Triggered by Gerrit: https://gerrit.o-ran-sc.org/r/c/ric-plt/ric-dep/+/12969 Running as SYSTEM [EnvInject] - Loading node environment variables. Building remotely on prd-ubuntu1804-builder-2c-2g-4196 (ubuntu1804-builder-2c-2g) in workspace /w/workspace/ric-plt-ric-dep-chart-shell-verify-master [ssh-agent] Looking for ssh-agent implementation... [ssh-agent] Exec ssh-agent (binary ssh-agent on a remote machine) $ ssh-agent SSH_AUTH_SOCK=/tmp/ssh-Z4Izj4yl7hPj/agent.1707 SSH_AGENT_PID=1709 [ssh-agent] Started. Running ssh-add (command line suppressed) Identity added: /w/workspace/ric-plt-ric-dep-chart-shell-verify-master@tmp/private_key_9796026117259082804.key (jenkins-ssh) [ssh-agent] Using credentials jenkins (jenkins) The recommended git tool is: NONE using credential jenkins Wiping out workspace first. Cloning the remote Git repository Cloning repository ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/ric-plt/ric-dep > git init /w/workspace/ric-plt-ric-dep-chart-shell-verify-master # timeout=10 Fetching upstream changes from ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/ric-plt/ric-dep > git --version # timeout=10 > git --version # 'git version 2.17.1' using GIT_SSH to set credentials jenkins > git fetch --tags --progress -- ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/ric-plt/ric-dep +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/ric-plt/ric-dep # timeout=10 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/ric-plt/ric-dep # timeout=10 Fetching upstream changes from ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/ric-plt/ric-dep using GIT_SSH to set credentials jenkins > git fetch --tags --progress -- ssh://oran-jobbuilder@gerrit.o-ran-sc.org:29418/ric-plt/ric-dep refs/changes/69/12969/1 # timeout=10 > git rev-parse 75c0de3cae4b58e001f7ec715f13f82ded10e678^{commit} # timeout=10 JENKINS-19022: warning: possible memory leak due to Git plugin usage; see: https://plugins.jenkins.io/git/#remove-git-plugin-buildsbybranch-builddata-script Checking out Revision 75c0de3cae4b58e001f7ec715f13f82ded10e678 (refs/changes/69/12969/1) > git config core.sparsecheckout # timeout=10 > git checkout -f 75c0de3cae4b58e001f7ec715f13f82ded10e678 # timeout=10 Commit message: "J release changes" > git rev-parse FETCH_HEAD^{commit} # timeout=10 > git rev-list --no-walk 7799f9c20d56ceaab38178b7083ed66e63312a0c # timeout=10 provisioning config files... copy managed file [npmrc] to file:/home/jenkins/.npmrc copy managed file [pipconf] to file:/home/jenkins/.config/pip/pip.conf [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins11078274970766212979.sh ---> python-tools-install.sh Setup pyenv: * system (set by /opt/pyenv/version) * 3.8.13 (set by /opt/pyenv/version) * 3.9.13 (set by /opt/pyenv/version) * 3.10.6 (set by /opt/pyenv/version) lf-activate-venv(): INFO: Creating python3 venv at /tmp/venv-GGSV lf-activate-venv(): INFO: Save venv in file: /tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: lftools lf-activate-venv(): INFO: Adding /tmp/venv-GGSV/bin to PATH Generating Requirements File Python 3.10.6 pip 24.1 from /tmp/venv-GGSV/lib/python3.10/site-packages/pip (python 3.10) appdirs==1.4.4 argcomplete==3.4.0 aspy.yaml==1.3.0 attrs==23.2.0 autopage==0.5.2 beautifulsoup4==4.12.3 boto3==1.34.131 botocore==1.34.131 bs4==0.0.2 cachetools==5.3.3 certifi==2024.6.2 cffi==1.16.0 cfgv==3.4.0 chardet==5.2.0 charset-normalizer==3.3.2 click==8.1.7 cliff==4.7.0 cmd2==2.4.3 cryptography==3.3.2 debtcollector==3.0.0 decorator==5.1.1 defusedxml==0.7.1 Deprecated==1.2.14 distlib==0.3.8 dnspython==2.6.1 docker==4.2.2 dogpile.cache==1.3.3 email_validator==2.2.0 filelock==3.15.3 future==1.0.0 gitdb==4.0.11 GitPython==3.1.43 google-auth==2.30.0 httplib2==0.22.0 identify==2.5.36 idna==3.7 importlib-resources==1.5.0 iso8601==2.1.0 Jinja2==3.1.4 jmespath==1.0.1 jsonpatch==1.33 jsonpointer==3.0.0 jsonschema==4.22.0 jsonschema-specifications==2023.12.1 keystoneauth1==5.6.0 kubernetes==30.1.0 lftools==0.37.10 lxml==5.2.2 MarkupSafe==2.1.5 msgpack==1.0.8 multi_key_dict==2.0.3 munch==4.0.0 netaddr==1.3.0 netifaces==0.11.0 niet==1.4.2 nodeenv==1.9.1 oauth2client==4.1.3 oauthlib==3.2.2 openstacksdk==3.1.0 os-client-config==2.1.0 os-service-types==1.7.0 osc-lib==3.0.1 oslo.config==9.4.0 oslo.context==5.5.0 oslo.i18n==6.3.0 oslo.log==6.0.0 oslo.serialization==5.4.0 oslo.utils==7.1.0 packaging==24.1 pbr==6.0.0 platformdirs==4.2.2 prettytable==3.10.0 pyasn1==0.6.0 pyasn1_modules==0.4.0 pycparser==2.22 pygerrit2==2.0.15 PyGithub==2.3.0 PyJWT==2.8.0 PyNaCl==1.5.0 pyparsing==2.4.7 pyperclip==1.9.0 pyrsistent==0.20.0 python-cinderclient==9.5.0 python-dateutil==2.9.0.post0 python-heatclient==3.5.0 python-jenkins==1.8.2 python-keystoneclient==5.4.0 python-magnumclient==4.5.0 python-novaclient==18.6.0 python-openstackclient==6.6.0 python-swiftclient==4.6.0 PyYAML==6.0.1 referencing==0.35.1 requests==2.32.3 requests-oauthlib==2.0.0 requestsexceptions==1.4.0 rfc3986==2.0.0 rpds-py==0.18.1 rsa==4.9 ruamel.yaml==0.18.6 ruamel.yaml.clib==0.2.8 s3transfer==0.10.1 simplejson==3.19.2 six==1.16.0 smmap==5.0.1 soupsieve==2.5 stevedore==5.2.0 tabulate==0.9.0 toml==0.10.2 tomlkit==0.12.5 tqdm==4.66.4 typing_extensions==4.12.2 tzdata==2024.1 urllib3==1.26.19 virtualenv==20.26.2 wcwidth==0.2.13 websocket-client==1.8.0 wrapt==1.16.0 xdg==6.0.0 xmltodict==0.13.0 yq==3.4.3 provisioning config files... copy managed file [global-settings] to file:/w/workspace/ric-plt-ric-dep-chart-shell-verify-master@tmp/config16335831316494265584tmp copy managed file [ric-plt-ric-dep-settings] to file:/w/workspace/ric-plt-ric-dep-chart-shell-verify-master@tmp/config10813538781389625307tmp [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content SERVER_ID=site [EnvInject] - Variables injected successfully. [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins15388069328572205423.sh ---> create-netrc.sh [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/sh -xe /tmp/jenkins9817401816621929042.sh + cd bin + bash verify-ric-charts --> verify-ric-charts verify-ric-charts: line 43: helm: command not found Download and install Helm 2024-06-22 14:15:34 URL:https://get.helm.sh/helm-v3.9.0-linux-amd64.tar.gz [13952532/13952532] -> "helm-v3.9.0-linux-amd64.tar.gz" [1] linux-amd64/ linux-amd64/helm linux-amd64/LICENSE linux-amd64/README.md Cloning into './dep'... verify-ric-charts: line 59: chartmuseum: command not found Download and install chartmuseum 2024-06-22 14:15:36 URL:https://get.helm.sh/chartmuseum-v0.14.0-linux-amd64.tar.gz [16120271/16120271] -> "chartmuseum-v0.14.0-linux-amd64.tar.gz" [1] linux-amd64/ linux-amd64/chartmuseum linux-amd64/README.md linux-amd64/LICENSE % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 11635 100 11635 0 0 68441 0 --:--:-- --:--:-- --:--:-- 68846 Downloading https://get.helm.sh/chartmuseum-v0.16.2-linux-amd64.tar.gz Verifying checksum... Done. Preparing to install chartmuseum into /usr/local/bin chartmuseum installed into /usr/local/bin/chartmuseum Installed plugin: servecm Wait for installing servecm plugin ChartMuseum - Helm Chart Repository with support for Amazon S3, Google Cloud Storage, Oracle Cloud Infrastructure Object Storage and Openstack Starting local Helm server Successfully packaged chart and saved it to: local-repo/ric-common-3.3.2.tgz Successfully packaged chart and saved it to: local-repo/aux-common-3.0.0.tgz 2024-06-22T14:15:41.317Z INFO Starting ChartMuseum {"host": "0.0.0.0", "port": 8879} 2024-06-22T14:15:41.362Z INFO [1] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "29.091µs", "reqID": "c504d947-deee-46e8-b5f3-2034ec9c6e0d"} "local" has been added to your repositories Finding all Helm charts *************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/3rdparty/influxdb Update chart dependency Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/3rdparty/influxdb 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: influxdb2/templates/pdb.yaml apiVersion: policy/v1 kind: PodDisruptionBudget metadata: name: release-name-influxdb2 labels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name app.kubernetes.io/version: "2.2.0" app.kubernetes.io/managed-by: Helm helm.sh/chart: influxdb2-2.1.0 spec: minAvailable: 1 selector: matchLabels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name --- # Source: influxdb2/templates/serviceaccount.yaml apiVersion: v1 kind: ServiceAccount metadata: name: release-name-influxdb2 labels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name app.kubernetes.io/version: "2.2.0" app.kubernetes.io/managed-by: Helm helm.sh/chart: influxdb2-2.1.0 --- # Source: influxdb2/templates/secret.yaml apiVersion: v1 kind: Secret metadata: labels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name app.kubernetes.io/version: "2.2.0" app.kubernetes.io/managed-by: Helm helm.sh/chart: influxdb2-2.1.0 name: release-name-influxdb2-auth data: admin-token: "aGttcGdiZU9YSXBiZGF2S05zaUhNMVBTQ24xWG1WZ20=" admin-password: "czdCVVRTcnRwUmsxcUNScVRBVnpqYlg1VzVoaXdZT0Q=" --- # Source: influxdb2/templates/persistent-volume-claim.yaml kind: PersistentVolumeClaim apiVersion: v1 metadata: name: "release-name-influxdb2" labels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name app.kubernetes.io/version: "2.2.0" app.kubernetes.io/managed-by: Helm helm.sh/chart: influxdb2-2.1.0 annotations: helm.sh/resource-policy: "keep" spec: accessModes: - "ReadWriteOnce" resources: requests: storage: "50Gi" --- # Source: influxdb2/templates/service.yaml apiVersion: v1 kind: Service metadata: name: release-name-influxdb2 labels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name app.kubernetes.io/version: "2.2.0" app.kubernetes.io/managed-by: Helm helm.sh/chart: influxdb2-2.1.0 spec: type: ClusterIP ports: - name: http port: 80 protocol: TCP targetPort: 8086 selector: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name --- # Source: influxdb2/templates/statefulset.yaml apiVersion: apps/v1 kind: StatefulSet metadata: name: release-name-influxdb2 labels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name app.kubernetes.io/version: "2.2.0" app.kubernetes.io/managed-by: Helm helm.sh/chart: influxdb2-2.1.0 spec: replicas: 1 selector: matchLabels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name serviceName: "release-name-influxdb2" template: metadata: labels: app.kubernetes.io/name: influxdb2 app.kubernetes.io/instance: release-name spec: volumes: - name: data persistentVolumeClaim: claimName: release-name-influxdb2 serviceAccountName: release-name-influxdb2 containers: - name: influxdb2 image: "influxdb:2.2.0-alpine" imagePullPolicy: IfNotPresent ports: - name: http containerPort: 8086 protocol: TCP env: # Automated setup will not run if an existing boltdb file is found at the configured path. # This behavior allows for the InfluxDB container to reboot post-setup without encountering "DB is already set up" errors. - name: DOCKER_INFLUXDB_INIT_MODE value: setup # The username to set for the system's initial super-user (Required). - name: DOCKER_INFLUXDB_INIT_USERNAME value: admin # The password to set for the system's inital super-user (Required). - name: DOCKER_INFLUXDB_INIT_PASSWORD valueFrom: secretKeyRef: name: release-name-influxdb2-auth key: admin-password # The name to set for the system's initial organization (Required). - name: DOCKER_INFLUXDB_INIT_ORG value: influxdata # The name to set for the system's initial bucket (Required). - name: DOCKER_INFLUXDB_INIT_BUCKET value: default # The duration the system's initial bucket should retain data. If not set, the initial bucket will retain data forever. - name: DOCKER_INFLUXDB_INIT_RETENTION value: 0s # The authentication token to associate with the system's initial super-user. If not set, a token will be auto-generated by the system. - name: DOCKER_INFLUXDB_INIT_ADMIN_TOKEN valueFrom: secretKeyRef: name: release-name-influxdb2-auth key: admin-token # Path to the BoltDB database. - name: INFLUXD_BOLT_PATH value: /var/lib/influxdb2/influxd.bolt # Path to persistent storage engine files where InfluxDB stores all Time-Structure Merge Tree (TSM) data on disk. - name: INFLUXD_ENGINE_PATH value: /var/lib/influxdb2 livenessProbe: httpGet: path: /health port: http scheme: HTTP initialDelaySeconds: 0 periodSeconds: 10 timeoutSeconds: 1 failureThreshold: 3 readinessProbe: httpGet: path: /health port: http scheme: HTTP initialDelaySeconds: 0 periodSeconds: 10 timeoutSeconds: 1 successThreshold: 1 failureThreshold: 3 volumeMounts: - name: data mountPath: /var/lib/influxdb2 subPath: resources: {} *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/submgr Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:41.557Z INFO [2] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "29.461µs", "reqID": "0443398c-dd76-4640-8407-579e7d77538d"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:41.560Z INFO [3] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "69.773µs", "reqID": "4a7bae89-91df-4a13-8d9d-b236daf0b4ad"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/submgr [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: submgr/templates/configmap.yaml #================================================================================== # Copyright (c) 2019 AT&T Intellectual Property. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #================================================================================== apiVersion: v1 kind: ConfigMap metadata: name: submgrcfg namespace: ricplt data: # FQDN and port info of rtmgr submgrcfg: | "local": "host": ":8080" "logger": "level": 3 "rmr": "protPort" : "tcp:4560" "maxSize": 8192 "numWorkers": 1 "rtmgr": "hostAddr": "service-ricplt-rtmgr-http" "port" : 3800 "baseUrl" : "/ric/v1" "db": "sessionNamespace": "XMSession" "host": ":6379" "prot": "tcp" "maxIdle": 80 "maxActive": 12000 "controls": "e2tSubReqTimeout_ms": 2000 "e2tSubDelReqTime_ms": 2000 "e2tRecvMsgTimeout_ms": 2000 "e2tMaxSubReqTryCount": 2 "e2tMaxSubDelReqTryCount": 2 "checkE2State": "true" "readSubsFromDb": "true" "dbTryCount": 200 "dbRetryForever": "true" "waitRouteCleanup_ms": 5000 "checkE2IEOrder": 1 submgrutartg: | newrt|start newrt|end --- # Source: submgr/templates/env.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-submgr-env data: RMR_RTG_SVC: "4561" RMR_SRC_ID: service-ricplt-submgr-rmr.ricplt CFG_FILE: "/cfg/submgr-config.yaml" RMR_SEED_RT: "/cfg/submgr-uta-rtg.rt" SUBMGR_SEED_SN: "1" --- # Source: submgr/templates/service-http.yaml # #================================================================================== # Copyright (c) 2019 AT&T Intellectual Property. # Copyright (c) 2019 Nokia # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #================================================================================== # # # Abstract: Subscription Manager service manifest # Date: 28 May 2019 # kind: Service apiVersion: v1 metadata: name: service-ricplt-submgr-http namespace: ricplt labels: app: ricplt-submgr chart: submgr-3.0.0 release: release-name heritage: Helm spec: selector: app: ricplt-submgr release: release-name clusterIP: None ports: - name: http port: 3800 protocol: TCP targetPort: http --- # Source: submgr/templates/service-rmr.yaml # #================================================================================== # Copyright (c) 2019 AT&T Intellectual Property. # Copyright (c) 2019 Nokia # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #================================================================================== # # # Abstract: Subscription Manager service manifest # Date: 28 May 2019 # kind: Service apiVersion: v1 metadata: name: service-ricplt-submgr-rmr namespace: ricplt labels: app: ricplt-submgr chart: submgr-3.0.0 release: release-name heritage: Helm spec: selector: app: ricplt-submgr release: release-name clusterIP: None ports: - name: rmrdata port: 4560 protocol: TCP targetPort: rmrdata - name: rmrroute port: 4561 protocol: TCP targetPort: rmrroute --- # Source: submgr/templates/deployment.yaml #================================================================================== # Copyright (c) 2019 AT&T Intellectual Property. # Copyright (c) 2019 Nokia # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #================================================================================== apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-submgr namespace: ricplt labels: app: ricplt-submgr chart: submgr-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-submgr release: release-name template: metadata: labels: app: ricplt-submgr release: release-name spec: hostname: submgr imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc containers: - name: container-ricplt-submgr image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-submgr:0.10.7 imagePullPolicy: IfNotPresent command: ["/submgr"] args: ["-f", "/cfg/submgr-config.yaml"] envFrom: - configMapRef: name: configmap-ricplt-submgr-env - configMapRef: name: configmap-ricplt-dbaas-appconfig ports: - name: http containerPort: 3800 protocol: TCP - name: rmrroute containerPort: 4561 protocol: TCP - name: rmrdata containerPort: 4560 protocol: TCP volumeMounts: - name: config-volume mountPath: /cfg livenessProbe: httpGet: path: ric/v1/health/alive port: 8080 initialDelaySeconds: 5 periodSeconds: 15 readinessProbe: httpGet: path: ric/v1/health/ready port: 8080 initialDelaySeconds: 5 periodSeconds: 15 volumes: - name: config-volume configMap: name: submgrcfg items: - key: submgrcfg path: submgr-config.yaml mode: 0644 - key: submgrutartg path: submgr-uta-rtg.rt mode: 0644 *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/redis-cluster Update chart dependency Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/redis-cluster [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: redis-cluster/templates/serviceaccount.yaml apiVersion: v1 kind: ServiceAccount metadata: name: assigner-sa --- # Source: redis-cluster/templates/configMap.yaml apiVersion: v1 kind: ConfigMap metadata: name: redis-cluster-cm data: update-node.sh: | #!/bin/sh REDIS_NODES="/data/nodes.conf" sed -i -e "/myself/ s/[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}/${POD_IP}/" ${REDIS_NODES} exec "$@" redis.conf: |+ cluster-enabled yes cluster-require-full-coverage no cluster-node-timeout 15000 cluster-config-file /data/nodes.conf cluster-migration-barrier 1 appendonly yes protected-mode no --- # Source: redis-cluster/templates/configMap.yaml apiVersion: v1 kind: ConfigMap metadata: name: assigner-cm data: placenode.pl: | #!/usr/bin/env perl =head ============LICENSE_START======================================================= ================================================================================ Copyright (C) 2020 Hcl Technologies Limited. ================================================================================ Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. ============LICENSE_END========================================================= About: This script has been developed as part of https://jira.o-ran-sc.org/browse/RIC-360 This script identifies the missing anti-affinity(as per above ticket) of redis instances required in a redis-cluster. If there is an undesired anti-affinity this script can be executed to communicate to redis nodes to switch roles (e.g. master/slave) such that the end-state meets the desired anti-affinity. Pre-requisites: 1) A redis cluster with 3 masters (2 replicas each) deployed on kubernetes 1.18 (or later) 2) Three available worker nodes for serving redis workloads 3) kubectl (with access to the k8 cluster) =cut my $podRow = { "podIP" => "", "podName" => "", "k8Node" => "", "rdNodeRole" => "", "rdNodeID" => "", "rdMasterNodeID" => "", "slaveIPs" => [] }; # Pod label for redis nodes my $podLabel = $ENV{'POD_LABEL'}; my $podTable = []; my $k8NodeInfo = []; setk8NodesInfo(); validate(); # Master spreadMastersIfRequired(); # Slave my $disparity = getSlaveDisparity(); spreadSlavesIfRequired(); sub validate() { my @masters = map { $_->{'rdNodeRole'} eq 'master' ? $_ : () } @{$podTable}; if ( @masters > @{$k8NodeInfo->{allk8Nodes}} ) { print "Info: Skipping any action as num of master > number of k8 nodes..\n"; exit; } } sub spreadSlavesIfRequired() { # Get node with maximum disparity first my @disparityMatrix = reverse sort { @{$a} <=> @{$b} } @${disparity}; #@disparityMatrix = grep defined, @disparityMatrix; #@disparityMatrix = map { defined $_ ? $_ : () } @disparityMatrix; # Get list of slaves to be swapped roles. my @slaveSwapList = (); my $maxDisparityPerNode = @{$disparityMatrix[0]}; for (my $disparityPass=0; $disparityPass < $maxDisparityPerNode; $disparityPass++) { for (my $k8NodeIndex=0; $k8NodeIndex <= $#{disparityMatrix}; $k8NodeIndex++) { #print "$disparityMatrix[$disparityPass] && $disparityMatrix[$k8NodeIndex][$disparityPass]"; if ( $disparityMatrix[$disparityPass] && $disparityMatrix[$k8NodeIndex][$disparityPass] ) { push(@slaveSwapList,$disparityMatrix[$k8NodeIndex][$disparityPass]); } } } if ( ! @slaveSwapList ) { print "Info: No disparity found with slaves.\n" if ( @slaveSwapList < 2); exit; } elsif ( @slaveSwapList == 1 ) { print "Info: single host scenario (with no swap candidate in other k8 nodes) found.\n"; exit; } else { print "Info: slave disparity found.\n"; } # Swap slaves for (my $swapIndex=0; $swapIndex < @slaveSwapList; $swapIndex++) { $pod1 = $slaveSwapList[$swapIndex]; $pod2 = $slaveSwapList[++$swapIndex]; #print "Info: Swapping Slaves: " . join($pod1->{podName}, $pod2->{podName}) . "\n"; my $cmd1 = qq[kubectl exec -it ]. qq[$pod1->{podName} -- redis-cli -p 6379 cluster replicate $pod2->{rdMasterNodeID} ]; my $cmd2 = qq[kubectl exec -it ]. qq[$pod2->{podName} -- redis-cli -p 6379 cluster replicate $pod1->{rdMasterNodeID} ]; runRediClusterCmd($cmd1); runRediClusterCmd($cmd2); #print "\n$cmd1"; #print "\n$cmd2\n"; } } sub getSlaveDisparity() { # Get Slave Disparity Metrix my $disparity = (); my $nodeIndex = 0; foreach my $k8NodeName ( @{$k8NodeInfo->{allk8Nodes}} ) { my @redisNodesOnk8Node = map { $_->{'k8Node'} eq $k8NodeName ? $_ : () } @{$podTable}; @redisNodesOnk8Node = sort { $a->{"rdNodeRole"} cmp $b->{"rdNodeRole"} } @redisNodesOnk8Node; my $master = shift @redisNodesOnk8Node; for (my $index=0; $index <= $#{redisNodesOnk8Node}; $index++ ) { my $slave = $redisNodesOnk8Node[$index]; #print "chekcing for pod: $slave->{podName}\n"; my $disparityFound = 0; if ( $slave->{rdMasterNodeID} eq $master->{rdNodeID} ) { $disparityFound = 1; } else { #check is other slaves are its sibling for (my $nextIndex=$index + 1; $nextIndex <= $#{redisNodesOnk8Node}; $nextIndex++ ) { if ( $slave->{rdMasterNodeID} eq $redisNodesOnk8Node[$nextIndex]->{rdMasterNodeID} ) { $disparityFound = 1; break; } } } if ($disparityFound) { #$disparity[$nodeIndex][$index] = { 'podName' => $slave->{"podName"}, 'rdMasterNodeID' => $slave->{"rdMasterNodeID"} } ; push(@{$disparity[$nodeIndex]},{ 'podName' => $slave->{"podName"}, 'rdMasterNodeID' => $slave->{"rdMasterNodeID"} } ) ; } } $nodeIndex++; } return \@disparity; } sub spreadMastersIfRequired() { NODE_WITH_NO_MASTER: foreach my $nodeWithoutMaster (@{$k8NodeInfo->{k8NodesWithoutMaster}}) { # For each k8Node without any master # Check for each extra master on its hostNode # Find its slave on the this hostNode (i.e. without any master) # Such slave must be Found for 3x3 set-up: # Then Promote as master # Re-Evaluate # Get All Redis Slaves on This k8 node print "Info: K8 node without any master : $nodeWithoutMaster\n"; my @rdSlaveNodes = map { ($_->{'k8Node'} eq $nodeWithoutMaster ) && ($_->{'rdNodeRole'} eq 'slave') ? $_ : () } @{$podTable}; foreach my $nodeWithExtraMaster (@{$k8NodeInfo->{k8NodesWithExtraMaster}} ) { print "Info: k8 Node with extra master : $nodeWithExtraMaster\n"; #my @rdSlaveNodes = map { ($_->{'k8Node'} eq $nodeWithoutMaster ) && ($_->{'rdNodeRole'} eq 'slave') ? $_ : () } @{$podTable}; my @masterInstances = map { ($_->{'k8Node'} eq $nodeWithExtraMaster ) && ($_->{'rdNodeRole'} eq 'master') ? $_ : () } @{$podTable}; foreach my $master (@masterInstances) { my @slave = map { $_->{"rdMasterNodeID"} eq $master->{rdNodeID} ? $_ : () } @rdSlaveNodes; if ( @slave ) { promoteSlaveAsMaster($slave[0]); my $isPromoted = 0; my $slaveNodeID= $slave[0]->{rdNodeID}; while( ! $isPromoted ) { sleep(8); setk8NodesInfo(); my ($promotedNode) = map { $slaveNodeID eq $_->{rdNodeID} ? $_ : () } @{$podTable}; if ( $promotedNode->{'rdNodeRole'} ne 'master' ) { print ("Info: Waiting for node promotion confirmation..\n"); } else { $isPromoted = 1; print ("Info: Node promotion confirmed.\n"); } } next NODE_WITH_NO_MASTER; } } } } print "Info: All redis masters are on separate k8 Nodes. \n" if ( ! @{$k8NodeInfo->{k8NodesWithoutMaster}}) ; } sub promoteSlaveAsMaster() { my $slavePod = shift; #print "Info: Promoting Slave $slavePod->{'podName'} On $slavePod->{'k8Node'} as master"; my $cmd = qq[kubectl exec -it $slavePod->{'podName'} -- redis-cli -p 6379 cluster failover takeover]; runRediClusterCmd($cmd); } sub runRediClusterCmd() { my $cmd = shift; print "Info: Running Cmd:$cmd \n"; `$cmd;`; sleep(8); } #foreach my $item (@{$podTable}) { #} # find_nodes_without-a-single_master sub setk8NodesInfo() { $podTable = []; $k8NodeInfo = []; getCurrentStatus(); # All k8 nodes my @k8NodeList = uniq(map { $_->{'k8Node'} } @$podTable); # Find Nodes with At least One master my @k8NodesWithMaster; foreach my $nodeName (@k8NodeList) { push(@k8NodesWithMaster, map { ($_->{'k8Node'} eq $nodeName) && ($_->{'rdNodeRole'} eq 'master') ? $nodeName : () } @{$podTable} ); } # Find Nodes without any master = All nodes - Nodes with at least one Master my %k8NodesMap = (); foreach (@k8NodesWithMaster) { if ( exists $k8NodesMap{$_} ) { $k8NodesMap{$_}++; } else { $k8NodesMap{$_} = 1; } } my @k8NodesWithoutMaster = map { exists $k8NodesMap{$_} ? () : $_ } @k8NodeList; my @k8NodesWithExtraMaster = uniq(map { $k8NodesMap{$_} > 1 ? $_ : () } @k8NodesWithMaster); $k8NodeInfo = { 'allk8Nodes' => \@k8NodeList, 'k8NodesWithExtraMaster' => \@k8NodesWithExtraMaster, 'k8NodesWithoutMaster' => \@k8NodesWithoutMaster }; } # Validate if number of masters ,= number of rea # #sub filter =head get podName where k8Node eq "x" get position of k8node eq x where =cut exit; sub uniq { my %seen; grep !$seen{$_}++, @_; } sub getCurrentStatus() { # Run pod list command my @getPods = `kubectl get po --no-headers -o wide -l $podLabel |grep Running`; chomp @getPods; #my @getPods = `kubectl get po --no-headers -o wide -l managed-by=redis-cluster-operator|grep Running`; chomp @getPods; foreach my $podLine (@getPods) { my @podData = split(/\s+/,$podLine); my ($podName,$status,$age,$podIP,$podNode) = ($podData[0], $podData[2], $podData[4], $podData[5],$podData[6]); #print "$podName,$status,$age,$podIP,$podNode" ."\n"; my $podRow = { 'podIP' => $podIP, 'podName' => $podName, 'k8Node' => $podNode, 'podAge' => $age, 'podStatus' => $status }; push (@{$podTable},$podRow) } my $podName = $podTable->[0]{'podName'}; #print "Info:kubectl exec $podName -- cat nodes.conf|sort -k3\n"; my @rdNodeData = `kubectl exec $podName -- cat nodes.conf|sort -k3`; chomp @rdNodeData; foreach my $rdNodeLine (@rdNodeData) { next if ($rdNodeLine !~ /master|slave/); my @rdNodeData = split(/\s+/,$rdNodeLine); my ($rdNodeID,$rdRole,$rdMasterNodeID,$epoch) = ($rdNodeData[0], $rdNodeData[2], $rdNodeData[3],$rdNodeData[5]); my ($podIP) = split(/:/,$rdNodeData[1]); $rdRole =~ s/myself,//; #print "$rdNodeID,$rdRole,$rdMasterNodeID,$podIP" ."\n"; my $rdElem = { 'podIP' => $podIP, 'rdNodeID' => $rdNodeID, 'rdRole' => $rdRole, 'rdMasterNodeID' => $rdMasterNodeID, 'epoch' => $epoch }; for(my $index=0; $index <= $#{$podTable}; $index++) { if ( $podTable->[$index]{'podIP'} eq $podIP ) { #print "Matched\n"; $podTable->[$index]{'rdNodeID'} = $rdNodeID; $podTable->[$index]{'rdNodeRole'} = $rdRole; $podTable->[$index]{'rdMasterNodeID'} = $rdMasterNodeID; $podTable->[$index]{'epoch'} = $epoch; } } #exit; } } relatenode.sh: | #!/bin/sh podLabel=${POD_LABEL} firstPod=$(kubectl get po -o wide -l app.kubernetes.io/name=redis-cluster --no-headers=true|head -1|cut -d" " -f1) kubectl get po -o wide -l $podLabel |tail +2|awk '{printf("%s:%s:%s:%s\n",$6,$1,$7,$10)}'|sort > /tmp/1.txt kubectl exec $firstPod -- cat nodes.conf|sed 's/myself,//'|awk '/master|slave/ {print $2,$1,$3,$4}'|sort > /tmp/2.txt join -t ":" /tmp/1.txt /tmp/2.txt |sort -k3,4 | sed 's/ /:/g'|awk -F":" '{print $2,$7,$3,$1,$4,$6,$8}' > /tmp/3.txt echo "\n POD_NAME ROLE k8NODE POD_IP REDIS_NODE_ID REDIS_MASTER_NODE_ID" grep $(cut -d" " -f4 /tmp/2.txt|sort -u|grep -v "-"|sed -n '1p') /tmp/3.txt echo "" grep $(cut -d" " -f4 /tmp/2.txt|sort -u|grep -v "-"|sed -n '2p') /tmp/3.txt echo "" grep $(cut -d" " -f4 /tmp/2.txt|sort -u|grep -v "-"|sed -n '3p') /tmp/3.txt --- # Source: redis-cluster/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: assigner-role rules: - apiGroups: [""] resources: - pods verbs: - get - list - apiGroups: [""] resources: ["pods/exec"] verbs: ["create"] --- # Source: redis-cluster/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: assigner-rb subjects: - kind: ServiceAccount name: assigner-sa roleRef: kind: Role name: assigner-role apiGroup: rbac.authorization.k8s.io --- # Source: redis-cluster/templates/service.yaml ################################################################################### # ============LICENSE_START======================================================= # # ================================================================================ # Copyright (C) 2020 Hcl Technologies Limited. # ================================================================================ # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # ============LICENSE_END========================================================= ################################################################################### apiVersion: v1 kind: Service metadata: name: redis-cluster-svc spec: type: ClusterIP ports: - port: 6379 targetPort: 6379 name: client - port: 16379 targetPort: 16379 name: gossip selector: app.kubernetes.io/name: redis-cluster app.kubernetes.io/instance: release-name --- # Source: redis-cluster/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: apps/v1 kind: Deployment metadata: name: assigner-dep namespace: default labels: chart: redis-cluster-0.1.0 release: release-name spec: replicas: 1 selector: matchLabels: app: assigner release: release-name template: metadata: labels: app: assigner release: release-name spec: containers: - name: kubectl hostname: assigner image: "bitnami/kubectl:1.18" command: ["/bin/sh"] args: ["-c", "sleep 3000"] env: - name: "POD_LABEL" value: app.kubernetes.io/instance=release-name volumeMounts: - name: conf mountPath: /conf readOnly: false volumes: - name: conf configMap: name: assigner-cm defaultMode: 0755 serviceAccountName: assigner-sa --- # Source: redis-cluster/templates/statefulset.yaml ################################################################################### # ============LICENSE_START======================================================= # # ================================================================================ # Copyright (C) 2020 Hcl Technologies Limited. # ================================================================================ # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # ============LICENSE_END========================================================= ################################################################################### apiVersion: apps/v1 kind: StatefulSet metadata: name: redis-cluster spec: serviceName: replicas: 9 selector: matchLabels: app.kubernetes.io/name: redis-cluster app.kubernetes.io/instance: release-name template: metadata: labels: app.kubernetes.io/name: redis-cluster app.kubernetes.io/instance: release-name spec: topologySpreadConstraints: - maxSkew: 1 topologyKey: kubernetes.io/hostname whenUnsatisfiable: DoNotSchedule #whenUnsatisfiable: ScheduleAnyway #whenUnsatisfiable: DoNotSchedule labelSelector: matchLabels: app.kubernetes.io/name: redis-cluster app.kubernetes.io/instance: release-name containers: - name: redis image: "redis:5.0.1-alpine" imagePullPolicy: IfNotPresent ports: - containerPort: 6379 name: client - containerPort: 16379 name: gossip command: ["/conf/update-node.sh", "redis-server", "/conf/redis.conf"] env: - name: POD_IP valueFrom: fieldRef: fieldPath: status.podIP volumeMounts: - name: conf mountPath: /conf readOnly: false - name: data mountPath: /data readOnly: false volumes: - name: conf configMap: name: redis-cluster-cm defaultMode: 0755 volumeClaimTemplates: - metadata: name: data labels: app.kubernetes.io/name: redis-cluster app.kubernetes.io/instance: release-name spec: accessModes: [ "ReadWriteOnce" ] resources: requests: storage: 1Gi --- # Source: redis-cluster/templates/configMap.yaml ################################################################################### # ============LICENSE_START======================================================= # # ================================================================================ # Copyright (C) 2020 Hcl Technologies Limited. # ================================================================================ # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # ============LICENSE_END========================================================= ################################################################################### --- # Source: redis-cluster/templates/serviceaccount.yaml ################################################################################### # ============LICENSE_START======================================================= # # ================================================================================ # Copyright (C) 2020 Hcl Technologies Limited. # ================================================================================ # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # ============LICENSE_END========================================================= ################################################################################### *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/e2term Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:41.835Z INFO [4] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "32.961µs", "reqID": "e829e169-6e89-422c-9ca2-a414f146ce5c"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:41.840Z INFO [5] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "133.776µs", "reqID": "4641cb78-8c54-40f6-8746-8a43f8dbc58b"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/e2term [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: e2term/templates/configmap-loglevel.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-e2term-loglevel-configmap namespace: ricplt data: log-level: | log-level: 3 --- # Source: e2term/templates/configmap.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-e2term-router-configmap namespace: ricplt data: rmr_verbose: | 0 router.txt: | newrt|start rte|1080|service-ricplt-e2mgr-rmr.ricplt:3801 rte|1090|service-ricplt-e2term-rmr-alpha.ricplt:38000 rte|1100|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10020|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10060|service-ricplt-e2term-rmr-alpha.ricplt:38000 rte|10061|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10062|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10030|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10070|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10071|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10080|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10091|service-ricplt-rsm-rmr.ricplt:4801 rte|10092|service-ricplt-rsm-rmr.ricplt:4801 rte|10360|service-ricplt-e2term-rmr-alpha.ricplt:38000 rte|10361|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10362|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10370|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10371|service-ricplt-e2term-rmr-alpha.ricplt:38000 rte|12010|service-ricplt-e2term-rmr-alpha.ricplt:38000 rte|12020|service-ricplt-e2term-rmr-alpha.ricplt:38000 rte|20001|service-ricplt-a1mediator-rmr.ricplt:4562 rte|12011|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 rte|12050|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 rte|12012|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 rte|12021|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 rte|12022|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 rte|12041|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 rte|12042|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 rte|12050|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 rte|20000|service-ricxapp-ueec-rmr.ricxapp:4560;service-admission-ctrl-xapp-rmr.ricxapp:4560 newrt|end --- # Source: e2term/templates/env.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-e2term-env-alpha data: RMR_SRC_ID: service-ricplt-e2term-rmr-alpha.ricplt RMR_RTG_SVC: "4561" RMR_SEED_RT: "router.txt" RMR_VCTL_FILE: "/tmp/rmr_verbose" sctp: "36422" nano: "38000" print: "1" volume: "/data/outgoing/" --- # Source: e2term/templates/pv.yaml apiVersion: v1 kind: PersistentVolume metadata: name: pv-ricplt-e2term-alpha labels: type: local spec: storageClassName: local-storage capacity: storage: 100Mi accessModes: - ReadWriteOnce hostPath: path: /mnt/pv-ricplt-e2term-alpha --- # Source: e2term/templates/pvc.yaml kind: PersistentVolumeClaim apiVersion: v1 metadata: name: pvc-ricplt-e2term-alpha spec: accessModes: - ReadWriteOnce resources: requests: storage: 100Mi storageClassName: local-storage #volumeName: pv-ricplt-e2term --- # Source: e2term/templates/service-prometheus.yaml apiVersion: v1 kind: Service metadata: name: service-ricplt-e2term-prometheus-alpha namespace: ricplt labels: app: ricplt-e2term-alpha chart: e2term-3.0.0 release: release-name heritage: Helm annotations: prometheus.io/scrape: "true" prometheus.io/path: "/metrics" prometheus.io/port: "8088" spec: type: ClusterIP ports: - port: 8088 protocol: "TCP" targetPort: "prmts-alpha" name: "prmts-alpha" selector: app: ricplt-e2term-alpha release: release-name --- # Source: e2term/templates/service-rmr.yaml apiVersion: v1 kind: Service metadata: name: service-ricplt-e2term-rmr-alpha namespace: ricplt labels: app: ricplt-e2term-alpha chart: e2term-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 4561 protocol: "TCP" targetPort: "rmrroute-alpha" name: "rmrroute-alpha" - port: 38000 protocol: "TCP" targetPort: "rmrdata-alpha" name: "rmrdata-alpha" selector: app: ricplt-e2term-alpha release: release-name --- # Source: e2term/templates/service-sctp.yaml apiVersion: v1 kind: Service metadata: name: service-ricplt-e2term-sctp-alpha namespace: ricplt labels: app: ricplt-e2term-alpha chart: e2term-3.0.0 release: release-name heritage: Helm spec: type: NodePort ports: - port: 36422 nodePort: 32222 protocol: "SCTP" targetPort: 36422 name: "sctp-alpha" selector: app: ricplt-e2term-alpha release: release-name --- # Source: e2term/templates/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-e2term-alpha namespace: ricplt labels: app: ricplt-e2term-alpha chart: e2term-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-e2term-alpha release: release-name template: metadata: labels: app: ricplt-e2term-alpha release: release-name spec: hostname: e2term-alpha hostNetwork: false dnsPolicy: ClusterFirstWithHostNet imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc containers: - name: container-ricplt-e2term image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-e2:3.0.1 imagePullPolicy: IfNotPresent volumeMounts: - mountPath: /opt/e2/router.txt name: local-router-file subPath: router.txt - mountPath: /tmp/rmr_verbose name: local-router-file subPath: rmr_verbose - mountPath: /etc/config name: local-loglevel-file - mountPath: "/data/outgoing/" name: vol-shared readOnly: false envFrom: - configMapRef: name: configmap-ricplt-e2term-env-alpha env: - name: SYSTEM_NAME value: "SEP" - name: CONFIG_MAP_NAME value: "/etc/config/log-level" - name: HOST_NAME valueFrom: fieldRef: fieldPath: spec.nodeName - name: SERVICE_NAME value: "RIC_E2_TERM" - name: CONTAINER_NAME value: "container-ricplt-e2term" - name: POD_NAME valueFrom: fieldRef: fieldPath: metadata.name ports: - name: "rmrroute-alpha" containerPort: 4561 - name: "rmrdata-alpha" containerPort: 38000 - name: "sctp-alpha" containerPort: 36422 protocol: SCTP - name: "prmts-alpha" containerPort: 8088 stdin: true tty: true securityContext: privileged: false readinessProbe: exec: command: [ "/bin/sh", "-c", "ip=`hostname -i`;export RMR_SRC_ID=$ip;/opt/e2/rmr_probe -h $ip:38000" ] initialDelaySeconds: 120 periodSeconds: 60 livenessProbe: exec: command: [ "/bin/sh", "-c", "ip=`hostname -i`;export RMR_SRC_ID=$ip;/opt/e2/rmr_probe -h $ip:38000" ] initialDelaySeconds: 10 periodSeconds: 10 volumes: - name: local-router-file configMap: name: configmap-ricplt-e2term-router-configmap - name: local-loglevel-file configMap: name: configmap-ricplt-e2term-loglevel-configmap - name: vol-shared persistentVolumeClaim: claimName: pvc-ricplt-e2term-alpha --- # Source: e2term/templates/configmap-loglevel.yaml ################################################################################ # Copyright (c) 2023 Alexandre Huff Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: e2term/templates/configmap-pizpub.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: e2term/templates/configmap.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: e2term/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: e2term/templates/env.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: e2term/templates/pv.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################1 --- # Source: e2term/templates/pvc.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: e2term/templates/service-prometheus.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: e2term/templates/service-rmr.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: e2term/templates/service-sctp.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/jaegeradapter Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:42.010Z INFO [6] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "29.782µs", "reqID": "988515a7-8e5b-4a83-8e65-2293da369578"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:42.012Z INFO [7] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "97.134µs", "reqID": "b3ce91f6-140d-4abc-ad92-090e726af9e8"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/jaegeradapter [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: jaegeradapter/templates/env.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-jaegeradapter namespace: ricplt data: TRACING_ENABLED: "0" TRACING_JAEGER_SAMPLER_TYPE: "const" TRACING_JAEGER_SAMPLER_PARAM: "1" TRACING_JAEGER_AGENT_ADDR: service-ricplt-jaegeradapter-agent.ricplt TRACING_JAEGER_LOG_LEVEL: "error" --- # Source: jaegeradapter/templates/agent-service.yaml # Copyright (c) 2019 AT&T Intellectual Property. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: v1 kind: Service metadata: name: service-ricplt-jaegeradapter-agent namespace: ricplt labels: app: ricplt-jaegeradapter chart: jaegeradapter-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - name: "zipkincompact" port: 5775 protocol: UDP targetPort: 5775 - name: "jaegercompact" port: 6831 protocol: UDP targetPort: 6831 - name: "jaegerbinary" port: 6832 protocol: UDP targetPort: 6832 selector: app: ricplt-jaegeradapter release: release-name --- # Source: jaegeradapter/templates/collector-service.yaml # Copyright (c) 2019 AT&T Intellectual Property. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: v1 kind: Service metadata: name: service-ricplt-jaegeradapter-collector namespace: ricplt labels: app: ricplt-jaegeradapter chart: jaegeradapter-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - name: "jaegerhttpt" port: 14267 protocol: TCP targetPort: 14267 - name: "jaegerhttp" port: 14268 protocol: TCP targetPort: 14268 - name: "zipkinhttp" port: 9411 protocol: TCP targetPort: 9411 selector: app: ricplt-jaegeradapter release: release-name --- # Source: jaegeradapter/templates/query-service.yaml # Copyright (c) 2019 AT&T Intellectual Property. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: v1 kind: Service metadata: name: service-ricplt-jaegeradapter-query namespace: ricplt labels: app: ricplt-jaegeradapter chart: jaegeradapter-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - name: "httpquery" port: 16686 protocol: TCP targetPort: 16686 selector: app: ricplt-jaegeradapter release: release-name --- # Source: jaegeradapter/templates/deployment.yaml # Copyright (c) 2019 AT&T Intellectual Property. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-jaegeradapter namespace: ricplt labels: app: ricplt-jaegeradapter chart: jaegeradapter-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-jaegeradapter release: release-name template: metadata: labels: app: ricplt-jaegeradapter release: release-name spec: hostname: jaegeradapter imagePullSecrets: - name: secret-docker-io containers: - name: container-ricplt-jaegeradapter image: docker.io/jaegertracing/all-in-one:1.12 imagePullPolicy: IfNotPresent envFrom: - configMapRef: name: configmap-ricplt-jaegeradapter ports: - name: "zipkincompact" containerPort: 5775 protocol: UDP - name: "jaegercompact" containerPort: 6831 protocol: UDP - name: "jaegerbinary" containerPort: 6832 protocol: UDP - name: "httpquery" containerPort: 16686 protocol: TCP - name: "httpconfig" containerPort: 5778 protocol: TCP - name: "zipkinhttp" containerPort: 9411 protocol: TCP - name: "jaegerhttp" containerPort: 14268 protocol: TCP - name: "jaegerhttpt" containerPort: 14267 protocol: TCP livenessProbe: httpGet: path: / port: 16686 readinessProbe: httpGet: path: / port: 16686 initialDelaySeconds: 5 *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/vespamgr Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:42.156Z INFO [8] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "29.651µs", "reqID": "4d63321c-b856-46fa-8892-32d713a7d573"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:42.158Z INFO [9] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "105.575µs", "reqID": "688f1939-da00-4156-8d7c-8bccae5adf02"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/vespamgr [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: vespamgr/templates/secret.yaml apiVersion: v1 kind: Secret metadata: name: vespa-secrets type: Opaque data: VESMGR_PRICOLLECTOR_USER: "c2FtcGxlMQo=" VESMGR_PRICOLLECTOR_PASSWORD: "JDJhJDEwJDBidWguMldlWXdOODY4WU13bk5ORXVORUFNTllWVTkuRlNNSkd5SUtWM2RHRVQvN29HT2k2Cg==" --- # Source: vespamgr/templates/vespa-config.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-vespamgr namespace: ricplt data: VESMGR_HB_INTERVAL: "60s" VESMGR_MEAS_INTERVAL: "30s" VESMGR_PRICOLLECTOR_ADDR: "aux-entry" VESMGR_PRICOLLECTOR_SERVERROOT: "/vescollector" VESMGR_PRICOLLECTOR_PORT: "8443" VESMGR_PRICOLLECTOR_SECURE: "false" VESMGR_PROMETHEUS_ADDR: http://r4-infrastructure-prometheus-server.ricplt VESMGR_PRICOLLECTOR_USER: "sample1" VESMGR_PRICOLLECTOR_PASSWORD: "sample1" VESMGR_ALERTMANAGER_BIND_ADDR: ":9095" --- # Source: vespamgr/templates/service.yaml # Copyright (c) 2019 AT&T Intellectual Property. # Copyright (c) 2019 Nokia. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: v1 kind: Service metadata: name: service-ricplt-vespamgr-http namespace: ricplt labels: app: ricplt-vespamgr chart: vespamgr-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 8080 protocol: "TCP" name: "http" targetPort: "http" - port: 9095 protocol: "TCP" name: "alert" targetPort: "alert" selector: app: ricplt-vespamgr release: release-name --- # Source: vespamgr/templates/deployment.yaml # Copyright (c) 2019 AT&T Intellectual Property. # Copyright (c) 2019 Nokia. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-vespamgr namespace: ricplt labels: app: ricplt-vespamgr chart: vespamgr-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-vespamgr release: release-name template: metadata: labels: app: ricplt-vespamgr release: release-name spec: hostname: vespamgr imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc containers: - name: container-ricplt-vespamgr image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-vespamgr:0.4.0 imagePullPolicy: IfNotPresent ports: - name: http containerPort: 8080 protocol: TCP - name: alert containerPort: 9095 protocol: TCP envFrom: - configMapRef: name: configmap-ricplt-vespamgr - secretRef: name: vespa-secrets env: - name: VESMGR_APPMGRDOMAN value: service-ricplt-appmgr-http livenessProbe: httpGet: path: /supervision port: 8080 initialDelaySeconds: 30 periodSeconds: 60 timeoutSeconds: 20 *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/o1mediator Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:42.306Z INFO [10] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "19.19µs", "reqID": "62073c38-726c-4d46-afa5-5effaa5a444b"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:42.308Z INFO [11] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "92.094µs", "reqID": "7b3619e7-e92a-4400-b142-4afea1276dd1"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/o1mediator [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: o1mediator/templates/serviceaccount.yaml apiVersion: v1 kind: ServiceAccount metadata: name: svcacct-ricplt-o1mediator namespace: ricplt --- # Source: o1mediator/templates/appconfig.yaml ################################################################################ # Copyright (c) 2020 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-o1mediator-appconfig-configmap namespace: ricplt data: config-file.json: |+ { "local": { "host": ":8080" }, "logger": { "level": 4 }, "db": { "namespaces": ["sdl", "rnib"] }, "rmr": { "protPort": "tcp:4560", "maxSize": 65536, "numWorkers": 1 }, "sbi": { "appmgrAddr": "service-ricplt-appmgr-http:8080", "alertmgrAddr": "r4-infrastructure-prometheus-alertmanager:80", "timeout": 30 }, "nbi": { "schemas": ["o-ran-sc-ric-xapp-desc-v1", "o-ran-sc-ric-ueec-config-v1"] }, "controls": { "active": true } } uta_rtg.rt: | newrt|start rte|13111|127.0.0.1:4588 rte|13111|127.0.0.1:4560 newrt|end --- # Source: o1mediator/templates/env.yaml # Copyright (c) 2020 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-o1mediator-env data: RMR_SEED_RT: "/etc/o1agent/uta_rtg.rt" --- # Source: o1mediator/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: svcacct-ricplt-o1mediator-ricxapp-podreader namespace: ricxapp rules: - apiGroups: [""] resources: ["pods"] verbs: ["get", "list", "watch"] --- # Source: o1mediator/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: svcacct-ricplt-o1mediator-ricxapp-podreader namespace: ricxapp roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: svcacct-ricplt-o1mediator-ricxapp-podreader subjects: - kind: ServiceAccount name: svcacct-ricplt-o1mediator namespace: ricplt --- # Source: o1mediator/templates/service-http.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-o1mediator-http namespace: ricplt labels: app: ricplt-o1mediator chart: o1mediator-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 9001 protocol: "TCP" name: "http-supervise" targetPort: 9001 - port: 8080 protocol: "TCP" name: "http-mediation" targetPort: 8080 - port: 3000 protocol: "TCP" name: "http-event" targetPort: 3000 selector: app: ricplt-o1mediator release: release-name --- # Source: o1mediator/templates/service-tcp.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-o1mediator-tcp-netconf namespace: ricplt labels: app: ricplt-o1mediator chart: o1mediator-3.0.0 release: release-name heritage: Helm spec: type: NodePort ports: - port: 830 nodePort: 30830 protocol: "TCP" name: "tcp-netconf" selector: app: ricplt-o1mediator release: release-name --- # Source: o1mediator/templates/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-o1mediator namespace: ricplt labels: app: ricplt-o1mediator chart: o1mediator-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-o1mediator release: release-name template: metadata: labels: app: ricplt-o1mediator release: release-name spec: hostname: o1mediator imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc serviceAccountName: svcacct-ricplt-o1mediator containers: - name: container-ricplt-o1mediator image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-o1:0.3.1 imagePullPolicy: IfNotPresent envFrom: - configMapRef: name: configmap-ricplt-dbaas-appconfig - configMapRef: name: configmap-ricplt-o1mediator-env volumeMounts: - mountPath: /etc/o1agent name: appconfig-file ports: - name: http-supervise containerPort: 9001 protocol: TCP - name: http-mediation containerPort: 8080 protocol: TCP - name: http-event containerPort: 3000 protocol: TCP volumes: - name: appconfig-file configMap: name: configmap-ricplt-o1mediator-appconfig-configmap --- # Source: o1mediator/templates/deployment.yaml ################################################################################ # Copyright (c) 2019,2020 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: o1mediator/templates/serviceaccount.yaml ################################################################################ # Copyright (c) 2019-2020 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/dbaas Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:42.484Z INFO [12] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "31.281µs", "reqID": "1346abdc-f31f-4cdf-8c8c-25613eb789a9"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:42.490Z INFO [13] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "74.953µs", "reqID": "faeba5a7-1d2b-4ae2-9b3d-dac1eae87885"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/dbaas [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: dbaas/templates/appconfig.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-dbaas-appconfig namespace: ricplt data: DBAAS_NODE_COUNT: "1" DBAAS_SERVICE_HOST: service-ricplt-dbaas-tcp.ricplt DBAAS_SERVICE_PORT: "6379" --- # Source: dbaas/templates/appconfig.yaml apiVersion: v1 kind: ConfigMap metadata: name: dbaas-appconfig namespace: ricxapp data: DBAAS_NODE_COUNT: "1" DBAAS_SERVICE_HOST: service-ricplt-dbaas-tcp.ricplt DBAAS_SERVICE_PORT: "6379" --- # Source: dbaas/templates/configmap.yaml ################################################################################ # Copyright (c) 2020 AT&T Intellectual Property. # # Copyright (c) 2020 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-dbaas-config namespace: ricplt labels: heritage: Helm release: release-name chart: dbaas-2.0.0 app: ricplt-dbaas data: redis.conf: | dir "/data" appendonly no bind 0.0.0.0 loadmodule /usr/local/libexec/redismodule/libredismodule.so protected-mode no save --- # Source: dbaas/templates/service.yaml apiVersion: v1 kind: Service metadata: name: service-ricplt-dbaas-tcp labels: app: ricplt-dbaas chart: dbaas-2.0.0 release: release-name heritage: Helm spec: type: ClusterIP clusterIP: None ports: - name: server port: 6379 protocol: TCP targetPort: redis selector: release: release-name app: ricplt-dbaas --- # Source: dbaas/templates/statefulset.yaml apiVersion: apps/v1 kind: StatefulSet metadata: name: statefulset-ricplt-dbaas-server namespace: ricplt labels: app: ricplt-dbaas chart: dbaas-2.0.0 release: release-name heritage: Helm spec: selector: matchLabels: app: ricplt-dbaas release: release-name serviceName: service-ricplt-dbaas-tcp replicas: 1 podManagementPolicy: OrderedReady updateStrategy: type: RollingUpdate template: metadata: labels: app: ricplt-dbaas release: release-name spec: imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc terminationGracePeriodSeconds: 5 shareProcessNamespace: true containers: - name: container-ricplt-dbaas-redis image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-dbaas:0.6.1 imagePullPolicy: command: - redis-server args: - /data/redis.conf livenessProbe: exec: command: - /bin/sh - -c - timeout 10 redis-cli -p 6379 ping initialDelaySeconds: 15 periodSeconds: 5 readinessProbe: exec: command: - /bin/sh - -c - timeout 10 redis-cli -p 6379 ping initialDelaySeconds: 15 periodSeconds: 5 ports: - name: redis containerPort: 6379 envFrom: - configMapRef: name: configmap-ricplt-dbaas-appconfig volumeMounts: - mountPath: /data name: config volumes: - name: config configMap: name: configmap-ricplt-dbaas-config --- # Source: dbaas/templates/appconfig.yaml ################################################################################ # Copyright (c) 2020 AT&T Intellectual Property. # # Copyright (c) 2020 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: dbaas/templates/service.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: dbaas/templates/statefulset.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/e2mgr Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:42.639Z INFO [14] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "22.111µs", "reqID": "a79bce3f-6eee-44db-a28e-92e65de505d9"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:42.643Z INFO [15] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "85.094µs", "reqID": "3bec126d-2e02-4e9d-9058-96bae85a4550"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/e2mgr [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: e2mgr/templates/configmap.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-e2mgr-router-configmap namespace: ricplt data: rmr_verbose: | 0 router.txt: | newrt|start rte|1080|service-ricplt-e2mgr-rmr.ricplt:3801 rte|1090|service-ricplt-e2term-rmr.ricplt:38000 rte|1100|service-ricplt-e2term-rmr.ricplt:38000 rte|1101|service-ricplt-e2term-rmr.ricplt:38000 rte|1200|service-ricplt-rsm-rmr.ricplt:4801 rte|1210|service-ricplt-rsm-rmr.ricplt:4801 rte|1220|service-ricplt-rsm-rmr.ricplt:4801 rte|10020|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10060|service-ricplt-e2term-rmr.ricplt:38000 rte|10061|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10062|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10070|service-ricplt-e2term-rmr.ricplt:38000 rte|10071|service-ricplt-e2term-rmr.ricplt:38000 rte|10080|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10360|service-ricplt-e2term-rmr.ricplt:38000 rte|10361|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10362|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10370|service-ricplt-e2mgr-rmr.ricplt:3801 rte|10371|service-ricplt-e2term-rmr.ricplt:38000 rte|12010|service-ricplt-e2term-rmr.ricplt:38000 rte|12020|service-ricplt-e2term-rmr.ricplt:38000 rte|20001|service-ricplt-a1mediator-rmr.ricplt:4562 newrt|end --- # Source: e2mgr/templates/configmap.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-e2mgr-configuration-configmap namespace: ricplt data: configuration.yaml: | logging: logLevel: "info" http: port: 3800 rmr: port: 3801 maxMsgSize: 65536 routingManager: baseUrl: "http://service-ricplt-rtmgr-http:3800/ric/v1/handles/" notificationResponseBuffer: 100 bigRedButtonTimeoutSec: 5 maxConnectionAttempts: 3 maxRnibConnectionAttempts: 3 rnibRetryIntervalMs: 10 keepAliveResponseTimeoutMs: 360000 keepAliveDelayMs: 120000 globalRicId: ricId: "AACCE" mcc: "310" mnc: "411" rnibWriter: stateChangeMessageChannel: "RAN_CONNECTION_STATUS_CHANGE" ranManipulationMessageChannel: "RAN_MANIPULATION" --- # Source: e2mgr/templates/configmap.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-e2mgr-loglevel-configmap namespace: ricplt data: logcfg: "loglevel: 3" --- # Source: e2mgr/templates/env.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-e2mgr-env data: RMR_RTG_SVC: "4561" RMR_SRC_ID: service-ricplt-e2mgr-rmr.ricplt #nano: "3801" --- # Source: e2mgr/templates/service-http.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-e2mgr-http namespace: ricplt labels: app: ricplt-e2mgr chart: e2mgr-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 3800 protocol: "TCP" name: "http" targetPort: "http" selector: app: ricplt-e2mgr release: release-name --- # Source: e2mgr/templates/service-rmr.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-e2mgr-rmr namespace: ricplt labels: app: ricplt-e2mgr chart: e2mgr-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 4561 protocol: "TCP" name: "rmrroute" targetPort: "rmrroute" - port: 3801 protocol: "TCP" name: "rmrdata" targetPort: "rmrdata" selector: app: ricplt-e2mgr release: release-name --- # Source: e2mgr/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-e2mgr namespace: ricplt labels: app: ricplt-e2mgr chart: e2mgr-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-e2mgr release: release-name template: metadata: labels: app: ricplt-e2mgr release: release-name spec: hostname: e2mgr imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc containers: - name: container-ricplt-e2mgr image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-e2mgr:3.0.1 imagePullPolicy: IfNotPresent volumeMounts: - mountPath: /opt/E2Manager/router.txt name: local-router-file subPath: router.txt - mountPath: /etc/config name: e2mgr-loglevel-volume - mountPath: /opt/E2Manager/resources/configuration.yaml name: local-configuration-file subPath: configuration.yaml envFrom: - configMapRef: name: configmap-ricplt-e2mgr-env - configMapRef: name: configmap-ricplt-dbaas-appconfig ports: - name: "http" containerPort: 3800 - name: "rmrroute" containerPort: 4561 - name: "rmrdata" containerPort: 3801 stdin: true tty: true securityContext: privileged: false livenessProbe: httpGet: path: v1/health port: 3800 initialDelaySeconds: 3 periodSeconds: 10 readinessProbe: httpGet: path: v1/health port: 3800 initialDelaySeconds: 3 periodSeconds: 10 volumes: - name: local-router-file configMap: name: configmap-ricplt-e2mgr-router-configmap - name: local-configuration-file configMap: name: configmap-ricplt-e2mgr-configuration-configmap - name: e2mgr-loglevel-volume configMap: name: configmap-ricplt-e2mgr-loglevel-configmap items: - key: logcfg path: log-level.yaml mode: 0644 --- # Source: e2mgr/templates/ingress-e2mgr.yaml apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-ricplt-e2mgr spec: rules: - http: paths: - path: /e2mgr pathType: Prefix backend: service: name: service-ricplt-e2mgr-http port: number: 3800 --- # Source: e2mgr/templates/configmap.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/appmgr Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:42.803Z INFO [16] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "28.751µs", "reqID": "86089112-63fd-43e7-9497-20a07a9715d7"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:42.807Z INFO [17] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "86.844µs", "reqID": "075c0c7a-86b6-4419-8794-df6df18b36b7"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/appmgr [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: appmgr/templates/serviceaccount.yaml apiVersion: v1 kind: ServiceAccount metadata: name: svcacct-ricplt-appmgr namespace: ricplt --- # Source: appmgr/templates/secret.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Secret metadata: name: secret-ricplt-appmgr type: Opaque data: helm_repo_username: helm helm_repo_password: helm --- # Source: appmgr/templates/appconfig.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-appmgr-appconfig data: appmgr.yaml: | "local": # Port on which the xapp-manager REST services are provided "host": ":8080" "helm": # Remote helm repo URL. UPDATE this as required. "repo": "\"http://service-ricplt-xapp-onboarder-http:8080\"" # Repo name referred within the xapp-manager "repo-name": "helm-repo" # Tiller service details in the cluster. UPDATE this as required. "tiller-service": service-tiller-ricxapp "tiller-namespace": ricinfra "tiller-port": "44134" # helm username and password files "helm-username-file": "/opt/ric/secret/helm_repo_username" "helm-password-file": "/opt/ric/secret/helm_repo_password" "retry": 1 "xapp": #Namespace to install xAPPs "namespace": "ricxapp" "tarDir": "/tmp" "schema": "descriptors/schema.json" "config": "config/config-file.json" "tmpConfig": "/tmp/config-file.json" --- # Source: appmgr/templates/configmap-bin.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-appmgr-bin data: appmgr-tiller-secret-copier.sh: | #!/bin/sh if [ -x /svcacct-to-kubeconfig.sh ] ; then /svcacct-to-kubeconfig.sh fi if [ ! -z "${HELM_TLS_CA_CERT}" ]; then kubectl -n ${SECRET_NAMESPACE} get secret -o yaml ${SECRET_NAME} | \ grep 'ca.crt:' | \ awk '{print $2}' | \ base64 -d > ${HELM_TLS_CA_CERT} fi if [ ! -z "${HELM_TLS_CERT}" ]; then kubectl -n ${SECRET_NAMESPACE} get secret -o yaml ${SECRET_NAME} | \ grep 'tls.crt:' | \ awk '{print $2}' | \ base64 -d > ${HELM_TLS_CERT} fi if [ ! -z "${HELM_TLS_KEY}" ]; then kubectl -n ${SECRET_NAMESPACE} get secret -o yaml ${SECRET_NAME} | \ grep 'tls.key:' | \ awk '{print $2}' | \ base64 -d > ${HELM_TLS_KEY} fi svcacct-to-kubeconfig.sh: | #!/bin/sh # generate a kubconfig (at ${KUBECONFIG} file from the automatically-mounted # service account token. # ENVIRONMENT: # SVCACCT_NAME: the name of the service account user. default "default" # CLUSTER_NAME: the name of the kubernetes cluster. default "kubernetes" # KUBECONFIG: where the generated file will be deposited. SVCACCT_TOKEN=`cat /var/run/secrets/kubernetes.io/serviceaccount/token` CLUSTER_CA=`base64 /var/run/secrets/kubernetes.io/serviceaccount/ca.crt|tr -d '\n'` cat >${KUBECONFIG} <<__EOF__ ApiVersion: v1 kind: Config users: - name: ${SVCACCT_NAME:-default} user: token: ${SVCACCT_TOKEN} clusters: - cluster: certificate-authority-data: ${CLUSTER_CA} server: ${K8S_API_HOST:-https://kubernetes.default.svc.cluster.local/} name: ${CLUSTER_NAME:-kubernetes} contexts: - context: cluster: ${CLUSTER_NAME:-kubernetes} user: ${SVCACCT_NAME:-default} name: svcs-acct-context current-context: svcs-acct-context __EOF__ --- # Source: appmgr/templates/env-appmgr.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-appmgr-env data: NAME: "xappmgr" RMR_RTG_SVC: "4561" HELM_HOST: "service-tiller-ricxapp.ricinfra:44134" HELM_TLS_VERIFY: "true" HELM_TLS_CA_CERT: "/opt/ric/secret/tiller-ca.cert" HELM_TLS_HOSTNAME: "service-tiller-ricxapp" HELM_TLS_ENABLED: "true" HELM_TLS_CERT: "/opt/ric/secret/helm-client.cert" HELM_TLS_KEY: "/opt/ric/secret/helm-client.key" --- # Source: appmgr/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: svcacct-ricplt-appmgr-ricxapp-access rules: - apiGroups: [""] resources: ["pods/portforward"] verbs: ["create"] - apiGroups: [""] resources: ["pods", "configmaps", "deployments", "services"] verbs: ["get", "list", "create", "delete"] - apiGroups: [""] resources: ["secrets"] #resourceNames: [ "ricxapp-helm-secret" ] verbs: ["get","list"] --- # Source: appmgr/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: svcacct-ricplt-appmgr-ricxapp-getappconfig #namespace: ricxapp #namespace: ricplt rules: - apiGroups: [""] resources: ["configmaps", "endpoints", "services"] verbs: ["get", "list", "create", "update", "delete"] --- # Source: appmgr/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: svcacct-ricplt-appmgr-ricxapp-access namespace: ricplt roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: svcacct-ricplt-appmgr-ricxapp-access subjects: - kind: ServiceAccount name: svcacct-ricplt-appmgr namespace: ricplt --- # Source: appmgr/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: svcacct-ricplt-appmgr-ricxapp-getappconfig namespace: ricxapp #namespace: ricplt roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: svcacct-ricplt-appmgr-ricxapp-getappconfig subjects: - kind: ServiceAccount name: svcacct-ricplt-appmgr namespace: ricplt --- # Source: appmgr/templates/service-http.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-appmgr-http namespace: ricplt labels: app: ricplt-appmgr chart: appmgr-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 8080 protocol: "TCP" name: "http" targetPort: "http" selector: app: ricplt-appmgr release: release-name --- # Source: appmgr/templates/service-rmr.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-appmgr-rmr namespace: ricplt labels: app: ricplt-appmgr chart: appmgr-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 4561 protocol: "TCP" name: "rmrroute" targetPort: "rmrroute" - port: 4560 protocol: "TCP" name: "rmrdata" targetPort: "rmrdata" selector: app: ricplt-appmgr release: release-name --- # Source: appmgr/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-appmgr namespace: ricplt labels: app: ricplt-appmgr chart: appmgr-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-appmgr release: release-name template: metadata: labels: app: ricplt-appmgr release: release-name spec: hostname: appmgr serviceAccountName: svcacct-ricplt-appmgr imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc initContainers: - name: container-ricplt-appmgr-copy-tiller-secret image: nexus3.o-ran-sc.org:10002/o-ran-sc/it-dep-init:0.0.1 imagePullPolicy: IfNotPresent env: - name: SVCACCT_NAME value: svcacct-ricplt-appmgr - name: CLUSTER_NAME value: kubernetes - name: KUBECONFIG value: /tmp/kubeconfig - name: K8S_API_HOST value: https://kubernetes.default.svc.cluster.local/ - name: SECRET_NAMESPACE value: ricinfra - name: SECRET_NAME value: ricxapp-helm-secret envFrom: - configMapRef: name: configmap-ricplt-appmgr-env command: ["/appmgr-tiller-secret-copier.sh"] volumeMounts: - name: helm-secret-volume mountPath: /opt/ric/secret readOnly: false - name: appmgr-bin-volume mountPath: /svcacct-to-kubeconfig.sh subPath: svcacct-to-kubeconfig.sh - name: appmgr-bin-volume mountPath: /appmgr-tiller-secret-copier.sh subPath: appmgr-tiller-secret-copier.sh containers: - name: container-ricplt-appmgr image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-appmgr:0.2.0 imagePullPolicy: IfNotPresent ports: - name: http containerPort: 8080 protocol: TCP - name: rmrroute containerPort: 4561 protocol: TCP - name: rmrdata containerPort: 4560 protocol: TCP volumeMounts: - name: config-volume mountPath: /opt/ric/config/appmgr.yaml subPath: appmgr.yaml - name: helm-secret-volume mountPath: /opt/ric/secret readOnly: false - name: secret-volume mountPath: /opt/ric/secret/helm_repo_username subPath: helm_repo_username - name: secret-volume mountPath: /opt/ric/secret/helm_repo_password subPath: helm_repo_password envFrom: - configMapRef: name: configmap-ricplt-appmgr-env - configMapRef: name: configmap-ricplt-dbaas-appconfig livenessProbe: #exec: # command: # - /bin/bash # - -c # - ps -ef | grep | grep -v "grep" #initialDelaySeconds: 120 #periodSeconds: 30 readinessProbe: # httpGet: # path: / # port: http securityContext: # ubuntu #runAsUser: 1000 #allowPrivilegeEscalation: false restartPolicy: Always volumes: - name: config-volume configMap: name: configmap-ricplt-appmgr-appconfig - name: secret-volume secret: secretName: secret-ricplt-appmgr - name: helm-secret-volume emptyDir: {} - name: appmgr-bin-volume configMap: name: configmap-ricplt-appmgr-bin defaultMode: 0755 --- # Source: appmgr/templates/ingress-appmgr.yaml apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-ricplt-appmgr spec: rules: - http: paths: - pathType: Prefix path: /appmgr backend: service: name: service-ricplt-appmgr-http port: number: 8080 --- # Source: appmgr/templates/serviceaccount.yaml ################################################################################ # Copyright (c) 2019-2020 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/alarmmanager Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:42.976Z INFO [18] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "23.511µs", "reqID": "5fc7cbb6-4343-416f-a146-6933abab89f8"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:42.979Z INFO [19] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "81.153µs", "reqID": "582c0555-2034-41ce-894a-3920a74f3cb7"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/alarmmanager [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: alarmmanager/templates/serviceaccount.yaml apiVersion: v1 kind: ServiceAccount metadata: name: svcacct-ricplt-alarmmanager namespace: ricplt --- # Source: alarmmanager/templates/appconfig.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-alarmmanager-appconfig namespace: ricplt data: ALARM_MGR_SERVICE_NAME: service-ricplt-alarmmanager-rmr.ricplt ALARM_MGR_SERVICE_PORT: "4560" --- # Source: alarmmanager/templates/appconfig.yaml apiVersion: v1 kind: ConfigMap metadata: name: alarm-appconfig namespace: ricxapp data: ALARM_MGR_SERVICE_NAME: service-ricplt-alarmmanager-rmr.ricplt ALARM_MGR_SERVICE_PORT: "4560" --- # Source: alarmmanager/templates/configmap.yaml #================================================================================== # Copyright (c) 2019 AT&T Intellectual Property. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #================================================================================== apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-alarmmanager-alarmmanagercfg namespace: ricplt data: alarmmanagercfg: |- { "local": { "host": ":8080" }, "logger": { "level": 4 }, "db": { "namespaces": ["sdl", "rnib"] }, "rmr": { "protPort": "tcp:4560", "maxSize": 1024, "numWorkers": 1 }, "controls": { "promAlertManager": { "address": "cpro-alertmanager:80", "baseUrl": "api/v2", "schemes": "http", "alertInterval": 30000 }, "maxActiveAlarms": 5000, "maxAlarmHistory": 20000, "alarmInfoPvFile": "/mnt/pv-ricplt-alarmmanager/alarminfo.json" } } --- # Source: alarmmanager/templates/env.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-alarmmanager-env namespace: ricplt data: RMR_RTG_SVC: service-ricplt-rtmgr-rmr:4561 RMR_SEED_RT: "/cfg/uta_rtg.rt" RMR_SRC_ID: service-ricplt-alarmmanager-rmr.ricplt --- # Source: alarmmanager/templates/pv.yaml apiVersion: v1 kind: PersistentVolume metadata: name: pv-ricplt-alarmmanager namespace: ricplt labels: type: local spec: storageClassName: local-storage capacity: storage: 100Mi accessModes: - ReadWriteOnce hostPath: path: /mnt/pv-ricplt-alarmmanager --- # Source: alarmmanager/templates/pvc.yaml kind: PersistentVolumeClaim apiVersion: v1 metadata: name: pvc-ricplt-alarmmanager namespace: ricplt spec: accessModes: - ReadWriteOnce resources: requests: storage: 100Mi storageClassName: local-storage --- # Source: alarmmanager/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: svcacct-ricplt-alarmmanager-ricxapp-podreader namespace: ricxapp rules: - apiGroups: [""] resources: ["pods"] verbs: ["get", "list", "watch"] --- # Source: alarmmanager/templates/serviceaccount.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: svcacct-ricplt-alarmmanager-ricxapp-podreader namespace: ricxapp roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: svcacct-ricplt-alarmmanager-ricxapp-podreader subjects: - kind: ServiceAccount name: svcacct-ricplt-alarmmanager namespace: ricplt --- # Source: alarmmanager/templates/service-http.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-alarmmanager-http namespace: ricplt labels: app: ricplt-alarmmanager chart: alarmmanager-5.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 8080 protocol: "TCP" name: http targetPort: 8080 selector: app: ricplt-alarmmanager release: release-name --- # Source: alarmmanager/templates/service-rmr.yaml # #================================================================================== # Copyright (c) 2019 AT&T Intellectual Property. # Copyright (c) 2019 Nokia # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #================================================================================== # # # Abstract: Subscription Manager service manifest # Date: 28 May 2019 # kind: Service apiVersion: v1 metadata: name: service-ricplt-alarmmanager-rmr namespace: ricplt labels: app: ricplt-alarmmanager chart: alarmmanager-5.0.0 release: release-name heritage: Helm spec: selector: app: ricplt-alarmmanager release: release-name type: ClusterIP ports: - name: rmrdata port: 4560 protocol: TCP targetPort: rmrdata - name: rmrroute port: 4561 protocol: TCP targetPort: rmrroute selector: app: ricplt-alarmmanager release: release-name --- # Source: alarmmanager/templates/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-alarmmanager namespace: ricplt labels: app: ricplt-alarmmanager chart: alarmmanager-5.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-alarmmanager release: release-name template: metadata: labels: app: ricplt-alarmmanager release: release-name spec: hostname: alarmmanager imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc serviceAccountName: svcacct-ricplt-alarmmanager containers: - name: container-ricplt-alarmmanager image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-alarmmanager:0.5.9 imagePullPolicy: IfNotPresent env: - name: PLT_NAMESPACE value: ricplt envFrom: - configMapRef: name: configmap-ricplt-dbaas-appconfig - configMapRef: name: configmap-ricplt-alarmmanager-env ports: - name: rmrroute containerPort: 4561 protocol: TCP - name: rmrdata containerPort: 4560 protocol: TCP - name: http containerPort: 8080 protocol: TCP volumeMounts: - name: config-volume mountPath: /cfg - name: am-persistent-storage mountPath: /mnt/pv-ricplt-alarmmanager volumes: - name: config-volume configMap: name: configmap-ricplt-alarmmanager-alarmmanagercfg #name: alarmmanagercfg items: - key: alarmmanagercfg path: config-file.json mode: 0644 - name: am-persistent-storage persistentVolumeClaim: claimName: pvc-ricplt-alarmmanager --- # Source: alarmmanager/templates/appconfig.yaml ################################################################################ # Copyright (c) 2020 AT&T Intellectual Property. # # Copyright (c) 2020 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: alarmmanager/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: alarmmanager/templates/pv.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################1 --- # Source: alarmmanager/templates/pvc.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: alarmmanager/templates/serviceaccount.yaml ################################################################################ # Copyright (c) 2019-2020 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/infrastructure Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:43.428Z INFO [20] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "34.402µs", "reqID": "00603063-46be-4678-a4d5-ba09b7cd001f"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 7 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:43.448Z INFO [21] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "77.813µs", "reqID": "910320ac-8578-43b2-ae6f-75fee4ad7bbc"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/infrastructure [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: infrastructure/charts/kong/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount metadata: name: release-name-kong namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: v1 kind: ServiceAccount metadata: name: svcacct-tiller-ricxapp namespace: ricinfra --- # Source: infrastructure/templates/job-tiller-secrets.yaml apiVersion: v1 kind: ServiceAccount metadata: name: tiller-secret-creator-bxpefz namespace: ricinfra --- # Source: infrastructure/charts/certificate-manager/templates/secret.yaml apiVersion: v1 kind: Secret metadata: name: secret-ric-ca-cert namespace: ricplt data: ca.crt: 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 --- # Source: infrastructure/charts/certificate-manager/templates/secret.yaml apiVersion: v1 kind: Secret metadata: name: secret-plt-ingress-cert namespace: ricplt data: tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURpekNDQW5PZ0F3SUJBZ0lSQU5KbGphY1VDZVMvcTVZRVpvaUVtZ2t3RFFZSktvWklodmNOQVFFTEJRQXcKUFRFN01Ea0dBMVVFQXhNeUwwTTlWVk12VHoxUExWSkJUaUJCYkd4cFlXNWpaUzlQVlQxUExWSkJUaUJUYjJaMApkMkZ5WlNCRGIyMXRkVzVwZEhrd0hoY05NalF3TmpJeU1UUXhOVFExV2hjTk5Ea3dOakUyTVRReE5UUTFXakJOCk1Vc3dTUVlEVlFRREUwSXZRejFWVXk5UFBVOHRVa0ZPSUVGc2JHbGhibU5sTDA5VlBVOHRVa0ZPSUZOdlpuUjMKWVhKbElFTnZiVzExYm1sMGVTOURUajFTU1VNdFVHeGhkR1p2Y20wd2dnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQQpBNElCRHdBd2dnRUtBb0lCQVFDMGhhT2FCbVlzRXRDbzdiQ0lRS1RGVkgveE5nYmErYmtrRGZuV0g0VDQvV1VQCjZqazdWQXQzT2RVNmpKYzBQeThuU2ErSE52Qmt2eUxPS0NrbVMzNGlZNDdUVmhqMlgrYk9lWjJZQzJDVnJMWVQKSThCWHNFMlJCNnZkN1FDVXE5WlZvVTdvVHViaUorZzN0N1VoalhibFdoZ3hMUjVlRzRaTXFPSGE4M05OM3JrbApDNk1aUHJjREprcXczcEU0Y0VtdTF4OG5zZVJBWFNZa01oWkNqZkx5aHhHcXR4MmdQazhTQ3I3UHNiSzZyV1FNCkhTNTZ2WFpRSzVLRm1xTHFmUCtoeXdNSlBrbUh5alpDcCsrTXpLMWk5Zy9EUFpjTGJJeHF5K3dWZWtua0E1VFkKbjFpTkcwSTN4WU01bGNyVVFHZHpPSXhMN1g2bkg1UmllRDNmOWpaN0FnTUJBQUdqZGpCME1BNEdBMVVkRHdFQgovd1FFQXdJRm9EQWRCZ05WSFNVRUZqQVVCZ2dyQmdFRkJRY0RBUVlJS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvCkJBSXdBREFmQmdOVkhTTUVHREFXZ0JUanRQMlcyUkM2QWx2UGl6QzdkRldrMG9wK0tUQVVCZ05WSFJFRURUQUwKZ2dseWFXTXRaVzUwY25rd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFITzhkR3pDWVlCaFlnd205NkhSTDJYTQo4YlNCVDJhZnVscUpHZXlCM3NkbUwvck5OQ2daeWlMRCs4bG82dWVPNDdDRWkvS0ZGUnlCcmpwOW95MlhNMDZNClFub3d0NUt5MDR5L0YxOEhRMDBrVzhMOG9WOWtLbk9zbTJhNVp6SGllL3dScGtQN0NtaEN4Tzc4OWM1TS9pazkKcDVUOVZCN3kyOEVaUWptenNIQmpMUHlnNVVxbUxDZ3haU2diS0hRV2pWLzRJQmlVQmJpSmF4RmRscmNGNUNWcQphcGdlUVVFNFB2L2hXM0pvdkExQmNjelhRUi8xZDE4d0F4ZUFZWitvMy96NHRpNkF1SkU0czhHcEc2S2F1WDVUCitwZXByZ2xyOWR0bmdkM1B6eE5sZE9uYzh6am5tMy9IcGVBdDI0UGNBRFdpVXB1ZTBkRXluVmNpU21XaWxrND0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcEFJQkFBS0NBUUVBdElXam1nWm1MQkxRcU8yd2lFQ2t4VlIvOFRZRzJ2bTVKQTM1MWgrRStQMWxEK281Ck8xUUxkem5WT295WE5EOHZKMG12aHpid1pMOGl6aWdwSmt0K0ltT08wMVlZOWwvbXpubWRtQXRnbGF5MkV5UEEKVjdCTmtRZXIzZTBBbEt2V1ZhRk82RTdtNGlmb043ZTFJWTEyNVZvWU1TMGVYaHVHVEtqaDJ2TnpUZDY1SlF1agpHVDYzQXlaS3NONlJPSEJKcnRjZko3SGtRRjBtSkRJV1FvM3k4b2NScXJjZG9ENVBFZ3ErejdHeXVxMWtEQjB1CmVyMTJVQ3VTaFpxaTZuei9vY3NEQ1Q1Smg4bzJRcWZ2ak15dFl2WVB3ejJYQzJ5TWFzdnNGWHBKNUFPVTJKOVkKalJ0Q044V0RPWlhLMUVCbmN6aU1TKzErcHgrVVluZzkzL1kyZXdJREFRQUJBb0lCQURyRjI3cjA1R1RyQjBaSQpoSllIdmQyRklsYU5DWFJYbzRCcWtIRzNOMXE5WFI3dVdnM0gwaWZTQzJzUmhOVDgwVVJRU0RhVW0zV2hpUnBuCmx1WWg1QUljT2M3eWxCUDZxekdFQk53UXNEUnEwNml0bGh5MmlMcDBMZStHRHc5WVZ1THdMcm1SbnJmNDJERHoKdmFRYjQ1N09VMXdIWFlDMEkyaG4vNGlDaElMUU9aUXg4Zmo3d1JzeXN0QmJjZnZWS3JpUGFqalArczBneVJXQwowNDBSQitzdG5jTUFUbEpybnhlTk1ERldxWmlMN0RkYTc3UzRiVUwrQzJYSGYyTFRERjNrVmtSd0Zsem1ucm5nCnJpUW5ONEhJTTExdkpSZVF5d25sTFg1VW1YT2dBaWV2eFk5enVDMDJVN3JQYllvUDRNcm5XRnNjaUdMSGNEY3YKOGVvMCsvRUNnWUVBM3AzTlliNUNrVUMyaHByU2l0VnZQTkszMDg2MkVHb2FlUWthVVVmd3pGaE84WTNxL3A3RQpWVEhEdWMwSllqUGNPR1JjOGloUGplMk5QSkJvNzNlelpJTHBDNmUxNTNPZTJNK0hWVmYrVmpMalhiZitkc3BvCmdwdDJjd3N2czNZVm01THFwL2wvQlhDRUphb2diZ1dxSUIwVTdtR2ZCZ3dLeCtEZldWQlpsdmtDZ1lFQXo1ZlgKa0J4WTFKc2xTMndVd1Y4TEFIc3pob1RKSnlBV3RwU2xJTjlZK29zaHBGdTgyeG5JODgyVXppWkU0M0JaeUNwQQpLejIxRVZkV05pUXcrcWI4UHplWENZeHU0TDI4aUZZY2lPdFRpN2I3T2NzQTVmdkQycVpWbG8rZmtsWGVRbEhECnZvUDVQL2g2RVlRTDZKQ3BJUkRRT21NTENXZTRYZWJZalhwbWtoTUNnWUVBakJkT0dnWjdLYUZKdStkT08yUVoKUG5OMGoydjBFdHhTa0h4ei9WYUNhSFhpS0F5aEoxNk9PdmE0THdLaXR4UGZyL1Vvc0pOQmpSVkMzaXdhZlNnYwowbEczaWtnZUp1c1J1V3JQeFpzOFNNNTVXbzdoS2F3eW5JNXN1ZlQrTGJkUDNibFV4aVF5RlNBN2FPQm96QlB3CmZZa1BsUHdGOE80L0VvMm13RFBhVFRFQ2dZQndSWHE3NGRqWkF4OWtid3U2bVNCbUhqdDdvUXo1TUEyWXFVTzEKUjVYanlxTmpOSW9ySlFMZGVHM21JQ1JaclVXaFQ5aHNpbThHOWVrV1Z2UjJXeUZKUDFOY1Fxc2t1UGpoODFCegpiSEkrdWJPZFNnRXVZTDlIM1hXa2ZBQ2RML3VJZXBnV3pXRmNDNUpaTHNVUi9rcTZLMUd5Z2laUjY5cDJUb2NICjNRN2tLUUtCZ1FDOTFLL3ZOTnNQMEViby9zK3BoanhGZ1BJWi9YWDNvY0xuRUxkTWxjNHZ6c0FFYWZxaUZNTXQKZlMwTmZVK0N5QmFzckF3RG9oUnM5cjZQME9mTUFiZWd1anpJVFdnU2NVN1p5RzJPN0lhL2N1ZVB5eUpSSSsxTwp5NFNEL2FsWEpabWRDaWRuaDIxbmtnMlNKUmU5N08xRXpDRzk2djdCOEV4N2haVkdvTTViQ2c9PQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo= --- # Source: infrastructure/charts/certificate-manager/templates/secret.yaml apiVersion: v1 kind: Secret metadata: name: secret-aux-ingress-cert namespace: ricplt data: tls.crt: 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 tls.key: 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 --- # Source: infrastructure/charts/certificate-manager/templates/secret.yaml apiVersion: v1 kind: Secret metadata: name: secret-ric-ca-cert namespace: ricxapp data: ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURaVENDQWsyZ0F3SUJBZ0lRRmppdXRZNHpkRUxLa09OMUY5dXlCVEFOQmdrcWhraUc5dzBCQVFzRkFEQTkKTVRzd09RWURWUVFERXpJdlF6MVZVeTlQUFU4dFVrRk9JRUZzYkdsaGJtTmxMMDlWUFU4dFVrRk9JRk52Wm5SMwpZWEpsSUVOdmJXMTFibWwwZVRBZUZ3MHlOREEyTWpJeE5ERTFORFZhRncwME9UQTJNVFl4TkRFMU5EVmFNRDB4Ck96QTVCZ05WQkFNVE1pOURQVlZUTDA4OVR5MVNRVTRnUVd4c2FXRnVZMlV2VDFVOVR5MVNRVTRnVTI5bWRIZGgKY21VZ1EyOXRiWFZ1YVhSNU1JSUJJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBTUlJQkNnS0NBUUVBc3l2cwpicnJqQ3JKbEYrbksxOXB2clREY25LYkZOR3Z4R01BTWtoZlgvalNhQmlXckJIa1FkWlNxWE55Y3dzWmU1c0Q5ClY1cVBMa0tBRTU1dU9PYUxBWExzZWhIRzlWRy9JT1VtMVBLT0FKb1ZsTklYTEVtRTZHT3BteC9IMEYreHhWckMKVXdvWWo2cDYrU0hnQXdnazlvRXJGVUZ6TmhFUVZ4UGthc3k3dkFwY0dEeEpibjZUQ3l1dDRIZXFnRmh5Q1pNbgpRQUNlV1ZmNGNRR2NOTEZSc2U3MzNNSTFOUmNhUjVUOXpyaGo1RXhudWFUYkwrUy9CcmpRS2ZTejRxek1pa2h3CjVNeE13MWVoeHY2MEdMa1dIclZvSjN5V01INGFEUVhGSEVSZVlvd1o3TE1HRmY4TFNoSk5NL0pxR3kyeDZQRUIKNEg5ck94aXZEVTRaVGRMUjJ3SURBUUFCbzJFd1h6QU9CZ05WSFE4QkFmOEVCQU1DQXFRd0hRWURWUjBsQkJZdwpGQVlJS3dZQkJRVUhBd0VHQ0NzR0FRVUZCd01DTUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3SFFZRFZSME9CQllFCkZPTzAvWmJaRUxvQ1c4K0xNTHQwVmFUU2luNHBNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNyUkE0ampKTEUKUHVrQkJoY1hPL215bi8wWjhuNGpCZ25xakU1WDhpQ0hoL0theEtZM0RncVZ3UU92VWZkMXNhRHZvZkdsVzFuSQo2RDVnazVTMWVneDAxQ2wyQllKVnRnR0hMRXhXUjNIeC9kdkluY3FUQmQ5dzBHRGpaU2UwQVM2djVmV21YMU00Cm50dUI3M1E5UEVLVmc1VDZMQWc5M0RtQVo2WUZXb2U0Z2Jub0s5cDdyWmpqRTNSQlpBdVJ2b3VsTys4RDQ2Q1AKUHNPR0k2eTk0NFhGOGxpZVJGUlhGVHlreW54VUV5azlXOXZYTy9lQXZ5eGJFODg2aDZNNTBaM1FZODEwWXQ3RApxZXVPUWpISVpJcFl5Y1NONENCYkNGZjVuaklnQUxhQUpUWUtVajR0dWo5QzJmaXZtUkwwaEwyVVFpeUFqUE1wCmZFOFhUMmhvRE5EMAotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== --- # Source: infrastructure/charts/certificate-manager/templates/secret.yaml apiVersion: v1 kind: Secret metadata: name: secret-plt-ingress-cert namespace: ricxapp data: tls.crt: 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 tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcEFJQkFBS0NBUUVBdElXam1nWm1MQkxRcU8yd2lFQ2t4VlIvOFRZRzJ2bTVKQTM1MWgrRStQMWxEK281Ck8xUUxkem5WT295WE5EOHZKMG12aHpid1pMOGl6aWdwSmt0K0ltT08wMVlZOWwvbXpubWRtQXRnbGF5MkV5UEEKVjdCTmtRZXIzZTBBbEt2V1ZhRk82RTdtNGlmb043ZTFJWTEyNVZvWU1TMGVYaHVHVEtqaDJ2TnpUZDY1SlF1agpHVDYzQXlaS3NONlJPSEJKcnRjZko3SGtRRjBtSkRJV1FvM3k4b2NScXJjZG9ENVBFZ3ErejdHeXVxMWtEQjB1CmVyMTJVQ3VTaFpxaTZuei9vY3NEQ1Q1Smg4bzJRcWZ2ak15dFl2WVB3ejJYQzJ5TWFzdnNGWHBKNUFPVTJKOVkKalJ0Q044V0RPWlhLMUVCbmN6aU1TKzErcHgrVVluZzkzL1kyZXdJREFRQUJBb0lCQURyRjI3cjA1R1RyQjBaSQpoSllIdmQyRklsYU5DWFJYbzRCcWtIRzNOMXE5WFI3dVdnM0gwaWZTQzJzUmhOVDgwVVJRU0RhVW0zV2hpUnBuCmx1WWg1QUljT2M3eWxCUDZxekdFQk53UXNEUnEwNml0bGh5MmlMcDBMZStHRHc5WVZ1THdMcm1SbnJmNDJERHoKdmFRYjQ1N09VMXdIWFlDMEkyaG4vNGlDaElMUU9aUXg4Zmo3d1JzeXN0QmJjZnZWS3JpUGFqalArczBneVJXQwowNDBSQitzdG5jTUFUbEpybnhlTk1ERldxWmlMN0RkYTc3UzRiVUwrQzJYSGYyTFRERjNrVmtSd0Zsem1ucm5nCnJpUW5ONEhJTTExdkpSZVF5d25sTFg1VW1YT2dBaWV2eFk5enVDMDJVN3JQYllvUDRNcm5XRnNjaUdMSGNEY3YKOGVvMCsvRUNnWUVBM3AzTlliNUNrVUMyaHByU2l0VnZQTkszMDg2MkVHb2FlUWthVVVmd3pGaE84WTNxL3A3RQpWVEhEdWMwSllqUGNPR1JjOGloUGplMk5QSkJvNzNlelpJTHBDNmUxNTNPZTJNK0hWVmYrVmpMalhiZitkc3BvCmdwdDJjd3N2czNZVm01THFwL2wvQlhDRUphb2diZ1dxSUIwVTdtR2ZCZ3dLeCtEZldWQlpsdmtDZ1lFQXo1ZlgKa0J4WTFKc2xTMndVd1Y4TEFIc3pob1RKSnlBV3RwU2xJTjlZK29zaHBGdTgyeG5JODgyVXppWkU0M0JaeUNwQQpLejIxRVZkV05pUXcrcWI4UHplWENZeHU0TDI4aUZZY2lPdFRpN2I3T2NzQTVmdkQycVpWbG8rZmtsWGVRbEhECnZvUDVQL2g2RVlRTDZKQ3BJUkRRT21NTENXZTRYZWJZalhwbWtoTUNnWUVBakJkT0dnWjdLYUZKdStkT08yUVoKUG5OMGoydjBFdHhTa0h4ei9WYUNhSFhpS0F5aEoxNk9PdmE0THdLaXR4UGZyL1Vvc0pOQmpSVkMzaXdhZlNnYwowbEczaWtnZUp1c1J1V3JQeFpzOFNNNTVXbzdoS2F3eW5JNXN1ZlQrTGJkUDNibFV4aVF5RlNBN2FPQm96QlB3CmZZa1BsUHdGOE80L0VvMm13RFBhVFRFQ2dZQndSWHE3NGRqWkF4OWtid3U2bVNCbUhqdDdvUXo1TUEyWXFVTzEKUjVYanlxTmpOSW9ySlFMZGVHM21JQ1JaclVXaFQ5aHNpbThHOWVrV1Z2UjJXeUZKUDFOY1Fxc2t1UGpoODFCegpiSEkrdWJPZFNnRXVZTDlIM1hXa2ZBQ2RML3VJZXBnV3pXRmNDNUpaTHNVUi9rcTZLMUd5Z2laUjY5cDJUb2NICjNRN2tLUUtCZ1FDOTFLL3ZOTnNQMEViby9zK3BoanhGZ1BJWi9YWDNvY0xuRUxkTWxjNHZ6c0FFYWZxaUZNTXQKZlMwTmZVK0N5QmFzckF3RG9oUnM5cjZQME9mTUFiZWd1anpJVFdnU2NVN1p5RzJPN0lhL2N1ZVB5eUpSSSsxTwp5NFNEL2FsWEpabWRDaWRuaDIxbmtnMlNKUmU5N08xRXpDRzk2djdCOEV4N2haVkdvTTViQ2c9PQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo= --- # Source: infrastructure/charts/certificate-manager/templates/secret.yaml apiVersion: v1 kind: Secret metadata: name: secret-aux-ingress-cert namespace: ricxapp data: tls.crt: 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 tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcEFJQkFBS0NBUUVBb2thLzdMSHNoUkhvUWVkaGlWbzQweXFyUE1KSVNkNUVPNEplN3hpcndKT1lqaGtNCkhFSmpyOGw4SWhKMm1hNW9KdzRnQ2xmdmRQOGNBOEQvMWNieE5naTRHc0ViVEpjc0JyVjkrYlBxdEVKNnNZWlEKZXdVRmg5c0tZR1VCcFdyQ1V3bnZ4bFkwcWxiNGpLdnVORDFzTWFlVnhNVytCU25NYXg4RjNXZzBITFYvN1RldwpyL2tnb1I5dUNJWjBuSXhMenJ3cTVobi9waTY4MHY5eTY3SnoydXVsTUkwSzdwUE5XODJoVmNSQmVIdDg5NGdzCldDNTBBRkVhbXlLdDhDTDMrUFUxZHVWZHZnUnpmSjBVV0dDVDIwWXZ6bmRJSTdGT2lyTlBFdm1ONXFmdDFSTHMKTTZVREp1Z29yd1JSUHJWRmN2NjRHUStmTGwxczBicmZiMlh2MndJREFRQUJBb0lCQURDZTZocE5KUVNwM09FQwpKcU0wdVJuc0N1cGxlNnRHUVVOalNIWnkrZUwxVmh3ZFBSZXFmSnZLenJxV3RacE9PejZZYU5rd2g3cVNSUjZLCjBSeUlRdlZobjJmRXZCMHluaXBVYnE1R1RlZzhrdTVsdys5WURkUXF1TzB3MWxGdHIxT2FBcEYyZXNrZXpkRzQKSWVMZEZIRzhPSStBZi9La0YyOXhHQnpDZi9xcG5NalEzVjNlQXFWRUNib1FnTUVweTNDckh4ZXVlMDNRdERNTgoraXl0K1BSN1p5YUtOeHVCZXNMMWNSTXk5b1R3Rm5WS1BNQkV6RUE5YUJLdzE4eFFLMmN3a1Y3b0ZuTlh5aWlFCmJOSHVnKytjWldqWFFOQm95TkhMMkVUZ0xDOGJsU2hIQzFEZjZLS2V0dHNHbWkzdDFCazJ5WlpVSXMzSE82WkwKazk4SDAwRUNnWUVBem5wRVV0K0RrZXBtcG1hc1A3Vm9hVUZrWllwUFlxTzhOQlE4eWpGV3FZZDhmeGhSbGU0dgp2dzJCcXNsbjQrUlBXUS96d0Zaa1JnZUdyNlBtbmpqakd5ZkV1dkNnT0FUQVd4SWM5dUM4SEg0MnNZZjlCaFdsCkpselVUODNkVFNaN1lrRDJUdVo0UWUzNEhUYmsxTTFpUGxVN25nOGFBMUp0SkNhT1ZpR1d2OE1DZ1lFQXlUS0cKWmdTcktQcnpNekErRm0wVCtMeEx1a1F6Rk1yTjM0WkJLQ1ZRZ1R1bVJuUTBtcUY0eUJ1QU4wOGpJclFvY2c3awpJWndVTENJU09Sd2s3VWhHelZaVGtWSU13YWd2SEtMWEI3NGF4S3hGVEQrSWVTRDA3MEE0Q25qK000T2h4ZUlTCmMxL29EZ0ZObE1GU1EzMHBmWnlORjBLczJKYUFaOGdnZGk3dzVna0NnWUVBcGF6QnFlV2pBckFja2FTTXpjblgKNzYwQ3k5OEE5OXI5cHFRZWF2YlAzTlBUOTM4aDU3WHBKZG5HazYxcjZSWkcvT1dwNWtqcnlLMDlTeTJ1WElLMAo2Qk11N2ZrcDlna0o5NGsvS0hFSFA2MmVZVEVHdTUwZW1QdWZlREZ0UXZ4L3dFVHozamRiZ3p0WS9NZ1JNUmRqCm56UncwOUMyUkxnY3p3Y0k2dCtrd0ZVQ2dZRUFrc2d0ak5mekZ0NmQ5c1pIUlkwbWVOekdVb25XeW1CNmVZdzAKbE5sRU5rUVNObXdveEhidzZ1eEZTaFNPQ1k5dHdtaGl2ckpqZFI4V05GdjRCTFFxRXp2Yms3Vk1ZU3dWMHNwcQpIZGZ2SjNTV3lkMi83cjdBY3B0alJ5Q21NMmJnNnNEWHZSeEc2NUMvekxxTkRYZU9nWGxvNVlOYkhsZ09MYWl2CkpnbHc3aUVDZ1lCbXI0NFoxS3QyNFBGaTJrSTVkQUNoUFlvdU5ISkExMjU2ZXpkT1R3WUxkL0V3MVFwQWFtOCsKc3llVTVmbitNaVFxMXNoZlRrWXRwL092ZElhS1hNYnVFQjBGOWtuL1VneGJWcWlGYnc2dHhWOU16VDBCYmIwbQozeGtDWXl5UUZuN2RjejlDTkk3SXU5c2xIVlp3dFJKNG96UWZtYnZMWXdwcUhpYjk1TGJEbVE9PQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo= --- # Source: infrastructure/charts/docker-credential/templates/secrets-docker-reg.yaml apiVersion: v1 kind: Secret metadata: name: secret-nexus3-o-ran-sc-org-10002 namespace: ricplt data: .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDAyIjp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= type: kubernetes.io/dockercfg --- # Source: infrastructure/charts/docker-credential/templates/secrets-docker-reg.yaml apiVersion: v1 kind: Secret metadata: name: secret-nexus3-o-ran-sc-org-10004 namespace: ricplt data: .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDA0Ijp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= type: kubernetes.io/dockercfg --- # Source: infrastructure/charts/docker-credential/templates/secrets-docker-reg.yaml apiVersion: v1 kind: Secret metadata: name: secret-nexus3-o-ran-sc-org-10002 namespace: ricxapp data: .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDAyIjp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= type: kubernetes.io/dockercfg --- # Source: infrastructure/charts/docker-credential/templates/secrets-docker-reg.yaml apiVersion: v1 kind: Secret metadata: name: secret-nexus3-o-ran-sc-org-10004 namespace: ricxapp data: .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDA0Ijp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= type: kubernetes.io/dockercfg --- # Source: infrastructure/charts/docker-credential/templates/secrets-docker-reg.yaml apiVersion: v1 kind: Secret metadata: name: secret-nexus3-o-ran-sc-org-10002 namespace: ricinfra data: .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDAyIjp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= type: kubernetes.io/dockercfg --- # Source: infrastructure/charts/docker-credential/templates/secrets-docker-reg.yaml apiVersion: v1 kind: Secret metadata: name: secret-nexus3-o-ran-sc-org-10004 namespace: ricinfra data: .dockercfg: eyJuZXh1czMuby1yYW4tc2Mub3JnOjEwMDA0Ijp7InVzZXJuYW1lIjoiZG9ja2VyIiwicGFzc3dvcmQiOiJkb2NrZXIiLCJlbWFpbCI6IkAiLCJhdXRoIjoiWkc5amEyVnlPbVJ2WTJ0bGNnPT0ifX0= type: kubernetes.io/dockercfg --- # Source: infrastructure/charts/kong/templates/admission-webhook.yaml apiVersion: v1 kind: Secret metadata: name: release-name-kong-validation-webhook-ca-keypair namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" type: kubernetes.io/tls data: tls.crt: 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 tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcFFJQkFBS0NBUUVBNFlIYjIrSnJRR0srY3AyeWdIMkdZMDM1SnBsdDh4OHdUcXdldExOS1Y4Ym8zL0EvCjg5VHFEaytQc3ZGQzNxclB2Z1NSWGVDZERIdWYvZ29hZTBrdWlhS2Z1Q1N2OFFwTTcyRHFKdEJHN1JMOU94Qk0Kcm1YYzdJNGZoNGNMR1RjWkxCWUVKNk84YmZoZHRWNEJiNjR5aDhnQk9nR3NjVTVhMDd1aGUyTFdXakQybVVzUApxZTljdkNZR1l4OThGeU5nb3FBbXFqNzJxNm0yQmJsREhrcWljMEdhek51WUcxMDhZUmdWNXMwNVB5WU9ya21pCmlxN2g0MU9nZlVSWE96OHFRSnkzSDFRZGM0K1BQeEVReWNYOElWbGlzYUpPZld0dVpmM3NZTU5YM0Frd1FKMDgKSC9kZHQyOHJCMDIvc0tqVUVRSWRkNWlIS3VhVk8vUWNlSklsa3dJREFRQUJBb0lCQVFDNEwzQjdyL3NabzQwWgo0R09qUHVNOHlMcnZJL0lCMlQrRGdtR3lCWjU3QXlQQmhHRTNybmRkS082ZG9TQ1U3YjZ2M05zK2FlN2IrejA2CktOWm9TK1dPMVJ6UE1tZmg0Qi9taEttNitmSjBRRVpFcjVOeC9oRHJ4VWxMVUtsbjl2REFhVnNMWlZqS0dVbXcKa1E5clFFUlZVcTV0eW1BbVMzRXo3dFIrQ3NRNDlLeEhDY1B5ZTJlMVVBeWNqMkxDdndMMERBeUxORENtOEg0ZApuMFFPZWp2OGhlODl5QVRwSGdXTG85SVpid0pQSDAvVFlVcmV3THpkZC9NNHZxeUtrdlVPOHh5dVAwaVBISW85Cm53ZWRscm1NUVpPVmdpRlR6Z3ZiK1dUUTNCMWpWRGNLUS9ncGY5SFVxcUNOdWFuVHdvUlFxS3pZOTlCamtRZGcKZDRSM2d1UkJBb0dCQU9qcjEwWXlYamdYUDV1MlhlRWVqaFpyR3Z4WE1FeG9qNTlmNzZFRHhRRjZucWkxalk1TgpXL3gxMWQ0ZE5PcmVPMkZtVXMrVkd5TW9URlQzR3NQUk9TdlBGWVMvS2JEdXFJUkhqUDNoUHlQZ0ZlZnBZSkdECkJ3WktNclJnd3lESzd1NjlMZUNSbU1PTUFpbWtuZXhQR0t5Y1lKWE9yVk4yNzVCQUpiazJkbStGQW9HQkFQZloKOVZ4S08wYkUyVDcxbjRURkU0V1ZFazRRTExnaXVtblZxZklVR2poZmxmN2o5b1lsT1hYbGVZMmVXdjdFaWZXeAo4S0plVVJRRmY1VU9vTVVSODFNYXdMa1ZkbW9ubVhIREY5azZWZFpkclJRMTdBQ1lFT3lZTVB6TTZ6ZnpEMzVRCi9sTXdjTUtORlVtb1dTc01Rby9RaS9hSHpSOXlkTmY3ZDViejNuQTNBb0dCQU03Z2tsODk0Mk9NZXFteUM2WWsKdm16NUNvbndZdXlxdmszL0p0WnJnN0p4bDdRZk5UQ2NVMFJqNE9ZY0tPRW5LN1N4N29HRFhRd1lBZHhCY2h0VQpuS1BsbGFaSEtCK0hpbE9iUFlaTlp3aFZRdit0MEdETjhSSk1Hc2NOWHFLa3ZCMStGOTVyVXpUMENRTzF1N0trCitqUnQzSGVTajI0ZnFGNEdLN3RhdlUwRkFvR0FYV0MxaXg3QWRHb25ld3ZwSElsdlVHMlladWE3SW1pYkdOS1IKNDQxbFQ0WGJxaHRTdnJsNWk0eDRIajNpQklnaGZmcWJNV0VkWk5DcGY0dnlVQ3p5SW9ZNnc4QnRTNU05d1ZtQwpPNm81dXJpeVE2SUpGelF6ZEIvbW5PZkxXdG50SldiNFdua3VrbTI2N25SSm0rbFRqb0ZBcWhJQjJ1NHhUVW9GCmhVNjlxRU1DZ1lFQXZXbG52MmdYd09NYldhMm9WeHRQeFFubkNKR1c4V250YUhrUkptdk85RTBDTW1QR1pKd08KQURqeEJGMzY5OEFUK3dHSmYxZXIvSzlZNEdBUGJwV2pRMU5EL294NVZmN3RtVDNWcCtJVlRFMGVVUENnV0FhMApCOTNUSkhRVFlZSkV3bkd2YWpRU1RwdVhoTVpPOUVOV3pLUGM1eGRuUTlNVFYzVmdiallENEhZPQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo= --- # Source: infrastructure/charts/kong/templates/admission-webhook.yaml apiVersion: v1 kind: Secret metadata: name: release-name-kong-validation-webhook-keypair namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" type: kubernetes.io/tls data: tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURnVENDQW1tZ0F3SUJBZ0lSQUlHMkF4SXJReWhjNUxYUXIzZjFibE13RFFZSktvWklodmNOQVFFTEJRQXcKSERFYU1CZ0dBMVVFQXhNUmEyOXVaeTFoWkcxcGMzTnBiMjR0WTJFd0hoY05NalF3TmpJeU1UUXhOVFExV2hjTgpNelF3TmpJd01UUXhOVFExV2pBN01Ua3dOd1lEVlFRREV6QnlaV3hsWVhObExXNWhiV1V0YTI5dVp5MTJZV3hwClpHRjBhVzl1TFhkbFltaHZiMnN1WkdWbVlYVnNkQzV6ZG1Nd2dnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0SUIKRHdBd2dnRUtBb0lCQVFDaGJBR0kyODJkQk8rSDRObjdpSWpxZ2hWb3ZkeHRidzg2a0E3c1M2d3RtNVYzZjRDbgpWeGxLZGxjaU5qSFNWcmVKNEN4M2VVbnhQTG53dGZQM1c1SkJCVmQ5dUFxakV2RXJob0tnSE1oKzh5ME5lV0llCnV4TUlHTnh5VFE4eHBzSDUvVSsxSFhTY0tUSGhTdW84V3lxa1pERmtiZ0h2eTlxZXcxNGhQTnZqUlVzOFFySnQKRlpkUm52eTE1SUZ5eXhuZ1pJSXJ0ZTY5YnJVVnhUdkhzWXZ3RkRrY0RmayttTWlUKzVvbkY2TFBRMjRVSndLQgpaYTd4OElCNmVhZlhaVE93WURjYmZiUUtranNtMlRka254c2pvcURiVVVzam9OamtNMFRLQTA4V2VtclVMRjhDCmRNVEtpRjFNMERjZWhUUzhTL2NVejhnSmxuaGdZalNaNTJtdEFnTUJBQUdqZ1o0d2dac3dEZ1lEVlIwUEFRSC8KQkFRREFnV2dNQjBHQTFVZEpRUVdNQlFHQ0NzR0FRVUZCd01CQmdnckJnRUZCUWNEQWpBTUJnTlZIUk1CQWY4RQpBakFBTUI4R0ExVWRJd1FZTUJhQUZEUG1KWWp5Wk83R2RsVUE3bTVKNG9CQXM4MllNRHNHQTFVZEVRUTBNREtDCk1ISmxiR1ZoYzJVdGJtRnRaUzFyYjI1bkxYWmhiR2xrWVhScGIyNHRkMlZpYUc5dmF5NWtaV1poZFd4MExuTjIKWXpBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQUNsVmdRUjM1c3R6RUsrUzR4M25EcktDZ3pzYndZMmNrejB4bgptS0lZOGJqc2pNZndqSElUQXVxM0dUR2FRNlBYcEtpcU1XREpjc2lKTCtjQmpxVkEzUDFVTHRoVWIvcHBCZEFCCkgxQnhQL3FWUEJDZmpPc09sUFNMb1V5YWJCaWJabHF0d2s3cUF1Z3g1QjIzTk9VeHc4RGxYakhybmFqWU5JYmsKTXM0cjZTR1p0clY0ZmlrNi9UVjJPcG92eVE0alNLcnpHcFJ5TWtFa0U2SVhXRTUxek16VHF0YitMa0NnbjRlcgpwcU04a2k3MTdwd3VJRi9rMklLbVhoQmRVQzgxWW8xRnl6a2lxRWc3eEhpVG5wU0l5UWhoVTFKWFhGUWU0Y2RvClp1aDZrMVRnV3lJVForbGZFb1U3T05HbHh4RUJqQXB0L0FST1dyMUd2SGpqc1FOT3R3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= tls.key: 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 --- # Source: infrastructure/charts/kong/templates/controller-rbac-resources.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" name: release-name-kong rules: - apiGroups: - configuration.konghq.com resources: - kongupstreampolicies verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - kongupstreampolicies/status verbs: - get - patch - update - apiGroups: - configuration.konghq.com resources: - kongconsumergroups verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - kongconsumergroups/status verbs: - get - patch - update - apiGroups: - "" resources: - events verbs: - create - patch - apiGroups: - "" resources: - nodes verbs: - list - watch - apiGroups: - "" resources: - pods verbs: - get - list - watch - apiGroups: - "" resources: - secrets verbs: - list - watch - apiGroups: - "" resources: - services verbs: - get - list - watch - apiGroups: - "" resources: - services/status verbs: - get - patch - update - apiGroups: - configuration.konghq.com resources: - ingressclassparameterses verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - kongconsumers verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - kongconsumers/status verbs: - get - patch - update - apiGroups: - configuration.konghq.com resources: - kongingresses verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - kongingresses/status verbs: - get - patch - update - apiGroups: - configuration.konghq.com resources: - kongplugins verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - kongplugins/status verbs: - get - patch - update - apiGroups: - configuration.konghq.com resources: - tcpingresses verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - tcpingresses/status verbs: - get - patch - update - apiGroups: - configuration.konghq.com resources: - udpingresses verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - udpingresses/status verbs: - get - patch - update - apiGroups: - extensions resources: - ingresses verbs: - get - list - watch - apiGroups: - extensions resources: - ingresses/status verbs: - get - patch - update - apiGroups: - networking.k8s.io resources: - ingresses verbs: - get - list - watch - apiGroups: - networking.k8s.io resources: - ingresses/status verbs: - get - patch - update - apiGroups: - discovery.k8s.io resources: - endpointslices verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - konglicenses verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - konglicenses/status verbs: - get - patch - update - apiGroups: - configuration.konghq.com resources: - kongvaults verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - kongvaults/status verbs: - get - patch - update - apiGroups: - configuration.konghq.com resources: - kongclusterplugins verbs: - get - list - watch - apiGroups: - configuration.konghq.com resources: - kongclusterplugins/status verbs: - get - patch - update - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - list - watch - apiGroups: - networking.k8s.io resources: - ingressclasses verbs: - get - list - watch --- # Source: infrastructure/charts/kong/templates/controller-rbac-resources.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: release-name-kong labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: release-name-kong subjects: - kind: ServiceAccount name: release-name-kong namespace: default --- # Source: infrastructure/charts/kong/templates/controller-rbac-resources.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: release-name-kong namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" rules: - apiGroups: - "" resources: - configmaps - pods - secrets - namespaces verbs: - get - apiGroups: - "" resources: - configmaps resourceNames: # Defaults to "-" # Here: "-" # This has to be adapted if you change either parameter # when launching the nginx-ingress-controller. - "kong-ingress-controller-leader-kong-kong" verbs: - get - update - apiGroups: - "" resources: - configmaps verbs: - create # Begin KIC 2.x leader permissions - apiGroups: - "" - coordination.k8s.io resources: - configmaps - leases verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - events verbs: - create - patch - apiGroups: - "" resources: - services verbs: - get --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: ricxapp-tiller-base namespace: ricxapp rules: - apiGroups: [""] resources: ["secrets"] resourceNames: [ ricxapp-tiller-secret ] verbs: ["get"] - apiGroups: [""] resources: ["pods/portforward"] verbs: ["create"] - apiGroups: [""] resources: ["namespaces"] verbs: ["get"] - apiGroups: [""] resources: ["pods", "configmaps", "deployments", "services"] verbs: ["get", "list", "create", "delete"] --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: ricxapp-tiller-operation namespace: ricinfra rules: - apiGroups: [""] resources: ["configmaps"] verbs: ["get", "list", "create", "delete", "update"] --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: ricxapp-tiller-deployer namespace: ricxapp rules: - apiGroups: - "" resources: - pods - configmaps - services verbs: - get - list - create - delete - apiGroups: - extensions - apps resources: - deployments verbs: - get - list - create - delete --- # Source: infrastructure/templates/job-tiller-secrets.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: tiller-secret-creator-bxpefz-secret-create namespace: ricinfra rules: - apiGroups: [""] resources: ["secrets"] verbs: ["create", "get", "patch"] --- # Source: infrastructure/charts/kong/templates/controller-rbac-resources.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: release-name-kong namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: release-name-kong subjects: - kind: ServiceAccount name: release-name-kong namespace: default --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: svcacct-tiller-ricxapp-ricxapp-tiller-base namespace: ricxapp roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: ricxapp-tiller-base subjects: - kind: ServiceAccount name: svcacct-tiller-ricxapp namespace: ricinfra --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: svcacct-tiller-ricxapp-ricxapp-tiller-operation namespace: ricinfra roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: ricxapp-tiller-operation subjects: - kind: ServiceAccount name: svcacct-tiller-ricxapp namespace: ricinfra --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: svcacct-tiller-ricxapp-ricxapp-tiller-deployer namespace: ricxapp roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: ricxapp-tiller-deployer subjects: - kind: ServiceAccount name: svcacct-tiller-ricxapp namespace: ricinfra --- # Source: infrastructure/templates/job-tiller-secrets.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: tiller-secret-creator-bxpefz-secret-create namespace: ricinfra roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tiller-secret-creator-bxpefz-secret-create subjects: - kind: ServiceAccount name: tiller-secret-creator-bxpefz namespace: ricinfra --- # Source: infrastructure/charts/extsvcplt/templates/services-aux.yaml kind: "Service" apiVersion: "v1" metadata: name: aux-entry namespace: ricplt spec: ports: - name: aux-entry-http-ingress-port protocol: "TCP" port: 80 - name: aux-entry-https-ingress-port protocol: "TCP" port: 443 --- # Source: infrastructure/charts/extsvcplt/templates/services-aux.yaml kind: "Service" apiVersion: "v1" metadata: name: aux-entry namespace: ricxapp spec: ports: - name: aux-entry-http-ingress-port protocol: "TCP" port: 80 - name: aux-entry-https-ingress-port protocol: "TCP" port: 443 --- # Source: infrastructure/charts/kong/templates/admission-webhook.yaml apiVersion: v1 kind: Service metadata: name: release-name-kong-validation-webhook namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" spec: ports: - name: webhook port: 443 protocol: TCP targetPort: webhook selector: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" app.kubernetes.io/component: app --- # Source: infrastructure/charts/kong/templates/service-kong-manager.yaml apiVersion: v1 kind: Service metadata: name: release-name-kong-manager namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" spec: type: NodePort ports: - name: kong-manager port: 8002 targetPort: 8002 protocol: TCP - name: kong-manager-tls port: 8445 targetPort: 8445 protocol: TCP selector: app.kubernetes.io/name: kong app.kubernetes.io/component: app app.kubernetes.io/instance: "release-name" --- # Source: infrastructure/charts/kong/templates/service-kong-proxy.yaml apiVersion: v1 kind: Service metadata: name: release-name-kong-proxy namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" enable-metrics: "true" spec: type: LoadBalancer ports: - name: kong-proxy port: 80 targetPort: 8000 nodePort: 32080 protocol: TCP - name: kong-proxy-tls port: 443 targetPort: 8443 nodePort: 32443 protocol: TCP selector: app.kubernetes.io/name: kong app.kubernetes.io/component: app app.kubernetes.io/instance: "release-name" --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: v1 kind: Service metadata: creationTimestamp: null labels: app: helm name: tiller name: service-tiller-ricxapp namespace: ricinfra spec: ports: - name: tiller port: 44134 targetPort: tiller selector: app: helm name: tiller type: ClusterIP --- # Source: infrastructure/charts/kong/templates/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: name: release-name-kong namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" app.kubernetes.io/component: app spec: replicas: 1 selector: matchLabels: app.kubernetes.io/name: kong app.kubernetes.io/component: app app.kubernetes.io/instance: "release-name" template: metadata: annotations: kuma.io/service-account-token-volume: release-name-kong-token kuma.io/gateway: "enabled" traffic.sidecar.istio.io/includeInboundPorts: "" labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" app.kubernetes.io/component: app app: release-name-kong version: "3.6" spec: serviceAccountName: release-name-kong automountServiceAccountToken: false initContainers: - name: clear-stale-pid image: kong:3.6 imagePullPolicy: IfNotPresent securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 seccompProfile: type: RuntimeDefault resources: {} command: - "rm" - "-vrf" - "$KONG_PREFIX/pids" env: - name: KONG_ADMIN_ACCESS_LOG value: "/dev/stdout" - name: KONG_ADMIN_ERROR_LOG value: "/dev/stderr" - name: KONG_ADMIN_GUI_ACCESS_LOG value: "/dev/stdout" - name: KONG_ADMIN_GUI_ERROR_LOG value: "/dev/stderr" - name: KONG_ADMIN_LISTEN value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl" - name: KONG_CLUSTER_LISTEN value: "off" - name: KONG_DATABASE value: "off" - name: KONG_KIC value: "on" - name: KONG_LUA_PACKAGE_PATH value: "/opt/?.lua;/opt/?/init.lua;;" - name: KONG_NGINX_WORKER_PROCESSES value: "2" - name: KONG_PORTAL_API_ACCESS_LOG value: "/dev/stdout" - name: KONG_PORTAL_API_ERROR_LOG value: "/dev/stderr" - name: KONG_PORT_MAPS value: "80:8000, 443:8443" - name: KONG_PREFIX value: "/kong_prefix/" - name: KONG_PROXY_ACCESS_LOG value: "/dev/stdout" - name: KONG_PROXY_ERROR_LOG value: "/dev/stderr" - name: KONG_PROXY_LISTEN value: "0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl" - name: KONG_PROXY_STREAM_ACCESS_LOG value: "/dev/stdout basic" - name: KONG_PROXY_STREAM_ERROR_LOG value: "/dev/stderr" - name: KONG_ROUTER_FLAVOR value: "traditional" - name: KONG_STATUS_ACCESS_LOG value: "off" - name: KONG_STATUS_ERROR_LOG value: "/dev/stderr" - name: KONG_STATUS_LISTEN value: "0.0.0.0:8100, [::]:8100" - name: KONG_STREAM_LISTEN value: "off" volumeMounts: - name: release-name-kong-prefix-dir mountPath: /kong_prefix/ - name: release-name-kong-tmp mountPath: /tmp containers: - name: ingress-controller securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 seccompProfile: type: RuntimeDefault args: ports: - name: webhook containerPort: 8080 protocol: TCP - name: cmetrics containerPort: 10255 protocol: TCP - name: cstatus containerPort: 10254 protocol: TCP env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: CONTROLLER_ADMISSION_WEBHOOK_LISTEN value: "0.0.0.0:8080" - name: CONTROLLER_ELECTION_ID value: "kong-ingress-controller-leader-kong" - name: CONTROLLER_INGRESS_CLASS value: "kong" - name: CONTROLLER_KONG_ADMIN_TLS_SKIP_VERIFY value: "true" - name: CONTROLLER_KONG_ADMIN_URL value: "https://localhost:8444" - name: CONTROLLER_PUBLISH_SERVICE value: "default/release-name-kong-proxy" image: kong/kubernetes-ingress-controller:3.1 imagePullPolicy: IfNotPresent readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 10254 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 10254 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: {} volumeMounts: - name: webhook-cert mountPath: /admission-webhook readOnly: true - name: release-name-kong-token mountPath: /var/run/secrets/kubernetes.io/serviceaccount readOnly: true - name: "proxy" image: kong:3.6 imagePullPolicy: IfNotPresent securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 seccompProfile: type: RuntimeDefault env: - name: KONG_ADMIN_ACCESS_LOG value: "/dev/stdout" - name: KONG_ADMIN_ERROR_LOG value: "/dev/stderr" - name: KONG_ADMIN_GUI_ACCESS_LOG value: "/dev/stdout" - name: KONG_ADMIN_GUI_ERROR_LOG value: "/dev/stderr" - name: KONG_ADMIN_LISTEN value: "127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl" - name: KONG_CLUSTER_LISTEN value: "off" - name: KONG_DATABASE value: "off" - name: KONG_KIC value: "on" - name: KONG_LUA_PACKAGE_PATH value: "/opt/?.lua;/opt/?/init.lua;;" - name: KONG_NGINX_WORKER_PROCESSES value: "2" - name: KONG_PORTAL_API_ACCESS_LOG value: "/dev/stdout" - name: KONG_PORTAL_API_ERROR_LOG value: "/dev/stderr" - name: KONG_PORT_MAPS value: "80:8000, 443:8443" - name: KONG_PREFIX value: "/kong_prefix/" - name: KONG_PROXY_ACCESS_LOG value: "/dev/stdout" - name: KONG_PROXY_ERROR_LOG value: "/dev/stderr" - name: KONG_PROXY_LISTEN value: "0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl" - name: KONG_PROXY_STREAM_ACCESS_LOG value: "/dev/stdout basic" - name: KONG_PROXY_STREAM_ERROR_LOG value: "/dev/stderr" - name: KONG_ROUTER_FLAVOR value: "traditional" - name: KONG_STATUS_ACCESS_LOG value: "off" - name: KONG_STATUS_ERROR_LOG value: "/dev/stderr" - name: KONG_STATUS_LISTEN value: "0.0.0.0:8100, [::]:8100" - name: KONG_STREAM_LISTEN value: "off" - name: KONG_NGINX_DAEMON value: "off" lifecycle: preStop: exec: command: - kong - quit - --wait=15 ports: - name: proxy containerPort: 8000 protocol: TCP - name: proxy-tls containerPort: 8443 protocol: TCP - name: status containerPort: 8100 protocol: TCP volumeMounts: - name: release-name-kong-prefix-dir mountPath: /kong_prefix/ - name: release-name-kong-tmp mountPath: /tmp readinessProbe: failureThreshold: 3 httpGet: path: /status/ready port: status scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 livenessProbe: failureThreshold: 3 httpGet: path: /status port: status scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: {} securityContext: {} terminationGracePeriodSeconds: 30 volumes: - name: release-name-kong-prefix-dir emptyDir: sizeLimit: 256Mi - name: release-name-kong-tmp emptyDir: sizeLimit: 1Gi - name: release-name-kong-token projected: sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - name: webhook-cert secret: secretName: release-name-kong-validation-webhook-keypair --- # Source: infrastructure/templates/deployment-tiller.yaml apiVersion: apps/v1 kind: Deployment metadata: labels: app: helm name: tiller name: deployment-tiller-ricxapp namespace: ricinfra spec: replicas: 1 selector: matchLabels: app: helm name: tiller template: metadata: labels: app: helm name: tiller spec: automountServiceAccountToken: true imagePullSecrets: - name: secret-ghcr-io containers: - env: - name: TILLER_NAMESPACE value: ricinfra - name: TILLER_HISTORY_MAX value: "0" - name: TILLER_TLS_VERIFY value: "1" - name: TILLER_TLS_ENABLE value: "1" - name: TILLER_TLS_CERTS value: /etc/certs image: ghcr.io/helm/tiller:v2.16.12 imagePullPolicy: IfNotPresent livenessProbe: httpGet: path: /liveness port: 44135 initialDelaySeconds: 1 timeoutSeconds: 1 name: tiller ports: - containerPort: 44134 name: tiller - containerPort: 44135 name: http readinessProbe: httpGet: path: /readiness port: 44135 initialDelaySeconds: 1 timeoutSeconds: 1 volumeMounts: - mountPath: /etc/certs name: tiller-certs readOnly: true serviceAccountName: svcacct-tiller-ricxapp volumes: - name: tiller-certs secret: secretName: ricxapp-tiller-secret --- # Source: infrastructure/templates/job-tiller-secrets.yaml apiVersion: batch/v1 kind: Job metadata: name: tiller-secret-generator namespace: ricinfra spec: template: spec: serviceAccountName: tiller-secret-creator-bxpefz restartPolicy: Never imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc containers: - name: tiller-secret-generator image: nexus3.o-ran-sc.org:10002/o-ran-sc/it-dep-secret:0.0.2 imagePullPolicy: IfNotPresent env: - name: ENTITIES value: ricxapp-tiller-secret ricxapp-helm-secret - name: TILLER_KEY_NAME value: ricxapp-tiller-secret.key.pem - name: TILLER_CERT_NAME value: ricxapp-tiller-secret.cert.pem - name: HELM_KEY_NAME value: ricxapp-helm-secret.key.pem - name: HELM_CERT_NAME value: ricxapp-helm-secret.cert.pem - name: TILLER_CN value: service-tiller-ricxapp - name: CLUSTER_SERVER value: https://kubernetes.default.svc.cluster.local/ --- # Source: infrastructure/charts/certificate-manager/templates/secret.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: infrastructure/charts/danm-networks/templates/danm.yaml # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: infrastructure/charts/docker-credential/templates/secrets-docker-reg.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: infrastructure/charts/extsvcplt/templates/services-aux.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: infrastructure/charts/extsvcplt/templates/services-aux.yaml kind: "Endpoints" apiVersion: "v1" metadata: # match with the selector-less service name: aux-entry namespace: ricplt subsets: - addresses: - ip: "10.0.0.1" ports: - port: 32080 name: aux-entry-http-ingress-port - port: 32443 name: aux-entry-https-ingress-port --- # Source: infrastructure/charts/extsvcplt/templates/services-aux.yaml kind: "Endpoints" apiVersion: "v1" metadata: # match with the selector-less service name: aux-entry namespace: ricxapp subsets: - addresses: - ip: "10.0.0.1" ports: - port: 32080 name: aux-entry-http-ingress-port - port: 32443 name: aux-entry-https-ingress-port --- # Source: infrastructure/charts/kong/templates/admission-webhook.yaml kind: ValidatingWebhookConfiguration apiVersion: admissionregistration.k8s.io/v1 metadata: name: release-name-kong-validations namespace: default labels: app.kubernetes.io/name: kong helm.sh/chart: kong-2.38.0 app.kubernetes.io/instance: "release-name" app.kubernetes.io/managed-by: "Helm" app.kubernetes.io/version: "3.6" webhooks: - name: validations.kong.konghq.com objectSelector: matchExpressions: - key: owner operator: NotIn values: - helm failurePolicy: Ignore sideEffects: None admissionReviewVersions: ["v1beta1"] rules: - apiGroups: - configuration.konghq.com apiVersions: - '*' operations: - CREATE - UPDATE resources: - kongconsumers - kongplugins - kongclusterplugins - kongingresses - apiGroups: - '' apiVersions: - 'v1' operations: - CREATE - UPDATE resources: - secrets - services - apiGroups: - networking.k8s.io apiVersions: - 'v1' operations: - CREATE - UPDATE resources: - ingresses - apiGroups: - gateway.networking.k8s.io apiVersions: - 'v1alpha2' - 'v1beta1' - 'v1' operations: - CREATE - UPDATE resources: - gateways - httproutes clientConfig: caBundle: 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 service: name: release-name-kong-validation-webhook namespace: default *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/xapp-onboarder Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:45.900Z INFO [22] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "33.721µs", "reqID": "676d1cf1-74b1-4f07-a0ee-a9c32f921cd0"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:45.907Z INFO [23] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "125.384µs", "reqID": "8db86364-5986-4685-a710-eff31411b2d6"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/xapp-onboarder [INFO] Chart.yaml: icon is recommended [WARNING] templates/ingress-chartmuseum.yaml: networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress [WARNING] templates/ingress-xapp-onboarder.yaml: networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: xapp-onboarder/templates/env-chartmuseum.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-xapp-onboarder-chartmuseum-env data: DEBUG: "true" STORAGE: "local" STORAGE_LOCAL_ROOTDIR: "/charts" PORT: "8080" --- # Source: xapp-onboarder/templates/env-xapp-onboarder.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-xapp-onboarder-env data: FLASK_PORT: "8888" FLASK_DEBUG: "False" CHART_WORKSPACE_PATH: "/tmp/xapp-onboarder" CHART_REPO_URL: "http://0.0.0.0:8080" HELM_VERSION: "2.12.3" HTTP_RETRY: "3" ALLOW_REDEPLOY: "True" CHART_WORKSPACE_SIZE: "500MB" MOCK_TEST_MODE: "False" MOCK_TEST_HELM_REPO_TEMP_DIR: "/tmp/mock_helm_repo" --- # Source: xapp-onboarder/templates/service-http.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-xapp-onboarder-http namespace: ricplt labels: app: ricplt-xapp-onboarder chart: xapp-onboarder-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 8888 protocol: "TCP" name: "server" targetPort: "server" - port: 8080 targetPort: "chartmuseum" protocol: TCP name: "chartmuseum" selector: app: ricplt-xapp-onboarder release: release-name --- # Source: xapp-onboarder/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-xapp-onboarder namespace: ricplt labels: app: ricplt-xapp-onboarder chart: xapp-onboarder-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-xapp-onboarder release: release-name template: metadata: labels: app: ricplt-xapp-onboarder release: release-name spec: hostname: xapp-onboarder securityContext: fsGroup: 0 runAsUser: 0 restartPolicy: Always imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10004-o-ran-sc containers: - name: container-ricplt-xapp-onboarder-chartmuseum image: docker.io/chartmuseum/chartmuseum:v0.8.2 imagePullPolicy: IfNotPresent envFrom: - configMapRef: name: configmap-ricplt-xapp-onboarder-chartmuseum-env ports: - name: chartmuseum containerPort: 8080 protocol: TCP - name: container-ricplt-xapp-onboarder image: nexus3.o-ran-sc.org:10004/o-ran-sc/xapp-onboarder:1.0.0 imagePullPolicy: IfNotPresent ports: - name: server containerPort: 8888 protocol: TCP envFrom: - configMapRef: name: configmap-ricplt-xapp-onboarder-env - configMapRef: name: configmap-ricplt-dbaas-appconfig livenessProbe: #exec: # command: # - /bin/bash # - -c # - ps -ef | grep | grep -v "grep" #initialDelaySeconds: 120 #periodSeconds: 30 readinessProbe: # httpGet: # path: / # port: http --- # Source: xapp-onboarder/templates/ingress-chartmuseum.yaml apiVersion: networking.k8s.io/v1beta1 kind: Ingress metadata: name: ingress-ricplt-xapp-onboarder-chartmuseum spec: rules: - http: paths: - path: /helmrepo backend: serviceName: service-ricplt-xapp-onboarder-http servicePort: 8080 --- # Source: xapp-onboarder/templates/ingress-xapp-onboarder.yaml apiVersion: networking.k8s.io/v1beta1 kind: Ingress metadata: name: ingress-ricplt-xapp-onboarder-server spec: rules: - http: paths: - path: /onboard backend: serviceName: service-ricplt-xapp-onboarder-http servicePort: 8888 *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/rsm Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:46.047Z INFO [24] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "32.431µs", "reqID": "f3422686-20ff-4821-92c4-64398c80f7bb"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:46.052Z INFO [25] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "121.635µs", "reqID": "e0bba962-20c6-4952-8b19-2d262e946580"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/rsm [INFO] Chart.yaml: icon is recommended [WARNING] templates/ingress-rsm.yaml: networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: rsm/templates/configmap.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-rsm-router-configmap namespace: ricplt data: rmr_verbose: | 0 router.txt: | newrt|start rte|10090|service-ricplt-e2term-rmr.ricplt:38000 newrt|end --- # Source: rsm/templates/configmap.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-rsm namespace: ricplt data: configuration.yaml: | logging: logLevel: "info" http: port: 4800 rmr: port: 4801 maxMsgSize: 4096 readyIntervalSec: 1 rnib: maxRnibConnectionAttempts: 3 rnibRetryIntervalMs: 10 --- # Source: rsm/templates/env.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-rsm-env data: RMR_RTG_SVC: "4561" --- # Source: rsm/templates/service-http.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-rsm-http namespace: ricplt labels: app: ricplt-rsm chart: rsm-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 4800 protocol: "TCP" name: "http" targetPort: "http" selector: app: ricplt-rsm release: release-name --- # Source: rsm/templates/service-rmr.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-rsm-rmr namespace: ricplt labels: app: ricplt-rsm chart: rsm-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 4561 protocol: "TCP" name: "rmrroute" targetPort: "rmrroute" - port: 4801 protocol: "TCP" name: "rmrdata" targetPort: "rmrdata" selector: app: ricplt-rsm release: release-name --- # Source: rsm/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-rsm namespace: ricplt labels: app: ricplt-rsm chart: rsm-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-rsm release: release-name template: metadata: labels: app: ricplt-rsm release: release-name spec: initContainers: - name: redis-init image: docker.io/redis:latest imagePullPolicy: IfNotPresent command: ['sh', '-c', 'redis-cli -h service-ricplt-dbaas-tcp -p 6379 set "{rsm},CFG:GENERAL:v1.0.0" "{\"enableResourceStatus\":true,\"partialSuccessAllowed\":true,\"prbPeriodic\":true,\"tnlLoadIndPeriodic\":true,\"wwLoadIndPeriodic\":true,\"absStatusPeriodic\":true,\"rsrpMeasurementPeriodic\":true,\"csiPeriodic\":true,\"periodicityMs\":1,\"periodicityRsrpMeasurementMs\":3,\"periodicityCsiMs\":4}" nx'] hostname: rsm imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc containers: - name: container-ricplt-rsm image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-resource-status-manager:3.0.1 imagePullPolicy: IfNotPresent volumeMounts: - mountPath: /opt/RSM/router.txt name: local-router-file subPath: router.txt - mountPath: /opt/RSM/resources/configuration.yaml name: local-configuration-file subPath: configuration.yaml envFrom: - configMapRef: name: configmap-ricplt-rsm-env - configMapRef: name: configmap-ricplt-dbaas-appconfig ports: - name: "http" containerPort: 4800 - name: "rmrroute" containerPort: 4561 - name: "rmrdata" containerPort: 4801 stdin: true tty: true securityContext: privileged: false volumes: - name: local-router-file configMap: name: configmap-ricplt-rsm-router-configmap - name: local-configuration-file configMap: name: configmap-ricplt-rsm --- # Source: rsm/templates/ingress-rsm.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: networking.k8s.io/v1beta1 kind: Ingress metadata: name: ingress-ricplt-rsm spec: rules: - http: paths: - path: /rsm backend: serviceName: service-ricplt-rsm-http servicePort: 4800 --- # Source: rsm/templates/configmap.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/a1mediator Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:46.213Z INFO [26] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "23.171µs", "reqID": "c69cda68-51c3-4a2a-95f6-02475f6f74dc"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:46.215Z INFO [27] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "60.432µs", "reqID": "31d24d54-7253-4434-9f4b-ae23208b0b36"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/a1mediator [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: a1mediator/templates/config.yaml apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-a1mediator-a1conf data: local.rt: | newrt|start # Warning! this is not a functioning table because the subscription manager and route manager are now involved in a1 flows # the real routing table requires subscription ids as routing is now done over sub ids, but this isn't known until xapp deploy time, it's a dynamic process triggered by the xapp manager # there is a single message type for all messages a1 sends out now, subid is the other necessary piece of info # there are two message types a1 listens for; 20011 (instance response) and 20012 (query) # xapps likely use rts to reply with 20012 so the routing entry isn't needed for that in most cases mse|20010|SUBID|service-ricxapp-admctrl-rmr.ricxapp:4563 rte|20011|service-ricplt-a1mediator-rmr.ricplt:4562 rte|20012|service-ricplt-a1mediator-rmr.ricplt:4562 newrt|end loglevel.txt: | log-level: --- # Source: a1mediator/templates/env.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-a1mediator-env data: RMR_RTG_SVC: "4561" PYTHONUNBUFFERED: "1" A1_RMR_RETRY_TIMES: "20" # this sets the source field in messages from a1 to point back to a1s service name, rather than it's random pod name # In my private testing, this is needed! however it wasn't here in it/dep. If routing doesn't work, possibly add this back. RMR_SRC_ID: service-ricplt-a1mediator-rmr.ricplt INSTANCE_DELETE_NO_RESP_TTL: "5" INSTANCE_DELETE_RESP_TTL: "10" CONFIG_MAP_NAME: "/opt/route/loglevel.txt" --- # Source: a1mediator/templates/service-http.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-a1mediator-http namespace: ricplt labels: app: ricplt-a1mediator chart: a1mediator-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 10000 protocol: "TCP" name: "http" targetPort: "http" selector: app: ricplt-a1mediator release: release-name --- # Source: a1mediator/templates/service-rmr.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-a1mediator-rmr namespace: ricplt labels: app: ricplt-a1mediator chart: a1mediator-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 4561 protocol: "TCP" name: "rmrroute" targetPort: "rmrroute" - port: 4562 protocol: "TCP" name: "rmrdata" targetPort: "rmrdata" selector: app: ricplt-a1mediator release: release-name --- # Source: a1mediator/templates/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-a1mediator namespace: ricplt labels: app: ricplt-a1mediator chart: a1mediator-3.0.0 release: release-name heritage: Helm spec: replicas: 1 selector: matchLabels: app: ricplt-a1mediator release: release-name template: metadata: labels: app: ricplt-a1mediator release: release-name spec: hostname: a1mediator imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc containers: - name: container-ricplt-a1mediator volumeMounts: - name: a1conf mountPath: /opt/route envFrom: - configMapRef: name: configmap-ricplt-a1mediator-env - configMapRef: name: configmap-ricplt-dbaas-appconfig image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-a1:2.5.0 imagePullPolicy: IfNotPresent ports: - name: http containerPort: 10000 protocol: TCP - name: rmrroute containerPort: 4561 protocol: TCP - name: rmrdata containerPort: 4562 protocol: TCP livenessProbe: httpGet: path: /A1-P/v2/healthcheck port: http readinessProbe: httpGet: path: /A1-P/v2/healthcheck port: http volumes: - name: "a1conf" configMap: name: configmap-ricplt-a1mediator-a1conf --- # Source: a1mediator/templates/ingress-a1mediator.yaml apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-ricplt-a1mediator spec: rules: - http: paths: - path: /a1mediator pathType: Prefix backend: service: name: service-ricplt-a1mediator-http port: number: 10000 --- # Source: a1mediator/templates/config.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ --- # Source: a1mediator/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ *************************************************************************************************************** Running helm lint and verification on chart /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/rtmgr Update chart dependency Hang tight while we grab the latest from your chart repositories... 2024-06-22T14:15:46.364Z INFO [28] Request served {"path": "/charts/index.yaml", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "16.93µs", "reqID": "bf6b8bbc-f5db-48e7-a17a-2a1c3d33c769"} ...Successfully got an update from the "local" chart repository Update Complete. ⎈Happy Helming!⎈ Saving 1 charts Downloading ric-common from repo http://127.0.0.1:8879/charts 2024-06-22T14:15:46.365Z INFO [29] Request served {"path": "/charts/charts/ric-common-3.3.2.tgz", "comment": "", "clientIP": "127.0.0.1", "method": "GET", "statusCode": 200, "latency": "69.212µs", "reqID": "71ec75f9-7c96-4050-baa3-7db1ee38523b"} Deleting outdated charts Performing Helm lint ==> Linting /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/bin/../helm/rtmgr [INFO] Chart.yaml: icon is recommended 1 chart(s) linted, 0 chart(s) failed *************************************************************************************************************** Rendering Helm charts locally --- # Source: rtmgr/templates/config.yaml # #================================================================================== # Copyright (c) 2019 AT&T Intellectual Property. # Copyright (c) 2019 Nokia # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #================================================================================== # # # Abstract: Configuration values for the routing manager # Date: 29 May 2019 # apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-rtmgr-rtmgrcfg data: # FQDN and port info of the platform components for routing manager to form # and distribute corresponding routes to them rtmgrcfg: | "PlatformComponents": - "name": "SUBMAN" "fqdn": "service-ricplt-submgr-rmr.ricplt" "port": 4560 - "name": "E2MAN" "fqdn": "service-ricplt-e2mgr-rmr.ricplt" "port": 3801 - "name": "A1MEDIATOR" "fqdn": "service-ricplt-a1mediator-rmr.ricplt" "port": 4562 "XMURL": "http://service-ricplt-appmgr-http:8080/ric/v1/xapps" "E2MURL": "http://service-ricplt-e2mgr-http:3800/v1/e2t/list" "RTFILE": "/db/rt.json" "CFGFILE": "/cfg/rtmgr-config.yaml" "RPE": "rmrpush" "SBI": "rmrpush" "SBIURL": "0.0.0.0" "NBI": "httpRESTful" "NBIURL": "http://service-ricplt-rtmgr-http:3800" "SDL": "file" "local": "host": ":8080" "logger": "level": 4 "periodicRoutes": "enable" "rmr": "protPort": "tcp:4560" "maxSize": 1024 "numWorkers": 1 "threadType": 1 "messagetypes": [ "RIC_HEALTH_CHECK_REQ=100", "RIC_HEALTH_CHECK_RESP=101", "RIC_ALARM=110", "RIC_ALARM_QUERY=111", "RIC_SCTP_CONNECTION_FAILURE=1080", "E2_TERM_INIT=1100", "E2_TERM_KEEP_ALIVE_REQ=1101", "E2_TERM_KEEP_ALIVE_RESP=1102", "RIC_SCTP_CLEAR_ALL=1090", "RAN_CONNECTED=1200", "RAN_RESTARTED=1210", "RAN_RECONFIGURED=1220", "RIC_ENB_LOAD_INFORMATION=10020", "RIC_SN_STATUS_TRANSFER=10040", "RIC_UE_CONTEXT_RELEASE=10050", "RIC_X2_SETUP_REQ=10060", "RIC_X2_SETUP_RESP=10061", "RIC_X2_SETUP_FAILURE=10062", "RIC_X2_RESET=10070", "RIC_X2_RESET_RESP=10071", "RIC_ENB_CONF_UPDATE=10080", "RIC_ENB_CONF_UPDATE_ACK=10081", "RIC_ENB_CONF_UPDATE_FAILURE=10082", "RIC_RES_STATUS_REQ=10090", "RIC_RES_STATUS_RESP=10091", "RIC_RES_STATUS_FAILURE=10092", "RIC_SGNB_ADDITION_REQ=10270", "RIC_SGNB_ADDITION_ACK=10271", "RIC_SGNB_ADDITION_REJECT=10272", "RIC_SGNB_RECONF_COMPLETE=10280", "RIC_SGNB_MOD_REQUEST=10290", "RIC_SGNB_MOD_REQUEST_ACK=10291", "RIC_SGNB_MOD_REQUEST_REJ=10292", "RIC_SGNB_MOD_REQUIRED=10300", "RIC_SGNB_MOD_CONFIRM=10301", "RIC_SGNB_MOD_REFUSE=10302", "RIC_SGNB_RELEASE_REQUEST=10310", "RIC_SGNB_RELEASE_REQUEST_ACK=10311", "RIC_SGNB_RELEASE_REQUIRED=10320", "RIC_SGNB_RELEASE_CONFIRM=10321", "RIC_RRC_TRANSFER=10350", "RIC_ENDC_X2_SETUP_REQ=10360", "RIC_ENDC_X2_SETUP_RESP=10361", "RIC_ENDC_X2_SETUP_FAILURE=10362", "RIC_ENDC_CONF_UPDATE=10370", "RIC_ENDC_CONF_UPDATE_ACK=10371", "RIC_ENDC_CONF_UPDATE_FAILURE=10372", "RIC_SECONDARY_RAT_DATA_USAGE_REPORT=10380", "RIC_E2_SETUP_REQ=12001", "RIC_E2_SETUP_RESP=12002", "RIC_E2_SETUP_FAILURE=12003", "RIC_ERROR_INDICATION=12007", "RIC_SUB_REQ=12010", "RIC_SUB_RESP=12011", "RIC_SUB_FAILURE=12012", "RIC_SUB_DEL_REQ=12020", "RIC_SUB_DEL_RESP=12021", "RIC_SUB_DEL_FAILURE=12022", "RIC_SUB_DEL_REQUIRED=12023", "RIC_CONTROL_REQ=12040", "RIC_CONTROL_ACK=12041", "RIC_CONTROL_FAILURE=12042", "RIC_INDICATION=12050", "A1_POLICY_REQ=20010", "A1_POLICY_RESP=20011", "A1_POLICY_QUERY=20012", "TS_UE_LIST=30000", "TS_QOE_PRED_REQ=30001", "TS_QOE_PREDICTION=30002", "TS_ANOMALY_UPDATE=30003", "TS_ANOMALY_ACK=30004", "MC_REPORT=30010", "DCAPTERM_RTPM_RMR_MSGTYPE=33001", "DCAPTERM_GEO_RMR_MSGTYPE=33002", "RIC_SERVICE_UPDATE=12030", "RIC_SERVICE_UPDATE_ACK=12031", "RIC_SERVICE_UPDATE_FAILURE=12032", "RIC_E2NODE_CONFIG_UPDATE=12070", "RIC_E2NODE_CONFIG_UPDATE_ACK==12071", "RIC_E2NODE_CONFIG_UPDATE_FAILURE=12072", "RIC_E2_RESET_REQ=12004", "RIC_E2_RESET_RESP=12005", ] "PlatformRoutes": [ { 'messagetype': 'RIC_SUB_REQ', 'senderendpoint': 'SUBMAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_SUB_DEL_REQ', 'senderendpoint': 'SUBMAN', 'subscriptionid': -1,'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_SUB_RESP', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'SUBMAN', 'meid': ''}, { 'messagetype': 'RIC_SUB_DEL_RESP', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'SUBMAN', 'meid': ''}, { 'messagetype': 'RIC_SUB_FAILURE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'SUBMAN', 'meid': ''}, { 'messagetype': 'RIC_SUB_DEL_FAILURE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'SUBMAN', 'meid': ''}, { 'messagetype': 'RIC_SUB_DEL_REQUIRED', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'SUBMAN', 'meid': ''}, { 'messagetype': 'RIC_X2_SETUP_REQ', 'senderendpoint': 'E2MAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_X2_RESET', 'senderendpoint': 'E2MAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_X2_RESET_RESP', 'senderendpoint': 'E2MAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_ENDC_X2_SETUP_REQ', 'senderendpoint': 'E2MAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_ENB_CONF_UPDATE_ACK', 'senderendpoint': 'E2MAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_ENB_CONF_UPDATE_FAILURE', 'senderendpoint': 'E2MAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_ENDC_CONF_UPDATE_ACK', 'senderendpoint': 'E2MAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_ENDC_CONF_UPDATE_FAILURE', 'senderendpoint': 'E2MAN', 'subscriptionid': -1, 'endpoint': '', 'meid': '%meid'}, { 'messagetype': 'RIC_E2_SETUP_REQ', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'E2_TERM_INIT', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_X2_SETUP_RESP', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_X2_SETUP_FAILURE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_X2_RESET', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_X2_RESET_RESP', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_ENDC_X2_SETUP_RESP', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_ENDC_X2_SETUP_FAILURE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_ENDC_CONF_UPDATE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_SCTP_CONNECTION_FAILURE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_ERROR_INDICATION', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_ENB_CONF_UPDATE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_ENB_LOAD_INFORMATION', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'E2_TERM_KEEP_ALIVE_RESP', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'A1_POLICY_QUERY', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'A1MEDIATOR', 'meid': ''}, { 'messagetype': 'A1_POLICY_RESP', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'A1MEDIATOR', 'meid': ''}, { 'messagetype': 'RIC_SERVICE_UPDATE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_E2NODE_CONFIG_UPDATE', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, { 'messagetype': 'RIC_E2_RESET_REQ', 'senderendpoint': '', 'subscriptionid': -1, 'endpoint': 'E2MAN', 'meid': ''}, ] --- # Source: rtmgr/templates/env.yaml ############################################################################### # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: ConfigMap metadata: name: configmap-ricplt-rtmgr-env data: RMR_SEED_RT: "/uta_rtg_ric.rt" RMR_RTG_SVC: "4561" CFGFILE: "/cfg/rtmgr-config.yaml" RMR_SRC_ID: service-ricplt-rtmgr-rmr.ricplt XMURL: "http://service-ricplt-appmgr-http:8080/ric/v1/xapps" --- # Source: rtmgr/templates/service-http.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-rtmgr-http namespace: ricplt labels: app: ricplt-rtmgr chart: rtmgr-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 3800 protocol: "TCP" name: "http" targetPort: "http" selector: app: ricplt-rtmgr release: release-name --- # Source: rtmgr/templates/service-rmr.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: v1 kind: Service metadata: name: service-ricplt-rtmgr-rmr namespace: ricplt labels: app: ricplt-rtmgr chart: rtmgr-3.0.0 release: release-name heritage: Helm spec: type: ClusterIP ports: - port: 4561 protocol: TCP targetPort: "rmrroute" name: "rmrroute" - port: 4560 protocol: TCP targetPort: "rmrdata" name: "rmrdata" selector: app: ricplt-rtmgr release: release-name --- # Source: rtmgr/templates/deployment.yaml ################################################################################ # Copyright (c) 2019 AT&T Intellectual Property. # # Copyright (c) 2019 Nokia. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ################################################################################ apiVersion: apps/v1 kind: Deployment metadata: name: deployment-ricplt-rtmgr namespace: ricplt labels: app: ricplt-rtmgr chart: rtmgr-3.0.0 release: release-name heritage: Helm spec: replicas: selector: matchLabels: app: ricplt-rtmgr release: release-name template: metadata: labels: app: ricplt-rtmgr release: release-name spec: hostname: rtmgr imagePullSecrets: - name: secret-nexus3-o-ran-sc-org-10002-o-ran-sc containers: - name: container-ricplt-rtmgr image: nexus3.o-ran-sc.org:10002/o-ran-sc/ric-plt-rtmgr:0.3.8 imagePullPolicy: IfNotPresent command: ["/run_rtmgr.sh"] #command: ["/bin/sh"] #args: ["-c", "while true; do echo hello; sleep 10;done"] envFrom: - configMapRef: name: configmap-ricplt-rtmgr-env - configMapRef: name: configmap-ricplt-dbaas-appconfig volumeMounts: - mountPath: /cfg name: rtmgrcfg readOnly: true ports: - name: "http" containerPort: 3800 - name: "rmrroute" containerPort: 4561 - name: "rmrdata" containerPort: 4560 livenessProbe: httpGet: path: ric/v1/health/alive port: 8080 initialDelaySeconds: 5 periodSeconds: 15 readinessProbe: httpGet: path: ric/v1/health/ready port: 8080 initialDelaySeconds: 5 periodSeconds: 15 volumes: - name: "rtmgrcfg" configMap: name: configmap-ricplt-rtmgr-rtmgrcfg items: - key: rtmgrcfg path: rtmgr-config.yaml mode: 0644 *************************************************************************************************************** --> verify-ric-charts ends Process leaked file descriptors. See https://www.jenkins.io/redirect/troubleshooting/process-leaked-file-descriptors for more information [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins13450572011293004623.sh $ ssh-agent -k unset SSH_AUTH_SOCK; unset SSH_AGENT_PID; echo Agent pid 1709 killed; [ssh-agent] Stopped. /home/jenkins/.local/share/helm/plugins/helm-servecm/servecm.sh: line 39: 2499 Terminated chartmuseum "$@" [PostBuildScript] - [INFO] Executing post build scripts. [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins5625170285769119638.sh ---> sysstat.sh [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins16397306871471798051.sh ---> package-listing.sh ++ facter osfamily ++ tr '[:upper:]' '[:lower:]' + OS_FAMILY=debian + workspace=/w/workspace/ric-plt-ric-dep-chart-shell-verify-master + START_PACKAGES=/tmp/packages_start.txt + END_PACKAGES=/tmp/packages_end.txt + DIFF_PACKAGES=/tmp/packages_diff.txt + PACKAGES=/tmp/packages_start.txt + '[' /w/workspace/ric-plt-ric-dep-chart-shell-verify-master ']' + PACKAGES=/tmp/packages_end.txt + case "${OS_FAMILY}" in + dpkg -l + grep '^ii' + '[' -f /tmp/packages_start.txt ']' + '[' -f /tmp/packages_end.txt ']' + diff /tmp/packages_start.txt /tmp/packages_end.txt + '[' /w/workspace/ric-plt-ric-dep-chart-shell-verify-master ']' + mkdir -p /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/archives/ + cp -f /tmp/packages_diff.txt /tmp/packages_end.txt /tmp/packages_start.txt /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/archives/ [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins2045904240325788359.sh ---> capture-instance-metadata.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-GGSV from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: lftools lf-activate-venv(): INFO: Adding /tmp/venv-GGSV/bin to PATH INFO: Running in OpenStack, capturing instance metadata [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins7480908918855193863.sh provisioning config files... copy managed file [jenkins-log-archives-settings] to file:/w/workspace/ric-plt-ric-dep-chart-shell-verify-master@tmp/config18319917758358143665tmp Regular expression run condition: Expression=[^.*logs-s3.*], Label=[] Run condition [Regular expression match] preventing perform for step [Provide Configuration files] [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content SERVER_ID=logs [EnvInject] - Variables injected successfully. [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins16897230785435184709.sh ---> create-netrc.sh [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins593602079707506434.sh ---> python-tools-install.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-GGSV from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: lftools lf-activate-venv(): INFO: Adding /tmp/venv-GGSV/bin to PATH [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins4556551497044676639.sh ---> sudo-logs.sh Archiving 'sudo' log.. [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash /tmp/jenkins5519901066907162880.sh ---> job-cost.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-GGSV from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: zipp==1.1.0 python-openstackclient urllib3~=1.26.15 lf-activate-venv(): INFO: Adding /tmp/venv-GGSV/bin to PATH INFO: No Stack... INFO: Retrieving Pricing Info for: v2-highcpu-2 INFO: Archiving Costs [ric-plt-ric-dep-chart-shell-verify-master] $ /bin/bash -l /tmp/jenkins15533355006411451357.sh ---> logs-deploy.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/ric-plt-ric-dep-chart-shell-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-GGSV from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing: lftools lf-activate-venv(): INFO: Adding /tmp/venv-GGSV/bin to PATH INFO: Nexus URL https://nexus.o-ran-sc.org path production/vex-sjc-oran-jenkins-prod-1/ric-plt-ric-dep-chart-shell-verify-master/211 INFO: archiving workspace using pattern(s): -p **/*.log Archives upload complete. INFO: archiving logs to Nexus ---> uname -a: Linux prd-ubuntu1804-builder-2c-2g-4196 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux ---> lscpu: Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 2 On-line CPU(s) list: 0,1 Thread(s) per core: 1 Core(s) per socket: 1 Socket(s): 2 NUMA node(s): 1 Vendor ID: AuthenticAMD CPU family: 23 Model: 49 Model name: AMD EPYC-Rome Processor Stepping: 0 CPU MHz: 2799.998 BogoMIPS: 5599.99 Virtualization: AMD-V Hypervisor vendor: KVM Virtualization type: full L1d cache: 32K L1i cache: 32K L2 cache: 512K L3 cache: 16384K NUMA node0 CPU(s): 0,1 Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm rep_good nopl xtopology cpuid extd_apicid tsc_known_freq pni pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm cmp_legacy svm cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext perfctr_core ssbd ibrs ibpb stibp vmmcall fsgsbase tsc_adjust bmi1 avx2 smep bmi2 rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves clzero xsaveerptr arat npt nrip_save umip rdpid arch_capabilities ---> nproc: 2 ---> df -h: Filesystem Size Used Avail Use% Mounted on udev 984M 0 984M 0% /dev tmpfs 200M 668K 199M 1% /run /dev/vda1 20G 7.4G 12G 39% / tmpfs 997M 0 997M 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 997M 0 997M 0% /sys/fs/cgroup /dev/vda15 105M 5.3M 100M 5% /boot/efi tmpfs 200M 0 200M 0% /run/user/1001 ---> free -m: total used free shared buff/cache available Mem: 1992 340 192 0 1459 1485 Swap: 1023 0 1023 ---> ip addr: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: ens3: mtu 1450 qdisc fq_codel state UP group default qlen 1000 link/ether fa:16:3e:03:1d:3b brd ff:ff:ff:ff:ff:ff inet 10.32.7.58/23 brd 10.32.7.255 scope global dynamic ens3 valid_lft 86250sec preferred_lft 86250sec inet6 fe80::f816:3eff:fe03:1d3b/64 scope link valid_lft forever preferred_lft forever ---> sar -b -r -n DEV: Linux 4.15.0-213-generic (prd-ubuntu1804-builder-2c-2g-4196) 06/22/24 _x86_64_ (2 CPU) 14:14:13 LINUX RESTART (2 CPU) 14:15:01 tps rtps wtps bread/s bwrtn/s 14:16:01 157.56 84.84 72.72 4531.78 19401.30 Average: 157.56 84.84 72.72 4531.78 19401.30 14:15:01 kbmemfree kbavail kbmemused %memused kbbuffers kbcached kbcommit %commit kbactive kbinact kbdirty 14:16:01 112452 1551044 1928180 94.49 55264 1476608 531100 17.19 471256 1324076 5308 Average: 112452 1551044 1928180 94.49 55264 1476608 531100 17.19 471256 1324076 5308 14:15:01 IFACE rxpck/s txpck/s rxkB/s txkB/s rxcmp/s txcmp/s rxmcst/s %ifutil 14:16:01 lo 6.50 6.50 2.05 2.05 0.00 0.00 0.00 0.00 14:16:01 ens3 148.39 124.28 1127.72 19.22 0.00 0.00 0.00 0.00 Average: lo 6.50 6.50 2.05 2.05 0.00 0.00 0.00 0.00 Average: ens3 148.39 124.28 1127.72 19.22 0.00 0.00 0.00 0.00 ---> sar -P ALL: Linux 4.15.0-213-generic (prd-ubuntu1804-builder-2c-2g-4196) 06/22/24 _x86_64_ (2 CPU) 14:14:13 LINUX RESTART (2 CPU) 14:15:01 CPU %user %nice %system %iowait %steal %idle 14:16:01 all 29.65 0.00 3.40 6.99 0.08 59.89 14:16:01 0 19.39 0.00 2.77 5.69 0.07 72.09 14:16:01 1 39.90 0.00 4.01 8.30 0.08 47.71 Average: all 29.65 0.00 3.40 6.99 0.08 59.89 Average: 0 19.39 0.00 2.77 5.69 0.07 72.09 Average: 1 39.90 0.00 4.01 8.30 0.08 47.71