Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 209 Next »

Please fill in the protocol (http/https/ws... to determine if it will cross the ingress port) and the reason for the port being open (hybrid deployment needs access?, external access client (kibana/gui...)) in the table below in prep of removing some nodeports in the run up to using an Ingress controller

Sync with /wiki/spaces/SV/pages/16090715

TODO: add protocol to each port - to determine suitability for HTTP/HTTPS or multi-protocol proxy for ingress

NodePorts are used to allow client applications, that run outside of Kubernetes, access to ONAP components deployed by OOM.

A NodePort maps an externally reachable port to an internal port of an ONAP microservice.

It should be noted that the use of NodePorts is temporary. An alternative solution is currently being scoped for the Dublin Release.

But for now, this page is used to track NodePort assignments.


All ONAP project teams that have microservices that need to provide external access for clients, must update this wiki page to reserve NodePorts and prevent ONAP deployment failures due to NodePort conflicts.

If a service is only accessed by other services within the same kubernetes deployment (ie. databases, backend services with no external northbound APIs) then please DO NOT reserve

a NodePort as they are a very limited resource. The service name and its Internal Port (<service name>.port) should be used instead (ie. vid.8443)


To reserve a NodePort search the table below for the text "FREE_PORT".

If it is determined that an existing reservation is no longer required, please add the text "FREE_PORT" to indicate its availability.


Developer Checklist

Verify unused nodeports

Before using a particular nodeport - verify there is no conflict by deploying the entire system and checking services or the tables below.

Get the nodeport of a particular service

# human readable list
kubectl get services --all-namespaces | grep robot
# machine readable number
kubectl get --namespace onap -o jsonpath="{.spec.ports[0].nodePort}" services robot)


Node Port Reservations 302 prefix

Component

(sortable)

PodService name

Protocol

http/https/ws...

Node PortInternal PortReason for exposure outside of the internal DNS service name access
vid
vid
302008443
sdnc
sdnc-portal
302018843
sdnc
sdnc
302028282http port, removed in El Alto.  Instead, users should use https node port 30267
sdnc
sdnc-dgbuilder
302033000
sdc
sdc-be
302048443
sdc
sdc-be
302058080
sdc
sdc-fe
302068181
sdc
sdc-fe
302079443
appc
appc
302088282
robot
robot
3020988u:p test:test
aai
aai-modelloader
302108080
appc
appc
302119090
portal
portal-sdk
302128080
portal
portal-app
302138006
portal
portal-app
302148010
portal
portal-app
302158989
policy
policy brmsgw
302169989


policy
drools (dup?)
302176969
policy
pap
302189091
policy
pap
302198443
aai
aai-sparky-be
302209517
policy
drools (dup?)
302219696
dcaeDCAEGEN2

hv-ves

xdcae-hv-ves-collector


302226061
dcae

DCAEGEN2


30223

Reserved for future DCAEapp

(12/30 - dcae-datafile-collector usage on this port is removed since El-Alto)

so
so-monitor
302249091


portal

portal-app (ssl)


302258443

https://gerrit.onap.org/r/#/c/69859/

OOM-1455 - Getting issue details... STATUS

dmaap
message-router
302263905
dmaap
message-router
302273904
appc
appc-dgbuilder
302283000CAUTION2: There might me blanks in following data.
aai
aai-modelloader
302298443CAUTION2: There might me blanks in following data.
appc
appc
302308443
appc
appc
302311830
aai
aai
302328080
aai
aai
302338443
pomba
pomba-kibanahttps302345601
dcae
xdcae-ves-collector
302358080
policy
nexus
302368081
policy
policy-apex-pdp
3023712345
aai
aai-graphgraph
302388453

AAI-2596 - Getting issue details... STATUS

aai
aai-spike
302399518
pomba
pomba-context-builder
302409530
dmaap
dmaap-bc
302418080
dmaap
dmaap-bc
302428443
aaf
aaf-sms
3024310443
aaf
aaf-sms-db
302448200CAUTION2: There might me blanks in following data.
sdnc
sdnc
302468280Appears to be no longer needed - investigating
dcae

dcae datafile collector


302458100
aaf
aaf-service
302478100
oof
oof-osdf
302488698
pomba
pomba-data-router
302499502
appc
appc-cds
3025080
aaf
aaf-gui
302518200
so
so-mariadb
302523306
log
log-kibanahttp302535601external access from client application
log
log-eshttp302549200external ELK stack for hybrid deployment
log
log-lshttp302555044external ELK stack for hybrid deployment
sdc
sdc-wfd-fe
302568080
sdc
sdc-wfd-be
302578080
clamp
clamp
302588443
dmaap
dmaap-dr-provhttp302598080external access for multi-site/cluster comms
cli
cli
302608080
multicloud
multicloud-azure
302619008https://gerrit.onap.org/r/#/c/68647/
dcae

dcae datafile collector


30262                 8433
sdc
sdc-dcae-fe
302638183
sdc
sdc-dcae-fe
302649444
sdc
sdc-dcae-dt
302658186
sdc
sdc-dcae-dt
302669446
sdnc
sdnc
302678443https port, used for access to OpenDaylight REST interface 
aai
aai-crud-service (gizmo)
302689520
dmaap
dmaap-dr-provhttps302698443external access for multi-site/cluster comms
consul
consul-server-ui
302708500
cli
cli
302719090
sdnc
SDNC GEO (mysql)
30272

sdnc
SDNC GEO (mysql)
30273

nbi
nbi
302748080


oof
oof-has-api
302758091
oof
oof-has-music
302768080
so
so
302778080see also https://gerrit.onap.org/r/#/c/72433/2
aai
aai-champ
302789522
aai
aai-babel
302799516
msb
msb-iag
3028080
msb
msb-discovery
3028110081
msb
msb-eag
3028280
msb
msb-iag
30283443
msb
msb-eag
30284443
msb
msb-consul
302858500
dcae
dcae-redis
302866379
dcae
dcae-redis
3028716379
sniro
sniro-emulator
3028880

pnda has a conflict here - DCAEGEN2-1012 - Getting issue details... STATUS

appc
appc-cdt
3028918080
clamp
cdash-kibana
302905601
multicloud
multicloud
302919001No more such nodePort for multicloud
multicloud
multicloud-vio
302929004No more such nodePort for multicloud
multicloud
multicloud-ocata
302939006No more such nodePort for multicloud
multicloud
multicloud-windriver
302949005No more such nodePort for multicloud
clamp
clamp
302958080
multicloud

multicloud-pike


302969007

No more such nodePort for multicloud

vnfsdk
refrepo
302978702
log
LOG demo target
302988080

taken from UUI - they are using the 303 prefix

OOM-1531 - Getting issue details... STATUS

pomba
pomba-networkdiscoveryREST302998080

taken from UUI - they are using the 303 prefix

SDNC-533 - Getting issue details... STATUS

https://gerrit.onap.org/r/#/c/73980/2

vvp
vvp
??

OOM-1534 - Getting issue details... STATUS

uui
uui
303988080may be a typo with 30298 - currently using 398 as of 20181125
uui
uui-server
303998082
OOM-1531 - Getting issue details... STATUS

may be a typo with 30298 - currently using 399 as of 20181125



There
is

Room above:

There is ROOM Above 31100







modeling
modeling-etsicatalog
303018806


IF POSSIBLE
Leave31104-31109

open

aaf
aaf-servicehttps/REST(json|xml)311108100

AAF Main Service

aaf
aaf-locatorhttps/REST(json|xml)311118095AAF Locator
aaf
aaf-oauthhttps/REST(json|xml)311128140AAF OAuth2 access
aaf
aaf-guihttps/REST(json|xml)311138200AAF GUI
aaf
aaf-cmhttps/REST(json|xml)311148150AAF Certificate Manager
aaf
aaf-fs

http (Note: Fileserver

for CRLs, etc)

311158096AAF File Server
aaf
aafHOLD for Future

31116

31117

31118


Future AAF Services
aaf
aaf-hellohttps/REST(json|xml)311198130AAF Hello Sample
appc
appcHOLD for Future

31200

31201

31202

31203



Node Port Reservations (304 node port prefix range)

This table is for documenting node ports that are reserved outside of a typical ONAP deployment.

Even though the ports listed below may appear in ONAP Helm Charts, they are not used at runtime unless enabled through configuration.

For example, there may be a need to reserve node ports (even temporarily) for use in POC or for demo code, that currently exists in the ONAP codebase.

Component

(sortable)

PODService name

Protocol

(rest/multi-protocol)

Node PortInternal Port

dcae

dcae-pnda-mirror

(node the boostrap pod np

is named mirror)


3040080

A PNDA deployment (outside the Kubernetes
cluster) needs to download its components from
the PNDA mirror (inside the Kubernetes cluster)

DCAEGEN2-1012 - Getting issue details... STATUS


vfc
vfc-nslcm
30403


so
so-bpmn-infra
304048081so-bpmn-port
so
so-bpmn-infra
304055005so-bpmn-debug
so
so-vnfm-adapter
304069092

dcaeDCAEGEN2

xdcae-tca-analytics


3041011011

switch from 32010

DCAEGEN2-998 - Getting issue details... STATUS



vfc
vfc - commented
30411


dcae
DCAEGEN2
3041410443DCAE Config Binding Service (https)
dcae
 DCAEGEN2
30415 10000DCAE Config Binding Service (http)
dcae
 DCAEGEN2
30416 8080/8687DCAE RESTConf collector Service
dcae
 DCAEGEN2
30417 8443DCAE VESCollector - Https
dcae
 DCAEGEN2
30418 8080DCAE Dashboard (http)
dcae
 DCAEGEN2
30419  8443DCAE Dashboard (https)
?
Netbox UI
304208080

sdc
sdc-wfd-fe
304318443https://gerrit.onap.org/r/#/c/87116/
policy
policy-api
304406969https://gerrit.onap.org/r/#/c/79318/
policy
policy-xacml-pdp
304416969https://gerrit.onap.org/r/#/c/81977/
policy
policy-pap
304426969

log
log-demonode0
304538080

log
log-demonode1

304548080

log
log-demonode2

304558080

log
log-es SSL
30456

20181016

LOG-748 - Getting issue details... STATUS



log
log-kb SSL
30457

20181016

LOG-748 - Getting issue details... STATUS



log
log-ls SSL
30458

20181016

LOG-748 - Getting issue details... STATUS



sdnc
SDNC GEO
30461


sdnc
SDNC GEO
30462


sdnc
SDNC GEO
30463


sdnc
SDNC GEO
30464


sdnc
SDNC GEO
30465


sdnc
SDNC GEO
30466


dcae
DCAEGEN2 
30470 162 Snmptrap (test purpose)
dcae
DCAEGEN2
30471
 Reserved
dcae
DCAEGEN2 
30472
 Reserved
dcae
DCAEGEN2 
30473 8080 DCAE MOD UI (HTTP) for Frankfurt release
dcae
DCAEGEN2
30474 8443 Reserved for DCAE MOD UI (HTTPs) post Frankfurt release
dcae
MUSIC
30475


dcae
MUSIC
304768080

dcae
MUSIC
30477


vfc
vfc-resmgr
30480


vfc
vfc-multivim-proxy
30481


vfc
vfc-huawei-vnfm-driver
30482


vfc
vfc-juju-vnfm-dirver
30483


multicloud
multicloud-starlingx
304859009

multicloud
multicloud-thinkcloud
304869010

multicloud

multicloud-fcaps


304879011

multicloud

multicloud-artifactbroker


304889014

multicloud
multicloud-tentative
30489


multicloud
multicloud-k8s
304989015

dmaap
DMaap tentative
30490
https://lists.onap.org/g/onap-discuss/topic/new_nodeports_for_the_dmaap/29582628?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,29582628
dmaap
DMaap tentative
30491


dmaap
DMaap tentative
30492


dmaap
dmaap-dr-nodehttp304938080external access for multi-site/cluster comms
dmaap
dmaap-dr-nodehttps304948443external access for multi-site/cluster comms
multicloud
multicloud-service-assurance
304959009Only from Dublin Release
multicloud
multicloud-service-assurance (tentative)
304969010Only from Dublin Release
cds
cds-ui
304973000Dublin onwards.
cds
blueprint-processor
304998080Dublin onwards.
awx
awx-web
3047880Dublin onwards.


This port does not seem to be configurable from a Helm Chart.

Mike Elliott will raise issue to see if it can be made configurable within either the 302 or 304 ranges.

Service nameNode PortInternal Port
xdcae-tca-analytics

32010

use 30410

11011

DCAEGEN2-998 - Getting issue details... STATUS

  • No labels