NBI API Description
Introduction
OSM North Bound Interface is a REST-full following ETSI SOL005 standard. It admits both YAML/JSON formats.
By default it serves https (auto-signed certificate) on port 9999. Bearer authentication (with token) is used. Basic authentication or no authentication is also possible changing 'nbi.cfg' file.
For developping porpouses it admits web browser navigation using a basic http format.
Request headers
Accept: 'application/json','application/yaml' in most of the cases. Use 'text/html' for web navigation. Use 'text/plain','application/zip' for descriptor artifacts showing. This header field shall be present if the response is expected to have a non-empty message body.
Content-Type: 'application/json','application/yaml' for most of the cases. For packages uploading use 'application/gzip','application/zip','application/x-gzip','application/binary'. For descriptor artifacts it can be used 'text/plain'. This header field shall be present if the request has a non-empty message body.
Authorization: 'Bearer <token_id>'. The authorization token for the request. It is mandatory except when a token is requested.
Content-Range: '<first byte>-<last byte>0/<total>'. It allows uploading a descriptor by chunks.
Transaction-Id: '<id>'. When uploaded by chunk, the id returned by first chunk
Content-File-MD5: '<md5>'. MD5 of uploaded package.
Content-Filename: '<filename>'. Filename of the uploaded package.
Query-String-Format: '<yaml>'. Parses query string values using yaml format.
Response headers
Content-Type: 'application/json','application/yaml' is the more normal. 'text/html' when web navigation. 'application/gzip','text/plain' for descriptor artifacts
Location: '/<main_topic>/v1/<topic>/<id>'. Always that something is created, this header is present containing URL to this element.
WWW-Authenticate: 'Bearer realm="{}"'. When Authentication error is obtained.
Retry-After: '
RBAC
From Release SIX, operations are authorized via RBAC (Role Base Access Control). Each user and project is assigned with a set of roles, and some of them must grant the intended operation. If administrative query string is used (see next section), role must grant the use of it in addition to the operation.
Role permissions are organized in a hierarchical tree, separated by colon, optionally ending with the http operation. The value of False means not granted, meanwhile with True it is granted. If this permission is missing, the immediate hierarchical permission applies. When there is not hierarchical at all, the defined "default" permission applies, and if "default" is missing, not granted is assumed. See these examples initial roles ; and role permissions for the list of rbac permission with their operation. In following sections the rbac permission granting this operation is indicated in bracket.
Query String
Query string has the format: '?key=value&key2=value2&...'.
For GET method it allows filtering with this format, follows SOL005 section 4.3.2:
query string := ?<simpleFilterExpr>["&"<simpleFilterExpr>]* simpleFilterExpr := <attrName>["."<attrName>]*["."<op>]"="<value>[","<value>]* op := "eq" | "neq" (or "ne") | "gt" | "lt" | "gte" | "lte" | "cont" | "ncont" equal (by default), not equal, greater than, less than, greater than or equal, less than or equal, contains, not contains attrName := string. For filtering inside array, use the index element of the array, or add ANYINDEX to apply the filtering over the same array element
For PUT/POST/PATCH It allows override e.g. package content, with the values of this query string
Administrative Query String
Some special keys used for administration are:
- FORCE(=True) (rbac: force). Forces and operation. It disables descriptor checking, dependency cheking. For delete, it allows deleting things that cannot done in normal operation because dependency. But beware that forcing deletion will not deletes created things at VIM level.
- PUBLIC(=True) (rbac: public). Allows getting public descriptor or instances (apart from those belonging to the project used login). For write/update operations, it used for set or unset a descriptor as public
- ADMIN' (rbac: admin). Allows making operations on behalves on a different project/s than the one used for login (=projectA,projectB,...). Also to show all descriptor or instances (just ADMIN). For update operations..
- SET_PROJECT=ProjectA,ProjectB,... (rbac: set_project). Allows adding an existing descriptor or instance to a project portfolio with an update operation.
URL and Methods summary
North Bound Interface (O: OSM specific; X,5: SOL005 not OSM implemented yet; O5: OSM and SOL005)
URL: /osm GET POST PUT DELETE PATCH
/nsd/v1
/ns_descriptors_content O O
/<nsdInfoId> O O O O
/ns_descriptors O5 O5
/<nsdInfoId> O5 O5 5
/nsd_content O5 O5
/nsd O
/artifacts[/<artifactPath>] O
/pnf_descriptors 5 5
/<pnfdInfoId> 5 5 5
/pnfd_content 5 5
/vnfpkgm/v1
/vnf_packages_content O O
/<vnfPkgId> O O
/vnf_packages O5 O5
/<vnfPkgId> O5 O5 5
/package_content O5 O5
/upload_from_uri X
/vnfd O5
/artifacts[/<artifactPath>] O5
/nslcm/v1
/ns_instances_content O O
/<nsInstanceId> O O
/ns_instances 5 5
/<nsInstanceId> O5 O5
instantiate O5
terminate O5
action O
scale O5
heal 5
/ns_lcm_op_occs 5 5
/<nsLcmOpOccId> 5 5 5
TO BE COMPLETED 5 5
/vnf_instances (also vnfrs for compatibility) O
/<vnfInstanceId> O
/pdu/v1
/pdu_descriptor O O
/<id> O O O O
/admin/v1
/tokens O O
/<id> O O
/users O O
/<id> O O O O
/projects O O
/<id> O O
/vim_accounts (also vims for compatibility) O O
/<id> O O O
/wim_accounts O O
/<id> O O O
/sdns O O
/<id> O O O
/nst/v1 O O
/netslice_templates_content O O
/<nstInfoId> O O O O
/netslice_templates O O
/<nstInfoId> O O O
/nst_content O O
/nst O
/artifacts[/<artifactPath>] O
/nsilcm/v1
/netslice_instances_content O O
/<SliceInstanceId> O O
/netslice_instances O O
/<SliceInstanceId> O O
instantiate O
terminate O
action O
/nsi_lcm_op_occs O O
/<nsiLcmOpOccId> O O O
Administrative Content Details
/admin/v1/tokens. Token is a temporal authorization for a user in a concrete project. Each request must contain it in the http header Authorization
- GET: List the valid granted tokens obtained by this user
- POST: Obtain a token. The 'username' and 'password' is mandatory only if http header does not contain Authorization. 'project' can be provided, if not, first project of available for this user is assigned. For changing project, a new token must be obtained.
- Example of request content: '{username: <user>, password: <pass>, project_id: <project>}'
/admin/v1/tokens/<id>
- GET: show token details
- DELETE: revoque token. Logout
/admin/v1/users. (rbac: users). Users may operate in several projects
- GET: Get users
- POST: Add a new user.
- Example of request content: '{username: <user>, password: <pass>, projects: [P1, P2, ...]}'
/admin/v1/users/<id>. (rbac: users:id).
- GET: Get user details
- PUT/PATCH: Edit user.
- Example of user edition:
- Change password: '{password: <new_pass>}'
- Change the list of available projects to a new one: '{projects: [P1, P2, ...]}'
- Remove a project 'P' from user if exist: {projects: {"$'P'": null}}'
- Add a project 'P' to user if not already exist: '{projects: {"$+'P'": "P"}}'
- Set 'P' to be project by default, (adding it if not exist): '{projects: {"$'P'": null, "$+[0]": "P"}}'
- Example of user edition:
- DELETE: Removes user.
/admin/v1/projects. (rbac: projects). A project contains its own separate space
- GET: Get projects
- POST: Add a new project.
- Example of request content: '{name: <P-name>, admin: <True/False>}'
/admin/v1/projects/<id>. (rbac: projects:id)
- GET: Get project details
- PUT/PATCH: Edit project.
- Example of project edition to change admin status: '{admin: <True/False>}'
- DELETE: Removes project.
/admin/v1/vim_accounts. (rbac: vims). Vim account is the deployment target
- GET: Get vim_accounts
- POST: Add a new vim_accounts.
- Example of request content: TODO
/admin/v1/vim_accounts/<id>. (rbac: vims:id)
- GET: Get vim_account details
- PUT/PATCH: Edit vim_account.
- Example of vim_account edition: TODO
- DELETE: Removes vim_account.
/admin/v1/wim_accounts. (rbac: wims). WIM are WAN Infrastructure Managers, that is in charge of inter VIM connectivity managemnt
- GET: Get wim_accounts
- POST: Add a new wim_account.
- Example of request content: TODO
/admin/v1/wim_accounts/<id>. (rbac: wims:id)
- GET: Get wim_account details
- PUT/PATCH: Edit wim_account.
- Example of wim_account edition: TODO
- DELETE: Removes wim_account.
/admin/v1/sdns. (rbac: sdn_controllers). SDN controllers in charge of VIM underlayed connectivity
- GET: Get sdns
- POST: Add a new sdn.
- Example of request content: TODO
/admin/v1/sdns/<id>. (rbac: sdn_controllers:id)
- GET: Get sdn details
- PUT/PATCH: Edit sdn.
- Example of sdn edition: TODO
- DELETE: Removes sdn.
PDU Details
Physical Data Unit. This is catalogue of physical elements present at some vim_account/s. Deployment of a PNFD/HNFD implies using one of this pdu from the catalogue. Matching from PNFD/HNFD to PDU is done by 'pdu.type'
/pdu/v1/pdu_descriptor. (rbac: pduds)
- GET: List PDUs. Use query string for filtering.
- POST: Create a new PDU.
- Example of request content:
name: descriptive name # mandatory
type: str # mandatory. maps VNFD.vdu.pdu-type
description: str
vim_accounts: [vim-account-id, ...] # mandatory
interfaces: # mandatory
- name: str # mandatory. Maps VNFD.vdu.interfaces.name
mgmt: boolean # mandatory. Indicates if is the management one
ip-address: ip # mandatory
vim-network-id: xxx
vim-network-name: xxx
/pdu/v1/pdu_descriptor/<id>. (rbac: pduds:id)
- GET: show PDU details
- PUT: overwrite this PDU
- PATCH: edit this PDU
- DELETE: remove the PDU
VNFD Details
Virtual Network Function Descriptor. This includes also Physical and Hybrid Network Funcitons Descriptors (PNFD/HNFD). (At VDU level, it is indicated if it is physical with the 'pdu-type' information element).
TBC
NSD Details
Network Services Descriptor
TBC
NSLCM Details
Network Services Life Ciclo Management
/nslcm/v1/ns_instances_content.
- GET: (rbac: ns_instances:get) Obtains a list of NS
- POST: (rbac: ns_instances:content:post) (Asynchronous). Creates and Instantiate a NS. It returns the nsInstanceId in the response header 'Location'. Example of request content:
nsName: name # mandatory
nsdId: nsd-internal-id # mandatory
vimAccountId: internal-id # mandatory
wimAccountId: False/True/internal-id
additionalParamsForNs: {param1: value1, param2: value2}
additionalParamsForVnf: [member-vnf-index: "1", additionalParams: {param1: value1, param2: value2}]
ssh_keys: [ssh-key-pub1, ssh-key-pub2, ]
vnf: [ {member-vnf-index: "1", vimAccountId: vim-uuid, internal-vld: [], vdu: [] } ]
vld: [ {name: vld-name, ip-profile: {}, vnfd-connection-point-ref: [{}] }]
/nslcm/v1/ns_instances_content/<nsInstanceId>. (rbac: ns_instances:id)
- GET: Obtains details of a NS
- DELETE: (Asynchronous) Terminates (or undeploy) and deletes (if termination is done successfully) a NS
/nslcm/v1/ns_instances. (rbac: ns_instances)
- GET: Obtains a list of NS
- POST: Creates a NS, but do not instantitate it. It returns the nsInstanceId in the response header 'Location'. Example of request content:
nsName: name # mandatory
nsdId: nsd-internal-id # mandatory
vimAccountId: internal-id # mandatory
wimAccountId: False/True/internal-id
additionalParamsForNs: {param1: value1, param2: value2}
additionalParamsForVnf: [member-vnf-index: "1", additionalParams: {param1: value1, param2: value2}]
/nslcm/v1/ns_instances/<nsInstanceId>. (rbac: ns_instances:id)
- GET: Obtains details of a NS
- DELETE: Deletes a NS. It fails if NS is in 'INSTANTIATED' state
/nslcm/v1/ns_instances/<nsInstanceId>/instantiate. (rbac: ns_instances:id:instantiate:post)
- POST: (Asynchronous). Deploys a NS that it is in NOT_INSTANTIATED state. It returns the nsLcmOpOccId (Operationts Occurence Id) in the response header 'Location'. Example of request content:
vimAccountId: internal-id # mandatory
wimAccountId: False/True/internal-id
ssh_keys: [ssh-key-pub1, ssh-key-pub2, ]
vnf: [ {member-vnf-index: "1", vimAccountId: vim-uuid, internal-vld: [], vdu: [] } ]
vld: [ {name: vld-name, ip-profile: {}, vnfd-connection-point-ref: [{}] }]
/nslcm/v1/ns_instances/<nsInstanceId>/terminate. (rbac: ns_instances:id:terminate:post)
- POST: (Asynchronous). Undeploys a NS that it is in INSTANTIATED state. It returns the nsLcmOpOccId (Operationts Occurence Id) in the response header 'Location'
/nslcm/v1/ns_instances/<nsInstanceId>/action. (rbac: ns_instances:id:action:post)
- POST: (Asynchronous). Performs a Day-2 operation over the NS. It returns the nsLcmOpOccId (Operationts Occurence Id) in the response header 'Location'
- Example of content to executing a primitive:
member_vnf_index: str # Needed for VNFD mapping NSD.constituent-vnfd.member-vnf-index. If missing a NSD is targeting vdu_id: str # Needed if target is a VDU. Maps VNFD.vdu-id vdu_count_index: int # Needed if the VDU has several replicas (count>1) primitive: str # Mandatory. Maps [NSD.ns-configuration or VNFD.vnf-configuration or VNFD.vdu.vdu-configuration].config-primitive.name primitive_params: dict # Optional. Maps [NSD.ns-configuration or VNFD.vnf-configuration or VNFD.vdu.vdu-configuration].config-primitive.parameter param: value ...
/nslcm/v1/ns_instances/<nsInstanceId>/scale. (rbac: ns_instances:id:scale:post)
- POST: (Asynchronous). Performs a manual scale OUT/IN over one of the VNFs of the NS. It returns the nsLcmOpOccId (Operationts Occurence Id) in the response header 'Location'
- Example of content: '{scaleType: SCALE_VNF, scaleVnfData: {scaleVnfType: SCALE_OUT, scaleByStepData: {member-vnf-index: <nsd:constituent-vnfd:member-vnf-index>, scaling-group-descriptor: <vnfd:scaling-group-descriptor:name>} } }' # Use SCALE_IN instead of SCALE OUT depending of desired type.
/nslcm/v1/ns_instances/nsi_lcm_op_occs. (rbac: ns_instances:opps)
- GET: Obtains the list of Operations occurrences. It may be useful filtering by a concrete NS with '?nsInstanceId=<nsInstaceId>'
/nslcm/v1/ns_instances/nsi_lcm_op_occs/<nsiLcmOpOccId>. (rbac: ns_instances:opps:id)
- GET: Show details of an Operations occurrences.
/nslcm/v1/vnf_instances. (rbac: vnf_instances). (also vnfrs for compatibility):
- GET: Obtains the list of VNF. It may be useful filtering by a concrete NS with '?nsr-id-ref=<nsInstaceId>'
/nslcm/v1//vnf_instances/<vnfInstanceId>. (rbac: vnf_instances:id)
- GET: Show details of a concrete VNF
NST Details
NetSlice Template descriptor
/nst/v1/netslice_templates_content
- GET: (rbac: slice_templates:get). Obtain list of Network Slice Templates
- POST (rbac: slice_templates:content:post). : Create a Network Slice Template and upload the content
/nst/v1/netslice_templates_content/<nstInfoId>'. (rbac: slice_templates:id)
- GET: Show the detail of Network Slice Template
- PUT: Update the whole Network Slice Template
- DELETE: Remove a Network Slice template. The Network Slice template is removed only if state is NOT_IN_USE.
/nst/v1/netslice_templates. (rbac: slice_templates)
- GET: Obtain list of Network Slice Templates
- POST: Create an empty Network Slice Template. A PUT should be done afterwards to upload the package
/nst/v1/netslice_templates/<nstInfoId>. (rbac: slice_templates:id)
- GET: Show the detail of Network Slice Template descriptor used by OSM
- DELETE: Remove a Network Slice Template. The Network Slice template is removed only if state is NOT_IN_USE.
- PATCH: Update a Network Slice Template field
/nst/v1/netslice_templates/<nstInfoId>/nst_content. (rbac: slice_templates:content)
- GET: Show the detail of the source Network Slice Template package
- PUT: Update a Network Slice Template
/nst/v1/netslice_templates/<nstInfoId>/nst. (rbac: slice_templates:id:nst)
- GET: Show the detail of the source Network Slice Template descriptor
/nst/v1/netslice_templates/<nstInfoId>/artifacts[/<artifactPath>]. (rbac: slice_templates:id:nst_artifact)
- GET: Obtain Network Slice Templates Artifacts. This is useful for download the Network Slice Templates
NSILCM Details
NetSlice Instance Life Cicle Management
/nsilcm/v1/netslice_instances_content
- GET: (rbac: slice_instances:get). Obtain the list of Network Slice Instances
- POST: (rbac: slice_instances:content:post) (Asynchronous). Creates and Instantiate a Network Slice Instance. It returns the netsliceInstanceId in the response header 'Location'. Example of request content:
nstId: name of the Network Slice Template #mandatory
nsiName: name of the Network Slice Instance # mandatory
vimAccountId: internal-id # mandatory
ssh_keys: comma separated list of keys to inject to vnfs
nsiDescription: description of the Network Slice Instance
additionalParamsForNsi: {param: value, ...}
netslice-subnet: [ Same content as section #NSLCM_Details /nslcm/v1/ns_instances_content
],
netslice-vld: [
name: TEXT,
vim-network-name: TEXT or DICT with the name for each vim account: {vimAccountId: network-name, ...},
vim-network-id: TEXT or DICT with the id for each vim account {vimAccountId: network-id},
ip-profile: Profile of the vld
]
/nsilcm/v1/netslice_instances_content/<SliceInstanceId>. (rbac: slice_instances:id)
- GET: Show details of a concrete Network Slice Instance
- DELETE: (Asynchronous) Terminates (or undeploy) and deletes (if termination is done successfully) a Network Slice Instance Record
/nsilcm/v1/netslice_instances. (rbac: slice_instances)
- GET: Obtain the list of Network Slice Instances
- POST: Create the Network Slice Instance but do not instantitate it. It returns the netsliceInstanceId in the response header 'Location'. Example of request content: Same content as section NSILCM Details /nsilcm/v1/netslice_instances_content
/nsilcm/v1/netslice_instances/<SliceInstanceId>. (rbac: slice_instances:id)
- GET: Show details of a concrete Network Slice Instance
- DELETE: Delete the Network Slice Instance Record, if it is not instantiated
/nsilcm/v1/netslice_instances/<SliceInstanceId>/instantiate. (rbac: slice_instances:id:instantiate:post)
- POST: (Asynchronous). Deploys a Network Slice Instance that it is in NOT_INSTANTIATED state. It returns the nsiLcmOpOccId (Operations Occurence Id) in the response header 'Location'. Example of request content: Same content as section NSILCM Details /nsilcm/v1/netslice_instances_content
/nsilcm/v1/netslice_instances/<SliceInstanceId>/terminate. (rbac: slice_instances:id:terminate:post)
- POST: (Asynchronous). Undeploys a Network Slice Instance that it is in INSTANTIATED state. It returns the nsLcmOpOccId (Operationts Occurence Id) in the response header 'Location'
/nsilcm/v1/netslice_instances/nsi_lcm_op_occ. (rbac: slice_instances:opps)
- GET: Obtain the list of Network Slice Instances operations. It may be useful filtering by a concrete NSI with '?netsliceInstanceId=<netsliceInstanceId>'
/nsilcm/v1/netslice_instances/nsi_lcm_op_occ/<nsiLcmOpOccId>. (rbac: slice_instances:opps:id)
- GET: Show details of a concrete Network Slice Instance operation