Page Comparison

...

1. Correctly configured "Certificate Artifact"
   
   Jerry Flood created this "for Dummies" Doc, and has graciously allowed me to incorporate (eventually) into El Alto Docs
   AAF Certificate Management for Dummies
2. An App needs a persistent Volume tied to the Kubernetes Namespace
   1. Create a "pv" yaml (Example, see oom/kubernetes/aaf/charts/aaf-hello/templates/aaf-hello.pv.yaml")
   2. Create a "pvc" yaml (Example, see oom/kubernetes/aaf/charts/aaf-hello/templates/aaf-hello.pvc.yaml")
   3. Configure your Volume to your Deployment - NOTE: AS anyone dealing with HELM Charts knows, NO Tabs are allowed, and spacing is CRITICAL!!!.  Use the ACTUAL helm chart, and not this summary.
      ..
      kind: Deployment
      ..
      spec:
      ..
        template:
        ..
          spec:
            volumes:
               name: aaf-hello-vol
               persistentVolumeClaim:
                  claimName: {{ .Release.Name }}-aaf-hello-pvc
   4. In BOTH the initContainer AND your own Container, make sure you have the SAME Volume Mount
      volumeMounts:
      - mountPath: "/opt/app/osaaf"
         name: aaf-hello-vol
   5. Set YOUR Apps' values in "values.yaml"
      # application image
      service:
        fqdn: "aaf-hello"
        agentImage: onap/aaf/aaf_agent:2.1.15-SNAPSHOT
        image: <YOUR IMAGE>
        app_ns: <YOUR AAF Namespace, for "Hello", this is "org.osaaf.aaf" >
        fqi: <YOUR AAF Identity, for "Hello", this is "aaf@aaf.osaaf.org" >
        fqdn: <YOUR FQDN (how your App is known in K8s).  This will be the main Entry for Certificate.  You can add others with SAN.  For "Hello", this is "aaf-hello" >
        public_fqdn: <This it the PUBLIC name for the Kubernetes Cluster.  For AAF's Demo, this is "aaf.osaaf.org" >
        port: < This is Hello's Internal Port... configure your OWN ports accordingly "8130" >
        public_port: < This is Hello's EXTERNAL Port... configure your OWN ports accordingly "31116" >
        deploy_fqi: < For ONAP Envs, use the "Deployer's Identity" "deployer@people.osaaf.org" >
        cadi_latitude: < Latitude of Installation (will be working on OOM to declare on Nodes) for now, anything reasonable "38.0" >
        cadi_longitude: < Longitude of Installation (will be working on OOM to declare on Nodes) for now, anything reasonable "-72.0" >
      1.  Using these, your "init Container" can be:
         initContainers:
         - name: {{ include "common.name" . }}-config
           image: {{ .Values.global.repository }}/{{.Values.service.agentImage}}
           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
           volumeMounts:
           - mountPath: "/opt/app/osaaf"
              name: aaf-hello-vol
         
           command: ["bash","-c","exec /opt/app/aaf_config/bin/agent.sh"]
           env:
             - name: APP_FQI
                value: "{{ .Values.service.fqi }}"
             - name: aaf_locate_url
                value: "https://aaf-locate.{{ .Release.Namespace}}:8095"
             - name: aaf_locator_container
                value: "oom"
             - name: aaf_locator_container_ns
                value: "{{ .Release.Namespace }}"
             -  name: aaf_locator_fqdn
                value: "{{ .Values.service.fqdn }}"
             - name: aaf_locator_app_ns
                value: "{{ .Values.service.app_ns }}"
             - name: DEPLOY_FQI
                value: "{{ .Values.service.deploy_fqi }}"
         # Note: We want to put this in Secrets or at LEAST ConfigMaps
             - name: DEPLOY_PASSWORD
                value: "demo123456!"
         # Note: want to put this on Nodes, evenutally
             - name: cadi_longitude
                value: "{{ .Values.service.cadi_longitude }}"
             - name: cadi_latitude
                value: "{{ .Values.service.cadi_latitude }}"
         # Hello specific. Clients don't don't need this, unless Registering with AAF Locator
             - name: aaf_locator_public_fqdn
                value: "{{.Values.global.aaf.public_fqdn}}"
3. WHAT DO I DO WITH MY EXISTING "cadi.properties"?
   1. In MOST cases, you can replace your old "cadi.properties" generated file by using "cadi_prop_files=/opt/app/osaaf/local/<ns>.props" as property in your Container.
   2. IF you need additional properties, for ONAP, it is best to REMOVE any properties generated in the new directory from your existing "cadi.properties", then include the new ones by adding:
      
      cadi_prop_files=/opt/app/osaaf/local/<ns>.props
      
      In your existing prop files.
4. DEMO TESTS
   1. OOM (elalto) - use 
      kubectl -n onap scale --replicas=1 deployment.extensions/elalto-aaf-hello 
      to start the Hello Instance
   2. Helm (in Helm, aaf-hello is a clearly separate app) - use
   3. helm --namespace onap -n hello install aaf-hello
   4. To validate, look at Logs, Container logs and/or actual Volumes
5. NOTES:
   1. Latitude, Longitude and Public FQDN (if required) entries should be attached to actual Nodes/ENV.  Will work with OOM
   2. DEPLOY_FQI and DEPLOY PASSWORD are more appropriate as Real-time Administrator entered "Secrets". 
      1. ONAP's "Start from Scratch Daily" requirement makes this impossible for ONAP Test Environments.  Config Maps may be more appropriate for ONAP Tests.
      2. Exactly how to get REAL users to use Secrets method while allowing for TESTING Automation is TBA (to be determined)
6. AS STATED ABOVE, this Temporary Documentation will be moved to official "READ THE DOCS" documentation during EL ALTO.

TESTING LOCALLY

If you are testing locally (i.e. DEV Box), remember that TLS (Certs) out-of-the-box requires DNS Entries.  If the DNS (name) of, for instance, aaf.osaaf.org, doesn't exist, put it in your /etc/hosts, and TLS will use those instead of DNS