Load the contents of the SLS dump file to restore SLS to the state of the system at the time of the dump. This will upload and overwrite the current SLS database with the contents of the SLS dump file, and update Vault with the encrypted credentials.
Use this procedure to restore SLS data after a system re-install.
The System Layout Service (SLS) database has been dumped. See Dump SLS Information for more information.
Use the get_token function to retrieve a token to validate requests to the API gateway.
ncn-m001# function get_token () {
curl -s -S -d grant_type=client_credentials \
-d client_id=admin-client \
-d client_secret=`kubectl get secrets admin-client-auth -o jsonpath='{.data.client-secret}' | base64 -d` \
https://api-gw-service-nmn.local/keycloak/realms/shasta/protocol/openid-connect/token | jq -r '.access_token'
}
Load the dump file into SLS.
This will upload and overwrite the current SLS database with the contents of the posted file, as well as update the Vault with the encrypted credentials. The private key that was used to generate the SLS dump file is required.
ncn-m001# curl -X POST \
https://api-gw-service-nmn.local/apis/sls/v1/loadstate \
-H "Authorization: Bearer $(get_token)" \
-F sls_dump=@sls_dump.json \
-F private_key=@private_key.pem
After performing the load state operation, the private key should be considered insecure and should no longer be used.