I recently installed Hyperledger on a Kubernetes cluster on IBM Bluemix trial account.
I want to use the Hyperledger Fabric SDK Node.js to access my blockchain. I am following the instructions to run the HLF SDK sample helloblockchain.js
https://github.com/IBM-Blockchain-Archive/SDK-Demo
I need to be able to retrieve my "service credentials". Since this is not the enterprise install on Bluemix I do not have a blockchain dashboard from which I can view credentials. How do I find my credentials to create the ServiceCredentials.json file?
Clarification:
When you install Hyperledger in a bluemix trial in a container you do not have the same Blockchain dashboard as you do if you added the Blockchain Enterprise service.
blockchain dashboard in trial account
If you click on the blockchain item you get the cluster dashboard. There is no service credentials option Or option to create service credentials.
When on the Bluemix dashboard, click on the Blockchain service and then on "service credentials" in the left column. This is where you'll find the credentials, if there isn't any click "create new credentials".
Related
I am new person in ibm cloud
I need install service "IBM Cloud Activity Tracker with LogDNA"
For the guide "Getting started with Certificate Manager"
https://cloud.ibm.com/docs/certificate-manager?topic=certificate-manager-getting-started
I found "Next steps" (import certificate or order certificate)
Is it needed in installation for "IBM Cloud Activity Tracker with LogDNA" or can be ignore?
Activity Tracker with LogDNA and Certificate Manager are two different services on IBM Cloud. In the documentation, certificate manager is shown as an example on how to use pay-as-you-go service. Any lite service you create in you IBM Cloud account triggers an event and can be seen in the activity tracker
If you have a pay-as-you-go account, you can use Certificate Manager to create an event. If you don't have a pay-as-you-go account, provisioning any of the available lite services triggers an event.
Check the getting started documentation here
Will kubernetes service connections in azure devops work with an AKS cluster that is bound to AAD via openidconnect? Logging into such clusters goes through an openidconnect flow that involves a device login + browser. How is this possible w/ azure devops k8s service connections?
Will kubernetes service connections in azure devops work with an AKS
cluster that is bound to AAD via openidconnect?
Unfortunately to say, no, this does not support until now.
According to your description, what you want to connect with in Azure Devops Kubernetes service connection is Azure Kubernetes service. This means you would select Azure Subscription in Choose authentication. BUT, this connection method is using Service Principal Authentication (SPA) to authenticate, which does not yet supported for the AKS that is bound with AAD auth.
If you connect your AKS cluster as part of your CI/CD deployment in Azure Devops, and attempt to get the cluster credentials. You would get a warning response which inform you to log in since the service principal cannot handle it:
WARNING: To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code *** to authenticate.
You should familiar with this message, it needs you open a browser to login in to complete the device code authentication manually. But this could not be achieve in Azure Devops.
There has a such feature request raised on our forum which request us expand this feature to Support non-interactive login for AAD-integrated clusters. You can vote and comment there to advance the priority of this suggestion ticket. Then it could be considered into the develop plan by our Product Manager as soon as possible.
Though it could not be achieved directly. But there has 2 work around can for you refer now.
The first work around is change the Azure DevOps authenticate itself from AAD client to the server client.
Use az aks get-credentials command and specify the parameter --admin with it. This can help with bypassing the Azure AD auth since it can let you connect and retrieve the admin credentials which can work without Azure AD.
But, I do not recommend this method because subjectively, this method is ignoring the authentication rules set in AAD for security. If you want a quick method to achieve what you want and not too worry about the security, you can try with this.
The second one is using Kubernetes service accounts
You can follow this doc to create a service account. Then in Azure Devops, we could use this service account to communicate with AKS API. Here you also need to consider about the authorized IP address ranges in AKS.
After the service account created successfully, choose Service account in the service connection of Azure Devops:
Server URL: Get it from the AKS instance(API server address) in Azure portal, then do not forget append the https:// before it while you input it into this service connection.
Secret: Generate it by using command:
kubectl get secret -n <name of secret> -o yaml -n service-accounts
See this doc: Deploy Vault on Azure Kubernetes Service (AKS).
Then you can use this service connection in Azure Devops tasks.
I have an IBM Watson Assistant service with username and password format and now I want to create new credentials which should have IAM key for this service, Please let us know how we can achieve this.
You can also migrate your Cloud Foundry service instance that uses un:pw to one that supports IAM. See Migrating Watson services from Cloud Foundry
There are (at least) two options to obtain IAM credentials for you IBM Watson Assistant service:
In the browser, go to the service dashboard by going to the IBM Cloud resources portal, locate your service instance, click on it and then in its dashboard on Service credentials. There you can create new credentials.
In a terminal and using the IBM Cloud CLI you can use ibmcloud resource service-key-create to generate credentials.
Both options assume that you have migrated your service instance from Cloud Foundry to IAM.
For creating a new credential, you can directly go to your watson assistant service/resource page, once there, on the left hand side, you would find "Service Credentials" menu button, there you would find an option to create a "New credential", and once the credential is created, then the "apikey" of that "New credential", would actually be your "IAM key", which can be viewed by clicking on the "View Credential" button highlighted below in the image.
*This is for IBM Watson Assistant V1 only.
Recently, I started seeing an issue when trying to setup secure gateway within API Connect on IBM Cloud, I previously had it working but looks like they changed this wizard interface and its broken since then
here is what I did to recreate the issue:
Setup new APIC instance on IBM Cloud
API connect Manager UI > Admin > Secure Gateways > Add (name & save)
once created, in Secure Gateway Clients section, click on +Set Up
I see no ID or Token generated
no matter what type of client I choose (DataPower, Docker or Installer)
Anyone facing the same issue?
Empty ID and Token when trying to setup Secure Gateway Client
turned out that creating SecureGateway from within the APIC is deprecated feature anyway.
you will need to create standalone SecureGateway resource on Bluemix and call it from your API assembly.
here is the instructions
https://www.ibm.com/support/knowledgecenter/en/SSFS6T/com.ibm.apic.apionprem.doc/task_api_secure_gateway.html
I am trying to add Blockchain service (Starter Developer Plan) to my Bluemix account (megjain9#in.ibm.com). While I select to create an instance, I am getting an error as shown in below screen shot.
Could you please check and advise the needful?
Blockchain Service Error on Bluemix
Thanks,
Megha
The Blockchain service is currently experiencing an outage, due to a network failure.
Service status is listed on the https://developer.ibm.com/bluemix/support/#status, check this page for updates on a resolution.