Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 1 | .. This work is licensed under a |
| 2 | .. Creative Commons Attribution 4.0 International License. |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 3 | .. http://creativecommons.org/licenses/by/4.0 |
Mike Elliott | f137b2c | 2019-04-30 16:28:07 -0400 | [diff] [blame] | 4 | .. Copyright 2019 Amdocs, Bell Canada |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 5 | |
| 6 | .. _quick-start-label: |
| 7 | |
| 8 | OOM Quick Start Guide |
| 9 | ##################### |
| 10 | |
| 11 | .. figure:: oomLogoV2-medium.png |
| 12 | :align: right |
| 13 | |
| 14 | Once a kubernetes environment is available (follow the instructions in |
| 15 | :ref:`cloud-setup-guide-label` if you don't have a cloud environment |
| 16 | available), follow the following instructions to deploy ONAP. |
| 17 | |
| 18 | **Step 1.** Clone the OOM repository from ONAP gerrit:: |
| 19 | |
Mike Elliott | f137b2c | 2019-04-30 16:28:07 -0400 | [diff] [blame] | 20 | > git clone -b 4.0.0-ONAP http://gerrit.onap.org/r/oom --recurse-submodules |
Roger Maitland | d1237f3 | 2018-03-26 13:14:04 -0400 | [diff] [blame] | 21 | > cd oom/kubernetes |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 22 | |
Mike Elliott | f137b2c | 2019-04-30 16:28:07 -0400 | [diff] [blame] | 23 | **Step 2.** Install Helm Plugins required to deploy ONAP:: |
Pawel Wieczorek | aa859cd | 2019-01-23 17:32:18 +0100 | [diff] [blame] | 24 | |
| 25 | > sudo cp -R ~/oom/kubernetes/helm/plugins/ ~/.helm |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 26 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 27 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 28 | **Step 3.** Customize the helm charts like oom/kubernetes/onap/values.yaml or an override |
| 29 | file like onap-all.yaml, onap-vfw.yaml or openstack.yaml file to suit your deployment with items like the |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 30 | OpenStack tenant information. |
| 31 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 32 | .. note:: |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 33 | Standard and example override files (e.g. onap-all.yaml, openstack.yaml) can be found in |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 34 | the oom/kubernetes/onap/resources/overrides/ directory. |
| 35 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 36 | |
| 37 | a. You may want to selectively enable or disable ONAP components by changing |
| 38 | the `enabled: true/false` flags. |
| 39 | |
| 40 | |
| 41 | b. Encyrpt the OpenStack password using the shell tool for robot and put it in |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 42 | the robot helm charts or robot section of openstack.yaml |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 43 | |
| 44 | |
| 45 | c. Encrypt the OpenStack password using the java based script for SO helm charts |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 46 | or SO section of openstack.yaml. |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 47 | |
| 48 | |
| 49 | d. Update the OpenStack parameters that will be used by robot, SO and APPC helm |
| 50 | charts or use an override file to replace them. |
| 51 | |
| 52 | |
| 53 | |
| 54 | |
| 55 | a. Enabling/Disabling Components: |
Mike Elliott | f137b2c | 2019-04-30 16:28:07 -0400 | [diff] [blame] | 56 | Here is an example of the nominal entries that need to be provided. |
| 57 | We have different values file available for different contexts. |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 58 | |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 59 | .. literalinclude:: onap-values.yaml |
| 60 | :language: yaml |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 61 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 62 | |
| 63 | b. Generating ROBOT Encrypted Password: |
| 64 | The ROBOT encrypted Password uses the same encryption.key as SO but an |
| 65 | openssl algorithm that works with the python based Robot Framework. |
| 66 | |
Abdelmuhaimen Seaudi | d7133a1 | 2018-07-18 10:59:20 +0000 | [diff] [blame] | 67 | .. note:: |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 68 | To generate ROBOT openStackEncryptedPasswordHere : |
Abdelmuhaimen Seaudi | d7133a1 | 2018-07-18 10:59:20 +0000 | [diff] [blame] | 69 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 70 | ``cd so/resources/config/mso/`` |
Abdelmuhaimen Seaudi | d7133a1 | 2018-07-18 10:59:20 +0000 | [diff] [blame] | 71 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 72 | ``/oom/kubernetes/so/resources/config/mso# echo -n "<openstack tenant password>" | openssl aes-128-ecb -e -K `cat encryption.key` -nosalt | xxd -c 256 -p`` |
Abdelmuhaimen Seaudi | d7133a1 | 2018-07-18 10:59:20 +0000 | [diff] [blame] | 73 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 74 | c. Generating SO Encrypted Password: |
| 75 | The SO Encrypted Password uses a java based encryption utility since the |
| 76 | Java encryption library is not easy to integrate with openssl/python that |
| 77 | ROBOT uses in Dublin. |
| 78 | |
| 79 | .. note:: |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 80 | To generate SO openStackEncryptedPasswordHere and openStackSoEncryptedPassword: |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 81 | |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 82 | SO_ENCRYPTION_KEY=`cat ~/oom/kubernetes/so/resources/config/mso/encryption.key` |
| 83 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 84 | OS_PASSWORD=XXXX_OS_CLEARTESTPASSWORD_XXXX |
| 85 | |
| 86 | git clone http://gerrit.onap.org/r/integration |
Mike Elliott | db27182 | 2019-06-06 08:06:19 -0400 | [diff] [blame] | 87 | |
| 88 | cd integration/deployment/heat/onap-rke/scripts |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 89 | |
| 90 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 91 | javac Crypto.java |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 92 | |
| 93 | [ if javac is not installed 'apt-get update ; apt-get install default-jdk' ] |
| 94 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 95 | java Crypto "$OS_PASSWORD" "$SO_ENCRYPTION_KEY" |
| 96 | |
| 97 | |
| 98 | d. Update the OpenStack parameters: |
| 99 | |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 100 | There are assumptions in the demonstration VNF heat templates about the networking |
| 101 | available in the environment. To get the most value out of these templates and the |
| 102 | automation that can help confirm the setup is correct, please observe the following |
| 103 | constraints. |
| 104 | |
| 105 | openStackPublicNetId: |
| 106 | |
| 107 | This network should allow heat templates to add interfaces. |
| 108 | This need not be an external network, floating IPs can be assigned to the ports on |
| 109 | the VMs that are created by the heat template but its important that neutron allow |
| 110 | ports to be created on them. |
| 111 | |
| 112 | openStackPrivateNetCidr: "10.0.0.0/16" |
| 113 | |
| 114 | This ip address block is used to assign OA&M addresses on VNFs to allow ONAP connectivity. |
| 115 | The demonstration heat templates assume that 10.0 prefix can be used by the VNFs and the |
| 116 | demonstration ip addressing plan embodied in the preload template prevent conflicts when |
| 117 | instantiating the various VNFs. If you need to change this, you will need to modify the preload |
| 118 | data in the robot helm chart like integration_preload_parametes.py and the demo/heat/preload_data |
| 119 | in the robot container. The size of the CIDR should be sufficient for ONAP and the VMs you expect |
| 120 | to create. |
| 121 | |
| 122 | openStackOamNetworkCidrPrefix: "10.0" |
| 123 | |
| 124 | This ip prefix mush match the openStackPrivateNetCidr and is a helper variable to some of the |
| 125 | robot scripts for demonstration. A production deployment need not worry about this |
| 126 | setting but for the demonstration VNFs the ip asssignment strategy assumes 10.0 ip prefix. |
| 127 | |
| 128 | |
| 129 | Example Keystone v2.0 |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 130 | .. literalinclude:: example-integration-override.yaml |
| 131 | :language: yaml |
| 132 | |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 133 | Example Keystone v3 (required for Rocky and later releases) |
| 134 | .. literalinclude:: example-integration-override-v3.yaml |
| 135 | :language: yaml |
| 136 | |
| 137 | |
| 138 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 139 | **Step 4.** To setup a local Helm server to server up the ONAP charts:: |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 140 | |
| 141 | > helm serve & |
| 142 | |
| 143 | Note the port number that is listed and use it in the Helm repo add as |
| 144 | follows:: |
| 145 | |
| 146 | > helm repo add local http://127.0.0.1:8879 |
| 147 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 148 | **Step 5.** Verify your Helm repository setup with:: |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 149 | |
| 150 | > helm repo list |
| 151 | NAME URL |
| 152 | local http://127.0.0.1:8879 |
| 153 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 154 | **Step 6.** Build a local Helm repository (from the kubernetes directory):: |
Roger Maitland | 9e5067c | 2018-03-27 10:57:08 -0400 | [diff] [blame] | 155 | |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 156 | > make all; make onap |
Roger Maitland | 9e5067c | 2018-03-27 10:57:08 -0400 | [diff] [blame] | 157 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 158 | **Step 7.** Display the onap charts that available to be deployed:: |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 159 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 160 | > helm search onap -l |
| 161 | |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 162 | .. literalinclude:: helm-search.txt |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 163 | |
| 164 | .. note:: |
Roger Maitland | d1237f3 | 2018-03-26 13:14:04 -0400 | [diff] [blame] | 165 | The setup of the Helm repository is a one time activity. If you make changes to your deployment charts or values be sure to use `make` to update your local Helm repository. |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 166 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 167 | **Step 8.** Once the repo is setup, installation of ONAP can be done with a |
| 168 | single command |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 169 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 170 | .. note:: |
| 171 | The --timeout 900 is currently required in Dublin to address long running initialization tasks |
| 172 | for DMaaP and SO. Without this timeout value both applications may fail to deploy. |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 173 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 174 | To deploy all ONAP applications use this command:: |
Roger Maitland | d1237f3 | 2018-03-26 13:14:04 -0400 | [diff] [blame] | 175 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 176 | > cd oom/kubernetes |
Mike Elliott | 7cad1c6 | 2019-07-02 13:48:51 -0400 | [diff] [blame] | 177 | > helm deploy dev local/onap --namespace onap -f onap/resources/overrides/onap-all.yaml -f onap/resources/overrides/environment.yaml -f onap/resources/overrides/openstack.yaml --timeout 900 |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 178 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 179 | All override files may be customized (or replaced by other overrides) as per needs. |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 180 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 181 | onap-all.yaml |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 182 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 183 | Enables the modules in the ONAP deployment. As ONAP is very modular, it is possible to customize ONAP and disable some components through this configuration file. |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 184 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 185 | environment.yaml |
| 186 | |
| 187 | Includes configuration values specific to the deployment environment. |
| 188 | |
| 189 | Example: adapt readiness and liveness timers to the level of performance of your infrastructure |
| 190 | |
| 191 | openstack.yaml |
| 192 | |
| 193 | Includes all the Openstack related information for the default target tenant you want to use to deploy VNFs from ONAP and/or additional parameters for the embedded tests. |
| 194 | |
| 195 | **Step 9.** Verify ONAP installation |
| 196 | |
| 197 | Use the following to monitor your deployment and determine when ONAP is ready for use:: |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 198 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 199 | > kubectl get pods -n onap -o=wide |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 200 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 201 | .. note:: |
| 202 | While all pods may be in a Running state, it is not a guarantee that all components are running fine. |
Pawel Wieczorek | aa859cd | 2019-01-23 17:32:18 +0100 | [diff] [blame] | 203 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 204 | Launch the healthcheck tests using Robot to verify that the components are healthy. |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 205 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 206 | > ~/oom/kubernetes/robot/ete-k8s.sh onap health |
| 207 | |
| 208 | **Step 10.** Undeploy ONAP |
| 209 | |
| 210 | > helm undeploy dev --purge |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 211 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 212 | More examples of using the deploy and undeploy plugins can be found here: https://wiki.onap.org/display/DW/OOM+Helm+%28un%29Deploy+plugins |