Migration to 7.13.0+
TM now reacts on the contract creation event from MACMA. When the TM application id is included in the contract integration event, TM will start to load device master data from MDM for that tenant.
If there are insufficient privileges to communicate with MDM, TM will retry to load the master data (default max attempts is 10, configurable by TS_MMPD_CLIENT_MAX_RETRY_FOR_403). If the privileges are still missing after the maximum retry attempt, the failure status is saved in the database and will be retried by a scheduler that runs every 24 hours (default value, but can be configured).
Changes
-
New environment variables to configure the master data reload retry scheduler task:
-
TS_FAILED_MASTER_DATA_RELOAD_SCHEDULER
-
TS_FAILED_MASTER_DATA_RELOAD_SCHEDULER_INITIAL_DELAY_IN_MINUTES
-
TS_FAILED_MASTER_DATA_RELOAD_SCHEDULER_FIXED_DELAY_IN_HOURS
-
TS_FAILED_MASTER_DATA_RELOAD_SCHEDULER_LOCK_MIN_DURATION
-
TS_FAILED_MASTER_DATA_RELOAD_SCHEDULER_LOCK_MAX_DURATION
-
-
New environment variable to configure the maximum attempts for retrying on 403 errors when communicating with MDM :
-
TS_MMPD_CLIENT_MAX_RETRY_FOR_403
-
-
Static resource for "Get user information from MACMA" is created, resource id is "urn:com:bosch:bci:tm:ts:Users"
-
Static resource for "Get group information from MACMA" is created, resource id is "urn:com:bosch:bci:tm:ts:Groups"
-
Static resource for "Master data reload" is created, resource id is "urn:com:bosch:bci:tm:ts:Master-Data-Reload"
-
Static resource for "Health information about the services" is created, resource id is "health"
BREAKING API CHANGES
TM is breaking API due to security reasons. The following endpoints are now protected and need the according privilege to call them:
-
The user requires the privilege "execute" on the resource "urn:com:bosch:bci:tm:ts:Master-Data-Reload" which is included in the role "Operator" to call the following endpoint:
-
GET /BCI_TS_ADMIN/v1/{tenantId}/device-master-data
-
-
The user requires the privilege "read" on the resource "urn:com:bosch:bci:tm:ts:Portal-Registration-Configuration" which is included in the role "Operator" to call the following endpoint:
-
GET /portal-api/v3/registration-configuration
-
-
The user requires the privilege "read" on the resource urn:com:bosch:bci:tm:ts:Users which is included in the role "Ticket Management User", "Ticket Management Expert", and "Ticket Management Admin" to call the following endpoint:
-
GET /BCI_TS/v1/{tenantId}/users
-
GET /BCI_TS/v1/{tenantId}/users/search
-
GET /BCI_TS/v1/{tenantId}/users/{userId}/solution-groups
-
GET /BCI_TS/v1/{tenantId}/users/{userId}/acls
-
-
The user requires the privilege "read" on the resource urn:com:bosch:bci:tm:ts:Groups which is included in the role "Ticket Management User", "Ticket Management Expert", "Ticket Management Admin", and "Solution Group Reader" (intended to be assigned to application) to call the following endpoint:
-
GET /BCI_TS/v1/{tenantId}/solution-groups
-
GET /BCI_TS/v1/{tenantId}/solution-groups/{groupId}
-
GET /BCI_TS/v1/{tenantId}/solution-groups/{groupId}/users
-