Application Sync Cloud Bridge

Overview

The application-sync type Cloud Bridge is a type of IDaaS Cloud Bridge. It is used to establish a connection channel between BambooCloud IDaaS and enterprise internal applications, enabling data synchronization between IDaaS and enterprise internal applications.

This chapter guides you through deploying and using the Application Sync Cloud Bridge Agent on the IDaaS platform, and provides update records for the Application Sync Cloud Bridge installation package so you can choose the appropriate version according to project requirements. The following uses CentOS Linux release 8.0.1905 as an example for deploying the Application Sync Cloud Bridge Agent.

Prerequisites

• You have administrator permissions for the IDaaS Enterprise Center platform.

• You have internal network server operation permissions.

• The server has net-tools, curl, JDK (OpenJDK 17 or later), and rng-tools installed. Installation steps are as follows:

  net-tools Installation

  • Verify whether net-tools is installed.

    rpm -q net-tools

  • If it is not installed, download the installation package and upload it to the internal network server.

  • Enter the directory where the file is located and run the installation command.

    yum -y install net-tools-2.0-0.22.20131004git.el7.x86_64.rpm

  • Verify the installation.

    rpm -q net-tools

  curl Installation

  • Most Linux distributions include curl by default. Verify whether it is installed.

    curl --version

  JDK Installation

  • Download the installation package and upload it to the internal network server.

  • Enter the directory where the file is located and run the installation command.

    yum -y install jdk-17.0.13_linux-x64_bin.rpm

  • Verify the installation.

    java -version

    

  rng-tools Installation

  • Install the rng-tools utility to increase the system entropy pool replenishment rate. Run the following command to install rng-tools:

    yum install rng-tools

  • Check whether the rngd configuration file exists:

    cat /etc/sysconfig/rngd

  • If the file does not exist or is empty, run the following command to create it:

    echo "OPTIONS=\"-r /dev/urandom\"" > /etc/sysconfig/rngd

  • Run the following commands to start the rng service and check its status.

    service rngd start   Start the rng service
    service rngd status   Check the rng service status

    If the status is enabled, the service started successfully:

Pre-Deployment Preparation

Software Package

Please prepare the following software packages in advance.

Package Name	Description	Download Link
cloudAgent-appProvision-{version}.zip	Application Sync Cloud Bridge installation package.	Download
cloudAgent-appProvision-{version}.zip.sha256	SHA256 checksum file for the Application Sync Cloud Bridge installation package, used to verify package integrity.	Download
cloudAgent-appProvision-adConnector-{version}.zip	AD connector and configuration file package (recommended for AD).	Download
cloudAgent-appProvision-adConnector-{version}.zip.sha256	SHA256 checksum file for the AD connector and configuration file package, used to verify package integrity. (recommended for AD)	Download
cloudAgent-appProvision-ldapConnector-{version}.zip	LDAP connector and configuration file package.	Download
cloudAgent-appProvision-ldapConnector-{version}.zip.sha256	SHA256 checksum file for the LDAP connector and configuration file package, used to verify package integrity.	Download
cloudAgent-appProvision-fanruan-bi_report-Connector-{version}.zip	Fanruan connector and configuration file package.	Download
cloudAgent-appProvision-fanruan-bi_report-Connector-{version}.zip.sha256	SHA256 checksum file for the Fanruan connector and configuration file package, used to verify package integrity.	Download
cloudAgent-appProvision-eventCallback-Connector-{version}.zip	Event callback connector and configuration file package.	Download
cloudAgent-appProvision-eventCallback-Connector-{version}.zip.sha256	SHA256 checksum file for the event callback connector and configuration file package, used to verify package integrity.	Download

The files extracted from the Application Sync Cloud Bridge installation package are as follows:

Name	Description
agent.sh	File used to configure the Cloud Bridge Agent to start automatically on boot.
cloudAgent-appProvision.jar	Deployment package of the Application Sync Cloud Bridge Agent.
cloudBridge.sh	File used to start the Cloud Bridge Agent manually.
config	Directory for storing application sync connector configuration files.
application.yml	Configuration file of the Application Sync Cloud Bridge Agent.
log	Directory for storing Cloud Bridge Agent logs (agent.log).
connector	Directory for storing Application Sync Cloud Bridge connector JAR packages.

Deploying the Application Sync Cloud Bridge

1. Log in to the IDaaS Enterprise Center platform. In the top navigation bar, choose Settings > Cloud Bridge Configuration, click Add Cloud Bridge Agent, set a name, and select the application-sync type Cloud Bridge.

   TIP

   • After the Cloud Bridge Agent is added, the system automatically generates a ClientID and ClientSecret. Please keep them safe.
   • If you forget the ClientSecret, click Reset Secret for the target Agent to regenerate it. After reset, the original secret becomes invalid. Please proceed with caution.
   • You can view Cloud Bridge connection logs and service logs.
   • You can configure an IP address for the Cloud Bridge Agent. Set it to the egress IP of the server where the Cloud Bridge Agent is deployed. After configuration, only that IP is allowed to connect to the IDaaS cloud service, ensuring service security.
   • You can delete the target Agent. Please proceed with caution.

   

2. Upload all software packages obtained for the Application Sync Cloud Bridge to the target server, and run the following commands to verify the integrity of the Cloud Bridge installation package, LDAP connector, and Fanruan connector packages. When the output shows OK, the integrity verification is successful.

   sha256sum -c cloudAgent-appProvision-{version}.zip.sha256
   sha256sum -c cloudAgent-appProvision-ldapConnector-{version}.zip.sha256
   sha256sum -c cloudAgent-appProvision-fanruan-bi_report-Connector-{version}.zip.sha256

3. Run the following command to extract the Application Sync Cloud Bridge installation package. The extraction destination must be unique; otherwise, installation errors will occur.

   unzip -od {extraction-directory} cloudAgent-appProvision-{version}.zip

4. Enter the extracted directory and configure the application.yml file.

   ###UTF-8格式YAML配置标识头,勿删除###
   server:
    # 云桥启动端口
     port: 9081
   
   agent:
      # This is the connection address of the agent
      # exp: wss://domain/api/v1/ws
      # 云桥服务地址，domain为在IDaaS的租户域名xx.bccastle.com
      # 示例：wss://domain/api/v1/ws
      serverAddress:
      # This is the client ID of the agent
      # exp: 7jve68NwihfnjsD8SJToWxTU5Wg8hkl1
      # 云桥ClientID，在IDaaS创建的云桥的ClientID
      # 示例：7jve68NwihfnjsD8SJToWxTU5Wg8hkl1
      agentId:
      # This is the client secret of the agent
      # exp: LdfwryojYHLMaeNGVdr9fSh1iwyDCL0QuBx2wewrjxT5UOhUQVpAqwerfgj8pLNV1
      # 云桥ClientSecret，在IDaaS创建的云桥的ClientSecret
      # 示例：LdfwryojYHLMaeNGVdr9fSh1iwyDCL0QuBx2wewrjxT5UOhUQVpAqwerfgj8pLNV1
      agentSecret:
   
   # This is the Agent log level control configuration
   logging:
     level:
       com.bamboocloud.bcidaas.cloudbridge: INFO
     file:
       # The value of the attribute must have a unit, which can be KB or MB
       # 单个日志文件大小。默认值10MB，最大值10MB
       # default: 10MB
       # max-size: 10MB
       # The maximum number of days that log files are to be archived
       # 日志最长保留时间。默认值7天，最大值7天
       # default: 7 DAYS
       # max-history: 7

5. Return to the directory where the Application Sync connector installation package is stored, and run the following command to extract the package.

   unzip -od {extraction-directory} cloudAgent-appProvision-{connector-type}-{version}.zip

6. Run the following command to copy the extracted Application Sync connector (JAR file) to the Cloud Bridge connector directory.

   cp {connector-name}.jar {cloud-bridge-connector-directory}

7. Run the following command to copy the extracted Application Sync connector configuration file (YML file) to the Cloud Bridge config directory.

   cp {connector-name}.yml {cloud-bridge-config-directory}

8. Edit the Application Sync connector configuration file and rename it to {appId}.yml. The AppId is the application ID on the Resources > Applications > Application Info > General Info page of the IDaaS Enterprise Center.

9. After the configuration file is complete, run the following command in the extracted Cloud Bridge installation directory to start the Cloud Bridge. When the message Starting Agent Success appears, the Cloud Bridge started successfully. If startup fails, check the Cloud Bridge startup log agent.log and verify the configuration file content.

   ./cloudBridge.sh start

   

10. (Optional) If you want the Cloud Bridge to start automatically on boot, run the following command in the extracted Cloud Bridge installation directory. When the message The Agent service installed successfully, need to reboot will take effect appears, the operation succeeded.

./agent.sh install ```

11. (Optional) If you want to disable automatic startup of the Cloud Bridge, run the following command in the extracted Cloud Bridge installation directory. When the message uninstall Agent Success appears, automatic startup has been disabled successfully.

    ./agent.sh uninstall

12. You can obtain log information from the log/agent.log file in the directory.

Using the Application Sync Cloud Bridge

The following describes an AD application as an example:

1. Log in to the IDaaS Enterprise Center platform. In the top navigation bar, choose Resources > Applications, and enable the Sync Integration switch for the application and set it to LDAP.

2. On the Sync Integration > General Configuration page, set the connection method to Connect via Cloud Bridge Agent, select an available Application Sync Cloud Bridge, and refer to Synchronizing Data via LDAP Protocol for the remaining configuration.

   

Changelog

This section shows update records for the Application Sync Cloud Bridge Agent installation package.

Package Name	Version	Update Description
cloudAgent-appProvision-{version}.zip	V25.2.1.1	Third-party component upgrade; security vulnerabilities fixed
cloudAgent-appProvision-{version}.zip.sha256	V25.2.1.1	Third-party component upgrade; security vulnerabilities fixed
cloudAgent-appProvision-{version}.zip	V25.2.1.0	Spring version upgrade; security vulnerabilities fixed
cloudAgent-appProvision-{version}.zip.sha256	V25.2.1.0	Spring version upgrade; security vulnerabilities fixed
cloudAgent-appProvision-fanruan-bi_report-Connector-{version}.zip	V24.11.1.0	Supports appointment provisioning
cloudAgent-appProvision-adConnector-{version}.zip	V24.11.1.0	Sync integration supports custom domain configuration
cloudAgent-appProvision-{version}.zip	V24.11.1.0	Third-party component upgrade; security vulnerabilities fixed
cloudAgent-appProvision-{version}.zip	V24.08.2.0	Cloud Bridge client security hardening
cloudAgent-appProvision-{version}.zip	V24.04.1.0	Cloud Bridge client security hardening
cloudAgent-appProvision-{version}.zip	V23.10.1.0	JDK version upgraded to JDK 17
cloudAgent-appProvision-{version}.zip	V23.5.1.0	Added client connection information and log backup
cloudAgent-appProvision-{version}.zip	V23.4.1.0	Added AD connector
cloudAgent-appProvision-{version}.zip.sha256	V23.4.1.0	Added AD connector
cloudAgent-appProvision-adConnector-Connector-{version}.zip	V23.4.1.0	Added AD connector
cloudAgent-appProvision-adConnector-Connector-{version}.zip.sha256	V23.4.1.0	Added AD connector
cloudAgent-appProvision-{version}.zip	V23.3.1.0	1. Improved sync log information 2. Optimized configuration file template descriptions 3. Supplemented logic for passing connector-required properties
cloudAgent-appProvision-{version}.zip.sha256	V23.3.1.0	Version number updated in sync; no content changes
cloudAgent-appProvision-eventCallback-Connector-{version}.zip	V23.3.1.0	Added event callback
cloudAgent-appProvision-eventCallback-Connector-{version}.zip.sha256	V23.3.1.0	Added event callback
All	V22.11.1.0	1. Optimized some known bugs 2. Optimized WebSocket connection
All	V22.9.1.0	Initial release of Application Sync Cloud Bridge