Table of Contents

• Title and Copyright Information
• Preface
  • Documentation Accessibility
  • Diversity and Inclusion
  • Conventions
• My Oracle Support
• Acronyms
• What's New in This Guide
• 1 Introduction
  • 1.1 Architecture
  • 1.2 Operations Supported
  • 1.3 References
  • 1.4 Oracle Error Correction Policy
  • 1.5 Oracle Open Source Support Policies
• 2 Installing Provisioning Gateway
  • 2.1 Prerequisites
    • 2.1.1 Software Requirements
    • 2.1.2 Environment Setup Requirements
    • 2.1.3 Resource Requirements
      • 2.1.3.1 Default Resource Requirements for Provisioning Gateway
      • 2.1.3.2 Minimum Resource Requirements for Provisioning Gateway
      • 2.1.3.3 Resource Requirements for Provisioning Gateway Hooks
      • 2.1.3.4 Performance Profile for 2K SOAP
      • 2.1.3.5 Performance Profile for 1.26k Rest SLF Traffic
  • 2.2 Installation Sequence
    • 2.2.1 Preinstallation Tasks
      • 2.2.1.1 Downloading Provisioning Gateway Package
      • 2.2.1.2 Pushing Images to Customer Docker Registry
      • 2.2.1.3 Verifying and Creating Namespace (Optional)
      • 2.2.1.4 Creating Secret for Storing Database Name, Username, Password, and Encryption Key
      • 2.2.1.5 Basic Configurations for Deployment
      • 2.2.1.6 Configuring PodDisruptionBudget Kubernetes Resource
      • 2.2.1.7 Creating Service Account, Role, and Rolebinding
      • 2.2.1.8 Creating PVC for Persistence Storage of Audit Reports (Optional)
      • 2.2.1.9 Enabling HTTPS on Ingress Gateway and Egress Gateway
      • 2.2.1.10 Enabling HTTPS1.1 on Provisioning Gateway
      • 2.2.1.11 Create Pod Security Policy, Role, and Rolebinding for Debug Tool
      • 2.2.1.12 Creating Secret for Storing Private Keys
      • 2.2.1.13 Configuring Service Mesh Data Plane
      • 2.2.1.14 Configuring Network Policies
        • 2.2.1.14.1 Verifying Network Policies
    • 2.2.2 Installation Tasks
      • 2.2.2.1 Installing Provisioning Gateway
      • 2.2.2.2 Post Installation Task
        • 2.2.2.2.1 Configuring Alerts
• 3 Customizing Provisioning Gateway
  • 3.1 Provisioning Gateway Configuring Parameters
    • 3.1.1 Configuring Global Parameters
    • 3.1.2 Configuring provgw-service Parameters
    • 3.1.3 Configuring auditor-service parameters
    • 3.1.4 Configuring provgw-config-server parameters
    • 3.1.5 Configuring provgw-config parameters
    • 3.1.6 Configuring provgw-ingressgateway Parameters
    • 3.1.7 Configuring provgw-egressgateway Parameters
• 4 Configuring Provisioning Gateway using CNC Console
  • 4.1 Logging into CNC Console
  • 4.2 Egress Gateway
    • 4.2.1 Configurable Error Codes
    • 4.2.2 Error Code Profile
  • 4.3 Ingress Gateway
    • 4.3.1 Error Code Profile
    • 4.3.2 Routes Configuration
    • 4.3.3 Configurable Error Codes
  • 4.4 Configuration Export & Import
  • 4.5 Global Configurations
  • 4.6 Subscriber Entity Configuration (SEC)
  • 4.7 Logging Level Configuration
  • 4.8 Auditor Service Status
  • 4.9 Service Configurations
    • 4.9.1 ProvGw Service
    • 4.9.2 Auditor Service Configurations
  • 4.10 Logout of CNC Console
• 5 Alert Configuration
  • 5.1 Alert Details
    • 5.1.1 ProvgwTrafficRateAboveCriticalThreshold
    • 5.1.2 ProvgwTrafficRateAboveMajorThreshold
    • 5.1.3 ProvgwTrafficRateAboveMinorThreshold
    • 5.1.4 ProvgwTransactionErrorRateAbove0.1Percent
    • 5.1.5 ProvgwTransactionErrorRateAbove1Percent
    • 5.1.6 ProvgwTransactionErrorRateAbove10Percent
    • 5.1.7 ProvgwTransactionErrorRateAbove25Percent
    • 5.1.8 ProvgwTransactionErrorRateAbove50Percent
    • 5.1.9 ProvgwTransientErrorAbove1Percent
    • 5.1.10 ProvgwTransientErrorAbove10Percent
    • 5.1.11 ProvgwTransientErrorAbove25Percent
    • 5.1.12 ProvgwTransientErrorAbove50Percent
    • 5.1.13 ProvgwSegmentDownAbove1Percent
    • 5.1.14 ProvgwSegmentDownAbove10Percent
    • 5.1.15 ProvgwSegmentDownAbove25Percent
    • 5.1.16 ProvgwSegmentDownAbove50Percent
    • 5.1.17 ProvgwAuditMismatchAbove1Percent
    • 5.1.18 ProvgwAuditMismatchAbove10Percent
    • 5.1.19 ProvgwAuditMismatchAbove25Percent
    • 5.1.20 ProvgwAuditMismatchAbove50Percent
    • 5.1.21 ProvgwStatusUnavailable
    • 5.1.22 ProvgwPodsRestart
    • 5.1.23 ProvgwServiceDown
    • 5.1.24 ProvgwAuditorServiceDown
    • 5.1.25 ProvgwIngressGatewayServiceDown
    • 5.1.26 ProvgwEgressGatewayServiceDown
    • 5.1.27 ProvgwConfigServiceDown
    • 5.1.28 PVCFullForAuditorAbove90Percent
    • 5.1.29 NoFilesToAuditInSegments
    • 5.1.30 AuditProcessFailed
    • 5.1.31 AuditMaxDiscrepancyReached
• 6 Metrics and KPIs
  • 6.1 Provisioning Gateway Metrics
    • 6.1.1 Ingress API Gateway Metrics
    • 6.1.2 Egress API Gateway Metrics
    • 6.1.3 Provisioning Gateway Metrics
    • 6.1.4 Auditor Metrics
    • 6.1.5 provgw-config service Metrics
  • 6.2 KPIs
• 7 Features
  • 7.1 Auditor Service
    • 7.1.1 Installing and Configuring Auditor Service
    • 7.1.2 Auditor Summary Report
    • 7.1.3 Monitoring Audit Status
    • 7.1.4 Cleaning Persistent Volume Claim (PVC)
  • 7.2 Handling SLF Segments
    • 7.2.1 Understanding SLF Segment
    • 7.2.2 Detecting SLF Segment Down and Failover Logic
    • 7.2.3 Detecting SLF Segment Failure
    • 7.2.4 Removing Failed SLF Segment
    • 7.2.5 Restoring SLF Segment
  • 7.3 Subscriber Entity Configuration (SEC)
  • 7.4 Kubernetes Probes
  • 7.5 Network Policies
  • 7.6 Provisioning Gateway Network Layout Changes
• 8 Troubleshooting Provisioning Gateway
  • 8.1 Debugging Service Mesh related Issues
  • 8.2 Using Debug Tools
    • 8.2.1 Debugging Issues Related to Debug Tool
  • 8.3 Log Attribute Details
• 9 Upgrading and Rolling Back of Provisioning Gateway Deployment
  • 9.1 Alert Configuration
• 10 Uninstalling Provisioning Gateway
  • 10.1 Dropping Provisioning Gateway Database
• A ASM Specific Configuration
• B Increasing Persistent Volume Claim (PVC)
• C ProvGW Alert Configuration Details for CNE 1.8.x and below
• D ProvGW Alert Configuration for CNE 1.9 and Above