[UA-User Management Console] RP1.0.7

Title

Status

Due

Scheduled

Context

Project

Category

Notes Saved

# UMC RP1.0.7 - Deployment

## Components

* **Backend:** `COMMON.zip` -> `/backend/war/umc.war`
* **Frontend:** `umc-fe-code-pre.tar.gz` (PRE), `umc-fe-code-production.tar.gz` (PROD)
* **Source procedure:** `rp1.0.7-update.docx` (attached). Release notes: `rp1.0.7-release_notes.docx`.

## Servers (same as Notifications)

| Env | Hosts |
| --- | ----- |
| PRE | notif-e-app-01.global.un.org, notif-e-app-02.global.un.org |
| PROD | notif-p-app-01.global.un.org, notif-p-app-02.global.un.org |

Deploy to **both** app servers per environment.

## Validation URLs

* PRE backend version: `https://pre-comms.uniteaware.un.org/umc/api/v1/rest/version` (expect `{"version":"1.0.7"}`)
* PRE backend monitor: `https://pre-comms.uniteaware.un.org/umc/api/v1/rest/monitor` (expect `{"status":"ok"}`)
* PRE frontend version: `https://pre-comms.uniteaware.un.org/umc/version.json`
* PRE frontend app: `https://pre-comms.uniteaware.un.org/umc/unmiss`
* PROD backend version: `https://comms.uniteaware.un.org/umc/api/v1/rest/version`
* PROD backend monitor: `https://comms.uniteaware.un.org/umc/api/v1/rest/monitor`
* PROD frontend version: `https://comms.uniteaware.un.org/umc/version.json`
* PROD frontend app: `https://comms.uniteaware.un.org/umc/unmiss`

## File upload from OneVDI (PowerShell)

Use short username `adm.crodrigo2` \- no domain prefix\.

PRE:

```
scp "Y:\notifications\deployments\UMC-RP-1.0.7\FW_ [UA-User Management Console] RP1.0.7\COMMON.zip" "adm.crodrigo2@notif-e-app-01.global.un.org:/tmp/"
scp "Y:\notifications\deployments\UMC-RP-1.0.7\FW_ [UA-User Management Console] RP1.0.7\COMMON.zip" "adm.crodrigo2@notif-e-app-02.global.un.org:/tmp/"
scp "Y:\notifications\deployments\UMC-RP-1.0.7\FW_ [UA-User Management Console] RP1.0.7\umc-fe-code-pre.tar.gz" "adm.crodrigo2@notif-e-app-01.global.un.org:/tmp/"
scp "Y:\notifications\deployments\UMC-RP-1.0.7\FW_ [UA-User Management Console] RP1.0.7\umc-fe-code-pre.tar.gz" "adm.crodrigo2@notif-e-app-02.global.un.org:/tmp/"
```

PROD:

```
scp "Y:\notifications\deployments\UMC-RP-1.0.7\FW_ [UA-User Management Console] RP1.0.7\COMMON.zip" "adm.crodrigo2@notif-p-app-01.global.un.org:/tmp/"
scp "Y:\notifications\deployments\UMC-RP-1.0.7\FW_ [UA-User Management Console] RP1.0.7\COMMON.zip" "adm.crodrigo2@notif-p-app-02.global.un.org:/tmp/"
scp "Y:\notifications\deployments\UMC-RP-1.0.7\FW_ [UA-User Management Console] RP1.0.7\umc-fe-code-production.tar.gz" "adm.crodrigo2@notif-p-app-01.global.un.org:/tmp/"
scp "Y:\notifications\deployments\UMC-RP-1.0.7\FW_ [UA-User Management Console] RP1.0.7\umc-fe-code-production.tar.gz" "adm.crodrigo2@notif-p-app-02.global.un.org:/tmp/"
```

# PRE deployment

## 1\. Backup \(run as root on each PRE app server\)

```
mkdir -p /opt/backup/umc/v1.0.6/
cp -p /opt/tomcat/webapps/umc.war /opt/backup/umc/v1.0.6/
tar -czpvf /opt/backup/umc/v1.0.6/umc-fe-code.tar.gz -C /opt/www/umc-fe .
```

## 2\. SQL update \(run ONCE on the PRE DB\)

Run from a notif-e app server (the `dbserver` host only resolves on the UN network).

Connection (PRE):

```
host: dbserver:3306   db: preuaumc
user: preuaumc
pass: h;vT+NTym]Xj)D>>xs+3
```

```
mysql -h dbserver -P 3306 -u preuaumc -p preuaumc
```

At the `mysql>` prompt:

```
ALTER TABLE pending_actions ADD COLUMN partition_id VARCHAR(250);
```

## 3\. Config update \(on each PRE app server\)

```
vim /opt/appconfigs/umc/aad.cfg
```

Add this block **at the beginning** of the file (copy values from existing `auth.clientId` / `auth.clientSecret` lines in the same file):

```
// Needs Directory.ReadAll or User.Read.All (user/memberOf endpt). Used for getting the M2M token for GRAPH(or other Apps)
auth.M2MclientId=COPY_THE_SAME_VALUE_AS_auth.clientId
auth.M2MclientSecret=COPY_THE_SAME_VALUE_AS_auth.clientSecret
```

## 4\. Deploy backend WAR \(on each PRE app server\)

```
cd /tmp && unzip -o COMMON.zip -d /tmp/umc_1.0.7_COMMON
cp /tmp/umc_1.0.7_COMMON/backend/war/umc.war /tmp/umc.war
chown tomcat:tomcat /tmp/umc.war
chmod 640 /tmp/umc.war
mv /tmp/umc.war /opt/tomcat/webapps/umc.war
```

**NEVER use the Tomcat Manager website** to deploy - it deletes `/opt/tomcat/conf/Catalina/localhost/umc.xml`.

## 5\. Restart Tomcat \(on each PRE app server\)

```
systemctl restart tomcat && systemctl status tomcat
```

## 6\. Validate backend in PRE

```
curl -s https://pre-comms.uniteaware.un.org/umc/api/v1/rest/version
curl -s https://pre-comms.uniteaware.un.org/umc/api/v1/rest/monitor
```

Expect `{"version":"1.0.7"}` and `{"status":"ok"}`.

## 7\. Deploy frontend \(run as root on each PRE app server\)

```
rm -rf /opt/www/umc-fe/ && mkdir -p /opt/www/umc-fe/
tar -xzvf /tmp/umc-fe-code-pre.tar.gz -C /opt/www/umc-fe/
chown -R nginx:nginx /opt/www
chmod -R u=r,g=,o= /opt/www/umc-fe/*
find /opt/www/ -type d -exec chmod u=rx {} \;
```

## 8\. Validate frontend in PRE

```
curl -s https://pre-comms.uniteaware.un.org/umc/version.json
```

Expect `{"version":"1.0.7"}`. Also open `https://pre-comms.uniteaware.un.org/umc/unmiss` (Ctrl+F5).

## 9\. Sanity\-check cron \(PRE\)

Contact **Santiago Romero** to configure the cron on **ONE** PRE app server to execute the sanity check service once a day.

# PROD deployment

## 1\. Backup \(run as root on each PROD app server\)

On notif-p-app-01.global.un.org and notif-p-app-02.global.un.org:

```
mkdir -p /opt/backup/umc/v1.0.6/
cp -p /opt/tomcat/webapps/umc.war /opt/backup/umc/v1.0.6/
tar -czpvf /opt/backup/umc/v1.0.6/umc-fe-code.tar.gz -C /opt/www/umc-fe .
```

## 2\. SQL update \(run ONCE on the PROD DB\)

Run from notif-p-app-01.global.un.org. First retrieve the PROD DB credentials from the config file:

```
ssh adm.crodrigo2@notif-p-app-01.global.un.org
grep -A 10 "DATABASE CONECTION" /opt/appconfigs/umc/umc.cfg
```

This will show the host, username, and password. Then connect:

```
mysql -h dbserver -P 3306 -u uaumc -p uaumc
```

(replace `uaumc` / password with the actual values from the grep output if they differ)

At the `mysql>` prompt:

```
ALTER TABLE pending_actions ADD COLUMN partition_id VARCHAR(250);
```

## 3\. Config update \(on each PROD app server\)

```
vim /opt/appconfigs/umc/aad.cfg
```

Add this block **at the beginning** of the file (copy values from existing `auth.clientId` / `auth.clientSecret` lines in the same file):

```
// Needs Directory.ReadAll or User.Read.All (user/memberOf endpt). Used for getting the M2M token for GRAPH(or other Apps)
auth.M2MclientId=76e3f0a0-c615-462e-857f-a8bb48f1f390
auth.M2MclientSecret=imS8Q~kCRyldt5VarSHnnGhpGrcom_eehTW~Kata
```

## 4\. Deploy backend WAR \(on each PROD app server\)

**NEVER use the Tomcat Manager website** to deploy - it deletes `/opt/tomcat/conf/Catalina/localhost/umc.xml`.

## 5\. Restart Tomcat \(on each PROD app server\)

```
systemctl restart tomcat && systemctl status tomcat
```

## 6\. Validate backend in PROD

```
curl -s https://comms.uniteaware.un.org/umc/api/v1/rest/version
curl -s https://comms.uniteaware.un.org/umc/api/v1/rest/monitor
```

Expect `{"version":"1.0.7"}` and `{"status":"ok"}`.

## 7\. Deploy frontend \(run as root on each PROD app server\)

```
rm -rf /opt/www/umc-fe/ && mkdir -p /opt/www/umc-fe/
tar -xzvf /tmp/umc-fe-code-production.tar.gz -C /opt/www/umc-fe/
chown -R nginx:nginx /opt/www
chmod -R u=r,g=,o= /opt/www/umc-fe/*
find /opt/www/ -type d -exec chmod u=rx {} \;
```

## 8\. Validate frontend in PROD

```
curl -s https://comms.uniteaware.un.org/umc/version.json
```

Expect `{"version":"1.0.7"}`. Also open `https://comms.uniteaware.un.org/umc/unmiss` (Ctrl+F5).

## 9\. Sanity\-check cron \(PROD\)

Contact **Santiago Romero** to configure the cron on **ONE** PROD app server to execute the sanity check service once a day.

# Rollback (valid for PRE & PROD)

SQL: no rollback needed for the `ALTER TABLE` step.

Backend (each app server):

```
chown tomcat:tomcat /opt/backup/umc/v1.0.6/umc.war
chmod 640 /opt/backup/umc/v1.0.6/umc.war
cp -p /opt/backup/umc/v1.0.6/umc.war /opt/tomcat/webapps/umc.war
systemctl restart tomcat
```

Frontend (each app server) - restore from backup tarball:

```
rm -rf /opt/www/umc-fe/ && mkdir -p /opt/www/umc-fe/
tar -xzvf /opt/backup/umc/v1.0.6/umc-fe-code.tar.gz -C /opt/www/umc-fe/
chown -R nginx:nginx /opt/www
chmod -R u=r,g=,o= /opt/www/umc-fe/*
find /opt/www/ -type d -exec chmod u=rx {} \;
```

Verify rollback returns `{"version":"1.0.6"}`.

# Reference

* ST #275 - prior UMC 1.0.6 deployment (closed)
* Attached: `COMMON.zip`, `umc-fe-code-pre.tar.gz`, `umc-fe-code-production.tar.gz`, `rp1.0.7-release_notes.docx`, `rp1.0.7-update.docx`
* Released bugfixes/features: banner images per env, secondary account for Azure memberOf, sanity check feature + daily cron, error logging for profile group changes, DB init timeout params, partition\_id/partition\_name in pending\_actions for unassign-on-group-remove flow
* PRE iNeed: RFS-1-12934105166
* PROD HPSM change: C77652

Supports Markdown: bold, italics, code, lists, links. Auto-saves.

AI Notes - managed by Claude

No AI notes yet.

📂 Activities for this Item

➕ Add Activity

Open Activities

No open activities.

Closed Activities

[UA-User Management Console] RP1.0.7

Service Requests / Work Orders

RFS-1-12934099329

Service Request

WO-RFS-1-12934099342

RFS-1-12934105166

Service Request

WO-RFS-1-12934105171

iNeed Text

Title

Description

UA Notifications - [UA-User Management Console] RP1.0.7
Assign to Carlos Rodrigo - AOM DS

Asset#

Defined per context on the Taxonomy page.

Normalized time tracking

Last 30 days

Logged: 0:00 · Normalized: 0:00

No normalized entries for this item yet.

Meeting Notes (Project / Context)

Select a meeting to preview details.

Templates

Change Title

Change Description

Change Steps

Template Notes

Communications

Label

Order

Subject

Email Body

Attachments

COMMON.zip

33.4 MB · application/x-zip-compressed · 2026-05-15 07:41

Download

rp1.0.7-release_notes.docx

211.7 KB · application/vnd.openxmlformats-officedocument.wordprocessingml.document · 2026-05-15 07:37

Download

umc-fe-code-production.tar.gz

907.1 KB · application/x-gzip · 2026-05-15 07:37

Download

umc-fe-code-pre.tar.gz

907.1 KB · application/x-gzip · 2026-05-15 07:37

Download

rp1.0.7-update.docx

73.3 KB · application/vnd.openxmlformats-officedocument.wordprocessingml.document · 2026-05-15 07:37

Download