ingrammicro / cio Goto Github PK

IMCO agent and CLI tool

License: Apache License 2.0

Go 99.88% Gherkin 0.05% Shell 0.07%

cio's Introduction

IMCO CLI / Go Library

Ingram Micro Cloud Orchestrator Command Line Interface (aka IMCO CLI) allows you to interact with IMCO features, and build your own scripts calling IMCO's API.

If you are already using IMCO CLI, and only want to obtain the latest version, download IMCO CLI from https://github.com/ingrammicro/cio/releases/latest

NOTE: IMCO CLI is named as cio in terms of the binary and executable.

If you want to build the CLI using the source code, please, take into account that the master branch is the adequate one to be used for latest stable and published version of IMCO CLI.

Setup
Usage
Contribute

Setup

Pre-requisites

Before setting up the CLI, you will need a IMCO account, and an API key associated with your account.

NOTE: The API Endpoint server value depends on the targeted IMCO platform domain: https://clients.{IMCO_DOMAIN}

Once your account has been provisioned, we recommend you to follow the configuration guide indicated below: manual setup

Manual Setup

Use IMCO's Web UI to navigate the menus to Settings > User Details and scroll down until you find the API Key button.

Pressing Create and download a new API key will download a compressed file that contains the necessary files to authenticate with IMCO API and manage your infrastructure. Keep it safe.

Extract the contents with your zip compressor of choice and continue using the setup guide for your O.S.

Linux and OSX

Configuration

IMCO CLI configuration will usually be located in your personal folder under .concerto. If you are using root, CLI will look for configuration files under /etc/cio. We will assume that you are not root, so create the folder and drop the certificates to this location:

$ mkdir -p ~/.concerto/ssl/
$ unzip -x api-key.zip -d ~/.concerto/ssl

IMCO CLI expects a configuration file to be present containing:

API Endpoint
Log file
Log level
Certificate location

This command will generate the file ~/.concerto/client.xml with suitable contents for most users:

$ cat <<EOF > ~/.concerto/client.xml
<concerto version="1.0" server="https://clients.{IMCO_DOMAIN}/v3/" log_file="/var/log/concerto-client.log" log_level="info">
 <ssl cert="$HOME/.concerto/ssl/cert.crt" key="$HOME/.concerto/ssl/private/cert.key" server_ca="$HOME/.concerto/ssl/ca_cert.pem" />
</concerto>
EOF

NOTE: Please, remember to replace {IMCO_DOMAIN} with the right domain of your IMCO platform. At the same time, ensure to set the current API version: v3

We should have in your .concerto folder this structure:

$HOME/.concerto
├── client.xml
└── ssl
    ├── ca_cert.pem
    ├── cert.crt
    └── private
        └── cert.key

Binaries

Download linux binaries for Linux or for OSX from https://github.com/ingrammicro/cio/releases/latest and place it in your path.

NOTE: Please, remember to replace {LATEST_RELEASE} with the right tagged release.

Linux:

$ sudo curl -o /usr/local/bin/cio https://github.com/ingrammicro/cio/releases/download/{LATEST_RELEASE}/cio.amd64.linux
$ sudo chmod +x /usr/local/bin/cio

OSX:

$ sudo curl -o /usr/local/bin/cio https://github.com/ingrammicro/cio/releases/download/{LATEST_RELEASE}/cio.amd64.darwin
$ sudo chmod +x /usr/local/bin/cio

To test the binary execute cio without parameters

$ cio
NAME:
   cio - Manages communication between Host and IMCO Platform

USAGE:
   cio [global options] command [command options] [arguments...]

AUTHOR:
   Ingram Micro <https://github.com/ingrammicro/cio>

COMMANDS:
   blueprint, bl                   Manages blueprint commands for scripts, cookbook versions and templates
   brownfield, bf                  Manages brownfield resources, allowing users to discover and import servers, VPCs, floating IPs, volumes and policies from different cloud accounts into the system.
   cloud, clo                      Manages cloud related commands for server arrays, servers, generic images, ssh profiles, cloud providers, realms, server plans and infrastructure archives
   cloud-applications, ca          Manages cloud application templates -CATs- and deployments
   cloud-specific-extensions, cse  Manages cloud specific extensions -CSEs- templates and deployments
   events, ev                      Events allow the user to track their actions and the state of their servers
   kubernetes, k8s                 Manages kubernetes commands for clusters and node pools
   labels, lbl                     Provides information about labels
   network, net                    Manages network related commands
   settings, set                   Provides settings for cloud accounts and policies
   storage, st                     Manages storage commands for plans and volumes
   wizard, wiz                     Manages wizard related commands for apps, locations, cloud providers, server plans
...

To test that certificates are valid, and that we can communicate with IMCO server, obtain the list of cloud providers at your IMCO account using this command

$ cio cloud cloud-providers list
ID                         NAME                  
5da72f97588464053ffcb855   AWS                  
5da72f98588464053ffcb857   Microsoft Azure

Environment variables

When using IMCO CLI you can override configuration parameters using the following environment variables:

Env. Variable	Description
`CONCERTO_CA_CERT`	CA certificate used with the API endpoint.
`CONCERTO_CLIENT_CERT`	Client certificate used with the API endpoint.
`CONCERTO_CLIENT_KEY`	Client key used with the API endpoint.
`CONCERTO_CONFIG`	Config file to be read by IMCO CLI.
`CONCERTO_ENDPOINT`	IMCO API endpoint.
`CONCERTO_URL`	IMCO web site URL.

Troubleshooting

If you got an error executing IMCO CLI:

execute which cio to make sure that the binary is installed.
execute ls -l /path/to/cio with the output from the previous command, and check that you have execute permissions.
execute $PATH and search for the path where cio is installed. If cio isn't in the path, move it to a $PATH location.
check that your internet connection can reach clients.{IMCO_DOMAIN}.
make sure that your firewall lets you access to https://clients.{IMCO_DOMAIN}.
check that client.xml is pointing to the correct certificates' location.
if cio executes but only shows server commands, you are probably trying to use cio from a commissioned server, and the configuration is being read from /etc/cio. If that's the case, you should leave cio configuration untouched so that server commands are available for our remote management.

Usage

We include the most common use cases here. If you feel there is a missing a use case here, open a GitHub issue https://github.com/ingrammicro/cio/issues/new.

The resources can be organized using labels, a many-to-many relationship between labels and resources, based on User criteria and needs.

Wizard

The Wizard command for IMCO CLI is the command line version of our Quick launch server in the IMCO's Web UI.

Wizard is the quickest way to install a well known stack in a cloud server. You can get an idea of what the wizard does using the command cio wizard without further subcommands:

$ cio wizard
NAME:
    - Manages wizard related commands for apps, locations, cloud providers, server plans

USAGE:
    command [command options] [arguments...]

COMMANDS:
    apps             Provides information about apps
    cloud-providers  Provides information about cloud providers
    locations        Provides information about locations
    server-plans     Provides information about server plans
...

IMCO CLI Wizard lets you select the application layer, the location, the cloud provider account for that location, and finally the hostname. IMCO CLI Wizard takes care of the details.

Wizard Use Case

Let's type cio wizard apps list to check what applications we can instantiate as cloud servers using IMCO CLI wizard.

$ cio wizard apps list
ID                         NAME                 FLAVOUR_REQUIREMENTS                           GENERIC_IMAGE_ID           
6033af5b63648203278f6778   MongoDB              [architecture:x86_64 memory:2048]              5da72f9c588464053ffcb876   
6033af8e6364820345e2499a   Ubuntu 20.04         [architecture:x86_64]                          5f3281737e8b380531f1a5c0   
6033afbf636482036209736c   Wordpress            [architecture:x86_64 memory:2048]              5da72f9c588464053ffcb876   
6033b2da63648203b817d688   Ubuntu 18.04         [architecture:x86_64]                          5da72f9c588464053ffcb876   
6033b709f034c3004ef62cdb   Windows 2019         [architecture:x86_64 memory:4096 storage:40]   5e2491f92a9c6405447637b1   
6033b785f034c3006ad10d2b   Docker               [architecture:x86_64 memory:2048]              5da72f9c588464053ffcb876   
6033b7bdf034c30078315671   Joomla               [architecture:x86_64 memory:2048]              5da72f9c588464053ffcb876   
60d97b189c1004006e2b8de9   Ubuntu 18.04 arm64   [architecture:arm64 memory:1024]               609520351c93140124bac1fb   
60d97b2d9c10040097e2b6a5   Ubuntu 20.04 arm64   [architecture:arm64 memory:1024]               609520351c93140124bac1fc   
60ded3a6038daf008ab1d38b   Magento              [architecture:x86_64 memory:2048]              5da72f9c588464053ffcb876   
618b8790862c1b00d1b550fe   Red Hat 8 arm64      [architecture:arm64 memory:4096 storage:40]    609520351c93140124bac1fe   
618b8798862c1b00e6963928   Red Hat 8            [architecture:x86_64 memory:4096 storage:40]   609520351c93140124bac1fd

You can choose whatever application/stack is fine for your purpose, we choose Wordpress. Take note of the application identifier, 6033afbf636482036209736c for Wordpress.

We will also need the location where we want our server to be instantiated. Execute cio wizard locations list to get the possible locations and its identifier.

$ cio wizard locations list
ID                         NAME            
5da72f9b588464053ffcb870   North America   
5da72f9b588464053ffcb871   Europe          
5da72f9b588464053ffcb872   Asia Pacific    
5da72f9b588464053ffcb873   South America   
609520351c93140124bac204   Africa          
609520351c93140124bac205   Middle East

Take note of your preferred location. We will use 5da72f9b588464053ffcb870 for North America.

When using IMCO's Web UI, the wizard may take care of filtering appropriate cloud accounts for that provider and location. However, by using the CLI, it is the user's responsibility to choose a provider cloud account for that application/stack and location; and a server plan capable of instantiating the stack in that location. To show all possible cloud providers execute this command:

$ cio wizard cloud-providers list --app-id 6033afbf636482036209736c --location-id 5da72f9b588464053ffcb870
ID                         NAME                  
5da72f97588464053ffcb855   AWS                   
5da72f98588464053ffcb857   Microsoft Azure

It's necessary to retrieve the adequate Cloud Account ID for Microsoft Azure Cloud Provider, in our case 620a84f81376db00068f9598. We will choose Microsoft Azure, whose ID is 5da72f98588464053ffcb857:

$ cio settings cloud-accounts list
ID                         NAME              SUBSCRIPTION_ID            REMOTE_ID      CLOUD_PROVIDER_ID          CLOUD_PROVIDER_NAME   STATE          
620a84f81376db00068f9598   Microsoft Azure   620a84853a974d001aa32609                  5da72f98588464053ffcb857   Microsoft Azure       idle           
620a85091376db00068f959a   AWS               620a84853a974d001aa3260b                  5da72f97588464053ffcb855   AWS                   idle

Now that we have all the data that we need, commission the server:

$ cio wizard apps deploy --id 6033afbf636482036209736c --location-id 5da72f9b588464053ffcb870 --cloud-account-id 620a84f81376db00068f9598 --hostname wpnode1
ID:                    620b61d27f8081000a9783b4
NAME:                  wpnode1
FQDN:                  
STATE:                 commissioning
PUBLIC_IP:             
PRIVATE_IP:            
TEMPLATE_ID:           620a8b5c3a974d0008a3260d
SERVER_PLAN_ID:        5da7301fa126060529b47c5e
CLOUD_ACCOUNT_ID:      620a84f81376db00068f9598
SSH_PROFILE_ID:        
SSH_PROFILE_IDS:       
BROWNFIELD_STATE:      Pure
FIREWALL_PROFILE_ID:   620a8b5d3a974d0008a32611
SERVER_ARRAY_ID:       
SUBNET_ID:             
VPC_ID:                
PRIVATENESS:           false
RESOURCE_TYPE:         server
LABELS:

We have a new server template with a commissioned server in IMCO.

Our server's ID is 620b61d27f8081000a9783b4. We can now use cio cloud servers subcommands to manage the server.

Let's bring WordPress up:

$ cio cloud servers boot --id 620b61d27f8081000a9783b4
ID:                    620b61d27f8081000a9783b4
NAME:                  wpnode1
FQDN:                  
STATE:                 booting
PUBLIC_IP:             
PRIVATE_IP:            
TEMPLATE_ID:           620a8b5c3a974d0008a3260d
SERVER_PLAN_ID:        5da7301fa126060529b47c5e
CLOUD_ACCOUNT_ID:      620a84f81376db00068f9598
SSH_PROFILE_ID:        
SSH_PROFILE_IDS:       
BROWNFIELD_STATE:      Pure
FIREWALL_PROFILE_ID:   620a8b5d3a974d0008a32611
SERVER_ARRAY_ID:       
SUBNET_ID:             
VPC_ID:                
PRIVATENESS:           false
RESOURCE_TYPE:         server
LABELS:                Wordpress

Server status: Bootstraping:

$ cio cloud servers show --id 620b61d27f8081000a9783b4
ID:                    620b61d27f8081000a9783b4
NAME:                  wpnode1
FQDN:                  s3ef8ed2ba4407b8.centralus.cloudapp.azure.com
STATE:                 bootstrapping
PUBLIC_IP:             52.165.165.245
PRIVATE_IP:            10.0.0.4
TEMPLATE_ID:           620a8b5c3a974d0008a3260d
SERVER_PLAN_ID:        5da7301fa126060529b47c5e
CLOUD_ACCOUNT_ID:      620a84f81376db00068f9598
SSH_PROFILE_ID:        
SSH_PROFILE_IDS:       
BROWNFIELD_STATE:      Pure
FIREWALL_PROFILE_ID:   620a8b5d3a974d0008a32611
SERVER_ARRAY_ID:       
SUBNET_ID:             
VPC_ID:                
PRIVATENESS:           false
RESOURCE_TYPE:         server
LABELS:                Wordpress

Server status: Operational:

$ cio cloud servers show --id 620b61d27f8081000a9783b4
ID:                    620b61d27f8081000a9783b4
NAME:                  wpnode1
FQDN:                  s3ef8ed2ba4407b8.centralus.cloudapp.azure.com
STATE:                 operational
PUBLIC_IP:             52.165.165.245
PRIVATE_IP:            10.0.0.4
TEMPLATE_ID:           620a8b5c3a974d0008a3260d
SERVER_PLAN_ID:        5da7301fa126060529b47c5e
CLOUD_ACCOUNT_ID:      620a84f81376db00068f9598
SSH_PROFILE_ID:        
SSH_PROFILE_IDS:       
BROWNFIELD_STATE:      Pure
FIREWALL_PROFILE_ID:   620a8b5d3a974d0008a32611
SERVER_ARRAY_ID:       
SUBNET_ID:             
VPC_ID:                
PRIVATENESS:           false
RESOURCE_TYPE:         server
LABELS:                Wordpress

After a brief amount of time you will have your new Wordpress server up and running, ready to be configured.

Blueprint

IMCO blueprints are the compendium of:

cookbook-versions, they map to IMCO's Web UI cookbooks. Use cio blueprint cookbook-versions list to show all cookbooks available at your account.
scripts, they provide a way to execute custom scripts after bootstrapping, before a clean shutdown, or on demand.
attachments, provides attachments to store on the servers.
templates, an ordered combination of cookbook-versions and scripts.

Blueprint Use Case

A template must be created with an OS target, a cookbook-versions list, and a list of custom attributes for those cookbooks.

Template OS

Blueprints are associated with an Operative System, and each cloud provider has a different way of identifying the OS that a machine is running.

IMCO takes care of the gap, and lets you select a cloud provider independent OS, and find out later which image is appropriate for the chosen cloud provider account and location. Hence, blueprints are bound to OS, but cloud provider and location independent.

For our case we will be using Ubuntu 20.04 Focal Fossa x86_64. Let's find its IMCO ID:

$ cio cloud generic-images list
ID                         NAME
5da72f9c588464053ffcb878   Windows 2016 x86_64
5e2491f92a9c6405447637b1   Windows 2019 x86_64
5da72f9c588464053ffcb876   Ubuntu 18.04 Bionic Beaver x86_64
609520351c93140124bac1fb   Ubuntu 18.04 Bionic Beaver arm64
5f3281737e8b380531f1a5c0   Ubuntu 20.04 Focal Fossa x86_64
609520351c93140124bac1fc   Ubuntu 20.04 Focal Fossa arm64
609520351c93140124bac1fd   Red Hat Enterprise Linux 8 x86_64
609520351c93140124bac1fe   Red Hat Enterprise Linux 8 arm64
609520351c93140124bac1ff   CentOS 8 x86_64
609520351c93140124bac200   CentOS 8 arm64
5da72f9c588464053ffcb87b   Debian 9 x86_64
609520351c93140124bac201   Debian 10 x86_64
609520351c93140124bac202   Debian 10 arm64

Take note of Ubuntu 20.04 Focal Fossa x86_64 ID, 5f3281737e8b380531f1a5c0.

Cookbook versions

We want to use IMCO's curated Joomla cookbook. Use cio blueprint cookbook-versions to find the cookbooks to add.

$ cio blueprint cookbook-versions list | awk 'NR==1 || /joomla/'
ID                         NAME             VERSION        STATE          REVISION_ID                                DESCRIPTION                                                                       LABELS         
5da72fc3588464054f87d7c8   joomla           0.11.1         ready          161a5d9c95e4c54b9b1a51135907323752a2321e   Installs/Configures joomla environment                                            []             
6023c920ec7c3f0019028d60   joomla           0.11.2         ready          ec2b9eea4c5a39759eca1dea67645d536e939070   Installs/Configures joomla environment                                            []

Joomla curated cookbooks creates a local mysql database. We only have to tell our cookbook that we should override the joomla.db.hostname to 127.0.0.1. Execute the following command to create the Joomla template.

$ cio blueprint templates create --name joomla-tmplt --generic-image-id 5f3281737e8b380531f1a5c0 --cookbook-versions "joomla:0.11.2" --configuration-attributes '{"joomla":{"db":{"hostname":"127.0.0.1"}}}' --labels Joomla,mysite.com
ID:                         620b7d357f8081000a9783e0
NAME:                       joomla-tmplt
GENERIC_IMAGE_ID:           5f3281737e8b380531f1a5c0
RUN_LIST:                   
CONFIGURATION_ATTRIBUTES:   {"joomla":{"db":{"hostname":"127.0.0.1"}}}
RESOURCE_TYPE:              template
COOKBOOK_VERSIONS:          joomla:0.11.2
STATE:                      compiling
LABELS:                     Joomla,mysite.com

Instantiate a server

Now that we have our server blueprint defined, let's start one. Servers in IMCO need to know the server plan for the cloud provider and realm, and the template used to build the instance.

As we did in the Wizard use case, we can find the missing data using these commands:

Find cloud provider server plan

$ cio cloud cloud-providers list
ID                         NAME                  
5da72f97588464053ffcb855   AWS                  
5da72f98588464053ffcb857   Microsoft Azure

Select a realm by cloud provider

$ cio cloud realms list --id 5da72f98588464053ffcb857
ID                         NAME                   LOCATION_ID                CLOUD_PROVIDER_ID          PROVIDER_NAME        
5da73014a126060529b47b1e   East Asia              5da72f9b588464053ffcb872   5da72f98588464053ffcb857   eastasia             
5da73019a126060529b47bba   Southeast Asia         5da72f9b588464053ffcb872   5da72f98588464053ffcb857   southeastasia        
5da7301da126060529b47c25   Central US             5da72f9b588464053ffcb870   5da72f98588464053ffcb857   centralus            
5da73022a126060529b47cb1   East US                5da72f9b588464053ffcb870   5da72f98588464053ffcb857   eastus               
5da73027a126060529b47d42   East US 2              5da72f9b588464053ffcb870   5da72f98588464053ffcb857   eastus2              
5da7302aa126060529b47db3   West US                5da72f9b588464053ffcb870   5da72f98588464053ffcb857   westus               
5da73030a126060529b47e5c   North Central US       5da72f9b588464053ffcb870   5da72f98588464053ffcb857   northcentralus       
5da73035a126060529b47ef3   South Central US       5da72f9b588464053ffcb870   5da72f98588464053ffcb857   southcentralus       
5da7303ba126060529b47fae   North Europe           5da72f9b588464053ffcb871   5da72f98588464053ffcb857   northeurope          
5da7303fa126060529b4801d   West Europe            5da72f9b588464053ffcb871   5da72f98588464053ffcb857   westeurope           
5da73044a126060529b480af   Japan West             5da72f9b588464053ffcb872   5da72f98588464053ffcb857   japanwest            
5da7304aa126060529b4814d   Japan East             5da72f9b588464053ffcb872   5da72f98588464053ffcb857   japaneast            
5da7304da126060529b481b4   Brazil South           5da72f9b588464053ffcb873   5da72f98588464053ffcb857   brazilsouth          
5da73052a126060529b48250   Australia East         5da72f9b588464053ffcb872   5da72f98588464053ffcb857   australiaeast        
5da73058a126060529b48301   Australia Southeast    5da72f9b588464053ffcb872   5da72f98588464053ffcb857   australiasoutheast   
5da7305ea126060529b4839f   UK South               5da72f9b588464053ffcb871   5da72f98588464053ffcb857   uksouth              
5da73062a126060529b4840e   UK West                5da72f9b588464053ffcb871   5da72f98588464053ffcb857   ukwest               
5da73068a126060529b484a4   West US 2              5da72f9b588464053ffcb870   5da72f98588464053ffcb857   westus2              
5e282b7967b583057691831a   West Central US        5da72f9b588464053ffcb870   5da72f98588464053ffcb857   westcentralus        
60366c4209db430014510528   Germany West Central   5da72f9b588464053ffcb871   5da72f98588464053ffcb857   germanywestcentral   
609181bcf536d200201cba1e   South Africa North     609520351c93140124bac204   5da72f98588464053ffcb857   southafricanorth     
609181d3f536d200201cbbe8   Central India          5da72f9b588464053ffcb872   5da72f98588464053ffcb857   centralindia         
60918244f536d200201cc004   Korea Central          5da72f9b588464053ffcb872   5da72f98588464053ffcb857   koreacentral         
60918266f536d200201cc2a3   Canada Central         5da72f9b588464053ffcb870   5da72f98588464053ffcb857   canadacentral        
60918286f536d200201cc530   France Central         5da72f9b588464053ffcb871   5da72f98588464053ffcb857   francecentral        
609182b7f536d200201cc8fb   Norway East            5da72f9b588464053ffcb871   5da72f98588464053ffcb857   norwayeast           
609182d0f536d200201ccaf7   Switzerland North      5da72f9b588464053ffcb871   5da72f98588464053ffcb857   switzerlandnorth     
609182eaf536d200201cccf3   UAE North              609520351c93140124bac205   5da72f98588464053ffcb857   uaenorth             
60918388f536d200201cd559   Australia Central      5da72f9b588464053ffcb872   5da72f98588464053ffcb857   australiacentral     
609183ebf536d200201cd8e8   Korea South            5da72f9b588464053ffcb872   5da72f98588464053ffcb857   koreasouth           
60918405f536d200201cdaf7   South India            5da72f9b588464053ffcb872   5da72f98588464053ffcb857   southindia           
60918434f536d200201cde95   Canada East            5da72f9b588464053ffcb870   5da72f98588464053ffcb857   canadaeast

We want to use provider Microsoft Azure with ID 5da72f98588464053ffcb857, realm North Central US with ID 5da73030a126060529b47e5c and filtering by server plan Basic_A0

$ cio cloud server-plans list --cloud-provider-id 5da72f98588464053ffcb857 --realm-id 5da73030a126060529b47e5c | awk 'NR==1 || /Basic_A0/'
ID                         NAME       MEMORY   CPUS  STORAGE   LOCATION_ID                LOCATION_NAME   REALM_ID                   REALM_PROVIDER_NAME   FLAVOUR_PROVIDER_NAME   CLOUD_PROVIDER_ID          CLOUD_PROVIDER_NAME   
5da73030a126060529b47e65   Basic_A0   768      1     20        5da72f9b588464053ffcb870   North America   5da73030a126060529b47e5c   northcentralus        Basic_A0                5da72f98588464053ffcb857   Microsoft Azure

Find Template ID

We already know our template ID, but in case you want to make sure

$ cio blueprint templates list
ID                         NAME                 GENERIC_IMAGE_ID           LABELS                
620a8b5c3a974d0008a3260d   Wordpress_template   5da72f9c588464053ffcb876   [Wordpress]           
620b7d357f8081000a9783e0   joomla-tmplt         5f3281737e8b380531f1a5c0   [Joomla mysite.com]

Find Location ID

We already know our location ID, but in case you want to make sure

$ cio wizard locations list
ID                         NAME            
5da72f9b588464053ffcb870   North America   
5da72f9b588464053ffcb871   Europe          
5da72f9b588464053ffcb872   Asia Pacific    
5da72f9b588464053ffcb873   South America   
609520351c93140124bac204   Africa          
609520351c93140124bac205   Middle East

Find Cloud Account ID

It's necessary to retrieve the adequate Cloud Account ID for Microsoft Azure Cloud Provider, in our case 5da72f98588464053ffcb857:

$ cio settings cloud-accounts list
ID                         NAME              SUBSCRIPTION_ID            REMOTE_ID      CLOUD_PROVIDER_ID          CLOUD_PROVIDER_NAME   STATE          
620a84f81376db00068f9598   Microsoft Azure   620a84853a974d001aa32609                  5da72f98588464053ffcb857   Microsoft Azure       idle           
620a85091376db00068f959a   AWS               620a84853a974d001aa3260b                  5da72f97588464053ffcb855   AWS                   idle

Find SSH Profile ID

It's necessary to retrieve the adequate SSH Profile ID. It can be created using CLI commands or IMCO UI.

$ cio cloud ssh-profiles list
ID                         NAME                 PUBLIC_KEY                   LABELS
620b97b93700550006ce0066   default              ssh-rsa AAAAB3NzaC1yc[...]   []
620b98013700550006ce0068   Joomla SSH           ssh-rsa AAAABBfD4Klmn[...]   [mysite.com Joomla]
[...]

Find Firewall Profile ID

It's necessary to retrieve the adequate Firewall Profile ID. It can be created using CLI commands or IMCO UI.

$ cio network firewall-profiles list
ID                         NAME                 DESCRIPTION                                            DEFAULT        LABELS
620a73973a974d001aa325f9   Default firewall     Firewall profile created by the platfom for your use   true           []           
620b98783700550006ce006a   Joomla Firewall      Firewall profile created for joomla management         false          [Joomla mysite.com]
[...]

Create our Joomla Server

$ cio cloud servers create --name joomla-node1 --template-id 620b7d357f8081000a9783e0 --server-plan-id 5da73030a126060529b47e65 --cloud-account-id 620a84f81376db00068f9598 --ssh-profile-id 620b98013700550006ce0068 --firewall-profile-id 620b98783700550006ce006a --labels Joomla,mysite.com
ID:                    620b992e7f8081000a9783e5
NAME:                  joomla-node1
FQDN:                  
STATE:                 commissioning
PUBLIC_IP:             
PRIVATE_IP:            
TEMPLATE_ID:           620b7d357f8081000a9783e0
SERVER_PLAN_ID:        5da73030a126060529b47e65
CLOUD_ACCOUNT_ID:      620a84f81376db00068f9598
SSH_PROFILE_ID:        620b98013700550006ce0068
SSH_PROFILE_IDS:       620b98013700550006ce0068
BROWNFIELD_STATE:      Pure
FIREWALL_PROFILE_ID:   620b98783700550006ce006a
SERVER_ARRAY_ID:       
SUBNET_ID:             
VPC_ID:                
PRIVATENESS:           false
RESOURCE_TYPE:         server
LABELS:                Joomla,mysite.com

And finally boot it:

$ cio cloud servers boot --id 620b992e7f8081000a9783e5
ID:                    620b992e7f8081000a9783e5
NAME:                  joomla-node1
FQDN:                  
STATE:                 booting
PUBLIC_IP:             
PRIVATE_IP:            
TEMPLATE_ID:           620b7d357f8081000a9783e0
SERVER_PLAN_ID:        5da73030a126060529b47e65
CLOUD_ACCOUNT_ID:      620a84f81376db00068f9598
SSH_PROFILE_ID:        620b98013700550006ce0068
SSH_PROFILE_IDS:       620b98013700550006ce0068
BROWNFIELD_STATE:      Pure
FIREWALL_PROFILE_ID:   620b98783700550006ce006a
SERVER_ARRAY_ID:       
SUBNET_ID:             
VPC_ID:                
PRIVATENESS:           false
RESOURCE_TYPE:         server
LABELS:                Joomla,mysite.com

You can retrieve the current status of the server and see how it transitions along different statuses (booting, bootstrapping, operational). Then, after a brief amount of time the final status is reached:

$ cio cloud servers show --id 620b992e7f8081000a9783e5
ID:                    620b992e7f8081000a9783e5
NAME:                  joomla-node1
FQDN:                  s0f2a626f0824baa.northcentralus.cloudapp.azure.com
STATE:                 operational
PUBLIC_IP:             23.101.162.162
PRIVATE_IP:            10.0.0.4
TEMPLATE_ID:           620b7d357f8081000a9783e0
SERVER_PLAN_ID:        5da73030a126060529b47e65
CLOUD_ACCOUNT_ID:      620a84f81376db00068f9598
SSH_PROFILE_ID:        620b98013700550006ce0068
SSH_PROFILE_IDS:       620b98013700550006ce0068
BROWNFIELD_STATE:      Pure
FIREWALL_PROFILE_ID:   620b98783700550006ce006a
SERVER_ARRAY_ID:       
SUBNET_ID:             
VPC_ID:                
PRIVATENESS:           false
RESOURCE_TYPE:         server
LABELS:                Joomla,mysite.com

Firewall Management

IMCO CLI's network command lets you manage a network settings at the server scope.

As we have done before, execute this command with no further commands to get usage information:

NAME:
    - Manages network related commands

USAGE:
    command [command options] [arguments...]

COMMANDS:
    firewall-profiles  Provides information about firewall profiles
    floating-ips       Provides information about floating IPs
    load-balancers     Provides information about load balancers
    vpcs               Provides information about Virtual Private Clouds (VPCs)
    subnets            Provides information about VPC Subnets
    vpns               Provides information about VPC Virtual Private Networks (VPNs)
    dns-domains        Provides information about DNS domains and records
...

As you can see, you can manage firewall from IMCO CLI.

Firewall Update Case

Servers in IMCO are always associated with a firewall profile. By default, ports 443 and 80 are open to fit most web environments, but if you are not using those ports but some others. We would need to close HTTP and HTTPS ports and open LDAP and LDAPS instead.

The first thing we will need is our server's related firewall identifier. In this they can be found filtering by label assigned 'LDAP':

$ cio cloud servers list --labels LDAP
ID                         NAME           FQDN                                           STATE          PUBLIC_IP       PRIVATE_IP     TEMPLATE_ID                SERVER_PLAN_ID             CLOUD_ACCOUNT_ID           SSH_PROFILE_ID             SSH_PROFILE_IDS              BROWNFIELD_STATE   FIREWALL_PROFILE_ID        LABELS         
620bab883700550006ce007d   openldap-1                                                    inactive                                      620bab0a3700550006ce0076   5da73030a126060529b47e67   620a84f81376db00068f9598   620b97b93700550006ce0066   [620b97b93700550006ce0066]   Pure               620ba0fe3700550006ce0071   [LDAP]         
620baff53700550006ce0093   openldap-2     sopenldap2.northcentralus.cloudapp.azure.com   operational    52.252.224.48   10.0.0.5       620bab0a3700550006ce0076   5da73031a126060529b47e68   620a84f81376db00068f9598   620b97b93700550006ce0066   [620b97b93700550006ce0066]   Pure               620ba0fe3700550006ce0071   [LDAP]

Now that we have the firewall profile ID, list its contents

$ cio network firewall-profiles show --id 620ba0fe3700550006ce0071
ID:              620ba0fe3700550006ce0071
NAME:            Firewall LDAP
DESCRIPTION:     LDAP Services firewall
DEFAULT:         false
RULES:           TCP/22-22:any,TCP/5985-5985:any,TCP/3389-3389:any,TCP/443-443:any,TCP/80-80:any
RESOURCE_TYPE:   firewall_profile
LABELS:          LDAP

The first three values are ports that IMCO may use to keep the desired state of the machine, and that will always be accessed using certificates.

When updating, we tell IMCO a new set of rules. Beware of adding previous rules, update will replace existing items with the ones provided. Execute the following command to open 389 and 686 to anyone.

$ cio network firewall-profiles update --id 620ba0fe3700550006ce0071 --rules TCP/22-22:any,TCP/5985-5985:any,TCP/3389-3389:any,TCP/443-443:any,TCP/80-80:any,TCP/389-389:any,TCP/636-636:any 
ID:              620ba0fe3700550006ce0071
NAME:            Firewall LDAP
DESCRIPTION:     LDAP Services firewall
DEFAULT:         false
RULES:           TCP/22-22:any,TCP/5985-5985:any,TCP/3389-3389:any,TCP/443-443:any,TCP/80-80:any,TCP/389-389:any,TCP/636-636:any
RESOURCE_TYPE:   firewall_profile
LABELS:          LDAP

Firewall update returns the complete set of rules. As you can see, now LDAP and LDAPS ports are open.

Blueprint Update

We have already used blueprints before. So you might already know that we can delete and update blueprints.

Blueprint Update Case

Let's pretend there is an existing Joomla blueprint, and that we want to update the previous password to a safer one.

This is the Joomla blueprint that we created in a previous use case.

$ cio blueprint templates show --id 620b7d357f8081000a9783e0
ID:                         620b7d357f8081000a9783e0
NAME:                       joomla-tmplt
GENERIC_IMAGE_ID:           5f3281737e8b380531f1a5c0
RUN_LIST:                   
CONFIGURATION_ATTRIBUTES:   {"joomla":{"db":{"hostname":"127.0.0.1"}}}
RESOURCE_TYPE:              template
COOKBOOK_VERSIONS:          joomla:0.11.2
STATE:                      ready
LABELS:                     mysite.com,Joomla

Beware of adding previous cookbook versions or configuration attributes. Update will replace existing items with the ones provided. If we don't want to lose the joomla.db.hostname attribute, add it to our configuration attributes parameter:

$ cio blueprint templates update --id 620b7d357f8081000a9783e0 --configuration-attributes '{"joomla":{"db":{"hostname":"127.0.0.1", "password":"$afeP4sSw0rd"}}}'
ID:                         620b7d357f8081000a9783e0
NAME:                       joomla-tmplt
GENERIC_IMAGE_ID:           5f3281737e8b380531f1a5c0
RUN_LIST:                   
CONFIGURATION_ATTRIBUTES:   {"joomla":{"db":{"hostname":"127.0.0.1","password":"$afeP4sSw0rd"}}}
RESOURCE_TYPE:              template
COOKBOOK_VERSIONS:          joomla:0.11.2
STATE:                      ready
LABELS:                     Joomla,mysite.com

As you can see, non specified parameters, like name and cookbook version list, remain unchanged. Let's now change the cookbook version list, adding two cookbooks.

$ cio blueprint templates update --id 620b7d357f8081000a9783e0 --cookbook-versions "joomla:0.11.2,sa-python:0.0.3,polipo:0.1.0"
ID:                         620b7d357f8081000a9783e0
NAME:                       joomla-tmplt
GENERIC_IMAGE_ID:           5f3281737e8b380531f1a5c0
RUN_LIST:                   
CONFIGURATION_ATTRIBUTES:   {"joomla":{"db":{"hostname":"127.0.0.1","password":"$afeP4sSw0rd"}}}
RESOURCE_TYPE:              template
COOKBOOK_VERSIONS:          joomla:0.11.2,polipo:0.1.0,sa-python:0.0.3
STATE:                      compiling
LABELS:                     mysite.com,Joomla

Of course, we can change cookbook versions list and configuration attributes in one command.

$ cio blueprint templates update --id 620b7d357f8081000a9783e0 --configuration-attributes '{"joomla":{"db":{"hostname":"127.0.0.1", "password":"$afeP4sSw0rd"}}}' --cookbook-versions "joomla:0.11.2,sa-python:0.0.3,polipo:0.1.0"
ID:                         620b7d357f8081000a9783e0
NAME:                       joomla-tmplt
GENERIC_IMAGE_ID:           5f3281737e8b380531f1a5c0
RUN_LIST:                   
CONFIGURATION_ATTRIBUTES:   {"joomla":{"db":{"hostname":"127.0.0.1","password":"$afeP4sSw0rd"}}}
RESOURCE_TYPE:              template
COOKBOOK_VERSIONS:          joomla:0.11.2,polipo:0.1.0,sa-python:0.0.3
STATE:                      ready
LABELS:                     Joomla,mysite.com

Contribute

To contribute

Find and open issue, or report a new one. Include proper information about the environment, at least: operating system, CLI version, steps to reproduce the issue and related issues. Avoid writing multi-issue reports, and make sure that the issue is unique.
Fork the repository to your account.
Commit scoped chunks, adding concise and clear comments.
Remember to add tests to your contributed code.
Push changes to the forked repository.
Submit the PR to IMCO CLI.
Let the maintainers give you the LGTM.

Please, use gofmt, golint, go vet, and follow go style advices

cio's People

Contributors

Stargazers

Watchers

cio's Issues

Allow work with cluster kubernetes on user-mode

Description

New Cloud Providers commands:

cio cloud cloud-providers list-cluster-plans > This action lists the cluster plans offered by the cloud provider identified by the given id
GET /v3/cloud/cloud_providers/:cloud_provider_id/cluster_plans

New Cloud Realms commands:

cio cloud realms <CMD>:

list > Lists all realms of a cloud provider
GET /v3/cloud/cloud_providers/:cloud_provider_id/realms
show > Shows information about the realm identified by the given id
GET /v3/cloud/realms/:realm_id
list-node-pool-plans > This action lists the node pool plans offered by the realm identified by the given id
GET /v3/cloud/realms/:realm_id/node_pool_plans

New Brownfield import command:

cio brownfield import-k8s-clusters: Import kubernetes clusters for a given cloud account id
PUT /v3/brownfield/cloud_accounts/:cloud_account_id/import_kubernetes_clusters

New Kubernetes commands:

cio kubernetes clusters <CMD>:

list > Lists all existing clusters
GET /v3/kubernetes/clusters
show > Shows information about the cluster identified by the given id
GET /v3/kubernetes/clusters/:cluster_id
create > Creates a new cluster
POST /v3/kubernetes/clusters
update > Updates an existing cluster identified by the given id
PUT /v3/kubernetes/clusters/:cluster_id
delete > Deletes a cluster
DELETE /v3/kubernetes/clusters/:cluster_id
retry > Retries the application of cluster identified by the given id
PUT /v3/kubernetes/clusters/:cluster_id/retry
discard > Discards a cluster but does not delete it from the cloud provider
DELETE /v3/kubernetes/clusters/:cluster_id/discard
show-plan > Shows information about a specific cluster plan identified by the given id
GET /v3/kubernetes/cluster_plans/:cluster_plan_id

Cluster is labelable
add-label > This action assigns a single label from a single labelable resource
remove-label > This action unassigns a single label from a single labelable resource

cio kubernetes node-pools <CMD>:

list > Lists all existing node pools in a cluster
GET /v3/kubernetes/clusters/:cluster_id/node_pools
show > Shows information about the node pool identified by the given id
GET /v3/kubernetes/node_pools/:node_pool_id
create > Creates a new node pool
POST /v3/kubernetes/clusters/:cluster_id/node_pools
update > Updates an existing node pool identified by the given id
PUT /v3/kubernetes/node_pools/:node_pool_id
delete > Deletes a node pool
DELETE /v3/kubernetes/node_pools/:node_pool_id
retry > Retries the application of node pool identified by the given id
PUT /v3/kubernetes/node_pools/:node_pool_id/retry
show-plan > Shows information about a specific node pool plan identified by the given id
GET /v3/kubernetes/node_pool_plans/:node_pool_plan_id

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Firewall is not applied correctly on Windows

@lttito commented on Thu Feb 15 2018

Expected Behavior

Firewall configuration on windows firewall must be set correctly to allow inbound traffic only from specific ports and deny rest of traffic. Happily, as traffic is controlled on a provider firewall, no security issue arises.

Current Behavior

When applying the firewall configuration on windows firewall, the rules created by imco are not correct. It creates several rules but not defining the ports, so it creates 6 identical rules with allow all from any

Possible Solution

Configure rules correctly for windows firewall.

Steps to Reproduce (for bugs)

Commission a windows machine
Log in the machine
Apply imco firewall (execute on cmd concerto firewall apply
4.Check windows firewall

Context and environment

@lttito commented on Wed Jul 03 2019

Issue moved to ingrammicro/cio #3 via ZenHub

Migrate to cobra/viper

https://github.com/spf13/cobra
https://github.com/spf13/viper

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

New client name in documentation

@fjcoira commented on Tue May 02 2017

Renaming client in documentation.

Recipe for multiple SSH profiles to server

Attachment dir environment variable has wrong value on Windows

Expected Behavior

The environment variable ATTACHMENT_DIR should be a path using the character \ as directory separator on Windows

Current Behavior

The environment variable ATTACHMENT_DIR is a path that uses both the characters / and \ as directory separators on Windows

Possible Solution

Use filepath.Join in line 106 of dispatcher/script.go

Steps to Reproduce (for bugs)

Create a script with the code echo %ATTACHMENT_DIR% and add it to a Windows template as a boot script
Deploy a server with that Windows template
When the server gets operational, it should have an script execution event with an output similar to C:\Windows\TEMP\cio2413023516/attachments, the / should be a \

Context and environment

Adapt code to sonarqube requirements

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Modify cio brownfield command to apply all ssh profiles

Expected Behavior

CIO should apply all ssh profiles assigned to a server when it goes to M2

Current Behavior

CIO only applies one (hidden one) ssh profile to a server when it goes to M2

Possible Solution

CIO will have to recover all ssh profiles of a server and put theirs keys on the server when going to M2

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Bootstrapping command should be able to detect configuration file changes and change to run-once mode

Expected Behavior

While the bootstrapping command runs on continuous mode, it should detect changes in the configuration file and reload it after every policyfile application. As a result, if the mode was reconfigured to run-once it should:

Stop if the last policyfile application was successful
Change to run-once mode (with the current 3 attempts to apply policyfile successfully) if the last policyfile application was not successful

Current Behavior

Once the configuration file is loaded at the start of the bootstrap command, any changes on it are ignored.

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Remove struct tag from calculated properties

Since some fields are not feeded by the API representation, it should not have a json struct tag.

Sample:
CloudProviderName string `json:"cloud_provider_name" header:"CLOUD_PROVIDER_NAME"`

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Rename to CIO -Cloud Infrastructure Orchestrator-

@pcantera commented on Fri Mar 22 2019

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Adapt the client brownfield API commands

It's required to implement new workflow for Brownfield importation activities using API V3.

Adding support for:

servers
vpcs
floating_ips
volumes
policies

New Brownfield commands:
cio brownfield cloud-accounts <CMD>:

list -> Lists the cloud accounts that support importing resources
GET /v3/brownfield/cloud_accounts

cio brownfield import-<resources>:

import-servers -> Import servers candidates, by given cloud account id
PUT /v3/brownfield/cloud_accounts/:cloud_account_id/import_servers
import-vpcs -> Import VPCs candidates, by given cloud account id
PUT /v3/brownfield/cloud_accounts/:cloud_account_id/import_vpcs
import-floating-ips -> Import Floating IPs candidates, by given cloud account id
PUT /v3/brownfield/cloud_accounts/:cloud_account_id/import_floating_ips
import-volumes -> Import volumes candidates, by given cloud account id
PUT /v3/brownfield/cloud_accounts/:cloud_account_id/import_volumes
import-policies -> Import policies candidates, by given cloud account id
PUT /v3/brownfield/cloud_accounts/:cloud_account_id/import_policies

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Update to Go 1.15 and update dependencies

Expected Behavior

Cio uses Go 1.15

Current Behavior

Cio does not use Go 1.15

Possible Solution

Update Go to 1.15

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Add commands to manage brownfield load balancers

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Rename vector to params in API methods

Rename the vector to params in the name of the input parameters of the api layer

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Firewall is not applied correctly on Windows

@lttito commented on Thu Feb 15 2018

Expected Behavior

Current Behavior

Possible Solution

Configure rules correctly for windows firewall.

Steps to Reproduce (for bugs)

Commission a windows machine
Log in the machine
Apply imco firewall (execute on cmd concerto firewall apply
4.Check windows firewall

Context and environment

Add commands to manage load balancers

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Update generation scripts for release and version

@pcantera commented on Tue May 22 2018

Once implemented "goreleaser" tool, i,t's a must to evaluate the need for "release.sh" / "utils/version.sh" files.

If it is really a need, they have to be updated and support Alpha, Beta and Release candidates prior to generate the stable release (RTM).

Otherwise, they should be removed

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Firewall is not applied correctly on Windows

@lttito commented on Thu Feb 15 2018

Expected Behavior

Current Behavior

Possible Solution

Configure rules correctly for windows firewall.

Steps to Reproduce (for bugs)

Commission a windows machine
Log in the machine
Apply imco firewall (execute on cmd concerto firewall apply
4.Check windows firewall

Context and environment

Renaming all Get<resource>List methods as List<resource>s

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Map location identifiers when listing realms

Show location name in addition to identifier

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Integrate with go-imco API client

@pcantera commented on Thu Mar 21 2019

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

README document out of date

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Update Go to 1.14

Ensure sure go.mod is set to at least 1.14 to get access to these language changes. You can do this by editing the go.mod file directly, or you can run:

go mod edit -go=1.14

Update go mod references, using

go get -u all

and then

go mod tidy

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Allow work with DNS on user-mode

Description

New DNS commands:

cio network dns-domains <CMD>:

list > Lists all DNS domains
GET /v2/network/dns/domains
show > Shows information about the DNS domain identified by the given id
GET /v2/network/dns/domains/:domain_id
create > Creates a new DNS domain
POST /v2/network/dns/domains
delete > Deletes a DNS domain
DELETE /v2/network/dns/domains/:domain_id
retry > Retries the application of DNS domain
PUT /v2/network/dns/domains/:domain_id/retry

Submenu
records > Provides information about DNS records

cio network dns-domains records<CMD>:

list > Lists all DNS records of a domain
GET /v2/network/dns/domains/:domain_id/records
show > Shows information about the DNS record identified by the given id
GET /v2/network/dns/records/:record_id
create > Creates a DNS record in a domain
POST /v2/network/dns/domains/:domain_id/records
update > Updates a DNS record in a domain
PUT /v2/network/dns/records/:record_id
delete > Deletes a DNS record in a domain
DELETE /v2/network/dns/records/:record_id
retry > Retries the application of DNS record in a domain
PUT /v2/network/dns/records/:record_id/retry

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Allow work with CSE on user-mode

New Cloud Specific Extension commands:

cio cloud-specific-extensions templates <CMD>:

list > Lists List CSE templates
GET /v2/cse/templates
show -> Shows CSE template
GET /v2/cse/templates/:template_id
import -> Imports a CSE template
POST /v2/cse/templates
update -> Updates an existing CSE template identified by the given id
PUT /v2/cse/templates/:template_id
list-deployments -> List CSE deployments of a CSE template
GET /v2/cse/templates/:template_id/deployments
delete -> Deletes a CSE template
DELETE /v2/cse/templates/:template_id

cio cloud-specific-extensions deployments <CMD>:

list > Lists List CSE deployments
GET /v2/cse/deployments
show -> Shows CSE deployment
GET /v2/cse/deployments/:deployment_id
deploy -> Deploys a new CSE deployment from CSE template
POST /v2/cse/templates/:template_id/deployments
update -> Updates an existing CSE deployment identified by the given id
PUT /v2/cse/deployments/:deployment_id
delete -> Deletes a CSE deployment
DELETE /v2/cse/deployments/:deployment_id

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Allow work with Load Balancers on user-mode

Description

New Load Balancer commands:

cio network load-balancers <CMD>:

list -> Lists all existing load balancers
GET /v2/network/load_balancers
show -> Shows information about the load balancer identified by the given id
GET /v2/network/load_balancers/:load_balancer_id
create -> Creates a new load balancer
POST /v2/network/load_balancers
update -> Updates an existing load balancer identified by the given id
PUT /v2/network/load_balancers/:load_balancer_id
delete -> Deletes a load balancer
DELETE /v2/network/load_balancers/:load_balancer_id
retry -> Retries the application of a load balancer
PUT /v2/network/load_balancers/:load_balancer_id/retry
show-plan -> Shows information about a specific load balancer plan
GET /v2/network/load_balancer_plans/:load_balancer_plan_id

Submenus
target-groups -> Provides information about load balancer target groups
listeners -> Provides information about load balancer listeners
certificates -> Provides information about load balancer certificates

Load balancer is labelable
add-label -> This action assigns a single label from a single labelable resource
remove-label -> This action unassigns a single label from a single labelable resource

cio cloud cloud-providers list-load-balancer-plans:
GET /v2/cloud/cloud_providers/:cloud_provider_id/load_balancer_plans

cio network load-balancers target-groups <CMD>:

list -> Lists all target groups of a load balancer
GET /v2/network/load_balancers/:load_balancer_id/target_groups
show -> Shows information about the target group identified by the given id
GET /v2/network/target_groups/:target_group_id
create -> Creates a new target group in a load balancer
POST /v2/network/load_balancers/:load_balancer_id/target_groups
update -> Updates an existing target group identified by the given id
PUT /v2/network/target_groups/:target_group_id
delete -> Deletes a target group
DELETE /v2/network/target_groups/:target_group_id
retry -> Retries the application of a target group of a load balancer
PUT /v2/network/target_groups/:target_group_id/retry
list-targets -> Lists all targets in a target group
GET /v2/network/target_groups/:target_group_id/targets
create-target -> Creates a target in a target group
POST /v2/network/target_groups/:target_group_id/targets
delete-target -> Destroys a target in a target group
DELETE /v2/network/target_groups/:target_group_id/targets/:resource_type/:resource_id

cio network load-balancers listeners <CMD>:

list -> Lists all listeners of a load balancer
GET /v2/network/load_balancers/:load_balancer_id/listeners
show -> Shows information about the listener identified by the given id
GET /v2/network/listeners/:listener_id
create -> Creates a new listener in a load balancer
POST /v2/network/load_balancers/:load_balancer_id/listeners
update -> Updates an existing listener identified by the given id
PUT /v2/network/listeners/:listener_id
delete -> Deletes a listener
DELETE /v2/network/listeners/:listener_id
retry -> Retries the application of a listener of a load balancer
PUT /v2/network/listeners/:listener_id/retry
list-rules -> Lists all rules of a listener
GET /v2/network/listeners/:listener_id/rules
create-rule -> Creates a rule in a listener
POST /v2/network/listeners/:listener_id/rules
update-rule -> Updates a rule in a target listener
PUT /v2/network/listeners/:listener_id/rules/:rule_id
delete-rule -> Destroys a rule in a listener
DELETE /v2/network/listeners/:listener_id/rules/:rule_id

cio network load-balancers certificates <CMD>:

list -> Lists all certificates of a load balancer
GET /v2/network/load_balancers/:load_balancer_id/certificates
show -> Shows information about the certificate identified by the given id
GET /v2/network/load_balancers/:load_balancer_id/certificates/:certificate_id
create -> Creates a new certificate in a load balancer
POST /v2/network/load_balancers/:load_balancer_id/certificates
update -> Updates an existing certificate identified by the given id
PUT /v2/network/load_balancers/:load_balancer_id/certificates/:certificate_id
delete -> Deletes a certificate
DELETE /v2/network/load_balancers/:load_balancer_id/certificates/:certificate_id

Firewall is not applied correctly on Windows

@lttito commented on Thu Feb 15 2018

Expected Behavior

Current Behavior

Possible Solution

Configure rules correctly for windows firewall.

Steps to Reproduce (for bugs)

Commission a windows machine
Log in the machine
Apply imco firewall (execute on cmd concerto firewall apply
4.Check windows firewall

Context and environment

Update Go to 1.13

Ensure sure go.mod is set to at least 1.13 to get access to these language changes. You can do this by editing the go.mod file directly, or you can run:

go mod edit -go=1.13

Update go mod references, using

go get -u all

and then

go mod tidy

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Firewall is not applied correctly on Windows

@lttito commented on Thu Feb 15 2018

Expected Behavior

Current Behavior

Possible Solution

Configure rules correctly for windows firewall.

Steps to Reproduce (for bugs)

Commission a windows machine
Log in the machine
Apply imco firewall (execute on cmd concerto firewall apply
4.Check windows firewall

Context and environment

Remove all mentions of "concerto"

@chris-m-h commented on Tue Feb 13 2018

Merge origins concerto and imco
- Note: That may be too much, as issues are also re-referenced!
Check for remaining trademarks

Error trying to run an operational script

@albertodvc commented on Tue Sep 17 2019

Expected Behavior

Current Behavior

From server console log:
`Executing script 'Test Script'
ERROR: Couldn't receive Script Characterization data
-> json: cannot unmarshal object into Go value of type []*types.ScriptCharacterization

Script 'Test Script' executed`

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

@lttito commented on Tue Sep 17 2019

reproduced in my environment executing a script without or with code

@lttito commented on Tue Sep 17 2019

executing cio scripts operational list returns

Allow work with CATs on user-mode

@pcantera commented on Mon Jul 09 2018

New Cloud Application commands:
cio cloud-applications templates <CMD>:

list > Lists CATs
GET /v2/plugins/tosca/cats
show -> Shows CAT
GET /v2/plugins/tosca/cats/:cat_id
upload -> Uploads a CAT
POST /v2/plugins/tosca/cats
PUT file
PUT /v2/plugins/tosca/cats/:cat_id/parse_metadata
delete -> Deletes a CAT
DELETE /v2/plugins/tosca/cats/:cat_id

cio cloud-applications deployments <CMD>:

list -> Lists deployments
GET /v2/labels (Namespace == "cat:deployment")
show -> Shows deployment
GET /v2/plugins/tosca/deployments/:deployment_id
deploy -> Deploys a CAT
POST /v2/plugins/tosca/cats/:cat_id/deployment_tasks
GET /v2/plugins/tosca/cats/:cat_id/deployment_tasks/:deployment_task_id
delete -> Deletes a deployment
DELETE /v2/plugins/tosca/deployments/:deployment_id

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Problems syncing Firewall rules with Ubuntu 12.04

@jpgriffo commented on Mon Jan 09 2017

Seems that in ubuntu 12.04 iptables does not allow for locking mechanisms.

root@dbecom:/etc/mysql# /sbin/iptables -w -A CONCERTO -s 0.0.0.0/0 -p tcp --dport 3306:3306 -j ACCEPT
iptables v1.4.12: unknown option "-w"

@pbanos commented on Tue Feb 20 2018

Closing because we no longer support Ubuntu 12.04

Allow work with Policies on user-mode

Description

New Policies commands:

cio settings policies definitions <CMD>:

list > Lists policy definitions
GET /v2/policy/definitions
show > Shows policy definition
GET /v2/policy/definitions/:definition_id
create > Creates policy definition
POST /v2/policy/definitions
update > Updates an existing policy definition identified by the given id
PUT /v2/policy/definitions/:definition_id
delete > Deletes a policy definition
DELETE /v2/policy/definitions/:definition_id
list-assignments > lists policy assignments
GET /v2/policy/definitions/:definition_id/assignments

cio settings policies assignments <CMD>:

list > lists policy assignments for a given cloud account
GET /v2/settings/cloud_accounts/:cloud_account_id/policy_assignments
show > Shows policy assignments
GET /v2/policy/assignments/:assignment_id
create > Creates policy assignment
POST /v2/policy/definitions/:definition_id/assignments
update > Updates an existing policy assignment identified by the given id
PUT /v2/policy/assignments/:assignment_id
delete > Deletes a policy assignment
DELETE /v2/policy/assignments/:assignment_id

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Improve code quality report

@pcantera commented on Tue May 22 2018

Based on:

https://goreportcard.com/report/github.com/ingrammicro/concerto
https://codecov.io/github/ingrammicro/concerto?branch=master
https://travis-ci.org/ingrammicro/concerto/branches

Firewall is not applied correctly on Windows

@lttito commented on Thu Feb 15 2018

Expected Behavior

Current Behavior

Possible Solution

Configure rules correctly for windows firewall.

Steps to Reproduce (for bugs)

Commission a windows machine
Log in the machine
Apply imco firewall (execute on cmd concerto firewall apply
4.Check windows firewall

Context and environment

Rename references to concerto

Along the project, the 'concerto' word is being used in order to name configuration files, environment variables, used in API headers, ... due a legacy context and be continued with pre-existing style..

Now it's time, as a need, to apply required changes in those contexts - coordinating with IMCO team-; focused on those which affect to integration layers or customer use case.

FILES:
brownfield/register.go
polling/register.go
README.md
main.go
config.go
webservice.go
linux_settings.go
CONFIG FILE
.concerto
xml <concerto ...>
log
ENVIRONMENT VARIABLES
CONCERTO_CA_CERT
CONCERTO_CLIENT_CERT
CONCERTO_CLIENT_KEY
CONCERTO_CONFIG
CONCERTO_ENDPOINT
CONCERTO_URL
CONCERTO_BROWNFIELD_TOKEN
CONCERTO_COMMAND_POLLING_TOKEN
CONCERTO_SERVER_ID
CONCERTO_FORMATTER
Post
X-Concerto-Brownfield-Token
concerto-setup
Tmp file

NOTE: This is not an issue focused on general review for this word -there's another issue and branch focused on this and a general deep review of the project on the way- , but for integration point of view, such as the detected ones.

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Allow work with Brownfield on user-mode

New Brownfield commands:
cio brownfield cloud-accounts <CMD>:

list -> Lists the cloud accounts that support discovering and importing resources
GET /v2/brownfield/cloud_accounts
discover-servers -> Starts the process of discovering servers on the cloud account identified by the given id
PUT /v2/brownfield/cloud_accounts/:id/discover
GET /v2/brownfield/cloud_accounts/:cloud_account_id/import_candidates
discover-vpcs -> Starts the process of discovering VPCs on the cloud account identified by the given id
PUT /v2/brownfield/cloud_accounts/:id/discover_vpcs
GET /v2/brownfield/cloud_accounts/:cloud_account_id/vpc_import_candidates
discover-floating-ips -> Starts the process of discovering floating IPs on the cloud account identified by the given id
PUT /v2/brownfield/cloud_accounts/:id/discover_floating_ips
GET /v2/brownfield/cloud_accounts/:cloud_account_id/floating_ip_import_candidates
discover-volumes -> Starts the process of discovering volumes on the cloud account identified by the given id
PUT /v2/brownfield/cloud_accounts/:id/discover_volumes
GET /v2/brownfield/cloud_accounts/:cloud_account_id/volume_import_candidates

cio brownfield import-<resource>:

import-server -> Import server import candidate, given its id
POST /v2/brownfield/import_candidates/:id/import
import-vpc -> Import VPC import candidate, given its id
POST /v2/brownfield/vpc_import_candidates/:id/import
import-floating-ip -> Import Floating IP import candidate, given its id
POST /v2/brownfield/floating_ip_import_candidates/:id/import
import-volume -> Import volume import candidate, given its id
POST /v2/brownfield/volume_import_candidates/:id/import

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Adapt resource management to new Cloud Provider Profile model

From now on, aligned with IMCO and the new CloudProviderConfig model -which it is required for Azure provider consolidation-, some resource structures change. This requires to adapt the adequate object and how some IDs are consumed for API requesting.

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Add full tests of all commands

Create a script or procedure to do a review of all the commands; to be able to do a complete test of the CLI, real tests of commands to IMCO

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Attach documentation files for available commands

@pcantera commented on Tue May 22 2018

Inside the "docs" folder, create two separate documentation files for respective commands context: Server / Client.

This should be an up-to-date guide referring to available commands and how to use them.

Markdown language will be used.

Allow work with Temporary Archives on user-mode

Description

New Temporary Archives commands:

cio cloud infrastructure <CMD>:

export -> Exports infrastructure file from IMCO
POST /plugins/tosca/temporary_archives/export
GET /plugins/tosca/temporary_archives/:temporary_archive_id/export
GET File
import -> Imports infrastructure file on IMCO
POST /plugins/tosca/temporary_archives
Put File
POST /plugins/tosca/temporary_archives/:temporary_archive_id/import
GET /plugins/tosca/temporary_archives/:temporary_archive_id/import

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Add argo workflow support

Expected Behavior

In order to automate quality software development we need to add argo workflow with appropriate defined steps, mainly:

test execution
compile
sonarqube analysis

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Server plans list requires filtering by realm

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Update Go to 1.17

See: IMCO-755

Expected Behavior

Cio uses Go 1.17

Current Behavior

Cio does not use Go 1.17

Possible Solution

Update Go to 1.17

Steps to Reproduce (for bugs)

1.
2.
3.
4.

Context and environment

Firewall is not applied correctly on Windows

@lttito commented on Thu Feb 15 2018

Expected Behavior

Current Behavior

Possible Solution

Configure rules correctly for windows firewall.

Steps to Reproduce (for bugs)

Commission a windows machine
Log in the machine
Apply imco firewall (execute on cmd concerto firewall apply
4.Check windows firewall

Context and environment

@lttito commented on Wed Jul 03 2019

Issue moved to ingrammicro/cio #3 via ZenHub

@lttito commented on Wed Jul 03 2019

Issue moved to ingrammicro/cio #4 via ZenHub

@lttito commented on Wed Jul 03 2019

Issue moved to ingrammicro/cio #5 via ZenHub

Perform general code review

@pcantera commented on Thu Mar 21 2019

Expected Behavior

Reuse and refactor functionalities
Method names based on verbs
Error management normalization
Traceability normalization
Improve idiomatic coding
Reformat package sources
Remove dead code
Review unhandled errors
Error messages normalization
Exclude some files from compiling (as some accessory test files)
Review exported or unexported methods
Exported elements should have comments
Remove redundant or unnecessary characters (i.e.: parentheses)
Review overlapped variables
Review spelling
Increase code quality coverage
API files: Vector is a bad name, rename to Params

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

1.
2.
3.
4.

ingrammicro / cio Goto Github PK

cio's Introduction

IMCO CLI / Go Library

Table of Contents

Setup

Pre-requisites

Manual Setup

Linux and OSX

Configuration

Binaries

Environment variables

Troubleshooting

Usage

Wizard

Wizard Use Case

Blueprint

Blueprint Use Case

Template OS

Cookbook versions

Instantiate a server

Find cloud provider server plan

Select a realm by cloud provider

Find Template ID

Find Location ID

Find Cloud Account ID

Find SSH Profile ID

Find Firewall Profile ID

Create our Joomla Server

Firewall Management

Firewall Update Case

Blueprint Update

Blueprint Update Case

Contribute

cio's People

Contributors

Stargazers

Watchers

cio's Issues

Description

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

Expected Behavior

Current Behavior

Possible Solution

Steps to Reproduce (for bugs)

Context and environment

Expected Behavior