Orient Me is the first Connections service which is built on the new Connections Pink stack. Nico will talk about the installation, integration and administration of Orient Me. He will also provide useful insights around the used backend tools. Walk away with knowledge how to successfully run Orient Me in your own Connections environment!
3. Social Connections 11 Chicago, June 1-2 2017
Nico Meisenzahl
• Consultant at panagenda
• IBM Connections since version 3.0 / 2010
• IBM Notes / Domino since 2008
• Focusing in ICS
• Deployment & consulting
• Optimization and migration
• “panagendian” since 2016
• IBM Champion
@nmeisenzahl
linkedin.com/in/nicomeisenzahl
meisenzahl.org
nico.meisenzahl
+49 170 7355081
nico.meisenzahl@panagenda.com
4. Social Connections 11 Chicago, June 1-2 2017
Agenda
• What is Docker, Kubernetes, CfC?
• Orient Me
• Tips & tricks
8. Social Connections 11 Chicago, June 1-2 2017
Docker pros
• More efficient resource allocation
• Linux containers
• Isolated user space within one OS
• Kernel will be shared
• Light weight
• Scalable and agile
9. Social Connections 11 Chicago, June 1-2 2017
What is Kubernetes?
• Container orchestration/management tool
• Allows to manage & scale container across many
hosts
• “kubectl” command & optional web ui
• Built by Google to manage
their environment
• Open source
10. Social Connections 11 Chicago, June 1-2 2017
What is IBM Spectrum CfC?
• Container management toolkit based on
• Kubernetes
• Docker repository
• Helm
• ELK stack
• etcd
• Web UI to deploy, manage, monitor and scale
containers
• https://goo.gl/uGeXv9
13. Social Connections 11 Chicago, June 1-2 2017
Based on…
• IBM services/code
• Apache ZooKeeper
• MongoDB
• Redis
• Solr
14. Social Connections 11 Chicago, June 1-2 2017
System Requirements
• RHEL / CentOS 7.3
• designed to be horizontally scalable, but one
node deployment will work
• All System requirements
https://goo.gl/HNgEJW
• Test environment (one node): 4 Cores, 16 GB
RAM, 200 GB disk
15. Social Connections 11 Chicago, June 1-2 2017
Installation steps (1)
• Download from Fix
Central
• Install Spectrum CfC
using /opt/deployCfC/
deployCfC.sh
16. Social Connections 11 Chicago, June 1-2 2017
Installation steps (2)
• Setting up persistent volumes using
provided scripts
• Local (one node only!)
• NFS
• Enable profile events
• TDISOL (tdi-profiles-config.xml)
• Profiles (profiles-config.xml)
17. Social Connections 11 Chicago, June 1-2 2017
Installation steps (3)
• Install Orient Me using
hybrid/microservices/hybridcloud/install.sh
• Configure IHS
• Forward /social & /itm
• Secure your IHS Proxy configuration:
https://goo.gl/KDalJr
18. Social Connections 11 Chicago, June 1-2 2017
Installation steps (3)
• Populate Profiles & Communities
• Configure the Action Center
• Optional: Configure mail service
(Exchange only)
• Optional: Secure Redis communication
19. Social Connections 11 Chicago, June 1-2 2017
Installation guides
• Knowledge Center: https://goo.gl/CvUmzN
• Martti Garden:
http://socialibmer.com/orient-me-
installation-and-integration-guide/
21. Social Connections 11 Chicago, June 1-2 2017
Define mount points for…
• /pv
• Persistent Docker volumes
• /var/lib
• Docker with Images, Containers, …
• Elasticsearch, Repository, …
• Around 20 GB after installation
• /opt
• CfC root directory
Tip: Do not move /var/lib/docker/overlay
22. Social Connections 11 Chicago, June 1-2 2017
Installation: root vs. sudo
• Installation with sudo will work, but:
• Root password will be asked
• Kubectl within sudo session
• export PATH=$PATH:/usr/local/bin
• Export PATH before CfC setup
• Customize /root/.bashrc
23. Social Connections 11 Chicago, June 1-2 2017
DNS vs. /etc/hosts
• Container will talk to your Connections
environment
• Hosts entries will work but many
customizations are needed
• Use DNS and be happy ;-)
• Test only: Install bind server and redeploy kube-
dns pods
24. Social Connections 11 Chicago, June 1-2 2017
Reconfigure Orient Me settings
• kubectl edit configmaps
25. Social Connections 11 Chicago, June 1-2 2017
Redeploy Containers
• Why?
• configuration changes
• Runtime issues
• kubectl delete pods xxx
• Use kubectl delete --all pods --namespace=default to
recreate all Orient Me containers
26. Social Connections 11 Chicago, June 1-2 2017
Internet access is needed!
• Why?
• Docker Hub
• Kubernetes & Helm installation (curl)
• CfC Installation (yum)
• Solr pods (yum)
• Direct access is the only supported one
• Proxy configuration will work too
• You may need to reconfigure this after updates!
28. Social Connections 11 Chicago, June 1-2 2017
Proxy configuration (after Installation)
• Customize Configmap
• proxy-http: http://yourproxy
proxy-https: https://yourproxy
noproxy: localhost,127.0.0.1,*.cfc
• Customize “env” section within
application configuration
• at least for Solr
• Redeploy pods
29. Social Connections 11 Chicago, June 1-2 2017
footer.jsp
• will not be loaded on Orient Me
• Move your customizations into header.sjp
• Touchpoint
• Piwik
• …
30. Social Connections 11 Chicago, June 1-2 2017
Changing the admin user password
1. Change password using CfC UI
2. Login to local Docker registry
• docker login master.cfc:8500
3. Recreate secrets
• kubectl delete secret myregkey
• kubectl create secret docker-registry myregkey --docker-
server=https://master.cfc:8500 --docker-
username=admin --docker-password=<yourpsw> --
docker-email=connections@us.ibm.com
31. Social Connections 11 Chicago, June 1-2 2017
HTTPS only communication (CNX)
• Posting & likes will not work by default
• Reconfigure configmap
• Redeploy pods
• orient-webclient-*
• itm-service-*
• More information: https://goo.gl/doada3
32. Social Connections 11 Chicago, June 1-2 2017
Troubleshoot Redis configuration
• SELECT * FROM HOMEPAGE.MT_CFG_SETTINGS
WHERE NAME LIKE 'c2.export.redis%'
33. Social Connections 11 Chicago, June 1-2 2017
People migration
• Issues?
• Check if CNX is reachable
• kubectl exec -it people-migrate-* -- curl --insecure -v
https://cnx6.pana.local/profiles/admin/atom/profiles.do
• Any MongoDB related issues?
• kubectl exec -it mongo-0 -- mongo mongo-0 -eval
'rs.status()’
• Migration takes 15-20 minutes for every 10k
users
34. Social Connections 11 Chicago, June 1-2 2017
Reinstall Orient Me (In case of failure)
• hybridcloud/bin/clean.sh
• Will remove all Orient Me pods/services
• Spectrum CfC will stay
• Delete persistent content manually (/pv)
• Reinstall using install script
35. Social Connections 11 Chicago, June 1-2 2017
Limitations
• Sametime Proxy integration will not be
loaded on Orient Me
• No embedded experience (Third party
integrations)
• SPNEGO SSO seems not to work
• PMR is under investigation
36. Social Connections 11 Chicago, June 1-2 2017
More resources
• Kubernetes cheat sheet:
https://kubernetes.io/docs/user-
guide/kubectl-cheatsheet/
• My troubleshooting session (yesterday)
• Slides will be available soon
Ship, micro services, isolated containers, more efficient resources usage
From a development toolset to a production solution
hardware virtualization vs. operating-system-level virtualization. OS resources will be shared. Only binaries/libraries, app itself are part of the container
isolated CPU, memory, I/O, and network resources
Etcd = With etcd you can easily manage cluster coordination and state management
Apache ZooKeeper enables highly reliable distributed coordination of group services used by an application.
MongoDB is an open-source database that uses a document-oriented rather than relational data model.
Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.
Solr provides distributed indexing, replication and load-balanced querying, automated failover and recovery, and centralized configuration.