| seshukm | 4acb556 | 2019-04-17 19:47:50 +0530 | [diff] [blame] | 1 | .. This work is licensed under a Creative Commons Attribution 4.0 International License.
|
| 2 | .. http://creativecommons.org/licenses/by/4.0
|
| 3 | .. Copyright 2018 Huawei Technologies Co., Ltd.
|
| 4 |
|
| 5 | Integrate SO with MultiCloud
|
| 6 | =============================
|
| 7 |
|
| 8 | There are 2 SO tables that you need to modify if you want to use Multicloud. They are in the MariaDB container in the dev-so service. Here are the credentials to access the DB (through mysql command line): cataloguser/catalog123. The table you need to use is called catalogdb.
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 | The 2 tables are cloud_sites and identity_services. cloud_sites contains information about the cloud (region name and keystone for example). The keystone name (IDENTITY_SERVICE_ID) is the key of identity_services table, which contains specific information about cloud authentication. In the example below, you can see my configuration for a cloud region called RegionTwo, in which SO uses Multicoud for talking to the underlying cloud platfrorm. Note indeed that the IDENTITY_URL in identity_services redirects to Multicloud. In practice, SO reads cloud and authentication information from this two tables, and uses the provided keystone authentication given an identity URL.
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 | MariaDB [catalogdb]> select * from cloud_sites;
|
| 17 |
|
| 18 | +-------------------+-----------+---------------------+---------------+-----------+-------------+----------+--------------+-----------------+---------------------+---------------------+
|
| 19 |
|
| 20 | | ID | REGION_ID | IDENTITY_SERVICE_ID | CLOUD_VERSION | CLLI | CLOUDIFY_ID | PLATFORM | ORCHESTRATOR | LAST_UPDATED_BY | CREATION_TIMESTAMP | UPDATE_TIMESTAMP |
|
| 21 |
|
| 22 | +-------------------+-----------+---------------------+---------------+-----------+-------------+----------+--------------+-----------------+---------------------+---------------------+
|
| 23 |
|
| 24 | | Chicago | ORD | RAX_KEYSTONE | 2.5 | ORD | NULL | NULL | NULL | FLYWAY | 2018-12-28 22:58:34 | 2018-12-28 22:58:34 |
|
| 25 |
|
| 26 | | Dallas | DFW | RAX_KEYSTONE | 2.5 | DFW | NULL | NULL | NULL | FLYWAY | 2018-12-28 22:58:34 | 2018-12-28 22:58:34 |
|
| 27 |
|
| 28 | | DEFAULT | RegionOne | DEFAULT_KEYSTONE | 2.5 | RegionOne | NULL | NULL | NULL | FLYWAY | 2018-12-28 22:58:34 | 2018-12-28 22:58:34 |
|
| 29 |
|
| 30 | | Northern Virginia | IAD | RAX_KEYSTONE | 2.5 | IAD | NULL | NULL | NULL | FLYWAY | 2018-12-28 22:58:34 | 2018-12-28 22:58:34 |
|
| 31 |
|
| 32 | | RegionOne | RegionOne | DEFAULT_KEYSTONE | 2.5 | RegionOne | NULL | NULL | NULL | FLYWAY | 2018-12-28 22:58:34 | 2018-12-28 22:58:34 |
|
| 33 |
|
| 34 | | RegionTwo | RegionTwo | KEYSTONE_REGION_TWO | 2.5 | RegionTwo | NULL | NULL | NULL | FLYWAY | 2019-01-02 20:07:28 | 2019-01-02 20:07:28 |
|
| 35 |
|
| 36 | +-------------------+-----------+---------------------+---------------+-----------+-------------+----------+--------------+-----------------+---------------------+---------------------+
|
| 37 |
|
| 38 |
|
| 39 |
|
| 40 |
|
| 41 |
|
| 42 | MariaDB [catalogdb]> select * from identity_services;
|
| 43 |
|
| 44 | +---------------------+--------------------------------------------------------------------------------+----------------------+----------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+
|
| 45 |
|
| 46 | | ID | IDENTITY_URL | MSO_ID | MSO_PASS | ADMIN_TENANT | MEMBER_ROLE | TENANT_METADATA | IDENTITY_SERVER_TYPE | IDENTITY_AUTHENTICATION_TYPE | LAST_UPDATED_BY | CREATION_TIMESTAMP | UPDATE_TIMESTAMP |
|
| 47 |
|
| 48 | +---------------------+--------------------------------------------------------------------------------+----------------------+----------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+
|
| 49 |
|
| 50 | | DEFAULT_KEYSTONE | http://135.197.225.10:5000/v2.0 | admin | a83e2b8446193c5ac450d84f0f1dc711 | service | admin | 1 | KEYSTONE | USERNAME_PASSWORD | FLYWAY | 2018-12-28 22:58:34 | 2018-12-28 22:58:34 |
|
| 51 |
|
| 52 | | KEYSTONE_REGION_TWO | http://10.43.117.142:9001/api/multicloud/v0/CloudOwner_RegionTwo/identity/v2.0 | username | <encrypted pwd> | service | admin | 1 | KEYSTONE | USERNAME_PASSWORD | FLYWAY | 2019-01-02 20:03:26 | 2019-01-02 20:03:26 |
|
| 53 |
|
| 54 | | RAX_KEYSTONE | https://identity.api.rackspacecloud.com/v2.0 | RACKSPACE_ACCOUNT_ID | RACKSPACE_ACCOUNT_APIKEY | service | admin | 1 | KEYSTONE | RACKSPACE_APIKEY | FLYWAY | 2018-12-28 22:58:34 | 2018-12-28 22:58:34 |
|
| 55 |
|
| 56 | +---------------------+--------------------------------------------------------------------------------+----------------------+----------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+
|
| 57 |
|
| 58 |
|
| 59 |
|
| 60 | One thing to know is that the actual IP 10.43.117.142:9001 is the MSB (iag) container. Multicloud registers with MSB, so you can use MSB to fetch the Multicloud endpoint (I think you can use the K8S cluster IP and MSB node port for that instead of the actual MSB container IP and port).
|
| 61 |
|
| 62 |
|
| 63 |
|
| 64 | One final thing: you may need to add identity URL to the AAI cloud region as well, like this:
|
| 65 |
|
| 66 |
|
| 67 |
|
| 68 | curl -X PUT \
|
| 69 |
|
| 70 | https://135.197.220.117:30233/aai/v11/cloud-infrastructure/cloud-regions/cloud-region/CloudOwner/RegionTwo \
|
| 71 |
|
| 72 | -H 'Accept: application/json' \
|
| 73 |
|
| 74 | -H 'Content-Type: application/json' \
|
| 75 |
|
| 76 | -H 'Postman-Token: b05ff02d-78c7-4e1e-9457-d9fa9cc5da65' \
|
| 77 |
|
| 78 | -H 'X-FromAppId: AAI' \
|
| 79 |
|
| 80 | -H 'X-TransactionId: get_aai_subscr' \
|
| 81 |
|
| 82 | -H 'cache-control: no-cache' \
|
| 83 |
|
| 84 | -d '{
|
| 85 |
|
| 86 | "cloud-owner": "CloudOwner",
|
| 87 |
|
| 88 | "cloud-region-id": "RegionTwo",
|
| 89 |
|
| 90 | "cloud-type": "openstack",
|
| 91 |
|
| 92 | "cloud-region-version": "v2.5",
|
| 93 |
|
| 94 | "identity-url": "http://10.43.111.6/api/multicloud/v0/CloudOwner_RegionTwo/identity/v2.0/tokens",
|
| 95 |
|
| 96 | "cloud-zone": "bm-2",
|
| 97 |
|
| 98 | "complex-name": "complex-2",
|
| 99 |
|
| 100 | "tenants": {
|
| 101 |
|
| 102 | "tenant": [{
|
| 103 |
|
| 104 | "tenant-id": "c236140a3dff4911bb4c7c86940616cc",
|
| 105 |
|
| 106 | "tenant-name": "ONAP_Casablanca"
|
| 107 |
|
| 108 | }]
|
| 109 |
|
| 110 | },
|
| 111 |
|
| 112 | "esr-system-info-list": {
|
| 113 |
|
| 114 | "esr-system-info": [{
|
| 115 |
|
| 116 | "esr-system-info-id": "1",
|
| 117 |
|
| 118 | "system-name": "OpenStack-2",
|
| 119 |
|
| 120 | "type": "vim",
|
| 121 |
|
| 122 | "service-url": "http://XXX:5000/v3",
|
| 123 |
|
| 124 | "user-name": "username",
|
| 125 |
|
| 126 | "password": "password",
|
| 127 |
|
| 128 | "system-type": "VIM",
|
| 129 |
|
| 130 | "ssl-insecure": true,
|
| 131 |
|
| 132 | "cloud-domain": "default",
|
| 133 |
|
| 134 | "default-tenant": "ONAP_Casablanca"
|
| 135 |
|
| 136 | }]
|
| 137 |
|
| 138 | }
|
| 139 |
|
| 140 | }'
|
| 141 |
|
| 142 | |