Hi Jimmy/Marco, Thanks for the update.
Currently we are using Dublin AAI release and updated it with below cherry pick, but didn’t worked for us (getting 403 error). 1. Will it be work only R5 and master not for Dublin? As you mentioned in subject, it is for El Alto and Master? 2. If yes, please suggest for Dublin release also. Thanks & Regards, Thamlur Raju From: onap-discuss@lists.onap.org <onap-discuss@lists.onap.org> On Behalf Of Marco Platania via Lists.Onap.Org Sent: Thursday, March 26, 2020 8:07 AM To: onap-discuss@lists.onap.org; FORSYTH, JAMES <jf2...@att.com> Subject: Re: [onap-discuss] #aai ALERT: Expiring AAI->AAF certificate in master & elalto!!! All, Just a reminder: AAI helm charts aren’t hosted by OOM repo, so applying this patch to OOM (El Alto or master) repository won’t work as the change that Jimmy mentioned is in the AAI repository. Hence, the procedure to apply this patch is the following: * Clone aai/oom: o git clone "https://gerrit.onap.org/r/aai/oom"; aai_oom · Go to the cloned directory: o cd aai_oom * Switch branch to elalto in case you are using El Alto, otherwise skip the following step: o git checkout elalto * Apply the patch that Jimmy pushed: o git pull "https://gerrit.onap.org/r/aai/oom"; refs/changes/19/104419/1 Replace the original oom/kubernetes/aai directory with the patched one (aai_oom in the example above, remember to rename it to aai when moving it to oom/kubernetes). Jimmy, After these steps are done, do we have to wipe out AAI and rebuild from scratch? Is there a way to retain existing data in case we need to rebuild? Thanks, Marco From: <onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>> on behalf of "FORSYTH, JAMES" <jf2...@att.com<mailto:jf2...@att.com>> Reply-To: "onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>" <onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>>, "FORSYTH, JAMES" <jf2...@att.com<mailto:jf2...@att.com>> Date: Wednesday, March 25, 2020 at 5:10 PM To: "onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>" <onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>> Subject: Re: [onap-discuss] #aai ALERT: Expiring AAI->AAF certificate in master & elalto!!! ***Security Advisory: This Message Originated Outside of AT&T *** Reference http://cso.att.com/EmailSecurity/IDSP.html<https://ind01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fcso.att.com%2FEmailSecurity%2FIDSP.html&data=02%7C01%7CTR00568434%40TechMahindra.com%7C696c9239628a46ff8e6108d7d12ea29c%7Cedf442f5b9944c86a131b42b03a16c95%7C0%7C0%7C637207870549459927&sdata=RkTekpGuWXjuNk5CLhRvPqdCueaeBHtwX2EiUCNS%2Bjw%3D&reserved=0> for more information. Correction: I said 26 May below, I meant 26 March 2020. Tomorrow! Thanks, jimmy From: "FORSYTH, JAMES" <jf2...@att.com<mailto:jf2...@att.com>> Date: Wednesday, March 25, 2020 at 4:04 PM To: "onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>" <onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>> Subject: #aai ALERT: Expiring AAI->AAF certificate in master & elalto!!! Dear ONAP Community, Please be advised that the certificates that aai-resources and aai-traversal are using will expire on 26 May, 2020 – that’s tomorrow (or today already for some of you). In order to keep your environments running, there is a commit for elalto here: https://gerrit.onap.org/r/c/aai/oom/+/104419<https://ind01.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__gerrit.onap.org_r_c_aai_oom_-2B_104419%26d%3DDwMGaQ%26c%3DLFYZ-o9_HUMeMTSQicvjIg%26r%3DKgFIQiUJzSC0gUhJaQxg8eC3w16GC3sKgWIcs4iIee0%26m%3DPgTLKeI3aWhWWnPSIptfVzOs7CMOWKW1jlk7ythLsDg%26s%3DLk_xp4g-Pcdw2Zy3GVEnhrivcYeAkZw_Z8VpxKBdTLk%26e%3D&data=02%7C01%7CTR00568434%40TechMahindra.com%7C696c9239628a46ff8e6108d7d12ea29c%7Cedf442f5b9944c86a131b42b03a16c95%7C0%7C0%7C637207870549469922&sdata=dh4Vff9QUmsBVw9JffEHIgipCXm3Zvz97p1FW5D2R%2FQ%3D&reserved=0> And for master: https://gerrit.onap.org/r/c/aai/oom/+/104416<https://ind01.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__gerrit.onap.org_r_c_aai_oom_-2B_104416%26d%3DDwMGaQ%26c%3DLFYZ-o9_HUMeMTSQicvjIg%26r%3DKgFIQiUJzSC0gUhJaQxg8eC3w16GC3sKgWIcs4iIee0%26m%3DPgTLKeI3aWhWWnPSIptfVzOs7CMOWKW1jlk7ythLsDg%26s%3DmJ9X5R1lzrQW7LpW0nJOdIhqCgGNyEJ20Kjd5MpP4-I%26e%3D&data=02%7C01%7CTR00568434%40TechMahindra.com%7C696c9239628a46ff8e6108d7d12ea29c%7Cedf442f5b9944c86a131b42b03a16c95%7C0%7C0%7C637207870549469922&sdata=1HXKUIt%2FU9g0zNkzkYC%2Bckbelvdp%2FAMtSsCuDXp7zLo%3D&reserved=0> You can cherry pick these to keep your AAI running while we work on getting them merged. Thanks for your patience, my auto-scan job failed on these AAF certs and I was under the wrong assumption that they were synced with the AAF issued server certs AAI is using that expire in September of this year. Any questions, please feel free to reach out. Thanks, jimmy Caution: Please do not click links or open attachments unless you recognize the sender and know the content is safe. ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at http://www.techmahindra.com/Disclaimer.html externally http://tim.techmahindra.com/tim/disclaimer.html internally within TechMahindra. ============================================================================================================================ -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20383): https://lists.onap.org/g/onap-discuss/message/20383 Mute This Topic: https://lists.onap.org/mt/72549806/21656 Mute #aai: https://lists.onap.org/mk?hashtag=aai&subid=2740164 Group Owner: onap-discuss+ow...@lists.onap.org Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
