Hi,
On 06.04.2021 14:15, [email protected] wrote:
Hi
kudos to the OOM team!
we have never been so closed to be clean regarding certificate management
Yupi! Let's celebrate! :)
on the tests executed on the weekly last week end
- internal certs =>
https://logs.onap.org/onap-integration/weekly/onap_weekly_pod4_master/2021-04/03_22-48/infrastructure-healthcheck/k8s/internal_check_certs/certificates.html
<https://protect2.fireeye.com/v1/url?k=b089067d-ef123f18-b0888d32-000babff32e3-b4e4077d9cb4a53c&q=1&e=4c36619a-4de3-429b-a44f-5ae2404b21d6&u=https%3A%2F%2Flogs.onap.org%2Fonap-integration%2Fweekly%2Fonap_weekly_pod4_master%2F2021-04%2F03_22-48%2Finfrastructure-healthcheck%2Fk8s%2Finternal_check_certs%2Fcertificates.html>
only esr server is expired
and most of the other components are fully green except (aai-babel, appc
(in maintenance), ejbca, multicloud-fcaps, multicloud-starlingx, robot
(tooling to be refactored in Istambul), uui)
Actually ejbca should be removed from this list. It's designed to work
even in non-aaf environment thus it will never use AAF-issued cert.
Instead, for every OOM deployment there is a fresh self-signed cert
being generated for it
- nodeports =>
https://logs.onap.org/onap-integration/weekly/onap_weekly_pod4_master/2021-04/03_22-48/infrastructure-healthcheck/k8s/nodeport_check_certs/certificates.html
<https://protect2.fireeye.com/v1/url?k=c8ca40d6-975179b3-c8cbcb99-000babff32e3-6c1162889cf6f2e9&q=1&e=4c36619a-4de3-429b-a44f-5ae2404b21d6&u=https%3A%2F%2Flogs.onap.org%2Fonap-integration%2Fweekly%2Fonap_weekly_pod4_master%2F2021-04%2F03_22-48%2Finfrastructure-healthcheck%2Fk8s%2Fnodeport_check_certs%2Fcertificates.html>
no expiration
almost all the components are fully green except (appc, robot , uui,
aai-babel, aai-sparky-be (in gate))
It is maybe less spectacular that a new use case mixing 5G and AI but it
is a great achievement for the sustainability of the solution. :)
The certificate update will not be a problem anymore..
/Morgan
_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations
confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce
message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages
electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou
falsifie. Merci.
This message and its attachments may contain confidential or privileged
information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete
this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been
modified, changed or falsified.
Thank you.
--
Krzysztof Opasiak
Samsung R&D Institute Poland
Samsung Electronics
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#23110): https://lists.onap.org/g/onap-discuss/message/23110
Mute This Topic: https://lists.onap.org/mt/81887770/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
