You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 174 Next »

Sync with Casablanca Unprotected Interfaces

TODO: add protocol to each port - to determine suitability for HTTP/HTTPS or multi-protocol proxy for ingress

NodePorts are used to allow client applications, that run outside of Kubernetes, access to ONAP components deployed by OOM.

A NodePort maps an externally reachable port to an internal port of an ONAP microservice.

It should be noted that the use of NodePorts is temporary. An alternative solution is currently being scoped for the Dublin Release.

But for now, this page is used to track NodePort assignments.


All ONAP project teams that have microservices that need to provide external access for clients, must update this wiki page to reserve NodePorts and prevent ONAP deployment failures due to NodePort conflicts.

If a service is only accessed by other services within the same kubernetes deployment (ie. databases, backend services with no external northbound APIs) then please DO NOT reserve

a NodePort as they are a very limited resource. The service name and its Internal Port (<service name>.port) should be used instead (ie. vid.8443)


To reserve a NodePort search the table below for the text "FREE_PORT".

If it is determined that an existing reservation is no longer required, please add the text "FREE_PORT" to indicate its availability.


Developer Checklist

Verify unused nodeports

Before using a particular nodeport - verify there is no conflict by deploying the entire system and checking services or the tables below.

Get the nodeport of a particular service

# human readable list
kubectl get services --all-namespaces | grep robot
# machine readable number
kubectl get --namespace onap -o jsonpath="{.spec.ports[0].nodePort}" services robot)


Node Port Reservations 302 prefix

PodService name

Protocol

(rest/multi-protocol)

Node PortInternal Port

vidREST302008443

sdnc-portal
302018843

sdnc
302028282

sdnc-dgbuilder
302033000

sdc-be
302048443

sdc-be
302058080

sdc-fe
302068181

sdc-fe
302079443

sdnc
302088202

robot
3020988u:p test:test

aai-modelloader
302108080

appc
302119090

portal-sdk
302128080

portal-app
302138006

portal-app
302148010

portal-app
302158989

policy brmsgw
302169989



drools
302176969

pap
302189091

pap
302198443

aai-sparky-be
302209517

drools
302219696
DCAEGEN2

hv-ves

xdcae-hv-ves-collector


302226061
DCAEGEN2

xdcae-datafile-collector


302238080

OPTFRA-405 - Getting issue details... STATUS


so-monitor
302249091



portal-app (ssl)


302258443

https://gerrit.onap.org/r/#/c/69859/

OOM-1455 - Getting issue details... STATUS


message-router
302263905

message-router
302273904

appc-dgbuilder
302283000

aai-modelloader
302298443

appc
302308282

appc
302311830

aai
302328080

aai
302338443

pomba-kibanaREST302345601

xdcae-ves-collector
302358080

nexus
302368081

policy-apex-pdp
3023712345

vid - http
302388080

aai-spike
302399518

pomba-context-builderREST302409530

dmaap-bc
302418080

dmaap-bc
302428443

aaf-sms
3024310443

aaf-sms-db
302448200

sdnc
302468280

dcae datafile collector


302458100

aaf-service
302478100

oof-osdf
302488698

pomba-data-routerREST302499502

appc-cds
3025080

aaf-gui
302518200

so-mariadb
302523306

log-kibanaREST302535601

log-esREST302549200

log-lsREST302555044

sdc-wfd-fe
302568080

sdc-wfd-be
302578080

clamp
302588443

dmaap-dr-prov
302598080

cli
302608080

multicloud-azure
302619008https://gerrit.onap.org/r/#/c/68647/

dcae datafile collector


30262                 8433

sdc-dcae-fe
302638183

sdc-dcae-fe
302649444

sdc-dcae-dt
302658186

sdc-dcae-dt
302669446

sdnc
302678443

aai-crud-service
302689520

dmaap-dr-prov
302698443

consul-server-ui
302708500

cli
302719090

SDNC GEO (mysql)
30272


SDNC GEO (mysql)
30273


nbi
302748080

oof-has-api
302758091

oof-has-music
302768080

so
302778080see also https://gerrit.onap.org/r/#/c/72433/2

aai-champ
302789522

aai-babel
302799516

msb-iag
3028080

msb-discovery
3028110081

msb-eag
3028280

msb-iag
30283443

msb-eag
30284443

msb-consul
302858500

dcae-redis
302866379

dcae-redis
3028716379

sniro-emulator
3028880

pnda has a conflict here - DCAEGEN2-1012 - Getting issue details... STATUS


appc-cdt
3028980

cdash-kibana
302905601

multicloud
302919001

multicloud-vio
302929004

multicloud-ocata
302939006

multicloud-windriver
302949005

clamp
302958080

multicloud-pike


302969007



refrepo
302978702

LOG demo target
302988080

taken from UUI - they are using the 303 prefix

OOM-1531 - Getting issue details... STATUS


pomba-networkdiscoveryREST302998080

taken from UUI - they are using the 303 prefix


SDNC-533 - Getting issue details... STATUS

https://gerrit.onap.org/r/#/c/73980/2


vvp
??

OOM-1534 - Getting issue details... STATUS


cds-ui
303973000

uui
303988080may be a typo with 30298 - currently using 398 as of 20181125

uui-server
303998082
OOM-1531 - Getting issue details... STATUS

may be a typo with 30298 - currently using 399 as of 20181125


There
is

Room above:

There is ROOM Above 31100







modeling-generic-parser
303018280

IF POSSIBLE
Leave31104-31109

open


aaf-servicehttps/REST(json|xml)311108100

AAF Main Service


aaf-locatorhttps/REST(json|xml)311118095AAF Locator

aaf-oauthhttps/REST(json|xml)311128140AAF OAuth2 access

aaf-guihttps/REST(json|xml)311138200AAF GUI

aaf-cmhttps/REST(json|xml)311148150AAF Certificate Manager

aaf-fs

http (Note: Fileserver

for CRLs, etc)

311158096AAF File Server

aaf-hellohttps/REST(json|xml)311168130AAF Hello Sample

aafHOLD for Future

31117

31118

31119


Future AAF Services

Node Port Reservations (304 node port prefix range)

This table is for documenting node ports that are reserved outside of a typical ONAP deployment.

Even though the ports listed below may appear in ONAP Helm Charts, they are not used at runtime unless enabled through configuration.

For example, there may be a need to reserve node ports (even temporarily) for use in POC or for demo code, that currently exists in the ONAP codebase.

PODService name

Protocol

(rest/multi-protocol)

Node PortInternal Port


dcae-pnda-mirror

(node the boostrap pod np

is named mirror)


3040080

A PNDA deployment (outside the Kubernetes
cluster) needs to download its components from
the PNDA mirror (inside the Kubernetes cluster)

DCAEGEN2-1012 - Getting issue details... STATUS



vfc-nslcm
30403



so-bpmn-infra
304048081so-bpmn-port

so-bpmn-infra
304055005so-bpmn-debug

so-vnfm-adapter
304069092

DCAEGEN2

xdcae-tca-analytics


3041011011

switch from 32010

DCAEGEN2-998 - Getting issue details... STATUS




vfc - commented
30411


  DCAEGEN2 30415 10000  DCAE Config Binding Service
  DCAEGEN2 30416 8080/8687  DCAE RESTConf collector Service
  DCAEGEN2 30417 8443  DCAE VESCollector - Https
  DCAEGEN2 30418 8080  Dashboard (http) 
  DCAEGEN2 30419  8443  Dashboard (https) 

Netbox UI
304208080


policy-api
304406969https://gerrit.onap.org/r/#/c/79318/

policy-xacml-pdp
304416969https://gerrit.onap.org/r/#/c/81977/

log-demonode0
304538080


log-demonode1

304548080


log-demonode2

304558080


log-es SSL
30456

20181016

LOG-748 - Getting issue details... STATUS




log-kb SSL
30457

20181016

LOG-748 - Getting issue details... STATUS




log-ls SSL
30458

20181016

LOG-748 - Getting issue details... STATUS




SDNC GEO
30461



SDNC GEO
30462



SDNC GEO
30463



SDNC GEO
30464



SDNC GEO
30465



SDNC GEO
30466


 DCAEGEN2  30470 162 Snmptrap (test purpose) 
 DCAEGEN2 30471  Reserved 
 DCAEGEN2  30472  Reserved 
 DCAEGEN2  30473   Reserved 
 DCAEGEN2 30474   Reserved 

MUSIC
30475



MUSIC
304768080


MUSIC
30477



vfc-resmgr
30480



vfc-multivim-proxy
30481



vfc-huawei-vnfm-driver
30482



vfc-juju-vnfm-dirver
30483



multicloud-starlingx
304859009


multicloud-thinkcloud
304869010


multicloud-fcaps


304879011


multicloud-tentative


30488



multicloud-tentative
30489



DMaap tentative
30490
https://lists.onap.org/g/onap-discuss/topic/new_nodeports_for_the_dmaap/29582628?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,29582628

DMaap tentative
30491



DMaap tentative
30492



dmaap-dr-node
304938080


dmaap-dr-node
304948443


multicloud-service-assurance
304959009Only from Dublin Release

multicloud-service-assurance (tentative)
304969010Only from Dublin Release


This port does not seem to be configurable from a Helm Chart.

Mike Elliott will raise issue to see if it can be made configurable within either the 302 or 304 ranges.

Service nameNode PortInternal Port
xdcae-tca-analytics

32010

use 30410

11011

DCAEGEN2-998 - Getting issue details... STATUS

  • No labels