Hi Krzysztof Opasiak, Thank you very much. Our team is working on these issues.
1) We used Redis database in the previours release but it is removed from F release. We will delete the corresponding code as soon as possible. 2) We are now applying new acount for calling SDC and will replace it once we get the account. 3) For other issues about OOM, there are some legacy problems and our team is working on fixing them. Thanks and regards, Yuanhong -----邮件原件----- 发件人: [email protected] [mailto:[email protected]] 代表 Krzysztof Opasiak via Lists.Onap.Org 发送时间: 2020年1月31日 23:16 收件人: [email protected] 抄送: [email protected]; DESBUREAUX Sylvain TGI/OLN; Lefevre, Catherine; ZWARICO, AMY; [email protected]; 'dengyuanhong' 主题: [onap-discuss] [MODELING] Issues discovered in Modeling charts and code Hi Deng Hui, I've been working to switch modeling to use common mariadb instance and remove hardcoded passwords. That's why I had an opportunity to investigate modeling helm charts and source code. During this work I discovered so many issues that I believe that in order to properly remove hardcoded passwords I'll need a help of your team. Below is the list of issues that I've discovered: 1) Modeling seems to have credentials to VFC redis database. Is it still used? If yes then it's a very bad practice as you shouldn't directly use DB of another micro service. If no then please remove dead piece of code 2) SDC credentials are hardcoded in the container image (BTW why you are using aai account to access SDC?) 3) genericpassword database credentials are hardcoded in container image 4) You create your database manually inside the container which means that you need a root password to that DB. You should use either mariadb-galera chart values or mariadb-init container for this purpose 5) You don't use init container but hardcode all the waiting for required resources in you docker entrypoint script which hardcodes the waiting time and other parameters 6) You should not modify your config files in the docker entrypoint script with sed. If this file is configurable it should reside in OOM repo and be pased to the container as a config map. I'd like to kindly ask you for help to fix those issues promptly. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#19881): https://lists.onap.org/g/onap-discuss/message/19881 Mute This Topic: https://lists.onap.org/mt/70826291/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
