onap-discuss : Hi Vivek, thank you for your help , it works . I'm going to rebuild image to solve this problem .
2020-04-21 13:00:49 杭州东方通信软件技术有限公司 虞驰 [email protected] From: Vivekanandan Muthukrishnan Date: 2020-04-19 17:41 To: onap-discuss; Vivekanandan Muthukrishnan CC: DRAGOSH, PAMELA L (PAM); [email protected] Subject: Re: [onap-discuss] Dublin version Policy module certificate expired Hi Frank, You can use the following Dublin workaround to bring up Policy portal UI. This one disables policy console web app to portal authentication as per the ONAP document https://docs.onap.org/en/latest/submodules/policy/engine.git/docs/platform/cookbook.html. Hope this helps you to continue with Policy portal access. # Dublin policy portal workaround steps export POLICY_PAP_UI_POD_NAME=$(kubectl get pods -n onap | grep policy-pap | grep -v 'policy-policy-pap' | awk '{print $1}') kubectl exec -n onap ${POLICY_PAP_UI_POD_NAME} -c pap -it -- /bin/bash # Execute the following commands with the PAP Container # This will fix the policy to portal authentication issue. sed -i "s/^role_access_centralized.*$/#role_access_centralized=remote/g" /opt/app/policy/servers/console/webapps/onap/WEB-INF/classes/portal.properties export POLICY_HOME=/opt/app/policy export KEYSTORE_PASSWD=Pol1cy_0nap /opt/app/policy/etc/init.d/pap stop /opt/app/policy/etc/init.d/console stop export POLICY_HOME=/opt/app/policy export KEYSTORE_PASSWD=Pol1cy_0nap /opt/app/policy/bin/policy.sh start /opt/app/policy/bin/policy.sh status Regards Vivek On Sun, Apr 19, 2020 at 11:28 AM Vivekanandan Muthukrishnan via lists.onap.org <[email protected]> wrote: Hi Pamela, Thanks for all the resources and we will experiment as per the Wiki page. Regards Vivek On Fri, Apr 17, 2020 at 11:05 PM DRAGOSH, PAMELA L (PAM) <[email protected]> wrote: Hi Vivek, You can try this process that we are documenting for Frankfurt: https://onap.readthedocs.io/en/latest/submodules/policy/parent.git/docs/installation/oom.html#overriding-certificate-stores You may have to tweak to get it to work with Dublin artifacts. The certtool.sh is a very old script from early on, may not be usable. Some time soon in the next few weeks we will be upgrading our El Alto certificates, when we get some free cycles from testing Frankfurt. I Hope that helps. Pam From: <[email protected]> on behalf of Vivekanandan Muthukrishnan <[email protected]> Reply-To: "[email protected]" <[email protected]>, "[email protected]" <[email protected]> Date: Friday, April 17, 2020 at 11:35 AM To: "[email protected]" <[email protected]>, "DRAGOSH, PAMELA L (PAM)" <[email protected]> Cc: "[email protected]" <[email protected]> Subject: Re: [onap-discuss] Dublin version Policy module certificate expired Hi Pamela, Could you please share the steps to certtool.sh, it has the option to export and import certificates. We would appreciate any document to use this command line tool. Regards Vivek On Fri, Apr 17, 2020 at 6:11 PM Pamela Dragosh <[email protected]> wrote: You can use the keystore and truststore from El Alto, or upgrade to it. We will not be supporting Dublin. Pam From: <[email protected]> on behalf of frank yu <[email protected]> Reply-To: "[email protected]" <[email protected]>, "[email protected]" <[email protected]> Date: Friday, April 17, 2020 at 12:58 AM To: onap-discuss <[email protected]> Subject: [onap-discuss] Dublin version Policy module certificate expired onap-discuss : Dublin version Policy module certificate expired two days ago ， I found certtool.sh in /opt/app/policy/bin directory ， how to use this script to update certificate ， what's the keystore password ? 2020-04-17 12:48:56 杭州东方通信软件技术有限公司 虞驰 [email protected] -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#20773): https://lists.onap.org/g/onap-discuss/message/20773 Mute This Topic: https://lists.onap.org/mt/73071656/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
