Page Comparison

Release candidate

EarlyDrop  (Code completion and artifact released by August 2, 2019) 5.0.0

•  ConfigbindingService
•  CloudifyManager
•  Bootstrap
•  Plugins (k8s, Dmaap)
•  ServiceChangeHandler
•  InventoryAPI
•  DFC
•  PM-Mapper
•  Deployment Handler

Branching will be done with released component by tomorrow; master branch can be used for Frankfurt work (need minor version updated to avoid conflict with El-Alto patch/bug fixes)

Second/Final El-Alto drop 5.1.0

Docker containers that are finished to be released Aug 30

• k8s-dcae-cleanup-container
• configbindingservice (cherry picked to el-alto?)
  • only in master

Code completion and artifact released by Sep 6, 2019

•  BlueprintGenerator (DCAEGEN2-1700)
•  TCA
•  VESCollector
•  SDK
•  RESTConf
•  Dashboard
•  HV-VES
•  PRH
•  PM-Mapper (minor updates)
•  DFC
•  SON-Handler
•  Mapper

Branching/tagging & new CI-job for el-alto COMPLETED for above components

Branching for following completed (same as Dublin)

•  TCA
•  VESCollector
•  SDK
•  RESTConf

Review DCAE Microservice Onboarding & Design (MOD) feature targeted for Frankfurt release

ONAP DCAE MOD Architecture Review

DCAEGEN2-1822 - oparent version update

Review commitments for Frankfurt from DCAE standpoint

Frankfurt Release Requirements

1)  Added plain kafka support

2) Mapping files from class files changed to different FS (config map)

DCAE blueprint/spec updates for ONAP/DCAE integration to be worked

ticket: https://gerrit.onap.org/r/#/c/dcaegen2/services/sdk/+/94266/

Confluence: TLS support for CBS - Migration Plan

K8s plugin updates (DCAEGEN2-1550)

1. Cloudify deployments of service components should include following environments
• CONFIG_BINDING_SERVICE=<cbs_k8s_service_name>
• DCAE_CA_CERTPATH=/opt/dcae/cacert/cacert.pem  (this will be default unless overridden by component via blueprint)
• CBS_CONFIG_URL=https://config-binding-service/service_component_all/<scn> 
  • #scn → Unique Servicecomponent name

"Library Enhancement (CBS java sdk - DCAEGEN2-1552, CBS python util - DCAEGEN2-1551)

1. Verify if the new environment setting for TLS (below) added by K8s plugin is visible within POD.
• CONFIG_BINDING_SERVICE=<cbs_k8s_service_name>
• DCAE_CA_CERTPATH=<path>
2. If DCAE_CA_CERTPATH is defined, use the cacert for establishing secure end-point to interface with CBS (port 10443)
   1. An optional CBS_CONFIG_URL will be exposed providing the exact URL to be used for configuration retrieval. Application/Libraries can use this URL directly instead of constructing URL from HOSTNAME (which refers to ServiceComponentName) and CONFIG_BINDING_SERVICE env's.  By default, this URL will use HTTPS CBS interface
3. If TLS env is undefined, use R4 service name and port (10000) to interface with CBS (HTTP)

Note: Libraries should stop using Consul service discovery to find CBS; instead rely on kubernetes DNS name (exposed via env CONFIG_BINDING_SERVICE) and port 10000 for HTTP and 10443 for HTTPS. Service registration on Consul will not be done for CBS TLS service"

Current implementation relies on trust.jks being available. Following options to be explored

• Option 1: Work/address issue around using cacert.pem for CBS connection (original proposal)
• Option 2: Enabled use_tls: true for all DCAE MS deployment (in blueprint) to ensure all AAF cert/trust and distributed (regardless of the MS/component being setup as server or not)
• Option 3: Modify K8s plugin to include trust.jks distribution by default along with cacert.pem

Note: Current SDK change https://gerrit.onap.org/r/#/c/dcaegen2/services/sdk/+/94266/ relies on Option#2