blob: 4bee685fd4b61c5d93a6db5f5d9cd6583f573fca [file] [log] [blame]
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. http://creativecommons.org/licenses/by/4.0
***************
Policy Cookbook
***************
Policy VM/Docker Recipes
^^^^^^^^^^^^^^^^^^^^^^^^
.. code-block:: bash
:caption: Get latest images in an already setup policy VM
:linenos:
/opt/policy_vm_init.sh
.. code-block:: bash
:caption: Install/start docker policy containers with no policies preloaded
:linenos:
echo "PRELOAD_POLICIES=false" > /opt/policy/.env
/opt/policy_vm_init.sh
.. code-block:: bash
:caption: Install/start docker policy containers with policies preloaded
:linenos:
# This is the current default mode of instantiation.
# These operations are unnecessary unless PRELOAD_POLICIES
# was previously set to true
echo "PRELOAD_POLICIES=true" > /opt/policy/.env
/opt/policy_vm_init.sh
.. code-block:: bash
:caption: Access the PDP-D container as a policy user
:linenos:
docker exec -it drools bash
.. code-block:: bash
:caption: Access the PDP-X container as a policy user
:linenos:
docker exec -it -u 0 pdp su - policy
.. code-block:: bash
:caption: Access the BRMSGW container as a policy user
:linenos:
docker exec -it -u 0 brmsgw su - policy
.. code-block:: bash
:caption: Access PAP container as a policy user
:linenos:
docker exec -it -u 0 pap su - policy
.. code-block:: bash
:caption: Access the CONSOLE container as a policy user
:linenos:
docker exec -it -u 0 console su - policy
.. code-block:: bash
:caption: Manual Healthcheck invokation
:linenos:
# Assuming the healthcheck service credentials have not been changed
# post-installation within the drools container
source /opt/app/policy/config/feature-healthcheck.conf.environment
curl --silent --user "${HEALTHCHECK_USER}:${HEALTHCHECK_PASSWORD}"
-X GET http://localhost:6969/healthcheck | python -m json.tool
PDP-D Recipes ("drools" container)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
.. code-block:: bash
:caption: Stop the PDP-D
:linenos:
policy stop
.. code-block:: bash
:caption: Start the PDP-D
:linenos:
policy start
.. code-block:: bash
:caption: Manual Healthcheck Invokation
:linenos:
# Assuming the healthcheck service credentials have not been changed
# post-installation within the drools container
source ${POLICY_HOME}/config/feature-healthcheck.conf
curl --silent --user "${HEALTHCHECK_USER}:${HEALTHCHECK_PASSWORD}"
-X GET http://localhost:6969/healthcheck | python -m json.tool
PAP Recipes (inside the "pap" container)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
.. code-block:: bash
:caption: Bypass Portal Authentication with the Policy Web UI
:linenos:
edit: /opt/app/policy/servers/console/webapps/onap/WEB-INF/classes/portal.properties
comment out: #role_access_centralized = remote
restart pap: policy.sh stop; policy.sh start;
.. code-block:: bash
:caption: Access the Policy Web UI without going through the Portal UI
:linenos:
https://<pap-vm>:8443/onap/login.htm (Heat)
https://<pap-vm>:30219/onap/login.htm (Kubernetes)
End of Document
.. SSNote: Wiki page ref. https://wiki.onap.org/display/DW/Policy+Cookbook