Makes sense so a script/postman that could create the policy with the model-invarient-id – in the future it could be automatic through CLAMP but for now robot and a POSTMAN/curl (POSTMAN/curl for testing today). We could even have the curl script be impelmented a simple perl/python script that queries AAI based on vnf-ame and creates the policy with the model-invariant-id if it doesnt already exist .
Brian From: DRAGOSH, PAM Sent: Thursday, November 02, 2017 11:10 AM To: FREEMAN, BRIAN D <[email protected]>; HERNANDEZ-HERRERO, JORGE <[email protected]>; Yunxia Chen <[email protected]>; onap-discuss <[email protected]> Subject: Re: [onap-discuss] [integration][policy]Need help from Policy now Yes – it’s from the onboarding point of view, no instances have been created yet. In fact, that is what policy must do during runtime is find the matching instance vnf-id. But to create the op policy during design time we only know resourceID. resourceID in the SDC Catalog maps to model-invariant-id in A&AI. I hope this is clearing things up for folks. This is a scenario that may happen repeatedly in the future. Pam From: "FREEMAN, BRIAN D" <[email protected]<mailto:[email protected]>> Date: Thursday, November 2, 2017 at 11:04 AM To: "DRAGOSH, PAMELA L (PAM)" <[email protected]<mailto:[email protected]>>, "HERNANDEZ-HERRERO, JORGE" <[email protected]<mailto:[email protected]>>, Yunxia Chen <[email protected]<mailto:[email protected]>>, onap-discuss <[email protected]<mailto:[email protected]>> Subject: RE: [onap-discuss] [integration][policy]Need help from Policy now Agree – we should create the operational policy to match the resourceID for the VNF deployed. Seems like the policy should be the same for all resources of the same type rather than a specific instance but I may be mis-undertanding which resourceID we need to label the policy with. Brian From: DRAGOSH, PAM Sent: Thursday, November 02, 2017 10:49 AM To: HERNANDEZ-HERRERO, JORGE <[email protected]<mailto:[email protected]>>; FREEMAN, BRIAN D <[email protected]<mailto:[email protected]>>; Yunxia Chen <[email protected]<mailto:[email protected]>>; onap-discuss <[email protected]<mailto:[email protected]>> Subject: Re: [onap-discuss] [integration][policy]Need help from Policy now No we should not modify the A&AI data. That will never work long-term. The operational policy has to be created using whichever value was setup in A&AI. This cannot be known ahead of time. Pam From: "HERNANDEZ-HERRERO, JORGE" <[email protected]<mailto:[email protected]>> Date: Thursday, November 2, 2017 at 10:28 AM To: "DRAGOSH, PAMELA L (PAM)" <[email protected]<mailto:[email protected]>>, "FREEMAN, BRIAN D" <[email protected]<mailto:[email protected]>>, Yunxia Chen <[email protected]<mailto:[email protected]>>, onap-discuss <[email protected]<mailto:[email protected]>> Subject: RE: [onap-discuss] [integration][policy]Need help from Policy now It seems there is a mismatch between the resourceID in the vFW operational policy, and the AAI named query response .. (see below), we can modify either aai data or the operational policy and run the test again later in our testing session.. Eace933104d443b496b8.nodes.heat.vpg (op policy) Vs 5f492678-c2e3-4385-a16a-1e781756ce1c (model-invariant-id in response) { "inventory-response-item": [ { "model-name": "374fbfc3-b7fd-4f00-9792", "generic-vnf": { "vnf-id": "6e3b0069-a760-4ee4-851d-b80fe2dd8562", "vnf-name": "demovnfVFW110103", "vnf-type": "demoVFW/374fbfc3-b7fd-4f00-9792 0", "service-id": "0b4fa6bc-44de-4d3f-a8c3-c5950b78e5e9", "prov-status": "PREPROV", "orchestration-status": "Created", "in-maint": false, "is-closed-loop-disabled": false, "resource-version": "1509590351043", "model-invariant-id": "5f492678-c2e3-4385-a16a-1e781756ce1c", "model-version-id": "fead6cbe-a374-49ef-9245-4a2bd18d8d7b", "model-customization-id": "977921fb-8e6f-427d-9a0a-2b98bbfdb8c7", "nf-type": "", "nf-function": "", "nf-role": "", "nf-naming-code": "" }, "extra-properties": {}, "inventory-response-items": { "inventory-response-item": [ { "model-name": "demoVFW", "service-instance": { "service-instance-id": "21da1452-e317-4024-a150-e4b4585beb8f", "service-instance-name": "demosiVFW110103", "model-invariant-id": "37e0d462-7415-49a5-a7bc-8ee7795a1ea7", "model-version-id": "58d9c25e-7294-46aa-a806-8360a6b92e93", "resource-version": "1509590302522" }, "extra-properties": {} } ] } } ] } From: DRAGOSH, PAM Sent: Thursday, November 02, 2017 8:26 AM To: FREEMAN, BRIAN D <[email protected]<mailto:[email protected]>>; Yunxia Chen <[email protected]<mailto:[email protected]>>; HERNANDEZ-HERRERO, JORGE <[email protected]<mailto:[email protected]>>; onap-discuss <[email protected]<mailto:[email protected]>> Subject: Re: [onap-discuss] [integration][policy]Need help from Policy now Ok thanks Brian I created INT-317. So let’s let Jorge and perhaps Daniel determine there wasn’t any bug on our end regarding vnf-name use. Then we can officially close the DCAEGEN2-175 ticket. Thanks Pam From: "FREEMAN, BRIAN D" <[email protected]<mailto:[email protected]>> Date: Thursday, November 2, 2017 at 8:46 AM To: "DRAGOSH, PAMELA L (PAM)" <[email protected]<mailto:[email protected]>>, Yunxia Chen <[email protected]<mailto:[email protected]>>, "HERNANDEZ-HERRERO, JORGE" <[email protected]<mailto:[email protected]>>, onap-discuss <[email protected]<mailto:[email protected]>> Subject: RE: [onap-discuss] [integration][policy]Need help from Policy now Pam, You should create a ticket – can you put in the ticket the example API to call to create the operational policy. I assume it is a REST API call with some basic template that we have to customize the name of the resourceID after we instantiate the VNF ? So POSTMAN or CURL caould be used to call this API. Brian From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of DRAGOSH, PAM Sent: Thursday, November 02, 2017 8:29 AM To: Yunxia Chen <[email protected]<mailto:[email protected]>>; HERNANDEZ-HERRERO, JORGE <[email protected]<mailto:[email protected]>>; onap-discuss <[email protected]<mailto:[email protected]>> Subject: Re: [onap-discuss] [integration][policy]Need help from Policy now ***Security Advisory: This Message Originated Outside of AT&T *** Reference http://cso.att.com/EmailSecurity/IDSP.html for more information. Helen, That is not necessarily true. We will look at the logs to be sure but my suspicion is that the call to A&AI to find the vnf-id for the VPG fails because the resourceID in the Operational Policy is incorrect. Please recall that the event comes from a different vnf than what an action will be performed on. As I have mentioned before, the Operational Policy for vFW that is pushed from the Policy docker image isn’t up-to-date and we cannot possibly predict what the resourceID is for the ModifyConfig call. We have been asking for help from the Integration team for a few weeks on what the value is. What does the onboarded vFW service look like in the catalog? Are they pre-generated? If not, then without CLAMP in the picture then the Integration team or Robot scripts need to re-create the Operational Policy. Should I open a ticket on the Integration team in order to get this help prioritized? Thanks, Pam From: Yunxia Chen <[email protected]<mailto:[email protected]>> Date: Wednesday, November 1, 2017 at 11:06 PM To: "HERNANDEZ-HERRERO, JORGE" <[email protected]<mailto:[email protected]>>, "DRAGOSH, PAMELA L (PAM)" <[email protected]<mailto:[email protected]>>, onap-discuss <[email protected]<mailto:[email protected]>> Subject: Re: [onap-discuss] [integration][policy]Need help from Policy now From the following message inside Policy’s log file: "policyScope": "com", "policyName": "com.Config_BRMS_Param_BRMSParamvFirewall.EVENT.MANAGER", "policyVersion": "1", "notification": "FINAL: FAILURE", "message": "Target vnf-id could not be found", "notificationTime": "2017-11-02 03:03:07.643000+00:00", "history": [] It looks vnf-id, but DCAE gives it vnf-name. Regards, Helen Chen From: <[email protected]<mailto:[email protected]>> on behalf of Helen Chen 00725961 <[email protected]<mailto:[email protected]>> Date: Wednesday, November 1, 2017 at 7:54 PM To: "HERNANDEZ-HERRERO, JORGE" <[email protected]<mailto:[email protected]>>, "DRAGOSH, PAM" <[email protected]<mailto:[email protected]>>, onap-discuss <[email protected]<mailto:[email protected]>> Subject: [onap-discuss] [integration][policy]Need help from Policy now We are at bridge zoom: 44 6666 8888, testing the closed loop with DCAE and Multicloud. Need help from Policy team. Regards, Helen Chen
_______________________________________________ onap-discuss mailing list [email protected] https://lists.onap.org/mailman/listinfo/onap-discuss
