Uploaded image for project: 'Data Collection, Analytics, and Events'
  1. Data Collection, Analytics, and Events
  2. DCAEGEN2-1972

REQ-361: Continue hard coded password removal

XMLWordPrintable

    • Password removal from HELM charts

       

      Updating scope based on Guilin focus

      Currently all DCAE component certificates are retrieved dynamically during deploying using a onap/org.onap.dcaegen2.deployments.tls-init-container (which is built of aaf_agent). This container upon retrieval of certificates does some translation to standardize the certificate/format for DCAE service components. Source for init-container - https://git.onap.org/dcaegen2/deployments/tree/tls-init-container

      Based on discussion on PTL meeting earlier this week, DCAE impact should be assessed for below

      1) CertInitializer integration impact on DCAE-tls init container 
      2) Impact to K8s plugin

      Inaddition following component charts should be updated to remove hardcoded password.

      • Cloudify (to be confimed with Cloudify/vendor)
      • Cloudify password on Bootstrap, DH, Dashboard helm chart can be changed to use secret (secret may still have to be hardcoded depending on Cloudify feedback on #1)

       

            kopasiak kopasiak
            vv770d vv770d
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: