Joseph Doherty
de05c65992
Test instances persistently emit Notify.To("Engineering Alerts").Send;
without the list at central a fresh cutover parks every notification
(observed 42k+ parked in a 3.5-min S&F drain after the rename).
Mirror the seed across docker/seed-sites.sh and docker-env2/seed-sites.sh.
91 lines
3.6 KiB
Bash
Executable File
91 lines
3.6 KiB
Bash
Executable File
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
# Seed the three test sites with Akka and gRPC addresses.
|
|
# Run after deploy.sh once the central cluster is healthy.
|
|
#
|
|
# Prerequisites:
|
|
# - Infrastructure services running (infra/docker-compose up -d)
|
|
# - Application containers running (docker/deploy.sh)
|
|
# - Central cluster healthy (curl http://localhost:9000/health/ready)
|
|
#
|
|
# Usage:
|
|
# docker/seed-sites.sh
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
|
|
CLI="dotnet run --project $PROJECT_ROOT/src/ZB.MOM.WW.ScadaBridge.CLI --"
|
|
AUTH="--username multi-role --password password"
|
|
URL="--url http://localhost:9000"
|
|
|
|
echo "=== Seeding ScadaBridge Sites ==="
|
|
|
|
echo ""
|
|
echo "Creating Site-A (Test Plant A)..."
|
|
$CLI $URL $AUTH site create \
|
|
--name "Test Plant A" \
|
|
--identifier "site-a" \
|
|
--description "Test site A - two-node cluster" \
|
|
--node-a-address "akka.tcp://scadabridge@scadabridge-site-a-a:8082" \
|
|
--node-b-address "akka.tcp://scadabridge@scadabridge-site-a-b:8082" \
|
|
--grpc-node-a-address "http://scadabridge-site-a-a:8083" \
|
|
--grpc-node-b-address "http://scadabridge-site-a-b:8083" \
|
|
|| echo " (Site-A may already exist)"
|
|
|
|
echo ""
|
|
echo "Creating Site-B (Test Plant B)..."
|
|
$CLI $URL $AUTH site create \
|
|
--name "Test Plant B" \
|
|
--identifier "site-b" \
|
|
--description "Test site B - two-node cluster" \
|
|
--node-a-address "akka.tcp://scadabridge@scadabridge-site-b-a:8082" \
|
|
--node-b-address "akka.tcp://scadabridge@scadabridge-site-b-b:8082" \
|
|
--grpc-node-a-address "http://scadabridge-site-b-a:8083" \
|
|
--grpc-node-b-address "http://scadabridge-site-b-b:8083" \
|
|
|| echo " (Site-B may already exist)"
|
|
|
|
echo ""
|
|
echo "Creating Site-C (Test Plant C)..."
|
|
$CLI $URL $AUTH site create \
|
|
--name "Test Plant C" \
|
|
--identifier "site-c" \
|
|
--description "Test site C - two-node cluster" \
|
|
--node-a-address "akka.tcp://scadabridge@scadabridge-site-c-a:8082" \
|
|
--node-b-address "akka.tcp://scadabridge@scadabridge-site-c-b:8082" \
|
|
--grpc-node-a-address "http://scadabridge-site-c-a:8083" \
|
|
--grpc-node-b-address "http://scadabridge-site-c-b:8083" \
|
|
|| echo " (Site-C may already exist)"
|
|
|
|
echo ""
|
|
echo "Creating Engineering Alerts notification list..."
|
|
$CLI $URL $AUTH notification create \
|
|
--name "Engineering Alerts" \
|
|
--emails "engineer@company.com" \
|
|
|| echo " (Engineering Alerts may already exist)"
|
|
|
|
echo ""
|
|
echo "Seeding LDAP group mappings (Design + Deployment)..."
|
|
# SecurityConfiguration.HasData declares 4 mappings but the InitialSchema
|
|
# migration only inserts the Admin row, so a fresh ScadaBridgeConfig starts
|
|
# with multi-role getting Admin only -- no Design and no Deployment access.
|
|
# Insert the missing three idempotently.
|
|
docker exec -i scadabridge-mssql /opt/mssql-tools18/bin/sqlcmd \
|
|
-S localhost -U sa -P 'ScadaBridge_Dev1#' -C \
|
|
-d ScadaBridgeConfig -Q "
|
|
SET IDENTITY_INSERT LdapGroupMappings ON;
|
|
IF NOT EXISTS (SELECT 1 FROM LdapGroupMappings WHERE Id = 2)
|
|
INSERT INTO LdapGroupMappings (Id, LdapGroupName, Role) VALUES (2, 'SCADA-Designers', 'Design');
|
|
IF NOT EXISTS (SELECT 1 FROM LdapGroupMappings WHERE Id = 3)
|
|
INSERT INTO LdapGroupMappings (Id, LdapGroupName, Role) VALUES (3, 'SCADA-Deploy-All', 'Deployment');
|
|
IF NOT EXISTS (SELECT 1 FROM LdapGroupMappings WHERE Id = 4)
|
|
INSERT INTO LdapGroupMappings (Id, LdapGroupName, Role) VALUES (4, 'SCADA-Deploy-SiteA', 'Deployment');
|
|
SET IDENTITY_INSERT LdapGroupMappings OFF;
|
|
"
|
|
|
|
echo ""
|
|
echo "=== Site seeding complete ==="
|
|
echo ""
|
|
echo "Verify with: $CLI $URL $AUTH site list"
|
|
echo "Multi-role test user has Admin + Design + Deployment."
|
|
echo "Sign out and back in to refresh session role claims."
|