구성 Maximo Application Suite ~와 함께 Amazon Web Services DocumentDB
이 태스크 정보
프로시저
- 관리자로 Red Hat OpenShift 콘솔에 로그인하십시오.
- 측면 탐색 메뉴에서 관리 >CustomResourceDefinition 목록에서MongoCfg CRD.
- 인스턴스 탭을 클릭하십시오.
- Amazon Web Services DocumentDB 연결 세부사항으로 MongoCfg CRD를 업데이트하십시오.기본적으로 Maximo Application Suite 는 MongoCfg CRD를 사용하여 MongoDB에 연결합니다. 에 연결하려면 DocumentDB, 연결 세부정보를 업데이트해야 합니다. YAML 탭 Red Hat OpenShift 콘솔.
- MongoCfg CRD YAML 파일의 백업 파일을 작성하십시오.백업 파일을 작성하려면 MongoCfg CRD YAML 파일 컨텐츠를 복사하여 파일에 붙여넣거나 다음 oc 명령을 사용하십시오.
oc get MongoCfg <instance name> -o yaml > instance_name.yaml -
mas-<ClusterUniqueString>-core네임스페이스에서 시크릿 docdb-dbadmin YAML 파일을 작성하십시오.다음 예는 mas-vbpoyr-core 네임스페이스의 샘플 시크릿 YAML 파일입니다.--- # DocumentDB credentials for Core apiVersion: v1 kind: Secret type: Opaque metadata: name: documentdb-admin namespace: mas-vbpoyr-core stringData: username: docdbadmin password: docdbadmin - DocumentDB 연결 세부사항으로 MongCfg CRD YAML 파일을 업데이트하십시오.
- spec.certificates– 특정 인증서 DocumentDB. Amazon Web Services DocumentDB 제공합니다PEM 파일.
인증기관이 있는 경우
rds-ca-2019을 다운로드한 다음PEM 파일의 특정 인증서 번들 AWS 지역. 예를 들어, ca-central-1 지역에서는 다음을 사용할 수 있습니다.PEM 파일의 출처 ca-central-1-bundle.pem.그러나 인증기관이 있는 경우
rds-ca-rsa2048-g1을 클릭한 다음Root CA RSA2048 PEM 파일은 다음에 제공된 단계를 따릅니다. 적출Root CA RSA2048 PEM 파일 부분. - spec.config.credentials.secretName - DocumentDB 관리자 사용자 이름 및 비밀번호를 포함하는 시크릿입니다.
- spec.config.hosts.host - DocumentDB 호스트 이름입니다.
- spec.config.hosts.port - DocumentDB 포트.
- spec.config.retryWrites -false로 설정하십시오.
다음 예는 DocumentDB 연결 세부사항으로 업데이트되는 샘플 MongoCfg CRD YAML 파일입니다.--- apiVersion: config.mas.ibm.com/v1 kind: MongoCfg metadata: resourceVersion: '369530' name: vbpoyr-mongo-system uid: 48318d43-b0f6-4848-822b-4443a104b8f0 generation: 1 namespace: mas-vbpoyr-core ownerReferences: - apiVersion: core.mas.ibm.com/v1 kind: Suite name: vbpoyr uid: 0df07123-1ad0-492a-aec0-76f88583dd98 labels: mas.ibm.com/configScope: system mas.ibm.com/instanceId: vbpoyr spec: certificates: - alias: ca crt: | -----BEGIN CERTIFICATE----- MIIEBjCCAu6gAwIBAgIJAMc0ZzaSUK51MA0GCSqGSIb3DQEBCwUAMIGPMQswCQYD VQQGEwJVUzEQMA4GA1UEBwwHU2VhdHRsZTETMBEGA1UECAwKV2FzaGluZ3RvbjEi MCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjETMBEGA1UECwwKQW1h em9uIFJEUzEgMB4GA1UEAwwXQW1hem9uIFJEUyBSb290IDIwMTkgQ0EwHhcNMTkw ODIyMTcwODUwWhcNMjQwODIyMTcwODUwWjCBjzELMAkGA1UEBhMCVVMxEDAOBgNV BAcMB1NlYXR0bGUxEzARBgNVBAgMCldhc2hpbmd0b24xIjAgBgNVBAoMGUFtYXpv biBXZWIgU2VydmljZXMsIEluYy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxIDAeBgNV BAMMF0FtYXpvbiBSRFMgUm9vdCAyMDE5IENBMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArXnF/E6/Qh+ku3hQTSKPMhQQlCpoWvnIthzX6MK3p5a0eXKZ oWIjYcNNG6UwJjp4fUXl6glp53Jobn+tWNX88dNH2n8DVbppSwScVE2LpuL+94vY 0EYE/XxN7svKea8YvlrqkUBKyxLxTjh+U/KrGOaHxz9v0l6ZNlDbuaZw3qIWdD/I 6aNbGeRUVtpM6P+bWIoxVl/caQylQS6CEYUk+CpVyJSkopwJlzXT07tMoDL5WgX9 O08KVgDNz9qP/IGtAcRduRcNioH3E9v981QO1zt/Gpb2f8NqAjUUCUZzOnij6mx9 McZ+9cWX88CRzR0vQODWuZscgI08NvM69Fn2SQIDAQABo2MwYTAOBgNVHQ8BAf8E BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUc19g2LzLA5j0Kxc0LjZa pmD/vB8wHwYDVR0jBBgwFoAUc19g2LzLA5j0Kxc0LjZapmD/vB8wDQYJKoZIhvcN AQELBQADggEBAHAG7WTmyjzPRIM85rVj+fWHsLIvqpw6DObIjMWokpliCeMINZFV ynfgBKsf1ExwbvJNzYFXW6dihnguDG9VMPpi2up/ctQTN8tm9nDKOy08uNZoofMc NUZxKCEkVKZv+IL4oHoeayt8egtv3ujJM6V14AstMQ6SwvwvA93EP/Ug2e4WAXHu cbI1NAbUgVDqp+DRdfvZkgYKryjTWd/0+1fS8X1bBZVWzl7eirNVnHbSH2ZDpNuY 0SBd8dj5F6ld3t58ydZbrTHze7JJOd8ijySAp4/kiu9UfZWuTPABzDa/DSdz9Dk/ zPW4CXXvhLmE02TA9/HeCw3KEHIwicNuEfw= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIECjCCAvKgAwIBAgICEzUwDQYJKoZIhvcNAQELBQAwgY8xCzAJBgNVBAYTAlVT MRAwDgYDVQQHDAdTZWF0dGxlMRMwEQYDVQQIDApXYXNoaW5ndG9uMSIwIAYDVQQK DBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMuMRMwEQYDVQQLDApBbWF6b24gUkRT MSAwHgYDVQQDDBdBbWF6b24gUkRTIFJvb3QgMjAxOSBDQTAeFw0xOTA5MTAyMDUy MjVaFw0yNDA4MjIxNzA4NTBaMIGXMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2Fz aGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEiMCAGA1UECgwZQW1hem9uIFdlYiBT ZXJ2aWNlcywgSW5jLjETMBEGA1UECwwKQW1hem9uIFJEUzEoMCYGA1UEAwwfQW1h em9uIFJEUyBjYS1jZW50cmFsLTEgMjAxOSBDQTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOxHqdcPSA2uBjsCP4DLSlqSoPuQ/X1kkJLusVRKiQE2zayB viuCBt4VB9Qsh2rW3iYGM+usDjltGnI1iUWA5KHcvHszSMkWAOYWLiMNKTlg6LCp XnE89tvj5dIH6U8WlDvXLdjB/h30gW9JEX7S8supsBSci2GxEzb5mRdKaDuuF/0O qvz4YE04pua3iZ9QwmMFuTAOYzD1M72aOpj+7Ac+YLMM61qOtU+AU6MndnQkKoQi qmUN2A9IFaqHFzRlSdXwKCKUA4otzmz+/N3vFwjb5F4DSsbsrMfjeHMo6o/nb6Nh YDb0VJxxPee6TxSuN7CQJ2FxMlFUezcoXqwqXD0CAwEAAaNmMGQwDgYDVR0PAQH/ BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFDGGpon9WfIpsggE CxHq8hZ7E2ESMB8GA1UdIwQYMBaAFHNfYNi8ywOY9CsXNC42WqZg/7wfMA0GCSqG SIb3DQEBCwUAA4IBAQAvpeQYEGZvoTVLgV9rd2+StPYykMsmFjWQcyn3dBTZRXC2 lKq7QhQczMAOhEaaN29ZprjQzsA2X/UauKzLR2Uyqc2qOeO9/YOl0H3qauo8C/W9 r8xqPbOCDLEXlOQ19fidXyyEPHEq5WFp8j+fTh+s8WOx2M7IuC0ANEetIZURYhSp xl9XOPRCJxOhj7JdelhpweX0BJDNHeUFi0ClnFOws8oKQ7sQEv66d5ddxqqZ3NVv RbCvCtEutQMOUMIuaygDlMn1anSM8N7Wndx8G6+Uy67AnhjGx7jw/0YPPxopEj6x JXP8j0sJbcT9K/9/fPVLNT25RvQ/93T2+IQL4Ca2 -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIICtTCCAjqgAwIBAgIRAK9BSZU6nIe6jqfODmuVctYwCgYIKoZIzj0EAwMwgZkx CzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMu MRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEyMDAGA1UEAwwpQW1h em9uIFJEUyBjYS1jZW50cmFsLTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcM B1NlYXR0bGUwIBcNMjEwNTIxMjIxMzA5WhgPMjEyMTA1MjEyMzEzMDlaMIGZMQsw CQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjET MBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMjAwBgNVBAMMKUFtYXpv biBSRFMgY2EtY2VudHJhbC0xIFJvb3QgQ0EgRUNDMzg0IEcxMRAwDgYDVQQHDAdT ZWF0dGxlMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEUkEERcgxneT5H+P+fERcbGmf bVx+M7rNWtgWUr6w+OBENebQA9ozTkeSg4c4M+qdYSObFqjxITdYxT1z/nHz1gyx OKAhLjWu+nkbRefqy3RwXaWT680uUaAP6ccnkZOMo0IwQDAPBgNVHRMBAf8EBTAD AQH/MB0GA1UdDgQWBBSN6fxlg0s5Wny08uRBYZcQ3TUoyzAOBgNVHQ8BAf8EBAMC AYYwCgYIKoZIzj0EAwMDaQAwZgIxAORaz+MBVoFBTmZ93j2G2vYTwA6T5hWzBWrx CrI54pKn5g6At56DBrkjrwZF5T1enAIxAJe/LZ9xpDkAdxDgGJFN8gZYLRWc0NRy Rb4hihy5vj9L+w9uKc9VfEBIFuhT7Z3ljg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEBTCCAu2gAwIBAgIRAKiaRZatN8eiz9p0s0lu0rQwDQYJKoZIhvcNAQELBQAw gZoxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEzMDEGA1UEAwwq QW1hem9uIFJEUyBjYS1jZW50cmFsLTEgUm9vdCBDQSBSU0EyMDQ4IEcxMRAwDgYD VQQHDAdTZWF0dGxlMCAXDTIxMDUyMTIyMDIzNVoYDzIwNjEwNTIxMjMwMjM1WjCB mjELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTMwMQYDVQQDDCpB bWF6b24gUkRTIGNhLWNlbnRyYWwtMSBSb290IENBIFJTQTIwNDggRzExEDAOBgNV BAcMB1NlYXR0bGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygVMf qB865IR9qYRBRFHn4eAqGJOCFx+UbraQZmjr/mnRqSkY+nhbM7Pn/DWOrRnxoh+w q5F9ZxdZ5D5T1v6kljVwxyfFgHItyyyIL0YS7e2h7cRRscCM+75kMedAP7icb4YN LfWBqfKHbHIOqvvQK8T6+Emu/QlG2B5LvuErrop9K0KinhITekpVIO4HCN61cuOe CADBKF/5uUJHwS9pWw3uUbpGUwsLBuhJzCY/OpJlDqC8Y9aToi2Ivl5u3/Q/sKjr 6AZb9lx4q3J2z7tJDrm5MHYwV74elGSXoeoG8nODUqjgklIWAPrt6lQ3WJpO2kug 8RhCdSbWkcXHfX95AgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE FOIxhqTPkKVqKBZvMWtKewKWDvDBMA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0B AQsFAAOCAQEAqoItII89lOl4TKvg0I1EinxafZLXIheLcdGCxpjRxlZ9QMQUN3yb y/8uFKBL0otbQgJEoGhxm4h0tp54g28M6TN1U0332dwkjYxUNwvzrMaV5Na55I2Z 1hq4GB3NMXW+PvdtsgVOZbEN+zOyOZ5MvJHEQVkT3YRnf6avsdntltcRzHJ16pJc Y8rR7yWwPXh1lPaPkxddrCtwayyGxNbNmRybjR48uHRhwu7v2WuAMdChL8H8bp89 TQLMrMHgSbZfee9hKhO4Zebelf1/cslRSrhkG0ESq6G5MUINj6lMg2g6F0F7Xz2v ncD/vuRN5P+vT8th/oZ0Q2Gc68Pun0cn/g== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIGBTCCA+2gAwIBAgIRAJfKe4Zh4aWNt3bv6ZjQwogwDQYJKoZIhvcNAQEMBQAw gZoxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEzMDEGA1UEAwwq QW1hem9uIFJEUyBjYS1jZW50cmFsLTEgUm9vdCBDQSBSU0E0MDk2IEcxMRAwDgYD VQQHDAdTZWF0dGxlMCAXDTIxMDUyMTIyMDg1M1oYDzIxMjEwNTIxMjMwODUzWjCB mjELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTMwMQYDVQQDDCpB bWF6b24gUkRTIGNhLWNlbnRyYWwtMSBSb290IENBIFJTQTQwOTYgRzExEDAOBgNV BAcMB1NlYXR0bGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCpgUH6 Crzd8cOw9prAh2rkQqAOx2vtuI7xX4tmBG4I/um28eBjyVmgwQ1fpq0Zg2nCKS54 Nn0pCmT7f3h6Bvopxn0J45AzXEtajFqXf92NQ3iPth95GVfAJSD7gk2LWMhpmID9 JGQyoGuDPg+hYyr292X6d0madzEktVVGO4mKTF989qEg+tY8+oN0U2fRTrqa2tZp iYsmg350ynNopvntsJAfpCO/srwpsqHHLNFZ9jvhTU8uW90wgaKO9i31j/mHggCE +CAOaJCM3g+L8DPl/2QKsb6UkBgaaIwKyRgKSj1IlgrK+OdCBCOgM9jjId4Tqo2j ZIrrPBGl6fbn1+etZX+2/tf6tegz+yV0HHQRAcKCpaH8AXF44bny9andslBoNjGx H6R/3ib4FhPrnBMElzZ5i4+eM/cuPC2huZMBXb/jKgRC/QN1Wm3/nah5FWq+yn+N tiAF10Ga0BYzVhHDEwZzN7gn38bcY5yi/CjDUNpY0OzEe2+dpaBKPlXTaFfn9Nba CBmXPRF0lLGGtPeTAgjcju+NEcVa82Ht1pqxyu2sDtbu3J5bxp4RKtj+ShwN8nut Tkf5Ea9rSmHEY13fzgibZlQhXaiFSKA2ASUwgJP19Putm0XKlBCNSGCoECemewxL +7Y8FszS4Uu4eaIwvXVqUEE2yf+4ex0hqQ1acQIDAQABo0IwQDAPBgNVHRMBAf8E BTADAQH/MB0GA1UdDgQWBBSeUnXIRxNbYsZLtKomIz4Y1nOZEzAOBgNVHQ8BAf8E BAMCAYYwDQYJKoZIhvcNAQEMBQADggIBAIpRvxVS0dzoosBh/qw65ghPUGSbP2D4 dm6oYCv5g/zJr4fR7NzEbHOXX5aOQnHbQL4M/7veuOCLNPOW1uXwywMg6gY+dbKe YtPVA1as8G9sUyadeXyGh2uXGsziMFXyaESwiAXZyiYyKChS3+g26/7jwECFo5vC XGhWpIO7Hp35Yglp8AnwnEAo/PnuXgyt2nvyTSrxlEYa0jus6GZEZd77pa82U1JH qFhIgmKPWWdvELA3+ra1nKnvpWM/xX0pnMznMej5B3RT3Y+k61+kWghJE81Ix78T +tG4jSotgbaL53BhtQWBD1yzbbilqsGE1/DXPXzHVf9yD73fwh2tGWSaVInKYinr a4tcrB3KDN/PFq0/w5/21lpZjVFyu/eiPj6DmWDuHW73XnRwZpHo/2OFkei5R7cT rn/YdDD6c1dYtSw5YNnS6hdCQ3sOiB/xbPRN9VWJa6se79uZ9NLz6RMOr73DNnb2 bhIR9Gf7XAA5lYKqQk+A+stoKbIT0F65RnkxrXi/6vSiXfCh/bV6B41cf7MY/6YW ehserSdjhQamv35rTFdM+foJwUKz1QN9n9KZhPxeRmwqPitAV79PloksOnX25ElN SlyxdndIoA1wia1HRd26EFm2pqfZ2vtD2EjU3wD42CXX4H8fKVDna30nNFSYF0yn jGKc3k6UNxpg -----END CERTIFICATE----- config: authMechanism: DEFAULT configDb: admin retryWrites: false credentials: secretName: documentdb-admin hosts: - host: docdb-vbpoyr.ctnrnscupeqf.ca-central-1.docdb.amazonaws.com port: 27017 displayName: Document Db in 'mongoce-vbpoyr' namespace type: external - spec.certificates– 특정 인증서 DocumentDB. Amazon Web Services DocumentDB 제공합니다PEM 파일.
- MongoCfg CRD YAML 파일을 저장하십시오.변경사항을 적용한 후 새 DocumentDB 인스턴스에 연결하기 위해 조정이 실행됩니다. 연결에 성공하면 조건 섹션의 마지막 조정이 성공으로 표시됩니다.
- MongoCfg CRD YAML 파일의 백업 파일을 작성하십시오.
- Amazon Web Services DocumentDB 연결 세부사항으로 LicenseService CRD를 업데이트하십시오.
- LicenseService Suite License Service 서비스 인스턴스 YAML 파일의 백업 파일을 작성하십시오.
-
ibm-sls-<ClusterUniqueString>네임스페이스에서 시크릿 docdb-dbadmin YAML 파일을 작성하십시오.다음 예는 ibm-sls-vbpoyr 네임스페이스에 있는 샘플 시크릿 YAML 파일입니다.--- # DocumentDB credentials for SLS apiVersion: v1 kind: Secret type: Opaque metadata: name: documentdb namespace: ibm-sls-vbpoyr stringData: username: docdbadmin password: docdbadmin - 에Red Hat OpenShift 콘솔의 측면 탐색 메뉴에서CustomResourceDefinition >LicenseService .
- 인스턴스 탭을 선택하고 CRD 이름을 클릭하십시오. 다음 DocumentDB 연결 세부사항으로 LicenseService CRD YAML 파일을 업데이트하십시오.
- spec.mongo.certificates– 특정 인증서 DocumentDB.
인증기관이 있는 경우
rds-ca-2019을 다운로드한 다음PEM 파일의 특정 인증서 번들 AWS 지역. 예를 들어, ca-central-1 지역에서는 다음을 사용할 수 있습니다.PEM 파일의 출처 ca-central-1-bundle.pem.그러나 인증기관이 있는 경우
rds-ca-rsa2048-g1을 클릭한 다음Root CA RSA2048 PEM 파일은 다음에 제공된 단계를 따릅니다. 적출Root CA RSA2048 PEM 파일 부분. - spec.mongo.secretName - DocumentDB 관리자 사용자 이름 및 비밀번호를 포함하는 시크릿입니다.
- spec.mongo.nodes.host - DocumentDB 호스트 이름입니다.
- spec.mongo.nodes.port - DocumentDB 포트.
- spec.mongo.retryWrites -false로 설정하십시오.
다음 예는 DocumentDB 연결 세부사항으로 업데이트되는 샘플 LicenseService YAML 파일입니다.--- apiVersion: sls.ibm.com/v1 kind: LicenseService metadata: name: masocp-vbpoyr namespace: ibm-sls-vbpoyr resourceVersion: '497850' uid: 478dcfb9-342e-440c-b6ec-7ad74b5b78ec spec: domain: ibm-sls-vbpoyr.apps.masocp-vbpoyr.buyermas4aws.com license: accept: true mongo: certificates: - alias: ca crt: | -----BEGIN CERTIFICATE----- MIIEBjCCAu6gAwIBAgIJAMc0ZzaSUK51MA0GCSqGSIb3DQEBCwUAMIGPMQswCQYD VQQGEwJVUzEQMA4GA1UEBwwHU2VhdHRsZTETMBEGA1UECAwKV2FzaGluZ3RvbjEi MCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjETMBEGA1UECwwKQW1h em9uIFJEUzEgMB4GA1UEAwwXQW1hem9uIFJEUyBSb290IDIwMTkgQ0EwHhcNMTkw ODIyMTcwODUwWhcNMjQwODIyMTcwODUwWjCBjzELMAkGA1UEBhMCVVMxEDAOBgNV BAcMB1NlYXR0bGUxEzARBgNVBAgMCldhc2hpbmd0b24xIjAgBgNVBAoMGUFtYXpv biBXZWIgU2VydmljZXMsIEluYy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxIDAeBgNV BAMMF0FtYXpvbiBSRFMgUm9vdCAyMDE5IENBMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArXnF/E6/Qh+ku3hQTSKPMhQQlCpoWvnIthzX6MK3p5a0eXKZ oWIjYcNNG6UwJjp4fUXl6glp53Jobn+tWNX88dNH2n8DVbppSwScVE2LpuL+94vY 0EYE/XxN7svKea8YvlrqkUBKyxLxTjh+U/KrGOaHxz9v0l6ZNlDbuaZw3qIWdD/I 6aNbGeRUVtpM6P+bWIoxVl/caQylQS6CEYUk+CpVyJSkopwJlzXT07tMoDL5WgX9 O08KVgDNz9qP/IGtAcRduRcNioH3E9v981QO1zt/Gpb2f8NqAjUUCUZzOnij6mx9 McZ+9cWX88CRzR0vQODWuZscgI08NvM69Fn2SQIDAQABo2MwYTAOBgNVHQ8BAf8E BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUc19g2LzLA5j0Kxc0LjZa pmD/vB8wHwYDVR0jBBgwFoAUc19g2LzLA5j0Kxc0LjZapmD/vB8wDQYJKoZIhvcN AQELBQADggEBAHAG7WTmyjzPRIM85rVj+fWHsLIvqpw6DObIjMWokpliCeMINZFV ynfgBKsf1ExwbvJNzYFXW6dihnguDG9VMPpi2up/ctQTN8tm9nDKOy08uNZoofMc NUZxKCEkVKZv+IL4oHoeayt8egtv3ujJM6V14AstMQ6SwvwvA93EP/Ug2e4WAXHu cbI1NAbUgVDqp+DRdfvZkgYKryjTWd/0+1fS8X1bBZVWzl7eirNVnHbSH2ZDpNuY 0SBd8dj5F6ld3t58ydZbrTHze7JJOd8ijySAp4/kiu9UfZWuTPABzDa/DSdz9Dk/ zPW4CXXvhLmE02TA9/HeCw3KEHIwicNuEfw= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIECjCCAvKgAwIBAgICEzUwDQYJKoZIhvcNAQELBQAwgY8xCzAJBgNVBAYTAlVT MRAwDgYDVQQHDAdTZWF0dGxlMRMwEQYDVQQIDApXYXNoaW5ndG9uMSIwIAYDVQQK DBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMuMRMwEQYDVQQLDApBbWF6b24gUkRT MSAwHgYDVQQDDBdBbWF6b24gUkRTIFJvb3QgMjAxOSBDQTAeFw0xOTA5MTAyMDUy MjVaFw0yNDA4MjIxNzA4NTBaMIGXMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2Fz aGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEiMCAGA1UECgwZQW1hem9uIFdlYiBT ZXJ2aWNlcywgSW5jLjETMBEGA1UECwwKQW1hem9uIFJEUzEoMCYGA1UEAwwfQW1h em9uIFJEUyBjYS1jZW50cmFsLTEgMjAxOSBDQTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOxHqdcPSA2uBjsCP4DLSlqSoPuQ/X1kkJLusVRKiQE2zayB viuCBt4VB9Qsh2rW3iYGM+usDjltGnI1iUWA5KHcvHszSMkWAOYWLiMNKTlg6LCp XnE89tvj5dIH6U8WlDvXLdjB/h30gW9JEX7S8supsBSci2GxEzb5mRdKaDuuF/0O qvz4YE04pua3iZ9QwmMFuTAOYzD1M72aOpj+7Ac+YLMM61qOtU+AU6MndnQkKoQi qmUN2A9IFaqHFzRlSdXwKCKUA4otzmz+/N3vFwjb5F4DSsbsrMfjeHMo6o/nb6Nh YDb0VJxxPee6TxSuN7CQJ2FxMlFUezcoXqwqXD0CAwEAAaNmMGQwDgYDVR0PAQH/ BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFDGGpon9WfIpsggE CxHq8hZ7E2ESMB8GA1UdIwQYMBaAFHNfYNi8ywOY9CsXNC42WqZg/7wfMA0GCSqG SIb3DQEBCwUAA4IBAQAvpeQYEGZvoTVLgV9rd2+StPYykMsmFjWQcyn3dBTZRXC2 lKq7QhQczMAOhEaaN29ZprjQzsA2X/UauKzLR2Uyqc2qOeO9/YOl0H3qauo8C/W9 r8xqPbOCDLEXlOQ19fidXyyEPHEq5WFp8j+fTh+s8WOx2M7IuC0ANEetIZURYhSp xl9XOPRCJxOhj7JdelhpweX0BJDNHeUFi0ClnFOws8oKQ7sQEv66d5ddxqqZ3NVv RbCvCtEutQMOUMIuaygDlMn1anSM8N7Wndx8G6+Uy67AnhjGx7jw/0YPPxopEj6x JXP8j0sJbcT9K/9/fPVLNT25RvQ/93T2+IQL4Ca2 -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIICtTCCAjqgAwIBAgIRAK9BSZU6nIe6jqfODmuVctYwCgYIKoZIzj0EAwMwgZkx CzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMu MRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEyMDAGA1UEAwwpQW1h em9uIFJEUyBjYS1jZW50cmFsLTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcM B1NlYXR0bGUwIBcNMjEwNTIxMjIxMzA5WhgPMjEyMTA1MjEyMzEzMDlaMIGZMQsw CQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjET MBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMjAwBgNVBAMMKUFtYXpv biBSRFMgY2EtY2VudHJhbC0xIFJvb3QgQ0EgRUNDMzg0IEcxMRAwDgYDVQQHDAdT ZWF0dGxlMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEUkEERcgxneT5H+P+fERcbGmf bVx+M7rNWtgWUr6w+OBENebQA9ozTkeSg4c4M+qdYSObFqjxITdYxT1z/nHz1gyx OKAhLjWu+nkbRefqy3RwXaWT680uUaAP6ccnkZOMo0IwQDAPBgNVHRMBAf8EBTAD AQH/MB0GA1UdDgQWBBSN6fxlg0s5Wny08uRBYZcQ3TUoyzAOBgNVHQ8BAf8EBAMC AYYwCgYIKoZIzj0EAwMDaQAwZgIxAORaz+MBVoFBTmZ93j2G2vYTwA6T5hWzBWrx CrI54pKn5g6At56DBrkjrwZF5T1enAIxAJe/LZ9xpDkAdxDgGJFN8gZYLRWc0NRy Rb4hihy5vj9L+w9uKc9VfEBIFuhT7Z3ljg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEBTCCAu2gAwIBAgIRAKiaRZatN8eiz9p0s0lu0rQwDQYJKoZIhvcNAQELBQAw gZoxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEzMDEGA1UEAwwq QW1hem9uIFJEUyBjYS1jZW50cmFsLTEgUm9vdCBDQSBSU0EyMDQ4IEcxMRAwDgYD VQQHDAdTZWF0dGxlMCAXDTIxMDUyMTIyMDIzNVoYDzIwNjEwNTIxMjMwMjM1WjCB mjELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTMwMQYDVQQDDCpB bWF6b24gUkRTIGNhLWNlbnRyYWwtMSBSb290IENBIFJTQTIwNDggRzExEDAOBgNV BAcMB1NlYXR0bGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygVMf qB865IR9qYRBRFHn4eAqGJOCFx+UbraQZmjr/mnRqSkY+nhbM7Pn/DWOrRnxoh+w q5F9ZxdZ5D5T1v6kljVwxyfFgHItyyyIL0YS7e2h7cRRscCM+75kMedAP7icb4YN LfWBqfKHbHIOqvvQK8T6+Emu/QlG2B5LvuErrop9K0KinhITekpVIO4HCN61cuOe CADBKF/5uUJHwS9pWw3uUbpGUwsLBuhJzCY/OpJlDqC8Y9aToi2Ivl5u3/Q/sKjr 6AZb9lx4q3J2z7tJDrm5MHYwV74elGSXoeoG8nODUqjgklIWAPrt6lQ3WJpO2kug 8RhCdSbWkcXHfX95AgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE FOIxhqTPkKVqKBZvMWtKewKWDvDBMA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0B AQsFAAOCAQEAqoItII89lOl4TKvg0I1EinxafZLXIheLcdGCxpjRxlZ9QMQUN3yb y/8uFKBL0otbQgJEoGhxm4h0tp54g28M6TN1U0332dwkjYxUNwvzrMaV5Na55I2Z 1hq4GB3NMXW+PvdtsgVOZbEN+zOyOZ5MvJHEQVkT3YRnf6avsdntltcRzHJ16pJc Y8rR7yWwPXh1lPaPkxddrCtwayyGxNbNmRybjR48uHRhwu7v2WuAMdChL8H8bp89 TQLMrMHgSbZfee9hKhO4Zebelf1/cslRSrhkG0ESq6G5MUINj6lMg2g6F0F7Xz2v ncD/vuRN5P+vT8th/oZ0Q2Gc68Pun0cn/g== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIGBTCCA+2gAwIBAgIRAJfKe4Zh4aWNt3bv6ZjQwogwDQYJKoZIhvcNAQEMBQAw gZoxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEzMDEGA1UEAwwq QW1hem9uIFJEUyBjYS1jZW50cmFsLTEgUm9vdCBDQSBSU0E0MDk2IEcxMRAwDgYD VQQHDAdTZWF0dGxlMCAXDTIxMDUyMTIyMDg1M1oYDzIxMjEwNTIxMjMwODUzWjCB mjELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTMwMQYDVQQDDCpB bWF6b24gUkRTIGNhLWNlbnRyYWwtMSBSb290IENBIFJTQTQwOTYgRzExEDAOBgNV BAcMB1NlYXR0bGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCpgUH6 Crzd8cOw9prAh2rkQqAOx2vtuI7xX4tmBG4I/um28eBjyVmgwQ1fpq0Zg2nCKS54 Nn0pCmT7f3h6Bvopxn0J45AzXEtajFqXf92NQ3iPth95GVfAJSD7gk2LWMhpmID9 JGQyoGuDPg+hYyr292X6d0madzEktVVGO4mKTF989qEg+tY8+oN0U2fRTrqa2tZp iYsmg350ynNopvntsJAfpCO/srwpsqHHLNFZ9jvhTU8uW90wgaKO9i31j/mHggCE +CAOaJCM3g+L8DPl/2QKsb6UkBgaaIwKyRgKSj1IlgrK+OdCBCOgM9jjId4Tqo2j ZIrrPBGl6fbn1+etZX+2/tf6tegz+yV0HHQRAcKCpaH8AXF44bny9andslBoNjGx H6R/3ib4FhPrnBMElzZ5i4+eM/cuPC2huZMBXb/jKgRC/QN1Wm3/nah5FWq+yn+N tiAF10Ga0BYzVhHDEwZzN7gn38bcY5yi/CjDUNpY0OzEe2+dpaBKPlXTaFfn9Nba CBmXPRF0lLGGtPeTAgjcju+NEcVa82Ht1pqxyu2sDtbu3J5bxp4RKtj+ShwN8nut Tkf5Ea9rSmHEY13fzgibZlQhXaiFSKA2ASUwgJP19Putm0XKlBCNSGCoECemewxL +7Y8FszS4Uu4eaIwvXVqUEE2yf+4ex0hqQ1acQIDAQABo0IwQDAPBgNVHRMBAf8E BTADAQH/MB0GA1UdDgQWBBSeUnXIRxNbYsZLtKomIz4Y1nOZEzAOBgNVHQ8BAf8E BAMCAYYwDQYJKoZIhvcNAQEMBQADggIBAIpRvxVS0dzoosBh/qw65ghPUGSbP2D4 dm6oYCv5g/zJr4fR7NzEbHOXX5aOQnHbQL4M/7veuOCLNPOW1uXwywMg6gY+dbKe YtPVA1as8G9sUyadeXyGh2uXGsziMFXyaESwiAXZyiYyKChS3+g26/7jwECFo5vC XGhWpIO7Hp35Yglp8AnwnEAo/PnuXgyt2nvyTSrxlEYa0jus6GZEZd77pa82U1JH qFhIgmKPWWdvELA3+ra1nKnvpWM/xX0pnMznMej5B3RT3Y+k61+kWghJE81Ix78T +tG4jSotgbaL53BhtQWBD1yzbbilqsGE1/DXPXzHVf9yD73fwh2tGWSaVInKYinr a4tcrB3KDN/PFq0/w5/21lpZjVFyu/eiPj6DmWDuHW73XnRwZpHo/2OFkei5R7cT rn/YdDD6c1dYtSw5YNnS6hdCQ3sOiB/xbPRN9VWJa6se79uZ9NLz6RMOr73DNnb2 bhIR9Gf7XAA5lYKqQk+A+stoKbIT0F65RnkxrXi/6vSiXfCh/bV6B41cf7MY/6YW ehserSdjhQamv35rTFdM+foJwUKz1QN9n9KZhPxeRmwqPitAV79PloksOnX25ElN SlyxdndIoA1wia1HRd26EFm2pqfZ2vtD2EjU3wD42CXX4H8fKVDna30nNFSYF0yn jGKc3k6UNxpg -----END CERTIFICATE----- configDb: admin nodes: - host: docdb-vbpoyr.ctnrnscupeqf.ca-central-1.docdb.amazonaws.com port: 27017 retryWrites: false secretName: documentdb-admin reloadCrd: fileUpload: -336090572 settings: auth: enforce: true compliance: enforce: true registration: open: true registry: cp.icr.io/cp - spec.mongo.certificates– 특정 인증서 DocumentDB.
- LicenseService YAML 파일을 저장하십시오.
- DocumentDB에 대해 동일한 상태 조건이 표시되는지 여부를 확인하십시오.
- 다음 위치에 있는 API 라이선스 포드에서 IBM-sls 프로젝트 > 네임스페이스 , 다음과의 새로운 연결을 확인하십시오.DocumentDB 설립되었습니다.
- 조정 성공 여부를 확인하십시오.메시지가Licensing system has not been initialized, upload a valid entitlement file to enable the Token pool and License Mgmt APIs표시되면 인타이틀먼트 파일을 다시 업로드하십시오.
- API 라이센싱 팟 (Pod) 이 준비 상태로 실행 중인지 확인하십시오.
- 라이센싱 시스템을 초기화하려면 인타이틀먼트 파일을 다운로드하십시오. 에Red Hat OpenShift 콘솔의 측면 탐색 메뉴에서 워크로드 > 비밀 , 선택하다IBM -ls-프로젝트, 검색ibm-sls-masocp-<<unique string>>-entitlement , 자격 파일을 저장하고 다운로드합니다.
- Maximo Application Suite 설정 페이지의 설정 섹션에서 라이센스 키 선택 표시가 사용 안함으로 설정됩니다.
- 대체 라이센스 파일을 클릭하고 이전 단계에서 다운로드한 파일을 업로드하십시오.
업로드에 성공하면 라이센스 키 선택 표시가 사용으로 설정됩니다.
- LicenseService 세부사항이 다시 초기화되었는지 확인하십시오.
- MongoCfg 및 LicenseServiceCfg 가 성공적으로 구성된 후 새 DocumentDB 인스턴스에서 다음 두 콜렉션이 작성되었는지 확인하십시오.
- Maximo Application Suite 코어에 특정한
ibm-sls-<<unique_cluster_string>>_masocp-<<unique_cluster_string>>_licensing입니다.예를 들어, ibm-sls-vbpoyr_masocp-vbpoyr_licensing입니다.
- SLS ( Suite License Service ) 에 특정한
mas_<<unique_cluster_string>>_core.예를 들어, mas_vbpoyr_core입니다.
SLS 특정 토큰 풀 및 제품 콜렉션도 DocumentDB 가 SLS에 연결되었음을 확인하는 새 DocumentDB 인스턴스에 작성됩니다.
- Maximo Application Suite 코어에 특정한
- 관리 사용자를 작성하고 사용자가 Maximo Application Suite 코어 및 Suite License Service 콜렉션에 표시되는지 확인하십시오.주: Maximo Application Suite 구성 페이지의 스토리지 섹션에서 MongoDB 를 선택하여 구성된 데이터베이스 세부사항을 보십시오. 세부사항 페이지에서 MongoDB 설정을 업데이트할 수 없습니다.
관리자 사용자를 작성하려면 표시 이름, 사용자 ID및 비밀번호와 같은 세부사항을 추가하십시오. 액세스 유형에 대해 권한 부여됨 을 선택하고 인타이틀먼트를 추가하십시오.
새 사용자는 사용자 섹션에 표시됩니다.mas_<<cluster_unique_string>>_core DocumentDB, 이를 확인하는 것은 Maximo Application Suite 코어가 연결되어 있다 DocumentDB.
관리 사용자인 새 사용자가 mas_<<cluster_unique_string>>_core DocumentDB 콜렉션에 추가됩니다.
- CLI를 사용하여 기존 MongoDB 인스턴스를 삭제하십시오.다음 예제는 MongoDB 인스턴스를 삭제하는 샘플 스크립트입니다.
# Login to cluster oc login --token=sha256~xxx --server=https://api.masocp-xupgew.domain.com:6443 # Switch to mongo namespace oc project ${MONGO_NAMESPACE} # Note down Certificate resource name oc get Certificate -n ${MONGO_NAMESPACE} # Note down StatefulSet name oc get StatefulSet -n ${MONGO_NAMESPACE} # Note down mongodbcommunity crd detail oc get CustomResourceDefinition mongodbcommunity.mongodbcommunity.mongodb.com -n ${MONGO_NAMESPACE} # Note down pvc name oc get pvc -n ${MONGO_NAMESPACE} | grep mongo # Delete Certificate oc delete Certificate mongo-ca-crt -n ${MONGO_NAMESPACE} oc delete Certificate mongo-server -n ${MONGO_NAMESPACE} # Delete MongoDBCommunity oc delete MongoDBCommunity mas-mongo-ce -n ${MONGO_NAMESPACE} # Delete MongoDB operator oc delete deployment mongodb-kubernetes-operator -n ${MONGO_NAMESPACE} # Delete MongoDB StatefulSet oc delete StatefulSet mas-mongo-ce # Delete MongoDB StatefulSet oc delete CustomResourceDefinition mongodbcommunity.mongodbcommunity.mongodb.com -n ${MONGO_NAMESPACE} # Delete Mongo secrets oc delete secrets --all -n ${MONGO_NAMESPACE} # Delete Mongo configmaps oc delete configmaps --all -n ${MONGO_NAMESPACE} # Delete Mongo pvc oc delete pvc data-volume-mas-mongo-ce-0 -n ${MONGO_NAMESPACE} oc delete pvc data-volume-mas-mongo-ce-1 -n ${MONGO_NAMESPACE} oc delete pvc data-volume-mas-mongo-ce-2 -n ${MONGO_NAMESPACE} oc delete pvc logs-volume-mas-mongo-ce-0 -n ${MONGO_NAMESPACE} oc delete pvc logs-volume-mas-mongo-ce-1 -n ${MONGO_NAMESPACE} oc delete pvc logs-volume-mas-mongo-ce-2 -n ${MONGO_NAMESPACE} # Delete Mongo project oc delete project ${MONGO_NAMESPACE}
- 적출Root CA RSA2048 PEM 파일
연결 오류가 표시되면 다음 명령을 실행하여 새 CA 인증서를 신뢰 저장소에 수동으로 추가하고 기존 Amazon을 업데이트할 수 있습니다. DocumentDB 새 CA 인증서를 사용하는 인스턴스입니다.
- 실행wget 다운로드하라는 명령.pem 해당 지역에 대한 파일입니다.
예를 들어 다음 명령을 실행하여.pem 캐나다(중부) 지역용 파일입니다.
wget https://truststore.pki.rds.amazonaws.com/ca-central-1/ca-central-1-bundle.pem - 인증서 이름에서 인증서를 별도의 파일로 분할합니다.예를 들어 다음 명령을 실행합니다.
cat ca-central-1-bundle.pem lawk 'split_after==1{n++;split_after=0} /-----END CERTIFICATE-----/ {split_after=1} {print > "temp-ca-central-1" n "pem"}' - 해당 용어가 포함된 파일 검색
Root CA RSA2048.for cert in $(Is temp-*.pem); do echo $cert; cat $cert | openss| x509 -noout -text | grep "Root CA RSA2048 G1"; done해당 용어가 포함된 파일이 출력에 나열됩니다.
- 필요한 파일을 복사하세요.
root-ca-rsa2048귀하의 지역에 대해.cp temp-ca-central-13.pem .../root-ca-rsa2048-ca-central-1.pem - 올바른지 확인.pem 파일이 복사됩니다.
for cert in $(Is root-ca-rsa2048-*pem); do echo $cert; cat $cert | openssl x509 -noout -text | grep "Root CA RSA2048 G1"; done - 교체spec.certificates.crt 그리고spec.mongo.certificates.crt 새 인증서 내용이 포함된 매개변수PEM 파일.
- 실행wget 다운로드하라는 명령.pem 해당 지역에 대한 파일입니다.