Hi Frank,
You can use the following Dublin workaround to bring up Policy portal UI.
This one disables policy console web app to portal authentication as per
the ONAP document
https://docs.onap.org/en/latest/submodules/policy/engine.git/docs/platform/cookbook.html
.
Hope this helps you to continue with Policy portal access.
*# Dublin policy portal workaround steps*
export POLICY_PAP_UI_POD_NAME=$(kubectl get pods -n onap | grep policy-pap
| grep -v 'policy-policy-pap' | awk '{print $1}')
kubectl exec -n onap ${POLICY_PAP_UI_POD_NAME} -c pap -it -- /bin/bash
# Execute the following commands with the PAP Container
# This will fix the policy to portal authentication issue.
sed -i "s/^role_access_centralized.*$/#role_access_centralized=remote/g"
/opt/app/policy/servers/console/webapps/onap/WEB-INF/classes/portal.properties
export POLICY_HOME=/opt/app/policy
export KEYSTORE_PASSWD=Pol1cy_0nap
/opt/app/policy/etc/init.d/pap stop
/opt/app/policy/etc/init.d/console stop
export POLICY_HOME=/opt/app/policy
export KEYSTORE_PASSWD=Pol1cy_0nap
/opt/app/policy/bin/policy.sh start
/opt/app/policy/bin/policy.sh status
Regards
Vivek
On Sun, Apr 19, 2020 at 11:28 AM Vivekanandan Muthukrishnan via
lists.onap.org <[email protected]> wrote:
> Hi Pamela,
>
> Thanks for all the resources and we will experiment as per the Wiki page.
>
> Regards
> Vivek
>
> On Fri, Apr 17, 2020 at 11:05 PM DRAGOSH, PAMELA L (PAM) <
> [email protected]> wrote:
>
>> Hi Vivek,
>>
>>
>>
>> You can try this process that we are documenting for Frankfurt:
>>
>>
>> https://onap.readthedocs.io/en/latest/submodules/policy/parent.git/docs/installation/oom.html#overriding-certificate-stores
>>
>>
>>
>> You may have to tweak to get it to work with Dublin artifacts.
>>
>>
>>
>> The certtool.sh is a very old script from early on, may not be usable.
>>
>>
>>
>> Some time soon in the next few weeks we will be upgrading our El Alto
>> certificates, when we get some free cycles from testing Frankfurt.
>>
>>
>>
>> I Hope that helps.
>>
>>
>>
>> Pam
>>
>>
>>
>> *From: *<[email protected]> on behalf of Vivekanandan
>> Muthukrishnan <[email protected]>
>> *Reply-To: *"[email protected]" <[email protected]>,
>> "[email protected]" <[email protected]>
>> *Date: *Friday, April 17, 2020 at 11:35 AM
>> *To: *"[email protected]" <[email protected]>,
>> "DRAGOSH, PAMELA L (PAM)" <[email protected]>
>> *Cc: *"[email protected]" <[email protected]>
>> *Subject: *Re: [onap-discuss] Dublin version Policy module certificate
>> expired
>>
>>
>>
>> Hi Pamela,
>>
>>
>>
>> Could you please share the steps to *certtool.sh,* it has the option to
>> export and import certificates.
>>
>>
>>
>> We would appreciate any document to use this command line tool.
>>
>>
>>
>> Regards
>>
>> Vivek
>>
>>
>>
>> On Fri, Apr 17, 2020 at 6:11 PM Pamela Dragosh <[email protected]>
>> wrote:
>>
>> You can use the keystore and truststore from El Alto, or upgrade to it.
>> We will not be supporting Dublin.
>>
>>
>>
>> Pam
>>
>>
>>
>> *From: *<[email protected]> on behalf of frank yu <
>> [email protected]>
>> *Reply-To: *"[email protected]" <[email protected]>,
>> "[email protected]" <[email protected]>
>> *Date: *Friday, April 17, 2020 at 12:58 AM
>> *To: *onap-discuss <[email protected]>
>> *Subject: *[onap-discuss] Dublin version Policy module certificate
>> expired
>>
>>
>>
>> onap-discuss :
>>
>>
>>
>> Dublin version Policy module certificate expired two days ago
>> ，
>>
>> I found certtool.sh in /opt/app/policy/bin directory ，
>>
>> how to use this script to update certificate ， what's the keystore
>> password ?
>>
>>
>>
>>
>>
>>
>>
>> 2020-04-17 12:48:56
>> ------------------------------
>>
>> 杭州东方通信软件技术有限公司
>>
>> 虞驰 [email protected]
>>
>>
>
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#20741): https://lists.onap.org/g/onap-discuss/message/20741
Mute This Topic: https://lists.onap.org/mt/73071656/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
