The Middleware API component enables lifecycle management of Virtual Network Functions (VNF). According to ETSI's NFV-MANO specification this component realizes the Ve-Vnfm reference point.
- 0.99
- VNF Registering Interface created
- Lifecycle management interface created
- mAPI now provides better feedback during execution
- Keys folder added to store VDUs private key authentication (pem file)
- test folder contains examples of VNFDs and configuration requests
- Updated VNF register: username and private key are now uploaded in the VNFD
- Added support for the new version of the VNF descriptor
- Corrected the README.MD
- Correct a bug when storing the pem key
- Integration with T-NOVA VNFM validated
- Created the mAPI.cfg.sample to avoid overwriting the configuration when updating the Middleware API
- Added support for the new version of the VNF descriptor
- Corrected a bug with the VNF validation
- Updated expected values for some VNFD parameters
- Several bugs corrected
- Integrated with VNFM
- Several bug fixes
- Changed MySQL interface from SQL Alchemy to MySQdb Python library
- Integrated http driver
- Bottle: Python Web Framework (URL: http://www.bottlepy.org)
- SQLAlchemy: The Database Toolkit for Python (URL: http://www.sqlalchemy.org)
- Rundeck: Job Scheduler and Runbook Automation (URL: http://www.rundeck.org)
- MySQL: Open-Source Database (URL: https://www.mysql.com)
- Ubuntu - 14.04
- Python - 2.7.6
- Bottle - 0.12
- SQLAlchemy - 0.8.4
- Rundeck - 2.4.2, 2.5.3
- MySQL - 5.5.43
This guide was tested in Ubuntu 14.04 LTS
- Go to page http://rundeck.org
- Scroll to section "Debian/Ubuntu Install" and copy the download link
- In terminal do:
wget "download link" (in our case it was http://download.rundeck.org/deb/rundeck-2.5.3-1-GA.deb)
sudo apt-get install openjdk-7-jdk
sudo dpkg -i rundeck-"version"-GA.deb
It is necessary to give authorization to create projects using the API
The file apitoken.aclpolicy in /etc/rundeck/ should look like this
description: API project level access control
context:
project: '.*' # all projects
for:
resource:
- equals:
kind: job
allow: [create,delete,read] # allow create and delete jobs
- equals:
kind: node
allow: [read,create,update,refresh] # allow refresh node sources
- equals:
kind: event
allow: [read,create] # allow read/create events
- equals:
kind: project
allow: [read,create]
adhoc:
- allow: [read,run,kill] # allow running/killing adhoc jobs and read output
job:
- allow: [create,read,update,delete,run,kill] # allow create/read/write/delete/run/kill of all jobs
node:
- allow: [read,run] # allow read/run for all nodes
project:
- allow: [create,read,update,delete,import,export,admin]
by:
group: api_token_group
---
description: API Application level access control
context:
application: 'rundeck'
for:
resource:
- equals:
kind: system
allow: [read] # allow read of system info
project:
- match:
name: '.*'
allow: [admin,import,export,read,create] # allow view of all projects
storage:
- match:
path: '(keys|keys/.*)'
allow: '*' # allow all access to manage stored keys
by:
group: api_token_group
The file admin.aclpolicy in /etc/rundeck/ should look like this:
description: Admin, all access.
context:
project: '.*' # all projects
for:
resource:
- allow: '*' # allow read/create all kinds
adhoc:
- allow: '*' # allow read/running/killing adhoc jobs
job:
- allow: '*' # allow read/write/delete/run/kill of all jobs
node:
- allow: '*' # allow read/run for all nodes
by:
group: [admin,api_token_group]
---
description: Admin, all access.
context:
application: 'rundeck'
for:
resource:
- allow: '*' # allow create of projects
project:
- allow: '*' # allow view/admin of all projects
storage:
- allow: '*' # allow read/create/update/delete for all /keys/* storage content
by:
group: [admin,api_token_group]
- sudo apt-get install mysql-server
- enter admin password, it will be used later to configure the mAPI
- create mapi database, in terminal do:
mysql -u "username" -p"password"
create database mapi;
- Install Bottle framework
sudo apt-get install python-bottle
- Install SQLAlchemy
sudo apt-get install python-sqlalchemy
sudo apt-get install python-mysqldb
To configure the Middleware API you can use the mAPI.cfg file present in the 'Config' folder.
authentication_method - two mechanisms are available, basic authentication and gatekeeper). Gatekeeper is the official authentication mechanism used in T-NOVA, while basic is only username:password authentication.
username - username for mAPI northbound interface authentication (basic authentication)
password - password for mAPI northbound interface authentication (basic authentication)
gatekeeper_host - Gatekeeper IP Address or DNS name location
gatekeeper_port - Port where Gatekeeper is listening
service_key - Token assigned to mAPI by Gatekeeper
ip - IP address for the mAPI northbound interface
port - Port number for the mAPI norhbound interface
folder - folder location of the mAPI software
host - IP address or DNS name of the host where Rundeck is running
port - Port number used by the Rundeck API
token - authentication token used in Rundeck
project folder - folder location of Rundeck projects folder
TNOVA_user - username associated with the private key, it will be used with the SSH driver to access the VDUs
user - username for MySQL database authentication
password - password for MySQL database authentication
ip - IP address of MySQL server
Because this is just an example some sections remained unchanged:
- Authentication
- Server (using 0.0.0.0 allows the mAPI to listen on all interfaces)
- Set the mAPI folder variable
- We will need to start Rundeck to retrieve the authentication token. Rundeck default configuration sets the GUI to localhost, if you want outside access to the GUI it is needed to change the configuration.
- Change the variable "grails.serverURL" in /etc/rundeck/rundeck-config.properties to the IP address of your choice (skip this step if don't want outside access to the GUI)
- If you're running the mAPI in VM in OpenStack don't forget to change the Security Groups to allow TCP on port 4440
- Enter the Rundeck URL in your browser ("IP address":4440)
- Username and password for the admin user are admin:admin
- Go to admin>Profile and enter a mail address
- Next click on "generate new token"
- Copy the token to the mAPI.cfg file to where it says token
- Set the password and user for MySQL
The Middleware API needs to run with sudo because some operations are normally limited to superusers. To run the Middleware API just type in terminal:
~/mAPI_folder/sudo python northboundinterface.py
In folder ~/mAPI_folder/test you can find some examples of json requests for registering and triggering lifecycle events using mAPI