Swimlanes.io is a free webapp for making sequence diagrams. You simply edit the text on the left and the diagram is updated in real time. You can download your sequence diagrams as images or distribute with a link.
Title: Onboarding CAM into ICP's IAM group: _**Todd's Actions**_ Todd -> ICP: Create Deploy ServiceID ICP -->> Todd: Note: * cloudctl iam service-id-create ${serviceIDName} -d 'Service ID for service-deploy' Todd -> ICP: Assign Policy to Service ID ICP -->> Todd: Note: * cloudctl iam service-policy-create ${serviceIDName} -r Administrator,ClusterAdministrator --service-name 'idmgmt' * cloudctl iam service-policy-create ${serviceIDName} -r Administrator,ClusterAdministrator --service-name 'identity' Todd -> ICP: Create Service API Key ICP -->> Todd: Note: * cloudctl iam service-api-key-create ${serviceApiKeyName} ${serviceIDName} -d 'Api key for service-deploy' Todd -> ICP: Deploy CAM Helm Chart - provides Deploy Service API Key ICP -->> Todd: ICP -->> CAM: end group: _**CAM**_ CAM -> IAM Token: Get IAM Token using Deploy API Key IAM Token -->> CAM: Note: ``` curl -X POST 'https://IP:8443/iam-token/oidc/token' .... ``` CAM -> IAM Token: Create CAM ServiceID IAM Token -->> CAM: Note: ``` curl -X POST 'https://IP:8443/iam-token /serviceids/' `service-cloud-automation-manager` ``` CAM -> IAM PAP: Assign idmgmt and Identity Policy to CAM ServiceID IAM PAP -->> CAM: Note: ``` curl -X POST 'https://IP:8443/iam-pap/acms/v1/scopes/n/services /service_ids/<iam-service-id>/policies' ``` CAM -> IAM Token: Create CAM Service API Key IAM Token -->> CAM: Note: ``` curl -X POST 'https://IP:8443/iam-token /apikeys/' ... ``` CAM -> IAM PAP: Register Service and Role/Action Mappings IAM PAP -->> CAM: Note: ``` curl -X PUT 'https://<ICP_MASTER>:8443/iam-pap/acms/v1/services /service-cloud-automation-manager' ... ``` CAM -> IAM PDP: Check AuthZ IAM PDP -->> CAM: Note: ``` curl -X POST 'https://IP:8443/iam-pdp/v1/authz' -H 'Accept: application/json' -H 'Authorization: bearer <user_access_token>' -H 'Content-Type: application/json' -d '{ "action": "service-cloud-automation-manager.library.create", "subject": { "id": "", "type": "" }, "resource": { "crn": "", "attributes": { "serviceName": "" } } }' ``` end