Hi Krzysztof Opasiak,

Thank you very much. Our team is working on these issues.

1) We used Redis database in the previours release but it is removed from F 
release. We will delete the corresponding code as soon as possible.
2) We are now applying new acount for calling SDC and will replace it once we 
get the account.
3) For other issues about OOM, there are some legacy problems and our team is 
working on fixing them.

Thanks and regards,

Yuanhong

-----邮件原件-----
发件人: [email protected] [mailto:[email protected]] 代表 
Krzysztof Opasiak via Lists.Onap.Org
发送时间: 2020年1月31日 23:16
收件人: [email protected]
抄送: [email protected]; DESBUREAUX Sylvain TGI/OLN; Lefevre, 
Catherine; ZWARICO, AMY; [email protected]; 'dengyuanhong'
主题: [onap-discuss] [MODELING] Issues discovered in Modeling charts and code

Hi Deng Hui,

I've been working to switch modeling to use common mariadb instance and 
remove hardcoded passwords. That's why I had an opportunity to 
investigate modeling helm charts and source code.

During this work I discovered so many issues that I believe that in 
order to properly remove hardcoded passwords I'll need a help of your 
team. Below is the list of issues that I've discovered:

1) Modeling seems to have credentials to VFC redis database.
Is it still used? If yes then it's a very bad practice as you shouldn't 
directly use DB of another micro service. If no then please remove dead 
piece of code

2) SDC credentials are hardcoded in the container image (BTW why you are 
using aai account to access SDC?)

3) genericpassword database credentials are hardcoded in container image

4) You create your database manually inside the container which means 
that you need a root password to that DB. You should use either 
mariadb-galera chart values or mariadb-init container for this purpose

5) You don't use init container but hardcode all the waiting for 
required resources in you docker entrypoint script which hardcodes the 
waiting time and other parameters

6) You should not modify your config files in the docker entrypoint 
script with sed. If this file is configurable it should reside in OOM 
repo and be pased to the container as a config map.

I'd like to kindly ask you for help to fix those issues promptly.

Best regards,
-- 
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics







-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#19881): https://lists.onap.org/g/onap-discuss/message/19881
Mute This Topic: https://lists.onap.org/mt/70826291/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to