Hi Sylvain and Jonathan,
On 07.11.2019 14:51, GATHMAN, JONATHAN C wrote:
> OK, so what I'm hearing is that Sylvain would like to put SOME AAF components
> behind SideCars, not necessarily all. It would be a good exercise to
> determine in an ISTIO world what elements AAF would actually provide, as
> there are clearly overlaps.
>
> Obviously, AAF was designed to secure all relevant components, and obviously,
> did it without Sidecars, as it was developed a few years before K8s or even
> Docker was popular.
>
> Therefore, my recommendation is to focus on non-security related ONAP
> Components (SSO and the like).
I believe that what Sylvian is trying to do is a very good way. First
let's try to make sure that we are actually able to deploy whole ONAP
with istio and then try to switch the components one by one to utilize
more of service mesh features.
>
> Unfortunately, I can't spend a ton of time on this, as it's not a Frankfurt
> deliverable. But I appreciate being kept in the loop.
@Jonathan
Have you ever tried to override the hostname aaf param from OOM helm charts?
I'm not a specialist in this especially that AAF uses some complicated
construction with config init container but for me it looks like we have
some name conflict. Basically the param name is "hostname" so if you try
to pass this to the container from helm chart it gets overwritten by the
hostname env variable that contains the pod name...
@Sylvain,
I did some more debugging ad it looks like if you apply the below patch
to AAF sources the locate service should listen on all interfaces:
diff --git
a/auth/auth-core/src/main/java/org/onap/aaf/auth/server/JettyServiceStarter.java
b/auth/auth-core/src/main/java/org/onap/aaf/auth/server/JettyServiceStarter.java
index 3f0d2ebb..43579a95 100644
---
a/auth/auth-core/src/main/java/org/onap/aaf/auth/server/JettyServiceStarter.java
+++
b/auth/auth-core/src/main/java/org/onap/aaf/auth/server/JettyServiceStarter.java
@@ -157,7 +157,7 @@ public class JettyServiceStarter<ENV extends
RosettaEnv, TRANS extends Trans> ex
// Add loggers MBean to server (will be picked up by
MBeanContainer above)
// server.addBean(Log.getLog());
- conn.setHost(hostname);
+ conn.setHost("0.0.0.0");
conn.setPort(port);
conn.setIdleTimeout(IDLE_TIMEOUT);
server.addConnector(conn);
would be great if you could confirm that it solved the issue.
Best regards,
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#19397): https://lists.onap.org/g/onap-discuss/message/19397
Mute This Topic: https://lists.onap.org/mt/45686190/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
