fiware-ops / marinera Goto Github PK

I think ArgoCD might require cluster-admin permissions at cluster level to deploy Kong. I have seen an strange ArgoCD error in that regard, but I am not 100% sure. So it would be good to try to reproduce it and narrow down the issue, find an alternative or change the documentation to adress it.

Create subscription to persist historical data and document it, for the devices simulated. Currently the sub is created by the AQ Data simulator.

Discuss in the future, depends on if we have QL or not in the picture

Analyze and implement secured traffic (https) between PEP-proxy and Keycloak. Use internal traffic network (SDN).

Air quality data simulator through PEP proxy. Now it is disabled, because we detected some race conditions Check that they are ok right now

As an integrator, I want access logging so that
I can audit who has logged in

Investigate Keycloak issues with 2 replicas (both replicas try to import the relam at the same time??). Now it only deploys 1 replica.

Investigate if makes sense to adjust keycloack clients and set the right type (confidential,bearer-only), like for orion-pep client. This has implications in the pep proxy as well!

I want to inject sensors reports without delay (less than 500ms)

I want to recover the platform after a disaster with little effort

E2E helm chart should have an option to use external secrets for Grafana and Keycloak (Grafana is possible right now but can be part of the values.yaml file instead of in another one)

As an integrator, I want
data traceability so that
I am being able to see
all the trips of a datapoint

As an integrator I want to balance the load automatically to scale linealy

Force redeploy keycloak when confimap changed . An annotation with checksum of the config map of keycloak could be use [Check that the post-hook is triggered everytime that the ConfigMap of the Realm changes]

As an integrator, I want to have an in-depth doc about the sec-framework of the platform.

I WANT AN EASY AND WELL-DOCUMENTED WAY TO DEPLOY IOT AGENTS (JSON IOT AGENT AND MOSQUITO MQIT BROKER)

@wistefan we might to want to have quantumleap-pg-init:edge tagged and fixed as well...

AQ Simulator is required to run the AQ App working because it creates the subs ...investigate to decouple this ;).

Generate Helm charts documentation automatically.

Alternatives:

• pre-commit
• CI

AS AN INTEGRATOR 
I WANT GRAFANA TO RECEIVE HISTORICAL DATA THROUGH NGSI TEMPORAL API

Right now versioning of the helm charts in this repo is not up to date

Explore using Pod affinity/antiaffinity rules for components/pods.

• Antiaffinity: Most adecuated would be pod anti-affinity for pods of the same componenet: https://docs.openshift.com/container-platform/4.9/nodes/scheduling/nodes-scheduler-pod-affinity.html#nodes-scheduler-pod-affinity-example-antiaffinity_nodes-scheduler-pod-affinity
• Affinity: explore the use

As an integrator, I want to make sure that every device report is received on the platform to make sure that metrics aren't lost

Values file is not commented nor documented

Currently the template only have readiness defined in the chart. Add liveness healthcheck

As an integrator, I want to connect my IOT devices to the newly deployed IoT agents on OCP so that we have real data.

I want to have TLS security enabled by default, so messages don't travel in plain text through the network

Until Keycloak 17, it is possible to define JavaScript based policies directly in the Realm.json that is uploaded to Keycloak. In Keycloak 18, the deprecated upload-script feature was removed.

The new proposal considers following this documentation to configure a JavaScript provider to upload a JAR with the scripts to deploy.

Without this changes, upgrading to Keycloak >18 is blocked.

As an integrator
I want to be able
to scale pods up and down

I want to be able to opt-out from TLS security to improve the performance when I trust in the perimetral security

I want deploy a FIWARE Platform without manual steps

As an integrator, I want to limit the amount of information coming in from devices misconfigured to prevent overloading the databases.

orion-ld Grafana data source for NGSAPI v2? (Bulding it for Grafana).

As an integrator, I want tenant isolation so that huge requests don't impact performace of other tenants.

Possible tools:

• Kubelinter: https://docs.kubelinter.io/#/
• helm lint: https://helm.sh/docs/helm/helm_lint/
• Article to add github action: https://redhat-cop.github.io/ci/linting-testing-helm-charts.html

As a FIWARE
I want to pass the code through a Q code gateway.
So, my CODE will follow coding best Practices & Syntax

As an integrator, I want to have audit logs in the components to check who has been doing things.

I WANT TO HAVE TROUBLESHOOT RECOMMENDATIONS FOR THE PLATFORM

As integrator
I want to be able to update the platform (OCB) as easy as the deployment
So I will be able to be updated and protected from boss, CVES...
(CoDe???, data  ????..)

Logs from orion-ld, it seem related wit the logstojson.sh script...

Failed to create a thread: Resource temporarily unavailable                                                                                                                                   
/scripts/logstojson.sh: fork: retry: Resource temporarily unavailable                                                                                                                         
/scripts/logstojson.sh: fork: retry: Resource temporarily unavailable                                                                                                                         
/scripts/logstojson.sh: fork: retry: Resource temporarily unavailable                                                                                                                         
/scripts/logstojson.sh: fork: Resource temporarily unavailable                                                                                                                                
Failed to create a thread: Resource temporarily unavailable                                                                                                                                   
Failed to create a thread: Resource temporarily unavailable                                                                                                                                   
Failed to create a thread: Resource temporarily unavailable                                                                                                                                   
Failed to create a thread: Resource temporarily unavailable                                                                                                                                   
Failed to create a thread: Resource temporarily unavailable 

Now it's disable. Maybe migrate to python or a better bash script.