README

• This TOC page has been created with Ahmed El Sawaf Karine Sevilla Petar Torre (Deactivated) Saad Sheikh SID Tomas Fredberg [Ericsson] Walter.kozlowski and Pankaj.Goyal as editors/owners

Action Items

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

9.5 Automation

9.5.1 Infrastructure LCM Automation ( including Platform Software and CI/CD)  

End-2-End understanding of what type of automation ought to be done on what layers and includes

9.5.1.1. hardware configuration CI/CD

• Example, BIOS settings, Reset, Power Modes,
• HW component discovery and status/healt supervision
• Composability of physical hardware resources (components)
• Hardware Accelerator discovery, loading and assignment
• Firmware Update and supervision (measurement) of Signed FW on known Authentic HW
• Security related certificates, keys and roles

9.5.1.2. networking automation

• Physical network cabling detection and supervision
• L2, L3 and QoS Automation of Server NIC Network Assignment and Switch Fabric Network Assignment based on HW Provisioning in the HW Infrastructure Layer
• Partitioning, provisioning, enforcement of Overlay switching shared resources e.g. VLAN and VxLAN

9.5.1.3. software development CI/CD – Saad to add content

9.5.1.4. software deployment CI/CD (operator environment) – covered in 9.5.2.2 (inserted 2020-12-07)

9.5.1.5. Identify "Closed Loop Automation" as a Gap in Ch10 – Done (PR #2123 -need reviews)

9.5.2  Workload Software onboarding automation (including CI/CD). Owner: Walter.kozlowski

9.5.2.1. workload Software onboarding automation - the scope for RM is to describe support only but leave the details to RA/RI; Walter.kozlowski to open PR

The Cloud Infrastructure workload onboarding process describes activities needed for the integration of tenants' workloads into the Cloud Infrastructure environment. Typically, this business process consists of the following key phases:

1.  Tenant Engagement and Workload Evaluation:
   1.  In this phase the request from the tenant to host a workload on the Cloud Infrastructure platform is assessed and a decision made on whether to proceed with the hosting request.
   2. This phase may also involve the tenant accessing a pre-staging environment to perform their own evaluation and/or pre-staging activities in preparation for later onboarding phases.
2. Workload Packaging:
   1.  The main outcome of this phase is to produce the workload deployable image and  the deployment manifests (such as TOSCA blueprints or HEAT templates or Helm charts) that will define the Cloud Infrastructure service attributes for the workload. 
   2. The workload packaging can be performed by the tenant, through self-service capabilities or by the Cloud Infrastructure Operations team.
3. Workload Validation and Certification:
   1. In this phase the workload is deployed and tested to validate it against the service design and other Operator specific acceptance criteria, as required.
   2. Workload validation and certification should be automated using CI/CD toolsets / pipelines and Test as a Service (TaaS) capabilities.
4. Publish Workload:
   1. After the workload is certified the final onboarding process phase is for it to be published to the Cloud Infrastructure  production catalogue from where it can be instantiated on the Cloud Infrastructure platform by the tenant.

All phases described above can be automated using technology specific toolsets and procedures.  Hence, details of such automation are left for the technology specific Reference Architecture and Reference Implementation specifications.

9.5.2.2. Software CI/CD Requirements Pankaj.Goyal to open PR

The requirements including for CI/CD for ensuring software security scans, image integrity checks, OS version checks, etc. prior to deployment, are listed in the Table XX.XX (below). Please note that the tenant processes for application LCM (such as updates) are out of scope. For the purpose of these requirements, CI includes Continuous Delivery, and CD refers to Continuous Deployment.

Diagrams

9.5.3 Tenant creation automation

9.5.3.1. requirements for enterprise processes prior to tenant creation on the platform

Here is a starting set – Maybe too low level; requirements can be created once we agree on the correct set:

• Validate that the Capacity can satisfy the tenant requested quota for vCPU, RAM, Disk, Network Bandwidth
• Validate that the Cloud Infrastructure can meet tenant's performance requirements (e.g. I/O, latency, jitter, etc)
• Validate that the Cloud Infrastructure can meet tenant's resilience requirements
• Validate any requested private flavours
• For VM-based environments:
  • Verify that any requested private flavours have been created
  • Verify that the metadata for these private flavours have been created
  • Verify that the tenant has permissions to use the requested private flavours
  • Validate that host aggregates are available for specified flavors (public and private)
  • Verify that the metadata matches for the requested new flavours and host aggregates
• Verify that the networks requested by the tenant exist
• Verify the metadata: 1. Keypairs must be higher than default 2. Networks must be higher than default
• Add all Tenant Members and configure their assigned roles in the Enterprise Identity and Access management system (e.g., LDAP)
• Create Tenant
• Using a proto- or Tenant provided HEAT-template/Helm-chart for a NF and perform sanity test (e.g., using scripts test creation of VM/container, ping test, etc.)
• Verify and Validate Tenant Images: virus scan, correct OS version and patch, etc.

9.5.3.2. tenant networking automation

++++++++++++++++++++++++++++++++++++

Cedric to develop content on CNTT RI and RC toolchains

++++++++++++++++++++++++++++++++++++