runOpenMM

Overview

This directory contains the scripts to launch and debug the SAS Open Model Manager container.

Files

• sitedefault_sample.yml - Sample of the sitedefault.yml file, which loads defaults into Consul.
• sssd_sample.conf - Sample of the sssd.conf file, which is used for authenticating users in the container.
• run_docker_container - Script that launches the container with the correct settings for the docker run command.

Deploying the Container

1. Retrieve the files for this project in the manner you prefer. Place all the files in the same directory location.

2. Create the sitedefault.yml files according to the comments in the sample file.
   Note: Setting the SAS administrator in the sitedefault.yml file is recommended. See the bottom of the sitedefault_sample.yml file for an example. If you do not specify an administrator in the sitedefault.yml file during deployment of SAS Open Model Manager, you must configure an administrator account. Your SAS Open Model Manager environment is deployed with an initial administrator account that is named sasboot. However, the password for this account has expired by default, so you must reset the password before you can sign in. For more information, see Configure an Administrator Account in the SAS Open Model Manager: Administrator's Guide.

3. Create the sssd.conf file based on documentation from RedHat: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/sssd
   Note: SAS recommends that you use the Red Hat System Security Services Daemon (SSSD) as a security management tool to manage users and groups. Creating accounts in LDAP and then creating matching local accounts for users and for service ownership is not recommended.

4. Save the sitedefault.yaml and sssd.conf files in the same location as the run_docker_container script.

5. If you have a sssd.cert associated with the sssd.conf file, place it in the same location as the run_docker_container script.
   Note: The SSSD certificate file must be named sssd.cert to be applied properly. Also, you must set ldap_tls_cacert = /etc/sssd/sssd.cert in the sssd.conf file, which is in the same location as the run_docker_container script.

6. Copy the files in the licenses directory from the uncompressed Software Order Email (SOE) ZIP file to the same location as the run_docker_container script.

7. If you plan to run in TLS mode with custom certificates, you must perform the following steps:
   

   1. Obtain your custom signed CA certificate and public key files.
   2. Copy the CA certificate and public key files to the same location as the run_docker_container script.
   3. Rename the CA certificate file to casigned.crt.
   4. Rename the public key file to servertls.key.

8. Change the permissions of the run_docker_container file:

   chmod +x run_docker_container
   

9. Run the run_docker_container script using the appropriate values for the variables.
   Note: If you are running in TLS mode, make sure to add the --tls option when running the run_docker_container script.

   cd <the directory where you saved the run_docker_container file>
   ./run_docker_container --container-name openmodelmanager --image <registry URL>/<namespace>/<image>:<tag> --order <SAS order> [--http-port <port>|--https-port <port>] [--debug, --tls]
   
   

The command starts the container in detached mode. After the container is started, you can perform the following tasks:

• Look at logs for the container.

  docker logs openmodelmanager
  

• Log into the container.

  docker exec -it openmodelmanager bash
  

• Stop and delete the container instance.

  docker stop openmodelmanager
  docker rm openmodelmanager
  

A set of volumes are also created for you:

$ docker volume ls
DRIVER              VOLUME NAME
local               casdata-openmodelmanager
local               caspermstore-openmodelmanager
local               consul-openmodelmanager
local               postgres-openmodelmanager
local               sasmmastore-openmodelmanager
local               sasmmsresources-openmodelmanager

After the container is running, return to SAS Open Model Manager 1.2 for Containers: Deployment Guide for information that is required to complete your initial deployment.

License

This project is licensed under the Apache 2.0 License.