UCA-20 OSS JAX-RS 2 Client

UCA-20 - Getting issue details... STATUS

Analysis

vFirewall Demo Sequence of Events

All the events during a VF creation so we can understand all the orchestration steps at a granular REST level.

Prerequisites

Seq	Name	Source	Target	Actor	REST write	REST read
	License Model					http://{{sdc_ip}}:8080/onboarding-api/v1.0/vendor-license-models *FD0FBEDB1AB64D1CA1A4E266862CAEE7*
	Licence Key Group					where id is from LM above http://{{sdc_ip}}:8080/onboarding-api/v1.0/vendor-license-models/FD0FBEDB1AB64D1CA1A4E266862CAEE7/license-key-groups
	Entitlement Pool					where id is from LM above http://{{sdc_ip}}:8080/onboarding-api/v1.0/vendor-license-models/FD0FBEDB1AB64D1CA1A4E266862CAEE7/entitlement-pools
	Feature Group					where id is from LM above http://{{sdc_ip}}:8080/onboarding-api/v1.0/vendor-license-models/FD0FBEDB1AB64D1CA1A4E266862CAEE7/feature-groups
	License Aggreement					where id is from LM above http://{{sdc_ip}}:8080/onboarding-api/v1.0/vendor-license-models/FD0FBEDB1AB64D1CA1A4E266862CAEE7/license-agreements
	VSP					http://{{sdc_ip}}:8080/onboarding-api/v1.0/vendor-software-products get index by LM id "vendorId": "FD0FBEDB1AB64D1CA1A4E266862CAEE7"

Config

Seq

Name

Source

Target

Actor

REST write

REST read

create customer

robot

aai

./demo.sh init

PUT

https://{{aai_ip}}:8443/aai/v8/business/customers/customer/ONAP-User

{ "global-customer-id": "ONAP-User",
"service-subscriptions": {
"service-subscription": [{
"relationship-list": {
"relationship": [{
"related-to": "tenant",
"relationship-data": [{
"relationship-key": "cloud-region.cloud-owner",
"relationship-value": "Rackspace"
}, {
"relationship-key": "cloud-region.cloud-region-id",
"relationship-value": "DFW"
}, {
"relationship-key": "tenant.tenant-id",
"relationship-value": "{{tenant_id}}"
}] }]},
"service-type": "vFW"
}] },
"subscriber-name": "ONAP-User",
"subscriber-type": "INFRA"}

https://{{aai_ip}}:8443/aai/v8/business/customers/customer

{ "global-customer-id": "Demonstration","subscriber-name": "Demonstration",

create service model

robot

aai

./demo.sh init

https://{{aai_ip}}:8443/aai/v8/service-design-and-creation/models

"model-name-version-id": "dcb40136-9cec-45be-b080-2a36b31c2f06",
"model-type": "service", "model-name": "vfservice",
"model-id": "43d59b70-8829-4a50-a3f7-d261b220ceef"

Service Deployment

Seq

Name

Source

Target

Actor

REST write

REST read

deploy service model

vid

aai

demo user

9023f592-5c64-4a5b-9333-3287fdc9d304

create service instance

vid

aai

demo user

Input:

InstanceName=DemoInstance
Subscriber=Demonstration
ServiceType=vFW

Output:
SIID=c54316d8-464e-4967-bece-8c2b2f458b66

https://{{aai_ip}}:8443/aai/v8/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vFW

https://{{aai_ip}}:8443/aai/v8/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vFW/service-instances/

{ "service-instance": [{
"service-instance-id": "c54316d8-464e-4967-bece-8c2b2f458b66",
"service-instance-name": "DemoInstance",
"persona-model-id": "2a01ef12-9bb1-4205-9941-a506cbae99c9",

VNF Creation

Seq

Name

Source

Target

Actor

REST write

REST read

Add VNF to

Service Instance

vid

sdc

demo user

get VSPs

http://{{sdc_ip}}:8080/onboarding-api/v1.0/vendor-software-products

"name": "vsp",
"description": "vsp",
"category": "resourceNewCategory.application l4+",

VfModule Preload

Seq

Name

Source

Target

Actor

REST write

REST read

preload vnf

robot

./demo.sh preload <DemoVNF> <DemoModule>

or

http://sdnc:8843/signup

http://sdnc:8843/login
Add VNF Profile

http://{{sdnc_ip}}:8282/restconf/config/VNF-API:preload-vnfs

{ "preload-vnfs": {
"vnf-preload-list": [
{ "vnf-name": "DemoModule",
"vnf-type": "Vsp..base_vfw..module-0",

http://{{sdnc_ip}}:8282/restconf/config/VNF-API:preload-vnfs/vnf-preload-list/DemoModule/Vsp..base_vfw..module-0

{"vnf-preload-list": [{
"vnf-name": "DemoModule",
"vnf-type": "Vsp..base_vfw..module-0",

VfModule Creation

Seq

Name

Source

Target

Actor

REST write

REST read

create Vf module <DemoModule>

vid

demo user

Output:

VfModuleID=5a08199b-4161-4181-9b2d-da29f6df1410
HeatStackID=DemoModule/55bd16d6-6bac-4638-9e87-9063df6d03c3

via OpenStack

openstack server list

4be336b3-a31c-4be0-9261-0cb1cb51227d | demofwl01fwl | ACTIVE | oam_ecomp_LbMf=10.1.0.11; demofwl_unprotected=192.168.110.100; public=104.239.230.93, | || | | | 2001:4802:7803:104:be76:4eff:fe20:377b; demofwl_protected=192.168.120.100

Closed Loop

Seq	Name	Source	Target	Actor	REST write	REST read
	appc	robot		./demo.sh appc <DemoModule>

Design Issues

DI 1: 20170712: AAI Cert required for HTTPS REST calls

Use postman for adhoc rest calls - but if you want to code up call chains or hammer an endpoint use Spring RestController or the Rest client in JAX-RS 2.0

Calls to AAI such as the following require both the authentication header and an imported certificate. When running Postman - because it is a Chrome app - this is a simple case of loading a REST url in the browser and importing the certificate after an authentication challenge (AAI:AAI). However for a java client like a JAX-RS 2.0 client we need the certificate in a keystore (the default or a specially defined one).

Below we import the cert into the default keystore. Where did I get the cert? by extracting it from Firefox - however it is in the code base - looking it up

obrienbiometrics:onap michaelobrien$ ls $JAVA_HOME/jre/lib/security/cacerts

/Library/Java/JavaVirtualMachines/jdk1.8.0_121.jdk/Contents/Home/jre/lib/security/cacerts

sudo keytool -import -trustcacerts -alias aai -file /Users/michaelobrien/Dropbox/_amdocs/config/certs/aai/aaiapisimpledemoopenecomporg.cer -keystore $JAVA_HOME/jre/lib/security/cacerts

Running an https rest target using this certificate - if the cert is in a default keystore - you dont need to define it.

// require: cert, username, password, headers(X-FromAppId,Accept), Authenticator

public String run(boolean isSSL, String url, String port, String path) {

  String record = null;
  Client client = null;
  WebTarget latestTarget = null;
  WebTarget rootTarget = null;
  if(isSSL) {
    SslConfigurator sslConfig = SslConfigurator.newInstance();
    SSLContext sslContext = sslConfig.createSSLContext();
    HostnameVerifier verifier = new HostnameVerifier() {
    public boolean verify(String hostname, SSLSession sslSession) {
      return true; // TODO: security breach
    }};
    client = ClientBuilder.newBuilder().sslContext(sslContext).hostnameVerifier(verifier).build();
    client.register(new Authenticator("AAI","AAI"));
  } else {

      client = ClientBuilder.newClient();
    }
    rootTarget = client.target(url);
    latestTarget = rootTarget.path(path);
    try {
      try { Thread.sleep(1); } catch (InterruptedException ie) { Thread.currentThread().interrupt(); }
        record = finalTarget.request()
          .header("X-FromAppId", "AAI").header("Accept", "application/json")
          .get(String.class);

public class Authenticator implements ClientRequestFilter {
 private final String user;
 private final String pass;

 public Authenticator(String user, String password) {
      this.user = user; this.pass = password;
 }

 public void filter(ClientRequestContext requestContext) throws IOException {
   MultivaluedMap<String, Object> headMap = requestContext.getHeaders();
 String basicAuth = null;
 try {
         String aToken = user + ":" + pass;
 basicAuth = "BASIC " + DatatypeConverter.printBase64Binary(aToken.getBytes("UTF-8"));
 } catch (UnsupportedEncodingException uee) { throw new IllegalStateException("Encoding with UTF-8 failed", uee);}
   headMap.add("Authorization", basicAuth);
 }
}

DI 2: 20170712: Spring Boot Backend Framework

Instead of using a full Tomcat deployment server - we will use an embedded Jetty container.

pom.xml

<parent><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-parent</artifactId><version>1.5.3.RELEASE</version></parent>

<dependencies>
<dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-web</artifactId></dependency>

<dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-devtools</artifactId><optional>true</optional></dependency>

<dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-actuator</artifactId></dependency>
<dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-test</artifactId><scope>test</scope></dependency>
</dependencies>

<build><plugins><plugin><groupId>org.springframework.boot</groupId><artifactId>spring-boot-maven-plugin</artifactId>
<configuration><addResources>true</addResources> </configuration></plugin></plugins></build>

Analysis

vFirewall Demo Sequence of Events

Prerequisites

Config

Service Deployment

VNF Creation

VfModule Preload

VfModule Creation

Closed Loop

Design Issues

DI 1: 20170712: AAI Cert required for HTTPS REST calls

DI 2: 20170712: Spring Boot Backend Framework

DI 3: 20170712: JAX-RS 2.0 API Framework

DI 4: 20170712: 3D Framework: Three js OpenGL 3D wrapper on Canvas

Di 5: 20170712: Javascript Timer Framework

DI 6: 20170712: Three js Listener

DI 7: 20170712: Three js Edges between Nodes

DI 8: 20170712: Three js Click Context

DI 9: 20170712: AJAX JAX-RS Channel

DI 10: 20170712: WebSocket Channel

DI 11: 20170712: React.js Framework

DI 12: 20170712: Three js Text

DI 20: 20170721: Rest API Chaining