Page History
...
Operation | Object | Documentation |
---|---|---|
export / import | Any | JS7 - Inventory Export and Import |
import-deploy | Deployable Controller objects such as Worfklows | JS7 - Secure Deployment of Scheduling Objects |
deploy / revoke | Deployable Automation objects such as Worfklows | JS7 - Deployment of Scheduling Objects |
release / recall | Releaseble Automation objects such as Schedules | |
store / remove | Any | Store object to inventory / move objects to trash |
restore / delete | Any | Restore / delete removed objects from trash |
...
export
- Allows to export scheduling objects such as workflows to an archive file in .zip or .tar.gz format. The command comes in two flavors:
- export individual objects specified by the
--path
and--type
options. - export objects from folders using the
--folder
option and--recursive
switch.- Optionally the object type is specified and otherwise all objects will be exported.
- export individual objects specified by the
- The archive file is specified from the
--file
and--format
options.
- Allows to export scheduling objects such as workflows to an archive file in .zip or .tar.gz format. The command comes in two flavors:
import
- Imports an archive file to the inventory.
- Users can specify if existing objects will be overwritten or if duplicate objects from the import file will be assigned a prefix or suffix or will be ignored.
- import-deploy
- Imports an archive file to the inventory and deploys the included objects. The operation is applicable if JOC Cockpit is operated for the high security level.
- As a prerequisite the archive file must have been exported using the
--for-signing
switch. - Workflows and Job Resources from the archive file have been digitally signed by the user. Signature files have been added to the archive file.
- As a prerequisite the archive file must have been exported using the
- On import the objects in the archive file are deployed to related Controllers as specified during export.
- Imports an archive file to the inventory and deploys the included objects. The operation is applicable if JOC Cockpit is operated for the high security level.
deploy
- Allows to deploy objects such as workflows. The command can be used in two flavors:
- deploy individual objects specified by the
--path
and--type
options. - deploy objects from folders using the
--folder
option and--recursive
switch.
- deploy individual objects specified by the
- Deletion of objects from a Controller is considered similar a deplyoment operationDeploying objects forwards them to Controllers and Agents.
- Allows to deploy objects such as workflows. The command can be used in two flavors:
revoke
- Allows to undeploy objects such as workflows. The command can be used in two flavors:
- revoke individual objects specified by the
--path
and--type
options. - revoke objects from folders using the
--folder
option and--recursive
switch.
- revoke individual objects specified by the
- Revoking objects deletes them from the Controller and Agents, objects remain in draft status in the inventory.
- Allows to undeploy objects such as workflows. The command can be used in two flavors:
release
- Allows to release objects such as schedules. The command can be used in two flavors:
- release individual objects specified by the
--path
and--type
options. - release objects from folders using the
--folder
option and--recursive
switch.
- release individual objects specified by the
- Revocation of objects is considered similar to a release operationRleasing objects activates them for example for use by the Daily Plan.
- Allows to release objects such as schedules. The command can be used in two flavors:
recall
- Allows to unrelease objects such as schedules. The command can be used in two flavors:
- revoke recall individual objects specified by the
--path
and--type
options. - revoke recall objects from folders using the
--folder
option and--recursive
switch.
- revoke recall individual objects specified by the
- Recalling objects deactivates them from further use, objects remain in draft status in the inventory.
- Allows to unrelease objects such as schedules. The command can be used in two flavors:
store
- Allows to store an object such as a workflow or schedule from a file to the inventory.
- The
--file
option specifies the file that holds the JSON representation of an object. - The
--type
option specifies the object type. - The
--path
option specifies the folders and object name of the objects inventory location.
- The
- Objects are stored to the inventory in draft status and can be deployed or released using the related commands.
- Allows to store an object such as a workflow or schedule from a file to the inventory.
remove
- Allows to remove an object objects such as a workflow workflows or schedules from the inventory. The command can be used in two flavors:
- remove individual objects specified by the
--path
and--type
options. - remove objects from folders recursively using the
--folder
option.
- remove individual objects specified by the
- Removing objects moves them to the trash from which they can be restored or deleted or restored.
- Allows to remove an object objects such as a workflow workflows or schedules from the inventory. The command can be used in two flavors:
Options
restore
- Allows to restore objects such as workflows or schedules from the trash. The command can be used in two flavors:
- restore individual objects specified by the
--path
and--type
options. - restore objects from folders recursively using the
--folder
option.
- restore individual objects specified by the
- Restoring objects moves them from the trash to the inventory from which they can be deployed or released.
- Allows to restore objects such as workflows or schedules from the trash. The command can be used in two flavors:
delete
- Allows to delete objects such as workflows or schedules from the trash. The command can be used in two flavors:
- delete individual objects specified by the
--path
and--type
options. - delete objects from folders recursively using the
--folder
option.
- delete individual objects specified by the
- Deleting objects will permanently wipe them from the trash.
- Allows to delete objects such as workflows or schedules from the trash. The command can be used in two flavors:
Options
--url
- Specifies the URL
--url
- Specifies the URL by which JOC Cockpit is accessible using
<http|https>://<host>:<port>
. - Example: http://centostest-primary.sos:4446
- Example: https://centostest-primary.sos:4443
--user
- Specifies the user account for login to JOC Cockpit. If JS7 - Identity Services are available for Client authentication certificates that are specified with the
--client-cert
and--client-key
options then their common name (CN) attribute has to match the user account. - If a user account is specified then a password can be specified using the
--password
option or interactive keyboard input can be prompted using the-p
switch.
- Specifies the user account for login to JOC Cockpit. If JS7 - Identity Services are available for Client authentication certificates that are specified with the
--password
- Specifies the password used for the account specified with the
--user
option for login to JOC Cockpit. - Consider use of the
-p
switch offering a secure option for interactive keyboard input.
- Specifies the password used for the account specified with the
--controller-id
- Specifies the identification of the Controller that holds related orders.
- More than one Controller ID can be specified, separated by comma, for the
export
operation when using the--for-signing
switch.
--ca-cert
- Specifies the path to a file in PEM format that holds the Root CA Certificate and optionally Intermediate CA Certificates to verify HTTPS connections to JOC Cockpit.
--client-cert
- Specifies the path to a file in PEM format that holds the Client Certificate if HTTPS mutual authentication is used..
--client-key
- Specifies the path to a file in PEM format that holds the Client Private Key if HTTPS mutual authentication is used..
--timeout
- Specifies the maximum duration for requests to the JS7 REST Web Service. Default:
60
seconds.
- Specifies the maximum duration for requests to the JS7 REST Web Service. Default:
--file
- Specifies the location of an archive file that is used with
export
,import
andimport-deploy
operations. - On export an existing archive file will be overwritten.
- Specifies the location of an archive file that is used with
--format
- Specifies the format of the archive file indicated with the
--file
option. - The format can be one of
ZIP
orTAR_GZ
. Default:ZIP
. The JS7 can process archive files in .zip format on Unix.
- Specifies the format of the archive file indicated with the
--folder
- Specifies the inventory folder used for the related operation.
- Folder specification starts from a
/
followed by a hierarchy of sub-folders. - More than one folder can be specified using comma as in
--folder=/ProductDemo/AgentCluster,/ProductDemo/ScheduledExecution
.
- Folder specification starts from a
- When used with the
import
andimport-deploy
operations, a single folder can be specified that is prepended the folders included with the archive file.
- Specifies the inventory folder used for the related operation.
--path
- Specifies the path of an object such as a workflow, job resource, schedule. A path starts from a /, optionally followed by a hierarchy of sub-folders, and the object name.
- Objects are identified from thier path and object type.
--type
- Specifies the object type such as a workflow or schedule that is indicated together with the
--path
option to identify an object.- Deployable object types include: WORKFLOW, FILEORDERSOURCE, JOBRESOURCE, NOTICEBOARD, LOCK
- Releasable object types include: INCLUDESCRIPT, SCHEDULE, WORKINGDAYSCALENDAR, NONWORKINGDAYSCALENDAR, JOBTEMPLATE, REPORT
- When used with the
export
operation for folders then more than one type can be specified separated by comma, for example--type=WORKFLOW,JOBRESOURCE
- Specifies the object type such as a workflow or schedule that is indicated together with the
--prefix
- When used with the
import
operation, a prefix can be specified that is prepended all objects that are imported. - If an object with the same name and prefix exists, then the object will not be imported.
- When used with the
--suffix
- When used with the
import
operation, a suffix can be specified that is appended all objects that are imported. - If an object with the same name and suffix exists, then the object will not be imported.
- When used with the
--date-from
- Specifies the date starting from which the Daily Plan will be updated:
- The
--date-from=now
value specifies that the Daily Plan will be updated for orders starting from now. - The Daily Plan date in ISO date format can be specified, for example
--date-from=2023-10-23
. - If omitted then the Daily Plan will not be updated.
- The
- Orders in the Daily Plan can be updated if the underlying workflow or schedule is changed.
- Specifies the date starting from which the Daily Plan will be updated:
--audit-message
- Specifies a message that is made available for the Audit Log.
- Specification of Audit Log messages can be enforced on a per user basis and for a JS7 environment.
--audit-time-spent
- Specifies the time spent to perform an operation which is added to the Audit Log.
- The option can be specified if the -
-audit-message
option is used.
--audit-link
- Specifies a link (URL) which is added to the Audit Log.
- The option can be specified if the -
-audit-message
option is used.
--log-dir
- If a log directory is specified then the script will log information about processing steps to a log file in this directory.
- File names are created according to the pattern:
deploy-workflow.<yyyy>-<MM>-<dd>T<hh>-<mm>-<ss>.log
- For example:
deploy-workflow.2022-03-19T20-50-45.log
...
- For deployment of objects using the JS7 High Security Level requires digital signing outside of JOC Cockpit in order to securely apply the user's Private Key. To this purpose the
import-deploy
command is used. For deployment in Low or Medium Security Level thedeploy
command is used.- Digital signing includes that based on the user's Private Key and Certificate signature files are created that have to be added to the archive file for later import & deployment.
- The steps to import and to deploy are available from a single operation to prevent tampering of objects after import.
- There are a number of ways how to perform signing. The recommended solution is to use the
js7_sign_workflow.sh
|.cmd script script as explained from the JS7 - Signing Workflows with X.509 Certificates using Unix Shell Script article. The below example explains the steps to export, to sign and to import/deploy objects.
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
# common options for connection to JS7 REST API request_options=(--url=http://localhost:4446 --user=root --password=root --controller-id=controller) # export objects from folder for signing ./deploy-workflow.sh export ${request_options[@]} \ --file=export.zip --folder=/myFolder --recursive --for-signing # digitally sign objects mkdir -p ./temp rm -fr ./temp/* unzip -d ./temp ./export.zip ./js7_sign_workflow.sh --dir=./temp --key=./ecdsa.key --cert=./ecdsa.crt --hash=sha512 rm -f ./import-from-signing.zip cd ./temp zip -r ../import-from-signing.zip * cd - # import/deploy objects ./deploy-workflow.sh import-deploy ${request_options[@]} \ --file=import-from-signing.zip |
...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
# common options for connection to JS7 REST API request_options=(--url=http://localhost:4446 --user=root --password=root --controller-id=controller) # deploy objects from folder recursively workflows and update daily plan ./deploy-workflow.sh deploy ${request_options[@]} \ --folderpath=/ap/ap3jobs,/ap/AgentapEnv --recursivetype=WORKFLOW --date-from=now # deploy workflows objects from folder recursively and update daily plan ./deploy-workflow.sh deploy ${request_options[@]} \ --pathfolder=/ap/ap3jobs,/ap/apEnvAgent --type=WORKFLOWrecursive --date-from=now # revoke workflows ./deploy-workflow.sh revoke ${request_options[@]} \ --path=/ap/ap3jobs,/ap/apEnv --type=WORKFLOW # revoke objects from folder ./deploy-workflow.sh revoke ${request_options[@]} \ --folder=/ap/Agent --recursive |
...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
# common options for connection to JS7 REST API request_options=(--url=http://localhost:4446 --user=root --password=root --controller-id=controller) # release objects from folderschedules and update daily plan ./deploy-workflow.sh release ${request_options[@]} \ --folder=path=/ap/Agent/apAgentSchedule01,/ap/Agent/apAgentSchedule02 --recursivetype=SCHEDULE --date-from=now # release schedulesobjects from folder and update daily plan ./deploy-workflow.sh release ${request_options[@]} \ --pathfolder=/ap/Agent/apAgentSchedule01,/ap/Agent/apAgentSchedule02 --type=SCHEDULErecursive --date-from=now # recall objects from folderschedules ./deploy-workflow.sh recall ${request_options[@]} \ --folderpath=/ap/Agent/apAgentSchedule01,/ap/Agent/apAgentSchedule02 --recursivetype=SCHEDULE # recall schedulesobjects from folder ./deploy-workflow.sh recall ${request_options[@]} \ --pathfolder=/ap/Agent/apAgentSchedule01,/ap/Agent/apAgentSchedule02 --type=SCHEDULErecursive |
Storing and Removing Objects
- Objects can be added to the inventory from files in JSON format related to the object type such as a workflow, schedule. Newly added objects are in set to draft status.
- Objects can be removed from the inventory which will move them to the trash from which they can be restored or deleted.
...
- Objects that have previously been removed reside in the trash.
- Objects can be restored or can be permanently deleted from the trash.
- To restore an object objects from the trash the path, object type and new path in the inventory must be specified. Optionally a prefix or suffix can be added to restored object names. Restored objects are in set to draft status.
- To permanently delete objects from the trash they can be specified from their path & object type or from a folder.
...
Overview
Content Tools