Add new CSP support: Tencent

[jihoon-seo]

• Tencent Cloud console: https://console.intl.cloud.tencent.com/
• Sub-user 생성 및 목록 확인 메뉴 : https://console.intl.cloud.tencent.com/cam

[jihoon-seo]

[Tencent Cloud, "Cloud Virtual Machine" Regions and AZs]
https://intl.cloud.tencent.com/document/product/213/6091

[jihoon-seo]

CB-Spider 에 credential object를 다음과 같이 등록했는데..

• NULL:xxxx, (현행 TB 테스트 스크립트를 이용하면, NULL:NULL 엔티티가 함께 등록됨)
• SecretId:xxxx,
• SecretKey:xxxx,

[CB-SPIDER].[ERROR]: 2021-10-21 15:56:52 CCMCommon.go:783, github.com/cloud-barista/cb-spider/api-runtime/common-runtime.CreateVPC() - [TencentCloudSDKError] Code=AuthFailure.SecretIdNotFound, Message=The SecretId is not found, please ensure that your SecretId is correct., RequestId=ca7f4efa-f974-4cb1-9665-b65a169748c1

총 2쌍의 SecretId / SecretKey 로 시도해봤으나 동일 현상 발생

---

해결:
TB의 credentials.conf 작성 시

CredentialKey01[$IndexTencent]=SecretId 가 아니라
CredentialKey01[$IndexTencent]=ClientId 로,

CredentialKey02[$IndexTencent]=SecretKey 가 아니라
CredentialKey02[$IndexTencent]=ClientSecret 로 적어야 함

[jihoon-seo]

[Create SG]

        curl -H "${AUTH}" -sX POST http://$TumblebugServer/tumblebug/ns/$NSID/resources/securityGroup -H 'Content-Type: application/json' -d @- <<EOF
        {
                        "name": "${CONN_CONFIG[$INDEX,$REGION]}-${POSTFIX}",
                        "connectionName": "${CONN_CONFIG[$INDEX,$REGION]}",
                        "vNetId": "${CONN_CONFIG[$INDEX,$REGION]}-${POSTFIX}",
                        "description": "test description",
                                "firewallRules": [
                                        {
                                                "FromPort": "1",
                                                "ToPort": "65535",
                                                "IPProtocol": "tcp",
                                                "Direction": "inbound",
                                                "CIDR": "0.0.0.0/0"
                                        },
                                        {
                                                "FromPort": "1",
                                                "ToPort": "65535",
                                                "IPProtocol": "udp",
                                                "Direction": "inbound",
                                                "CIDR": "0.0.0.0/0"
                                        },
                                        {
                                                "FromPort": "-1",
                                                "ToPort": "-1",
                                                "IPProtocol": "icmp",
                                                "Direction": "inbound",
                                                "CIDR": "0.0.0.0/0"
                                        }
                                ]
                        }

❯ ./create-securityGroup.sh -n jhseo -c tencent -r 1
####################################################################
## 4. SecurityGroup: Create
####################################################################


- Create securityGroup in tencent-ap-sing
{
  "message": "{\"message\":\"[TencentCloudSDKError] Code=InvalidParameterValue, Message=The parameter `.SecurityGroupPolicySet.Ingress.2.Port`'s value `` is invalid., RequestId=f81c3291-c8d0-497f-a677-bb15deba3139\"}\n"
}

---

"FromPort": "-1",, "ToPort": "-1", 이라고 되어 있는 firewallRule을 삭제하고 다시 시도

        curl -H "${AUTH}" -sX POST http://$TumblebugServer/tumblebug/ns/$NSID/resources/securityGroup -H 'Content-Type: application/json' -d @- <<EOF
        {
                        "name": "${CONN_CONFIG[$INDEX,$REGION]}-${POSTFIX}",
                        "connectionName": "${CONN_CONFIG[$INDEX,$REGION]}",
                        "vNetId": "${CONN_CONFIG[$INDEX,$REGION]}-${POSTFIX}",
                        "description": "test description",
                                "firewallRules": [
                                        {
                                                "FromPort": "1",
                                                "ToPort": "65535",
                                                "IPProtocol": "tcp",
                                                "Direction": "inbound",
                                                "CIDR": "0.0.0.0/0"
                                        },
                                        {
                                                "FromPort": "1",
                                                "ToPort": "65535",
                                                "IPProtocol": "udp",
                                                "Direction": "inbound",
                                                "CIDR": "0.0.0.0/0"
                                        }
                                ]
                        }

❯ ./create-securityGroup.sh -n jhseo -c tencent -r 1
####################################################################
## 4. SecurityGroup: Create
####################################################################


- Create securityGroup in tencent-ap-sing
{
  "id": "tencent-ap-sing-jhseo",
  "name": "tencent-ap-sing-jhseo",
  "connectionName": "tencent-ap-sing",
  "vNetId": "tencent-ap-sing-jhseo",
  "description": "test description",
  "firewallRules": [
    {
      "FromPort": "1",
      "ToPort": "65535",
      "IPProtocol": "tcp",
      "Direction": "inbound",
      "CIDR": "0.0.0.0/0"
    },
    {
      "FromPort": "1",
      "ToPort": "65535",
      "IPProtocol": "udp",
      "Direction": "inbound",
      "CIDR": "0.0.0.0/0"
    }
  ],
  "cspSecurityGroupId": "sg-eaoincbi",
  "cspSecurityGroupName": "tencent-ap-sing-jhseo",
  "keyValueList": null,
  "associatedObjectList": [],
  "isAutoGenerated": false
}

→ SG 생성 성공

[jihoon-seo]

[Create SSHKey]

❯ ./create-sshKey.sh -n jhseo -c tencent -r 1       
####################################################################
## 5. sshKey: Create
####################################################################


- Create sshKey in tencent-ap-sing
"{\"message\":\"[TencentCloudSDKError] Code=InvalidParameterValue, Message=The specified key pair name `tencent_a_c5ohc2kiqfvqn7ef7tcg` is too long, more than `25` characters., RequestId=f9891c9f-18ae-42e7-9b70-f3603764ec2e\"}\n"

→ 25자 제한이 있음
→ Spider IID 관리 관련 업데이트를 기다려야 함
→ 해결되었음 (cloud-barista/cb-spider#486)

[jihoon-seo]

위의 SG ICMP rule 관련 사항을 유의하면,
create-all.sh, clean-all.sh 스크립트가 동작하는 것을 확인하였습니다. 😊

[seokho-son]

SG ICMP rule
"FromPort": "-1",
"ToPort": "-1",
요게 안되는 상황인가요?

[jihoon-seo]

넵 😊

(Related issue on CB-Spider repo: cloud-barista/cb-spider#487)

                                        {
                                                "FromPort": "-1",
                                                "ToPort": "-1",
                                                "IPProtocol": "icmp",
                                                "Direction": "inbound",
                                                "CIDR": "0.0.0.0/0"
                                        }

FromPort 와 ToPort 에 다른 숫자를 넣어서 테스트 해 보지는 않았습니다.. 🤔

[jihoon-seo]

현재 VM spec 중 메모리 용량이 잘못 오는 상태입니다.
(Related issue on CB-Spider repo: cloud-barista/cb-spider#488)

[jihoon-seo]

Resolved by cloud-barista/cb-spider#491

[jihoon-seo]

[참고할 수 있는 CB-Spider 테스트 스크립트]

• Add and Update Tencent cloud Test scripts cb-spider#507
• https://github.com/cloud-barista/cb-spider/blob/master/api-runtime/rest-runtime/test/connect-config/10.tencent-conn-config.sh
• https://github.com/cloud-barista/cb-spider/blob/master/api-runtime/rest-runtime/test/full-test/10.tencent-test.sh
• https://github.com/cloud-barista/cb-spider/blob/master/api-runtime/rest-runtime/test/full-test/tencent-full_test.sh
• https://github.com/cloud-barista/cb-spider/blob/master/cloud-control-manager/cloud-driver/drivers/tencent/main/conf/testConfigTencent.yaml.sample

[jihoon-seo]

[(CB-Spider) Region, Zone 별 테스트 결과]
Tencent 연동 driver test (CB-Spider API 이용)-211102.xlsx