Pre-requisite

Setup the OOM Infrastructure; I've used OOM on Rancher in OpenStack

Running vFW demo - Close-loop

Video of onboarding

I had a hickup at the end, due to the fact I already had another vFW deployed, hence the ip it tried to assign was used. To fix this, I remove the existing stack.

Video of instantiation

I had a a hickup for the vFW_PG due to the fact I pre-loaded on the wrong instance. After realizing, all went well.

  1. Let's start by running the init goal (assuming K8S namespace, where ONAP has been installed is "onap")

    cd oom/kubernetes/robot
$ ./demo-k8s.sh onap init

    Result:

    Starting Xvfb on display :89 with res 1280x1024x24
Executing robot tests at log level TRACE
==============================================================================
OpenECOMP ETE
==============================================================================
OpenECOMP ETE.Robot
==============================================================================
OpenECOMP ETE.Robot.Testsuites
==============================================================================
OpenECOMP ETE.Robot.Testsuites.Demo :: Executes the VNF Orchestration Test ...
==============================================================================
Initialize Customer And Models                                        | PASS |
------------------------------------------------------------------------------
OpenECOMP ETE.Robot.Testsuites.Demo :: Executes the VNF Orchestrat... | PASS |
1 critical test, 1 passed, 0 failed
1 test total, 1 passed, 0 failed
==============================================================================
OpenECOMP ETE.Robot.Testsuites                                        | PASS |
1 critical test, 1 passed, 0 failed
1 test total, 1 passed, 0 failed
==============================================================================
OpenECOMP ETE.Robot                                                   | PASS |
1 critical test, 1 passed, 0 failed
1 test total, 1 passed, 0 failed
==============================================================================
OpenECOMP ETE                                                         | PASS |
1 critical test, 1 passed, 0 failed
1 test total, 1 passed, 0 failed
==============================================================================
Output:  /share/logs/demo/InitDemo/output.xml
Log:     /share/logs/demo/InitDemo/log.html
Report:  /share/logs/demo/InitDemo/report.html

  2. Login into the VNC. Password is password

    <kubernetes-vm-ip>:30211

  3. Open the browser and navigate to the ONAP Portal

    Login using the Designer user. cs0008/demo123456!

    http://portal.api.simpledemo.onap.org:8989/ONAPPORTAL/login.htm
  4. Virtual Licence Model creation
    1. Open SDC application, click on the OnBoard tab.
      1. click Create new VLM (Licence Model)
        1. Use onap as Vendor Name, and enter a description
        2. click save
        3. click Licence Key Group and Add Licence KeyGroup, then fill in the required fields
        4. click Entitlements Pools and Add Entitlement Pool, then fill in the required fields
        5. click Feature Groups and Add Feature Group, then fill in the required fields. Also, under the Entitlement Pools tab, drag the created entitlement pool to the left. Same for the License Key Groups
        6. click Licence Agreements and Add Licence Agreement, then fill in the required fields. Under the tab Features Groups, drag the feature group created previously.
        7. then check-in and submit
        8. go back to OnBoard page
  5. Vendor Software Product onboarding and testing
    1. click Create a new VSP
      1. First we create the vFW sinc; give it a name, i.e. vFW_SINC. Select the Vendor (onap) and the Category (Firewall) and give it a description.
      2. Click on the warning, and add a licence model
      3. Get the zip package: vfw-sinc.zip
      4. Click on overview, and import the zip
      5. Click Proceed to validation then check-in then submit
    2. click Create a new VSP
      1. Then we create the vFW packet generator; give it a name, i.e. vFW_PG. Select the Vendor (onap) and the Category (Firewall) and give it a description.
      2. Click on the warning, and add a licence model
      3. Get the zip package: vfw_pg.zip
      4. Click on overview, and import the zip
      5. Click Proceed to validation then check-in then submit
    3. Go to SDC home. Click on the top right icon with the orange arrow.
      1. Import the VSP one by one
      2. Submit for both testing
    4. Logout and Login as the tester: jm0007/demo123456!
    5. Go to the SDC portal
    6. Test and accept the two VSP
  6. Service Creation
    1. Logout and login as the designer: cs0008/demo123456!
    2. Go to the SDC home page
    3. Click Add a Service
    4. Fill in the required field
    5. Click Create
    6. Click on the Composition left tab
    7. In the search bar, type "vFW" to narrow down the created VSP, and drag them both.
    8. Then click Submit for Testing
  7. Service Testing
    1. Logout and Login as the tester: jm0007/demo123456!
    2. Go to the SDC portal
    3. Test and accept the service
  8. Service Approval
    1. Logout and Login as the governor: gv0001/demo123456!
    2. Go to the SDC portal
    3. Approve the service
  9. Service Distribution
    1. Logout and Login as the operator: op0001/demo123456!
    2. Go to the SDC portal
    3. Distribute the service
    4. Click on the left tab monitor and click on arrow to open the distribution status
    5. Wait until everything is distributed (green tick)
    Expected output:
  10. Service Instance creation:
    1. Logout and Login as the user: demo/demo123456!
    2. Go to the VID portal
    3. Click the Browse SDC Service Models tab
    4. Click Deploy on the service to deploy
    5.  Fill in the required field, call it vFW_Service for instance. Once done, this will redirect you to a new screen
    6. Click Add VNF, and select the vFW_SINC VNF first
    7. Fill in the required field. Call it vFW_SINC_VNF, for instance.
    8. Click Add VNF, and select the vFW_PG_VNF first
    9. Fill in the required field. Call it vFW_PG_VNF, for instance.
  11. SDNC preload:

    1. Then go to the SDNC Admin portal and create an account

      <kubernetes-host-ip>:30201/signup

    2. Login into the SDNC admin portal

      <kubernetes-host-ip>:30201/login
    3. Click Profiles then Add VNF Profile
      1. The VNF Type is the string that looks like this: VfwPg..base_vpkg..module-0 It can be copy/paste from VID, when attempting to create the VF-Module
      2. Enter 100 for the Availability Zone Count
      3. Enter vFW for Equipment Role
    4. Repeat the same for the other VNF

    5. Pre-load the vFW SINC. Mind the following values:

      service-type: it's the service instance ID of the service instance created step 9
      vnf-name      : the name to give to the VF-Module. The same name will have to be re-use when creating the VF-Module
      vnf-type      : Same as the one used to add the profile in SDNC admin portal
      generic-vnf-name      : The name of the created VNF, see step 9f
      vfw_name_0      : is the same as the generic-vnf-name
      generic-vnf-type      : Can be find in VID, please see video if not found.
      dcae_collector_ip: Has to be the IP address of the dcaedoks00 VM
      Make sure image_name, flavor_name, public_net_id, onap_private_net_id, onap_private_subnet_id, key_name and pub_key reflect your environment

      curl -X POST \
  http://<kubernetes-host-ip>:30202/restconf/operations/VNF-API:preload-vnf-topology-operation \
  -H 'accept: application/json' \
  -H 'authorization: Basic YWRtaW46S3A4Yko0U1hzek0wV1hsaGFrM2VIbGNzZTJnQXc4NHZhb0dHbUp2VXkyVQ==' \
  -H 'content-type: application/json' \
  -H 'x-fromappid: API client' \
  -d '{
  "input": {
    "vnf-topology-information": {
      "vnf-topology-identifier": {
        "service-type": "34992be5-b38c-46da-96b2-553e60f9c24b",
        "vnf-name": "vFW_SINC_Module",
        "vnf-type": "VfwSinc..base_vfw..module-0",
        "generic-vnf-name": "vFW_SINC_VNF",
        "generic-vnf-type": "vFW_SINC 0"
      },
      "vnf-assignments": {
        "availability-zones": [

        ],
        "vnf-networks": [

        ],
        "vnf-vms": [

        ]
      },
      "vnf-parameters": [
        {
          "vnf-parameter-name": "image_name",
          "vnf-parameter-value": "trusty"
        },
        {
          "vnf-parameter-name": "flavor_name",
          "vnf-parameter-value": "m1.medium"
        },
        {
          "vnf-parameter-name": "public_net_id",
          "vnf-parameter-value": "d87ff178-3eb7-44df-a57b-84636dbdc817"
        },
        {
          "vnf-parameter-name": "unprotected_private_net_id",
          "vnf-parameter-value": "zdfw1fwl01_unprotected"
        },
        {
          "vnf-parameter-name": "unprotected_private_subnet_id",
          "vnf-parameter-value": "zdfw1fwl01_unprotected_sub"
        },
        {
          "vnf-parameter-name": "protected_private_net_id",
          "vnf-parameter-value": "zdfw1fwl01_protected"
        },
        {
          "vnf-parameter-name": "protected_private_subnet_id",
          "vnf-parameter-value": "zdfw1fwl01_protected_sub"
        },
        {
          "vnf-parameter-name": "onap_private_net_id",
          "vnf-parameter-value": "oam_onap_k0H4"
        },
        {
          "vnf-parameter-name": "onap_private_subnet_id",
          "vnf-parameter-value": "oam_onap_k0H4"
        },
        {
          "vnf-parameter-name": "unprotected_private_net_cidr",
          "vnf-parameter-value": "192.168.10.0/24"
        },
        {
          "vnf-parameter-name": "protected_private_net_cidr",
          "vnf-parameter-value": "192.168.20.0/24"
        },
        {
          "vnf-parameter-name": "onap_private_net_cidr",
          "vnf-parameter-value": "10.0.0.0/16"
        },
        {
          "vnf-parameter-name": "vfw_private_ip_0",
          "vnf-parameter-value": "192.168.10.100"
        },
        {
          "vnf-parameter-name": "vfw_private_ip_1",
          "vnf-parameter-value": "192.168.20.100"
        },
        {
          "vnf-parameter-name": "vfw_private_ip_2",
          "vnf-parameter-value": "10.0.100.5"
        },
        {
          "vnf-parameter-name": "vpg_private_ip_0",
          "vnf-parameter-value": "192.168.10.200"
        },
        {
          "vnf-parameter-name": "vsn_private_ip_0",
          "vnf-parameter-value": "192.168.20.250"
        },
        {
          "vnf-parameter-name": "vsn_private_ip_1",
          "vnf-parameter-value": "10.0.100.4"
        },
        {
          "vnf-parameter-name": "vfw_name_0",
          "vnf-parameter-value": "vFW_SINC_VNF"
        },
        {
          "vnf-parameter-name": "vsn_name_0",
          "vnf-parameter-value": "zdfw1fwl01snk01"
        },
        {
          "vnf-parameter-name": "vnf_id",
          "vnf-parameter-value": "vFirewal_vSink_demo_app"
        },
        {
          "vnf-parameter-name": "vf_module_id",
          "vnf-parameter-value": "vFirewall_vSink"
        },
        {
          "vnf-parameter-name": "dcae_collector_ip",
          "vnf-parameter-value": "10.195.200.38"
        },
        {
          "vnf-parameter-name": "dcae_collector_port",
          "vnf-parameter-value": "8080"
        },
        {
          "vnf-parameter-name": "repo_url_blob",
          "vnf-parameter-value": "https://nexus.onap.org/content/sites/raw"
        },
        {
          "vnf-parameter-name": "repo_url_artifacts",
          "vnf-parameter-value": "https://nexus.onap.org/content/groups/staging"
        },
        {
          "vnf-parameter-name": "demo_artifacts_version",
          "vnf-parameter-value": "1.1.1"
        },
        {
          "vnf-parameter-name": "install_script_version",
          "vnf-parameter-value": "1.1.1"
        },
        {
          "vnf-parameter-name": "key_name",
          "vnf-parameter-value": "onap_key_k0H4"
        },
        {
          "vnf-parameter-name": "pub_key",
          "vnf-parameter-value": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmuLf5dnvDS4hiwmXYg2YtgByeAj8ZoH5toGPNENIr9uIhgRclPWb5HSIDzhFLKy9K9Z1ht5XZEkzAcslSIKkodZlVYyucG/QwqLlN8N05EMLVm6TudjUp/j/VDvavSgp/xzIDsdHuhQZ8VHRE88mKzsTA4jPFp4s4Ic8eCes4nrydMrlbxeLjV3/+/xc77StQ7hDMaBlJX8xztgHRodxIQmMBWwb/4YSxjTbO0cwi4XYlRXzFPY7vmO2VDRhfaOVtyv8Pw6a3AaqIP6CR0z6QgbLYjtiFbWmhKQ+0qUfJeb0Kkc7Deok7x58a3mHkhswGS1aJLCaHC/W1b7n6C+lv adetalhouet@bell.corp.bce.ca"
        },
        {
          "vnf-parameter-name": "cloud_env",
          "vnf-parameter-value": "openstack"
        }
      ]
    },
    "request-information": {
      "request-id": "robot12",
      "order-version": "1",
      "notification-url": "openecomp.org",
      "order-number": "1",
      "request-action": "PreloadVNFRequest"
    },
    "sdnc-request-header": {
      "svc-request-id": "robot12",
      "svc-notification-url": "http://openecomp.org:8080/adapters/rest/SDNCNotify",
      "svc-action": "reserve"
    }
  }
}'

      Expected result:

      {
    "output": {
        "svc-request-id": "robot12",
        "response-code": "200",
        "ack-final-indicator": "Y"
    }
}

    6. Pre-load the vFW PG. Mind the following values:

      service-type: it's the service instance ID of the service instance created step 9
      vnf-name      : the name to give to the VF-Module. The same name will have to be re-use when creating the VF-Module
      vnf-type      : Same as the one used to add the profile in SDNC admin portal
      generic-vnf-name      : The name of the created VNF, see step 9h
      vpg_name_0      : is the same as the generic-vnf-name
      generic-vnf-type      : Can be find in VID, please see video if not found.
      Make sure image_name, flavor_name, public_net_id, onap_private_net_id, onap_private_subnet_id, key_name and pub_key reflect your environment

      curl -X POST \
  http://<kubernetes-host-ip>:30202/restconf/operations/VNF-API:preload-vnf-topology-operation \
  -H 'accept: application/json' \
  -H 'authorization: Basic YWRtaW46S3A4Yko0U1hzek0wV1hsaGFrM2VIbGNzZTJnQXc4NHZhb0dHbUp2VXkyVQ==' \
  -H 'content-type: application/json' \
  -H 'x-fromappid: API client' \
  -d '{
  "input": {
    "vnf-topology-information": {
      "vnf-topology-identifier": {
        "service-type": "df6e075a-119a-4790-a470-2474a692e3ce",
        "vnf-name": "vFW_PG_Module",
        "vnf-type": "VfwPg..base_vpkg..module-0",
        "generic-vnf-name": "vFW_PG_VNF",
        "generic-vnf-type": "vFW_PG 0"
      },
      "vnf-assignments": {
        "availability-zones": [
          
        ],
        "vnf-networks": [
          
        ],
        "vnf-vms": [
          
        ]
      },
      "vnf-parameters": [
        {
          "vnf-parameter-name": "image_name",
          "vnf-parameter-value": "trusty"
        },
        {
          "vnf-parameter-name": "flavor_name",
          "vnf-parameter-value": "m1.medium"
        },
        {
          "vnf-parameter-name": "public_net_id",
          "vnf-parameter-value": "d87ff178-3eb7-44df-a57b-84636dbdc817"
        },
        {
          "vnf-parameter-name": "unprotected_private_net_id",
          "vnf-parameter-value": "zdfw1fwl01_unprotected"
        },
        {
          "vnf-parameter-name": "unprotected_private_subnet_id",
          "vnf-parameter-value": "zdfw1fwl01_unprotected_sub"
        },
        {
          "vnf-parameter-name": "onap_private_net_id",
          "vnf-parameter-value": "oam_onap_k0H4"
        },
        {
          "vnf-parameter-name": "onap_private_subnet_id",
          "vnf-parameter-value": "oam_onap_k0H4"
        },
        {
          "vnf-parameter-name": "unprotected_private_net_cidr",
          "vnf-parameter-value": "192.168.10.0/24"
        },
        {
          "vnf-parameter-name": "protected_private_net_cidr",
          "vnf-parameter-value": "192.168.20.0/24"
        },
        {
          "vnf-parameter-name": "onap_private_net_cidr",
          "vnf-parameter-value": "10.0.0.0/16"
        },
        {
          "vnf-parameter-name": "vfw_private_ip_0",
          "vnf-parameter-value": "192.168.10.100"
        },
        {
          "vnf-parameter-name": "vpg_private_ip_0",
          "vnf-parameter-value": "192.168.10.200"
        },
        {
          "vnf-parameter-name": "vpg_private_ip_1",
          "vnf-parameter-value": "10.0.80.2"
        },
        {
          "vnf-parameter-name": "vsn_private_ip_0",
          "vnf-parameter-value": "192.168.20.250"
        },
        {
          "vnf-parameter-name": "vpg_name_0",
          "vnf-parameter-value": "vFW_PG_VNF"
        },
        {
          "vnf-parameter-name": "vnf_id",
          "vnf-parameter-value": "vPacketGen_demo_app"
        },
        {
          "vnf-parameter-name": "vf_module_id",
          "vnf-parameter-value": "vPacketGen"
        },
        {
          "vnf-parameter-name": "repo_url_blob",
          "vnf-parameter-value": "https://nexus.onap.org/content/sites/raw"
        },
        {
          "vnf-parameter-name": "repo_url_artifacts",
          "vnf-parameter-value": "https://nexus.onap.org/content/groups/staging"
        },
        {
          "vnf-parameter-name": "demo_artifacts_version",
          "vnf-parameter-value": "1.1.1"
        },
        {
          "vnf-parameter-name": "install_script_version",
          "vnf-parameter-value": "1.1.1"
        },
        {
          "vnf-parameter-name": "key_name",
          "vnf-parameter-value": "vfw_key"
        },
        {
          "vnf-parameter-name": "pub_key",
          "vnf-parameter-value": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmuLf5dnvDS4hiwmXYg2YtgByeAj8ZoH5toGPNENIr9uIhgRclPWb5HSIDzhFLKy9K9Z1ht5XZEkzAcslSIKkodZlVYyucG/QwqLlN8N05EMLVm6TudjUp/j/VDvavSgp/xzIDsdHuhQZ8VHRE88mKzsTA4jPFp4s4Ic8eCes4nrydMrlbxeLjV3/+/xc77StQ7hDMaBlJX8xztgHRodxIQmMBWwb/4YSxjTbO0cwi4XYlRXzFPY7vmO2VDRhfaOVtyv8Pw6a3AaqIP6CR0z6QgbLYjtiFbWmhKQ+0qUfJeb0Kkc7Deok7x58a3mHkhswGS1aJLCaHC/W1b7n6C+lv adetalhouet@bell.corp.bce.ca"
        },
        {
          "vnf-parameter-name": "cloud_env",
          "vnf-parameter-value": "openstack"
        }
      ]
    },
    "request-information": {
      "request-id": "robot12",
      "order-version": "1",
      "notification-url": "openecomp.org",
      "order-number": "1",
      "request-action": "PreloadVNFRequest"
    },
    "sdnc-request-header": {
      "svc-request-id": "robot12",
      "svc-notification-url": "http://openecomp.org:8080/adapters/rest/SDNCNotify",
      "svc-action": "reserve"
    }
  }
}'

      Expected result:

      {
    "output": {
        "svc-request-id": "robot12",
        "response-code": "200",
        "ack-final-indicator": "Y"
    }
}
    7. Create the VF-Module for vFW_SINC
      1. The instance name must be the vnf-name setup in the preload phase.
      2. After a few minutes, the stack should be created.
    8. Create the VF-Module for vFW_PG
      1. The instance name must be the vnf-name setup in the preload phase.
      2. After a few minutes, the stack should be created.

Close loop

  1. Run heatbridge robot tag to tell AAI about the relationship between the created HEAT stack (SINC one) and the service instance id.

    To run this, you need:
    - the heat stack name of the vSINC
    - the service instance id

    $ ./demo-k8s.sh heatbridge vFW_SINC_Module 82678348-2f42-4ee7-bd29-0ef24b5e4bca vFW
Starting Xvfb on display :89 with res 1280x1024x24
Executing robot tests at log level TRACE
==============================================================================
OpenECOMP ETE
==============================================================================
OpenECOMP ETE.Robot
==============================================================================
OpenECOMP ETE.Robot.Testsuites
==============================================================================
OpenECOMP ETE.Robot.Testsuites.Demo :: Executes the VNF Orchestration Test ...
==============================================================================
Run Heatbridge :: Try to run heatbridge                               | PASS |
------------------------------------------------------------------------------
OpenECOMP ETE.Robot.Testsuites.Demo :: Executes the VNF Orchestrat... | PASS |
1 critical test, 1 passed, 0 failed
1 test total, 1 passed, 0 failed
==============================================================================
OpenECOMP ETE.Robot.Testsuites                                        | PASS |
1 critical test, 1 passed, 0 failed
1 test total, 1 passed, 0 failed
==============================================================================
OpenECOMP ETE.Robot                                                   | PASS |
1 critical test, 1 passed, 0 failed
1 test total, 1 passed, 0 failed
==============================================================================
OpenECOMP ETE                                                         | PASS |
1 critical test, 1 passed, 0 failed
1 test total, 1 passed, 0 failed
==============================================================================
Output:  /share/logs/demo/heatbridge/output.xml
Log:     /share/logs/demo/heatbridge/log.html
Report:  /share/logs/demo/heatbridge/report.html
  2. Upload operational policy: this is to tell policy that for this specific instance, we should apply this policy.

    1. Retrieve from MSO Catalog the modelInvariantUuid for the vFW_PG. Specify in the below request the service-model-name, as defined step 5.c.

      curl -X GET \
  'http://<kubernetes-host>:30223/ecomp/mso/catalog/v2/serviceVnfs?serviceModelName=<service-model-name>' \
  -H 'Accept: application/json' \
  -H 'Authorization: Basic SW5mcmFQb3J0YWxDbGllbnQ6cGFzc3dvcmQxJA==' \
  -H 'Content-Type: application/json' \
  -H 'X-FromAppId: Postman' \
  -H 'X-TransactionId: get_service_vnfs'

      Based on the payload below, result would be: 86a1bdd8-1f59-4796-bf30-3002108068f6

      {
    "serviceVnfs": [
        {
            "modelInfo": {
                "modelName": "vFW_PG",
                "modelUuid": "7af8882e-f732-405f-b48b-38b6403654ea",
                "modelInvariantUuid": "86a1bdd8-1f59-4796-bf30-3002108068f6",
                "modelVersion": "1.0",
                "modelCustomizationUuid": "a2521929-d6da-46cc-9a62-ca3b6c3cef9b",
                "modelInstanceName": "vFW_PG 0"
            },
            "toscaNodeType": "org.openecomp.resource.vf.VfwPg",
            "nfFunction": "",
            "nfType": "",
            "nfRole": "",
            "nfNamingCode": "",
            "vfModules": [
                {
                    "modelInfo": {
                        "modelName": "VfwPg..base_vpkg..module-0",
                        "modelUuid": "54a98442-52e3-46e8-8b40-193f04e92ff7",
                        "modelInvariantUuid": "9c6c0369-a9c1-4419-94c9-aabf6250fc87",
                        "modelVersion": "1",
                        "modelCustomizationUuid": "35595818-2e09-4ad2-b6ce-2ffc263489af"
                    },
                    "isBase": true,
                    "vfModuleLabel": "base_vpkg",
                    "initialCount": 1,
                    "hasVolumeGroup": true
                }
            ]
        },
        {
            "modelInfo": {
                "modelName": "vFW_SINC",
                "modelUuid": "b8cc7acf-eba8-4ddb-950a-be52a96b28c8",
                "modelInvariantUuid": "edd473e1-7d08-4cf1-be31-0d705017f644",
                "modelVersion": "1.0",
                "modelCustomizationUuid": "c890203f-44a0-4c43-aadb-250d8f6c54b0",
                "modelInstanceName": "vFW_SINC 0"
            },
            "toscaNodeType": "org.openecomp.resource.vf.VfwSinc",
            "nfFunction": "",
            "nfType": "",
            "nfRole": "",
            "nfNamingCode": "",
            "vfModules": [
                {
                    "modelInfo": {
                        "modelName": "VfwSinc..base_vfw..module-0",
                        "modelUuid": "605ef192-e190-4043-97be-31a0d64a2f8e",
                        "modelInvariantUuid": "858e065b-7491-4c70-91e6-109a65c6102d",
                        "modelVersion": "1",
                        "modelCustomizationUuid": "acf94576-fe00-43ec-b9f9-0f8748e44c0a"
                    },
                    "isBase": true,
                    "vfModuleLabel": "base_vfw",
                    "initialCount": 1,
                    "hasVolumeGroup": true
                }
            ]
        }
    ]
}

    2. Under

      oom/kubernetes/policy/script

      invoke the script as follows:

      Usage: update-vfw-op-policy.sh <k8s-host> <policy-pdp-node-port> <policy-drools-node-port> <resource-id>

./update-vfw-op-policy.sh 10.195.197.53 30220 30221 86a1bdd8-1f59-4796-bf30-3002108068f

      Result can look like, with debug enable (/bin/bash -x)

      $ ./update-vfw-op-policy.sh 10.195.197.53 30220 30221 86a1bdd8-1f59-4796-bf30-3002108068f
+ '[' 4 -ne 4 ']'
+ K8S_HOST=10.195.197.53
+ POLICY_PDP_PORT=30220
+ POLICY_DROOLS_PORT=30221
+ RESOURCE_ID=86a1bdd8-1f59-4796-bf30-3002108068f
+ echo

+ echo

+ echo 'Removing the vFW Policy from PDP..'
Removing the vFW Policy from PDP..
+ echo

+ echo

+ curl -v -X DELETE --header 'Content-Type: application/json' --header 'Accept: text/plain' --header 'ClientAuth: cHl0aG9uOnRlc3Q=' --header 'Authorization: Basic dGVzdHBkcDphbHBoYTEyMw==' --header 'Environment: TEST' -d '{
  "pdpGroup": "default",
  "policyComponent" : "PDP",
  "policyName": "com.BRMSParamvFirewall",
  "policyType": "BRMS_Param"
}' http://10.195.197.53:30220/pdp/api/deletePolicy
*   Trying 10.195.197.53...
* TCP_NODELAY set
* Connected to 10.195.197.53 (10.195.197.53) port 30220 (#0)
> DELETE /pdp/api/deletePolicy HTTP/1.1
> Host: 10.195.197.53:30220
> User-Agent: curl/7.54.0
> Content-Type: application/json
> Accept: text/plain
> ClientAuth: cHl0aG9uOnRlc3Q=
> Authorization: Basic dGVzdHBkcDphbHBoYTEyMw==
> Environment: TEST
> Content-Length: 128
>
* upload completely sent off: 128 out of 128 bytes
< HTTP/1.1 200 OK
< Server: Apache-Coyote/1.1
< Content-Type: text/plain;charset=ISO-8859-1
< Content-Length: 91
< Date: Wed, 20 Dec 2017 20:17:22 GMT
<
* Connection #0 to host 10.195.197.53 left intact
Transaction ID: af030f0c-0c2b-43a1-b1ec-6abf4ca73799 --The policy was successfully deleted.+ sleep 20



+ echo

+ echo

+ echo 'Updating vFW Operational Policy ..'
Updating vFW Operational Policy ..
+ echo

+ curl -v -X PUT --header 'Content-Type: application/json' --header 'Accept: text/plain' --header 'ClientAuth: cHl0aG9uOnRlc3Q=' --header 'Authorization: Basic dGVzdHBkcDphbHBoYTEyMw==' --header 'Environment: TEST' -d '{
  "policyConfigType": "BRMS_PARAM",
  "policyName": "com.BRMSParamvFirewall",
  "policyDescription": "BRMS Param vFirewall policy",
  "policyScope": "com",
  "attributes": {
    "MATCHING": {
      "controller": "amsterdam"
    },
    "RULE": {
      "templateName": "ClosedLoopControlName",
      "closedLoopControlName": "ControlLoop-vFirewall-d0a1dfc6-94f5-4fd4-a5b5-4630b438850a",
      "controlLoopYaml": "controlLoop%3A%0D%0A++version%3A+2.0.0%0D%0A++controlLoopName%3A+ControlLoop-vFirewall-d0a1dfc6-94f5-4fd4-a5b5-4630b438850a%0D%0A++trigger_policy%3A+unique-policy-id-1-modifyConfig%0D%0A++timeout%3A+1200%0D%0A++abatement%3A+false%0D%0A+%0D%0Apolicies%3A%0D%0A++-+id%3A+unique-policy-id-1-modifyConfig%0D%0A++++name%3A+modify+packet+gen+config%0D%0A++++description%3A%0D%0A++++actor%3A+APPC%0D%0A++++recipe%3A+ModifyConfig%0D%0A++++target%3A%0D%0A++++++%23+TBD+-+Cannot+be+known+until+instantiation+is+done%0D%0A++++++resourceID%3A+86a1bdd8-1f59-4796-bf30-3002108068f%0D%0A++++++type%3A+VNF%0D%0A++++retry%3A+0%0D%0A++++timeout%3A+300%0D%0A++++success%3A+final_success%0D%0A++++failure%3A+final_failure%0D%0A++++failure_timeout%3A+final_failure_timeout%0D%0A++++failure_retries%3A+final_failure_retries%0D%0A++++failure_exception%3A+final_failure_exception%0D%0A++++failure_guard%3A+final_failure_guard"
    }
  }
}' http://10.195.197.53:30220/pdp/api/updatePolicy
*   Trying 10.195.197.53...
* TCP_NODELAY set
* Connected to 10.195.197.53 (10.195.197.53) port 30220 (#0)
> PUT /pdp/api/updatePolicy HTTP/1.1
> Host: 10.195.197.53:30220
> User-Agent: curl/7.54.0
> Content-Type: application/json
> Accept: text/plain
> ClientAuth: cHl0aG9uOnRlc3Q=
> Authorization: Basic dGVzdHBkcDphbHBoYTEyMw==
> Environment: TEST
> Content-Length: 1327
> Expect: 100-continue
>
< HTTP/1.1 100 Continue
* We are completely uploaded and fine
< HTTP/1.1 200 OK
< Server: Apache-Coyote/1.1
< Content-Type: text/plain;charset=ISO-8859-1
< Content-Length: 149
< Date: Wed, 20 Dec 2017 20:17:42 GMT
<
* Connection #0 to host 10.195.197.53 left intact
Transaction ID: 20f4e273-d193-466c-8cce-ee643a854f5f --Policy with the name com.Config_BRMS_Param_BRMSParamvFirewall.2.xml was successfully updated. + sleep 5
+ echo

+ echo

+ echo 'Pushing the vFW Policy ..'
Pushing the vFW Policy ..
+ echo

+ echo

+ curl -v --silent -X PUT --header 'Content-Type: application/json' --header 'Accept: text/plain' --header 'ClientAuth: cHl0aG9uOnRlc3Q=' --header 'Authorization: Basic dGVzdHBkcDphbHBoYTEyMw==' --header 'Environment: TEST' -d '{
  "pdpGroup": "default",
  "policyName": "com.BRMSParamvFirewall",
  "policyType": "BRMS_Param"
}' http://10.195.197.53:30220/pdp/api/pushPolicy
*   Trying 10.195.197.53...
* TCP_NODELAY set
* Connected to 10.195.197.53 (10.195.197.53) port 30220 (#0)
> PUT /pdp/api/pushPolicy HTTP/1.1
> Host: 10.195.197.53:30220
> User-Agent: curl/7.54.0
> Content-Type: application/json
> Accept: text/plain
> ClientAuth: cHl0aG9uOnRlc3Q=
> Authorization: Basic dGVzdHBkcDphbHBoYTEyMw==
> Environment: TEST
> Content-Length: 99
>
* upload completely sent off: 99 out of 99 bytes
< HTTP/1.1 200 OK
< Server: Apache-Coyote/1.1
< Content-Type: text/plain;charset=ISO-8859-1
< Content-Length: 162
< Date: Wed, 20 Dec 2017 20:17:48 GMT
<
* Connection #0 to host 10.195.197.53 left intact
Transaction ID: e8bc4ae1-d0b0-483e-b1ba-871486661240 --Policy 'com.Config_BRMS_Param_BRMSParamvFirewall.2.xml' was successfully pushed to the PDP group 'default'.+ sleep 20
+ echo

+ echo

+ echo 'Restarting PDP-D ..'
Restarting PDP-D ..
+ echo

+ echo

++ kubectl --namespace onap-policy get pods
++ sed 's/ .*//'
++ grep drools
+ POD=drools-870120400-5b5k1
+ kubectl --namespace onap-policy exec -it drools-870120400-5b5k1 -- bash -c 'source /opt/app/policy/etc/profile.d/env.sh && policy stop && sleep 5 && policy start'
Defaulting container name to drools.
Use 'kubectl describe pod/drools-870120400-5b5k1' to see all of the containers in this pod.
[drools-pdp-controllers]



 L []: Stopping Policy Management... Policy Management (pid=5452) is stopping... Policy Management has stopped.
[drools-pdp-controllers]
 L []: Policy Management (pid 5722) is running
+ sleep 20
+ echo

+ echo

+ echo 'PDP-D amsterdam maven coordinates ..'
PDP-D amsterdam maven coordinates ..
+ echo

+ echo

+ curl -vvv --silent --user @1b3rt:31nst31n -X GET http://10.195.197.53:30221/policy/pdp/engine/controllers/amsterdam/drools
+ python -m json.tool
*   Trying 10.195.197.53...
* TCP_NODELAY set
* Connected to 10.195.197.53 (10.195.197.53) port 30221 (#0)
* Server auth using Basic with user '@1b3rt'
> GET /policy/pdp/engine/controllers/amsterdam/drools HTTP/1.1
> Host: 10.195.197.53:30221
> Authorization: Basic QDFiM3J0OjMxbnN0MzFu
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Wed, 20 Dec 2017 20:18:49 GMT
< Content-Type: application/json
< Content-Length: 382
< Server: Jetty(9.3.14.v20161028)
<
{ [382 bytes data]
* Connection #0 to host 10.195.197.53 left intact
{
    "alive": true,
    "artifactId": "policy-amsterdam-rules",
    "brained": true,
    "groupId": "org.onap.policy-engine.drools.amsterdam",
    "locked": false,
    "modelClassLoaderHash": 665564874,
    "recentSinkEvents": [],
    "recentSourceEvents": [],
    "sessionCoordinates": [
        "org.onap.policy-engine.drools.amsterdam:policy-amsterdam-rules:0.6.0:closedloop-amsterdam"
    ],
    "sessions": [
        "closedloop-amsterdam"
    ],
    "version": "0.6.0"
}
+ echo

+ echo

+ echo 'PDP-D control loop updated ..'
PDP-D control loop updated ..
+ echo

+ echo

+ curl -v --silent --user @1b3rt:31nst31n -X GET http://10.195.197.53:30221/policy/pdp/engine/controllers/amsterdam/drools/facts/closedloop-amsterdam/org.onap.policy.controlloop.Params
+ python -m json.tool
*   Trying 10.195.197.53...
* TCP_NODELAY set
* Connected to 10.195.197.53 (10.195.197.53) port 30221 (#0)
* Server auth using Basic with user '@1b3rt'
> GET /policy/pdp/engine/controllers/amsterdam/drools/facts/closedloop-amsterdam/org.onap.policy.controlloop.Params HTTP/1.1
> Host: 10.195.197.53:30221
> Authorization: Basic QDFiM3J0OjMxbnN0MzFu
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Wed, 20 Dec 2017 20:18:50 GMT
< Content-Type: application/json
< Content-Length: 3565
< Server: Jetty(9.3.14.v20161028)
<
{ [1207 bytes data]
* Connection #0 to host 10.195.197.53 left intact
[
    {
        "closedLoopControlName": "ControlLoop-vCPE-48f0c2c3-a172-4192-9ae3-052274181b6e",
        "controlLoopYaml": "controlLoop%3A%0D%0A++version%3A+2.0.0%0D%0A++controlLoopName%3A+ControlLoop-vCPE-48f0c2c3-a172-4192-9ae3-052274181b6e%0D%0A++trigger_policy%3A+unique-policy-id-1-restart%0D%0A++timeout%3A+3600%0D%0A++abatement%3A+true%0D%0A+%0D%0Apolicies%3A%0D%0A++-+id%3A+unique-policy-id-1-restart%0D%0A++++name%3A+Restart+the+VM%0D%0A++++description%3A%0D%0A++++actor%3A+APPC%0D%0A++++recipe%3A+Restart%0D%0A++++target%3A%0D%0A++++++type%3A+VM%0D%0A++++retry%3A+3%0D%0A++++timeout%3A+1200%0D%0A++++success%3A+final_success%0D%0A++++failure%3A+final_failure%0D%0A++++failure_timeout%3A+final_failure_timeout%0D%0A++++failure_retries%3A+final_failure_retries%0D%0A++++failure_exception%3A+final_failure_exception%0D%0A++++failure_guard%3A+final_failure_guard"
    },
    {
        "closedLoopControlName": "ControlLoop-vFirewall-d0a1dfc6-94f5-4fd4-a5b5-4630b438850a",
        "controlLoopYaml": "controlLoop%3A%0D%0A++version%3A+2.0.0%0D%0A++controlLoopName%3A+ControlLoop-vFirewall-d0a1dfc6-94f5-4fd4-a5b5-4630b438850a%0D%0A++trigger_policy%3A+unique-policy-id-1-modifyConfig%0D%0A++timeout%3A+1200%0D%0A++abatement%3A+false%0D%0A+%0D%0Apolicies%3A%0D%0A++-+id%3A+unique-policy-id-1-modifyConfig%0D%0A++++name%3A+modify+packet+gen+config%0D%0A++++description%3A%0D%0A++++actor%3A+APPC%0D%0A++++recipe%3A+ModifyConfig%0D%0A++++target%3A%0D%0A++++++%23+TBD+-+Cannot+be+known+until+instantiation+is+done%0D%0A++++++resourceID%3A+86a1bdd8-1f59-4796-bf30-3002108068f%0D%0A++++++type%3A+VNF%0D%0A++++retry%3A+0%0D%0A++++timeout%3A+300%0D%0A++++success%3A+final_success%0D%0A++++failure%3A+final_failure%0D%0A++++failure_timeout%3A+final_failure_timeout%0D%0A++++failure_retries%3A+final_failure_retries%0D%0A++++failure_exception%3A+final_failure_exception%0D%0A++++failure_guard%3A+final_failure_guard"
    },
    {
        "closedLoopControlName": "ControlLoop-vDNS-6f37f56d-a87d-4b85-b6a9-cc953cf779b3",
        "controlLoopYaml": "controlLoop%3A%0D%0A++version%3A+2.0.0%0D%0A++controlLoopName%3A+ControlLoop-vDNS-6f37f56d-a87d-4b85-b6a9-cc953cf779b3%0D%0A++trigger_policy%3A+unique-policy-id-1-scale-up%0D%0A++timeout%3A+1200%0D%0A++abatement%3A+false%0D%0Apolicies%3A%0D%0A++-+id%3A+unique-policy-id-1-scale-up%0D%0A++++name%3A+Create+a+new+VF+Module%0D%0A++++description%3A%0D%0A++++actor%3A+SO%0D%0A++++recipe%3A+VF+Module+Create%0D%0A++++target%3A%0D%0A++++++type%3A+VNF%0D%0A++++retry%3A+0%0D%0A++++timeout%3A+1200%0D%0A++++success%3A+final_success%0D%0A++++failure%3A+final_failure%0D%0A++++failure_timeout%3A+final_failure_timeout%0D%0A++++failure_retries%3A+final_failure_retries%0D%0A++++failure_exception%3A+final_failure_exception%0D%0A++++failure_guard%3A+final_failure_guard"
    },
    {
        "closedLoopControlName": "ControlLoop-VOLTE-2179b738-fd36-4843-a71a-a8c24c70c55b",
        "controlLoopYaml": "controlLoop%3A%0D%0A++version%3A+2.0.0%0D%0A++controlLoopName%3A+ControlLoop-VOLTE-2179b738-fd36-4843-a71a-a8c24c70c55b%0D%0A++trigger_policy%3A+unique-policy-id-1-restart%0D%0A++timeout%3A+3600%0D%0A++abatement%3A+false%0D%0A+%0D%0Apolicies%3A%0D%0A++-+id%3A+unique-policy-id-1-restart%0D%0A++++name%3A+Restart+the+VM%0D%0A++++description%3A%0D%0A++++actor%3A+VFC%0D%0A++++recipe%3A+Restart%0D%0A++++target%3A%0D%0A++++++type%3A+VM%0D%0A++++retry%3A+3%0D%0A++++timeout%3A+1200%0D%0A++++success%3A+final_success%0D%0A++++failure%3A+final_failure%0D%0A++++failure_timeout%3A+final_failure_timeout%0D%0A++++failure_retries%3A+final_failure_retries%0D%0A++++failure_exception%3A+final_failure_exception%0D%0A++++failure_guard%3A+final_failure_guard"
    }
]
  3. Mount APPC

    1. Get the VNF instance ID, either through VID or through AAI. Below the AAI request

      curl -X GET \
  https://<kubernetes-host>:30233/aai/v8/network/generic-vnfs/ \
  -H 'Accept: application/json' \
  -H 'Authorization: Basic QUFJOkFBSQ==' \
  -H 'Content-Type: application/json' \
  -H 'X-FromAppId: Postman' \
  -H 'X-TransactionId: get_generic_vnf'

      In the result, search for the vFW_PG_VNF and get its vnf-id. In the payload below, it would be e6fd60b4-f436-4a21-963c-cc9060127633

      {
    "generic-vnf": [
        {
            "vnf-id": "9663a27e-8fbe-4fde-bc33-064ae45caee6",
            "vnf-name": "vFW_SINC_VNF",
            "vnf-type": "vFW_Service/vFW_SINC 0",
            "service-id": "75af21a4-6519-4505-b418-134e9e836023",
            "prov-status": "PREPROV",
            "orchestration-status": "Created",
            "in-maint": false,
            "is-closed-loop-disabled": false,
            "resource-version": "1513788953961",
            "persona-model-id": "edd473e1-7d08-4cf1-be31-0d705017f644",
            "persona-model-version": "1.0",
            "relationship-list": {
                "relationship": [
                    {
                        "related-to": "service-instance",
                        "related-link": "https://10.195.197.53:30233/aai/v8/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vFWCL/service-instances/service-instance/63b55891-ebc6-40bf-b884-2e2427280a83",
                        "relationship-data": [
                            {
                                "relationship-key": "customer.global-customer-id",
                                "relationship-value": "Demonstration"
                            },
                            {
                                "relationship-key": "service-subscription.service-type",
                                "relationship-value": "vFWCL"
                            },
                            {
                                "relationship-key": "service-instance.service-instance-id",
                                "relationship-value": "63b55891-ebc6-40bf-b884-2e2427280a83"
                            }
                        ],
                        "related-to-property": [
                            {
                                "property-key": "service-instance.service-instance-name",
                                "property-value": "vFWServiceInstance-20-12"
                            }
                        ]
                    }
                ]
            },
            "vf-modules": {
                "vf-module": [
                    {
                        "vf-module-id": "fc8ba83f-2ebf-4066-bb3a-f581667f77da",
                        "vf-module-name": "vFW_SINC_Module",
                        "heat-stack-id": "vFW_SINC_Module/09b1a25e-4ef0-4490-9b05-d79c00c7d218",
                        "orchestration-status": "active",
                        "is-base-vf-module": true,
                        "resource-version": "1513790007998",
                        "persona-model-id": "858e065b-7491-4c70-91e6-109a65c6102d",
                        "persona-model-version": "1"
                    }
                ]
            }
        },
        {
            "vnf-id": "e6fd60b4-f436-4a21-963c-cc9060127633",
            "vnf-name": "vFW_PG_VNF",
            "vnf-type": "vFW_Service/vFW_PG 0",
            "service-id": "75af21a4-6519-4505-b418-134e9e836023",
            "prov-status": "PREPROV",
            "orchestration-status": "Created",
            "in-maint": false,
            "is-closed-loop-disabled": false,
            "resource-version": "1513788903856",
            "persona-model-id": "86a1bdd8-1f59-4796-bf30-3002108068f6",
            "persona-model-version": "1.0",
            "relationship-list": {
                "relationship": [
                    {
                        "related-to": "service-instance",
                        "related-link": "https://10.195.197.53:30233/aai/v8/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vFWCL/service-instances/service-instance/63b55891-ebc6-40bf-b884-2e2427280a83",
                        "relationship-data": [
                            {
                                "relationship-key": "customer.global-customer-id",
                                "relationship-value": "Demonstration"
                            },
                            {
                                "relationship-key": "service-subscription.service-type",
                                "relationship-value": "vFWCL"
                            },
                            {
                                "relationship-key": "service-instance.service-instance-id",
                                "relationship-value": "63b55891-ebc6-40bf-b884-2e2427280a83"
                            }
                        ],
                        "related-to-property": [
                            {
                                "property-key": "service-instance.service-instance-name",
                                "property-value": "vFWServiceInstance-20-12"
                            }
                        ]
                    }
                ]
            },
            "vf-modules": {
                "vf-module": [
                    {
                        "vf-module-id": "c2fed873-263c-46b5-bb95-4dfaf6c02410",
                        "vf-module-name": "vFW_PG_Module",
                        "heat-stack-id": "vFW_PG_Module/850e84a4-6cee-405c-8058-7f3fa25ca42e",
                        "orchestration-status": "active",
                        "is-base-vf-module": true,
                        "resource-version": "1513791913543",
                        "persona-model-id": "9c6c0369-a9c1-4419-94c9-aabf6250fc87",
                        "persona-model-version": "1"
                    }
                ]
            }
        }
    ]
}
    2. Get the public IP address of the Packet Generator from your deployment.

    3. In the below curl request, replace <vnf-id> with the VNF ID retrieved at step 2.a (it needs to be updated at two places), and replace <vnf-ip> with the ip retrieved at step 2.b.

      curl -X PUT \
  http://<kubernetes-host>:30230/restconf/config/network-topology:network-topology/topology/topology-netconf/node/<vnf-id> \
  -H 'Accept: application/xml' \
  -H 'Authorization: Basic YWRtaW46S3A4Yko0U1hzek0wV1hsaGFrM2VIbGNzZTJnQXc4NHZhb0dHbUp2VXkyVQ==' \
  -H 'Content-Type: text/xml' \
  -d '<node xmlns="urn:TBD:params:xml:ns:yang:network-topology">
   <node-id><vnf-id></node-id>
   <host xmlns="urn:opendaylight:netconf-node-topology"><vnf-ip></host>
   <port xmlns="urn:opendaylight:netconf-node-topology">2831</port>
   <username xmlns="urn:opendaylight:netconf-node-topology">admin</username>
   <password xmlns="urn:opendaylight:netconf-node-topology">admin</password>
   <tcp-only xmlns="urn:opendaylight:netconf-node-topology">false</tcp-only>
</node>'

      If you want to verify the NETCONF connection has successfully being established, use the following request (replace <vnd-id> with yours

      curl -X GET \
  http://<kubernetes-host>:30230/restconf/operational/network-topology:network-topology/topology/topology-netconf/node/<vnf-id> \
  -H 'Accept: application/json' \
  -H 'Authorization: Basic YWRtaW46S3A4Yko0U1hzek0wV1hsaGFrM2VIbGNzZTJnQXc4NHZhb0dHbUp2VXkyVQ=='

      Result should be:

      {
    "node": [
        {
            "node-id": "e6fd60b4-f436-4a21-963c-cc9060127633",
            "netconf-node-topology:available-capabilities": {
                "available-capability": [
                    {
                        "capability-origin": "device-advertised",
                        "capability": "urn:ietf:params:netconf:capability:exi:1.0"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "urn:ietf:params:netconf:capability:candidate:1.0"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "urn:ietf:params:netconf:base:1.1"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "urn:ietf:params:netconf:base:1.0"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-restconf?revision=2013-10-19)ietf-restconf"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netconf:mdsal:notification?revision=2015-08-03)netconf-mdsal-notification"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring?revision=2010-10-04)ietf-netconf-monitoring"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:TBD:params:xml:ns:yang:network-topology?revision=2013-07-12)network-topology"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-interfaces?revision=2014-05-08)ietf-interfaces"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-access-control-list?revision=2016-07-08)ietf-access-control-list"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:honeycomb:params:xml:ns:yang:eid:mapping:context?revision=2016-08-01)eid-mapping-context"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:rest:connector?revision=2014-07-24)opendaylight-rest-connector"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:binding?revision=2013-10-28)opendaylight-md-sal-binding"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netconf:northbound:ssh?revision=2015-01-14)netconf-northbound-ssh"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:core:spi:entity-ownership-service?revision=2015-08-10)opendaylight-entity-ownership-service"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-inet-types?revision=2013-07-15)ietf-inet-types"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:mdsal:core:general-entity?revision=2015-09-30)odl-general-entity"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:protocol:framework?revision=2014-03-13)protocol-framework"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:common?revision=2013-10-28)opendaylight-md-sal-common"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:sal:restconf:event:subscription?revision=2014-07-08)sal-remote-augment"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netconf:northbound:notification?revision=2015-08-06)netconf-northbound-notification"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-yang-types?revision=2010-09-24)ietf-yang-types"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:inmemory-datastore-provider?revision=2014-06-17)opendaylight-inmemory-datastore-provider"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netty?revision=2013-11-19)netty"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:binding:impl?revision=2013-10-28)opendaylight-sal-binding-broker-impl"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:sal:restconf:service?revision=2015-07-08)sal-restconf-service"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:config?revision=2013-04-05)config"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:vpp:classifier?revision=2015-06-03)vpp-classifier"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:v3po?revision=2015-01-05)v3po"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:core:general-entity?revision=2015-08-20)general-entity"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:netconf:notification:1.0?revision=2008-07-14)notifications"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:sample-plugin?revision=2016-09-18)sample-plugin"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:core:spi:config-dom-store?revision=2014-06-17)opendaylight-config-dom-datastore"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:core:spi:operational-dom-store?revision=2014-06-17)opendaylight-operational-dom-datastore"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:config:netconf:northbound:impl?revision=2015-01-12)netconf-northbound-impl"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:vpp:nsh?revision=2016-06-24)vpp-nsh"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netconf:north:mapper?revision=2015-01-14)netconf-northbound-mapper"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-yang-types?revision=2013-07-15)ietf-yang-types"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:honeycomb:params:xml:ns:yang:naming:context?revision=2016-05-13)naming-context"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:iana-if-type?revision=2014-05-08)iana-if-type"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:vpp:vlan?revision=2015-05-27)vpp-vlan"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netconf:mdsal:mapper?revision=2015-01-14)netconf-mdsal-mapper"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:vpp:classifier?revision=2016-09-09)vpp-classifier-context"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-ip?revision=2014-06-16)ietf-ip"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:remote?revision=2014-01-14)sal-remote"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:lisp?revision=2016-05-20)lisp"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-inet-types?revision=2010-09-24)ietf-inet-types"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:threadpool?revision=2013-04-09)threadpool"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:md:sal:dom?revision=2013-10-28)opendaylight-md-sal-dom"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netconf:northbound:tcp?revision=2015-04-23)netconf-northbound-tcp"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:v3po:context?revision=2016-09-09)v3po-context"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:netmod:notification?revision=2008-07-14)nc-notifications"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:netconf:base:1.0?revision=2011-06-01)ietf-netconf"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ieee:params:xml:ns:yang:dot1q-types?revision=2015-06-26)dot1q-types"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netconf:mdsal:monitoring?revision=2015-02-18)netconf-mdsal-monitoring"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(instance:identifier:patch:module?revision=2015-11-21)instance-identifier-patch-module"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring-extension?revision=2013-12-10)ietf-netconf-monitoring-extension"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:netconf:northbound:notification:impl?revision=2015-08-07)netconf-northbound-notification-impl"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:yang:extension:yang-ext?revision=2013-07-09)yang-ext"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-packet-fields?revision=2016-07-08)ietf-packet-fields"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-lisp-address-types?revision=2015-11-05)ietf-lisp-address-types"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:config:netconf:northbound?revision=2015-01-14)netconf-northbound"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:ietf-netconf-notifications?revision=2012-02-06)ietf-netconf-notifications"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:TBD:params:xml:ns:yang:network-topology?revision=2013-10-21)network-topology"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:ietf:params:xml:ns:yang:rpc-context?revision=2013-06-17)rpc-context"
                    },
                    {
                        "capability-origin": "device-advertised",
                        "capability": "(urn:opendaylight:params:xml:ns:yang:controller:config:netconf:auth?revision=2015-07-15)netconf-auth"
                    }
                ]
            },
            "netconf-node-topology:host": "10.195.200.32",
            "netconf-node-topology:unavailable-capabilities": {},
            "netconf-node-topology:connection-status": "connected",
            "netconf-node-topology:port": 2831
        }
    ]
}

    4. Using NETCONF, let's get the current streams being active in our Packet Generator. The number of streams will change along the time, this is the result of close-loop policy. When the traffic goes over a certain threshold, DCAE will publish an event on the unauthenticated.DCAE_CL_OUTPUT topic that will be picked up by APPC, that will send a NETCONF request to the packet generator to adjust the traffic it's sending.

      curl -X GET \
  http://10.195.197.53:30230/restconf/config/network-topology:network-topology/topology/topology-netconf/node/e6fd60b4-f436-4a21-963c-cc9060127633/yang-ext:mount/sample-plugin:sample-plugin/pg-streams \
  -H 'Accept: application/json' \
  -H 'Authorization: Basic YWRtaW46S3A4Yko0U1hzek0wV1hsaGFrM2VIbGNzZTJnQXc4NHZhb0dHbUp2VXkyVQ=='

  4. Browse to the zdfw1fwl01snk01 on port 667 to see a graph representing the traffic being received:

    http://<zdfw1fwl01snk01>:667/

    As you can see in the below graph, looking at the top right square, we can see the first two fluctuations are going from very low to very high. This is when close-loop isn't running.
    Once close-loop is running, you'll have some medium bars.



  5. Check the events sent by Virtual Event Collector (VES) to Threshold Crossing Analytic (TCA) app:

    curl -X GET \
  http://<K8S_IP>:3904/events/unauthenticated.SEC_MEASUREMENT_OUTPUT/group1/C1 \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/cambria'

    The VES resides in the VNF itself, whereas the TCA is an application running on Cask. A DCAE component.

  6. Check the events sent by TCA on unauthenticated.DCAE_CL_OUTPUT:

    curl -X GET \
  http://<K8S_IP>:3904/events/unauthenticated.DCAE_CL_OUTPUT/group1/C1 \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/cambria'

    Those events are the resulting of the TCA application, e.g. TCA has noticed an event was crossing a given threshold, hence is sending a message of that particular topic. Then Policy will grab this event and perform the appropriate action, as defined in the Policy. In the case of vFWCL, Policy will send an event on the APPC_CL topic, that APPC will consume. This will trigger a NETCONF request to the packet generator to adjust the traffic.

I hope everything worked for you, if not, please leave a comment. Thanks

  • No labels

142 Comments

  1. Vidhu Shekhar Pandey

    Hi Alexis,

    I am using OOM 1.1.0 release and following the steps/videos posted in this wiki. At step 10g  (create VF-Module for vFW_SINC) I am facing the error “MSO failure”

    and VF module on the VID page shows orchestration status as “pending delete”. Also the stack doesn’t get created in my OpenStack environment. How do I get past this? Any suggestions on what could be failing/missing.

    All the containers are in running state, and also robot health check is passing for all except for DCAE. Also, I am able to ping AAI from MSO container ( I saw that as an issue posted in some mailing list queries). But, upon logging into AAI portal I do not see any VNF/Service there. Also, as shown in the video, when I fetch the service-subscriptions from AAI, I see “Error java.lang.NullPointerException” there. Is this the trouble?

    I understand  that the image_name, flavor_name, public_net_id, onap_private_net_id, onap_private_subnet_id, key_name and pub_key  should already be created in my OpenStack  before I execute this step 10f. Do I also need to pre-create unprotected_private_net_id, unprotected_private_subnet_id, protected_private_net_id, protected_private_subnet_id ?

    The instantiation transactions for the failed service instance are as below in the VID screenshot.

    Thanks,

    Vidhu



    1. Alexis de Talhouët

      Hi, no you don't need to create the following resources: unprotected_private_net_id, unprotected_private_subnet_id, protected_private_net_id, protected_private_subnet_id; they will be created by the vFW_PG deployment.

      Based on the error I can see in your screenshot, you seem to face Authentication Failure. So I believe you have wrong username/password in your initial configuration. Please double check and confirm.

      Thanks

      1. Vidhu Shekhar Pandey

        Thanks Alexis for the clarity on OpenStack resources. I will check on the authentication error and get back.  

      2. Rahul Sharma

        Alexis de Talhouët: Thank you for the page; helped me create the vFW deployment on my local Openstack cloud.

        Couple of things that I found during my exercise:

        1. Demo OOM → Step 8 was failing for me until I added "GLOBAL_INJECTED_SCRIPT_VERSION" in /dockerdata-nfs/onap/robot/eteshare/config/vm_properties.py
        2. Stack Creation for vFW_PG was failing until I created the unprotected/protected private networks manually. Not sure why vFW_PG deployment did not create it for me? ('cause i instantiated vFW_PG before vFW_SINC)
          • Was getting the following exception

            • 2017-12-19T20:13:27.810Z|2017-12-19T20:13:28.847Z|08d06356-75aa-46b6-a2f9-1a2381185b38|575cea7d-d1a2-4b9e-8909-06c0fd7f03fc|Thread-287||CreateVfModule|BPELClient|OpenStack
              |CreateStack|ERROR|505|Create VF Module vFW/vFW_PG 0::VfwPg..base_vpkg..module-0 in RegionOne/09f7009ea6c94354b3d82a658103da74: 400 Bad Request: The server could not comply with the request since it is either malformed or otherwise incorrect., error.type=StackValidationFailed, error.message=Property error: : resources.vpg_private_0_port.properties.network: : Error validating value 'zdfw1fwl01_unprotected': Unable to find network with name or id 'zdfw1fwl01_unprotected'|ccebf893-0eba-474c-852e-56ae1b0702c9|INFO|0|10.42.246.118|1037|mso-3784963895-bnkb1|10.42.0.1||||vFW_PG_Module||||

          • Manually created these private networks and Stack creation succeeded.


        1. Alexis de Talhouët

          Hi, I'm aware of point 1. and it's going to be resolved soon. As for point 2. you need first to create the vFW_SINC before the vFW_PG, as it's the vFW_SINC that creates the network resources.

          1. Alexis de Talhouët

            I just noticed I said the opposite in my previous comment, the source of truth is the written workflow, hence sinc then pg. Thanks and sorry for the confusion.

            1. Rahul Sharma

              Thanks; yes it's Sinc that creates the network.

        2. user-98326

          Hi Rahul,


          On a re-setup, for some reason I am seeing a smilar error. Can you please let me know what you added in "GLOBAL_INJECTED_SCRIPT_VERSION"  in /dockerdata-nfs/onap/robot/eteshare/config/vm_properties.py?

          That would help.


          Thanks,

          Nishank

          1. Rahul Sharma

            user-98326, hello,

            I just added an empty string as it's value; so:

            • Added GLOBAL_INJECTED_SCRIPT_VERSION = "" 
            • Also added  "GLOBAL_INJECTED_SCRIPT_VERSION" :""  as a property under GLOBAL_INJECTED_PROPERTIES

            1. Alexis de Talhouët

              Sorry for this regression, fix is here: https://gerrit.onap.org/r/#/c/29525/

            2. user-98326

              Thanks Rahul. (smile) Co-incidentally, I did a similar thing. I just added a random version like "1.0", re-ran robot script. it failed. Then, I removed GLOBAL_INJECTED_SCRIPT_VERSION. Somehow, it did the trick!

              But now thanks to Alexis' fix fresh image-pullers probably won't encounter it.


              Thanks,

              Nishank


      3. Vidhu Shekhar Pandey

        Hi Alexis, 

        Now the stacks are getting created in my OpenStack after some changes in network parameters. Screen shot below shows the instances and network topology: 



        To brief you:

        I am using the json provided in step 10e and 10f (for pre-loading) and replacing the values for parameters mentioned in these steps according to my OpenStack environment. In earlier attempts the stacks were getting created but then were getting rolled back as well. The reason found was that OpenStack was expecting a network in range of 10.0.100.0 to be present instead of 10.0.0.0. So I created a private network “onap_net” and a sub net “onap_sub” in that range in my OpenStack tenant and changed the following network specific vnf-parameters


        For vFW_SINK: 

               {

                  "vnf-parameter-name": "onap_private_net_id",

                  "vnf-parameter-value": "onap_net"

                },

                {

                  "vnf-parameter-name": "onap_private_subnet_id",

                  "vnf-parameter-value": "onap_sub"

                },


              {

                  "vnf-parameter-name": "onap_private_net_cidr",

                  "vnf-parameter-value": "10.0.100.0/24"  ( originally it was "10.0.0.0/24")

                },


        For vFW_PG  :

                {

                  "vnf-parameter-name": "onap_private_net_id",

                  "vnf-parameter-value": "onap_net"

                },

                {

                  "vnf-parameter-name": "onap_private_subnet_id",

                  "vnf-parameter-value": "onap_sub"

                },


               {

                  "vnf-parameter-name": "onap_private_net_cidr",

                  "vnf-parameter-value": "10.0.100.0/24"   ( originally it was “10.0.0.0/16")

                },


               {

                  "vnf-parameter-name": "vpg_private_ip_1",

                  "vnf-parameter-value": "10.0.100.112"      ( originally it was "10.0.80.2")

                },


        Thanks for the steps/videos provided in this wiki. All went fine for me except that I had to make the above network changes. 

        Regards,

        Vidhu

        1. Rahul Sharma

          Vidhu Shekhar Pandey: My understanding is that 10.0.0.0/16 should have worked for an IP Address 10.0.100.x since /16 basically means you are not masking the last 2 octects. /16 gives you 65534 hosts. See https://www.aelius.com/njh/subnet_sheet.html

  2. Pavithra Radhakrishnan

    Hi Alexis,

    I am following the above steps to bring up ONAP 1.1.0. At step 10g  (create VF-Module for vFW_SINC) I am facing "Maximum number of poll exceeded" error. I have preloaded the values with respect to my Openstack setup.Please find below the error screenshots and help to figure out why exactly its failing and resolve the issue.

    1. Alexis de Talhouët

      Hi, " Maximum number of poll exceeded" doens't necessarly mean it failed, it means it hasn't completed the deployment in the number of poll configured.

      Do you actually see the stack in OS? What's the status of the vf-module in VID?

  3. Pavithra Radhakrishnan

    Hi Alexis

    My VF module is in pending delete state and I could not see stacks created in Openstack

    1. Alexis de Talhouët

      Ok, this means something is not correctly configured. To narrow this down, I would advice looking at the BPMN debug logs in MSO. Enable debug logs for BPMN: curl -X GET \ http://<your-k8s-host>:30223/mso/logging/debug , delete the vf-module from AAI, and retry the create. Else, you can double check the parameters, make sure you have sufficient quota, etc ...

  4. Pavithra Radhakrishnan

    Hi Alexis 

    The Delete vf module from the VID portal is not working . Could you please elaborate on how to delete the vf-module from AAI.We could not get anything from A&AI UI aswell

    1. Alexis de Talhouët

      You can use the following request, it will give everything for the service under the given customer.

      GET https://<kubernetes-host>:30233/aai/v11/business/customers/customer/<customer-name>/service-subscriptions/service-subscription/<service-name>?depth=all

      <customer-name> = Demonstration

      <service-name> = Name given at step 5

      You can also use the get generic-vnf to retrieve all the existing VNFs. If you have a VF module attached to a VNF, it should show under the vf-module list.

      GET https://<kubernetes-host>:30233/aai/v11/network/generic-vnfs

      Then, get the generic-vnf-id vf-module-id and vf-module-resource-id, and delete using the following request:

      DELETE https://<kubernetes-host>:30233/aai/v11/network/generic-vnfs/generic-vnf/<generic-vnf-id>/vf-modules/vf-module/<vf-module-id>?resource-version=<vf-module-resource-id>


      HTH


      1. Pavithra Radhakrishnan

        Hi Alexis

        The above requests are not fetching any output.In postman it fails with error connecting to the URL. And through CURL it shows empty reply from server

        1. Radhika Kaslikar

          Hi, 

          Were you able to delete the vf module?

          I tried with above curl queries as well as through the VID UI, but both dont seem to be working.

          Thanks and Regards,

          Radhika


  5. Pavithra Radhakrishnan

    Hi Alexis,

    We found Connection Exception and Resource not found error from MSO logs. We made some changes in onap-parameters.yaml file today but it is not getting applied. Please let us know how to make the changes effective and also find the attached error log.

    1. Alexis de Talhouët

      Hi, the onap-parameters.yaml is intended to be used once only, before anything is started. If you made some typos in there. I suggest the following:

      • Grep in OOM for the field name from onap-parameters,yaml to see where it's applied in the persisted config
      • Update the persisted config with the updated values.
      • Stop the applications impacted using the ./deleteAll.bash -n <namespace> -a <application> and start it again using ./createAll.bash -n <namespace> -a <application>

      For example, if you change values under /dockerdata-nfs/onap/mso you have to restart mso application.

      HTH

  6. Pavithra Radhakrishnan

    Hi Alexis

    We modified the parameters.yaml and now its able to contact Openstack and start the stack creation. But the stack creation is failing with error " No fixed IPs available for public_net."

  7. Pavithra Radhakrishnan

    Hi Alexis,

    The above error was due to availability of free ips . We fixed it and successfully completed the demo. Thank you for the steps/videos and comments to resolve the issue we faced. The only thing not working in deletion of Vf-module with Ui as well as Rest call. We are facing "error connecting to the URL" in postman . And through CURL it shows "empty reply from server"

    1. Alexis de Talhouët

      Hi, happy you figured it out and it worked for you.

  8. user-acfda

    Hi Alexis,

    Yesterday we went on add service instance (vfirewall_service_instance1) in VID and createdtwo VNF's for SYNC and PG but as noticed today, the three creations ( service instance and two VNF's) are missing from VID UI. PFA the document. 
    2. But, via curl GET query, we have checked that VNF is present. Snippet has been attached for your reference. PFA


    3. Today, we were trying to fill the onap and openstack values in VNF SYNC preload operation performed on SDNC.  The file has been attached for your reference. Since, the created VNF's are missing in VID, then how to add VF module ? We need to opt to create the service instance and the VNF's again ( as mentioned in step 1 )

    4. Could you please let me know what is protected and unprotected network ID ? Also, for ONAP parameters that we need to fill inside the above file, we have fetched the values for ONAP from 

    /dockerdata-nfs/ -→"robot/eteshare/config/integration_preload_parameters.py" path. Not sure whether I am doing it right or not?

    Could you please help!

    Best Regards,

    Shubhra

    1. Alexis de Talhouët

      Hi, the unprotected network and the protected network are being created by the vFW_SINC vf-module. Look at step 10.e and 10.f to understand what are the expected values to be filled-in for the two vf-module, and what they relates to. You shouldn't modify the other values, unless you know what you're doing.

  9. Radhika Kaslikar

    Hi All,

    We are trying to run demo for vFW.
    In this process we are running the script demo-k8s.sh init and it is failing with the below error,
    We are getting this error when we receive response from ASDC for POST request made to it, when it distributes model for vFWCL.
    Can anyone please help us as to how we can resolve this.


    Thanks and Regards,

    Radhika.

    1. Alexis de Talhouët

      409 Conflict - You're trying to add something that already exist, trying to overwrite something identified by the passed name , hence a conflict. Maybe you could delete the conflicting resource from SDC using REST API, then try to run robot again.

  10. Vidhu Shekhar Pandey

    Hi Alexis,

    I wanted to confirm whether it is possible for OOM to be configured for multiple tenants and regions of the same Openstack?  Actually while adding a new VNF, the VID dialog box presents a drop down for tenants/region which makes us believe it is possible to have > 1 tenant/region. However we understand that in onap-parameters.yaml file we can only provide the information of a single tenant/region.

    Attaching the screenshot showing the VID dialog box drop down options for VNF instance creations.

    Can you please guide us?

    Thanks,

    Vidhu




    1. Alexis de Talhouët

      Hi, out of the box, the OOM onap-parameters.yaml file configuration file, as you observed, allows to configure only one tenant, and only one Region. You can configure multiple region and multiple tenant. Note: Region name must be unique, you shall never have two regions with the same name. To add Region, you need to do the following:

      • in SO, under /etc/mso/config.d/cloud_config.json, under cloud_sites, add your new region

      Note, the identity_service_id is what is used to authenticate to this region, if it's the same as the other region, using the same one.

          "RegionTwo":
        {
          "region_id": "RegionTwo",
          "clli": "RegionTwo",
          "aic_version": "2.5",
          "identity_service_id": "REGION_TWO_KEYSTONE"
        }

      To add the identity_service_id, under identity_services, in the same file, add the following

      Replace KEYSTONE_URL_WITH_API_VERSION, USERNAME and ENCRYPTED_PASSWORD

             "REGION_TWO_KEYSTONE":
        {
          "identity_url": "KEYSTONE_URL_WITH_API_VERSION",
          "mso_id": "USERNAME",
          "mso_pass": "ENCRYPTED_PASSWORD",
          "admin_tenant": "service",
          "member_role": "admin",
          "tenant_metadata": true,
          "identity_server_type": "KEYSTONE",
          "identity_authentication_type": "USERNAME_PASSWORD"
        }

      To encrypt the password, use the following SO API

      curl -X GET \
  http://<k8s>:30223/networks/rest/cloud/encryptPassword/$PASSWORD_TO_ENCRYPT

      The config is reloaded every minute, to check-out running config, using the following request

      curl -X GET \
  http://<k8s>:30223/networks/rest/cloud/showConfig
      • in AAI, add a cloud region:

      Replace REGION_NAME, TENANT_NAME, TENANT_ID

      - Create a cloud region

      POST https://<k8s>:30233/aai/v11/cloud-infrastructure/cloud-regions/cloud-region/CloudOwner/REGION_NAME
		 {
            "cloud-owner": "CloudOwner",
            "cloud-region-id": "REGION_NAME",
            "cloud-type": "SharedNode",
            "owner-defined-type": "OwnerType",
            "cloud-region-version": "v1",
            "cloud-zone": "CloudZone",
            "sriov-automation": false,
            "resource-version": "1515506147118",
            "relationship-list": {
                "relationship": [
                    {
                        "related-to": "complex",
                        "related-link": "/aai/v11/cloud-infrastructure/complexes/complex/clli1",
                        "relationship-data": [
                            {
                                "relationship-key": "complex.physical-location-id",
                                "relationship-value": "clli1"
                            }
                        ]
                    }
                ]
            }
        }

      - Create the tenant in the region for the 4 different services with the right tenant id:

      PUT https://<k8s>:30233/aai/v11/cloud-infrastructure/cloud-regions/cloud-region/CloudOwner/REGION_NAME/tenants/
{
    "tenant-id": "TENANT_ID",
    "tenant-name": "TENANT_NAME",
    "relationship-list": {
        "relationship": [
            {
                "related-to": "service-subscription",
                "related-link": "/aai/v11/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vLB",
                "relationship-data": [
                    {
                        "relationship-key": "customer.global-customer-id",
                        "relationship-value": "Demonstration"
                    },
                    {
                        "relationship-key": "service-subscription.service-type",
                        "relationship-value": "vLB"
                    }
                ]
            },
            {
                "related-to": "service-subscription",
                "related-link": "/aai/v11/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vIMS",
                "relationship-data": [
                    {
                        "relationship-key": "customer.global-customer-id",
                        "relationship-value": "Demonstration"
                    },
                    {
                        "relationship-key": "service-subscription.service-type",
                        "relationship-value": "vIMS"
                    }
                ]
            },
            {
                "related-to": "service-subscription",
                "related-link": "/aai/v11/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vFWCL",
                "relationship-data": [
                    {
                        "relationship-key": "customer.global-customer-id",
                        "relationship-value": "Demonstration"
                    },
                    {
                        "relationship-key": "service-subscription.service-type",
                        "relationship-value": "vFWCL"
                    }
                ]
            },
            {
                "related-to": "service-subscription",
                "related-link": "/aai/v11/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vCPE",
                "relationship-data": [
                    {
                        "relationship-key": "customer.global-customer-id",
                        "relationship-value": "Demonstration"
                    },
                    {
                        "relationship-key": "service-subscription.service-type",
                        "relationship-value": "vCPE"
                    }
                ]
            }
        ]
    }
}

      1. Vidhu Shekhar Pandey

        Thanks a lot Alexis. 

  11. Bin Yang

    Add a few clarification and facts which I just realized recently.


    First of all, with ONAP in Amsterdam release,  the VIM registration is not centralized in one place, as far as I know , there are two places to store VIM registration information which concerning service/VNF instantiation: SO and AAI. This is very important context for anyone who want to add or modify VIM registration information.


    Several facts you need to know to register a new VIM instance to ONAP for orchestration:


    1)      To put VIM registration into AAI, there are various way to do that, the most user-friend one is to leverage the ESR portal, which will trigger multicloud to discover VIM/cloud resources automatically. Please refer to docs at http://onap.readthedocs.io/en/latest/submodules/aai/esr-server.git/docs/platform/installation.html

    MultiCloud is using this VIM registration to mediate API calls from SO/APPC/DCAEgen2/VFC/etc. to underlying VIMs

    2)      To put VIM registration into SO, you need login SO VM and attach to the container, then you can change the config file as stated above: https://wiki.onap.org/display/DW/vFWCL+instantiation%2C+testing%2C+and+debuging?focusedCommentId=22252150#comment-22252150

    I guess VID is using this VIM registration information.


    3)      The 2 VIM registration procedures above are loosely coupled

    Let me give you several examples:

            Case 1: SO instantiate a VF modules without MultiCloud

                           In this case, VIM registration information refers to directly identity services of underlying VIMs (those VIM exposes OpenStack keystone V2.0 API ), so the identity_url looks like:

    "identity_url": "http://10.12.25.2:5000/v2.0",


            Case 2: SO instantiate a VF modules via MultiCloud

                           In this case, VIM registration information refers to MultiCloud endpoints which is a proxy to underlying VIMs, so the identity_url looks like:

    "identity_url": " http://10.0.14.1:80/api/multicloud-titanium_cloud/v0/pod25_RegionOne/identity/v2.0",


  12. user-98326

    Hi Alexis, 

    Thanks to this detailed doc here we have been able to successfully spawn a vFirewall and sink. Thanks for that.

    However, I am facing an issue of not being able to ssh into the vfirewall and vsink.

    I am trying the following command ssh -i private_key.pvt root@171.168.1.153, the IP being that of the vfw.

    This private key was located  inside robot (as suggested in Verifying your ONAP Deployment#sshkeys)


    (/var/lib/docker/aufs/mnt/3fbf976cce6d850015bafb79f9f8992bcd6802b2b99937024f667c6844459ad2/var/opt/OpenECOMP_ETE/robot/assets/keys/robot_ssh_private_key.pvt)

    I also tried using the pem file corresponding to the public key I used in preload step but I didnt succeed. 

    The error upon doing ssh  is "access denied (public key)". I have also tried chmod 600 private_key.pvt because I saw that as an issue mentioned by some but it didnt help.


    I would really appreciate hints on :

    1. Which private key I should use to login into vfirewall, sink etc?

    2. What would be the username to use while ssh? So far I have tried root, ubuntu (The image I used is Ubuntu_14.04.5_LTS image.) 
    3. Any other steps which I am missing and may need to be performed before ssh-ing into instances.

    Thanks,

    Nishank

    1. Alexis de Talhouët

      During the preload step, you added a public key. To ssh, you should you the private key that goes with that public key.

      The username might be ubuntu if its a vanilla ubuntu image.

      1. user-98326

        Yeah , thanks for confirming about the key, Alexis. It helps!

      2. vishwanath jayaraman

        Alexis,

         When using DCAE, I used ssh-keygen to create a key on the OpenStack machine, took the private and public keys and stuck them in the onap-parameters.yaml file.

        I was next able to ssh into the DCAE VMs without having to input password or specify keyfile.

        For the VNF VM case, do I do something similar from the OpenStack machine? If yes, I know that the public key needs to be used as part of preload step, however where would the private key go and does it require any services restart for it to take effect?

        Thanks

        1. Alexis de Talhouët

          Hi, for the VNF, it's the same. You have a priv/pub key pair that should be defined in OS. Use the pub key as part of the preload.

  13. Bin Sun

    Hi Alexis, 

    I have followed your directions to do the close loop, but in the 'http://<zdfw1fwl01snk01>:667/' page,

    I can only see the graph but no data in it.

    the process has no error within,

    could you help deal with it?

    1. Alexis de Talhouët

      If the graph has no data, it means the packet generator isn't generating any traffic. Maybe you should try and log in the packet generator vm and look if the cloud-init has errors. Also, you could try delete those stacks, and re-deploy them.

  14. user-11955

    Hi Alexis


    I'm now attempting to create testing view of vFWCL

    then I have a question about section of 9.Service Distribution.

     In this section,the expected output picture have no green tick on dcae.

    is it correctly ditributed?

    what is the point to see whether correctly distributed vFW_sinc and pg or not

    on monitor.

    I'm glad to hear answer for that.


     best regards

    hideyuki

    1. Alexis de Talhouët

      Hi, the reason why dcae has no green tick is probably because they don't acknowledge the received message. It could be some other reason, I have to say I'm not too sure about this one.

      The monitor tab let you make sure the various components have downloaded the artifacts from SDC when the service is distributed (for SO, AAI, and DCAE when it runs)

      1. user-11955

        dear Alexis


        maybe my quantity of questions are too much, so, I shrink myquestoin except essence.

         thank you for your reply


        so,then is it correct to conclude that distribution succeeded if total distribution deployed have green tick

        regardless individual components have no green tick(like DCAE).

        and if we want to sure individual component ditributed or not, check whether individual components downloaded or not.

        is it no problem?(Does amount of downloaded concerned with result?  )


        best regards

        hideyuki

        1. Alexis de Talhouët

          I'm not too sure about this, I'm not an SDC expert. I suggest you ask the mailing list about this. SDC experts will provide better insight.

          1. user-11955

            Alexis

            thanks for the reply on your busy schedule

            I'll try that solution.

            best regards

            hideyuki

  15. RAMANJANEYUL AKULA

    Hi Alex,

    Thanks a lot for the wonderful document. It really gives step by step instructions on how to achieve the close loop use case for vFW.
    I'm trying to follow it and create Closed Loop for generic VM (ubuntu).
    I was able to deploy the VM. But then when I tried to perform heatbridge creation using demo.sh on robot,
    first thing that I noticed is we need to add a mapping in
    OpenECOMP_ETE/robot/assets/service_mappings.py to find the vserver name.
    I have added that. But then my AAI named query is failing with 404 error

    <AAI IP>:8443/aai/search/named-query
    {"query-parameters":
    { "named-query":
    {
    "named-query-uuid": "f199cb88-5e69-4b1f-93e0-6f257877d066"
    }
    },
    "instance-filters": {
    "instance-filter": [
    {
    "vserver":
    {
    "vserver-name": "u2"
    }
    }
    ]
    }
    }


    When I looked at my AAI tenants, I don't see the vservers/vserver records created.
    May I know at what phase these records would be created?

    And in general, it would be really great if there is a sequence diagram on the workflow between different components for a successful deployment of a service and the closed loop use case.


    Thanks and regards
    Ramu

    1. Alexis de Talhouët

      Ramu, there might be a sequence diagram somewhere in this wiki, but I'm not aware of it. Regarding the vservers and stuff in AAI, those are added while running heatbridge robot goal. It will map the stack details to your service instance in AAI. I didn't have to edit any mapping for this to work.

      1. RAMANJANEYUL AKULA

        Thanks Alexis for clarifying it and the hints.

        Now the heatbridge is working for me.

        In some of the AAI logs I noticed that it was not able to resolve the host mr.api.simpledemo.openecomp.org.

        On DNS server I have un-commented  the line

        ;mr.api.simpledemo.openecomp.org.  IN      CNAME   vm1.mr.simpledemo.openecomp.org.

        So that the DNS query can go through. 

        I have deleted the customer and recreated and deployed the Service again and ran the heatbridge case.

        With this change I'm able to successfully create the heatbridge. 

        warm regards, Ramu

  16. Eddy Hautot

    In the step 5 Create a new VSP

    I do not see any place to import the zip, is it normal?


    Thanks,

    Eddy

    1. Alexis de Talhouët

      No, not normal. This is wierd. Can you refresh, and/or bounce completely the portal app.

  17. Vijayalakshmi H

    Hi Alexis,

      I have followed the steps mentioned here to deploy vFW. Continuing to Run Demo Vnf and DCAE Deployment on OOM Amsterdam release , I am facing 2 Issues at Hand . I have tried rebuilding the pod and things around it . but some how It is not helping .

     

    Pls find the Onap-parameter.yaml attached .

    The issue faced are Two .

    a-       At the Time of deploying  the services below error is seen .Indicating Model-Version not found .

    b-     W.r.t to Service Distribution ,

                      The artifcats are distributed to SO only(17 artifacts getting distributed) .It looks Like there is no artifcats distribution happening between A&AI . Any Pointer why this could be happening and recommendation will be helpful .



    Thanks

    Vijaya

    1. Alexis de Talhouët

      AAI model-loader has probably failed. please bounce the pod and try again, it should fix your issue.

  18. pranjal sharma

    Hi Alexis,

    I have tried to install onap usning rancher on kubernetes with amsterdam release.

    All the pods are working in running condition.

    However, when i run the command <./ete-k8s.sh health>, Health check up are failing for asdc, appc and usecaseui-gui API witg 500, 400 and 502 error code.

    Basic ASDC Health Check | FAIL |
    500 != 200
    ------------------------------------------------------------------------------
    Basic APPC Health Check | FAIL |
    400 != 200
    ------------------------------------------------------------------------------

    usecaseui-gui API Health Check | FAIL |
    502 != 200
    ------------------------------------------------------------------------------


    because of that sdc application are not coming up in vnc portal.


    o/p of demo script is as follows:

    root@cadmin:~/oom/kubernetes/robot# ./demo-k8s.sh init_robot
    WEB Site Password for user 'test': Starting Xvfb on display :89 with res 1280x1024x24
    Executing robot tests at log level TRACE
    ==============================================================================
    OpenECOMP ETE
    ==============================================================================
    OpenECOMP ETE.Robot
    ==============================================================================
    OpenECOMP ETE.Robot.Testsuites
    ==============================================================================
    OpenECOMP ETE.Robot.Testsuites.Update Onap Page :: Initializes ONAP Test We...
    ==============================================================================
    Update ONAP Page | FAIL |
    ConnectionError: HTTPConnectionPool(host='controller', port=8774): Max retries exceeded with url: /v2.1/servers/detail (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fa7c7251590>: Failed to establish a new connection: [Errno -2] Name or service not known',))
    ------------------------------------------------------------------------------
    OpenECOMP ETE.Robot.Testsuites.Update Onap Page :: Initializes ONA... | FAIL |
    1 critical test, 0 passed, 1 failed
    1 test total, 0 passed, 1 failed
    ==============================================================================
    OpenECOMP ETE.Robot.Testsuites | FAIL |
    1 critical test, 0 passed, 1 failed
    1 test total, 0 passed, 1 failed
    ==============================================================================
    OpenECOMP ETE.Robot | FAIL |
    1 critical test, 0 passed, 1 failed
    1 test total, 0 passed, 1 failed
    ==============================================================================
    OpenECOMP ETE | FAIL |
    1 critical test, 0 passed, 1 failed
    1 test total, 0 passed, 1 failed
    ==============================================================================
    Output: /share/logs/demo/UpdateWebPage/output.xml
    Log: /share/logs/demo/UpdateWebPage/log.html
    Report: /share/logs/demo/UpdateWebPage/report.html



    please let me know the workaround for this  problem


    1. Alexis de Talhouët

      You shouldn't not proceed further if health check is failing. Try to re-deploy SDC and APP-C, it might be a transiant timing issue.

  19. Suraj Kant Singh

    Try ./demo-k8s.sh init instead of ./demo-k8s.sh init_robot

    1. Alexis de Talhouët

      The init is meant to create Demonstration customer in AAI, and create CloudRegion. Whereas init_robot let you configure the HTTP access to Robot log server. Very two distinct/different things.

  20. pranjal sharma

    oke..but whet we do with /ete-k8s.sh health script.

    Is there any solution for this problem.


    Thanks

  21. Brian Freeman

    there are race conditions in the oom startup. try stopping the A&AI docker containers (k8 will restart them) , wait for them to come fully up and then do a re-distribute from the SDC portal as op0001. Click on monitor and refresh as necessary to confirm that A&AI and SO have both picked up the models. If SDNC is not picking up models then you probably should stop the sdnc:ueb_listener container as well for the same reason. What appears to be happening is that sdc isn't up when the clients come up so the clients don't get their dmaap keys (or perhaps some other problem in the dmaap subscription)

    1. pranjal sharma

      vfw_sinc_vnf, vfw_pg_vnf and vsinc Vm's has been created in openstack dashboard.

      there are 2 things i want to ask :

      i dont see the vsinc module in the VID portal since it showed the mso maximum poll reached error

      and i am not able to login into the vm, and key_pait these vm took is public one. please let me know how to login into that.


      Thanks 

      Pranjal

  22. pranjal sharma

    Hello All,

    fyi Alexis de Talhouët Vidhu Shekhar Pandey

    Got an error message while creating service instance on step 10.e 

    Also there is no vFW option under Service type , so chose vFWCL . Not sure that could be an issue.

    Healthcheck has the following failed :

    .

    root@cadmin:~/oom/kubernetes/robot# ./ete-k8s.sh health | grep FAIL

    Basic DCAE Health Check                                                                                 | FAIL |
    usecaseui-gui API Health Check                                                                        | FAIL |
    OpenECOMP ETE.Robot.Testsuites.Health-Check :: Testing ecomp compo... | FAIL |
    OpenECOMP ETE.Robot.Testsuites                                                                  | FAIL |
    OpenECOMP ETE.Robot                                                                                   | FAIL |
    OpenECOMP ETE                                                                                              | FAIL |

    Please advise

     :

    1. Alexis de Talhouët

      Hi, this is exactly the issue that Brian explained the comment above. Please bounce AAI model-loader. It should all be fixed after that.


      1. Pedro Barros

        hi Alexis de Talhouët,

        i have the exactly same error and i restarted model-loader a few times. Any idea??

        thnks

  23. Razanne Abu-Aisheh

    Hi All,

    When we get to point 11 g, it fails giving an MSO error (Maximum number of poll attempts exceeded). In the MSO logs it says: "missing or invalid properties file: /etc/mso/config.d/mso.vfc.properties , we tried to look up the file, however it doesn't seem to exist anywhere.

    would appreciate any help with this,

    Thank you in advance...

    1. Alexis de Talhouët

      Hi, I don't know about this one... this is strange, though, I never faced this. Have you modified the mso-docker.json file before starting SO?

      1. Razanne Abu-Aisheh

        Hi, we have managed to find it here: https://gerrit.onap.org/r/#/c/28747/1/templates/default/mso-po-adapter-config/mso.vfc.properties, it created the heat stack fine now. also another question, do we need DCAE to get any graphs at all or is it just for the closed loop graphs?

        Thanks in advance...

  24. deity990

    Hello, I'm trying to vFW demo. 

    But I can't mount to APPC.  

    • The result of network topology operation. 

    http://{ip_address}:30230/restconf/operational/network-topology:network-topology/topology/topology-netconf/node/736249ee-ce93-402e-9be4-bef3a1ea3e88

    <node xmlns="urn:TBD:params:xml:ns:yang:network-topology">
    <node-id>736249ee-ce93-402e-9be4-bef3a1ea3e88</node-id>
    <host xmlns="urn:opendaylight:netconf-node-topology">1.2.1.1</host>                     → ip address of vFW_PG 
    <connection-status xmlns="urn:opendaylight:netconf-node-topology">connecting</connection-status>
    <port xmlns="urn:opendaylight:netconf-node-topology">2831</port>
    </node>


    • Verify Neconf connection result as below. 

    <errors xmlns="urn:ietf:params:xml:ns:yang:ietf-restconf">
    <error>
    <error-type>protocol</error-type>
    <error-tag>data-missing</error-tag>
    <error-message>Mount point does not exist.</error-message>
    </error>
    </errors>


    How can I fix the problem..?   

    1. Alexis de Talhouët

      Hi, can you make sure APP-C is able to reach the IP of the PG you're trying to mount. Is the port open? Checkout the PG state.

      1. deity990

        Thank you for your response! 

        1) APP-C is able to reach the PG. (ping to PG command is OK) and port is opened.     

        buntu@vfw-pg-vnf:/home$ netstat -t | grep 2831
        .... ok ..... 

        2) But, there are some Exceptions when I execute appc mount script. 

        When I execute the robot shell "./demo-k8.sh appc {mymoudle_name} ", appc logs are below. 

        {appc_container}/var/log/onap/appc/karaf.log  

        -------------------------------------------------------------------------------------------------------------------------------------------

        <log4j:event logger="org.opendaylight.netconf.nettyutil.handler.ssh.client.AsyncSshHandler" timestamp="1519954033349" level="WARN" thread="nioEventLoopGroupCloseable-3-27">
        <log4j:message><![CDATA[Unable to setup SSH connection on channel: [id: 0xbf1c294f]]]></log4j:message>
        <log4j:throwable><![CDATA[org.apache.sshd.common.SshException: Session is closed
        at org.apache.sshd.client.session.ClientUserAuthServiceNew.preClose(ClientUserAuthServiceNew.java:220)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$AbstractCloseable.close(CloseableUtils.java:284)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$AbstractInnerCloseable.doCloseGracefully(CloseableUtils.java:351)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$AbstractCloseable.close(CloseableUtils.java:285)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$ParallelCloseable.doClose(CloseableUtils.java:182)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$SimpleCloseable.close(CloseableUtils.java:151)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$SequentialCloseable$1.operationComplete(CloseableUtils.java:205)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$SequentialCloseable$1.operationComplete(CloseableUtils.java:200)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$SequentialCloseable.doClose(CloseableUtils.java:215)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$SimpleCloseable.close(CloseableUtils.java:151)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$AbstractInnerCloseable.doCloseGracefully(CloseableUtils.java:351)[30:org.apache.sshd.core:0.14.0]
        at org.apache.sshd.common.util.CloseableUtils$AbstractCloseable.close(CloseableUtils.java:285)[30:org.apache.sshd.core:0.14.0]
        at org.opendaylight.netconf.nettyutil.handler.ssh.client.AsyncSshHandler.disconnect(AsyncSshHandler.java:273)[339:org.opendaylight.netconf.netty-util:1.2.1.Carbon]
        at org.opendaylight.netconf.nettyutil.handler.ssh.client.AsyncSshHandler.close(AsyncSshHandler.java:240)[339:org.opendaylight.netconf.netty-util:1.2.1.Carbon]
        at io.netty.channel.AbstractChannelHandlerContext.invokeClose(AbstractChannelHandlerContext.java:625)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.AbstractChannelHandlerContext.close(AbstractChannelHandlerContext.java:609)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.ChannelOutboundHandlerAdapter.close(ChannelOutboundHandlerAdapter.java:71)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeClose(AbstractChannelHandlerContext.java:625)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.AbstractChannelHandlerContext.close(AbstractChannelHandlerContext.java:609)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.ChannelOutboundHandlerAdapter.close(ChannelOutboundHandlerAdapter.java:71)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeClose(AbstractChannelHandlerContext.java:625)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.AbstractChannelHandlerContext.close(AbstractChannelHandlerContext.java:609)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.AbstractChannelHandlerContext.close(AbstractChannelHandlerContext.java:466)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.DefaultChannelPipeline.close(DefaultChannelPipeline.java:964)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.AbstractChannel.close(AbstractChannel.java:234)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.ChannelFutureListener$2.operationComplete(ChannelFutureListener.java:56)[139:io.netty.transport:4.1.8.Final]
        at io.netty.channel.ChannelFutureListener$2.operationComplete(ChannelFutureListener.java:52)[139:io.netty.transport:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise.notifyListener0(DefaultPromise.java:507)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise.notifyListeners0(DefaultPromise.java:500)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise.notifyListenersNow(DefaultPromise.java:479)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise.access$000(DefaultPromise.java:34)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise$1.run(DefaultPromise.java:431)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:163)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:403)[138:io.netty.common:4.1.8.Final]
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:445)[139:io.netty.transport:4.1.8.Final]
        at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:858)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultThreadFactory$DefaultRunnableDecorator.run(DefaultThreadFactory.java:144)[138:io.netty.common:4.1.8.Final]
        at java.lang.Thread.run(Thread.java:748)[:1.8.0_151]
        ]]></log4j:throwable>

        <log4j:properties>
        <log4j:data name="bundle.id" value="339"/>
        <log4j:data name="bundle.name" value="org.opendaylight.netconf.netty-util"/>
        <log4j:data name="bundle.version" value="1.2.1.Carbon"/>
        </log4j:properties>
        </log4j:event>

        <log4j:event logger="io.netty.util.concurrent.DefaultPromise" timestamp="1519954033349" level="WARN" thread="globalEventExecutor-1-4">
        <log4j:message><![CDATA[An exception was thrown by org.opendaylight.protocol.framework.ReconnectPromise$2.operationComplete()]]></log4j:message>
        <log4j:throwable><![CDATA[java.lang.IllegalStateException: complete already: ReconnectPromise@7830e775(failure: java.util.concurrent.CancellationException)
        at io.netty.util.concurrent.DefaultPromise.setFailure(DefaultPromise.java:116)[138:io.netty.common:4.1.8.Final]
        at org.opendaylight.protocol.framework.ReconnectPromise$2.operationComplete(ReconnectPromise.java:65)[328:org.opendaylight.controller.protocol-framework:0.9.1.Carbon]
        at io.netty.util.concurrent.DefaultPromise.notifyListener0(DefaultPromise.java:507)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise.notifyListeners0(DefaultPromise.java:500)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise.notifyListenersNow(DefaultPromise.java:479)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise.access$000(DefaultPromise.java:34)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultPromise$1.run(DefaultPromise.java:431)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.GlobalEventExecutor$TaskRunner.run(GlobalEventExecutor.java:233)[138:io.netty.common:4.1.8.Final]
        at io.netty.util.concurrent.DefaultThreadFactory$DefaultRunnableDecorator.run(DefaultThreadFactory.java:144)[138:io.netty.common:4.1.8.Final]
        at java.lang.Thread.run(Thread.java:748)[:1.8.0_151]
        Caused by: java.util.concurrent.CancellationException
        at io.netty.util.concurrent.DefaultPromise.cancel(...)(Unknown Source)[138:io.netty.common:4.1.8.Final]
        ]]></log4j:throwable>

        1. Alexis de Talhouët

          Looks like an issue with the SSH Client vs Java Cipher:

          java.security.InvalidAlgorithmParameterException: DH key size must be multiple of 64, and can only range from 512 to 2048 (inclusive). The specific key size 4096 is not supported

          1. deity990

            Right! We have exceptions in "karaf.log" file as you mentioned.  

            We found out  that the configuration file "/opt/opendaylight/distribution-karaf-0.6.1-Carbon/etc/org.apache.karaf.shell.cfg" 

            But how can I change the default keySize into "2048", please give more detail information and check points about that. Thank you in advance. ^^


            • The configuration file   "/opt/opendaylight/distribution-karaf-0.6.1-Carbon/etc/org.apache.karaf.shell.cfg"  as below. 

            #
            # Self defined key size in 1024, 2048, 3072, or 4096
            # If not set, this defaults to 4096.
            #
            # keySize = 4096


            • Error logs "root@appc-775c4db7db-l4w76:/var/log/onap/appc/karaf.log" 
              <log4j:event logger="org.apache.sshd.client.session.ClientSessionImpl" timestamp="1519488167181" level="WARN" thread="sshd-SshClient[1afe1a32]-nio2-thread-8">
              <log4j:message><![CDATA[Exception caught]]></log4j:message>
              <log4j:throwable><![CDATA[java.security.InvalidAlgorithmParameterException: DH key size must be multiple of 64, and can only range from 512 to 2048 (inclusive). The specific key size 4096 is not supported
              at com.sun.crypto.provider.DHKeyPairGenerator.initialize(DHKeyPairGenerator.java:128)[sunjce_provider.jar:1.8.0_151]
              at java.security.KeyPairGenerator$Delegate.initialize(KeyPairGenerator.java:674)[:1.8.0_151]
              at java.security.KeyPairGenerator.initialize(KeyPairGenerator.java:411)[:1.8.0_151]
              at org.apache.sshd.common.kex.DH.getE(DH.java:65)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.client.kex.DHGEX.next(DHGEX.java:118)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.common.session.AbstractSession.doHandleMessage(AbstractSession.java:425)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.common.session.AbstractSession.handleMessage(AbstractSession.java:326)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.client.session.ClientSessionImpl.handleMessage(ClientSessionImpl.java:306)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.common.session.AbstractSession.decode(AbstractSession.java:780)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.common.session.AbstractSession.messageReceived(AbstractSession.java:308)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.common.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:54)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.common.io.nio2.Nio2Session$1.onCompleted(Nio2Session.java:184)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.common.io.nio2.Nio2Session$1.onCompleted(Nio2Session.java:170)[30:org.apache.sshd.core:0.14.0]
              at org.apache.sshd.common.io.nio2.Nio2CompletionHandler$1.run(Nio2CompletionHandler.java:32)[30:org.apache.sshd.core:0.14.0]
              at java.security.AccessController.doPrivileged(Native Method)[:1.8.0_151]
              at org.apache.sshd.common.io.nio2.Nio2CompletionHandler.completed(Nio2CompletionHandler.java:30)[30:org.apache.sshd.core:0.14.0]
              at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)[:1.8.0_151]
              at sun.nio.ch.Invoker$2.run(Invoker.java:218)[:1.8.0_151]
              at sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:112)[:1.8.0_151]
              at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)[:1.8.0_151]
              at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)[:1.8.0_151]
              at java.lang.Thread.run(Thread.java:748)[:1.8.0_151]
              ]]></log4j:throwable>

            1. Alexis de Talhouët

              This is more a issue with the JDK itself, not allowing such keys. You could use BountyCastly security-provider instead of the default JDK one. See https://stackoverflow.com/a/39711275

              1. Sandeep Shah

                Hi deity990 and Alexis de Talhouët -- 

                I would very much appreciate if you please let me know how you fixed this issue (SSH connection refused)? Seems like I am also running into a similar issue…

                Thanks!

  25. Praveen Ch

    Hi All,

    Quick question , while deploying ONAP , we have used keystone url as OPENSTACK_KEYSTONE_URL: "http://1.1.1.1:35357" 

    instead of OPENSTACK_KEYSTONE_URL: "http://1.1.1.1:5000" .

    Will this impact deploying vFW , if so how can I amend this value to 5000 .

    Do note we have deployed ONAP and current performing vFW . 

    We currently are on 11E,11F . 


    Kindly advise at the earliest .

    1. Alexis de Talhouët

      Shouldn't matter.

      1. Praveen Ch

        Thanks Alexis ,


        However we have seen a change in behaviour , when we changed it from 35357 to 5000 .

        It might as well be because we removed v2,v3 on our openstack database suggested by David perez below .

        Not sure which solved the issue , but we no more get the keystone error .

  26. Priyanka Khavatkopp

    Hi All,

    I am a beginner 

    I am not able to find the option from GUI to delete one of the  SDC component i.e VSP(certified) or is there alternate solution or m i wrong?

     can anyone help?

    1. Bharath Thiruveedula

      Priyanka Khavatkopp, In this release, we don't have option to delete SDC models.

  27. Priyanka Khavatkopp

    Hi,

    While deploying VNF using ONAP using the below link :

     https://wiki.onap.org/display/DW/vFWCL+instantiation%252C+testing%252C+and+debuging

    we have used keystone url as OPENSTACK_KEYSTONE_URL: "http://1.1.1.1:35357" 

    instead of OPENSTACK_KEYSTONE_URL: "http://1.1.1.1:5000" .

    Do note we have deployed ONAP and current performing vFW  and currently performing step 11 g and 11h.


    I have read your comment on k8s forum to change the url in mso and aai.

    I have changed the keystone url port number from 35357 to 5000 in the  /dockerdata-nfs/onap/mso/mso/mso-docker.json file.

    But the error is still persisting as mso failure.

    Did you i need to change in aai file separately. if yes, please suggest the file path for aai.


    please refer the attached error file.


    Kindly advise at the earliest .

    1. David Perez Caparros

      Hi,

      maybe an issue with keystone API version? See section 'How to use both v2 and v3 Openstack Keystone API' in ONAP Installation in Vanilla OpenStack

      David

    2. Alexis de Talhouët

      In SO you should edit the /etc/mso.d/config/cloud-config.json. The file is reloaded every minute.

      Use the bellow request to see it's current state.

      curl -X GET \
  http://<k8s-host>:30223/networks/rest/cloud/showConfig

      Basically, at startup, SO processes the mso-docker.json using Chef recipes, and explod it in small config file that it puts under a configurable path, which is by default /etc/mso.d/config


      1. Praveen Ch

        Thanks Alexis ,

        We could modify the URL .

        However have the following issue while deploying vFW_SINC during preload :


        "requestId": "45c34fb0-d15b-436e-b8c6-9faad04e16ad",
        "requestType": "createInstance",
        "timestamp": undefined,
        "requestState": "FAILED",
        "requestStatus": "Received vfModuleException from VnfAdapter: category='INTERNAL' message='404 Not Found: The resource could not be found.' rolledBack='true'",
        "precentProgress": "100"

        "requestId": "45c34fb0-d15b-436e-b8c6-9faad04e16ad",
        "requestType": "createInstance",
        "timestamp": undefined,
        "requestState": "IN_PROGRESS",
        "requestStatus": undefined,
        "precentProgress": "20"

        03/01/18 18:48:43 HTTP Status: Accepted (202)
        {
        "requestReferences": {
        "instanceId": "eb7f21d7-3728-4d4d-bc55-835a6b2a30fd",
        "requestId": "45c34fb0-d15b-436e-b8c6-9faad04e16ad"
        }
        }

        1. Alexis de Talhouët

          Looks like the tenant information you provided to SO doesn't have to appropriate priviledge. Is that possible?

          1. Praveen Ch

            Thanks Alexis,

            I've just logged in with the same credentials , no issues .

            Also we have single username/password for this tenant , and it has admin access . As we are able to create VM's just fine using the same credentials .

  28. Praveen Ch

    Hi ALL,


    How do i solve the issue , with health check :

    usecaseui-gui API Health Check                                                                        | FAIL |

    1. Alexis de Talhouët

      You don't (smile) usecase-ui is working fine, it's a false positive. The URI use for health-check seems wrong to me, but I'm not the expert in the area. See https://lists.onap.org/pipermail/onap-discuss/2018-February/008224.html

      1. Praveen Ch

        Thanks Alexis ,

        Rest of the components have PASS .

        So believe we have some other issues.

      2. pranjal sharma

        vfw_sinc_vnf, vfw_pg_vnf and vsinc Vm's has been created in openstack dashboard.

        there are 2 things i want to ask :

        i dont see the vsinc module in the VID portal since it showed the mso maximum poll reached error

        and i am not able to login into any of the vm's, and key_pair these vm took is public one. please let me know how to login into that.


        Thanks 

        Pranjal

  29. Praveen Ch

    Hi All,


    Keep failing at the last step , deploying the VNF .

    get the below error :

    "requestId": "e0002ab6-2221-4c6f-9b09-2a4f4ef31540",
    "requestType": "createInstance",
    "timestamp": undefined,
    "requestState": "FAILED",
    "requestStatus": "Received vfModuleException from VnfAdapter: category='INTERNAL' message='org.openecomp.mso.openstack.exceptions.MsoIOException: Unknown Host: controller' rolledBack='true'",
    "precentProgress": "100"

    "requestId": "e0002ab6-2221-4c6f-9b09-2a4f4ef31540",
    "requestType": "createInstance",
    "timestamp": undefined,
    "requestState": "IN_PROGRESS",
    "requestStatus": undefined,
    "precentProgress": "20"

    "requestId": "e0002ab6-2221-4c6f-9b09-2a4f4ef31540",
    "requestType": "createInstance",
    "timestamp": undefined,
    "requestState": "IN_PROGRESS",
    "requestStatus": undefined,
    "precentProgress": "20"

    "requestId": "e0002ab6-2221-4c6f-9b09-2a4f4ef31540",
    "requestType": "createInstance",
    "timestamp": undefined,
    "requestState": "IN_PROGRESS",
    "requestStatus": undefined,
    "precentProgress": "20"

    03/01/18 19:54:09 HTTP Status: Accepted (202)
    {
    "requestReferences": {
    "instanceId": "44fbc19a-a889-483a-b14a-720f35f01e4e",
    "requestId": "e0002ab6-2221-4c6f-9b09-2a4f4ef31540"
    }
    }


    "controller" is the server name of our openstack controller , having said that we made sure we used the IP address for the Keystone URL .


    How can i check my VIM configuration used by ONAP .


    1. Praveen Ch

      This is my configuration on MSO for VIM :

      :/etc/mso/config.d# cat cloud_config.json
      {
      "cloud_config":
      {
      "identity_services":
      {
      "DEFAULT_KEYSTONE":
      {
      "identity_url": "http://1.1.1.1:5000/v2.0",
      "mso_id": "admin",
      "mso_pass": "81fd67a842ba6352729017088bb2b8ee",
      "admin_tenant": "service",
      "member_role": "admin",
      "tenant_metadata": true,
      "identity_server_type": "KEYSTONE",
      "identity_authentication_type": "USERNAME_PASSWORD"
      }
      },
      "cloud_sites":
      {
      "RegionOne":
      {
      "region_id": "RegionOne",
      "clli": "RegionOne",
      "aic_version": "2.5",
      "identity_service_id": "DEFAULT_KEYSTONE"
      }
      }
      }
      }


      ONAP-param.yaml has the following :


      OPENSTACK_USERNAME: "admin"
      OPENSTACK_PASSWORD: "xxxxx"
      OPENSTACK_TENANT_NAME: "admin"
      OPENSTACK_TENANT_ID: "96b8f4d527904bbc8c81d876fb962b4b"
      OPENSTACK_REGION: "RegionOne"
      # Either v2.0 or v3
      OPENSTACK_API_VERSION: "v3"
      OPENSTACK_KEYSTONE_URL: "http://1.1.1.1:5000"
      # Don't change this if you don't know what it is
      OPENSTACK_SERVICE_TENANT_NAME: "service"


      Any help is greatly appreciated .

    2. Davide Cherubini

      Hi Praveen,

      the error is Unknown Host: controller' therefore updating the /etc/hosts file into the mso POD with something like:

      1.1.1.1   controller

      should resolve the issue.

      1. Praveen Ch

        Hi Davide,

        Thanks a lot , that did the trick .

  30. vishwanath jayaraman

    I saw postman collection being used in the video. It would be very helpful if that collection could be shared or if its already shared, a link to download that would be appreciated. 

    1. Alexis de Talhouët

      I have a postman collection, but I cannot share it. It contains to many sensible data regarding the use cases we've implemented internally. If I get a change to do some triage, I'll upload it, but don't count on this anytime soon.

  31. Suraj Kant Singh

    1. On the fresh ubuntu, installed curl, git etc then used oom_rancher_setup.sh to setup kubernates/rancher/helm
    2. Then used https://wiki.onap.org/display/DW/vFWCL+instantiation%2C+testing%2C+and+debuging, we have observed following
      1. In Step 9 Service Distribution, after distribution by op0001, Total Artifacts is 0
      2. In Step 10 Service Instance creation, in VID, while deploying Serivce we get MSO failure

    3. Are we missing some steps ?

      Please note we have not followed https://wiki.onap.org/display/DW/Pre-Onboarding or https://wiki.onap.org/display/DW/running+vFW+Demo+on+ONAP+Amsterdam+Release to create tenants/customer/owner/region etc or changed the .zip files

    1. Rahul Sharma

      Suraj Kant Singh, Hello,

      I am a bit surprised that even though 2.a. shows no artifacts were distributed, you still have a service distributed in VID that you can deploy in step 2.b. - which basically means that VID was able to retrieve the artifacts from AAI - even though AAI never received them in step 2.a. 

      Most probably this will happen if you used Robot to generate the artifact and distributed them. You must have executed demo init which would have created the needed artifacts in AAI including Customer/region etc. However, even that failed to create artifacts in SO as the message in screenshot 2.b. suggests.


      I faced something similar (as your point 2.a. above) -  my service was distributed but none of the components received it!

      After some analysis, I figured out that AAI-Model Loader (one of the µServices in AAI that receives the artifact) was having trouble getting notifications from SDC (via DMaap). I got similar exceptions in SO logs. 

      My educated guess is that the SDC UEBClusters somehow takes more time to be up than the time-outs defined in MSO and AAI... So restarting AAI-ML and then MSO pods to actually have the SDC-UEBServers registered in them, did the trick for me...

      You can do a quick check by looking at the logs in AAI (AAI-ML logs) and MSO (ASDC-Controller logs under /var/log/ecomp/MSO/). See if they are both complaining of unable to communicate with UEBClusters. 

  32. deity990

    We try to demo vFWCL to understand ONAP close loop, but we can't update policy. 

    APPC mount succeed by changing honeycomb configuration of vPG. (https://docs.fd.io/hc2vpp/1.17.04-SNAPSHOT/release-notes-aggregator/user_honeycomb_and_ODL.html) 

    But, we have some problems with this demonstration. 

    Please, let me know check point to address this issue as detail as possible.  Thanks in advance. 


    1) Can't get policies after running update "update-vfw-op-policy.sh" 

    2) Can't find the "dcae-sch" row when distributing service in step 9. The service distribution status is below. 

    3) We have some exceptions in policy drools container. (policy@drools-2762157365-742s9:/var/log/onap/error.log) 

    [2018-03-05 03:31:26,661|WARN|CambriaConsumerImpl|UEB-source-APPC-LCM-WRITE] Topic not found: /events/APPC-LCM-WRITE/d1817e7c-d47b-44fc-af42-e98cc99304a6/0?timeout=15000&limit=100
    [2018-03-05 03:31:36,604|ERROR|InlineBusTopicSink|UEB-source-PDPD-CONFIGURATION] SingleThreadedUebTopicSource [getTopicCommInfrastructure()=UEB, toString()=SingleThreadedBusTopicSource [co
    nsumerGroup=fc3db8a4-5b66-4673-935f-67678bb3215a, consumerInstance=0, fetchTimeout=15000, fetchLimit=100, consumer=CambriaConsumerWrapper [fetchTimeout=15000], alive=true, locked=false, ue
    bThread=Thread[UEB-source-PDPD-CONFIGURATION,5,main], topicListeners=0, toString()=BusTopicBase [apiKey=, apiSecret=, useHttps=false, allowSelfSignedCerts=false, toString()=TopicBase [serv
    ers=[dmaap.onap-message-router], topic=PDPD-CONFIGURATION, #recentEvents=0, locked=false, #topicListeners=1]]]]: cannot fetch because of
    java.net.SocketTimeoutException: Read timed out

    at java.net.SocketInputStream.socketRead0(Native Method)
    at java.net.SocketInputStream.socketRead(SocketInputStream.java:116)
    at java.net.SocketInputStream.read(SocketInputStream.java:171)
    at java.net.SocketInputStream.read(SocketInputStream.java:141)
    at org.apache.http.impl.io.SessionInputBufferImpl.streamRead(SessionInputBufferImpl.java:139)
    at org.apache.http.impl.io.SessionInputBufferImpl.fillBuffer(SessionInputBufferImpl.java:155)
    at org.apache.http.impl.io.SessionInputBufferImpl.readLine(SessionInputBufferImpl.java:284)
    at org.apache.http.impl.conn.DefaultHttpResponseParser.parseHead(DefaultHttpResponseParser.java:140)
    at org.apache.http.impl.conn.DefaultHttpResponseParser.parseHead(DefaultHttpResponseParser.java:57)
    at org.apache.http.impl.io.AbstractMessageParser.parse(AbstractMessageParser.java:261)
    at org.apache.http.impl.DefaultBHttpClientConnection.receiveResponseHeader(DefaultBHttpClientConnection.java:165)
    at org.apache.http.impl.conn.CPoolProxy.receiveResponseHeader(CPoolProxy.java:167)
    at org.apache.http.protocol.HttpRequestExecutor.doReceiveResponse(HttpRequestExecutor.java:272)
    at org.apache.http.protocol.HttpRequestExecutor.execute(HttpRequestExecutor.java:124)
    at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:271)
    at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
    at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
    at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
    at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
    at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
    at com.att.nsa.apiClient.http.HttpClient.runCall(HttpClient.java:622)
    at com.att.nsa.apiClient.http.HttpClient.get(HttpClient.java:380)
    at com.att.nsa.apiClient.http.HttpClient.get(HttpClient.java:364)
    at com.att.nsa.cambria.client.impl.CambriaConsumerImpl.fetch(CambriaConsumerImpl.java:87)
    at com.att.nsa.cambria.client.impl.CambriaConsumerImpl.fetch(CambriaConsumerImpl.java:64)
    at org.onap.policy.drools.event.comm.bus.internal.BusConsumer$CambriaConsumerWrapper.fetch(BusConsumer.java:140)
    at org.onap.policy.drools.event.comm.bus.internal.SingleThreadedBusTopicSource.run(SingleThreadedBusTopicSource.java:245)
    at java.lang.Thread.run(Thread.java:748)
    [2018-03-05 03:31:36,604|WARN|HostSelector|UEB-source-PDPD-CONFIGURATION] All hosts were blacklisted; reverting to full set of hosts.
    [2018-03-05 03:31:38,422|ERROR|InlineBusTopicSink|UEB-source-APPC-CL] SingleThreadedUebTopicSource [getTopicCommInfrastructure()=UEB, toString()=SingleThreadedBusTopicSource [consumerGroup
    =45a1644a-6588-4526-9d95-96885bc41a81, consumerInstance=0, fetchTimeout=15000, fetchLimit=100, consumer=CambriaConsumerWrapper [fetchTimeout=15000], alive=true, locked=false, uebThread=Thr
    ead[UEB-source-APPC-CL,5,main], topicListeners=0, toString()=BusTopicBase [apiKey=, apiSecret=, useHttps=false, allowSelfSignedCerts=false, toString()=TopicBase [servers=[dmaap.onap-messag
    e-router], topic=APPC-CL, #recentEvents=0, locked=false, #topicListeners=1]]]]: cannot fetch because of
    java.net.SocketTimeoutException: Read timed out
    at java.net.SocketInputStream.socketRead0(Native Method)
    at java.net.SocketInputStream.socketRead(SocketInputStream.java:116)
    at java.net.SocketInputStream.read(SocketInputStream.java:171)
    at java.net.SocketInputStream.read(SocketInputStream.java:141)
    at org.apache.http.impl.io.SessionInputBufferImpl.streamRead(SessionInputBufferImpl.java:139)
    at org.apache.http.impl.io.SessionInputBufferImpl.fillBuffer(SessionInputBufferImpl.java:155)
    at org.apache.http.impl.io.SessionInputBufferImpl.readLine(SessionInputBufferImpl.java:284)
    at org.apache.http.impl.conn.DefaultHttpResponseParser.parseHead(DefaultHttpResponseParser.java:140)
    at org.apache.http.impl.conn.DefaultHttpResponseParser.parseHead(DefaultHttpResponseParser.java:57)
    at org.apache.http.impl.io.AbstractMessageParser.parse(AbstractMessageParser.java:261)
    at org.apache.http.impl.DefaultBHttpClientConnection.receiveResponseHeader(DefaultBHttpClientConnection.java:165)
    at org.apache.http.impl.conn.CPoolProxy.receiveResponseHeader(CPoolProxy.java:167)
    at org.apache.http.protocol.HttpRequestExecutor.doReceiveResponse(HttpRequestExecutor.java:272)
    at org.apache.http.protocol.HttpRequestExecutor.execute(HttpRequestExecutor.java:124)
    at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:271)
    at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
    at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
    at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
    at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)


    1. deity990

      Is there any check point to resolve this issue? Please, give me some comment! 

  33. Syed Atif Husain

    Rahul Sharma How can we have multiple users login simultaneously to the ONAP portal?

    If I login with designer, then demo user logs off or any other user.

    is it possible for multiple users to login simultaneously to the same onap portal in separate sessions? 

    1. Rahul Sharma

      Syed Atif Husain: Sorry for being super late. 

      I just tried this by opening another tab in the same mozilla firefox browser. One logged in as designer and other logged in as demo user; was able to work on these simultaneously.

  34. dhebeha mj

    Hi,

    I am not able to add vnf after creating service instance. The product family shows "undefined".I have attached the screenshot.


  35. Vijayalakshmi H

    Hi Alexis and Brian,

      Release: Amsterdam without dcae.

    Issue: MSO Authentication error while creating the VNF Module.

    I see that the mso_pass for the mso_id is not encrypted correctly.

    Verified using http://172.16.20.40:30223/networks/rest/cloud/encryptPassword/<tenant_password>

    Solution: Used the correct encrypted password using the above link and replaced the "mao_pass" in mso_docker.json under /dockerdata_nfs/onap/mso/

    Once this was done and bounced the MSO pod, the MSO Auth error was resolved.

    Can you check if this was a transient problem on MSO or something needs to be changed in MSO??

    Thanks

    Vijaya



    1. Suraj Kant Singh

      Hi,

      I was also using with no DCAE and stuck at the same location, Vijaya were you also getting the same error ? I assume yes, as after taking your solution. It seems my onap was able to communicate to the open stack. I am now getting a different error given below.


      MSO failure - see log below for details

      "requestId": "cb6d27c7-535a-4a17-879d-0f0a518354db",

      "requestType": "createInstance",

      "timestamp": undefined,

      "requestState": "FAILED",

      "requestStatus": "Received vfModuleException from VnfAdapter: category='INTERNAL' message='Exception during create VF 500 Internal Server Error: The server has either erred or is incapable of performing the requested operation., error.type=AuthorizationFailure, error.message=Authorization failed.' rolledBack='true'",

      "precentProgress": "100"


      After changing the mso_pass I started to get the following error now.


      MSO failure - see log below for details

      "requestId": "fa9c7331-175c-4d6e-b7a1-4d6b877f0e86",

      "requestType": "createInstance",

      "timestamp": undefined,

      "requestState": "FAILED",

      "requestStatus": "Received vfModuleException from VnfAdapter: category='INTERNAL' message='org.openecomp.mso.openstack.exceptions.MsoAdapterException: Authentication Failure: tenant=0e2b526db63b4657971241ca4c8ea0a1,cloud=DEFAULT_KEYSTONE' rolledBack='true'",

      "precentProgress": "100"

      1. Vijayalakshmi H

        HI, I was getting the auth error for my tenant access, same as for case 2 in your case. So I had to provide my tenant password in the encrypt algorithm and replace mso_pass.

        Your first error does not seem to be from MSO. You can confirm from others in community.

        You can use the following to encrypt the password.

        echo -n <tenant_password>| openssl aes-128-ecb -e -K aa3871669d893c7fb8abbcda31b88b4f -nosalt | xxd -c 256 -p

        In the curl command I provided in my post replace <mso_id> with <tenant_password>. Have corrected the same.

        -Vijaya

        1. Suraj Kant Singh

          Hi Vijaya,

          You are right my error is different than yours. I got into the error by replacing it with the wrong password.

          So you would have got the second error which you corrected by putting the right encryped mso_pass.

          Can someone help me resolve the error.

          "requestId": "cb6d27c7-535a-4a17-879d-0f0a518354db",

          "requestType": "createInstance",

          "timestamp": undefined,

          "requestState": "FAILED",

          "requestStatus": "Received vfModuleException from VnfAdapter: category='INTERNAL' message='Exception during create VF 500 Internal Server Error: The server has either erred or is incapable of performing the requested operation., error.type=AuthorizationFailure, error.message=Authorization failed.' rolledBack='true'",

          "precentProgress": "100"


          -Suraj

  36. Suraj Kant Singh

    Hi Brian,

    I am getting the following error when I am trying to launch the VNF.


    MSO failure - see log below for details


    "requestId": "3d512a98-ee0e-4e49-8a57-9a5bf7d85a37",

    "requestType": "createInstance",

    "timestamp": undefined,

    "requestState": "FAILED",

    "requestStatus": "Received vfModuleException from VnfAdapter: category='INTERNAL' message='Exception during create VF 500 Internal Server Error: The server has either erred or is incapable of performing the requested operation., error.type=AuthorizationFailure, error.message=Authorization failed.' rolledBack='true'",

    "precentProgress": "100"


    03/19/18 17:58:29 HTTP Status: Accepted (202)

    {

      "requestReferences": {

        "instanceId": "140f3000-3dbc-4048-be11-a1f7f4879d1c",

        "requestId": "3d512a98-ee0e-4e49-8a57-9a5bf7d85a37"

      }

    }

    Some points which I have tried to note.

    1. One thing to note is that my authentication with the keystone is successful.
    2. I am also getting a request in nova (OpenStack controller) that it cannot find the m1.medium flavor. Though I am able to launch the same using the horizon in the openstack. I see a re-request too in the nova with the flavor-id but its returning an error that it couldn't find m1.medium. I tried all the flavors but got the same result.

      b4657971241ca4c8ea0a1 - default default] 10.0.0.11 "GET /v2.1/flavors/m1.medium HTTP/1.1" status: 404 len: 436 time: 0.0178990

      2018-03-20 15:40:04.532 4206 INFO nova.osapi_compute.wsgi.server [req-1af5b8e5-7d46-4859-a572-0e570566572f 9a97a1cc98954b76a1a79c81d5365fba 0e2b526db63b4657971241ca4c8ea0a1 - default default] 10.0.0.11 "GET /v2.1/flavors HTTP/1.1" status: 200 len: 2873 time: 0.0178511

      2018-03-20 15:40:04.545 4206 INFO nova.osapi_compute.wsgi.server [req-e67b4a56-40d3-4321-9dc0-bd3e60f1d1c5 9a97a1cc98954b76a1a79c81d5365fba 0e2b526db63b4657971241ca4c8ea0a1 - default default] 10.0.0.11 "GET /v2.1/flavors/3 HTTP/1.1" status: 200 len: 691 time: 0.0117731

      2018-03-20 15:40:04.578 4206 INFO nova.api.openstack.wsgi [req-55dfca11-afaa-4da1-825b-072f7389047f 9a97a1cc98954b76a1a79c81d5365fba 0e2b526db63b4657971241ca4c8ea0a1 - default default] HTTP exception thrown: Flavor m1.medium could not be found.

    3. In my robot and mso pods I am getting un-resolved controller, which I am manually populating within the pods at /etc/hosts to make it successful. My pods are not able to communicate to the kube-dns probably  because of which the dns resolution is not going through.

    Any idea what could be wrong.

    -Suraj

  37. pranjal sharma

    Hello All,

    I was able to create/deploy the vFirewall package (packet generator, sinc and firewall vnf)on openstack cloud.
    But i couldnt able to login into any of vnf's vm.

    After when i debug i see i didnt change the default public key with our local public key pair in the PACKET GENERATOR curl jason UI.
    Now i am deploying the VNF again (same Vfirewall Package) on the openstack cloud, thought of giving our local public key in both pg and sinc jsoan api's.

    I have queries for clarifications :
    - how can we create a VNF package manually/dynamically using SDC component (so that we have leverage of get into the VNF vm and access the capability of the same)
    - And I want to implement the Service Function chaining for the deployed Vfirewall, please do let me know how to proceed with that.

    PS: I have installed/Deployed ONAP using rancher on kubernetes (on openstack cloud platform) without DACE component so i haven't had leverage of using the Closed Loop Automation.


    Thanks, 

    Pranjal

  38. Soumyarup Paul

    Hi All,


    While deploying the vFW service in step 10, I'm facing an error - System Failure


    03/28/18 17:34:41 HTTP Status: Unknown (501)
    {
    "serviceException": {
    "messageId": "SVC2000",
    "text": "Request Failed due to BPEL error with HTTP Status= %1 \n<html><head><title>Error</title></head><body>404 - Not Found</body></html>",
    "variables": [
    "501"
    ]
    }
    }


    All the pods are up and running. Any pointers on how to solve the issue?

    PFB - Screenshot of Deployment and Error.


    Regards,

    Soumyarup Paul

  39. Narayanan Krishnamurthy

    Dears,

            we are trying to use this demo to install our own Vfirewall product. we created VSP as mentioned but while validating our own package zip, we are getting validation errors. SDC says 2 validation errors but actual details of the validation errors are not available. I tried checking logs in all pods of ONAP-SDC namespace. Also this YAML while directly deployed in Openstack was able to create the stack. So not sure about the validation errors.


    Note: If I try to submit directly the VSP without checking for validations, I get following error :

    "Vendor software product with id <xxxx> and version 0.1 is invalid - does not contain service model".

    Please note I have already upload image of our firewall product in openstack and only provide image id as Yaml parameter to ONAP. Attached below is the package.zip file we are prepared based on vfw_SINC.zip. vfw_infyFortigate.zip


    Any help on this would be great.

  40. Radhika Kaslikar

    Hi,

    Thank you for this detailed page, I was able to launch instances of vFW, vSINK and vPG in openstack.

    I am trying to run the demo for vFWCL, and my next step is to run robot heatbridge.

    I have created the vnfs using vFWCL as the service type.

    But when I run robot heatbridge by using ./demo-k8s.sh heatbridge vFW_SINK_Module 9d16977c-0330-4f00-90e0-7a99a2fc5f23 vFWCL, I am getting error as "Dictionary does not contain key 'vFWCL'".

    I saw that /var/opt/OpenECOMP_ETE/robot/assets/service_mappings.py  in robot container does not have an entry for vFWCL, but it has entries for vFWSNK and vPKG.

    Do I need to use any latest script? Or do I need to run heatbridge by using vFW or vFWSNK in place of vFWCL?

    I am on Amsterdam release.

    Any help would be really appreciated.

    Thanks,

    Radhika.



    1. Pedro Barros

      hi Radhika Kaslik,

      did you find a solution for this problem??

      1. Radhika Kaslikar

        Hi Pedro Barros

        I ran the robot heatbridge separately for SINK and PG:

        ./demo-k8s.sh heatbridge vFW_SINK_Module <service instance id> vFWSNK

        ./demo-k8s.sh heatbridge vPKG_Module <service instance id> vPKG.

        Thanks and Regards,

        Radhika.




        1. Pedro Barros

          I, ok thanks. 

          And for appc mount??

          Your closed loop is working??


          Thanks

          1. Radhika Kaslikar

            I have not done APPC mount yet. I am facing one issue, that I am not able to ping my instances(of vSINK, vPG and vFW) or even ssh into them.

            On seeing the logs, it turns out that the eth interfaces on the instances are not up. 

            Any idea how we can bring up the eth interfaces, without sshing into the instance?


            Thanks,

            Radhika.


            1. Pedro Barros

              What's your environment?? Openstack ? 

              1. Radhika Kaslikar

                yes Its openstack Ocata.

                and I'm using ONAP Amsterdam.

            2. Badr Eddine Aouled Yahia

              I have faced the same problem.
              I guess that cloud-init package is used in your openstack to configure VMs.
              In fact cloud init scripts does not configure the VM interfaces automatically (except eth0).

              You should configure your interfaces in your heat templates by adding the following script after customization for each interface of each VFC (eth0 not included) under: user_data    template: |

                 #!/bin/bash

                 # Configure VM interfaces (only eth0 is configured by default)

                 # ethX -- ip_Y

                  sudo chmod +w /etc/network/interfaces.d/ethX.cfg

                  > /etc/network/interfaces.d/ethX.cfg

                  sudo echo "auto ethX

                   iface ethX inet static

                              address ip_Y

                              netmask 255.255.255.0 or 255.255.0.0

                              gateway 0.0.0.0" >> /etc/network/interfaces.d/ethX.cfg

                    fconfig ethX ip_Y/24 or /16

                    ifconfig ethX up

              This should work for ubuntu 14.04 images. If you use other images you should modify it.


              A.Y Badr Eddine

              1. Radhika Kaslikar

                Thank you, I will try this out.

  41. user-34041

    Hi,

    When I try to create VF module, I receive the below error 

    "{"serviceException":{"messageId":"SVC0002","text":"VnfType FW_serv/FW_SINC 0 and VF Module Model Name FwSinc..base_vfw..module-0 with version 1.0 not found in MSO Catalog DB"}}"

    But these are available in MSO DB. Any thoughts/inputs please ?

    1. Pedro Barros

      hi,

      i think the problem may be in the preload fase

  42. Badr Eddine Aouled Yahia

    Hi, I am trying to analyse the traffic between VID SO AAI when instantiating the vFW.

    The SO - AAI exchanges are encrypted. does anyone have an idea how to disable encryption or how to decrypt packets?

    A.Y Badr Eddine


  43. Pedro Barros

    hi all,

    i'm trying to run the vFW demo on beijing and when i try to deploy the VNF_Module after the preload i got this MSO error:

    Any ideas??


    thanks

    1. Barnali Sengupta

      Hi Pedro,

      I got this error with the master branch couple of days back. The openstack password that I was using for the SO was not encrypted. Once I encrypted it, that error was gone. 

      Thanks

      Barnali

      1. Pedro Barros

        Hi Barnali Sengupta,
        How i can encrypt my password? Its possible with a non admin openstack user??
        Thanks for your help

        1. Barnali Sengupta

          Hi Pedro,


          I used the following command to encrypt the password:

          echo -n <tenant_password>| openssl aes-128-ecb -e -K aa3871669d893c7fb8abbcda31b88b4f -nosalt | xxd -c 256 -p


          Thanks

          Barnali

          1. Pedro Barros

            thanks, it worked!


            about the preload fase, is it possible to preload the vnf parameters thru robot? 

            i'm getting this error:

            (i'm still able to preload it via API)


            br

            Pedro

            1. Barnali Sengupta

              Hi Pedro,

              I got the same error when I tried to run demo preload script. I am using the API to preload which works for me too. 

              Thanks

              Barnali

  44. Brian Freeman

    check the VnfAdatper log in SO to see the exact error being returned from Openstack. Looks like you might have an extra space or newline in your preload but that is just a guess.

    did ete.sh instantiate or ete-k8s.sh onap instantiate succeed ?

    1. Pedro Barros

      hi Brian,

      i will check that log asap.

      i didn't run ete-k8s.sh instantiate. i'm following the same steps for amsterdam in this page. (i'm able to do the demo-k8s.sh onap init)

      thanks

    2. Pedro Barros

      Hi Brian,

      here are the logs:

      • /var/log/onap/MSO/VnfAdapter/erroronap-so-df8d8d5b6-whppf.log:
      • ete-k8s.sh onap instantiate:

      thanks



  45. Pedro Barros

    hi all,

    Anyone is able to run the closed loop in beijing??

    Here, something in DCAE-AAI is failing. Please look at my VES_MEASUREMENT_OUTPUT and DCAE_CL_OUTPUT:

    if anyone has an idea about this, please feel free to help!


    BR

    Pedro

  46. Gülsüm Atıcı

    Dear Pedro,

    Does  your  problem  has  solved ?  Could  you  run the  vfirewall  closed  loop  demo   successfully ?

  47. user-f3dbe

    Hi All,

    Issue: MSO Authentication error while creating the VNF Module Same as discussed above)

    I generated encrypted password via "echo -n <tenant_password>| openssl aes-128-ecb -e -K aa3871669d893c7fb8abbcda31b88b4f -nosalt | xxd -c 256 -p"  & use the same in mso.json config file still i see MSO Auth failure error

    when I checked in " http://<host ip>:30223/networks/rest/cloud/encryptPassword/<tenant_password>  I see same encrypted password 

    Anyone can please confirm what could be the possible reason ?

    Thanks 

      

  48. Nikhil Bakshi

    Sorry for the newbie question. I am getting the following error at step 5.c.i. I guess there is no Certified node type == VF available in SDC. Is there some config step I am missing? I cannot import either the vFW_PG or vFW_SINC VSP. I am running Beijing release. FWIW, I installed ONAP on k8s without Rancher on 5 Ubuntu VMs in OpenStack. Rancher was crashing repeatedly for me. 

    2018-11-07T20:46:34.946Z        [qtp1208736537-36050517]        DEBUG   o.o.sdc.be.dao.jsongraph.TitanDao       serviceInstanceID=null  userId=cs0008   localAddr=10.244.2.21   uuid=c32f80e3-fa91-44ec-b2d9-1739527cd804       remoteAddr=10.244.2.28  Number of fetced nodes in graph for criteria : from type = NODE_TYPE and properties = {TOSCA_RESOURCE_NAME=org.openecomp.resource.abstract.nodes.VF, IS_HIGHEST_VERSION=true, STATE=CERTIFIED} is 0

    2018-11-07T20:46:34.946Z        [qtp1208736537-36050517]        DEBUG   o.o.s.b.m.j.o.ToscaOperationFacade      serviceInstanceID=null  userId=cs0008   localAddr=10.244.2.21   uuid=c32f80e3-fa91-44ec-b2d9-1739527cd804       remoteAddr=10.244.2.28  Failed to fetch NODE_TYPE with name org.openecomp.resource.abstract.nodes.VF. status=NOT_FOUND

    2018-11-07T20:46:34.946Z        [qtp1208736537-36050517]        DEBUG   o.o.s.b.c.i.g.GenericTypeBusinessLogic  serviceInstanceID=null  userId=cs0008   localAddr=10.244.2.21   uuid=c32f80e3-fa91-44ec-b2d9-1739527cd804       remoteAddr=10.244.2.28  Failed to fetch certified node type by tosca resource name org.openecomp.resource.abstract.nodes.VF

    2018-11-07T20:46:34.946Z        [qtp1208736537-36050517]        DEBUG   o.o.s.b.c.i.ComponentBusinessLogic      serviceInstanceID=null  userId=cs0008   localAddr=10.244.2.21   uuid=c32f80e3-fa91-44ec-b2d9-1739527cd804       remoteAddr=10.244.2.28  Failed to fetch latest generic type for component vFW_PG of type

    2018-11-07T20:46:34.947Z        [qtp1208736537-36050517]        WARN    o.o.s.e.AbstractSdncException   serviceInstanceID=null  userId=cs0008   localAddr=10.244.2.21   uuid=c32f80e3-fa91-44ec-b2d9-1739527cd804       remoteAddr=10.244.2.28  Received less parameters than expected for error with messageId SVC4660, expected: 2, actual: 1. Missing parameters are padded with null values.

    2018-11-07T20:46:34.947Z        [qtp1208736537-36050517]        WARN    o.o.s.b.c.impl.ResourceBusinessLogic    serviceInstanceID=null  userId=cs0008   localAddr=10.244.2.21   uuid=c32f80e3-fa91-44ec-b2d9-1739527cd804       remoteAddr=10.244.2.28  operation failed. do rollback


  49. Kamel Idir

    Hi Piyush, did you solve your issue?

    I'm getting the same Authentication error even though and have generated encrypted password.

    and changed the mso_pass in /etc/mso/config.d/cloud_config.json

    Anyone solved this issue in Beijing release?

    Thanks,


  50. Kamel Idir

    I solved my Authentication error message issue. I run a tcpdump in SO and I could see that SO is sending tenantId = onap and not the uuid.

    So after created the tenantName= onap in AAI, I should give the tenantId = <openstack onap tenant uuid>. Now I can see my vFW_Service stacks and VMs in Openstack.

  51. user-f3dbe

    Hi Kamel, In our case we are using AWS environment & our OpneStack & ONAP running in two different EC2 instance.

    We solved this issue by updating value.yaml file values in SO & ONAP with exact parameter specific our environment & then we run our ONAP script. Now we don't see auth issue.

  52. Barnali Sengupta

    Hi All,

    I am trying to run the vLB closed loop use case for Casablanca release. I am following the same steps that I had used for Beijing release which was working for me. I am getting the following error in the SO logs when I try to auto scale the DNS server using Closed loop:

    2019-02-07T19:38:42.504Z|a86f2539-1534-4ee9-aaa3-1b4967accd2e|http-nio-8080-exec-5|onap/so/infra/serviceInstantiation/v7/serviceInstances/af919601-1676-42e1-8099-60afc3bd1997/vnfs/f0077f50-6b7d-4909-b32d-4bc96c85b987/vfModules/scaleOut||||ERROR|400|Error parsing request: No valid modelName is specified|APIH_REQUEST_VALIDATION_ERROR


    For my named query, this is my request body:

    {
         "query-parameters": {
                 "named-query": {
                         "named-query-uuid": "4ff56a54-9e3f-46b7-a337-07a1d3c6b469"
                  }
          },
          "instance-filters": {
                "instance-filter": [
                         {
                            "vserver": {
                                   "vserver-name": "vloadbalancer-vnf"
                             }
                         }
                ]
           }
    }

    And this is my response:

    {
    "inventory-response-item": [
    {
    "vserver": {
    "vserver-id": "8d8d99a2-d1f3-4e9d-bd27-ab04c2c242ac",
    "vserver-name": "vloadbalancer-vnf",
    "vserver-name2": "vloadbalancer-vnf",
    "prov-status": "ACTIVE",
    "vserver-selflink": "https://iad.servers.api.rackspacecloud.com/v2/1039283/servers/8d8d99a2-d1f3-4e9d-bd27-ab04c2c242ac",
    "in-maint": false,
    "is-closed-loop-disabled": false,
    "resource-version": "1549562632047"
    },
    "extra-properties": {},
    "inventory-response-items": {
    "inventory-response-item": [
    {
    "model-name": "d4471be1-439e-496e-af43",
    "generic-vnf": {
    "vnf-id": "f0077f50-6b7d-4909-b32d-4bc96c85b987",
    "vnf-name": "vloadbalancer-vnf",
    "vnf-type": "demoVLB/d4471be1-439e-496e-af43 0",
    "service-id": "aa947b97-350d-4b47-883e-c6ed74114f80",
    "prov-status": "ACTIVE",
    "orchestration-status": "Active",
    "in-maint": false,
    "is-closed-loop-disabled": false,
    "resource-version": "1549562595108",
    "model-invariant-id": "d880ad1b-7f41-4cca-9eaa-15f0c17bf067",
    "model-version-id": "8ca2b54a-2400-4b8a-a42a-510c3fb5901c",
    "model-customization-id": "dd604cf3-a305-460c-8b52-ff0d98400e67",
    "nf-type": "",
    "nf-function": "",
    "nf-role": "",
    "nf-naming-code": ""
    },
    "extra-properties": {
    "extra-property": [
    {
    "property-name": "model.model-type",
    "property-value": "resource"
    },
    {
    "property-name": "model-ver.model-version",
    "property-value": "1.0"
    }
    ]
    },
    "inventory-response-items": {
    "inventory-response-item": [
    {
    "model-name": "demoVLB",
    "service-instance": {
    "service-instance-id": "af919601-1676-42e1-8099-60afc3bd1997",
    "service-instance-name": "vloadbalancer-service",
    "environment-context": "General_Revenue-Bearing",
    "workload-context": "Production",
    "model-invariant-id": "6902d208-82dc-4c3d-85aa-3a3637ea5870",
    "model-version-id": "7a809e18-d6a3-463e-adff-c8b89cd1cbd1",
    "resource-version": "1549559107894",
    "orchestration-status": "Active"
    },
    "extra-properties": {
    "extra-property": [
    {
    "property-name": "model.model-type",
    "property-value": "service"
    },
    {
    "property-name": "model-ver.model-version",
    "property-value": "1.0"
    }
    ]
    }
    },
    {
    "model-name": "D4471be1439e496eAf43..base_vlb..module-0",
    "vf-module": {
    "vf-module-id": "3ec466c2-bb18-47bc-b363-ce11b9a75d4f",
    "vf-module-name": "Vfmodule_vLB_BASE_190206_1",
    "heat-stack-id": "Vfmodule_vLB_BASE_190206_1/a83afbee-1003-43c9-a05c-b4709ffb64e9",
    "orchestration-status": "active",
    "is-base-vf-module": true,
    "automated-assignment": false,
    "resource-version": "1549560259019",
    "model-invariant-id": "dd1b50a6-1244-4e88-b010-b95629dd68cf",
    "model-version-id": "9e85ec8f-e6c0-400d-bf9d-be8f6d6965db",
    "model-customization-id": "25cc65f8-c867-4c68-b116-44176679e7cf",
    "module-index": 0
    },
    "extra-properties": {
    "extra-property": [
    {
    "property-name": "model.model-type",
    "property-value": "resource"
    },
    {
    "property-name": "model-ver.model-version",
    "property-value": "1"
    }
    ]
    }
    },
    {
    "model-name": "D4471be1439e496eAf43..dnsscaling..module-1",
    "vf-module": {
    "vf-module-id": "dummy_f0077f50-6b7d-4909-b32d-4bc96c85b987",
    "vf-module-name": "vDNS_vLB_BASE_190206_0",
    "is-base-vf-module": false,
    "automated-assignment": false,
    "resource-version": "1549563032238",
    "model-invariant-id": "df76eaaf-cbe2-42f8-88d1-07575d5227ed",
    "model-version-id": "1487ede4-6e4b-476e-a209-9659e7db85e2"
    },
    "extra-properties": {
    "extra-property": [
    {
    "property-name": "model.model-type",
    "property-value": "resource"
    },
    {
    "property-name": "model-ver.model-version",
    "property-value": "1"
    }
    ]
    }
    }
    ]
    }
    },
    {
    "tenant": {
    "tenant-id": "1039283",
    "tenant-name": "1039283",
    "resource-version": "1549557071115"
    },
    "extra-properties": {},
    "inventory-response-items": {
    "inventory-response-item": [
    {
    "cloud-region": {
    "cloud-owner": "CloudOwner",
    "cloud-region-id": "IAD",
    "cloud-type": "SharedNode",
    "owner-defined-type": "OwnerType",
    "cloud-region-version": "v1",
    "cloud-zone": "CloudZone",
    "resource-version": "1549557070752"
    },
    "extra-properties": {}
    }
    ]
    }
    }
    ]
    }
    }
    ]
    }


    I see model-name missing from the extra-property. I am not sure why. Please let me know if I am missing any step that might be required for this release.


    Thanks

    Barnali

  53. user-38ab3

    "Unable to complete Mount APPC during Close-loop"

    I am trying to run this closed loop use case for Beijing release. Deployed all the ONAP components and “ONAP Health” is good. Completed the vFW_Sink and vFW_PG instantiation (3 instance is up & running). While trying to complete the Close Loop steps, I've successfully completed step 1 & 2 of Close Loop.

    During the step3 i.e Mount APPC : Got step a and b but getting blank response from step 3.c and 3.d of the above mention “Running vFW demo – Close-loop” topic. All my onap components are running as separate PODs. What should the IP address and port to complete step 3.c and 3.d. Any help will be highly appreciable and thanks in advanced.

  54. Neeraj Mehta

    Hi All,

    I am new to ONAP, I am getting an error while creating virtual function as "Creation of VF Failed, Generic type was not found. Can anyone please help me out. Following are the steps followed, getting an error in the last step


    Login to the ONAP Portal as the designer. Select the SDC App.
    Click the “ONBOARD” tab near the top of the window.
    Create “VLM” if you have not created a "VLM" before.
    From the “ONBOARD” page, click create VLM.
    Enter name and description, then select create.
    Click on the plus button beside Entitlement Pool.
    Add Name and Manufacturing Reference Number, then click save.
    Click on the plus button beside License Key Group
    Add Name and select type, then click save.
    Click on the plus button beside Feature Groups.
    In the general tab, add name, Description and Part Number. Move to the Entitlements Pools tab, select the entitlement pool you just created and click the rightward arrow. Move to the License Key Group tab, select the license key group you just created and click the rightward arrow. Once these three things are done, click save.
    Click on the plus button beside License Agreement.
     Add Name and select License Term. Next move to the Feature Groups tab, select the Feature Group you just created and click the rightward arrow. Lastly click save.
    On the overview page, select submit in the top right corner of the screen.
    Click “CREATE NEW VSP” and fill in the required information. Make sure to select “Network Package” for the “ONBOARDING PROCEDURE” section. Then click “CREATE”. 
    Now you will need to click where it says “! Missing” underneath “License Agreement”. Simply select a “Licensing Version” and “License Agreement/Feature Group” from the drop downs.
    Next click the “Overview” tab on the left hand side. Then press “Select File” in the “SOFTWARE PRODUCT ATTACHMENTS” section and browse to your prepared zip or csar file.Click “PROCEED TO VALIDATION” once you can see your added files. You can safely ignore the warning that come up at this step.
    Now click “Submit”. Then click “ONBOARD” in the top left. Hover your mouse over the small grey triangle that is just to the right of the “ONBOARD” tab and select “HOME”.
    Hover over the “IMPORT” square and select “Import VSP”. Find your VSP click the drop down arrow beside it and then press the “Import VSP” icon at the far right of the line that drops down. As shown here:  
    Now click “Create” found in the top right hand corner of the window you are brought to. This will create your VF. (Now follow the steps from step 2 of the “Creating a VF and Testing it” section below. Then follow the “Creating a Service and Testing/Distributing it” section.)  Error : Creation of VF failed with Generic Type not found 


    Thanks

    Neeraj

    1. Brian Freeman

      how did you create the zip file ? if you are using the demo repository for vFW - it should have three files the MANIFEST.json , base_vfw.env and base_vfw.yaml and nothing else in the zip.


      ./ete-k8s.sh onap instantiateVFW or ./ete-k8s.sh onap instiateVFWCL should run the same steps and the logs on http://<k8host_ip>:30209/logs/  (test:test) would show you the steps and if there are problems from the standard regression test of an installation

  55. Barnali Sengupta

    Hi,

    I am using the Guilin version of ONAP for the firewall closed loop use case. I was able to successfully create the firewall, sink and packet-generator VMs. The packet generator is sending the packets, but the sink doesn't show the data coming in at port 667. The darkstat graphs are empty. The firewall doesn't seem to be getting the packets at the interface eth1. Any idea what I am missing here?

    Thanks

    Barnali