...
GOALS:
- Cause a Remote Backup from the Containers
- Bring that Remote Backup locally, as added safeguard (Note: at times, people have removed the WindRiver AAF Test VM accidentally. Extra backups made reconstruction reasonably simple)
- Use Backup Data to update Identity and Initialized
- Cause a Remote Backup from the Containers
- Use filtered data from backup to populate Initialization Data within AAF Containers, ready for check-in to Repo
- Use Backup Data to update Identity and Initialized Cassandra Data files into local "authz" file area
- Perform normal Checkin Procedures for authz
Steps 1-
...
2 are accomplished with One local Shell Script, combined with Shell Scripts deployed on remote Directories and in Containers (see script to trace each one)
IT SHOULD BE NOTED, that backups can be run often, but that doesn't mean you HAVE to push the data to the REPO daily. That is why there are two scripts. Currently, we wait until ONAP Project leads ask for it to be pushed, or during correct Milestone.
...
Code Block | ||||
---|---|---|---|---|
| ||||
backup me$ bash pull.sh Using 7 child processes Starting copy of authz.locate with columns [name, hostname, port, latitude, longitude, major, minor, patch, pkg, port_key, protocol, subprotocol]. Processed: 16 rows; Rate: 92 rows/s; Avg. rate: 92 rows/s 16 rows exported to 1 files in 0.183 seconds. Using 7 child processes ... x dats/run_lock.dat x dats/user_role.dat x dats/x509.dat backup me$ ls -altr ... -rw-r--r-- 1 jon staff 533 Mar 4 08:09 pull.sh -rw-r--r-- 1 jon staff 323591 Mar 4 08:06 dat20200304.gz -rw-r--r-- 1 jon staff 4186 Mar 4 08:06 identities.dat drwxr-xr-x 23 jon staff 736 Mar 4 08:06 dats ... |
...
Steps 3-4:
WHEN it is appropriate to update data in the Repo (when asked by another ONAP Project PTL, or when Milestones arrive, needing a new Docker Image), the process of moving the "Golden Source" of aaf-test to repo is as follows.
...
Code Block | ||||
---|---|---|---|---|
| ||||
backup me$ bash toSample.sh 2020-09-04 08:34:13.000+0000 Create default Passwords for all Identities in cred.dat Scrubbing user_roles not in ../data/sample.identities.dat Removed IDs from user_roles > aaf-authz@aaf.osaaf.org > aaronh@people.osaaf.org > af_admin@people.osaaf.org > appc123@appc.onap.org > dglfromatt@people.osaaf.org > djtimoney@people.osaaf.org > jimmy@people.osaaf.org > kirank@people.osaaf.org > m99501@dmaapBC.openecomp.org > m99751@dmaapBC.openecomp.org > ragarwal@people.osaaf.org > richardt@people.osaaf.org > ryan@appc.onap.org > ryany@people.osaaf.org > saratp@people.osaaf.org > sunilu@people.osaaf.org > xuegao@people.osaaf.org dos2unix: converting file artifact.dat to Unix format... dos2unix: converting file config.dat to Unix format... dos2unix: converting file cred.dat to Unix format... dos2unix: converting file ns.dat to Unix format... dos2unix: converting file ns_attrib.dat to Unix format... dos2unix: converting file perm.dat to Unix format... dos2unix: converting file role.dat to Unix format... dos2unix: converting file user_role.dat to Unix format... backup me$ cd - authz me$ git status On branch master Your branch is up to date with 'origin/master'. Changes not staged for commit: (use "git add <file>..." to update what will be committed) (use "git checkout -- <file>..." to discard changes in working directory) modified: auth/sample/cass_data/cred.dat modified: auth/sample/cass_data/perm.dat modified: auth/sample/cass_data/role.dat modified: auth/sample/cass_data/user_role.dat |
Step
...
5:
You are ready to do normal AAF authz code check in procedures with "git commit" (and --amend), and git review.
...