Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 1 | .. This work is licensed under a |
| 2 | .. Creative Commons Attribution 4.0 International License. |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 3 | .. http://creativecommons.org/licenses/by/4.0 |
Mike Elliott | f137b2c | 2019-04-30 16:28:07 -0400 | [diff] [blame] | 4 | .. Copyright 2019 Amdocs, Bell Canada |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 5 | |
| 6 | .. _quick-start-label: |
| 7 | |
| 8 | OOM Quick Start Guide |
| 9 | ##################### |
| 10 | |
| 11 | .. figure:: oomLogoV2-medium.png |
| 12 | :align: right |
| 13 | |
| 14 | Once a kubernetes environment is available (follow the instructions in |
| 15 | :ref:`cloud-setup-guide-label` if you don't have a cloud environment |
| 16 | available), follow the following instructions to deploy ONAP. |
| 17 | |
| 18 | **Step 1.** Clone the OOM repository from ONAP gerrit:: |
| 19 | |
Mike Elliott | a6243a9 | 2019-10-01 13:19:31 -0400 | [diff] [blame] | 20 | > git clone -b <BRANCH> http://gerrit.onap.org/r/oom --recurse-submodules |
Roger Maitland | d1237f3 | 2018-03-26 13:14:04 -0400 | [diff] [blame] | 21 | > cd oom/kubernetes |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 22 | |
Mike Elliott | 1f34c06 | 2019-10-03 15:28:45 -0400 | [diff] [blame] | 23 | where <BRANCH> can be an offical release tag, such as |
Mike Elliott | a6243a9 | 2019-10-01 13:19:31 -0400 | [diff] [blame] | 24 | 4.0.0-ONAP for Dublin |
Mike Elliott | 1f34c06 | 2019-10-03 15:28:45 -0400 | [diff] [blame] | 25 | 5.0.1-ONAP for El Alto |
Mike Elliott | a6243a9 | 2019-10-01 13:19:31 -0400 | [diff] [blame] | 26 | |
Mike Elliott | f137b2c | 2019-04-30 16:28:07 -0400 | [diff] [blame] | 27 | **Step 2.** Install Helm Plugins required to deploy ONAP:: |
Pawel Wieczorek | aa859cd | 2019-01-23 17:32:18 +0100 | [diff] [blame] | 28 | |
| 29 | > sudo cp -R ~/oom/kubernetes/helm/plugins/ ~/.helm |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 30 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 31 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 32 | **Step 3.** Customize the helm charts like oom/kubernetes/onap/values.yaml or an override |
| 33 | file like onap-all.yaml, onap-vfw.yaml or openstack.yaml file to suit your deployment with items like the |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 34 | OpenStack tenant information. |
| 35 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 36 | .. note:: |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 37 | Standard and example override files (e.g. onap-all.yaml, openstack.yaml) can be found in |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 38 | the oom/kubernetes/onap/resources/overrides/ directory. |
| 39 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 40 | |
| 41 | a. You may want to selectively enable or disable ONAP components by changing |
| 42 | the `enabled: true/false` flags. |
| 43 | |
| 44 | |
| 45 | b. Encyrpt the OpenStack password using the shell tool for robot and put it in |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 46 | the robot helm charts or robot section of openstack.yaml |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 47 | |
| 48 | |
| 49 | c. Encrypt the OpenStack password using the java based script for SO helm charts |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 50 | or SO section of openstack.yaml. |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 51 | |
| 52 | |
| 53 | d. Update the OpenStack parameters that will be used by robot, SO and APPC helm |
| 54 | charts or use an override file to replace them. |
| 55 | |
| 56 | |
| 57 | |
| 58 | |
| 59 | a. Enabling/Disabling Components: |
Mike Elliott | f137b2c | 2019-04-30 16:28:07 -0400 | [diff] [blame] | 60 | Here is an example of the nominal entries that need to be provided. |
| 61 | We have different values file available for different contexts. |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 62 | |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 63 | .. literalinclude:: onap-values.yaml |
| 64 | :language: yaml |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 65 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 66 | |
| 67 | b. Generating ROBOT Encrypted Password: |
| 68 | The ROBOT encrypted Password uses the same encryption.key as SO but an |
| 69 | openssl algorithm that works with the python based Robot Framework. |
| 70 | |
Abdelmuhaimen Seaudi | d7133a1 | 2018-07-18 10:59:20 +0000 | [diff] [blame] | 71 | .. note:: |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 72 | To generate ROBOT openStackEncryptedPasswordHere : |
Abdelmuhaimen Seaudi | d7133a1 | 2018-07-18 10:59:20 +0000 | [diff] [blame] | 73 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 74 | ``cd so/resources/config/mso/`` |
Abdelmuhaimen Seaudi | d7133a1 | 2018-07-18 10:59:20 +0000 | [diff] [blame] | 75 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 76 | ``/oom/kubernetes/so/resources/config/mso# echo -n "<openstack tenant password>" | openssl aes-128-ecb -e -K `cat encryption.key` -nosalt | xxd -c 256 -p`` |
Abdelmuhaimen Seaudi | d7133a1 | 2018-07-18 10:59:20 +0000 | [diff] [blame] | 77 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 78 | c. Generating SO Encrypted Password: |
| 79 | The SO Encrypted Password uses a java based encryption utility since the |
| 80 | Java encryption library is not easy to integrate with openssl/python that |
| 81 | ROBOT uses in Dublin. |
| 82 | |
| 83 | .. note:: |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 84 | To generate SO openStackEncryptedPasswordHere and openStackSoEncryptedPassword: |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 85 | |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 86 | SO_ENCRYPTION_KEY=`cat ~/oom/kubernetes/so/resources/config/mso/encryption.key` |
| 87 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 88 | OS_PASSWORD=XXXX_OS_CLEARTESTPASSWORD_XXXX |
| 89 | |
| 90 | git clone http://gerrit.onap.org/r/integration |
Mike Elliott | db27182 | 2019-06-06 08:06:19 -0400 | [diff] [blame] | 91 | |
| 92 | cd integration/deployment/heat/onap-rke/scripts |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 93 | |
| 94 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 95 | javac Crypto.java |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 96 | |
| 97 | [ if javac is not installed 'apt-get update ; apt-get install default-jdk' ] |
| 98 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 99 | java Crypto "$OS_PASSWORD" "$SO_ENCRYPTION_KEY" |
| 100 | |
| 101 | |
| 102 | d. Update the OpenStack parameters: |
| 103 | |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 104 | There are assumptions in the demonstration VNF heat templates about the networking |
| 105 | available in the environment. To get the most value out of these templates and the |
| 106 | automation that can help confirm the setup is correct, please observe the following |
| 107 | constraints. |
| 108 | |
| 109 | openStackPublicNetId: |
| 110 | |
| 111 | This network should allow heat templates to add interfaces. |
| 112 | This need not be an external network, floating IPs can be assigned to the ports on |
| 113 | the VMs that are created by the heat template but its important that neutron allow |
| 114 | ports to be created on them. |
| 115 | |
| 116 | openStackPrivateNetCidr: "10.0.0.0/16" |
| 117 | |
| 118 | This ip address block is used to assign OA&M addresses on VNFs to allow ONAP connectivity. |
| 119 | The demonstration heat templates assume that 10.0 prefix can be used by the VNFs and the |
| 120 | demonstration ip addressing plan embodied in the preload template prevent conflicts when |
| 121 | instantiating the various VNFs. If you need to change this, you will need to modify the preload |
| 122 | data in the robot helm chart like integration_preload_parametes.py and the demo/heat/preload_data |
| 123 | in the robot container. The size of the CIDR should be sufficient for ONAP and the VMs you expect |
| 124 | to create. |
| 125 | |
| 126 | openStackOamNetworkCidrPrefix: "10.0" |
| 127 | |
| 128 | This ip prefix mush match the openStackPrivateNetCidr and is a helper variable to some of the |
| 129 | robot scripts for demonstration. A production deployment need not worry about this |
| 130 | setting but for the demonstration VNFs the ip asssignment strategy assumes 10.0 ip prefix. |
| 131 | |
| 132 | |
| 133 | Example Keystone v2.0 |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 134 | .. literalinclude:: example-integration-override.yaml |
| 135 | :language: yaml |
| 136 | |
Brian Freeman | acf8cd8 | 2019-07-11 21:52:46 -0500 | [diff] [blame] | 137 | Example Keystone v3 (required for Rocky and later releases) |
| 138 | .. literalinclude:: example-integration-override-v3.yaml |
| 139 | :language: yaml |
| 140 | |
| 141 | |
| 142 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 143 | **Step 4.** To setup a local Helm server to server up the ONAP charts:: |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 144 | |
| 145 | > helm serve & |
| 146 | |
| 147 | Note the port number that is listed and use it in the Helm repo add as |
| 148 | follows:: |
| 149 | |
| 150 | > helm repo add local http://127.0.0.1:8879 |
| 151 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 152 | **Step 5.** Verify your Helm repository setup with:: |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 153 | |
| 154 | > helm repo list |
| 155 | NAME URL |
| 156 | local http://127.0.0.1:8879 |
| 157 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 158 | **Step 6.** Build a local Helm repository (from the kubernetes directory):: |
Roger Maitland | 9e5067c | 2018-03-27 10:57:08 -0400 | [diff] [blame] | 159 | |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 160 | > make all; make onap |
Roger Maitland | 9e5067c | 2018-03-27 10:57:08 -0400 | [diff] [blame] | 161 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 162 | **Step 7.** Display the onap charts that available to be deployed:: |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 163 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 164 | > helm search onap -l |
| 165 | |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 166 | .. literalinclude:: helm-search.txt |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 167 | |
| 168 | .. note:: |
Roger Maitland | d1237f3 | 2018-03-26 13:14:04 -0400 | [diff] [blame] | 169 | The setup of the Helm repository is a one time activity. If you make changes to your deployment charts or values be sure to use `make` to update your local Helm repository. |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 170 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 171 | **Step 8.** Once the repo is setup, installation of ONAP can be done with a |
| 172 | single command |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 173 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 174 | .. note:: |
| 175 | The --timeout 900 is currently required in Dublin to address long running initialization tasks |
| 176 | for DMaaP and SO. Without this timeout value both applications may fail to deploy. |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 177 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 178 | To deploy all ONAP applications use this command:: |
Roger Maitland | d1237f3 | 2018-03-26 13:14:04 -0400 | [diff] [blame] | 179 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 180 | > cd oom/kubernetes |
Mike Elliott | 7cad1c6 | 2019-07-02 13:48:51 -0400 | [diff] [blame] | 181 | > helm deploy dev local/onap --namespace onap -f onap/resources/overrides/onap-all.yaml -f onap/resources/overrides/environment.yaml -f onap/resources/overrides/openstack.yaml --timeout 900 |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 182 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 183 | All override files may be customized (or replaced by other overrides) as per needs. |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 184 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 185 | onap-all.yaml |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 186 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 187 | Enables the modules in the ONAP deployment. As ONAP is very modular, it is possible to customize ONAP and disable some components through this configuration file. |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 188 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 189 | environment.yaml |
| 190 | |
| 191 | Includes configuration values specific to the deployment environment. |
| 192 | |
| 193 | Example: adapt readiness and liveness timers to the level of performance of your infrastructure |
| 194 | |
| 195 | openstack.yaml |
| 196 | |
| 197 | Includes all the Openstack related information for the default target tenant you want to use to deploy VNFs from ONAP and/or additional parameters for the embedded tests. |
| 198 | |
| 199 | **Step 9.** Verify ONAP installation |
| 200 | |
| 201 | Use the following to monitor your deployment and determine when ONAP is ready for use:: |
Roger Maitland | 953b5f1 | 2018-03-22 15:24:04 -0400 | [diff] [blame] | 202 | |
Mike Elliott | 474c350 | 2019-05-09 10:56:16 -0400 | [diff] [blame] | 203 | > kubectl get pods -n onap -o=wide |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 204 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 205 | .. note:: |
| 206 | While all pods may be in a Running state, it is not a guarantee that all components are running fine. |
Pawel Wieczorek | aa859cd | 2019-01-23 17:32:18 +0100 | [diff] [blame] | 207 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 208 | Launch the healthcheck tests using Robot to verify that the components are healthy. |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 209 | |
Mike Elliott | 895ddcb | 2019-07-09 10:47:08 -0400 | [diff] [blame] | 210 | > ~/oom/kubernetes/robot/ete-k8s.sh onap health |
| 211 | |
| 212 | **Step 10.** Undeploy ONAP |
| 213 | |
| 214 | > helm undeploy dev --purge |
Mike Elliott | ed5ff71 | 2018-11-07 15:47:19 -0500 | [diff] [blame] | 215 | |
Brian Freeman | cce79bd | 2019-04-17 10:34:32 -0500 | [diff] [blame] | 216 | More examples of using the deploy and undeploy plugins can be found here: https://wiki.onap.org/display/DW/OOM+Helm+%28un%29Deploy+plugins |