Skip to content

Commit 8d8274b

Browse files
g0zillaSilvanoc
authored andcommitted
Modified 'workload-orchestration-edge-onboarding.md' to include a diagram example
Signed-off-by: Andreas Ziller <andreas.ziller@siemens.com> Signed-off-by: Silvano Cirujano Cuesta <silvano.cirujano-cuesta@siemens.com>
1 parent f8268f2 commit 8d8274b

File tree

1 file changed

+50
-1
lines changed

1 file changed

+50
-1
lines changed

system-design/fleet-management/workload/workload-fleet-management-edge-onboarding.md

Lines changed: 50 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,56 @@ In order for the Workload Fleet Management software to manage the edge device's
1313
- The device's management client receives the URL for the Git repository containing its desired state and an associated access token for authentication
1414
- The [device capabilities](./device-capability-reporting.md) information is sent from the device to the workload orchestration web service using the [Device API](../../margo-api-reference/workload-api/device-api/device-capabilities.md)
1515

16-
![Margo Management Interface Operational Flow Diagram (svg)](../../figures/margo-interface-generic.drawio.svg)
16+
``` mermaid
17+
sequenceDiagram
18+
%%{init: {'sequence': {'mirrorActors': false}}}%%
19+
autonumber
20+
participant device as Device
21+
actor user as End User
22+
participant rendezvous as Rendezvous Server
23+
participant wos as WOS
24+
participant git as WOS: Device Git Repo
25+
note over device, git: Workload orchestration onboarding
26+
user -->> device: Get device id and cert
27+
activate device
28+
device -->> user: return
29+
deactivate device
30+
user -->> wos: Provides device id and cert to pre-register device in end user's tenant 🔐
31+
32+
%%note over device, rendezvous: FIDO
33+
user -->> rendezvous: Provides WOS URL
34+
device -->>+ rendezvous: Looks up WOS URL
35+
rendezvous -->>- device: return
36+
device -->>+ wos: Request WOS' public signing cert 🔓
37+
wos -->- device: return
38+
device -->>+ wos: Send onboard request, device id and certificate 🔓
39+
wos -->> wos: Vaidates device id and cert with onboarding registry
40+
wos -->- device: returns URL to check onboarding status
41+
42+
loop until onboarding status is active
43+
device -->>+ wos: Checks onboarding status providing device id and certificate 🔓
44+
wos -->> wos: Validates device id and cert with onboarding registry
45+
wos -->- device: returns in progress
46+
end
47+
device -->>+ wos: Checks onboarding status providing device id and certificate 🔓
48+
wos -->> wos: Validates device id and cert with onboarding registry
49+
wos -->- device: returns git repo URL and GitOps token, encrypted client id, encrypted client secret
50+
51+
device -->> wos: Uploads device capabilities
52+
note over device, git: Workload deployment
53+
loop Until end of time
54+
device -->>+ git: Checks for updates to desired state 🔐
55+
git -->>- device: return
56+
opt
57+
device -->> wos: Requests new GitOps token 🔐
58+
wos -->> device: return
59+
end
60+
device -->> device: Applies new desired state
61+
device -->> wos: Sends state 🔐
62+
device -->> wos: Sends state 🔐
63+
device -->> wos: Sends final state 🔐
64+
end
65+
```
1766
> Action: FIDO Device onboarding has not been finalized as the standard onboarding solution. Further discussion/investigations are needed.
1867
1968
### Configuring the Workload Fleet Management Web Service URL

0 commit comments

Comments
 (0)