Merge branch 'liftshift' into 'main'

Update ItLiftAndShiftFromOnPremDomain to use complete OnPrem Domain Directory

See merge request weblogic-cloud/weblogic-kubernetes-operator!5018

Author: rjeberhard

integration-tests/pom.xml

@@ -379,6 +379,10 @@
                                 <resource>
                                     <directory>${resource-integration-test}</directory>
                                     <filtering>true</filtering>
+                                    <excludes>
+                                        <exclude>**/*.jks</exclude>
+                                        <exclude>**/SerializedSystemIni.dat</exclude>
+                                    </excludes>
                                 </resource>
                             </resources>
                         </configuration>

integration-tests/src/test/java/oracle/weblogic/kubernetes/ItLiftAndShiftFromOnPremDomain.java

@@ -29,7 +29,6 @@
 import oracle.weblogic.kubernetes.utils.ExecCommand;
 import oracle.weblogic.kubernetes.utils.ExecResult;
 import org.junit.jupiter.api.BeforeAll;
-import org.junit.jupiter.api.Disabled;
 import org.junit.jupiter.api.DisplayName;
 import org.junit.jupiter.api.Tag;
 import org.junit.jupiter.api.Test;
@@ -108,7 +107,6 @@
 @Tag("oke-sequential")
 
 @IntegrationTest
-@Disabled
 class ItLiftAndShiftFromOnPremDomain {
   private static String traefikNamespace = null;
   private static String domainNamespace = null;
@@ -188,6 +186,7 @@ void testCreateMiiDomainWithClusterFromOnPremDomain() throws UnknownHostExceptio
     });
 
     // Copy the on-prem domain files to a temporary directory
+    logger.info("on-prem domain source dir is: " + DOMAIN_SRC_DIR + " target dir is: " + DOMAIN_TEMP_DIR);
     try {
       copyFolder(DOMAIN_SRC_DIR, DOMAIN_TEMP_DIR);
     } catch (IOException  ioex) {

integration-tests/src/test/resources/onpremdomain/security/DefaultAuthenticatorInit.ldift

@@ -0,0 +1,123 @@
+dn: dc=@domain@
+dc: @domain@
+objectclass: top
+objectclass: domain
+
+dn: ou=@realm@,dc=@domain@
+ou: @realm@
+objectclass: top
+objectclass: organizationalUnit
+
+dn: ou=groups,ou=@realm@,dc=@domain@
+ou: groups
+objectclass: organizationalUnit
+objectclass: top
+
+dn: ou=people,ou=@realm@,dc=@domain@
+ou: people
+objectclass: organizationalUnit
+objectclass: top
+
+dn: cn=AdminChannelUsers,ou=groups,ou=@realm@,dc=@domain@
+memberURL: ldap:///ou=groups,ou=@realm@,dc=@domain@??sub?(&(objectclass=person)(wlsMemberOf=cn=AdminChannelUsers,ou=groups,ou=@realm@,dc=@domain@))
+description: AdminChannelUsers can access the admin channel.
+objectclass: top
+objectclass: groupOfUniqueNames
+objectclass: groupOfURLs
+cn: AdminChannelUsers
+
+dn: cn=Administrators,ou=groups,ou=@realm@,dc=@domain@
+memberURL: ldap:///ou=groups,ou=@realm@,dc=@domain@??sub?(&(objectclass=person)(wlsMemberOf=cn=Administrators,ou=groups,ou=@realm@,dc=@domain@))
+description: Administrators can view and modify all resource attributes and start and stop servers.
+objectclass: top
+objectclass: groupOfUniqueNames
+objectclass: groupOfURLs
+cn: Administrators
+
+dn: cn=AppTesters,ou=groups,ou=@realm@,dc=@domain@
+memberURL: ldap:///ou=groups,ou=@realm@,dc=@domain@??sub?(&(objectclass=person)(wlsMemberOf=cn=AppTesters,ou=groups,ou=@realm@,dc=@domain@))
+description: AppTesters group.
+objectclass: top
+objectclass: groupOfUniqueNames
+objectclass: groupOfURLs
+cn: AppTesters
+
+dn: cn=CrossDomainConnectors,ou=groups,ou=@realm@,dc=@domain@
+memberURL: ldap:///ou=groups,ou=@realm@,dc=@domain@??sub?(&(objectclass=person)(wlsMemberOf=cn=CrossDomainConnectors,ou=groups,ou=@realm@,dc=@domain@))
+description: CrossDomainConnectors can make inter-domain calls from foreign domains.
+objectclass: top
+objectclass: groupOfUniqueNames
+objectclass: groupOfURLs
+cn: CrossDomainConnectors
+
+dn: cn=Deployers,ou=groups,ou=@realm@,dc=@domain@
+memberURL: ldap:///ou=groups,ou=@realm@,dc=@domain@??sub?(&(objectclass=person)(wlsMemberOf=cn=Deployers,ou=groups,ou=@realm@,dc=@domain@))
+description: Deployers can view all resource attributes and deploy applications.
+objectclass: top
+objectclass: groupOfUniqueNames
+objectclass: groupOfURLs
+cn: Deployers
+
+dn: cn=Monitors,ou=groups,ou=@realm@,dc=@domain@
+memberURL: ldap:///ou=groups,ou=@realm@,dc=@domain@??sub?(&(objectclass=person)(wlsMemberOf=cn=Monitors,ou=groups,ou=@realm@,dc=@domain@))
+description: Monitors can view and modify all resource attributes and perform operations not restricted by roles.
+objectclass: top
+objectclass: groupOfUniqueNames
+objectclass: groupOfURLs
+cn: Monitors
+
+dn: cn=Operators,ou=groups,ou=@realm@,dc=@domain@
+memberURL: ldap:///ou=groups,ou=@realm@,dc=@domain@??sub?(&(objectclass=person)(wlsMemberOf=cn=Operators,ou=groups,ou=@realm@,dc=@domain@))
+description: Operators can view and modify all resource attributes and perform server lifecycle operations.
+objectclass: top
+objectclass: groupOfUniqueNames
+objectclass: groupOfURLs
+cn: Operators
+
+dn: cn=OracleSystemGroup,ou=groups,ou=@realm@,dc=@domain@
+memberURL: ldap:///ou=groups,ou=@realm@,dc=@domain@??sub?(&(objectclass=person)(wlsMemberOf=cn=OracleSystemGroup,ou=groups,ou=@realm@,dc=@domain@))
+description: Oracle application software system group.
+objectclass: top
+objectclass: groupOfUniqueNames
+objectclass: groupOfURLs
+cn: OracleSystemGroup
+
+dn: uid=LCMUser,ou=people,ou=@realm@,dc=@domain@
+description: This is the default service account for WebLogic Server Lifecycle Manager configuration updates.
+objectclass: inetOrgPerson
+objectclass: organizationalPerson
+objectclass: person
+objectclass: top
+cn: LCMUser
+sn: LCMUser
+userpassword: {ssha256}ru+Nscc+BsVAcPCHZD+Z8ot6Nd6aukjQxj3pUSRjTAjBNJKv
+uid: LCMUser
+objectclass: wlsUser
+wlsMemberOf: cn=Administrators,ou=groups,ou=@realm@,dc=@domain@
+
+dn: uid=OracleSystemUser,ou=people,ou=@realm@,dc=@domain@
+description: Oracle application software system user.
+objectclass: inetOrgPerson
+objectclass: organizationalPerson
+objectclass: person
+objectclass: top
+cn: OracleSystemUser
+sn: OracleSystemUser
+userpassword: {ssha256}2dH+yqAmTB0cvuEXxXBtFSA41Ak8FCE6ZTS6x/fgQterB3pc
+uid: OracleSystemUser
+objectclass: wlsUser
+wlsMemberOf: cn=OracleSystemGroup,ou=groups,ou=@realm@,dc=@domain@
+
+dn: uid=weblogic,ou=people,ou=@realm@,dc=@domain@
+description: This user is the default administrator.
+objectclass: inetOrgPerson
+objectclass: organizationalPerson
+objectclass: person
+objectclass: top
+cn: weblogic
+sn: weblogic
+userpassword: {ssha256}b41udyyUynRH+mdxPrj7HS44SKHvDODwEv5bD6o8u/Hc78YL
+uid: weblogic
+objectclass: wlsUser
+wlsMemberOf: cn=Administrators,ou=groups,ou=@realm@,dc=@domain@
+

integration-tests/src/test/resources/onpremdomain/security/DefaultRoleMapperInit.ldift

@@ -0,0 +1,103 @@
+dn: dc=@domain@
+objectclass: top
+objectclass: domain
+dc: @domain@
+
+dn: ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: organizationalUnit
+ou: @realm@
+
+dn: ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: organizationalUnit
+ou: ERole
+
+dn: ou=EResource,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: organizationalUnit
+ou: EResource
+
+dn: ou=EPredicate,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: organizationalUnit
+ou: EPredicate
+
+dn: ou=EProfile,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: organizationalUnit
+ou: EProfile
+
+dn: ou=EProfileDefinition,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: organizationalUnit
+ou: EProfileDefinition
+
+dn: ou=EProfileInstance,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: organizationalUnit
+ou: EProfileInstance
+
+dn: cn=::Admin,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::Admin
+EExpr:: cHdlYmxvZ2ljLmVudGl0bGVtZW50LnJ1bGVzLkFkbWluaXN0cmF0aXZlR3JvdXAKAUFkbWluaXN0cmF0b3JzCg==
+
+dn: cn=::AdminChannelUser,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::AdminChannelUser
+EExpr:: cHdlYmxvZ2ljLmVudGl0bGVtZW50LnJ1bGVzLk93bmVySURER3JvdXAKAUFkbWluQ2hhbm5lbFVzZXJzCg==
+
+dn: cn=::Anonymous,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::Anonymous
+EExpr:: Z2V2ZXJ5b25lCg==
+
+dn: cn=::AppTester,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::AppTester
+EExpr:: cHdlYmxvZ2ljLmVudGl0bGVtZW50LnJ1bGVzLk93bmVySURER3JvdXAKAUFwcFRlc3RlcnMK
+
+dn: cn=::CrossDomainConnector,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::CrossDomainConnector
+EExpr:: cHdlYmxvZ2ljLmVudGl0bGVtZW50LnJ1bGVzLk93bmVySURER3JvdXAKAUNyb3NzRG9tYWluQ29ubmVjdG9ycwo=
+
+dn: cn=::Deployer,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::Deployer
+EExpr:: cHdlYmxvZ2ljLmVudGl0bGVtZW50LnJ1bGVzLkFkbWluaXN0cmF0aXZlR3JvdXAKAURlcGxveWVycwo=
+
+dn: cn=::Monitor,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::Monitor
+EExpr:: cHdlYmxvZ2ljLmVudGl0bGVtZW50LnJ1bGVzLkFkbWluaXN0cmF0aXZlR3JvdXAKAU1vbml0b3JzCg==
+
+dn: cn=::Operator,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::Operator
+EExpr:: cHdlYmxvZ2ljLmVudGl0bGVtZW50LnJ1bGVzLkFkbWluaXN0cmF0aXZlR3JvdXAKAU9wZXJhdG9ycwo=
+
+dn: cn=::OracleSystemRole,ou=ERole,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: ERole
+cn: ::OracleSystemRole
+EExpr:: Z09yYWNsZVN5c3RlbUdyb3VwCg==
+
+dn: cn=weblogic.entitlement.rules.InDevelopmentMode,ou=EPredicate,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: EPredicate
+cn: weblogic.entitlement.rules.InDevelopmentMode
+
+dn: cn=weblogic.entitlement.rules.TimePredicate,ou=EPredicate,ou=@realm@,dc=@domain@
+objectclass: top
+objectclass: EPredicate
+cn: weblogic.entitlement.rules.TimePredicate