flyingmonkeys-141025-1457-50

flyingmonkeys-141025-1457-50


  1. Home  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  2
  1. Applications  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  3
  1. Ask Intel  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  4
  2. Enterprise Wiki  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  6
  1. How to check macro pricing when a macro is requested  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  7
  1. FMDE Roadmap  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  11
  2. GOTO  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  12
  3. Intel Video Portal TCM  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  13
  1. AGS workgroup creation  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  14
  2. Analytics  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  16
  3. Frequently Asked Questions  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  21
  4. IVP Sustaining Support Model  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  22
  5. Key Communication Meetings  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  23

1.1.5.5.1 Channel Owners  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  24

  1. Media-old  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  25
  2. UI Changes  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  26
  1. Service Now  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  27
  2. Talkwalker  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  31
  1. Ask Intel - WCDS Integration  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  32
  2. Test  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  36
  1. Cloud Foundry to CaaS Migration  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  37



Home

Welcome to the Flying Monkeys APT

Recently Updated

Cloud Foundry to CaaS Migration

Jul 31, 2024 • updated by Harrold, Michael W • view change

How to check macro pricing when a macro is requested

May 08, 2023 • updated by Barroso Ramirez, Enrique • view change image-2023-5-8_8-22-47.png

May 08, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-8_8-22-29.png

May 08, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-8_8-21-6.png

May 08, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-8_8-19-5.png

May 08, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-8_8-18-42.png

May 08, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-8_8-17-12.png

May 08, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-5_9-27-49.png

May 05, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-5_9-28-32.png

May 05, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-5_9-33-17.png

May 05, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-5_9-33-53.png

May 05, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-5_9-39-54.png

May 05, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-5_9-45-44.png

May 05, 2023 • attached by Barroso Ramirez, Enrique image-2023-5-5_9-46-7.png

May 05, 2023 • attached by Barroso Ramirez, Enrique

Applications




Ask Intel

URLs:

Front End:

API: 

​ Environment ​ Component ​ Vanity ​ Load Balancer ​ Application Instance ​ Development ​ ask-intel-api- ​ development ​ https://ask-intel-api-development.apps1 ​ - ​ fm-int.icloud.intel.com ​ / ​ https://ask-intel-api-development.apps1 ​ - ​ fm-int.icloud.intel.com ​ / ​ Preview ​ ask-intel-api- ​ preview ​ https://ask-intel-api-preview.apps1-fm ​ - ​ int.icloud.intel.com ​ / ​ https://ask-intel-api-preview.apps1-fm-int ​ . ​ icloud.intel.com ​ / ​ https://ask-intel-api-preview.apps1-fm-int ​ . ​ icloud.intel.com ​ / ​ Production ​ ask-intel-api- ​ production ​ https://ask-intel-api-production.apps1-fm ​ - ​ int.icloud.intel.com ​ / ​ https://ask-intel-api-production.apps1-fm ​ - ​ int.icloud.intel.com ​ / ​ https://ask-intel-api-production.apps1-fm ​ - ​ int.icloud.intel.com ​ /

Azure App Registrations

​ Client ID ​ Nam e ​ Required Scopes ​ 5 0 ​ f5395f-4e6c-4c3b-bff2-09d247d 2aa ​ 9 4 ​ Ask Intel (Development) ​ https://graph.microsoft.com/User.Rea d.Al ​ l ​ https://graph.microsoft.com/GroupMember.Re ad.Al ​ l ​ 3 ​ d75bea9-d524-4f52-8de1-1b6aa620 04ef ​ Ask Intel (Preview) ​ https://graph.microsoft.com/User.Rea d.Al ​ l ​ https://graph.microsoft.com/GroupMember.Re ad.Al ​ l ​ 2 ​ f6847a3-e95b-430e-b38e-2d861d9a0 d2d ​ Ask Intel (Production) ​ https://graph.microsoft.com/User.Rea d.Al ​ l ​ https://graph.microsoft.com/GroupMember.Re ad.Al ​ l

Hosting:

Load Balancers:

​ Environment ​ Datacenter ​ Name ​ IP Address ​ Core B LTM - FM1




Enterprise Wiki




How to check macro pricing when a macro is requested

These are the steps on what to do when a new macro is requested.

  1. First, we need to verify if the macro being requested is already installed in Enterprise Wiki by clicking the "Insert more content" button and looking for the macro requested

This will display multiple options of macros already installed, if the macro being requested does not appear thee we can click the last button that says "Other macros"

This will display a window for us to search by the macro name:

  1. If the macro required is not installed already we can use the same methods to look for a similar macro that fulfills the customer's needs.
  2. In case there is no other macro with similar capabilities, we are going to request the user the specific macro link that will guide us to the Atlassian marketplace https://marketplace.atlassian.com/ where the details are. Also, we can go to the marketplace by ourselves and look for the macro 

using its name of it in the search bar:

  1. After either looking for the macro ourselves or having the link point us directly to it we will be presented with a page similar to this one:

  1. Inside this page, we will see details of the macro divided into tabs as an overview of it, reviews, pricing, support, versions, and installation. In this case, we are interested in the "Pricing" tab, to see the pricing information we only just need to click it:

  1. Inside this tab, we could see how much it will cost to have this macro installed. The pricing varies between the number of users that are going to work with the macro. In this case, we will always look at the total annual pricing for the maximum number of users the pricing tab of this macro allows. To look for the annual cost we need to check we are looking at the annual pricing by switching the button from monthly to annual:

                                                                        

 

  1. After switching to annual pricing we need to click on the link below that says "View pricing doe different user tiers" to display all the annual costs per number of users:

  1. When the pop-up appears scroll down to the bottom and see the number of users it allows and how much will cost, in this example the macro will cost USD 40,675 annually to support 35000 users:




FMDE Roadmap




GOTO

URLs:

Azure App Registrations

​ Client ID ​ Nam e ​ Required Scopes ​ 3594 2 ​ ff4-973d-4dd0-ba28-7391a45e8 e2a ​ GOTO Administration (Development) ​ https://graph.microsoft.com/User.Rea d.Al ​ l ​ https://graph.microsoft.com/GroupMember.Re ad.Al ​ l ​ dcda147d-7119-4120-8e90-07b7fa11 bafe ​ GOTO Administration (Preview) ​ https://graph.microsoft.com/User.Rea d.Al ​ l ​ https://graph.microsoft.com/GroupMember.Re ad.Al ​ l ​ a70a5a26-0a8b-4680-91a5-84a80673 0698 ​ GOTO Administration (Production) ​ https://graph.microsoft.com/User.Rea d.Al ​ l ​ https://graph.microsoft.com/GroupMember.Re ad.Al ​ l

Hosting:

Load Balancers:

​ Environment ​ Datacenter ​ Name ​ IP Address ​ Core B LTM - HF2 ​ Core B LTM - HF2

Intel Video Portal TCM

​ Communication: ​ Used for: ​ All IVP Users ​ Communicating to the general population (ex: changes to the tools, processes, and environments). ​ Management communications ​ Providing managers information to pass down to their employees Intel Video Portal Platform changes ​ Mobile Users ​ Communicating Mobile (My Intel/HaloLens) tools and processes for the IVP new version. ​ Brown Bag Sessions ​ Showcase/demo of IVP tool to give employees a feel for what they can expect before the migration into the ​ upgraded environment ​ IVP Community Forum ​ Encourage employees to sign up to Yammer site for latest news. ​ IVP Self-Start Guide, Videos, and ​ FAQ s ​ Providing high level information for new users, have to navigate through IVP and Frequently Asked Questions. ​ Kaltura Knowledge articles ​ Providing users with Kaltura Self-help Guides (How-To's)




AGS workgroup creation

​ Title: AGS workgroup creation ​ Intel Information Technology ​ Created by: Monge, Paola (L2 Support) ​ ​ Descriptio n ​ AGS work group creation for managing approvers list ​ Who performs ​ L2 team ​ What you should know (optional) ​ Access to the AGS production with administration privilege. ​ When performed (optional) ​ Before creation of AGS entitlements, work group creation is mandatory ​ Comme nt ​ Work group name should be same as entitlement name.

​ St ​ e p ​ Actio n ​ Expected Results (Screenshots) ​ 1 ​ Login to ​ https://ags.intel.com/ident ityi ​ q ​ /dashboard.j s ​ f ​ Successful login to the AGS. ​ 2 ​ At the left-hand corner (bullet icon), Go to ​ Manage and select the option Workgroups. ​ 3 ​ Request Type should be Create New ​ Workgroup and the click over ​ O K


​ 4 ​ 1 ​ . Keep the Workgroup name same as ​ Entitlement name requested by customers. ​ 2 ​ . The workgroup Sub Type should be ​ always ​ Manager by owner ​ 3 ​ . Description should be Workgroup name. ​ 4 ​ . Owner is always ​ Owner-IV P ​ . ​ Application Owners ​ 5 ​ . Add the approver names requested in ​ channel request form. ​ 6 ​ . Set the Email notification to the Notify ​ members and group email ​ 7 ​ . Submit the request. ​ 8 ​ . Confirmation of Workgroup creation.

Analytics

​ Title: IVP Analytics ​ Intel Information Technology ​ Created by: Fernandez, Gloriana ​ Descriptio n ​ IVP Analytics ​ Who performs ​ Testing Team ​ What you should know (optional) ​ Guide to all the IVP users for the upgraded Analytics module. ​ When performed (optional) ​ Before navigating the IVP Portal ​ Comme nt ​ N A

​ S ​ t ​ e p ​ Actio n ​ Expected Results (Screenshots) ​ 1 ​ The Analytics module view has been modified ​ during the IVP upgrade, now you will find a ​ different view and new features to extract ​ informatio n ​ Previous view ​ New view ​ When you publishing videos you will be able to get user analytics. It is possible to view ​ analytics down to the individual user level when a video has been published . ​ You will have some limitations with User-Level Analytics ​ It is possible Analytics module could not collect information about someone's ​ viewership. There have been cases where specific browsers, browser plugins, or ​ Virtual Private Networks (VPNs) have blocked Kaltura Analytics from collecting data. ​ If you make an unlisted video, then paste a link to that video in Canvas or elsewhere, ​ users who view the video through that link will appear in Kaltura Analytics as Unknown. ​ If you allow viewers to download your video, then when viewers watch videos they ​ downloaded to their computer/device, data about their viewership will not be sent back to ​ Kaltura Analytics.

​ 2 ​ How to access to Analytics ​ From your media or video click to the right of the title, select View Analytics icon ​ The analytics page appears. A summary appears at the top, with each section broken ​ down into greater detail below the video. ​ Note: If you cannot find the View Analytics icon, try making your browser window wider, ​ then try again or contact the IT team support. ​ Filter sections: Media Space, to the right of the title, select View ​ Analytics icon ​ 3 ​ Date Filter ​ By default, the given date range shows the last 30 days, but does not include today’s data. To ​ change the time period and/or date range, select the Date Range in the upper right. ​ To include today's date, select Since Creation or enter a specific date range. ​ Filterin g ​ To use other filters, select the ​ menu . ​ Filter ​ In analytics for a ​ you can filter by: ​ single video, ​ Countr y ​ Domain ; ​ is Kaltura in Canvas ​ kaf.canvas.umn. ed ​ u ​ In analytics for a ​ or ​ , you can filter by: ​ Canvas course ​ Media Space channel ​ Media Type ​ : ​ whether the media is video, audio, and/or images ​ Entry Source ​ whether the media was uploaded from the owner's computer/device, ​ : ​ Kaltura Capture, or Kaltura Classroom ​ Viewing Context ​ means to show data about a video everywhere it may be published, ​ including the Canvas course or Media Space channel. Select ​ to view only ​ Subcategor y ​ media embedded on a page or other resource using the Rich Content Editor in Canvas. ​ Tag s ​ : ​ specific tags you may have entered for the media ​ Domain : ​ ​ is Kaltura in Canvas ​ kaf.canvas.umn. ed ​ u ​ Locatio n ​ Includes Country, Region, and City ​ :


​ Analytics Features ​ Total number of player impressions, which is the number of times someone opened a web ​ page where the media appears ​ Minutes viewed ​ Number of plays ​ Number of contributors ​ Unique viewers ​ The following sections provide additional details and explanations of analytics features. ​ Category Page Views ​ This section allows you to compare the number of times people have played a video within the ​ IVP. ​ Top Videos ​ This shows a ranking of the most popular videos the IVP Portal ​ Top Viewers ​ This lists the top viewers based on the number of plays for the given time period. ​ Insight s ​ The Insights section has a rotating display including Most Viewed Domain, Top Locations, Most ​ Popular Device type. Select See details to jump down to more details lower in the page.




​ Video/Category Performance Over Time ​ When viewing analytics for a single video, this section is called Video performance over ​ time . ​ When viewing analytics channel, this section is called Category Performance Over Time. ​ When viewing the Category (or Video) Performance Over Time section, by default, you are in ​ the Player ​ Impression tab, displaying a graph of impressions. You can sort by Daily or Monthly ​ performanc e. ​ Impressions data tracks how many times your video thumbnails are shown on a page. Think of ​ each impression as your potential audience reach and an opportunity to earn a view. The ​ impression count goes up every time a video thumbnail is shown to someone. ​ To explore engagement trends over time, use the graph to review key metrics in the additional ​ tabs within Category (or Video) Performance Over Time: ​ Plays: Number of times users click play to watch a video ​ Unique viewers: Number of authenticated viewers; all anonymous viewers count as a ​ single viewer, labeled "Unknown" ​ Minutes viewed: Total duration of video watched by viewers ​ Avg. drop off rate: An average measured by viewers reaching playback milestones ​ Note: Many viewers will watch all video content but do not count as 100% completion ​ due to "dead air" at the end of the video. ​ 2 5 ​ % play-through: The number of plays that reached 25% of the video ​ 5 0 ​ % play-through: The number of plays that reached 50% of the video ​ 7 5 ​ % play-through: The number of plays that reached 75% of the video ​ 10 0 ​ % play-through: The number of plays that reached 100% of the video ​ Avg. Completion Rate: The percentage of completed plays. The number of 100% play- ​ throughs divided by the total number of plays. ​ Clicking View Details at the bottom of the Performance Over Time section provides additional ​ filtering options. You can sort by Users, Entries, and Dates.

​ How Player Impressions Lead to Engagement ​ This area tracks the ways in which viewers interact with your media following an impression - ​ whether they clicked on the media and watched it. You can select playthrough milestones for ​ additional data. ​ 7 ​ Top Countries and Devices Overview ​ The Top Countries section tracks countries with the most engagement with your media, as well ​ as impression information. Clicking on a country provides more detailed location information. ​ You can continue clicking on location links for even more specific location details. ​ In the devices overview sections is designed to shows which types of devices are used to ​ access your media. Hovering over a percentage tells you how many plays occurred on that ​ type of device. ​ 8 ​ Top Domains ​ The top domains are ordered by sites that had the most number of plays in the selected time ​ frame. For each domain the following metrics are available: ​ Player impressions ​ Player impressions ratio: number of plays divided by number of impressions ​ Play s ​ Plays distribution: number of plays divided by the total number of plays in the selected ​ timefram e ​ Minutes viewed ​ Average drop-off rate: measured by viewer reaching playback quartiles/milestones ​ 1 0 ​ For new additional material go and click: ​ https://it.umn.edu/services-technologies/how-tos/kaltura-view-analytics-about-me dia-usag ​ e


Frequently Asked Questions

​ Questions ​ Answers




IVP Sustaining Support Model




Key Communication Meetings




Channel Owners




Media-old




UI Changes

When searching use double quotes for an exact match

When searching, channels are listed to the right of the screen.  In the previous version, you have to click on 'Search Channels'

If Social Chorus has already launched, then the Video Carousel will no longer be there.  - Should this be recent or most watched?  Other options?




Service Now

This document is created for new employees Intel Employees that will provide Service Now support for different products (apps) and it will show you how to set up the filter in order to provide the corresponding support. 

Ticket Filtering

Access to Service Now and Select Our Incidents at the search bar at the left side of the window:

At the 3 lines icon click over the Filter icon: 

Set the filter as follows: 

Active is true AND 

Incident state is one of NEW/ACTIVE/AWAITING USER INFO

Select the option AND and set the information as follows: 

Product is IT.intel.com

After the first selection you have to select each product selecting OR as follows: 

This is the complete List that has to be set for the incidents filter: 

  1. GOTO Tool
  2. IT Web Redirector
  3. IT.intel.com
  4. Target Mailer
  5. Enterprise Wiki
  6. Digital Signage-Software
  7. Intel Video Portal
  8. DFR Audit Tool
  9. Stackoverflow for Enterprise
  10. IT Portal Admin Tool
  11. HR Support Tool
  12. Ask Intel
  13. Analytics Property Injection Service
  14. CodeGen
  15. Qualtrics-Intel Employee Survey tool
  16. Platform Search
  17. My Intel
  18. Employee Support 
  19. HR Modular Apps
  20. My Intel Approvals
  21. Collaboration Tools Provisioning
  22. AskHR
  23. Poppulo
  24. Social Chorus
  25. Intel Worldwide Fulfillment site 
  26. Talkwalker

Click over Run

After is done go to the filter icon again and click over Save to save the filter with your preferred name. 

After you set up the filter you can go to the 3 lines icon you can select your filter by going to the following path and select the name that you just type for your filter: 

In this way you will see all the tickets associated to the selected filtered. 

If you want to add this as favorite you can go to the 3 lines icon and select Create Favorite

You can put the same name of your Filer and select your preferred icon and color for it and click over Done

You will see your filter under Favorites (Star Icon) at the left side of your window: 

Service Now Requests (RITM) TBD

Important Links

​ Service Now ​ https://e2esm.intel.com/nav_to.do?uri=%2Fhome. do%3 ​ F

Talkwalker URLS:

​ Environme nt ​ IT Apps Platform ​ Cloud Foundry ​ Environme nt ​ IT Apps Platform ​ Cloud Foundry ​ Developme nt ​ TB D ​ Previe w ​ TB D ​ Productio n ​ TB D

Azure App Registrations

​ Client ID ​ Nam e

HOSTING:

IT Apps Platform

LOAD BALANCERS:

None

Ask Intel - WCDS Integration

This document is intended to describe the steps to follow to upload the information that Intel have on ASK INTEL and WCDS applications and upload it into Talkwalker to see all the information integrated.

API Architecture

The following diagram shows the current architecture for the API for Ask Intel and WCDS to upload the information into Talkwalker.

INSERT DIAGRAM 

Fields to be uploaded into Talkwalker

                Identified Project

               Unidentified Project

API AUTHENTICATION

API is pending to be created to confirm the way that will be authenticated 

Sample Code

API is pending to be created to have thi information 

HTTP Request Headers

API is pending to be created to determine if the HTTP will be required

Calling the API

API is pending to be created

API ENDPOINTS

ASK INTEL ENDPOINT: Endpoint already created, to retrieve ASK Intel information the developer will required a Token (ASK Intel provides this information) and a Session ID parameter. Bellow the detailed information: 

Endpoint: https://ask-intel-api-production.apps1-fm-int.icloud.intel.com/v1/commentExcelQuestionComments/session/{sessionId}  WCDS ENDPOINT: Information still pending

PROJECT DOCUMENTS




Test




Cloud Foundry to CaaS Migration

​ This document is work in progress. ​ Experiments in CaaS are encourage, but actual production migration is ​ at this time due to limited cluster availability and the ​ not recommended ​ fact that the shared clusters are not co-located with DBaaS.

  1. Onboarding with CaaS

You can request Harbor Registries as projects on the shared clusters using the service request from: https://intel.service-now.com/aem? id=aem_sc_cat_item&sys_id=c649846ae825a7005c3c88a21f08fded

Shared cluster locations are currently limited with more locations coming at a later date.

  1. Onboarding with ARC

You can onboard to ARC using the bridge repo here: https://github.com/intel-innersource/applications.services.1source.automation.arc-bridge

  1. Onboarding with PAM

You can create new PAM Safes for application integration here: https://intel.service-now.com/aem? id=aem_sc_cat_item&sys_id=31e0745eb943bb405c3cc653383b8398

We recommend separate safes for Development, Preview and Production.  This will make later configuration substantially easier.

  1. Onboarding with Conjur

Conjur is a vendor API provided by the same company that created PAM.  It allows your GitHub Action workflows to seamlessly connect into PAM using a GitHub Action generated token such that you do not have to manage the credentials.

The Conjur service request is located at https://intel.service-now.com/aem?id=aem_sc_cat_item&sys_id=e3ab16388720ce5095387447cebb35f8

When submitting the form, it is important to note that you can configure the Conjur action to work with the branch or the environment.  I strongly recommend the environment configuration.

This is configured with the sub claim.  This claim is equal to sub claim which is generated by GitHub Action Workflow and it should match below format:

​ repo:intel-/:ref:refs/hea ds/ ​ repo:intel-/:environme nt: ​ repo:intel-innersource/documentation.web.samples.web-concepts.readme:refs:refs/heads/de velopment ​ repo:intel-innersource/documentation.web.samples.web-concepts.readme:refs:refs/head s/preview ​ repo:intel-innersource/documentation.web.samples.web-concepts.readme:refs:refs/h eads/main ​ repo:intel-innersource/documentation.web.samples.web-concepts.readme:environme nt:build ​ repo:intel-innersource/documentation.web.samples.web-concepts.readme:environment:de velopment ​ repo:intel-innersource/documentation.web.samples.web-concepts.readme:environmen t:preview ​ repo:intel-innersource/documentation.web.samples.web-concepts.readme:environment:p roduction

  1. Recommended System Accounts
  2. Deploying to Rancher
  1. Initial Setup
  2. ACME & Certificates
  3. Workload, Service and Ingress

Example workload file

​ apiVersion: apps/v1 ​ kind: Deployment ​ metadata : ​ name: api ​ spec : ​ selector: ​ matchLabels: ​ app: api ​ replicas: 1 ​ strategy: ​ rollingUpdate: ​ maxSurge: 1 ​ maxUnavailable: 0 ​ template: ​ metadata: ​ labels: ​ app: api ​ spec: ​ containers: ​ - name: api ​ image: amr-registry.caas.intel.com/meetup/api ​ imagePullPolicy: Always ​ resources: ​ requests: ​ cpu: 50m ​ memory: 90Mi ​ limits: ​ cpu: 100m ​ memory: 256Mi ​ env: ​ - name: AZURE_CLIENTID ​ valueFrom: ​ configMapKeyRef: ​ name: azure ​ key: clientid ​ - name: AZURE_INSTANCE ​ valueFrom: ​ configMapKeyRef: ​ name: azure ​ key: instance ​ - name: AZURE_TENANTID ​ valueFrom: ​ configMapKeyRef: ​ name: azure ​ key: tenantid ​ - name: SQL_CONNECTION_STRING ​ valueFrom: ​ secretKeyRef: ​ name: dbaas ​ key: sql-connection-string ​ ports: ​ - containerPort: 8080 ​ name: api-http

Example Service

​ apiVersion: v1 ​ kind: Service ​ metadata : ​ name: api-service ​ spec : ​ selector: ​ app: api ​ ports: ​ - protocol: TCP ​ port: 80 ​ targetPort: api-http ​ type: ClusterIP

Example Ingress

​ apiVersion: networking.k8s.io/v1 ​ kind: Ingress ​ metadata : ​ name: api-ingress ​ spec : ​ rules: ​ - host: meetup-development.intel.com ​ http: ​ paths: ​ - pathType: Prefix ​ path: /api/ ​ backend: ​ service: ​ name: api-service ​ port: ​ number: 80 ​ tls: ​ - secretName: meetup-development-cert