- This project is under active development.
- Method APIs may change between commits.
- Not all HPE CP APIs have been implemented.
- Help Wanted - please consider contributing! # ensure you have an up-to-date pip
pip3 install -U pip
# install hpecp directly from git
pip3 install --upgrade git+https://github.com/hpe-container-platform-community/hpecp-client@masterExample:
from hpecp import ContainerPlatformClient
client = ContainerPlatformClient(username='admin',
password='admin123',
api_host='127.0.0.1',
api_port=8080,
use_ssl=True,
verify_ssl='/certs/hpecp-ca-cert.pem')
client.create_session() # Login
# Alternatively:
# client = ContainerPlatformClient.create_from_config_file().create_session()
print(client.k8s_cluster.list().tabulate(columns=['description', 'id']))On my environment, this displays:
+-------------+-----------------------+
| description | id |
+-------------+-----------------------+
| my cluster | /api/v2/k8scluster/20 |
+-------------+-----------------------+
CLI is installed with pip (as above)
First you need to create a config file with your endpoint details.
Note that you can have multiple profiles:
cat > ~/.hpecp.conf <<EOF
[default]
api_host = 127.0.0.1
api_port = 8080
use_ssl = True
verify_ssl = False
warn_ssl = False
username = admin
password = admin123
EOFCreate k8s cluster example:
hpecp k8scluster create myclus1 /api/v2/worker/k8shost/1:master --k8s_version=1.17.0List k8s clusters example:
hpecp k8scluster tabulate --columns=['id','description','status']# Retrieve variables with host details:
# - CTRL_PUB_IP controller AWS host public IP
# - GATW_PRV_IP gateway AWS host private IP
# - GATW_PRV_DNS gateway AWS host private DNS
# - AD_PRV_IP Active Directory AWS host private IP
source ./scripts/variables.sh
pip3 install --quiet --upgrade git+https://github.com/hpe-container-platform-community/hpecp-client@master
# Save the configuration file for the hpecp cli
export HPECP_CONFIG_FILE="./generated/hpecp.conf"
cat >$HPECP_CONFIG_FILE<<EOF
[default]
api_host = ${CTRL_PUB_IP}
api_port = 8080
use_ssl = True
verify_ssl = False
warn_ssl = False
username = admin
password = admin123
EOF
echo "Checking for LICENSE locally"
# Register license so workers can be fully installed
if [[ ! -f generated/LICENSE ]]; then
echo "ERROR: File './generated/LICENSE' not found - please add it - platform ID: $(hpecp license platform-id)"
echo " After adding the file, run this script again"
exit 1
fi
echo "Uploading LICENSE to Controller"
scp -o StrictHostKeyChecking=no -i "./generated/controller.prv_key" ./generated/LICENSE centos@${CTRL_PUB_IP}:/srv/bluedata/license/LICENSE
hpecp license delete-all
hpecp license register /srv/bluedata/license/LICENSE
hpecp license list
echo "Deleting and creating lock"
hpecp lock delete-all
hpecp lock create "Install Gateway"
# Remove existing gateways
EXISTING_GATEWAY_IDS=$(hpecp gateway list --columns "['id']" --output text)
for GW in ${EXISTING_GATEWAY_IDS}; do
hpecp gateway delete ${GW}
done
# Wait for the Gateway to cease existence
for GW in ${EXISTING_GATEWAY_IDS}; do
hpecp gateway wait-for-state ${GW} --states "[]" --timeout-secs 1200
done
echo "Configuring the Gateway"
GATEWAY_ID=$(hpecp gateway create-with-ssh-key $GATW_PRV_IP $GATW_PRV_DNS --ssh-key-file generated/controller.prv_key)
echo "Waiting for gateway to have state 'installed'"
hpecp gateway wait-for-state ${GATEWAY_ID} --states "['installed']" --timeout-secs 1200
hpecp gateway list
hpecp lock delete-all
echo "Configuring AD authentication"
JSON_FILE=$(mktemp)
trap "{ rm -f $JSON_FILE; }" EXIT
cat >$JSON_FILE<<-EOF
{
"external_identity_server": {
"bind_pwd":"5ambaPwd@",
"user_attribute":"sAMAccountName",
"bind_type":"search_bind",
"bind_dn":"cn=Administrator,CN=Users,DC=samdom,DC=example,DC=com",
"host":"${AD_PRV_IP}",
"security_protocol":"ldaps",
"base_dn":"CN=Users,DC=samdom,DC=example,DC=com",
"verify_peer": false,
"type":"Active Directory",
"port":636
}
}
EOF
hpecp httpclient post /api/v2/config/auth --json-file ${JSON_FILE}See README