf-service.hosts"] #11 5.356 volumeMounts: #11 5.356 - mountPath: "/opt/app/osaaf" #11 5.356 name: aaf-config-vol #11 5.356 - mountPath: "/opt/app/aaf/status" #11 5.356 name: aaf-status-vol #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 livenessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8100 #11 5.356 initialDelaySeconds: 120 #11 5.356 periodSeconds: 10 #11 5.356 readinessProbe: #11 5.356 tcpSocket: #11 5.356 port: 8100 #11 5.356 initialDelaySeconds: 5 #11 5.356 periodSeconds: 10 #11 5.356 resources: #11 5.356 null #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: aaf-status-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-status-pvc #11 5.356 - name: aaf-config-vol #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-config-pvc #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/templates/deployment.yaml #11 5.356 # Copyright 2018 Intel Corporation, Inc #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: Deployment #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms #11 5.356 chart: aaf-sms-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-sms #11 5.356 release: release-name #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-sms #11 5.356 release: release-name #11 5.356 spec: #11 5.356 initContainers: #11 5.356 - image: "oomk8s/readiness-check:2.0.2" #11 5.356 imagePullPolicy: Always #11 5.356 name: aaf-sms-readiness #11 5.356 command: ["/bin/sh", "-c"] #11 5.356 args: ["sed -i s/client.AppsV1beta1Api/client.AppsV1Api/g /root/ready.py && /root/ready.py --container-name aaf-sms-vault --container-name aaf-sms-vault-backend"] #11 5.356 env: #11 5.356 - name: NAMESPACE #11 5.356 valueFrom: #11 5.356 fieldRef: #11 5.356 apiVersion: v1 #11 5.356 fieldPath: metadata.namespace #11 5.356 containers: #11 5.356 - image: "nexus3.onap.org:10001/onap/aaf/sms:4.0.1" #11 5.356 imagePullPolicy: Always #11 5.356 name: aaf-sms #11 5.356 command: ["/sms/bin/sms"] #11 5.356 workingDir: /sms/ #11 5.356 ports: #11 5.356 - containerPort: 10443 #11 5.356 livenessProbe: #11 5.356 httpGet: #11 5.356 port: 10443 #11 5.356 scheme: HTTPS #11 5.356 path: /v1/sms/quorum/status #11 5.356 initialDelaySeconds: 10 #11 5.356 periodSeconds: 30 #11 5.356 readinessProbe: #11 5.356 httpGet: #11 5.356 port: 10443 #11 5.356 scheme: HTTPS #11 5.356 path: /v1/sms/quorum/status #11 5.356 initialDelaySeconds: 10 #11 5.356 periodSeconds: 30 #11 5.356 volumeMounts: #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 - mountPath: /sms/smsconfig.json #11 5.356 name: aaf-sms #11 5.356 subPath: smsconfig.json #11 5.356 - mountPath: /sms/auth #11 5.356 name: release-name-aaf-sms-auth #11 5.356 resources: #11 5.356 limits: #11 5.356 cpu: 200m #11 5.356 memory: 500Mi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 10Mi #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name : aaf-sms #11 5.356 configMap: #11 5.356 name: release-name-aaf-sms #11 5.356 - name: release-name-aaf-sms-auth #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-sms #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-quorumclient/templates/statefulset.yaml #11 5.356 # Copyright 2018 Intel Corporation, Inc #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: StatefulSet #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-quorumclient #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-quorumclient #11 5.356 chart: aaf-sms-quorumclient-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 replicas: 3 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-sms-quorumclient #11 5.356 release: release-name #11 5.356 serviceName: #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-sms-quorumclient #11 5.356 release: release-name #11 5.356 spec: #11 5.356 containers: #11 5.356 - image: "nexus3.onap.org:10001/onap/aaf/smsquorumclient:4.0.0" #11 5.356 name: aaf-sms-quorumclient #11 5.356 imagePullPolicy: Always #11 5.356 command: ["/quorumclient/bin/quorumclient"] #11 5.356 workingDir: /quorumclient/ #11 5.356 volumeMounts: #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 - mountPath: /quorumclient/config.json #11 5.356 name: aaf-sms-quorumclient #11 5.356 subPath: config.json #11 5.356 - mountPath: /quorumclient/auth #11 5.356 name: release-name-aaf-sms-quorumclient-auth #11 5.356 resources: #11 5.356 limits: #11 5.356 cpu: 200m #11 5.356 memory: 500Mi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 10Mi #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name : aaf-sms-quorumclient #11 5.356 configMap: #11 5.356 name: release-name-aaf-sms-quorumclient #11 5.356 items: #11 5.356 - key: config.json #11 5.356 path: config.json #11 5.356 mode: 0755 #11 5.356 - name: release-name-aaf-sms-quorumclient-auth #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-sms-quorumclient #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/charts/aaf-sms-vault/templates/statefulset.yaml #11 5.356 # Copyright 2018 Intel Corporation, Inc #11 5.356 # #11 5.356 # Licensed under the Apache License, Version 2.0 (the "License"); #11 5.356 # you may not use this file except in compliance with the License. #11 5.356 # You may obtain a copy of the License at #11 5.356 # #11 5.356 # http://www.apache.org/licenses/LICENSE-2.0 #11 5.356 # #11 5.356 # Unless required by applicable law or agreed to in writing, software #11 5.356 # distributed under the License is distributed on an "AS IS" BASIS, #11 5.356 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 5.356 # See the License for the specific language governing permissions and #11 5.356 # limitations under the License. #11 5.356 #11 5.356 apiVersion: apps/v1 #11 5.356 kind: StatefulSet #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-vault #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms-vault #11 5.356 chart: aaf-sms-vault-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 selector: #11 5.356 matchLabels: #11 5.356 app: aaf-sms-vault #11 5.356 release: release-name #11 5.356 serviceName: #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-sms-vault #11 5.356 release: release-name #11 5.356 spec: #11 5.356 containers: #11 5.356 - image: "nexus3.onap.org:10001/library/vault:0.10.0" #11 5.356 name: aaf-sms-vault #11 5.356 imagePullPolicy: Always #11 5.356 command: ["vault","server","-config","/vault/config/config.json"] #11 5.356 ports: #11 5.356 - containerPort: 8200 #11 5.356 volumeMounts: #11 5.356 - mountPath: /vault/config/config.json #11 5.356 name: release-name-aaf-sms-vault-vault #11 5.356 subPath: config.json #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 resources: #11 5.356 limits: #11 5.356 cpu: 200m #11 5.356 memory: 500Mi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 10Mi #11 5.356 #11 5.356 - image: "nexus3.onap.org:10001/library/consul:1.0.6" #11 5.356 name: aaf-sms-vault-backend #11 5.356 imagePullPolicy: Always #11 5.356 command: ["consul","agent","-server","-client","0.0.0.0","-bootstrap-expect=1","-config-file","/consul/config/config.json"] #11 5.356 ports: #11 5.356 - name: http #11 5.356 containerPort: 8500 #11 5.356 volumeMounts: #11 5.356 - mountPath: /consul/data #11 5.356 name: release-name-aaf-sms-vault-consuldata #11 5.356 - mountPath: /consul/config/config.json #11 5.356 name: release-name-aaf-sms-vault-consulconfiguration #11 5.356 subPath: config.json #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 resources: #11 5.356 limits: #11 5.356 cpu: 200m #11 5.356 memory: 500Mi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 10Mi #11 5.356 #11 5.356 volumes: #11 5.356 - name: release-name-aaf-sms-vault-consuldata #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-sms-vault #11 5.356 - name: release-name-aaf-sms-vault-consulconfiguration #11 5.356 configMap: #11 5.356 name: release-name-aaf-sms-vault-consul #11 5.356 - name: release-name-aaf-sms-vault-vault #11 5.356 configMap: #11 5.356 name: release-name-aaf-sms-vault-vault #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sms/templates/job.yaml #11 5.356 #11 5.356 #11 5.356 apiVersion: batch/v1 #11 5.356 kind: Job #11 5.356 metadata: #11 5.356 name: release-name-aaf-sms-preload #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sms #11 5.356 chart: aaf-sms-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-sms #11 5.356 release: release-name #11 5.356 spec: #11 5.356 initContainers: #11 5.356 - image: "oomk8s/readiness-check:2.0.2" #11 5.356 imagePullPolicy: Always #11 5.356 name: aaf-sms-readiness #11 5.356 command: ["/bin/sh", "-c"] #11 5.356 args: ["sed -i s/client.AppsV1beta1Api/client.AppsV1Api/g /root/ready.py && sed -i s/client.ExtensionsV1beta1Api/client.AppsV1Api/g /root/ready.py && /root/ready.py --container-name aaf-sms --container-name aaf-sms-quorumclient"] #11 5.356 env: #11 5.356 - name: NAMESPACE #11 5.356 valueFrom: #11 5.356 fieldRef: #11 5.356 apiVersion: v1 #11 5.356 fieldPath: metadata.namespace #11 5.356 containers: #11 5.356 - image: "nexus3.onap.org:10001/onap/aaf/sms:4.0.1" #11 5.356 imagePullPolicy: Always #11 5.356 name: aaf-sms-preload #11 5.356 command: #11 5.356 - "/sms/bin/preload" #11 5.356 - "-cacert" #11 5.356 - "/sms/certs/aaf_root_ca.cer" #11 5.356 - "-jsondir" #11 5.356 - "/preload/config" #11 5.356 - "-serviceport" #11 5.356 - "10443" #11 5.356 - "-serviceurl" #11 5.356 - "https://aaf-sms.default" #11 5.356 workingDir: /sms #11 5.356 volumeMounts: #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 - mountPath: /preload/config #11 5.356 name: aaf-sms-preload #11 5.356 resources: #11 5.356 limits: #11 5.356 cpu: 200m #11 5.356 memory: 500Mi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 10Mi #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name : aaf-sms-preload #11 5.356 configMap: #11 5.356 name: release-name-aaf-sms-preload #11 5.356 restartPolicy: OnFailure #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/charts/aaf-sshsm-distcenter/templates/job.yaml #11 5.356 apiVersion: batch/v1 #11 5.356 kind: Job #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-distcenter #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm-distcenter #11 5.356 chart: aaf-sshsm-distcenter-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 serviceName: #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-sshsm-distcenter #11 5.356 release: release-name #11 5.356 spec: #11 5.356 restartPolicy: Never #11 5.356 initContainers: #11 5.356 - image: "nexus3.onap.org:10001/onap/aaf/distcenter:4.0.0" #11 5.356 imagePullPolicy: Always #11 5.356 name: aaf-sshsm-distcenter-gen-passphrase #11 5.356 command: ["sh", "-c", "/usr/bin/openssl rand -base64 12 >/distcenter/data/passphrase"] #11 5.356 env: #11 5.356 - name: NAMESPACE #11 5.356 valueFrom: #11 5.356 fieldRef: #11 5.356 apiVersion: v1 #11 5.356 fieldPath: metadata.namespace #11 5.356 volumeMounts: #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 - name: release-name-aaf-sshsm-distcenter-data #11 5.356 mountPath: /distcenter/data #11 5.356 containers: #11 5.356 - image: "nexus3.onap.org:10001/onap/aaf/distcenter:4.0.0" #11 5.356 name: aaf-sshsm-distcenter #11 5.356 imagePullPolicy: Always #11 5.356 command: ["/entrypoint.sh"] #11 5.356 workingDir: /distcenter #11 5.356 volumeMounts: #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 - name: release-name-aaf-sshsm-distcenter-data #11 5.356 mountPath: /distcenter/data #11 5.356 resources: #11 5.356 large: #11 5.356 limits: #11 5.356 cpu: 400m #11 5.356 memory: 1Gi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 100Mi #11 5.356 small: #11 5.356 limits: #11 5.356 cpu: 200m #11 5.356 memory: 500Mi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 10Mi #11 5.356 unlimited: {} #11 5.356 #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: release-name-aaf-sshsm-distcenter-data #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-sshsm-data #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/charts/aaf-sshsm-testca/templates/job.yaml #11 5.356 apiVersion: batch/v1 #11 5.356 kind: Job #11 5.356 metadata: #11 5.356 name: release-name-aaf-sshsm-testca #11 5.356 namespace: default #11 5.356 labels: #11 5.356 app: aaf-sshsm-testca #11 5.356 chart: aaf-sshsm-testca-5.0.0 #11 5.356 release: release-name #11 5.356 heritage: Tiller #11 5.356 spec: #11 5.356 replicas: 1 #11 5.356 serviceName: #11 5.356 template: #11 5.356 metadata: #11 5.356 labels: #11 5.356 app: aaf-sshsm-testca #11 5.356 release: release-name #11 5.356 spec: #11 5.356 restartPolicy: Never #11 5.356 initContainers: #11 5.356 - image: "oomk8s/readiness-check:2.0.2" #11 5.356 imagePullPolicy: Always #11 5.356 name: aaf-sshsm-testca-distcenter-ready #11 5.356 command: #11 5.356 - /root/job_complete.py #11 5.356 args: #11 5.356 - -j #11 5.356 - "release-name-aaf-sshsm-distcenter" #11 5.356 env: #11 5.356 - name: NAMESPACE #11 5.356 valueFrom: #11 5.356 fieldRef: #11 5.356 apiVersion: v1 #11 5.356 fieldPath: metadata.namespace #11 5.356 containers: #11 5.356 - image: "nexus3.onap.org:10001/onap/aaf/testcaservice:4.0.0" #11 5.356 name: aaf-sshsm-testca #11 5.356 imagePullPolicy: Always #11 5.356 command: ["./import.sh"] #11 5.356 workingDir: /testca/bin #11 5.356 env: #11 5.356 - name: DATA_FOLDER #11 5.356 value: /testca/data #11 5.356 - name: SECRETS_FOLDER #11 5.356 value: /testca/secrets #11 5.356 volumeMounts: #11 5.356 - mountPath: /etc/localtime #11 5.356 name: localtime #11 5.356 readOnly: true #11 5.356 - name: release-name-aaf-sshsm-testca-data #11 5.356 mountPath: /testca/data #11 5.356 - name: release-name-aaf-sshsm-testca-dbus #11 5.356 mountPath: /var/run/dbus #11 5.356 - name: release-name-aaf-sshsm-testca-secrets #11 5.356 mountPath: /testca/secrets #11 5.356 readOnly: true #11 5.356 resources: #11 5.356 large: #11 5.356 limits: #11 5.356 cpu: 400m #11 5.356 memory: 1Gi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 100Mi #11 5.356 small: #11 5.356 limits: #11 5.356 cpu: 200m #11 5.356 memory: 500Mi #11 5.356 requests: #11 5.356 cpu: 10m #11 5.356 memory: 10Mi #11 5.356 unlimited: {} #11 5.356 #11 5.356 nodeSelector: #11 5.356 volumes: #11 5.356 - name: localtime #11 5.356 hostPath: #11 5.356 path: /etc/localtime #11 5.356 - name: release-name-aaf-sshsm-testca-data #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-sshsm-data #11 5.356 - name: release-name-aaf-sshsm-testca-dbus #11 5.356 persistentVolumeClaim: #11 5.356 claimName: release-name-aaf-sshsm-dbus #11 5.356 - name: release-name-aaf-sshsm-testca-secrets #11 5.356 secret: #11 5.356 secretName: release-name-aaf-sshsm #11 5.356 imagePullSecrets: #11 5.356 - name: "default-docker-registry-key" #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/charts/aaf-sshsm-abrmd/templates/configmap.yaml #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/charts/aaf-sshsm-abrmd/templates/job.yaml #11 5.356 #11 5.356 --- #11 5.356 # Source: aaf/charts/aaf-sshsm/charts/aaf-sshsm-abrmd/templates/statefulset.yaml #11 5.356 #11 6.361 *************************************************************************************************************** #11 6.361 Update chart dependency for directory /tmp/it-dep/bin/../ric-aux/helm/dashboard #11 6.423 Hang tight while we grab the latest from your chart repositories... #11 6.425 ...Successfully got an update from the "local" chart repository #11 6.425 Update Complete. #11 6.425 Saving 1 charts #11 6.425 Downloading ric-common from repo http://127.0.0.1:8879/charts #11 6.426 Deleting outdated charts #11 6.670 *************************************************************************************************************** #11 6.671 ==> Linting /tmp/it-dep/bin/../ric-aux/helm/dashboard #11 6.671 Lint OK #11 6.671 #11 6.671 1 chart(s) linted, no failures #11 6.672 *************************************************************************************************************** #11 7.189 *************************************************************************************************************** #11 7.191 --- #11 7.191 # Source: dashboard/templates/secret.yaml #11 7.191 ################################################################################ #11 7.191 # Copyright (c) 2019 AT&T Intellectual Property. # #11 7.191 # # #11 7.191 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 7.191 # you may not use this file except in compliance with the License. # #11 7.191 # You may obtain a copy of the License at # #11 7.191 # # #11 7.191 # http://www.apache.org/licenses/LICENSE-2.0 # #11 7.191 # # #11 7.191 # Unless required by applicable law or agreed to in writing, software # #11 7.191 # distributed under the License is distributed on an "AS IS" BASIS, # #11 7.191 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 7.191 # See the License for the specific language governing permissions and # #11 7.191 # limitations under the License. # #11 7.191 ################################################################################ #11 7.191 #11 7.191 apiVersion: v1 #11 7.191 kind: Secret #11 7.191 type: kubernetes.io/tls #11 7.191 metadata: #11 7.191 name: secret-dashboard #11 7.191 annotations: #11 7.191 "helm.sh/hook": "pre-install" #11 7.191 "helm.sh/hook-delete-policy": "before-hook-creation" #11 7.191 data: #11 7.191 tls.crt: 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 #11 7.191 tls.key: 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 #11 7.191 #11 7.191 #11 7.191 #11 7.191 --- #11 7.191 # Source: dashboard/templates/appconfig.yaml #11 7.191 ################################################################################ #11 7.191 # Copyright (c) 2019 AT&T Intellectual Property. # #11 7.191 # Copyright (c) 2019 Nokia. # #11 7.191 # # #11 7.191 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 7.191 # you may not use this file except in compliance with the License. # #11 7.191 # You may obtain a copy of the License at # #11 7.191 # # #11 7.191 # http://www.apache.org/licenses/LICENSE-2.0 # #11 7.191 # # #11 7.191 # Unless required by applicable law or agreed to in writing, software # #11 7.191 # distributed under the License is distributed on an "AS IS" BASIS, # #11 7.191 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 7.191 # See the License for the specific language governing permissions and # #11 7.191 # limitations under the License. # #11 7.191 ################################################################################ #11 7.191 #11 7.191 # Defines multiple config maps for mounting as files; e.g., application.properties #11 7.191 # The keys listed below MUST be configured in each deployment; #11 7.191 # this list does not include all keys recognized by the app. #11 7.191 # The template directives in the URL prefix definitions use common #11 7.191 # K8S ingress values, but use Dashboard values if present. #11 7.191 #11 7.191 apiVersion: v1 #11 7.191 kind: ConfigMap #11 7.191 metadata: #11 7.191 name: configmap-ricaux-dashboard-appconfig #11 7.191 data: #11 7.191 # one key per file #11 7.191 application.yaml: | #11 7.191 server: #11 7.191 port: 8080 #11 7.191 userfile: /dashboard-data/users.json #11 7.191 portalapi: #11 7.191 # constants for all deployments #11 7.191 decryptor: org.oransc.ric.portal.dashboard.portalapi.PortalSdkDecryptorAes #11 7.191 usercookie: UserId #11 7.191 # different in all deployments #11 7.191 security: false #11 7.191 appname: RIC-Dashboard #11 7.191 username: Default #11 7.191 password: password #11 7.191 a1med: #11 7.191 url: #11 7.191 suffix: /a1mediator #11 7.191 appmgr: #11 7.191 url: #11 7.191 suffix: /appmgr/ric/v1 #11 7.191 e2mgr: #11 7.191 url: #11 7.191 suffix: /e2mgr/v1 #11 7.191 caasingress: #11 7.191 insecure: true #11 7.191 plt: #11 7.191 url: #11 7.191 suffix: /api #11 7.191 ricinstances: #11 7.191 regions: #11 7.191 - #11 7.191 name: Region AAA #11 7.191 instances: #11 7.191 - #11 7.191 key: i1 #11 7.191 name: Primary RIC Instance #11 7.191 appUrlPrefix: App prefix 1 #11 7.191 caasUrlPrefix: Caas prefix 1 #11 7.191 pltUrlPrefix: Plt prefix 1 #11 7.191 - #11 7.191 key: i2 #11 7.191 name: RIC Instance Nr Two #11 7.191 appUrlPrefix: App prefix 2 #11 7.191 caasUrlPrefix: Caas prefix 2 #11 7.191 pltUrlPrefix: Plt prefix 2 #11 7.191 - #11 7.191 name: Region DDD #11 7.191 instances: #11 7.191 - #11 7.191 key: i3 #11 7.191 name: RIC Instance in region D #11 7.191 appUrlPrefix: App prefix 3 #11 7.191 caasUrlPrefix: Caas prefix 3 #11 7.191 pltUrlPrefix: Plt prefix 3 #11 7.191 #11 7.191 #11 7.191 key.properties: | #11 7.191 cipher.enc.key = #11 7.191 #11 7.191 portal.properties: | #11 7.191 # fixed values #11 7.191 portal.api.impl.class = org.oransc.ric.portal.dashboard.portalapi.PortalRestCentralServiceImpl #11 7.191 role_access_centralized = remote #11 7.191 # variable values #11 7.191 ecomp_redirect_url = https://portal.api.simpledemo.onap.org:30225/ONAPPORTAL/login.htm #11 7.191 ecomp_rest_url = http://portal-app:8989/ONAPPORTAL/auxapi #11 7.191 ueb_app_key = uebkey #11 7.191 #11 7.191 # Temp solution before Portal 2.6 #11 7.191 users.json: | #11 7.191 [{"orgId":null,"managerId":null,"firstName":"First","middleInitial":null,"lastName":"Last","phone":null,"email":null,"hrid":null,"orgUserId":null,"orgCode":null,"orgManagerUserId":null,"jobTitle":null,"loginId":"demo","active":true,"roles":[{"id":1,"name":"System_Administrator","roleFunctions":null}]}] #11 7.191 #11 7.191 --- #11 7.191 # Source: dashboard/templates/persistentVolume.yaml #11 7.191 ################################################################################ #11 7.191 # Copyright (c) 2019 AT&T Intellectual Property. # #11 7.191 # Copyright (c) 2019 Nokia. # #11 7.191 # # #11 7.191 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 7.191 # you may not use this file except in compliance with the License. # #11 7.191 # You may obtain a copy of the License at # #11 7.191 # # #11 7.191 # http://www.apache.org/licenses/LICENSE-2.0 # #11 7.191 # # #11 7.191 # Unless required by applicable law or agreed to in writing, software # #11 7.191 # distributed under the License is distributed on an "AS IS" BASIS, # #11 7.191 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 7.191 # See the License for the specific language governing permissions and # #11 7.191 # limitations under the License. # #11 7.191 ################################################################################ #11 7.191 #11 7.191 kind: StorageClass #11 7.191 apiVersion: storage.k8s.io/v1 #11 7.191 metadata: #11 7.191 name: storageclass-dashboard #11 7.191 provisioner: kubernetes.io/no-provisioner #11 7.191 volumeBindingMode: WaitForFirstConsumer #11 7.191 #11 7.191 --- #11 7.191 #11 7.191 apiVersion: v1 #11 7.191 kind: PersistentVolume #11 7.191 metadata: #11 7.191 name: pv-dashboard #11 7.191 spec: #11 7.191 capacity: #11 7.191 storage: 1Mi #11 7.191 accessModes: #11 7.191 - ReadWriteOnce #11 7.191 persistentVolumeReclaimPolicy: Retain #11 7.191 storageClassName: storageclass-dashboard #11 7.191 local: #11 7.191 path: /opt/data/dashboard-data #11 7.191 nodeAffinity: #11 7.191 required: #11 7.191 nodeSelectorTerms: #11 7.191 - matchExpressions: #11 7.191 - key: local-storage #11 7.191 operator: In #11 7.191 values: #11 7.191 - enable #11 7.191 --- #11 7.191 # Source: dashboard/templates/persistentVolumeClaim.yaml #11 7.191 ################################################################################ #11 7.191 # Copyright (c) 2019 AT&T Intellectual Property. # #11 7.191 # Copyright (c) 2019 Nokia. # #11 7.191 # # #11 7.191 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 7.191 # you may not use this file except in compliance with the License. # #11 7.191 # You may obtain a copy of the License at # #11 7.191 # # #11 7.191 # http://www.apache.org/licenses/LICENSE-2.0 # #11 7.191 # # #11 7.191 # Unless required by applicable law or agreed to in writing, software # #11 7.191 # distributed under the License is distributed on an "AS IS" BASIS, # #11 7.191 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 7.191 # See the License for the specific language governing permissions and # #11 7.191 # limitations under the License. # #11 7.191 ################################################################################ #11 7.191 kind: PersistentVolumeClaim #11 7.191 apiVersion: v1 #11 7.191 metadata: #11 7.191 name: pvc-dashboard #11 7.191 spec: #11 7.191 accessModes: #11 7.191 - ReadWriteOnce #11 7.191 storageClassName: storageclass-dashboard #11 7.191 resources: #11 7.191 requests: #11 7.191 storage: 1Mi #11 7.191 #11 7.191 --- #11 7.191 # Source: dashboard/templates/service.yaml #11 7.191 ################################################################################ #11 7.191 # Copyright (c) 2019 AT&T Intellectual Property. # #11 7.191 # Copyright (c) 2019 Nokia. # #11 7.191 # # #11 7.191 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 7.191 # you may not use this file except in compliance with the License. # #11 7.191 # You may obtain a copy of the License at # #11 7.191 # # #11 7.191 # http://www.apache.org/licenses/LICENSE-2.0 # #11 7.191 # # #11 7.191 # Unless required by applicable law or agreed to in writing, software # #11 7.191 # distributed under the License is distributed on an "AS IS" BASIS, # #11 7.191 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 7.191 # See the License for the specific language governing permissions and # #11 7.191 # limitations under the License. # #11 7.191 ################################################################################ #11 7.191 #11 7.191 apiVersion: v1 #11 7.191 kind: Service #11 7.191 metadata: #11 7.191 name: service-ricaux-dashboard-http #11 7.191 namespace: ricaux #11 7.191 labels: #11 7.191 app: ricaux-dashboard #11 7.191 chart: dashboard-2.0.0 #11 7.191 release: release-name #11 7.191 heritage: Tiller #11 7.191 spec: #11 7.191 type: NodePort #11 7.191 ports: #11 7.191 - port: 8080 #11 7.191 nodePort: 30080 #11 7.191 protocol: "TCP" #11 7.191 targetPort: "http" #11 7.191 selector: #11 7.191 app: ricaux-dashboard #11 7.191 release: release-name #11 7.191 #11 7.191 --- #11 7.191 # Source: dashboard/templates/deployment.yaml #11 7.191 ################################################################################ #11 7.191 # Copyright (c) 2019 AT&T Intellectual Property. # #11 7.191 # Copyright (c) 2019 Nokia. # #11 7.191 # # #11 7.191 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 7.191 # you may not use this file except in compliance with the License. # #11 7.191 # You may obtain a copy of the License at # #11 7.191 # # #11 7.191 # http://www.apache.org/licenses/LICENSE-2.0 # #11 7.191 # # #11 7.191 # Unless required by applicable law or agreed to in writing, software # #11 7.191 # distributed under the License is distributed on an "AS IS" BASIS, # #11 7.191 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 7.191 # See the License for the specific language governing permissions and # #11 7.191 # limitations under the License. # #11 7.191 ################################################################################ #11 7.191 apiVersion: apps/v1 #11 7.191 kind: Deployment #11 7.191 metadata: #11 7.191 name: deployment-ricaux-dashboard #11 7.191 namespace: ricaux #11 7.191 labels: #11 7.191 app: ricaux-dashboard #11 7.191 chart: dashboard-2.0.0 #11 7.191 release: release-name #11 7.191 heritage: Tiller #11 7.191 spec: #11 7.191 replicas: 1 #11 7.191 selector: #11 7.191 matchLabels: #11 7.191 app: ricaux-dashboard #11 7.191 release: release-name #11 7.191 template: #11 7.191 metadata: #11 7.191 labels: #11 7.191 app: ricaux-dashboard #11 7.191 release: release-name #11 7.191 spec: #11 7.191 hostname: dashboard #11 7.191 imagePullSecrets: #11 7.191 - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc #11 7.191 containers: #11 7.191 - name: container-ricaux-dashboard #11 7.191 image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-dashboard:2.0.0 #11 7.191 imagePullPolicy: IfNotPresent #11 7.191 ports: #11 7.191 - name: http #11 7.191 containerPort: 8080 #11 7.191 protocol: TCP #11 7.191 volumeMounts: #11 7.191 - name: appconfig #11 7.191 mountPath: /config/application.yaml #11 7.191 subPath: application.yaml #11 7.191 readOnly: true #11 7.191 - name: appconfig #11 7.191 mountPath: /maven/key.properties #11 7.191 subPath: key.properties #11 7.191 readOnly: true #11 7.191 - name: appconfig #11 7.191 mountPath: /maven/portal.properties #11 7.191 subPath: portal.properties #11 7.191 readOnly: true #11 7.191 # Temp solution until portal 2.6 #11 7.191 - name: appconfig #11 7.191 mountPath: /dashboard-data/users.json #11 7.191 subPath: users.json #11 7.191 # - name: dashboard-users #11 7.191 # mountPath: /dashboard-data #11 7.191 livenessProbe: #11 7.191 httpGet: #11 7.191 path: /api/admin/health #11 7.191 port: http #11 7.191 initialDelaySeconds: 15 #11 7.191 readinessProbe: #11 7.191 httpGet: #11 7.191 path: /api/admin/version #11 7.191 port: http #11 7.191 initialDelaySeconds: 15 #11 7.191 volumes: #11 7.191 - name: appconfig #11 7.191 configMap: #11 7.191 name: configmap-ricaux-dashboard-appconfig #11 7.191 - name: dashboard-users #11 7.191 persistentVolumeClaim: #11 7.191 claimName: pvc-dashboard #11 7.191 #11 7.191 --- #11 7.191 # Source: dashboard/templates/ingress.yaml #11 7.191 ################################################################################ #11 7.191 # Copyright (c) 2019 AT&T Intellectual Property. # #11 7.191 # Copyright (c) 2019 Nokia. # #11 7.191 # # #11 7.191 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 7.191 # you may not use this file except in compliance with the License. # #11 7.191 # You may obtain a copy of the License at # #11 7.191 # # #11 7.191 # http://www.apache.org/licenses/LICENSE-2.0 # #11 7.191 # # #11 7.191 # Unless required by applicable law or agreed to in writing, software # #11 7.191 # distributed under the License is distributed on an "AS IS" BASIS, # #11 7.191 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 7.191 # See the License for the specific language governing permissions and # #11 7.191 # limitations under the License. # #11 7.191 ################################################################################ #11 7.191 apiVersion: networking.k8s.io/v1beta1 #11 7.191 kind: Ingress #11 7.191 metadata: #11 7.191 name: ingress-ricaux-dashboard #11 7.191 spec: #11 7.191 tls: #11 7.191 - hosts: #11 7.191 - dashboard-entry #11 7.191 secretName: secret-dashboard #11 7.191 rules: #11 7.191 - host: dashboard-entry #11 7.191 http: #11 7.191 paths: #11 7.191 - backend: #11 7.191 serviceName: service-ricaux-dashboard-http #11 7.191 servicePort: http #11 7.191 path: "/" #11 7.191 #11 8.194 *************************************************************************************************************** #11 8.194 Update chart dependency for directory /tmp/it-dep/bin/../ric-aux/helm/mc-stack #11 8.255 Hang tight while we grab the latest from your chart repositories... #11 8.257 ...Successfully got an update from the "local" chart repository #11 8.257 Update Complete. #11 8.270 Saving 3 charts #11 8.270 Dependency elasticsearch did not declare a repository. Assuming it exists in the charts directory #11 8.271 Dependency kibana did not declare a repository. Assuming it exists in the charts directory #11 8.271 Dependency logstash did not declare a repository. Assuming it exists in the charts directory #11 8.272 Deleting outdated charts #11 8.326 *************************************************************************************************************** #11 8.327 ==> Linting /tmp/it-dep/bin/../ric-aux/helm/mc-stack #11 8.327 [INFO] Chart.yaml: icon is recommended #11 8.327 [WARNING] templates/: directory not found #11 8.327 #11 8.327 1 chart(s) linted, no failures #11 8.329 *************************************************************************************************************** #11 8.428 *************************************************************************************************************** #11 8.429 --- #11 8.429 # Source: mc-stack/charts/elasticsearch/templates/poddisruptionbudget.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 --- #11 8.429 apiVersion: policy/v1beta1 #11 8.429 kind: PodDisruptionBudget #11 8.429 metadata: #11 8.429 name: "elasticsearch-master-pdb" #11 8.429 spec: #11 8.429 maxUnavailable: 1 #11 8.429 selector: #11 8.429 matchLabels: #11 8.429 app: "elasticsearch-master" #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/logstash/templates/poddisruptionbudget.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 apiVersion: policy/v1beta1 #11 8.429 kind: PodDisruptionBudget #11 8.429 metadata: #11 8.429 name: release-name-logstash #11 8.429 labels: #11 8.429 app: logstash #11 8.429 chart: logstash-1.13.0 #11 8.429 release: release-name #11 8.429 heritage: Tiller #11 8.429 spec: #11 8.429 selector: #11 8.429 matchLabels: #11 8.429 app: logstash #11 8.429 release: release-name #11 8.429 maxUnavailable: 1 #11 8.429 #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/logstash/templates/files-config.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 apiVersion: v1 #11 8.429 kind: ConfigMap #11 8.429 metadata: #11 8.429 name: release-name-logstash-files #11 8.429 labels: #11 8.429 app: logstash #11 8.429 chart: logstash-1.13.0 #11 8.429 release: release-name #11 8.429 heritage: Tiller #11 8.429 data: #11 8.429 binaryData: #11 8.429 #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/logstash/templates/patterns-config.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 apiVersion: v1 #11 8.429 kind: ConfigMap #11 8.429 metadata: #11 8.429 name: release-name-logstash-patterns #11 8.429 labels: #11 8.429 app: logstash #11 8.429 chart: logstash-1.13.0 #11 8.429 release: release-name #11 8.429 heritage: Tiller #11 8.429 data: #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/logstash/templates/pipeline-config.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 apiVersion: v1 #11 8.429 kind: ConfigMap #11 8.429 metadata: #11 8.429 name: release-name-logstash-pipeline #11 8.429 labels: #11 8.429 app: logstash #11 8.429 chart: logstash-1.13.0 #11 8.429 release: release-name #11 8.429 heritage: Tiller #11 8.429 data: #11 8.429 input_main: |- #11 8.429 input { #11 8.429 # udp { #11 8.429 # port => 1514 #11 8.429 # type => syslog #11 8.429 # } #11 8.429 # tcp { #11 8.429 # port => 1514 #11 8.429 # type => syslog #11 8.429 # } #11 8.429 #beats { #11 8.429 # port => 5044 #11 8.429 #} #11 8.429 http { #11 8.429 port => 8080 #11 8.429 } #11 8.429 # http { #11 8.429 # port => 8080 #11 8.429 # } #11 8.429 # kafka { #11 8.429 # ## ref: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-kafka.html #11 8.429 # bootstrap_servers => "kafka-input:9092" #11 8.429 # codec => json { charset => "UTF-8" } #11 8.429 # consumer_threads => 1 #11 8.429 # topics => ["source"] #11 8.429 # type => "example" #11 8.429 # } #11 8.429 } #11 8.429 filter_main: |- #11 8.429 filter { #11 8.429 if "GS-LITE MC" in [message] { #11 8.429 if "mc_connected_cnt" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","count_connected_ue","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "count_connected_ue" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "mc_unique_ue_cnt" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","count_unique_ue","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "count_unique_ue" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "reconfig_status_reject_cause" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","total_reconfig_reject","count_radio_network","count_transport","count_protocol","count_misc","GNB_ID","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "total_reconfig_reject" => "integer" #11 8.429 "count_radio_network" => "integer" #11 8.429 "count_transport" => "integer" #11 8.429 "count_protocol" => "integer" #11 8.429 "count_misc" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "release_req_success_stats" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","min_success_time","max_success_time","avg_success_time","pctl_05_success_time","pctl_95_success_time","GNB_ID","stddev_success_time","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "min_success_time" => "float" #11 8.429 "max_success_time" => "float" #11 8.429 "avg_success_time" => "float" #11 8.429 "pctl_05_success_time" => "float" #11 8.429 "pctl_95_success_time" => "float" #11 8.429 "stddev_success_time" => "float" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "mod_status_refuse_cause" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","total_reconfig_refuse","count_radio_network","count_transport","count_protocol","count_misc","GNB_ID","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "total_reconfig_refuse" => "integer" #11 8.429 "count_radio_network" => "integer" #11 8.429 "count_transport" => "integer" #11 8.429 "count_protocol" => "integer" #11 8.429 "count_misc" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "release_cause" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","total_reconfig_refuse","count_radio_network","count_transport","count_protocol","count_misc","GNB_ID","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "total_reconfig_refuse" => "integer" #11 8.429 "count_radio_network" => "integer" #11 8.429 "count_transport" => "integer" #11 8.429 "count_protocol" => "integer" #11 8.429 "count_misc" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_pdf_nr_gnb" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","rsrp_medium","rsrp_bad","cnt","rsrp_vbad","GNB_ID","rsrp_good","rsrp_vgood","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "rsrp_medium" => "integer" #11 8.429 "rsrp_bad" => "integer" #11 8.429 "cnt" => "integer" #11 8.429 "rsrp_vbad" => "integer" #11 8.429 "rsrp_good" => "integer" #11 8.429 "rsrp_vgood" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_success_stats" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","stddev_success_time","max_success_time","avg_success_time","pctl_95_success_time","pctl_05_success_time","GNB_ID","min_success_time","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "stddev_success_time" => "float" #11 8.429 "max_success_time" => "float" #11 8.429 "avg_success_time" => "float" #11 8.429 "pctl_95_success_time" => "float" #11 8.429 "pctl_05_success_time" => "float" #11 8.429 "min_success_time" => "float" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "mc_connects_cnt" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","count_ue_connects","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "count_ue_connects" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "erab_stats" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","qCI_other","total_erabs","qCI_9","qCI_8","qCI_7","qCI_6","qCI_5","qCI_4","qCI_3","qCI_2","qCI_1","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "qCI_other" => "integer" #11 8.429 "total_erabs" => "integer" #11 8.429 "qCI_9" => "integer" #11 8.429 "qCI_8" => "integer" #11 8.429 "qCI_7" => "integer" #11 8.429 "qCI_6" => "integer" #11 8.429 "qCI_5" => "integer" #11 8.429 "qCI_4" => "integer" #11 8.429 "qCI_3" => "integer" #11 8.429 "qCI_2" => "integer" #11 8.429 "qCI_1" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "mc_disconnects_cnt" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","count_ue_disconnects","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "count_ue_disconnects" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "reconfig_status_success_rate" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","successful_reconfiguration_requests","GNB_ID","success_rate","total_reconfiguration_requests","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "successful_reconfiguration_requests" => "integer" #11 8.429 "success_rate" => "integer" #11 8.429 "total_reconfiguration_requests" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_pdf_nr_cell" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","rsrp_medium","rsrp_bad","cnt","rsrp_vbad","CELL_ID","rsrp_good","rsrp_vgood","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "rsrp_medium" => "integer" #11 8.429 "rsrp_bad" => "integer" #11 8.429 "cnt" => "integer" #11 8.429 "rsrp_vbad" => "integer" #11 8.429 "CELL_ID" => "integer" #11 8.429 "rsrp_good" => "integer" #11 8.429 "rsrp_vgood" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "rrcx_pdf_serv_cell" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","rsrp_medium","rsrp_bad","cnt","rsrp_vbad","CELL_ID","rsrp_good","rsrp_vgood","TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "rsrp_medium" => "integer" #11 8.429 "rsrp_bad" => "integer" #11 8.429 "cnt" => "integer" #11 8.429 "rsrp_vbad" => "integer" #11 8.429 "CELL_ID" => "integer" #11 8.429 "rsrp_good" => "integer" #11 8.429 "rsrp_vgood" => "integer" #11 8.429 "TS" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "rrcx_stats_serv_gnb" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","median_rsrp","cnt","max_rsrp","stddev_rsrp","GNB_ID","pctl_95_rsrp","pctl_05_rsrp","TS","min_rsrp"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "median_rsrp" => "integer" #11 8.429 "cnt" => "integer" #11 8.429 "max_rsrp" => "integer" #11 8.429 "stddev_rsrp" => "float" #11 8.429 "pctl_95_rsrp" => "integer" #11 8.429 "pctl_05_rsrp" => "integer" #11 8.429 "TS" => "integer" #11 8.429 "min_rsrp" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_stats_nr_cell" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","median_rsrp","cnt","max_rsrp","stddev_rsrp","CELL_ID","pctl_95_rsrp","pctl_05_rsrp","TS","min_rsrp"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "median_rsrp" => "integer" #11 8.429 "cnt" => "integer" #11 8.429 "max_rsrp" => "integer" #11 8.429 "stddev_rsrp" => "float" #11 8.429 "CELL_ID" => "integer" #11 8.429 "pctl_95_rsrp" => "integer" #11 8.429 "pctl_05_rsrp" => "integer" #11 8.429 "TS" => "integer" #11 8.429 "min_rsrp" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_stats_nr_gnb" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","median_rsrp","cnt","max_rsrp","stddev_rsrp","GNB_ID","pctl_95_rsrp","pctl_05_rsrp","TS","min_rsrp"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "median_rsrp" => "integer" #11 8.429 "cnt" => "integer" #11 8.429 "max_rsrp" => "integer" #11 8.429 "stddev_rsrp" => "float" #11 8.429 "pctl_95_rsrp" => "integer" #11 8.429 "pctl_05_rsrp" => "integer" #11 8.429 "TS" => "integer" #11 8.429 "min_rsrp" => "integer" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 else if "mc_connection_stats" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","eventType","avg_connected_time","pctl_05_connected_time","pctl_95_connected_time","min_connected_time","stddev_connected_time", "max_connected_time", "TS"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "avg_connected_time" => "float" #11 8.429 "pctl_05_connected_time" => "float" #11 8.429 "pctl_95_connected_time" => "float" #11 8.429 "min_connected_time" => "float" #11 8.429 "stddev_connected_time" => "float" #11 8.429 "max_connected_time" => "float" #11 8.429 "TS" => "float" #11 8.429 } #11 8.429 } #11 8.429 date { #11 8.429 match => [ "TS", "UNIX" ] #11 8.429 target => "TS" #11 8.429 } #11 8.429 } #11 8.429 } #11 8.429 else if "AC xAPP" in [message] { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","SgNB_Request_Rate","SgNB_Accept_Rate"] #11 8.429 separator => "," #11 8.429 convert => { #11 8.429 "SgNB_Request_Rate" => "integer" #11 8.429 "SgNB_Accept_Rate" => "integer" #11 8.429 } #11 8.429 } #11 8.429 } #11 8.429 else { #11 8.429 csv { #11 8.429 columns => ["reportingEntityName","Unknown1","Unknown2"] #11 8.429 separator => "," #11 8.429 } #11 8.429 } #11 8.429 } #11 8.429 output_main: |- #11 8.429 output { #11 8.429 if "GS-LITE MC" in [reportingEntityName] { #11 8.429 if "mc_connected_cnt" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-connected-cnt" #11 8.429 } #11 8.429 } #11 8.429 else if "erab_stats" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-erab-stats" #11 8.429 } #11 8.429 } #11 8.429 else if "reconfig_status_reject_cause" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-reconfig-status-reject-cause" #11 8.429 } #11 8.429 } #11 8.429 else if "release_req_success_stats" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-release-req-success-stats" #11 8.429 } #11 8.429 } #11 8.429 else if "mod_status_refuse_cause" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-mod-status-refuse-cause" #11 8.429 } #11 8.429 } #11 8.429 else if "release_cause" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-release-cause" #11 8.429 } #11 8.429 } #11 8.429 else if "mc_unique_ue_cnt" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-unique-ue-cnt" #11 8.429 } #11 8.429 } #11 8.429 else if "mc_connection_stats" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-conn-stats" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_pdf_nr_gnb" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-addreq-pdf-nr-gnb" #11 8.429 } #11 8.429 } #11 8.429 else if "rrcx_stats_serv_gnb" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-rrcx-stats-serv-gnb" #11 8.429 } #11 8.429 } #11 8.429 else if "rrcx_pdf_serv_cell" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-rrcx-pdf-serv-cell" #11 8.429 } #11 8.429 } #11 8.429 else if "reconfig_status_success_rate" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-reconfig-status-success-rate" #11 8.429 } #11 8.429 } #11 8.429 else if "mc_disconnects_cnt" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-disconnects-cnt" #11 8.429 } #11 8.429 } #11 8.429 else if "mc_connects_cnt" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-connects-cnt" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_success_stats" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-addreq-success-stats" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_stats_nr_gnb" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-addreq-stats-nr-gnb" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_stats_nr_cell" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-addreq-stats-nr-cell" #11 8.429 } #11 8.429 } #11 8.429 else if "addreq_pdf_nr_cell" in [eventType] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-mc-addreq-pdf-nr-cell" #11 8.429 } #11 8.429 } #11 8.429 } #11 8.429 else if "AC xAPP" in [reportingEntityName] { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-ac" #11 8.429 } #11 8.429 } #11 8.429 else { #11 8.429 elasticsearch { #11 8.429 hosts => "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 index => "events-ves-other" #11 8.429 } #11 8.429 } #11 8.429 } #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/elasticsearch/templates/service.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 --- #11 8.429 kind: Service #11 8.429 apiVersion: v1 #11 8.429 metadata: #11 8.429 name: elasticsearch-master #11 8.429 labels: #11 8.429 heritage: "Tiller" #11 8.429 release: "release-name" #11 8.429 chart: "elasticsearch-7.3.0" #11 8.429 app: "elasticsearch-master" #11 8.429 annotations: #11 8.429 {} #11 8.429 #11 8.429 spec: #11 8.429 type: ClusterIP #11 8.429 selector: #11 8.429 heritage: "Tiller" #11 8.429 release: "release-name" #11 8.429 chart: "elasticsearch-7.3.0" #11 8.429 app: "elasticsearch-master" #11 8.429 ports: #11 8.429 - name: http #11 8.429 protocol: TCP #11 8.429 port: 9200 #11 8.429 - name: transport #11 8.429 protocol: TCP #11 8.429 port: 9300 #11 8.429 --- #11 8.429 kind: Service #11 8.429 apiVersion: v1 #11 8.429 metadata: #11 8.429 name: elasticsearch-master-headless #11 8.429 labels: #11 8.429 heritage: "Tiller" #11 8.429 release: "release-name" #11 8.429 chart: "elasticsearch-7.3.0" #11 8.429 app: "elasticsearch-master" #11 8.429 annotations: #11 8.429 service.alpha.kubernetes.io/tolerate-unready-endpoints: "true" #11 8.429 spec: #11 8.429 clusterIP: None # This is needed for statefulset hostnames like elasticsearch-0 to resolve #11 8.429 # Create endpoints also if the related pod isn't ready #11 8.429 publishNotReadyAddresses: true #11 8.429 selector: #11 8.429 app: "elasticsearch-master" #11 8.429 ports: #11 8.429 - name: http #11 8.429 port: 9200 #11 8.429 - name: transport #11 8.429 port: 9300 #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/kibana/templates/service.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 --- #11 8.429 apiVersion: v1 #11 8.429 kind: Service #11 8.429 metadata: #11 8.429 name: release-name-kibana #11 8.429 labels: #11 8.429 app: kibana #11 8.429 release: "release-name" #11 8.429 heritage: Tiller #11 8.429 spec: #11 8.429 type: ClusterIP #11 8.429 ports: #11 8.429 - port: 5601 #11 8.429 protocol: TCP #11 8.429 name: http #11 8.429 targetPort: 5601 #11 8.429 selector: #11 8.429 app: kibana #11 8.429 release: "release-name" #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/logstash/templates/service.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 apiVersion: v1 #11 8.429 kind: Service #11 8.429 metadata: #11 8.429 name: release-name-logstash #11 8.429 labels: #11 8.429 app: logstash #11 8.429 chart: logstash-1.13.0 #11 8.429 release: release-name #11 8.429 heritage: Tiller #11 8.429 annotations: #11 8.429 spec: #11 8.429 type: ClusterIP #11 8.429 ports: #11 8.429 - name: beats #11 8.429 port: 5044 #11 8.429 protocol: TCP #11 8.429 targetPort: 8080 #11 8.429 #11 8.429 selector: #11 8.429 app: logstash #11 8.429 release: release-name #11 8.429 #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/elasticsearch/templates/test/test-elasticsearch-health.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 --- #11 8.429 apiVersion: v1 #11 8.429 kind: Pod #11 8.429 metadata: #11 8.429 name: "release-name-ozpei-test" #11 8.429 annotations: #11 8.429 "helm.sh/hook": test-success #11 8.429 spec: #11 8.429 containers: #11 8.429 - name: "release-name-clhfp-test" #11 8.429 image: "docker.elastic.co/elasticsearch/elasticsearch:7.3.0" #11 8.429 command: #11 8.429 - "sh" #11 8.429 - "-c" #11 8.429 - | #11 8.429 #!/usr/bin/env bash -e #11 8.429 curl -XGET --fail 'elasticsearch-master:9200/_cluster/health?wait_for_status=green&timeout=1s' #11 8.429 restartPolicy: Never #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/kibana/templates/deployment.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 apiVersion: apps/v1 #11 8.429 kind: Deployment #11 8.429 metadata: #11 8.429 name: release-name-kibana #11 8.429 labels: #11 8.429 app: kibana #11 8.429 release: "release-name" #11 8.429 spec: #11 8.429 replicas: 1 #11 8.429 strategy: #11 8.429 type: Recreate #11 8.429 #11 8.429 selector: #11 8.429 matchLabels: #11 8.429 app: kibana #11 8.429 release: "release-name" #11 8.429 template: #11 8.429 metadata: #11 8.429 labels: #11 8.429 app: kibana #11 8.429 release: "release-name" #11 8.429 annotations: #11 8.429 #11 8.429 spec: #11 8.429 securityContext: #11 8.429 fsGroup: 1000 #11 8.429 #11 8.429 volumes: #11 8.429 containers: #11 8.429 - name: kibana #11 8.429 securityContext: #11 8.429 capabilities: #11 8.429 drop: #11 8.429 - ALL #11 8.429 runAsNonRoot: true #11 8.429 runAsUser: 1000 #11 8.429 #11 8.429 image: "docker.elastic.co/kibana/kibana-oss:7.3.0" #11 8.429 imagePullPolicy: "IfNotPresent" #11 8.429 env: #11 8.429 - name: ELASTICSEARCH_HOSTS #11 8.429 value: "http://elasticsearch-master:9200" #11 8.429 - name: SERVER_HOST #11 8.429 value: "0.0.0.0" #11 8.429 readinessProbe: #11 8.429 failureThreshold: 3 #11 8.429 initialDelaySeconds: 10 #11 8.429 periodSeconds: 10 #11 8.429 successThreshold: 3 #11 8.429 timeoutSeconds: 5 #11 8.429 #11 8.429 exec: #11 8.429 command: #11 8.429 - sh #11 8.429 - -c #11 8.429 - | #11 8.429 #!/usr/bin/env bash -e #11 8.429 http () { #11 8.429 local path="${1}" #11 8.429 set -- -XGET -s --fail #11 8.429 #11 8.429 if [ -n "${ELASTIC_USERNAME}" ] && [ -n "${ELASTIC_PASSWORD}" ]; then #11 8.429 set -- "$@" -u "${ELASTIC_USERNAME}:${ELASTIC_PASSWORD}" #11 8.429 fi #11 8.429 #11 8.429 curl -k "$@" "http://localhost:5601${path}" #11 8.429 } #11 8.429 #11 8.429 http "/app/kibana" #11 8.429 ports: #11 8.429 - containerPort: 5601 #11 8.429 resources: #11 8.429 limits: #11 8.429 cpu: 1000m #11 8.429 memory: 1Gi #11 8.429 requests: #11 8.429 cpu: 100m #11 8.429 memory: 500m #11 8.429 #11 8.429 volumeMounts: #11 8.429 --- #11 8.429 # Source: mc-stack/charts/elasticsearch/templates/statefulset.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 #11 8.429 --- #11 8.429 apiVersion: apps/v1 #11 8.429 kind: StatefulSet #11 8.429 metadata: #11 8.429 name: elasticsearch-master #11 8.429 labels: #11 8.429 heritage: "Tiller" #11 8.429 release: "release-name" #11 8.429 chart: "elasticsearch-7.3.0" #11 8.429 app: "elasticsearch-master" #11 8.429 annotations: #11 8.429 esMajorVersion: "7" #11 8.429 spec: #11 8.429 serviceName: elasticsearch-master-headless #11 8.429 selector: #11 8.429 matchLabels: #11 8.429 app: "elasticsearch-master" #11 8.429 replicas: 1 #11 8.429 podManagementPolicy: Parallel #11 8.429 updateStrategy: #11 8.429 type: RollingUpdate #11 8.429 template: #11 8.429 metadata: #11 8.429 name: "elasticsearch-master" #11 8.429 labels: #11 8.429 heritage: "Tiller" #11 8.429 release: "release-name" #11 8.429 chart: "elasticsearch-7.3.0" #11 8.429 app: "elasticsearch-master" #11 8.429 annotations: #11 8.429 #11 8.429 spec: #11 8.429 securityContext: #11 8.429 fsGroup: 1000 #11 8.429 #11 8.429 affinity: #11 8.429 podAntiAffinity: #11 8.429 requiredDuringSchedulingIgnoredDuringExecution: #11 8.429 - labelSelector: #11 8.429 matchExpressions: #11 8.429 - key: app #11 8.429 operator: In #11 8.429 values: #11 8.429 - "elasticsearch-master" #11 8.429 topologyKey: kubernetes.io/hostname #11 8.429 terminationGracePeriodSeconds: 120 #11 8.429 volumes: #11 8.429 initContainers: #11 8.429 - name: configure-sysctl #11 8.429 securityContext: #11 8.429 runAsUser: 0 #11 8.429 privileged: true #11 8.429 image: "docker.elastic.co/elasticsearch/elasticsearch:7.3.0" #11 8.429 command: ["sysctl", "-w", "vm.max_map_count=262144"] #11 8.429 resources: #11 8.429 {} #11 8.429 #11 8.429 containers: #11 8.429 - name: "elasticsearch" #11 8.429 securityContext: #11 8.429 capabilities: #11 8.429 drop: #11 8.429 - ALL #11 8.429 runAsNonRoot: true #11 8.429 runAsUser: 1000 #11 8.429 #11 8.429 image: "docker.elastic.co/elasticsearch/elasticsearch:7.3.0" #11 8.429 imagePullPolicy: "IfNotPresent" #11 8.429 readinessProbe: #11 8.429 failureThreshold: 3 #11 8.429 initialDelaySeconds: 10 #11 8.429 periodSeconds: 10 #11 8.429 successThreshold: 3 #11 8.429 timeoutSeconds: 5 #11 8.429 #11 8.429 exec: #11 8.429 command: #11 8.429 - sh #11 8.429 - -c #11 8.429 - | #11 8.429 #!/usr/bin/env bash -e #11 8.429 # If the node is starting up wait for the cluster to be ready (request params: 'wait_for_status=green&timeout=1s' ) #11 8.429 # Once it has started only check that the node itself is responding #11 8.429 START_FILE=/tmp/.es_start_file #11 8.429 #11 8.429 http () { #11 8.429 local path="${1}" #11 8.429 if [ -n "${ELASTIC_USERNAME}" ] && [ -n "${ELASTIC_PASSWORD}" ]; then #11 8.429 BASIC_AUTH="-u ${ELASTIC_USERNAME}:${ELASTIC_PASSWORD}" #11 8.429 else #11 8.429 BASIC_AUTH='' #11 8.429 fi #11 8.429 curl -XGET -s -k --fail ${BASIC_AUTH} http://127.0.0.1:9200${path} #11 8.429 } #11 8.429 #11 8.429 if [ -f "${START_FILE}" ]; then #11 8.429 echo 'Elasticsearch is already running, lets check the node is healthy' #11 8.429 http "/" #11 8.429 else #11 8.429 echo 'Waiting for elasticsearch cluster to become cluster to be ready (request params: "wait_for_status=green&timeout=1s" )' #11 8.429 if http "/_cluster/health?wait_for_status=green&timeout=1s" ; then #11 8.429 touch ${START_FILE} #11 8.429 exit 0 #11 8.429 else #11 8.429 echo 'Cluster is not yet ready (request params: "wait_for_status=green&timeout=1s" )' #11 8.429 exit 1 #11 8.429 fi #11 8.429 fi #11 8.429 ports: #11 8.429 - name: http #11 8.429 containerPort: 9200 #11 8.429 - name: transport #11 8.429 containerPort: 9300 #11 8.429 resources: #11 8.429 limits: #11 8.429 cpu: 1000m #11 8.429 memory: 2Gi #11 8.429 requests: #11 8.429 cpu: 100m #11 8.429 memory: 2Gi #11 8.429 #11 8.429 env: #11 8.429 - name: node.name #11 8.429 valueFrom: #11 8.429 fieldRef: #11 8.429 fieldPath: metadata.name #11 8.429 - name: cluster.initial_master_nodes #11 8.429 value: "elasticsearch-master-0," #11 8.429 - name: discovery.seed_hosts #11 8.429 value: "elasticsearch-master-headless" #11 8.429 - name: cluster.name #11 8.429 value: "elasticsearch" #11 8.429 - name: network.host #11 8.429 value: "0.0.0.0" #11 8.429 - name: ES_JAVA_OPTS #11 8.429 value: "-Xmx1g -Xms1g" #11 8.429 - name: node.data #11 8.429 value: "true" #11 8.429 - name: node.ingest #11 8.429 value: "true" #11 8.429 - name: node.master #11 8.429 value: "true" #11 8.429 volumeMounts: #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/logstash/templates/statefulset.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 apiVersion: apps/v1 #11 8.429 kind: StatefulSet #11 8.429 metadata: #11 8.429 name: release-name-logstash #11 8.429 labels: #11 8.429 app: logstash #11 8.429 chart: logstash-1.13.0 #11 8.429 release: release-name #11 8.429 heritage: Tiller #11 8.429 spec: #11 8.429 serviceName: release-name-logstash #11 8.429 replicas: 1 #11 8.429 podManagementPolicy: OrderedReady #11 8.429 selector: #11 8.429 matchLabels: #11 8.429 app: logstash #11 8.429 release: release-name #11 8.429 template: #11 8.429 metadata: #11 8.429 labels: #11 8.429 app: logstash #11 8.429 release: release-name #11 8.429 annotations: #11 8.429 checksum/patterns: 7459013605969523101fa8892bac80fbfa9305603b7fdd94ea0c5fa73fbad92a #11 8.429 checksum/templates: 7fded1921af22d6aff04b1e7f8f3c142e7fc80b3e39488bde087efbcce2388a1 #11 8.429 checksum/pipeline: 0d35d2413146a4abc7dfa617210768793552b1bab0d6c05aafdf34dab84baa63 #11 8.429 spec: #11 8.429 securityContext: #11 8.429 runAsUser: 1000 #11 8.429 fsGroup: 1000 #11 8.429 initContainers: #11 8.429 containers: #11 8.429 #11 8.429 ## logstash #11 8.429 - name: logstash #11 8.429 image: "docker.elastic.co/logstash/logstash-oss:7.3.0" #11 8.429 imagePullPolicy: IfNotPresent #11 8.429 ports: #11 8.429 - name: monitor #11 8.429 containerPort: 9600 #11 8.429 protocol: TCP #11 8.429 - containerPort: 5044 #11 8.429 name: beats #11 8.429 protocol: TCP #11 8.429 #11 8.429 livenessProbe: #11 8.429 null #11 8.429 #11 8.429 readinessProbe: #11 8.429 null #11 8.429 #11 8.429 env: #11 8.429 ## Logstash monitoring API host and port env vars #11 8.429 - name: HTTP_HOST #11 8.429 value: "0.0.0.0" #11 8.429 - name: HTTP_PORT #11 8.429 value: "9600" #11 8.429 ## Elasticsearch output #11 8.429 - name: ELASTICSEARCH_HOST #11 8.429 value: "elasticsearch-data.kube-system.svc.rec.io" #11 8.429 - name: ELASTICSEARCH_PORT #11 8.429 value: "9200" #11 8.429 # Logstash Java Options #11 8.429 - name: LS_JAVA_OPTS #11 8.429 value: -Xmx1g -Xms1g #11 8.429 ## Additional env vars #11 8.429 - name: CONFIG_RELOAD_AUTOMATIC #11 8.429 value: "true" #11 8.429 - name: PATH_CONFIG #11 8.429 value: "/usr/share/logstash/pipeline" #11 8.429 - name: PATH_DATA #11 8.429 value: "/usr/share/logstash/data" #11 8.429 - name: QUEUE_CHECKPOINT_WRITES #11 8.429 value: "1" #11 8.429 - name: QUEUE_DRAIN #11 8.429 value: "true" #11 8.429 - name: QUEUE_MAX_BYTES #11 8.429 value: "1gb" #11 8.429 - name: QUEUE_TYPE #11 8.429 value: "persisted" #11 8.429 resources: #11 8.429 {} #11 8.429 #11 8.429 volumeMounts: #11 8.429 - mountPath: /usr/share/logstash/data #11 8.429 name: data #11 8.429 - mountPath: /usr/share/logstash/patterns #11 8.429 name: patterns #11 8.429 - mountPath: /usr/share/logstash/files #11 8.429 name: files #11 8.429 - mountPath: /usr/share/logstash/pipeline #11 8.429 name: pipeline #11 8.429 #11 8.429 terminationGracePeriodSeconds: 30 #11 8.429 volumes: #11 8.429 - name: patterns #11 8.429 configMap: #11 8.429 name: release-name-logstash-patterns #11 8.429 - name: files #11 8.429 configMap: #11 8.429 name: release-name-logstash-files #11 8.429 - name: pipeline #11 8.429 configMap: #11 8.429 name: release-name-logstash-pipeline #11 8.429 - name: data #11 8.429 emptyDir: {} #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/elasticsearch/templates/configmap.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 --- #11 8.429 # Source: mc-stack/charts/elasticsearch/templates/ingress.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 --- #11 8.429 #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/kibana/templates/configmap.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 --- #11 8.429 # Source: mc-stack/charts/kibana/templates/ingress.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 --- #11 8.429 #11 8.429 #11 8.429 --- #11 8.429 # Source: mc-stack/charts/logstash/templates/ingress.yaml #11 8.429 ################################################################################ #11 8.429 # Copyright (c) 2019 AT&T Intellectual Property. # #11 8.429 # # #11 8.429 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 8.429 # you may not use this file except in compliance with the License. # #11 8.429 # You may obtain a copy of the License at # #11 8.429 # # #11 8.429 # http://www.apache.org/licenses/LICENSE-2.0 # #11 8.429 # # #11 8.429 # Unless required by applicable law or agreed to in writing, software # #11 8.429 # distributed under the License is distributed on an "AS IS" BASIS, # #11 8.429 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 8.429 # See the License for the specific language governing permissions and # #11 8.429 # limitations under the License. # #11 8.429 ################################################################################ #11 8.429 --- #11 8.429 #11 8.429 #11 8.429 #11 9.434 *************************************************************************************************************** #11 9.434 Update chart dependency for directory /tmp/it-dep/bin/../ric-aux/helm/mrsub #11 9.488 No requirements found in /tmp/it-dep/ric-aux/helm/mrsub/charts. #11 9.546 *************************************************************************************************************** #11 9.547 ==> Linting /tmp/it-dep/bin/../ric-aux/helm/mrsub #11 9.547 [INFO] Chart.yaml: icon is recommended #11 9.547 #11 9.547 1 chart(s) linted, no failures #11 9.549 *************************************************************************************************************** #11 9.608 *************************************************************************************************************** #11 9.609 --- #11 9.609 # Source: mrsub/templates/configmap-bin.yaml #11 9.609 ################################################################################ #11 9.609 # Copyright (c) 2019 AT&T Intellectual Property. # #11 9.609 # Copyright (c) 2019 Nokia. # #11 9.609 # # #11 9.609 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 9.609 # you may not use this file except in compliance with the License. # #11 9.609 # You may obtain a copy of the License at # #11 9.609 # # #11 9.609 # http://www.apache.org/licenses/LICENSE-2.0 # #11 9.609 # # #11 9.609 # Unless required by applicable law or agreed to in writing, software # #11 9.609 # distributed under the License is distributed on an "AS IS" BASIS, # #11 9.609 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 9.609 # See the License for the specific language governing permissions and # #11 9.609 # limitations under the License. # #11 9.609 ################################################################################ #11 9.609 #11 9.609 apiVersion: v1 #11 9.609 kind: ConfigMap #11 9.609 metadata: #11 9.609 name: configmap-release-name-mrsub-bin #11 9.609 data: #11 9.609 mrsub.sh: | #11 9.609 #!/bin/bash #11 9.609 #11 9.609 MR_HOSTPORT="$_MR_HOSTPORT" #11 9.609 MR_TOPIC="$_MR_TOPIC" #11 9.609 LOGSTASH_URL="$_LOGSTASH_URL" #11 9.609 #11 9.609 if ! jq --version > /dev/null 2>&1 ; then #11 9.609 apt-get update #11 9.609 apt-get install -y jq curl #11 9.609 fi #11 9.609 #11 9.609 echo "IN SCRIPT" #11 9.609 echo "$MR_HOSTPORT $MR_TOPIC $LOGSTASH_URL" #11 9.609 #11 9.609 while true; do #11 9.609 # if dmaap returns single JSON structure #11 9.609 DATA=$(curl -s -H "Accept: application/json" -X GET http://${MR_HOSTPORT}/events/${MR_TOPIC}/elk-plotter/elk-plotter?timeout=60000) #11 9.609 DATA=$(echo $DATA| sed -e 's/\\"/"/g' -e 's/"{/{/g' -e 's/}"/}/g') #11 9.609 echo "Getting data: $DATA" #11 9.609 #11 9.609 #VESEVENT=$(echo $DATA |jq -r '((.event.commonEventHeader.lastEpochMicrosec)|tostring) + "," + ((.event.measurementsForVfScalingFields.vNicUsageArray[0].receivedTotalPacketsDelta) | tostring)') #11 9.609 #curl -i -XPUT 'http://127.0.0.1:8080/onenumber/onenumebr' -d "${VESEVENT}" #11 9.609 #11 9.609 # dmaap returns json array #11 9.609 # echo "Reading source: $.event.commonEventHeader.reportingEntityName" #11 9.609 source=$(echo $DATA |jq -r '.[] | ((.event.commonEventHeader.reportingEntityName) | tostring)') #11 9.609 echo "Source name: $source" #11 9.609 if [ "$source" == "GS_LITE MC" ] #11 9.609 then #11 9.609 DATA=$(echo $DATA |jq -r --arg source "$source" '.[] | $source+","+((.event.measurementsForVfScalingFields.additionalFields[1].value) | tostring)+ ","+ ((.event.measurementsForVfScalingFields.additionalFields[2].value) | tostring)') #11 9.609 #EVENTS=$(echo $DATA |jq -r '.event.measurementFields.additionalFields.SgNBRequestRate') #11 9.609 #for EVENT in $EVENTS; do #11 9.609 elif [ "$source" == "AC xAPP" ] #11 9.609 then #11 9.609 DATA=$(echo $DATA |jq -r --arg source "$source" '.[] | $source+","+((.event.measurementsForVfScalingFields.additionalFields[0].value) | tostring)') #11 9.609 else #11 9.609 DATA="No supportive reporting entity provided" #11 9.609 fi #11 9.609 echo "Injecting VES event: $DATA" #11 9.609 curl -i -XPUT "${LOGSTASH_URL}" -d "${DATA}" #11 9.609 #done #11 9.609 done #11 9.609 #11 9.609 #11 9.609 #11 9.609 --- #11 9.609 # Source: mrsub/templates/configmap-env.yaml #11 9.609 ################################################################################ #11 9.609 # Copyright (c) 2019 AT&T Intellectual Property. # #11 9.609 # Copyright (c) 2019 Nokia. # #11 9.609 # # #11 9.609 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 9.609 # you may not use this file except in compliance with the License. # #11 9.609 # You may obtain a copy of the License at # #11 9.609 # # #11 9.609 # http://www.apache.org/licenses/LICENSE-2.0 # #11 9.609 # # #11 9.609 # Unless required by applicable law or agreed to in writing, software # #11 9.609 # distributed under the License is distributed on an "AS IS" BASIS, # #11 9.609 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 9.609 # See the License for the specific language governing permissions and # #11 9.609 # limitations under the License. # #11 9.609 ################################################################################ #11 9.609 #11 9.609 apiVersion: v1 #11 9.609 kind: ConfigMap #11 9.609 metadata: #11 9.609 name: configmap-release-name-mrsub-env #11 9.609 data: #11 9.609 _MR_HOSTPORT: "10.1.0.26:30227" #11 9.609 _MR_TOPIC: "unauthenticated.SEC_MEASUREMENT_OUTPUT" #11 9.609 _LOGSTASH_URL: "http://192.168.130.77:8081/ves/ves" #11 9.609 #11 9.609 #11 9.609 --- #11 9.609 # Source: mrsub/templates/deployment.yaml #11 9.609 apiVersion: apps/v1 #11 9.609 kind: Deployment #11 9.609 metadata: #11 9.609 name: release-name-mrsub #11 9.609 labels: #11 9.609 app.kubernetes.io/name: mrsub #11 9.609 helm.sh/chart: mrsub-0.1.0 #11 9.609 app.kubernetes.io/instance: release-name #11 9.609 app.kubernetes.io/managed-by: Tiller #11 9.609 spec: #11 9.609 replicas: 1 #11 9.609 selector: #11 9.609 matchLabels: #11 9.609 app.kubernetes.io/name: mrsub #11 9.609 app.kubernetes.io/instance: release-name #11 9.609 template: #11 9.609 metadata: #11 9.609 labels: #11 9.609 app.kubernetes.io/name: mrsub #11 9.609 app.kubernetes.io/instance: release-name #11 9.609 spec: #11 9.609 containers: #11 9.609 - name: mrsub #11 9.609 image: "ubuntu:16.04" #11 9.609 imagePullPolicy: IfNotPresent #11 9.609 command: ["/scripts/mrsub.sh"] #11 9.609 #command: ["sleep"] #11 9.609 #args: ["3600"] #11 9.609 volumeMounts: #11 9.609 - mountPath: /scripts #11 9.609 name: script #11 9.609 envFrom: #11 9.609 - configMapRef: #11 9.609 name: configmap-release-name-mrsub-env #11 9.609 volumes: #11 9.609 - name: script #11 9.609 configMap: #11 9.609 name: configmap-release-name-mrsub-bin #11 9.609 defaultMode: 0744 #11 9.609 #11 10.61 *************************************************************************************************************** #11 10.61 Update chart dependency for directory /tmp/it-dep/bin/../ric-aux/helm/infrastructure #11 10.67 Hang tight while we grab the latest from your chart repositories... #11 10.68 ...Successfully got an update from the "local" chart repository #11 10.68 Update Complete. #11 10.68 Saving 6 charts #11 10.68 Downloading ric-common from repo http://127.0.0.1:8879/charts #11 10.69 Deleting outdated charts #11 10.75 *************************************************************************************************************** #11 10.76 ==> Linting /tmp/it-dep/bin/../ric-aux/helm/infrastructure #11 10.76 [INFO] Chart.yaml: icon is recommended #11 10.76 [WARNING] templates/: directory not found #11 10.76 #11 10.76 1 chart(s) linted, no failures #11 10.76 *************************************************************************************************************** #11 11.35 *************************************************************************************************************** #11 11.35 --- #11 11.35 # Source: infrastructure/charts/certificate-manager/templates/secret.yaml #11 11.35 ################################################################################ #11 11.35 # Copyright (c) 2019 AT&T Intellectual Property. # #11 11.35 # # #11 11.35 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 11.35 # you may not use this file except in compliance with the License. # #11 11.35 # You may obtain a copy of the License at # #11 11.35 # # #11 11.35 # http://www.apache.org/licenses/LICENSE-2.0 # #11 11.35 # # #11 11.35 # Unless required by applicable law or agreed to in writing, software # #11 11.35 # distributed under the License is distributed on an "AS IS" BASIS, # #11 11.35 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 11.35 # See the License for the specific language governing permissions and # #11 11.35 # limitations under the License. # #11 11.35 ################################################################################ #11 11.35 #11 11.35 --- #11 11.35 apiVersion: v1 #11 11.35 kind: Secret #11 11.35 metadata: #11 11.35 name: secret-ric-ca-cert #11 11.35 namespace: ricaux #11 11.35 data: #11 11.35 ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURSakNDQWk2Z0F3SUJBZ0lRZFdxcTIvUnZ0cFowUk02VGN5R3h4VEFOQmdrcWhraUc5dzBCQVFzRkFEQTkKTVRzd09RWURWUVFERXpJdlF6MVZVeTlQUFU4dFVrRk9JRUZzYkdsaGJtTmxMMDlWUFU4dFVrRk9JRk52Wm5SMwpZWEpsSUVOdmJXMTFibWwwZVRBZUZ3MHlOREV3TVRjeU1UTTROVGxhRncwME9URXdNVEV5TVRNNE5UbGFNRDB4Ck96QTVCZ05WQkFNVE1pOURQVlZUTDA4OVR5MVNRVTRnUVd4c2FXRnVZMlV2VDFVOVR5MVNRVTRnVTI5bWRIZGgKY21VZ1EyOXRiWFZ1YVhSNU1JSUJJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBTUlJQkNnS0NBUUVBdWlVVwo0aU1QZVVNODNDS2lVWDlwVm0yQ2R3aGhtV3k4TDdZcTVZM0lvNGlIZUlNVEMzOERmbXViVVhxYWkzZ2ZQZjE0CllqOHF6bVZDNWU2ampuV1RHMWxXZHZSaXo2NSs3ajFwd2JnNGsvR2lra3A5TzZMUHAybWI4YkYrZGVNRlpvMjkKbkZ0Mk16UzVZUHhRbHFJV1dLR3pGd0JseDY1Rk1YQmRwMHJyN1hMZ0FkUHdGd0lsS2JybkpFU25IS08xWFRSVApDNHFtZ1c2Mjk1UXdqeVNWUU5BdWhlS0czMVhpNWc5R202aXdWam5yOHdKR3NJcnVWRkpnWEszOXBUK09tdTJaCjVzeDRDUHNQeW5DSlhWbHgzeVh5QnFuMWdsK0RXazZ1cDRZQjFyOG9NR2ZHNlM0MUVYWktUZlpHQTlHM2VWS2EKcnlRRFU5bTRnSERtZCtkZ1h3SURBUUFCbzBJd1FEQU9CZ05WSFE4QkFmOEVCQU1DQXFRd0hRWURWUjBsQkJZdwpGQVlJS3dZQkJRVUhBd0VHQ0NzR0FRVUZCd01DTUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFJMG1oVVNDUjd2L21iRnk3MHd4cHlQcG83cmw1Tmdmc28zQytVcnd3UjRLSGJQQVBGamUKUGhkUmxQRUg2MFU2N0pKQXYvSzJ5NkVpVDZTRnVSTU5zdVYrdnFzK3BmWGZvWmhhcUxIQ3RnNjF0bmZXTUpaRQpPcXBMNlVVT1hPOE1PSWFFSFlMTnlLeXhxbkVMZmdQdHVoeWZiWTNzZUpuR0x1bjNLRiticENWUEpSaXlJVlc4CmRpcEx0MHA5K1V6L0ExVkJkelY5M3VEQnFyUEVuTkZlRC91bnlPM3hEMzNpdTZ3SG53UVBLbWZLRG9UbGxrOFAKcy8rQS9ITjQ2anJjSUZoY1VpQXZ5THMrS09LL2RWUjg0Nno4d29VTGJ2Wi96M203VVdpVHQ4UXBzMCt1TXQwcgpoUGI3eENhMXBBaDJXTkhzR2p3M1J2WEtya0t3OGdkV3YvRT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= #11 11.35 #11 11.35 --- #11 11.35 apiVersion: v1 #11 11.35 kind: Secret #11 11.35 metadata: #11 11.35 name: secret-plt-ingress-cert #11 11.35 namespace: ricaux #11 11.35 data: #11 11.35 tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURhakNDQWxLZ0F3SUJBZ0lSQUpOWjZrTi9EZ3B1d1pTMW1DMkNMTm93RFFZSktvWklodmNOQVFFTEJRQXcKUFRFN01Ea0dBMVVFQXhNeUwwTTlWVk12VHoxUExWSkJUaUJCYkd4cFlXNWpaUzlQVlQxUExWSkJUaUJUYjJaMApkMkZ5WlNCRGIyMXRkVzVwZEhrd0hoY05NalF4TURFM01qRXpPRFU1V2hjTk5Ea3hNREV4TWpFek9EVTVXakJOCk1Vc3dTUVlEVlFRREUwSXZRejFWVXk5UFBVOHRVa0ZPSUVGc2JHbGhibU5sTDA5VlBVOHRVa0ZPSUZOdlpuUjMKWVhKbElFTnZiVzExYm1sMGVTOURUajFTU1VNdFVHeGhkR1p2Y20wd2dnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQQpBNElCRHdBd2dnRUtBb0lCQVFEQlNWL1dGRW9NS2MwZDc3RE5IRkRESklpWjh3WENERGxWSFJhby9RQnBYMU1kCk1KREhGbWF2SmF3RUpBNlRaUSs4anFQdW1EWGxaSEE2S0tmKytOU1pwU29ob0pGUy9EOUl3bmZnWG83Z21NY1YKL1NDRUloVkhOb1ZsdmpVaWhxeStpaElCOXFDOUR6Sk5kd1hxbXR0S3ZZa252S1psSUVhRkhVck1DcVhNSnUyYgpHcHR4cHgxOUdZS0dVWmp6d1M0MXY0SjQrYjNoWi9PSDRJQ21SY1ZJbEFlblFIdmpEL25lR01EeXNiaUw0ai82CjJqRTlPT2htc0hENmg3a3VPNjFwa1NyMFRLeGIxK2d0YTBYbUtNQWdUcmladEx4dGJ0RFJqaW1TaEpXYm5HWHkKK1pGNkpiNjdJSk9kcVFKeUlvVW5OR1prY01kSXVETVFKTU0vUFhlSkFnTUJBQUdqVlRCVE1BNEdBMVVkRHdFQgovd1FFQXdJRm9EQWRCZ05WSFNVRUZqQVVCZ2dyQmdFRkJRY0RBUVlJS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvCkJBSXdBREFVQmdOVkhSRUVEVEFMZ2dseWFXTXRaVzUwY25rd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFBV0YKdmdCV1luTEpoREpneHdUcnpqeVpTTU9qMEk5ZlkvM0VtN3dqazV6U0VrR1h1bFV1a1dlcWxMV2FseEhDcEtPSApoeG5KSkF4NUk1d0NIYlo2ODBNdmRxam5PeElBK240MUVjWFFDK3YyUjFubGx6SkMzZXI5ZjYyN3NhRE9MNDhmCkxUaURiUlg2Wkd4NmMrckJkczRncFJmUVhUMGhoV3N0bjFseFRtYzFXWkxqSUpRWU5kdmpwb2NncmZJTjhRM1IKVXhCcGRmZ3NwbFpOVEwvckFxbUVESHd2TkhwcUpib09DSVlVQjhUOFFnQ0JUSDVKbEp5bWM4bU8xLzZ0R2gvdAoweWxVMldqK2wxUnFMeVFWbHlhY1ZtbzZ1MHRvemlBVWdRVGJKUy9CTzEySmtFSC9qa1NnTDF0M2Z0bHRkRVlUCithdFZsTEZSKzBUOFIxSHA5RGs9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K #11 11.35 tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb3dJQkFBS0NBUUVBd1VsZjFoUktEQ25OSGUrd3pSeFF3eVNJbWZNRndndzVWUjBXcVAwQWFWOVRIVENRCnh4Wm1yeVdzQkNRT2syVVB2STZqN3BnMTVXUndPaWluL3ZqVW1hVXFJYUNSVXZ3L1NNSjM0RjZPNEpqSEZmMGcKaENJVlJ6YUZaYjQxSW9hc3Zvb1NBZmFndlE4eVRYY0Y2cHJiU3IySko3eW1aU0JHaFIxS3pBcWx6Q2J0bXhxYgpjYWNkZlJtQ2hsR1k4OEV1TmIrQ2VQbTk0V2Z6aCtDQXBrWEZTSlFIcDBCNzR3LzUzaGpBOHJHNGkrSS8rdG94ClBUam9ackJ3K29lNUxqdXRhWkVxOUV5c1c5Zm9MV3RGNWlqQUlFNjRtYlM4Ylc3UTBZNHBrb1NWbTV4bDh2bVIKZWlXK3V5Q1RuYWtDY2lLRkp6Um1aSERIU0xnekVDVERQejEzaVFJREFRQUJBb0lCQVFDT3FBc1Z4Qy9Ldm1kbgpldXJ3MTc4NzZCRHlIdzNXNUpMRUlRNENkNGtBUEp6cFpGald0OC9kNFY0T1NGYUJyd3RvVFpic21HYmZBYnhiCkVIcTlrd1hHeU1KSncycSs1dklHVDVHT2hmdktCTGlib0JHSnRHWWtBemQ5bWw4NU5sRDA2STdWNkNOR3BwcW4KMWZzRjVubUh0bEF1aGV3Qm8wcXBJSzk5M1RYMWNGVmFmZ3NPM0FVeDAybnlUV0FNS25sbExBZG5NZFVSZ2tnNgp4Mi9VT0puREFjcUJnYVYzTXdqdTBtMHVyRzBhVkg5RTNXbk5PKzNlQzNHcUo3blcwdklWYkIxcG03clk0bzFwCnRJaWI1TnluQ3RZclVyQTN2STZ1ZjJPSEM2dE02M0RJL3RFQU1vZlJmTjJvaWlqZjBjQnRYcy9QVXNQSEczdngKRHp0VW1hWUJBb0dCQU5nRDJOLzNvMXZrWitlWXVuYXF0Y2NMWE9BTEZjV2xwUmJDN3A4blNabVY5eFFOUmsrdQpJUndjN0F1K1p0SDFrb0xKSlFXMitLV3JMZ2QySGVQVmc0UktJY3J1bVVkNm5PQUpKbGpzMlRLaEZUZGtFZkFlCm9xNS9saHpHWHZZb2RoT2dDdFNreVZTaG55V2xUSXBHL0twdlpVV25WTlBaWSs3djcwdGN0ZGZoQW9HQkFPVVEKZ3hEWEtGazZlNy9oMEJHMkp4aUtvTGsyWXV6MnZVWmNRcDdkWkJzSjgvRTVPcGFhZTg1SHJBWnE3MDhzbkc0VgpyM1lNN1NRT214dlRMaDk5K1lURzZUbmRVci83ZHExWGNCR2JScGhJbm5LNmNUc0pON1U4Uk9oM21QK1IybUxGClZwRVBEVmdINDI1Q1ZLWnZucEN6Zy8waE92aE9BQ3c0eXJIUllIU3BBb0dBQ2J5U3AvVzNqVXJNVENvY0xZRWcKVkdwMHN6eU1ySzM4dFB2d1dZZ2h6eVJ0VUtBUWpVTGlCeXhlajJEenJYOE9MWXIzZWp4M0ZMQ1VrSTJJWjE2VwpZUDRlYTlFNVkzbHBYTWZNekxGUVVQSGx6T3RieTZEMTREdXIvbndLaDdubktKZE1KYTJQelpyRFc2VUp3Q25XCjlhK3p0dUlGOXM2VHJJOXdEOHVML3NFQ2dZQmowYms3eW5iancwK1FBNGhYWDRoVDhuMHRtTnl0Skt6QWo0M2MKaXQrSHhPT1A5LzluQjdUeDVGdTdoRGY2eVpiMWhlK3JRdURJT0xFeEErcnlnRVFPcjF1TkFyeC91c1l4cll2QgpzR2VvRHVVMVc3ZmlJUmNzbkRIdkY4Y05mL0twM2hMbUxhZ0Q5NVFOUlV4OEp1SHpicmNTeEx0YzN5akdISTEvCnhaMEIyUUtCZ0FFK1VzSlFPcmYzcWJiMGNRMmFWM1lwc1RqeTE5dEQrWHdTL0l2a0p4UW01dktjNDZVaEJ1akEKWWVWVS94d3pudmZWYjRMQjdUMERWOVExcUZDaUtPaHlyQjgyRHBLRWswZElpOEdZTk5IMW0vbWVrMFVDQjBkKwpqdXBKQVNDeUVBQTJ1b0hwNDl2OEh6VzZHeFFUNU9ZLzFxM1p5QTZWaGc4UEFObXZBYnBvCi0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg== #11 11.35 --- #11 11.35 apiVersion: v1 #11 11.35 kind: Secret #11 11.35 metadata: #11 11.35 name: secret-aux-ingress-cert #11 11.35 namespace: ricaux #11 11.35 data: #11 11.35 tls.crt: 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 #11 11.35 tls.key: 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 #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/docker-credential/templates/secrets-docker-reg.yaml #11 11.35 ################################################################################ #11 11.35 # Copyright (c) 2019 AT&T Intellectual Property. # #11 11.35 # # #11 11.35 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 11.35 # you may not use this file except in compliance with the License. # #11 11.35 # You may obtain a copy of the License at # #11 11.35 # # #11 11.35 # http://www.apache.org/licenses/LICENSE-2.0 # #11 11.35 # # #11 11.35 # Unless required by applicable law or agreed to in writing, software # #11 11.35 # distributed under the License is distributed on an "AS IS" BASIS, # #11 11.35 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 11.35 # See the License for the specific language governing permissions and # #11 11.35 # limitations under the License. # #11 11.35 ################################################################################ #11 11.35 #11 11.35 #11 11.35 #11 11.35 --- #11 11.35 apiVersion: v1 #11 11.35 kind: Secret #11 11.35 metadata: #11 11.35 name: secret-nexus3-o-ran-sc-org-10002 #11 11.35 namespace: ricaux #11 11.35 data: #11 11.35 .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDAyIjp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= #11 11.35 type: kubernetes.io/dockercfg #11 11.35 --- #11 11.35 apiVersion: v1 #11 11.35 kind: Secret #11 11.35 metadata: #11 11.35 name: secret-nexus3-o-ran-sc-org-10004 #11 11.35 namespace: ricaux #11 11.35 data: #11 11.35 .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDA0Ijp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= #11 11.35 type: kubernetes.io/dockercfg #11 11.35 --- #11 11.35 apiVersion: v1 #11 11.35 kind: Secret #11 11.35 metadata: #11 11.35 name: secret-nexus3-o-ran-sc-org-10002 #11 11.35 namespace: ricinfra #11 11.35 data: #11 11.35 .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDAyIjp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= #11 11.35 type: kubernetes.io/dockercfg #11 11.35 --- #11 11.35 apiVersion: v1 #11 11.35 kind: Secret #11 11.35 metadata: #11 11.35 name: secret-nexus3-o-ran-sc-org-10004 #11 11.35 namespace: ricinfra #11 11.35 data: #11 11.35 .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDA0Ijp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= #11 11.35 type: kubernetes.io/dockercfg #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/config-custom-server-blocks.yaml #11 11.35 apiVersion: v1 #11 11.35 kind: ConfigMap #11 11.35 metadata: #11 11.35 name: release-name-kong-default-custom-server-blocks #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 data: #11 11.35 servers.conf: | #11 11.35 # Prometheus metrics and health-checking server #11 11.35 server { #11 11.35 server_name kong_prometheus_exporter; #11 11.35 listen 0.0.0.0:9542; # can be any other port as well #11 11.35 access_log off; #11 11.35 location /status { #11 11.35 default_type text/plain; #11 11.35 return 200; #11 11.35 } #11 11.35 location /metrics { #11 11.35 default_type text/plain; #11 11.35 content_by_lua_block { #11 11.35 local prometheus = require "kong.plugins.prometheus.exporter" #11 11.35 prometheus:collect() #11 11.35 } #11 11.35 } #11 11.35 location /nginx_status { #11 11.35 internal; #11 11.35 access_log off; #11 11.35 stub_status; #11 11.35 } #11 11.35 } #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/controller-service-account.yaml #11 11.35 apiVersion: v1 #11 11.35 kind: ServiceAccount #11 11.35 metadata: #11 11.35 name: release-name-kong #11 11.35 namespace: #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/migrations-pre-upgrade.yaml #11 11.35 #11 11.35 #11 11.35 --- #11 11.35 apiVersion: v1 #11 11.35 kind: ServiceAccount #11 11.35 metadata: #11 11.35 name: release-name-kong #11 11.35 namespace: #11 11.35 annotations: #11 11.35 "helm.sh/hook": pre-upgrade #11 11.35 "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/custom-resource-definitions.yaml #11 11.35 apiVersion: apiextensions.k8s.io/v1beta1 #11 11.35 kind: CustomResourceDefinition #11 11.35 metadata: #11 11.35 name: kongconsumers.configuration.konghq.com #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 spec: #11 11.35 group: configuration.konghq.com #11 11.35 version: v1 #11 11.35 scope: Namespaced #11 11.35 names: #11 11.35 kind: KongConsumer #11 11.35 plural: kongconsumers #11 11.35 shortNames: #11 11.35 - kc #11 11.35 additionalPrinterColumns: #11 11.35 - name: Username #11 11.35 type: string #11 11.35 description: Username of a Kong Consumer #11 11.35 JSONPath: .username #11 11.35 - name: Age #11 11.35 type: date #11 11.35 description: Age #11 11.35 JSONPath: .metadata.creationTimestamp #11 11.35 validation: #11 11.35 openAPIV3Schema: #11 11.35 properties: #11 11.35 username: #11 11.35 type: string #11 11.35 custom_id: #11 11.35 type: string #11 11.35 credentials: #11 11.35 type: array #11 11.35 items: #11 11.35 type: string #11 11.35 --- #11 11.35 apiVersion: apiextensions.k8s.io/v1beta1 #11 11.35 kind: CustomResourceDefinition #11 11.35 metadata: #11 11.35 name: kongcredentials.configuration.konghq.com #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 spec: #11 11.35 group: configuration.konghq.com #11 11.35 version: v1 #11 11.35 scope: Namespaced #11 11.35 names: #11 11.35 kind: KongCredential #11 11.35 plural: kongcredentials #11 11.35 additionalPrinterColumns: #11 11.35 - name: Credential-type #11 11.35 type: string #11 11.35 description: Type of credential #11 11.35 JSONPath: .type #11 11.35 - name: Age #11 11.35 type: date #11 11.35 description: Age #11 11.35 JSONPath: .metadata.creationTimestamp #11 11.35 - name: Consumer-Ref #11 11.35 type: string #11 11.35 description: Owner of the credential #11 11.35 JSONPath: .consumerRef #11 11.35 validation: #11 11.35 openAPIV3Schema: #11 11.35 required: #11 11.35 - consumerRef #11 11.35 - type #11 11.35 properties: #11 11.35 consumerRef: #11 11.35 type: string #11 11.35 type: #11 11.35 type: string #11 11.35 --- #11 11.35 apiVersion: apiextensions.k8s.io/v1beta1 #11 11.35 kind: CustomResourceDefinition #11 11.35 metadata: #11 11.35 name: kongplugins.configuration.konghq.com #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 spec: #11 11.35 group: configuration.konghq.com #11 11.35 version: v1 #11 11.35 scope: Namespaced #11 11.35 names: #11 11.35 kind: KongPlugin #11 11.35 plural: kongplugins #11 11.35 shortNames: #11 11.35 - kp #11 11.35 additionalPrinterColumns: #11 11.35 - name: Plugin-Type #11 11.35 type: string #11 11.35 description: Name of the plugin #11 11.35 JSONPath: .plugin #11 11.35 - name: Age #11 11.35 type: date #11 11.35 description: Age #11 11.35 JSONPath: .metadata.creationTimestamp #11 11.35 - name: Disabled #11 11.35 type: boolean #11 11.35 description: Indicates if the plugin is disabled #11 11.35 JSONPath: .disabled #11 11.35 priority: 1 #11 11.35 - name: Config #11 11.35 type: string #11 11.35 description: Configuration of the plugin #11 11.35 JSONPath: .config #11 11.35 priority: 1 #11 11.35 validation: #11 11.35 openAPIV3Schema: #11 11.35 required: #11 11.35 - plugin #11 11.35 properties: #11 11.35 plugin: #11 11.35 type: string #11 11.35 disabled: #11 11.35 type: boolean #11 11.35 config: #11 11.35 type: object #11 11.35 run_on: #11 11.35 type: string #11 11.35 enum: #11 11.35 - first #11 11.35 - second #11 11.35 - all #11 11.35 protocols: #11 11.35 type: array #11 11.35 items: #11 11.35 type: string #11 11.35 enum: #11 11.35 - http #11 11.35 - https #11 11.35 - tcp #11 11.35 - tls #11 11.35 - grpc #11 11.35 - grpcs #11 11.35 --- #11 11.35 apiVersion: apiextensions.k8s.io/v1beta1 #11 11.35 kind: CustomResourceDefinition #11 11.35 metadata: #11 11.35 name: kongingresses.configuration.konghq.com #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 spec: #11 11.35 group: configuration.konghq.com #11 11.35 version: v1 #11 11.35 scope: Namespaced #11 11.35 names: #11 11.35 kind: KongIngress #11 11.35 plural: kongingresses #11 11.35 shortNames: #11 11.35 - ki #11 11.35 validation: #11 11.35 openAPIV3Schema: #11 11.35 properties: #11 11.35 route: #11 11.35 properties: #11 11.35 methods: #11 11.35 type: array #11 11.35 items: #11 11.35 type: string #11 11.35 headers: #11 11.35 type: object #11 11.35 additionalProperties: #11 11.35 type: array #11 11.35 items: #11 11.35 type: string #11 11.35 regex_priority: #11 11.35 type: integer #11 11.35 strip_path: #11 11.35 type: boolean #11 11.35 preserve_host: #11 11.35 type: boolean #11 11.35 protocols: #11 11.35 type: array #11 11.35 items: #11 11.35 type: string #11 11.35 enum: #11 11.35 - http #11 11.35 - https #11 11.35 - grpc #11 11.35 - grpcs #11 11.35 https_redirect_status_code: #11 11.35 type: integer #11 11.35 proxy: #11 11.35 type: object #11 11.35 properties: #11 11.35 protocol: #11 11.35 type: string #11 11.35 enum: #11 11.35 - http #11 11.35 - https #11 11.35 - grpc #11 11.35 - grpcs #11 11.35 path: #11 11.35 type: string #11 11.35 pattern: ^/.*$ #11 11.35 retries: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 connect_timeout: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 read_timeout: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 write_timeout: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 upstream: #11 11.35 type: object #11 11.35 properties: #11 11.35 algorithm: #11 11.35 type: string #11 11.35 enum: #11 11.35 - "round-robin" #11 11.35 - "consistent-hashing" #11 11.35 - "least-connections" #11 11.35 host_header: #11 11.35 type: string #11 11.35 hash_on: #11 11.35 type: string #11 11.35 hash_on_cookie: #11 11.35 type: string #11 11.35 hash_on_cookie_path: #11 11.35 type: string #11 11.35 hash_on_header: #11 11.35 type: string #11 11.35 hash_fallback_header: #11 11.35 type: string #11 11.35 hash_fallback: #11 11.35 type: string #11 11.35 slots: #11 11.35 type: integer #11 11.35 minimum: 10 #11 11.35 healthchecks: #11 11.35 type: object #11 11.35 properties: #11 11.35 active: #11 11.35 type: object #11 11.35 properties: #11 11.35 concurrency: #11 11.35 type: integer #11 11.35 minimum: 1 #11 11.35 timeout: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 http_path: #11 11.35 type: string #11 11.35 pattern: ^/.*$ #11 11.35 healthy: &healthy #11 11.35 type: object #11 11.35 properties: #11 11.35 http_statuses: #11 11.35 type: array #11 11.35 items: #11 11.35 type: integer #11 11.35 interval: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 successes: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 unhealthy: &unhealthy #11 11.35 type: object #11 11.35 properties: #11 11.35 http_failures: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 http_statuses: #11 11.35 type: array #11 11.35 items: #11 11.35 type: integer #11 11.35 interval: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 tcp_failures: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 timeout: #11 11.35 type: integer #11 11.35 minimum: 0 #11 11.35 passive: #11 11.35 type: object #11 11.35 properties: #11 11.35 healthy: *healthy #11 11.35 unhealthy: *unhealthy #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/controller-rbac-resources.yaml #11 11.35 apiVersion: rbac.authorization.k8s.io/v1beta1 #11 11.35 kind: Role #11 11.35 metadata: #11 11.35 name: release-name-kong #11 11.35 namespace: #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 rules: #11 11.35 - apiGroups: #11 11.35 - "" #11 11.35 resources: #11 11.35 - configmaps #11 11.35 - pods #11 11.35 - secrets #11 11.35 - namespaces #11 11.35 verbs: #11 11.35 - get #11 11.35 - apiGroups: #11 11.35 - "" #11 11.35 resources: #11 11.35 - configmaps #11 11.35 resourceNames: #11 11.35 # Defaults to "-" #11 11.35 # Here: "-" #11 11.35 # This has to be adapted if you change either parameter #11 11.35 # when launching the nginx-ingress-controller. #11 11.35 - "kong-ingress-controller-leader-kong-kong" #11 11.35 verbs: #11 11.35 - get #11 11.35 - update #11 11.35 - apiGroups: #11 11.35 - "" #11 11.35 resources: #11 11.35 - configmaps #11 11.35 verbs: #11 11.35 - create #11 11.35 - apiGroups: #11 11.35 - "" #11 11.35 resources: #11 11.35 - endpoints #11 11.35 verbs: #11 11.35 - get #11 11.35 --- #11 11.35 apiVersion: rbac.authorization.k8s.io/v1beta1 #11 11.35 kind: RoleBinding #11 11.35 metadata: #11 11.35 name: release-name-kong #11 11.35 namespace: default #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 roleRef: #11 11.35 apiGroup: rbac.authorization.k8s.io #11 11.35 kind: Role #11 11.35 name: release-name-kong #11 11.35 subjects: #11 11.35 - kind: ServiceAccount #11 11.35 name: release-name-kong #11 11.35 namespace: default #11 11.35 --- #11 11.35 apiVersion: rbac.authorization.k8s.io/v1beta1 #11 11.35 kind: ClusterRole #11 11.35 metadata: #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 name: release-name-kong #11 11.35 rules: #11 11.35 - apiGroups: #11 11.35 - "" #11 11.35 resources: #11 11.35 - endpoints #11 11.35 - nodes #11 11.35 - pods #11 11.35 - secrets #11 11.35 verbs: #11 11.35 - list #11 11.35 - watch #11 11.35 - apiGroups: #11 11.35 - "" #11 11.35 resources: #11 11.35 - nodes #11 11.35 verbs: #11 11.35 - get #11 11.35 - apiGroups: #11 11.35 - "" #11 11.35 resources: #11 11.35 - services #11 11.35 verbs: #11 11.35 - get #11 11.35 - list #11 11.35 - watch #11 11.35 - apiGroups: #11 11.35 - "extensions" #11 11.35 - "networking.k8s.io" #11 11.35 resources: #11 11.35 - ingresses #11 11.35 verbs: #11 11.35 - get #11 11.35 - list #11 11.35 - watch #11 11.35 - apiGroups: #11 11.35 - "" #11 11.35 resources: #11 11.35 - events #11 11.35 verbs: #11 11.35 - create #11 11.35 - patch #11 11.35 - apiGroups: #11 11.35 - "extensions" #11 11.35 - "networking.k8s.io" #11 11.35 resources: #11 11.35 - ingresses/status #11 11.35 verbs: #11 11.35 - update #11 11.35 - apiGroups: #11 11.35 - "configuration.konghq.com" #11 11.35 resources: #11 11.35 - kongplugins #11 11.35 - kongcredentials #11 11.35 - kongconsumers #11 11.35 - kongingresses #11 11.35 verbs: #11 11.35 - get #11 11.35 - list #11 11.35 - watch #11 11.35 --- #11 11.35 apiVersion: rbac.authorization.k8s.io/v1beta1 #11 11.35 kind: ClusterRoleBinding #11 11.35 metadata: #11 11.35 name: release-name-kong #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 roleRef: #11 11.35 apiGroup: rbac.authorization.k8s.io #11 11.35 kind: ClusterRole #11 11.35 name: release-name-kong #11 11.35 subjects: #11 11.35 - kind: ServiceAccount #11 11.35 name: release-name-kong #11 11.35 namespace: default #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/service-kong-proxy.yaml #11 11.35 apiVersion: v1 #11 11.35 kind: Service #11 11.35 metadata: #11 11.35 name: release-name-kong-proxy #11 11.35 annotations: #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 spec: #11 11.35 type: NodePort #11 11.35 externalIPs: #11 11.35 ports: #11 11.35 - name: kong-proxy #11 11.35 port: 80 #11 11.35 targetPort: 32080 #11 11.35 nodePort: 32080 #11 11.35 protocol: TCP #11 11.35 - name: kong-proxy-tls #11 11.35 port: 443 #11 11.35 targetPort: 32443 #11 11.35 nodePort: 32443 #11 11.35 protocol: TCP #11 11.35 selector: #11 11.35 app.kubernetes.io/name: kong #11 11.35 app.kubernetes.io/component: app #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/deployment.yaml #11 11.35 apiVersion: apps/v1 #11 11.35 kind: Deployment #11 11.35 metadata: #11 11.35 name: release-name-kong #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 app.kubernetes.io/component: app #11 11.35 spec: #11 11.35 replicas: 1 #11 11.35 selector: #11 11.35 matchLabels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 app.kubernetes.io/component: app #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 #11 11.35 template: #11 11.35 metadata: #11 11.35 annotations: #11 11.35 labels: #11 11.35 app.kubernetes.io/name: kong #11 11.35 helm.sh/chart: kong-0.36.6 #11 11.35 app.kubernetes.io/instance: "release-name" #11 11.35 app.kubernetes.io/managed-by: "Tiller" #11 11.35 app.kubernetes.io/version: "1.4" #11 11.35 app.kubernetes.io/component: app #11 11.35 spec: #11 11.35 serviceAccountName: release-name-kong #11 11.35 #11 11.35 containers: #11 11.35 - name: ingress-controller #11 11.35 args: #11 11.35 - /kong-ingress-controller #11 11.35 # Service from were we extract the IP address/es to use in Ingress status #11 11.35 - --publish-service=default/release-name-kong-proxy #11 11.35 # Set the ingress class #11 11.35 - --ingress-class=kong #11 11.35 - --election-id=kong-ingress-controller-leader-kong #11 11.35 # the kong URL points to the kong admin api server #11 11.35 - --kong-url=https://localhost:8444 #11 11.35 - --admin-tls-skip-verify # TODO make this configurable #11 11.35 env: #11 11.35 - name: POD_NAME #11 11.35 valueFrom: #11 11.35 fieldRef: #11 11.35 apiVersion: v1 #11 11.35 fieldPath: metadata.name #11 11.35 - name: POD_NAMESPACE #11 11.35 valueFrom: #11 11.35 fieldRef: #11 11.35 apiVersion: v1 #11 11.35 fieldPath: metadata.namespace #11 11.35 image: "kong-docker-kubernetes-ingress-controller.bintray.io/kong-ingress-controller:0.7.0" #11 11.35 imagePullPolicy: IfNotPresent #11 11.35 readinessProbe: #11 11.35 failureThreshold: 3 #11 11.35 httpGet: #11 11.35 path: /healthz #11 11.35 port: 10254 #11 11.35 scheme: HTTP #11 11.35 initialDelaySeconds: 5 #11 11.35 periodSeconds: 10 #11 11.35 successThreshold: 1 #11 11.35 timeoutSeconds: 5 #11 11.35 #11 11.35 livenessProbe: #11 11.35 failureThreshold: 3 #11 11.35 httpGet: #11 11.35 path: /healthz #11 11.35 port: 10254 #11 11.35 scheme: HTTP #11 11.35 initialDelaySeconds: 5 #11 11.35 periodSeconds: 10 #11 11.35 successThreshold: 1 #11 11.35 timeoutSeconds: 5 #11 11.35 #11 11.35 resources: #11 11.35 {} #11 11.35 #11 11.35 #11 11.35 - name: "proxy" #11 11.35 image: "kong:1.4" #11 11.35 imagePullPolicy: IfNotPresent #11 11.35 env: #11 11.35 - name: KONG_LUA_PACKAGE_PATH #11 11.35 value: "/opt/?.lua;;" #11 11.35 - name: KONG_ADMIN_LISTEN #11 11.35 value: "0.0.0.0:8444 ssl" #11 11.35 - name: KONG_PROXY_LISTEN #11 11.35 value: 0.0.0.0:32080,0.0.0.0:32443 ssl #11 11.35 - name: KONG_NGINX_DAEMON #11 11.35 value: "off" #11 11.35 - name: KONG_NGINX_HTTP_INCLUDE #11 11.35 value: /kong/servers.conf #11 11.35 - name: KONG_PLUGINS #11 11.35 value: bundled #11 11.35 - name: KONG_ADMIN_ACCESS_LOG #11 11.35 value: "/dev/stdout" #11 11.35 - name: KONG_ADMIN_ERROR_LOG #11 11.35 value: "/dev/stderr" #11 11.35 - name: KONG_ADMIN_GUI_ACCESS_LOG #11 11.35 value: "/dev/stdout" #11 11.35 - name: KONG_ADMIN_GUI_ERROR_LOG #11 11.35 value: "/dev/stderr" #11 11.35 - name: KONG_DATABASE #11 11.35 value: "off" #11 11.35 - name: KONG_NGINX_WORKER_PROCESSES #11 11.35 value: "1" #11 11.35 - name: KONG_PORTAL_API_ACCESS_LOG #11 11.35 value: "/dev/stdout" #11 11.35 - name: KONG_PORTAL_API_ERROR_LOG #11 11.35 value: "/dev/stderr" #11 11.35 - name: KONG_PREFIX #11 11.35 value: "/kong_prefix/" #11 11.35 - name: KONG_PROXY_ACCESS_LOG #11 11.35 value: "/dev/stdout" #11 11.35 - name: KONG_PROXY_ERROR_LOG #11 11.35 value: "/dev/stderr" #11 11.35 lifecycle: #11 11.35 preStop: #11 11.35 exec: #11 11.35 command: [ "/bin/sh", "-c", "kong quit" ] #11 11.35 ports: #11 11.35 - name: admin #11 11.35 containerPort: 8444 #11 11.35 protocol: TCP #11 11.35 - name: proxy #11 11.35 containerPort: 32080 #11 11.35 protocol: TCP #11 11.35 - name: proxy-tls #11 11.35 containerPort: 32443 #11 11.35 protocol: TCP #11 11.35 - name: metrics #11 11.35 containerPort: 9542 #11 11.35 protocol: TCP #11 11.35 volumeMounts: #11 11.35 - name: release-name-kong-prefix-dir #11 11.35 mountPath: /kong_prefix/ #11 11.35 - name: release-name-kong-tmp #11 11.35 mountPath: /tmp #11 11.35 - name: custom-nginx-template-volume #11 11.35 mountPath: /kong #11 11.35 readinessProbe: #11 11.35 failureThreshold: 3 #11 11.35 httpGet: #11 11.35 path: /status #11 11.35 port: metrics #11 11.35 scheme: HTTP #11 11.35 initialDelaySeconds: 5 #11 11.35 periodSeconds: 10 #11 11.35 successThreshold: 1 #11 11.35 timeoutSeconds: 5 #11 11.35 #11 11.35 livenessProbe: #11 11.35 failureThreshold: 3 #11 11.35 httpGet: #11 11.35 path: /status #11 11.35 port: metrics #11 11.35 scheme: HTTP #11 11.35 initialDelaySeconds: 5 #11 11.35 periodSeconds: 10 #11 11.35 successThreshold: 1 #11 11.35 timeoutSeconds: 5 #11 11.35 #11 11.35 resources: #11 11.35 {} #11 11.35 #11 11.35 securityContext: #11 11.35 runAsUser: 1000 #11 11.35 #11 11.35 tolerations: #11 11.35 [] #11 11.35 #11 11.35 volumes: #11 11.35 - name: release-name-kong-prefix-dir #11 11.35 emptyDir: {} #11 11.35 - name: release-name-kong-tmp #11 11.35 emptyDir: {} #11 11.35 - name: custom-nginx-template-volume #11 11.35 configMap: #11 11.35 name: release-name-kong-default-custom-server-blocks #11 11.35 --- #11 11.35 # Source: infrastructure/charts/extsvcaux/templates/services-plt.yaml #11 11.35 ################################################################################ #11 11.35 # Copyright (c) 2019 AT&T Intellectual Property. # #11 11.35 # Copyright (c) 2019 Nokia. # #11 11.35 # # #11 11.35 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 11.35 # you may not use this file except in compliance with the License. # #11 11.35 # You may obtain a copy of the License at # #11 11.35 # # #11 11.35 # http://www.apache.org/licenses/LICENSE-2.0 # #11 11.35 # # #11 11.35 # Unless required by applicable law or agreed to in writing, software # #11 11.35 # distributed under the License is distributed on an "AS IS" BASIS, # #11 11.35 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 11.35 # See the License for the specific language governing permissions and # #11 11.35 # limitations under the License. # #11 11.35 ################################################################################ #11 11.35 --- #11 11.35 kind: "Service" #11 11.35 apiVersion: "v1" #11 11.35 metadata: #11 11.35 name: ric-entry #11 11.35 namespace: ricaux #11 11.35 spec: #11 11.35 ports: #11 11.35 - name: ric-entry-http-ingress-port #11 11.35 protocol: "TCP" #11 11.35 port: 80 #11 11.35 - name: ric-entry-https-ingress-port #11 11.35 protocol: "TCP" #11 11.35 port: 443 #11 11.35 --- #11 11.35 kind: "Endpoints" #11 11.35 apiVersion: "v1" #11 11.35 metadata: #11 11.35 # match with the selector-less service #11 11.35 name: ric-entry #11 11.35 namespace: ricaux #11 11.35 subsets: #11 11.35 - addresses: #11 11.35 - ip: "10.0.0.1" #11 11.35 ports: #11 11.35 - port: 32080 #11 11.35 name: ric-entry-http-ingress-port #11 11.35 - port: 32443 #11 11.35 name: ric-entry-https-ingress-port #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/danm-networks/templates/danm.yaml #11 11.35 # Copyright (c) 2019 AT&T Intellectual Property. # #11 11.35 # # #11 11.35 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 11.35 # you may not use this file except in compliance with the License. # #11 11.35 # You may obtain a copy of the License at # #11 11.35 # # #11 11.35 # http://www.apache.org/licenses/LICENSE-2.0 # #11 11.35 # # #11 11.35 # Unless required by applicable law or agreed to in writing, software # #11 11.35 # distributed under the License is distributed on an "AS IS" BASIS, # #11 11.35 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 11.35 # See the License for the specific language governing permissions and # #11 11.35 # limitations under the License. # #11 11.35 ################################################################################ #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/admission-webhook.yaml #11 11.35 #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/config-dbless.yaml #11 11.35 #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/ingress-admin.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/ingress-manager.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/ingress-portal-api.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/ingress-portal.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/ingress-proxy.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/migrations-post-upgrade.yaml #11 11.35 #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/migrations.yaml #11 11.35 #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/pdb.yaml #11 11.35 #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/psp.yaml #11 11.35 #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/service-kong-admin.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/service-kong-manager.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/service-kong-portal-api.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/service-kong-portal.yaml #11 11.35 #11 11.35 --- #11 11.35 # Source: infrastructure/charts/kong/templates/servicemonitor.yaml #11 11.35 #11 11.35 #11 12.36 *************************************************************************************************************** #11 12.36 Update chart dependency for directory /tmp/it-dep/bin/../ric-aux/helm/message-router #11 12.41 Hang tight while we grab the latest from your chart repositories... #11 12.41 ...Successfully got an update from the "local" chart repository #11 12.41 Update Complete. #11 12.42 Saving 1 charts #11 12.42 Downloading aux-common from repo http://127.0.0.1:8879/charts #11 12.42 Deleting outdated charts #11 12.52 *************************************************************************************************************** #11 12.52 ==> Linting /tmp/it-dep/bin/../ric-aux/helm/message-router #11 12.52 [INFO] Chart.yaml: icon is recommended #11 12.52 #11 12.52 1 chart(s) linted, no failures #11 12.52 *************************************************************************************************************** #11 12.62 *************************************************************************************************************** #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-kafka/templates/poddisruptionbudget.yaml #11 12.62 # Copyright © 2018 AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 apiVersion: policy/v1beta1 #11 12.62 kind: PodDisruptionBudget #11 12.62 metadata: #11 12.62 name: release-name-message-router-kafka-pdb #11 12.62 labels: #11 12.62 app: message-router-kafka #11 12.62 chart: message-router-kafka-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 spec: #11 12.62 selector: #11 12.62 matchLabels: #11 12.62 app: message-router-kafka #11 12.62 maxUnavailable: 1 #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-zookeeper/templates/poddisruptionbudget.yaml #11 12.62 # Copyright © 2018 AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 apiVersion: policy/v1beta1 #11 12.62 kind: PodDisruptionBudget #11 12.62 metadata: #11 12.62 name: release-name-message-router-zookeeper-pdb #11 12.62 labels: #11 12.62 app: message-router-zookeeper #11 12.62 chart: message-router-zookeeper-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 spec: #11 12.62 selector: #11 12.62 matchLabels: #11 12.62 app: message-router-zookeeper #11 12.62 maxUnavailable: 1 #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/templates/secrets.yaml #11 12.62 # Copyright © 2017 Amdocs, Bell Canada #11 12.62 # Modifications Copyright © 2018 AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 apiVersion: v1 #11 12.62 kind: Secret #11 12.62 metadata: #11 12.62 name: release-name-message-router-secret #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router #11 12.62 chart: message-router-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 data: #11 12.62 mykey: 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 #11 12.62 #11 12.62 type: Opaque #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/templates/configmap.yaml #11 12.62 # Copyright © 2017 Amdocs, Bell Canada #11 12.62 # Modifications Copyright © 2018 AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 apiVersion: v1 #11 12.62 kind: ConfigMap #11 12.62 metadata: #11 12.62 name: release-name-message-router-msgrtrapi-prop-configmap #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router #11 12.62 chart: message-router-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 data: #11 12.62 MsgRtrApi.properties: "# LICENSE_START=======================================================\n# #11 12.62 \ org.onap.dmaap\n# ================================================================================\n# #11 12.62 \ Copyright © 2017 AT&T Intellectual Property. All rights reserved.\n# ================================================================================\n# #11 12.62 \ Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may #11 12.62 not use this file except in compliance with the License.\n# You may obtain a copy #11 12.62 of the License at\n# http://www.apache.org/licenses/LICENSE-2.0\n# \n# Unless #11 12.62 required by applicable law or agreed to in writing, software\n# distributed under #11 12.62 the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS #11 12.62 OF ANY KIND, either express or implied.\n# See the License for the specific language #11 12.62 governing permissions and\n# limitations under the License.\n# ============LICENSE_END=========================================================\n#\n# #11 12.62 \ ECOMP is a trademark and service mark of AT&T Intellectual Property.\n# \n###############################################################################\n###############################################################################\n##\n## #11 12.62 Cambria API Server config\n##\n##\t- Default values are shown as commented settings.\n##\n\n###############################################################################\n##\n## #11 12.62 HTTP service\n##\n##\t\t- 3904 is standard as of 7/29/14.\n#\n## Zookeeper Connection\n##\n##\tBoth #11 12.62 Cambria and Kafka make use of Zookeeper.\n##\n#config.zk.servers=172.18.1.1\nconfig.zk.servers=message-router-zookeeper:2181\n#config.zk.root=/fe3c/cambria/config\n\n\n###############################################################################\n##\n## #11 12.62 Kafka Connection\n##\n##\tItems below are passed through to Kafka's producer and #11 12.62 consumer\n##\tconfigurations (after removing \"kafka.\")\n##\tif you want to change #11 12.62 request.required.acks it can take this one value\n#kafka.metadata.broker.list=localhost:9092,localhost:9093\nkafka.metadata.broker.list=message-router-kafka:9092\n##kafka.request.required.acks=-1\n#kafka.client.zookeeper=${config.zk.servers}\nconsumer.timeout.ms=100\nzookeeper.connection.timeout.ms=6000\nzookeeper.session.timeout.ms=20000\nzookeeper.sync.time.ms=2000\nauto.commit.interval.ms=1000\nfetch.message.max.bytes #11 12.62 =1000000\nauto.commit.enable=false\n\n#(backoff*retries > zksessiontimeout)\nkafka.rebalance.backoff.ms=10000\nkafka.rebalance.max.retries=6\n\n\n###############################################################################\n##\n##\tSecured #11 12.62 Config\n##\n##\tSome data stored in the config system is sensitive -- API keys and #11 12.62 secrets,\n##\tfor example. to protect it, we use an encryption layer for this section\n##\tof #11 12.62 the config.\n##\n## The key is a base64 encode AES key. This must be created/configured #11 12.62 for\n## each installation.\n#cambria.secureConfig.key=\n##\n## The initialization #11 12.62 vector is a 16 byte value specific to the secured store.\n## This must be created/configured #11 12.62 for each installation.\n#cambria.secureConfig.iv=\n\n## Southfield Sandbox\ncambria.secureConfig.key=b/7ouTn9FfEw2PQwL0ov/Q==\ncambria.secureConfig.iv=wR9xP5k5vbz/xD0LmtqQLw==\nauthentication.adminSecret=fe3cCompound\n#cambria.secureConfig.key[pc569h]=YT3XPyxEmKCTLI2NK+Sjbw==\n#cambria.secureConfig.iv[pc569h]=rMm2jhR3yVnU+u2V9Ugu3Q==\n\n\n###############################################################################\n##\n## #11 12.62 Consumer Caching\n##\n##\tKafka expects live connections from the consumer to the #11 12.62 broker, which\n##\tobviously doesn't work over connectionless HTTP requests. The #11 12.62 Cambria\n##\tserver proxies HTTP requests into Kafka consumer sessions that are #11 12.62 kept\n##\taround for later re-use. Not doing so is costly for setup per request,\n##\twhich #11 12.62 would substantially impact a high volume consumer's performance.\n##\n##\tThis complicates #11 12.62 Cambria server failover, because we often need server\n##\tA to close its connection #11 12.62 before server B brings up the replacement. \n##\n\n## The consumer cache is normally #11 12.62 enabled.\n#cambria.consumer.cache.enabled=true\n\n## Cached consumers are cleaned #11 12.62 up after a period of disuse. The server inspects\n## consumers every sweepFreqSeconds #11 12.62 and will clean up any connections that are\n## dormant for touchFreqMs.\n#cambria.consumer.cache.sweepFreqSeconds=15\ncambria.consumer.cache.touchFreqMs=120000\n##stickforallconsumerrequests=false\n## #11 12.62 The cache is managed through ZK. The default value for the ZK connection\n## string #11 12.62 is the same as config.zk.servers.\n#cambria.consumer.cache.zkConnect=${config.zk.servers}\n\n##\n## #11 12.62 Shared cache information is associated with this node's name. The default\n## name #11 12.62 is the hostname plus the HTTP service port this host runs on. (The\n## hostname #11 12.62 is determined via InetAddress.getLocalHost ().getCanonicalHostName(),\n## which #11 12.62 is not always adequate.) You can set this value explicitly here.\n##\n#cambria.api.node.identifier=\n\n#cambria.rateLimit.maxEmptyPollsPerMinute=30\n#cambria.rateLimitActual.delay.ms=10\n\n###############################################################################\n##\n## #11 12.62 Metrics Reporting\n##\n##\tThis server can report its metrics periodically on a #11 12.62 topic.\n##\n#metrics.send.cambria.enabled=true\n#metrics.send.cambria.topic=cambria.apinode.metrics #11 12.62 \ #msgrtr.apinode.metrics.dmaap \n#metrics.send.cambria.sendEverySeconds=60\n\ncambria.consumer.cache.zkBasePath=/fe3c/cambria/consumerCache\nconsumer.timeout=17\ndefault.partitions=3\ndefault.replicas=3\n##############################################################################\n#100mb\nmaxcontentlength=10000\n\n\n##############################################################################\n#AAF #11 12.62 Properties\nmsgRtr.namespace.aaf=org.onap.dmaap.mr.topic\nmsgRtr.topicfactory.aaf=org.onap.dmaap.mr.topicFactory|:org.onap.dmaap.mr.topic:\nenforced.topic.name.AAF=org.onap.dmaap.mr\nforceAAF=false\ntransidUEBtopicreqd=false\ndefaultNSforUEB=org.onap.dmaap.mr\n##############################################################################\n#Mirror #11 12.62 Maker Agent\n\nmsgRtr.mirrormakeradmin.aaf=org.onap.dmaap.mr.mirrormaker|*|admin\nmsgRtr.mirrormakeruser.aaf=org.onap.dmaap.mr.mirrormaker|*|user\nmsgRtr.mirrormakeruser.aaf.create=org.onap.dmaap.mr.topicFactory|:org.onap.dmaap.mr.topic:\nmsgRtr.mirrormaker.timeout=15000\nmsgRtr.mirrormaker.topic=org.onap.dmaap.mr.mirrormakeragent\nmsgRtr.mirrormaker.consumergroup=mmagentserver\nmsgRtr.mirrormaker.consumerid=1\n\nkafka.max.poll.interval.ms=300000\nkafka.heartbeat.interval.ms=60000\nkafka.session.timeout.ms=240000\nkafka.max.poll.records=1000\n\n" #11 12.62 #11 12.62 --- #11 12.62 apiVersion: v1 #11 12.62 kind: ConfigMap #11 12.62 metadata: #11 12.62 name: release-name-message-router-cadi-prop-configmap #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router #11 12.62 chart: message-router-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 data: #11 12.62 cadi.properties: | #11 12.62 aaf_locate_url=https://aaf-locate:8095 #11 12.62 aaf_url=https://AAF_LOCATE_URL/AAF_NS.service:2.1 #11 12.62 aaf_env=DEV #11 12.62 aaf_lur=org.onap.aaf.cadi.aaf.v2_0.AAFLurPerm #11 12.62 #11 12.62 cadi_truststore=/appl/dmaapMR1/etc/truststoreONAPall.jks #11 12.62 cadi_truststore_password=changeit #11 12.62 #11 12.62 cadi_keyfile=/appl/dmaapMR1/etc/keyfilenew #11 12.62 #11 12.62 cadi_alias=dmaapmr@mr.dmaap.onap.org #11 12.62 cadi_keystore=/appl/dmaapMR1/etc/org.onap.dmaap.mr.p12 #11 12.62 cadi_keystore_password=Messaging for All #11 12.62 cadi_x509_issuers=CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US #11 12.62 #11 12.62 #11 12.62 cadi_loglevel=INFO #11 12.62 cadi_protocols=TLSv1.1,TLSv1.2 #11 12.62 cadi_latitude=37.78187 #11 12.62 cadi_longitude=-122.26147 #11 12.62 #11 12.62 --- #11 12.62 apiVersion: v1 #11 12.62 kind: ConfigMap #11 12.62 metadata: #11 12.62 name: release-name-message-router-dbc-mrclusters #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router #11 12.62 chart: message-router-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 data: #11 12.62 san-francisco.json: | #11 12.62 { #11 12.62 "dcaeLocationName": "san-francisco", #11 12.62 "fqdn": "message-router", #11 12.62 "topicProtocol": "http", #11 12.62 "topicPort": "3904" #11 12.62 } #11 12.62 #11 12.62 --- #11 12.62 apiVersion: v1 #11 12.62 kind: ConfigMap #11 12.62 metadata: #11 12.62 name: release-name-message-router-dbc-topics #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router #11 12.62 chart: message-router-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 data: #11 12.62 PM_MAPPER.json: | #11 12.62 { #11 12.62 "topicName": "PM_MAPPER", #11 12.62 "topicDescription": "The PM Mapper will be publishing perf3gpp VES events to this topic", #11 12.62 "owner": "pm-mapper", #11 12.62 "txenabled": false, #11 12.62 "clients": [{ #11 12.62 "dcaeLocationName": "san-francisco", #11 12.62 "clientIdentity": "dcae@dcae.onap.org", #11 12.62 "action": [ #11 12.62 "pub", #11 12.62 "view" #11 12.62 ] #11 12.62 }] #11 12.62 } #11 12.62 PNF_READY.json: | #11 12.62 { #11 12.62 "topicName": "PNF_READY", #11 12.62 "topicDescription": "This topic will be used to publish the PNF_READY events generated by the PNF REgistration Handler service in the DCAE platform.", #11 12.62 "owner": "PNFRegistrationHandler", #11 12.62 "txenabled": false, #11 12.62 "clients": [ #11 12.62 { #11 12.62 "dcaeLocationName": "san-francisco", #11 12.62 "clientRole": "org.onap.dmaap.mr.PNF_READY.pub", #11 12.62 "action": [ #11 12.62 "pub", #11 12.62 "view" #11 12.62 ] #11 12.62 #11 12.62 } #11 12.62 ] #11 12.62 } #11 12.62 PNF_REGISTRATION.json: | #11 12.62 { #11 12.62 "topicName": "PNF_REGISTRATION", #11 12.62 "topicDescription": "the VES collector will be publishing pnfRegistration events in this topic", #11 12.62 "owner": "VEScollector", #11 12.62 "txenabled": false, #11 12.62 "clients": [ #11 12.62 { #11 12.62 "dcaeLocationName": "san-francisco", #11 12.62 "clientRole": "org.onap.dmaap.mr.PNF_REGISTRATION.sub", #11 12.62 "action": [ #11 12.62 "sub", #11 12.62 "view" #11 12.62 ] #11 12.62 #11 12.62 } #11 12.62 ] #11 12.62 } #11 12.62 mirrormakeragent.json: "{\n \"topicName\": \"mirrormakeragent\",\n \"topicDescription\": #11 12.62 \"the topic used to provision the MM agent whitelist\",\n \"replicationCase\": \"REPLICATION_NONE\",\n #11 12.62 \ \"owner\": \"dmaap\",\n \"txenabled\": false,\n \"partitionCount\": \"1\",\n #11 12.62 \ \"clients\": [\n {\n \"dcaeLocationName\": \"san-francisco\",\n \"clientIdentity\": #11 12.62 \"dmaap-bc-mm-prov@dmaap-bc-mm-prov.onap.org\",\n \"action\": [\n \"pub\", #11 12.62 \n \"sub\",\n\t\t\"view\"\n ]\n \n },\n\t{\n \"dcaeLocationName\": #11 12.62 \"san-francisco\",\n \"clientIdentity\": \"dmaap-bc-topic-mgr@dmaap-bc-topic-mgr.onap.org\",\n #11 12.62 \ \"action\": [\n \"pub\", \n \"sub\",\n\t\t\"view\"\n ]\n #11 12.62 \n },\n\t{\n \"dcaeLocationName\": \"san-francisco\",\n \"clientIdentity\": #11 12.62 \"demo@people.osaaf.org\",\n \"action\": [\n \"pub\", \n \"sub\",\n\t\t\"view\"\n #11 12.62 \ ]\n \n }\n\t\n ]\n}\n\n" #11 12.62 #11 12.62 #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-kafka/templates/service-hs.yaml #11 12.62 # Copyright © 2017 Amdocs, Bell Canada #11 12.62 # Modifications Copyright © 2018 AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 apiVersion: v1 #11 12.62 kind: Service #11 12.62 metadata: #11 12.62 name: message-router-kafka #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router-kafka #11 12.62 chart: message-router-kafka-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 spec: #11 12.62 ports: #11 12.62 - port: 9092 #11 12.62 name: message-router-kafka #11 12.62 clusterIP: None #11 12.62 selector: #11 12.62 app: message-router-kafka #11 12.62 release: release-name #11 12.62 #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-kafka/templates/service.yaml #11 12.62 # Copyright © 2019 AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 --- #11 12.62 apiVersion: v1 #11 12.62 kind: Service #11 12.62 metadata: #11 12.62 name: message-router-kafka-0 #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router-kafka #11 12.62 chart: message-router-kafka-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 #11 12.62 spec: #11 12.62 type: NodePort #11 12.62 externalTrafficPolicy: Local #11 12.62 selector: #11 12.62 statefulset.kubernetes.io/pod-name: release-name-message-router-kafka-0 #11 12.62 ports: #11 12.62 - port: 9093 #11 12.62 targetPort: 9093 #11 12.62 nodePort: 30940 #11 12.62 name: message-router-kafka-0 #11 12.62 #11 12.62 --- #11 12.62 apiVersion: v1 #11 12.62 kind: Service #11 12.62 metadata: #11 12.62 name: message-router-kafka-1 #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router-kafka #11 12.62 chart: message-router-kafka-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 #11 12.62 spec: #11 12.62 type: NodePort #11 12.62 externalTrafficPolicy: Local #11 12.62 selector: #11 12.62 statefulset.kubernetes.io/pod-name: release-name-message-router-kafka-1 #11 12.62 ports: #11 12.62 - port: 9093 #11 12.62 targetPort: 9093 #11 12.62 nodePort: 30941 #11 12.62 name: message-router-kafka-1 #11 12.62 #11 12.62 --- #11 12.62 apiVersion: v1 #11 12.62 kind: Service #11 12.62 metadata: #11 12.62 name: message-router-kafka-2 #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router-kafka #11 12.62 chart: message-router-kafka-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 #11 12.62 spec: #11 12.62 type: NodePort #11 12.62 externalTrafficPolicy: Local #11 12.62 selector: #11 12.62 statefulset.kubernetes.io/pod-name: release-name-message-router-kafka-2 #11 12.62 ports: #11 12.62 - port: 9093 #11 12.62 targetPort: 9093 #11 12.62 nodePort: 30942 #11 12.62 name: message-router-kafka-2 #11 12.62 #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-zookeeper/templates/service.yaml #11 12.62 # Copyright © 2018 Amdocs, AT&T, Bell Canada #11 12.62 # Modifications Copyright © 2018 AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 apiVersion: v1 #11 12.62 kind: Service #11 12.62 metadata: #11 12.62 name: message-router-zookeeper #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router-zookeeper #11 12.62 chart: message-router-zookeeper-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 spec: #11 12.62 type: ClusterIP #11 12.62 ports: #11 12.62 - port: 2181 #11 12.62 name: client #11 12.62 - port: 2888 #11 12.62 name: server #11 12.62 - port: 3888 #11 12.62 name: leader-election #11 12.62 clusterIP: None #11 12.62 selector: #11 12.62 app: message-router-zookeeper #11 12.62 release: release-name #11 12.62 --- #11 12.62 # Source: message-router/templates/service.yaml #11 12.62 # Copyright © 2017 Amdocs, Bell Canada #11 12.62 # Modifications Copyright © 2018 AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 apiVersion: v1 #11 12.62 kind: Service #11 12.62 metadata: #11 12.62 name: release-name-message-router #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router #11 12.62 chart: message-router-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 annotations: #11 12.62 msb.onap.org/service-info: '[ #11 12.62 { #11 12.62 "serviceName": "release-name-message-router", #11 12.62 "version": "v1", #11 12.62 "url": "/", #11 12.62 "protocol": "REST", #11 12.62 "port": "", #11 12.62 "visualRange":"1" #11 12.62 } #11 12.62 ]' #11 12.62 #11 12.62 spec: #11 12.62 type: NodePort #11 12.62 ports: #11 12.62 - port: 3904 #11 12.62 nodePort: 30227 #11 12.62 name: message-router-3904 #11 12.62 - port: 3905 #11 12.62 nodePort: 30226 #11 12.62 name: message-router-3905 #11 12.62 selector: #11 12.62 app: message-router #11 12.62 release: release-name #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-kafka/templates/statefulset.yaml #11 12.62 ################################################################################ #11 12.62 # Copyright (c) 2019 AT&T Intellectual Property. # #11 12.62 # Copyright (c) 2019 Nokia. # #11 12.62 # # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 12.62 # you may not use this file except in compliance with the License. # #11 12.62 # You may obtain a copy of the License at # #11 12.62 # # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 # #11 12.62 # # #11 12.62 # Unless required by applicable law or agreed to in writing, software # #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, # #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 12.62 # See the License for the specific language governing permissions and # #11 12.62 # limitations under the License. # #11 12.62 ################################################################################ #11 12.62 #11 12.62 #11 12.62 apiVersion: apps/v1 #11 12.62 kind: StatefulSet #11 12.62 metadata: #11 12.62 name: release-name-message-router-kafka #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router-kafka #11 12.62 chart: message-router-kafka-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 spec: #11 12.62 serviceName: message-router-kafka #11 12.62 replicas: 3 #11 12.62 selector: #11 12.62 matchLabels: #11 12.62 app: message-router-kafka #11 12.62 release: release-name #11 12.62 podManagementPolicy: Parallel #11 12.62 template: #11 12.62 metadata: #11 12.62 labels: #11 12.62 app: message-router-kafka #11 12.62 release: release-name #11 12.62 spec: #11 12.62 podAntiAffinity: #11 12.62 preferredDuringSchedulingIgnoredDuringExecution: #11 12.62 - weight: 1 #11 12.62 podAffinityTerm: #11 12.62 labelSelector: #11 12.62 matchExpressions: #11 12.62 - key: "app" #11 12.62 operator: In #11 12.62 values: #11 12.62 - message-router-kafka #11 12.62 topologyKey: "kubernetes.io/hostname" #11 12.62 initContainers: #11 12.62 - name: message-router-kafka-initcontainer #11 12.62 image: "registry.hub.docker.com/oomk8s/ubuntu-init:2.0.0" #11 12.62 imagePullPolicy: Always #11 12.62 - command: #11 12.62 - sh #11 12.62 - -exec #11 12.62 - | #11 12.62 chown -R 1000:1000 /opt/kafka/data; #11 12.62 image: "docker.io/busybox:1.30" #11 12.62 imagePullPolicy: Always #11 12.62 volumeMounts: #11 12.62 - mountPath: /opt/kafka/data #11 12.62 name: kafka-data #11 12.62 name: message-router-kafka-permission-fixer #11 12.62 containers: #11 12.62 - name: message-router-kafka #11 12.62 image: "nexus3.onap.org:10001/onap/dmaap/kafka111:1.0.0" #11 12.62 imagePullPolicy: Always #11 12.62 command: #11 12.62 - sh #11 12.62 - -exc #11 12.62 - | #11 12.62 export KAFKA_BROKER_ID=${HOSTNAME##*-} && \ #11 12.62 export ENDPOINT_PORT=$(( $KAFKA_BROKER_ID + 30490 )) && \ #11 12.62 export KAFKA_ADVERTISED_LISTENERS=EXTERNAL_SASL_PLAINTEXT://$(HOST_IP):$(( $KAFKA_BROKER_ID + 30490 )),INTERNAL_SASL_PLAINTEXT://:9092 && \ #11 12.62 exec start-kafka.sh #11 12.62 resources: #11 12.62 limits: #11 12.62 cpu: 2000m #11 12.62 memory: 4Gi #11 12.62 requests: #11 12.62 cpu: 100m #11 12.62 memory: 1Gi #11 12.62 #11 12.62 ports: #11 12.62 - containerPort: 9092 #11 12.62 - containerPort: 9093 #11 12.62 #11 12.62 livenessProbe: #11 12.62 tcpSocket: #11 12.62 port: 9092 #11 12.62 initialDelaySeconds: 60 #11 12.62 periodSeconds: 10 #11 12.62 #11 12.62 readinessProbe: #11 12.62 tcpSocket: #11 12.62 port: 9092 #11 12.62 initialDelaySeconds: 60 #11 12.62 periodSeconds: 10 #11 12.62 env: #11 12.62 - name: HOST_IP #11 12.62 valueFrom: #11 12.62 fieldRef: #11 12.62 apiVersion: v1 #11 12.62 fieldPath: status.hostIP #11 12.62 - name: KAFKA_ZOOKEEPER_CONNECT #11 12.62 value: "message-router-zookeeper:2181" #11 12.62 - name: KAFKA_LISTENER_SECURITY_PROTOCOL_MAP #11 12.62 value: "INTERNAL_SASL_PLAINTEXT:SASL_PLAINTEXT,EXTERNAL_SASL_PLAINTEXT:SASL_PLAINTEXT" #11 12.62 - name: KAFKA_LISTENERS #11 12.62 value: "EXTERNAL_SASL_PLAINTEXT://0.0.0.0:9093,INTERNAL_SASL_PLAINTEXT://0.0.0.0:9092" #11 12.62 - name: KAFKA_INTER_BROKER_LISTENER_NAME #11 12.62 value: "INTERNAL_SASL_PLAINTEXT" #11 12.62 - name: KAFKA_SASL_ENABLED_MECHANISMS #11 12.62 value: "PLAIN" #11 12.62 - name: KAFKA_SASL_MECHANISM_INTER_BROKER_PROTOCOL #11 12.62 value: "PLAIN" #11 12.62 - name: KAFKA_AUTHORIZER_CLASS_NAME #11 12.62 value: "org.onap.dmaap.kafkaAuthorize.KafkaCustomAuthorizer" #11 12.62 - name: KAFKA_DELETE_TOPIC_ENABLE #11 12.62 value: "true" #11 12.62 - name: aaf_locate_url #11 12.62 value: "https://aaf-locate:8095" #11 12.62 - name: KAFKA_LOG_DIRS #11 12.62 value: "/opt/kafka/data" #11 12.62 - name: KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR #11 12.62 value: "3" #11 12.62 - name: KAFKA_DEFAULT_REPLICATION_FACTOR #11 12.62 value: "3" #11 12.62 - name: KAFKA_NUM_PARTITIONS #11 12.62 value: "3" #11 12.62 - name: KAFKA_ZOOKEEPER_CONNECTION_TIMEOUT_MS #11 12.62 value: "60000" #11 12.62 volumeMounts: #11 12.62 - mountPath: /etc/localtime #11 12.62 name: localtime #11 12.62 readOnly: true #11 12.62 - mountPath: /var/run/docker.sock #11 12.62 name: docker-socket #11 12.62 - mountPath: /opt/kafka/data #11 12.62 name: kafka-data #11 12.62 volumes: #11 12.62 - name: localtime #11 12.62 hostPath: #11 12.62 path: /etc/localtime #11 12.62 - name: docker-socket #11 12.62 hostPath: #11 12.62 path: /var/run/docker.sock #11 12.62 #11 12.62 - name: kafka-data #11 12.62 emptyDir: {} #11 12.62 #11 12.62 imagePullSecrets: #11 12.62 - name: "docker-reg-cred" #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-zookeeper/templates/statefulset.yaml #11 12.62 ################################################################################ #11 12.62 # Copyright (c) 2019 AT&T Intellectual Property. # #11 12.62 # Copyright (c) 2019 Nokia. # #11 12.62 # # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 12.62 # you may not use this file except in compliance with the License. # #11 12.62 # You may obtain a copy of the License at # #11 12.62 # # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 # #11 12.62 # # #11 12.62 # Unless required by applicable law or agreed to in writing, software # #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, # #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 12.62 # See the License for the specific language governing permissions and # #11 12.62 # limitations under the License. # #11 12.62 ################################################################################ #11 12.62 #11 12.62 #11 12.62 apiVersion: apps/v1 #11 12.62 kind: StatefulSet #11 12.62 metadata: #11 12.62 name: release-name-message-router-zookeeper #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router-zookeeper #11 12.62 chart: message-router-zookeeper-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 spec: #11 12.62 serviceName: message-router-zookeeper #11 12.62 replicas: 3 #11 12.62 selector: #11 12.62 matchLabels: #11 12.62 app: message-router-zookeeper #11 12.62 release: release-name #11 12.62 updateStrategy: #11 12.62 type: RollingUpdate #11 12.62 rollingUpdate: #11 12.62 maxUnavailable: 1 #11 12.62 podManagementPolicy: Parallel #11 12.62 template: #11 12.62 metadata: #11 12.62 labels: #11 12.62 app: message-router-zookeeper #11 12.62 release: release-name #11 12.62 spec: #11 12.62 podAntiAffinity: #11 12.62 preferredDuringSchedulingIgnoredDuringExecution: #11 12.62 - weight: 1 #11 12.62 podAffinityTerm: #11 12.62 labelSelector: #11 12.62 matchExpressions: #11 12.62 - key: "app" #11 12.62 operator: In #11 12.62 values: #11 12.62 - message-router-zookeeper #11 12.62 topologyKey: "kubernetes.io/hostname" #11 12.62 initContainers: #11 12.62 - name: message-router-zookeeper-permission-fixer #11 12.62 command: #11 12.62 - sh #11 12.62 - -exec #11 12.62 - > #11 12.62 mkdir -p /tmp/zookeeper/apikeys/version-2 && chown -R 1000:1000 /tmp/zookeeper/apikeys; #11 12.62 image: "docker.io/busybox:1.30" #11 12.62 imagePullPolicy: Always #11 12.62 volumeMounts: #11 12.62 - mountPath: /tmp/zookeeper/apikeys #11 12.62 name: zookeeper-data #11 12.62 containers: #11 12.62 - name: message-router-zookeeper #11 12.62 image: "nexus3.onap.org:10001/onap/dmaap/zookeeper:5.0.0" #11 12.62 imagePullPolicy: Always #11 12.62 resources: #11 12.62 limits: #11 12.62 cpu: 2000m #11 12.62 memory: 4Gi #11 12.62 requests: #11 12.62 cpu: 100m #11 12.62 memory: 1Gi #11 12.62 #11 12.62 ports: #11 12.62 - containerPort: 2181 #11 12.62 name: client #11 12.62 - containerPort: 2888 #11 12.62 name: server #11 12.62 - containerPort: 3888 #11 12.62 name: leader-election #11 12.62 #11 12.62 livenessProbe: #11 12.62 exec: #11 12.62 command: #11 12.62 - sh #11 12.62 - -c #11 12.62 - "zookeeper-ready.sh 2181" #11 12.62 initialDelaySeconds: 10 #11 12.62 periodSeconds: 10 #11 12.62 #11 12.62 readinessProbe: #11 12.62 exec: #11 12.62 command: #11 12.62 - sh #11 12.62 - -c #11 12.62 - "zookeeper-ready.sh 2181" #11 12.62 initialDelaySeconds: 10 #11 12.62 periodSeconds: 10 #11 12.62 env: #11 12.62 - name: ZK_REPLICAS #11 12.62 value: "3" #11 12.62 - name: ZK_INIT_LIMIT #11 12.62 value: "5" #11 12.62 - name: ZK_SYNC_LIMIT #11 12.62 value: "2" #11 12.62 volumeMounts: #11 12.62 - mountPath: /etc/localtime #11 12.62 name: localtime #11 12.62 readOnly: true #11 12.62 - mountPath: /var/lib/zookeeper/data #11 12.62 name: zookeeper-data #11 12.62 volumes: #11 12.62 - name: localtime #11 12.62 hostPath: #11 12.62 path: /etc/localtime #11 12.62 #11 12.62 - name: zookeeper-data #11 12.62 emptyDir: {} #11 12.62 #11 12.62 imagePullSecrets: #11 12.62 - name: "docker-reg-cred" #11 12.62 #11 12.62 #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/templates/statefulset.yaml #11 12.62 ################################################################################ #11 12.62 # Copyright (c) 2019 AT&T Intellectual Property. # #11 12.62 # Copyright (c) 2019 Nokia. # #11 12.62 # # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 12.62 # you may not use this file except in compliance with the License. # #11 12.62 # You may obtain a copy of the License at # #11 12.62 # # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 # #11 12.62 # # #11 12.62 # Unless required by applicable law or agreed to in writing, software # #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, # #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 12.62 # See the License for the specific language governing permissions and # #11 12.62 # limitations under the License. # #11 12.62 ################################################################################ #11 12.62 #11 12.62 #11 12.62 #11 12.62 apiVersion: apps/v1 #11 12.62 kind: StatefulSet #11 12.62 metadata: #11 12.62 name: release-name-message-router #11 12.62 namespace: default #11 12.62 labels: #11 12.62 app: message-router #11 12.62 chart: message-router-1.1.0 #11 12.62 release: release-name #11 12.62 heritage: Tiller #11 12.62 spec: #11 12.62 replicas: 1 #11 12.62 selector: #11 12.62 matchLabels: #11 12.62 app: message-router #11 12.62 release: release-name #11 12.62 template: #11 12.62 metadata: #11 12.62 labels: #11 12.62 app: message-router #11 12.62 release: release-name #11 12.62 spec: #11 12.62 containers: #11 12.62 - name: message-router #11 12.62 image: "nexus3.onap.org:10001/onap/dmaap/dmaap-mr:1.1.13" #11 12.62 imagePullPolicy: Always #11 12.62 ports: #11 12.62 - containerPort: 3904 #11 12.62 - containerPort: 3905 #11 12.62 livenessProbe: #11 12.62 tcpSocket: #11 12.62 port: 3904 #11 12.62 initialDelaySeconds: 70 #11 12.62 periodSeconds: 10 #11 12.62 readinessProbe: #11 12.62 tcpSocket: #11 12.62 port: 3904 #11 12.62 initialDelaySeconds: 70 #11 12.62 periodSeconds: 10 #11 12.62 env: #11 12.62 - name: enableCadi #11 12.62 value: "true" #11 12.62 volumeMounts: #11 12.62 - mountPath: /etc/localtime #11 12.62 name: localtime #11 12.62 readOnly: true #11 12.62 - mountPath: /appl/dmaapMR1/bundleconfig/etc/appprops/MsgRtrApi.properties #11 12.62 subPath: MsgRtrApi.properties #11 12.62 name: appprops #11 12.62 - mountPath: /appl/dmaapMR1/etc/cadi.properties #11 12.62 subPath: cadi.properties #11 12.62 name: cadi #11 12.62 - mountPath: /appl/dmaapMR1/etc/keyfile #11 12.62 subPath: mykey #11 12.62 name: mykey #11 12.62 resources: #11 12.62 limits: #11 12.62 cpu: 2000m #11 12.62 memory: 4Gi #11 12.62 requests: #11 12.62 cpu: 100m #11 12.62 memory: 1Gi #11 12.62 #11 12.62 volumes: #11 12.62 - name: localtime #11 12.62 hostPath: #11 12.62 path: /etc/localtime #11 12.62 - name: appprops #11 12.62 configMap: #11 12.62 name: release-name-message-router-msgrtrapi-prop-configmap #11 12.62 - name: cadi #11 12.62 configMap: #11 12.62 name: release-name-message-router-cadi-prop-configmap #11 12.62 - name: mykey #11 12.62 secret: #11 12.62 secretName: release-name-message-router-secret #11 12.62 imagePullSecrets: #11 12.62 - name: "default-docker-registry-key" #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-kafka/templates/pv.yaml #11 12.62 # Copyright © 2018 Amdocs, Bell Canada, AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 #11 12.62 --- #11 12.62 # Source: message-router/charts/message-router-zookeeper/templates/pv.yaml #11 12.62 # Copyright © 2018 Amdocs, Bell Canada, AT&T #11 12.62 # #11 12.62 # Licensed under the Apache License, Version 2.0 (the "License"); #11 12.62 # you may not use this file except in compliance with the License. #11 12.62 # You may obtain a copy of the License at #11 12.62 # #11 12.62 # http://www.apache.org/licenses/LICENSE-2.0 #11 12.62 # #11 12.62 # Unless required by applicable law or agreed to in writing, software #11 12.62 # distributed under the License is distributed on an "AS IS" BASIS, #11 12.62 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #11 12.62 # See the License for the specific language governing permissions and #11 12.62 # limitations under the License. #11 12.62 #11 12.62 #11 13.62 *************************************************************************************************************** #11 13.62 Update chart dependency for directory /tmp/it-dep/bin/../ric-aux/helm/ves #11 13.68 Hang tight while we grab the latest from your chart repositories... #11 13.68 ...Successfully got an update from the "local" chart repository #11 13.68 Update Complete. #11 13.68 Saving 1 charts #11 13.68 Downloading ric-common from repo http://127.0.0.1:8879/charts #11 13.68 Deleting outdated charts #11 13.76 *************************************************************************************************************** #11 13.76 ==> Linting /tmp/it-dep/bin/../ric-aux/helm/ves #11 13.76 [INFO] Chart.yaml: icon is recommended #11 13.76 #11 13.76 1 chart(s) linted, no failures #11 13.76 *************************************************************************************************************** #11 13.83 *************************************************************************************************************** #11 13.83 --- #11 13.83 # Source: ves/templates/configmap.yaml #11 13.83 ################################################################################ #11 13.83 # Copyright (c) 2019,2020 AT&T Intellectual Property. # #11 13.83 # Copyright (c) 2019 Nokia. # #11 13.83 # # #11 13.83 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 13.83 # you may not use this file except in compliance with the License. # #11 13.83 # You may obtain a copy of the License at # #11 13.83 # # #11 13.83 # http://www.apache.org/licenses/LICENSE-2.0 # #11 13.83 # # #11 13.83 # Unless required by applicable law or agreed to in writing, software # #11 13.83 # distributed under the License is distributed on an "AS IS" BASIS, # #11 13.83 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 13.83 # See the License for the specific language governing permissions and # #11 13.83 # limitations under the License. # #11 13.83 ################################################################################ #11 13.83 --- #11 13.83 apiVersion: v1 #11 13.83 kind: ConfigMap #11 13.83 metadata: #11 13.83 name: configmap-ricaux-ves #11 13.83 data: #11 13.83 DmaapConfig.json: | #11 13.83 { #11 13.83 "channels": [ #11 13.83 { #11 13.83 "name": "ves-measurement", #11 13.83 "class": "HpCambriaOutputStream", #11 13.83 "stripHpId": "true", #11 13.83 "type": "out", #11 13.83 "cambria.topic": "unauthenticated.SEC_MEASUREMENT_OUTPUT", #11 13.83 "cambria.hosts": "ricaux-message-router:3904" #11 13.83 }, #11 13.83 { #11 13.83 "name": "ves-fault", #11 13.83 "class": "HpCambriaOutputStream", #11 13.83 "stripHpId": "true", #11 13.83 "type": "out", #11 13.83 "cambria.topic": "unauthenticated.SEC_FAULT_OUTPUT", #11 13.83 "cambria.hosts": "ricaux-message-router:3904" #11 13.83 }, #11 13.83 { #11 13.83 "name": "ves-heartbeat", #11 13.83 "class": "HpCambriaOutputStream", #11 13.83 "stripHpId": "true", #11 13.83 "type": "out", #11 13.83 "cambria.topic": "unauthenticated.SEC_FAULT_OUTPUT", #11 13.83 "cambria.hosts": "ricaux-message-router:3904" #11 13.83 }, #11 13.83 { #11 13.83 "name": "ves-other", #11 13.83 "class": "HpCambriaOutputStream", #11 13.83 "stripHpId": "true", #11 13.83 "type": "out", #11 13.83 "cambria.topic": "unauthenticated.SEC_OTHER_OUTPUT", #11 13.83 "cambria.hosts": "ricaux-message-router:3904" #11 13.83 }, #11 13.83 { #11 13.83 "name": "ves-notification", #11 13.83 "class": "HpCambriaOutputStream", #11 13.83 "stripHpId": "true", #11 13.83 "type": "out", #11 13.83 "cambria.topic": "unauthenticated.VES_NOTIFICATION_OUTPUT", #11 13.83 "cambria.hosts": "ricaux-message-router:3904" #11 13.83 }, #11 13.83 { #11 13.83 "name": "ves-pnfRegistration", #11 13.83 "class": "HpCambriaOutputStream", #11 13.83 "stripHpId": "true", #11 13.83 "type": "out", #11 13.83 "cambria.topic": "unauthenticated.VES_PNFREG_OUTPUT", #11 13.83 "cambria.hosts": "ricaux-message-router:3904" #11 13.83 } #11 13.83 ] #11 13.83 } #11 13.83 --- #11 13.83 apiVersion: v1 #11 13.83 kind: ConfigMap #11 13.83 metadata: #11 13.83 name: configmap-ricaux-ves-properties #11 13.83 data: #11 13.83 collector.properties: "###############################################################################\n##\n## #11 13.83 Collector Server config\n##\n##\t- Default values are shown as commented settings.\n## #11 13.83 \ - Will injected as configmap to /opt/app/VESCollector/etc/collector.properties\n##\n###############################################################################\n##\n## #11 13.83 HTTP(S) service\n##\n##\tNormally:\n##\n##\t\t- 8080 is http service\n##\t\t- https #11 13.83 is disabled by default\n##\n##\t\t- At this time, the server always binds to 0.0.0.0\n##\n##\ncollector.service.port=8080\n\n## #11 13.83 Authentication is only supported via secure port\n## When enabled - require valid #11 13.83 keystore defined\ncollector.service.secure.port=8443\n\n# auth.method flags:\n#\n# #11 13.83 noAuth - default option - no security (http)\n# certOnly - auth by certificate (https)\n# #11 13.83 basicAuth - auth by basic auth username and password (https)\n# certBasicAuth - #11 13.83 auth by certificate and basic auth username / password (https)\nauth.method=noAuth\n\n## #11 13.83 Combination of userid,hashPassword encoded pwd list to be supported\n## userid and #11 13.83 pwd comma separated; pipe delimitation between each pair\n## Password is generated #11 13.83 by crypt-password library using BCrypt algorithm stored in dcaegen2/sdk package\n## #11 13.83 or https://nexus.onap.org/#nexus-search;quick~crypt-password\nheader.authlist=sample1,$2a$10$0buh.2WeYwN868YMwnNNEuNEAMNYVU9.FSMJGyIKV3dGET/7oGOi6\n\n## #11 13.83 The keystore must be setup per installation when secure port is configured\ncollector.keystore.file.location=etc/keystore\ncollector.keystore.passwordfile=etc/passwordfile\n\ncollector.cert.subject.matcher=etc/certSubjectMatcher.properties\n\n## #11 13.83 The truststore must be setup per installation when mutual tls support is configured\ncollector.truststore.file.location=etc/truststore\ncollector.truststore.passwordfile=etc/trustpasswordfile\n\n## #11 13.83 Processing\n##\n## If there's a problem that prevents the collector from processing #11 13.83 alarms,\n## it's normally better to apply back pressure to the caller than to try #11 13.83 to\n## buffer beyond a reasonable size limit. With a limit, the server won't crash\n## #11 13.83 due to being out of memory, and the caller will get a 5xx reply saying the\n## server #11 13.83 is in trouble.\ncollector.inputQueue.maxPending=8096\n\n## Schema Validation checkflag\n## #11 13.83 default no validation checkflag (-1)\n## If enabled (1) - schemafile location must #11 13.83 be specified\ncollector.schema.checkflag=1\ncollector.schema.file={\\\"v1\\\":\\\"./etc/CommonEventFormat_27.2.json\\\",\\\"v2\\\":\\\"./etc/CommonEventFormat_27.2.json\\\",\\\"v3\\\":\\\"./etc/CommonEventFormat_27.2.json\\\",\\\"v4\\\":\\\"./etc/CommonEventFormat_27.2.json\\\",\\\"v5\\\":\\\"./etc/CommonEventFormat_28.4.1.json\\\",\\\"v7\\\":\\\"./etc/CommonEventFormat_30.0.1.json\\\"}\n\n## #11 13.83 List all streamid per domain to be supported. The streamid should match to channel #11 13.83 name on dmaapfile \ncollector.dmaap.streamid=fault=ves-fault|syslog=ves-syslog|heartbeat=ves-heartbeat|measurementsForVfScaling=ves-measurement|mobileFlow=ves-mobileflow|other=ves-other|stateChange=ves-statechange|thresholdCrossingAlert=ves-thresholdCrossingAlert|voiceQuality=ves-voicequality|sipSignaling=ves-sipsignaling|notification=ves-notification|pnfRegistration=ves-pnfRegistration|measurement=ves-measurement\ncollector.dmaapfile=./etc/DmaapConfig.json\n\n## #11 13.83 Event transformation Flag - when set expects configurable transformation\n## defined #11 13.83 under ./etc/eventTransform.json\n## Enabled by default; to disable set to 0\nevent.transform.flag=0\n\n# #11 13.83 Describes at what frequency (measured in minutes) should application try to fetch #11 13.83 config from CBS\ncollector.dynamic.config.update.frequency=5\n\n\n" #11 13.83 #11 13.83 #11 13.83 --- #11 13.83 # Source: ves/templates/ves-service.yaml #11 13.83 ################################################################################ #11 13.83 # Copyright (c) 2019 AT&T Intellectual Property. # #11 13.83 # Copyright (c) 2019 Nokia. # #11 13.83 # # #11 13.83 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 13.83 # you may not use this file except in compliance with the License. # #11 13.83 # You may obtain a copy of the License at # #11 13.83 # # #11 13.83 # http://www.apache.org/licenses/LICENSE-2.0 # #11 13.83 # # #11 13.83 # Unless required by applicable law or agreed to in writing, software # #11 13.83 # distributed under the License is distributed on an "AS IS" BASIS, # #11 13.83 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 13.83 # See the License for the specific language governing permissions and # #11 13.83 # limitations under the License. # #11 13.83 ################################################################################ #11 13.83 #11 13.83 #11 13.83 kind: Service #11 13.83 apiVersion: v1 #11 13.83 metadata: #11 13.83 name: service-ricaux-ves-http #11 13.83 labels: #11 13.83 app: ricaux-ves #11 13.83 chart: ves-1.1.1 #11 13.83 release: release-name #11 13.83 heritage: Tiller #11 13.83 spec: #11 13.83 ports: #11 13.83 - name: http #11 13.83 protocol: TCP #11 13.83 port: 8080 #11 13.83 targetPort: 8080 #11 13.83 - name: https #11 13.83 protocol: TCP #11 13.83 port: 8443 #11 13.83 targetPort: 8443 #11 13.83 selector: #11 13.83 app: ricaux-ves #11 13.83 release: release-name #11 13.83 type: ClusterIP #11 13.83 #11 13.83 --- #11 13.83 # Source: ves/templates/ves-deployment.yaml #11 13.83 ################################################################################ #11 13.83 # Copyright (c) 2019 AT&T Intellectual Property. # #11 13.83 # Copyright (c) 2019 Nokia. # #11 13.83 # # #11 13.83 # Licensed under the Apache License, Version 2.0 (the "License"); # #11 13.83 # you may not use this file except in compliance with the License. # #11 13.83 # You may obtain a copy of the License at # #11 13.83 # # #11 13.83 # http://www.apache.org/licenses/LICENSE-2.0 # #11 13.83 # # #11 13.83 # Unless required by applicable law or agreed to in writing, software # #11 13.83 # distributed under the License is distributed on an "AS IS" BASIS, # #11 13.83 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # #11 13.83 # See the License for the specific language governing permissions and # #11 13.83 # limitations under the License. # #11 13.83 ################################################################################ #11 13.83 #11 13.83 #11 13.83 #11 13.83 kind: Deployment #11 13.83 apiVersion: apps/v1 #11 13.83 metadata: #11 13.83 name: deployment-ricaux-ves #11 13.83 generation: 1 #11 13.83 labels: #11 13.83 app: ricaux-ves #11 13.83 chart: ves-1.1.1 #11 13.83 release: release-name #11 13.83 heritage: Tiller #11 13.83 annotations: #11 13.83 deployment.kubernetes.io/revision: '1' #11 13.83 spec: #11 13.83 replicas: 1 #11 13.83 selector: #11 13.83 matchLabels: #11 13.83 app: ricaux-ves #11 13.83 release: release-name #11 13.83 template: #11 13.83 metadata: #11 13.83 labels: #11 13.83 app: ricaux-ves #11 13.83 release: release-name #11 13.83 spec: #11 13.83 hostname: ves #11 13.83 volumes: #11 13.83 - name: component-log #11 13.83 emptyDir: {} #11 13.83 - name: ves-config-mount #11 13.83 configMap: #11 13.83 name: configmap-ricaux-ves #11 13.83 - name: ves-config-mount-properties #11 13.83 configMap: #11 13.83 name: configmap-ricaux-ves-properties #11 13.83 imagePullSecrets: #11 13.83 - name: onap-docker-registry-key #11 13.83 containers: #11 13.83 - name: container-ricaux-ves #11 13.83 image: nexus3.onap.org:10001/onap/org.onap.dcaegen2.collectors.ves.vescollector:1.4.4 #11 13.83 imagePullPolicy: IfNotPresent #11 13.83 ports: #11 13.83 - containerPort: 8080 #11 13.83 protocol: TCP #11 13.83 - containerPort: 8443 #11 13.83 protocol: TCP #11 13.83 volumeMounts: #11 13.83 - name: component-log #11 13.83 mountPath: "/opt/app/VESCollector/logs/ecomp" #11 13.83 - name: ves-config-mount #11 13.83 mountPath: "/opt/app/VESCollector/etc/DmaapConfig.json" #11 13.83 subPath: DmaapConfig.json #11 13.83 - name: ves-config-mount-properties #11 13.83 mountPath: "/opt/app/VESCollector/etc/collector.properties" #11 13.83 subPath: collector.properties #11 13.83 readinessProbe: #11 13.83 httpGet: #11 13.83 path: "/healthcheck" #11 13.83 port: 8080 #11 13.83 scheme: HTTP #11 13.83 initialDelaySeconds: 5 #11 13.83 timeoutSeconds: 1 #11 13.83 periodSeconds: 15 #11 13.83 successThreshold: 1 #11 13.83 failureThreshold: 1 #11 13.83 terminationMessagePath: "/dev/termination-log" #11 13.83 terminationMessagePolicy: File #11 13.83 restartPolicy: Always #11 13.83 #11 13.83 --- #11 13.83 # Source: ves/templates/ingress-ves.yaml #11 13.83 apiVersion: networking.k8s.io/v1beta1 #11 13.83 kind: Ingress #11 13.83 metadata: #11 13.83 name: ingress-ricaux-ves #11 13.83 spec: #11 13.83 rules: #11 13.83 - http: #11 13.83 paths: #11 13.83 - path: /vescollector #11 13.83 backend: #11 13.83 serviceName: service-ricaux-ves-http #11 13.83 servicePort: 8080 #11 13.83 #11 14.83 *************************************************************************************************************** #11 DONE 15.1s #12 exporting to image #12 exporting layers #12 exporting layers 0.6s done #12 writing image sha256:8f5ccf00ae61430fdb5ebd7a26e7237ce9b029ae4f7e617683785cf6bcd00737 done #12 naming to nexus3.o-ran-sc.org:10004/o-ran-sc/it-dep-helm:latest done #12 DONE 0.6s ---> docker-build.sh ends [it-dep-helm-docker-verify-all] $ /bin/sh -xe /tmp/jenkins4457083017459540680.sh [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins560012889773760032.sh $ ssh-agent -k unset SSH_AUTH_SOCK; unset SSH_AGENT_PID; echo Agent pid 2137 killed; [ssh-agent] Stopped. [PostBuildScript] - [INFO] Executing post build scripts. [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins11431958763801178194.sh ---> sysstat.sh [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins3826712537292744237.sh ---> package-listing.sh ++ tr '[:upper:]' '[:lower:]' ++ facter osfamily + OS_FAMILY=debian + workspace=/w/workspace/it-dep-helm-docker-verify-all + START_PACKAGES=/tmp/packages_start.txt + END_PACKAGES=/tmp/packages_end.txt + DIFF_PACKAGES=/tmp/packages_diff.txt + PACKAGES=/tmp/packages_start.txt + '[' /w/workspace/it-dep-helm-docker-verify-all ']' + PACKAGES=/tmp/packages_end.txt + case "${OS_FAMILY}" in + dpkg -l + grep '^ii' + '[' -f /tmp/packages_start.txt ']' + '[' -f /tmp/packages_end.txt ']' + diff /tmp/packages_start.txt /tmp/packages_end.txt + '[' /w/workspace/it-dep-helm-docker-verify-all ']' + mkdir -p /w/workspace/it-dep-helm-docker-verify-all/archives/ + cp -f /tmp/packages_diff.txt /tmp/packages_end.txt /tmp/packages_start.txt /w/workspace/it-dep-helm-docker-verify-all/archives/ [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins1357707396901460117.sh ---> capture-instance-metadata.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/it-dep-helm-docker-verify-all/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-qgG6 from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: lftools lf-activate-venv(): INFO: Adding /tmp/venv-qgG6/bin to PATH INFO: Running in OpenStack, capturing instance metadata [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins187666427473077400.sh provisioning config files... copy managed file [jenkins-log-archives-settings] to file:/w/workspace/it-dep-helm-docker-verify-all@tmp/config4693408154280934558tmp Regular expression run condition: Expression=[^.*logs-s3.*], Label=[] Run condition [Regular expression match] preventing perform for step [Provide Configuration files] [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content SERVER_ID=logs [EnvInject] - Variables injected successfully. [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins13011687001472336997.sh ---> create-netrc.sh [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins17041600787996520063.sh ---> python-tools-install.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/it-dep-helm-docker-verify-all/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-qgG6 from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: lftools lf-activate-venv(): INFO: Adding /tmp/venv-qgG6/bin to PATH [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins12855404091441230079.sh ---> sudo-logs.sh Archiving 'sudo' log.. [it-dep-helm-docker-verify-all] $ /bin/bash /tmp/jenkins11111046613474372645.sh ---> job-cost.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/it-dep-helm-docker-verify-all/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-qgG6 from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: zipp==1.1.0 python-openstackclient urllib3~=1.26.15 lf-activate-venv(): INFO: Adding /tmp/venv-qgG6/bin to PATH INFO: No Stack... INFO: Retrieving Pricing Info for: v2-highcpu-4 INFO: Archiving Costs [it-dep-helm-docker-verify-all] $ /bin/bash -l /tmp/jenkins7547241991139949721.sh ---> logs-deploy.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/it-dep-helm-docker-verify-all/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-qgG6 from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: lftools lf-activate-venv(): INFO: Adding /tmp/venv-qgG6/bin to PATH INFO: Nexus URL https://nexus.o-ran-sc.org path production/vex-sjc-oran-jenkins-prod-1/it-dep-helm-docker-verify-all/749 INFO: archiving workspace using pattern(s): Archives upload complete. INFO: archiving logs to Nexus ---> uname -a: Linux prd-ubuntu1804-docker-4c-4g-7953 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux ---> lscpu: Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 4 On-line CPU(s) list: 0-3 Thread(s) per core: 1 Core(s) per socket: 1 Socket(s): 4 NUMA node(s): 1 Vendor ID: AuthenticAMD CPU family: 23 Model: 49 Model name: AMD EPYC-Rome Processor Stepping: 0 CPU MHz: 2800.000 BogoMIPS: 5600.00 Virtualization: AMD-V Hypervisor vendor: KVM Virtualization type: full L1d cache: 32K L1i cache: 32K L2 cache: 512K L3 cache: 16384K NUMA node0 CPU(s): 0-3 Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm rep_good nopl xtopology cpuid extd_apicid tsc_known_freq pni pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm cmp_legacy svm cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext perfctr_core ssbd ibrs ibpb stibp vmmcall fsgsbase tsc_adjust bmi1 avx2 smep bmi2 rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves clzero xsaveerptr arat npt nrip_save umip rdpid arch_capabilities ---> nproc: 4 ---> df -h: Filesystem Size Used Avail Use% Mounted on udev 2.0G 0 2.0G 0% /dev tmpfs 395M 696K 394M 1% /run /dev/vda1 20G 9.2G 11G 48% / tmpfs 2.0G 0 2.0G 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 2.0G 0 2.0G 0% /sys/fs/cgroup /dev/vda15 105M 5.3M 100M 5% /boot/efi tmpfs 395M 0 395M 0% /run/user/1001 ---> free -m: total used free shared buff/cache available Mem: 3943 486 1049 0 2407 3189 Swap: 1023 0 1023 ---> ip addr: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: ens3: mtu 1450 qdisc fq_codel state UP group default qlen 1000 link/ether fa:16:3e:bf:55:c8 brd ff:ff:ff:ff:ff:ff inet 10.32.6.228/23 brd 10.32.7.255 scope global dynamic ens3 valid_lft 86212sec preferred_lft 86212sec inet6 fe80::f816:3eff:febf:55c8/64 scope link valid_lft forever preferred_lft forever 3: docker0: mtu 1500 qdisc noqueue state DOWN group default link/ether 02:42:01:b7:9f:58 brd ff:ff:ff:ff:ff:ff inet 10.250.0.254/24 brd 10.250.0.255 scope global docker0 valid_lft forever preferred_lft forever inet6 fe80::42:1ff:feb7:9f58/64 scope link valid_lft forever preferred_lft forever ---> sar -b -r -n DEV: Linux 4.15.0-213-generic (prd-ubuntu1804-docker-4c-4g-7953) 10/17/24 _x86_64_ (4 CPU) 21:36:39 LINUX RESTART (4 CPU) 21:37:01 tps rtps wtps bread/s bwrtn/s 21:38:02 185.85 83.32 102.53 6528.91 42184.59 21:39:01 155.96 13.05 142.91 2325.71 22672.09 Average: 171.03 48.48 122.55 4444.97 32510.31 21:37:01 kbmemfree kbavail kbmemused %memused kbbuffers kbcached kbcommit %commit kbactive kbinact kbdirty 21:38:02 1651292 3364632 2387360 59.11 54500 1812144 856652 16.84 562520 1643888 146636 21:39:01 1123628 3305192 2915024 72.18 74996 2242372 1291160 25.38 814692 1875536 2512 Average: 1387460 3334912 2651192 65.65 64748 2027258 1073906 21.11 688606 1759712 74574 21:37:01 IFACE rxpck/s txpck/s rxkB/s txkB/s rxcmp/s txcmp/s rxmcst/s %ifutil 21:38:02 docker0 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 21:38:02 ens3 459.66 294.97 1503.76 72.75 0.00 0.00 0.00 0.00 21:38:02 lo 1.13 1.13 0.10 0.10 0.00 0.00 0.00 0.00 21:39:01 vetha06a66e 0.02 0.17 0.00 0.01 0.00 0.00 0.00 0.00 21:39:01 docker0 119.54 177.56 6.25 980.92 0.00 0.00 0.00 0.00 21:39:01 ens3 304.93 207.29 1660.32 37.62 0.00 0.00 0.00 0.00 21:39:01 lo 2.30 2.30 0.21 0.21 0.00 0.00 0.00 0.00 Average: vetha06a66e 0.01 0.08 0.00 0.01 0.00 0.00 0.00 0.00 Average: docker0 59.27 88.04 3.10 486.34 0.00 0.00 0.00 0.00 Average: ens3 382.94 251.50 1581.38 55.33 0.00 0.00 0.00 0.00 Average: lo 1.71 1.71 0.15 0.15 0.00 0.00 0.00 0.00 ---> sar -P ALL: Linux 4.15.0-213-generic (prd-ubuntu1804-docker-4c-4g-7953) 10/17/24 _x86_64_ (4 CPU) 21:36:39 LINUX RESTART (4 CPU) 21:37:01 CPU %user %nice %system %iowait %steal %idle 21:38:02 all 18.70 0.00 2.47 5.32 0.07 73.45 21:38:02 0 30.74 0.00 3.11 7.92 0.08 58.15 21:38:02 1 12.39 0.00 1.92 7.11 0.07 78.52 21:38:02 2 13.33 0.00 2.92 4.74 0.05 78.96 21:38:02 3 18.33 0.00 1.96 1.49 0.07 78.16 21:39:01 all 14.63 0.00 3.06 4.23 0.06 78.03 21:39:01 0 12.05 0.00 3.23 4.70 0.05 79.97 21:39:01 1 11.40 0.00 2.52 6.42 0.05 79.61 21:39:01 2 11.26 0.00 2.63 2.15 0.07 83.88 21:39:01 3 23.81 0.00 3.82 3.64 0.09 68.65 Average: all 16.68 0.00 2.76 4.78 0.07 75.71 Average: 0 21.48 0.00 3.17 6.32 0.07 68.96 Average: 1 11.90 0.00 2.22 6.77 0.06 79.06 Average: 2 12.30 0.00 2.78 3.46 0.06 81.40 Average: 3 21.04 0.00 2.88 2.55 0.08 73.45