Custom REST API - Add/Remove SQL instance

Hi Jemy,

I am using my credentials to execute the API which has both Administrator and API roles. Any other ideas?
The installer works fine when a SQL instance is added via GUI or fglcmd.

Thanks

Per the given message, I would suggest to confirm again whether you generated the token from a user which has administrator and api roles. If yes, then try  use Core API to create agent first, here InstallerAgentServiceImpl is not from Core but DB cartridge. Or you can consider using Core API to create an IC cartridge. If it's OK to do so, then it may be something to do with the API from DB cartridge. Or you can share your script if you confirm that the privileges are OK.

Regards

Jemy

Hi Jemy,

The rights in the token seem to be okay

I still have no idea whether you generated the token on an account which has admin and api roles.With sufficient privileges, using the run script rest api should be able to create agent, please refer to the help doc of rest api about how to generate token to execute the run script api.

I had a quick look at your code, it relies on DB cartridge too much. You may need to consult corresponding team(or support team) for further assistance. Here's an example about using Core API to create some IC agents. The code is to create some agents for the given fglam, just for your reference.

rms=server.RemoteAgentManagementService;
agentService=server.AgentService;
configService=server.ConfigService;
prefix="ICAgent_test_move"; //Agent name pattern
agentType="WindowsAgent"
eachHostAgentCount = 20;
monitoringHosts=["localhost","localhost"]
fglamName = 'myFglAM-1'
def count = 1;
def index = 0;
(1..10).each {
    try {
        

        log.info("counr $count, index $index");
        agentName = prefix + it;
        while(!createAgent(agentName, index)){
            Thread.sleep(6000);
        }
        count++;
        if (count >= eachHostAgentCount) {
            if(index < monitoringHosts.size()){
                index++;
            }
            count = 0;
        }        
    }catch (Exception e){
        log.info(e.message)
    }
}

def createAgent(agentName, index) {
    def fglam1 = findFglam(fglamName)
    try {
        if (fglam1 && !agentService.findByName(agentName)) {
            log.info('Create agent!')
            rms.initializeAgent(fglam1.id, agentType, agentName);
            log.info('Agent instances!')
            def agent = agentService.findByName(agentName)[0];
            log.info("Agent $agent!")
            def config = configService.getAgentInstancePrimaryAsp(agent.getAgentNamespace(), agent.getTypeId(), agent.getId());
            config.setValueByString('host', monitoringHosts[index]);
            config.setValueByString('hostNameOverride', agentName);
            config.setValueByString('collectSystemId', "false");
            configService.saveConfig(config);
        }
    }catch (Exception e) {
        log.info(e.message)
        return false;
    }
    if(fglam1){
        return true;
    }else{
        return false;
    }
}

return 'Done!'

def findFglam(name){
    try{
    return rms.findAllRemoteClients().find {
        it.id.startsWith(name)
    }
    }catch(Exception e){
            return null;
    }
}

Regards

Jemy

Thanks Jemy

The generated token has both API and Admin access as can be identified by the role tag I posted above when I executed /security/login call (as below)

Thanks for the confirmation on the token. The API below are from Core while InstallerAgentServiceImpl is not from Core.

rms=server.RemoteAgentManagementService;
agentService=server.AgentService;
configService=server.ConfigService;

Hi Jemy,

I modified the code in the installer script to create the agent via CORE API. Still geeting the security exception. I have also updated my comments on the associated SR case.

srvRAM = server["RemoteAgentManagementService"];

srvRAM.initializeAgent(fglam1.id, DBSS_AGENT_TYPE, dbAgentName);

instead of “InstallerServiceFactory.getInstance().getAdAgentService().createAgent”, I still get the security exception “Not authorized to manage agents”

[http-exec-1] script.system:dbwc_mssql_installer.16

Starting to monitor instance dwd210122163030.ESDEVAU.WBCDEVAU.WESTPAC.COM.AU\A005E02.

Wed, 2021-02-24 16:43:47.761

[http-exec-1] script.system:dbwc_mssql_installer.16

Creating DB agent DWD210122163030.ESDEVAU.WBCDEVAU.WESTPAC.COM.AU-A005E02

Wed, 2021-02-24 16:43:47.761

[http-exec-1] script.system:dbwc_mssql_installer.16

java.lang.SecurityException: Not authorized to manage agents

Wed, 2021-02-24 16:43:47.761

[http-exec-1] script.system:dbwc_mssql_installer.16

Agent DWD210122163030.ESDEVAU.WBCDEVAU.WESTPAC.COM.AU-A005E02 already exists, check for a duplicate data.

Thanks

Thanks Jeremy. I shall give it a try