Thanks @gwootton !   One last question about this: I ran the "sas-viya" CLI and it created the logging.level configuration but how do I know if it succeeded? or not programmatically? Is there a way to capture the HTTP response code from the "sas-viya" CLI or does it return some kind of other return code? ... View more

Hi @JanStienstra    Thanks for all the replies!   Just one note: seems to me like your code can misbehave in a situation where a  updated service contains multiple configuration instances from the same definition for example the "compute" service has five configurations based on the "sas.compute.server" definition. So your code will only update the first instance (whichever is returned first by the CLI  download action). I assume this is intentional but better place some warning about this as this can potentially be destructive if not well understood and improperly used. Of course, correct me if I am wrong. ... View more

OK. One last question about this: let's say I download the JSON and it contains multiple key-values. I want to modify just one of those key-values. Can I "reduce" the JSON to keep only the key-value I need and drop all the key-values which I do not wish to modify? (asking because in sas-bootstrap-config I could target a specific key-value)   For example. if I want to modify this key-value:   /opt/sas/viya/home/bin/sas-bootstrap-config kv write --force "config/identities/sas.identities.providers.ldap.user/emailAddress.work" "mail" If this JSON equivalent? Will this work? I "reduced" the JSON to only the specific key-value I want to modify and dropped all other key-values which should remain as-is.   { "config": { "identities": { "sas.identities.providers.ldap.user": { "emailAddress.work": "mail" } } } } ... View more

Thank you @JanStienstra  for the quick reply.   I have one more question: suppose I want to modify the value for a specific key, using sas-bootstrap-config I could accomplish that but it seems that with the CLI I need to prepare a JSON file to accomplish this (correct me if I am wrong). What is not clear to me is how to I know how to create this JSON file? The only way I think is to use the CLI option: "sas-viya configuration configurations download --service xxxx" to download the JSON, modify it and then use the CLI again to update like you did in your code in the blog. Is this the only way or is there some documentation/examples how to create the JSON without downloading it first? ... View more

Hi @JanStienstra    So the "sas-viya configuration" CLI plug-in replaces the sas-bootstrap-config command that was in Viya 3.5? It has the same equivalent capabilities as the sas-bootstrap-config command has?   Thanks ... View more

Hi @SASKiwi    Thanks for the reply. I am interested in both locked down data access and data encryption at-rest.   ... View more

That makes much more sense 🙂   So now I am returning to my original question: is there a migration path for Metadata Bound Libraries from SAS 9.4 to SAS Viya 4? I guess not but wondering if anyone has challenged this before and can share experience ... View more

Thanks @Patrick  waiting for your findings Maybe other have experience with Metadata Bound Libraries migration to Viya and can chime in.   By the way, I am still puzzled by the simple SAS code you wrote..    libname test "/public/folder"; How did SAS know that this is a SAS Content folder and not an OS on-disk file system??? What happens if I have a /public SAS Content folder and also a /public filesystem mounted to the Compute Server pod? How does it differentiate between them? How does it know whether to access the file system or SAS Content?   @Patrick did you actually run the code you sent above: https://communities.sas.com/t5/Moving-to-SAS-Viya/SAS-9-4-Metadata-Bound-Libraries-capability-in-Viya-4/m-p/943754#M122 and it ran fine??? ... View more

1. I am surprised and curious by what you wrote... how does SAS "know" that /public is in SAS Content and not on the server's file system? I could have a /public mount point as well mounted to the Compute Server pod?  How does it differentiate between OS mounted folders and SAS Content folders?   2. We are migrating a SAS Grid environment with Terabytes of SAS datasets. I am not sure that uploading Terabytes of data to SAS Content is recommended and also whether it allows parallel concurrent access to the same data from multiple server (I am referring to table level locking). Today they use Linux GFS to allow this clustered file system. I doubt SAS Content is a replacement for that. ... View more

The Metadata Bound Library is a like a BASE library for storing SAS datasets but with metadata access controls and on-disk encryption. I do not see how SAS Content is a replacement for that maybe I did not understand your answer. As far as I understand the SAS Content is not a place to store SAS datasets.   I need to know how to migrate SAS 9.4 which heavily uses Metadata Bound Library to SAS Viya 4 - with both aspects: metadata access controls and on-disk encryption for SAS datasets. ... View more

Hi @StuartRogers    One more question about the "Kerberos Hybrid Authentication with Protocol Transition" option. Once the krb5-proxy sidecar container issues the S4U2Self it obtains a service ticket to itself (correct me if I am wrong). Now let's say the Compute Server is trying to connect another server like SQL Server, will it issue now a S4U2Proxy request to support this? ... View more

Hi @gwootton    If I understand correctly the ECR lifecycle option is at the repository level and not at the registry level (correct me if I am wrong) so this means that I need to set it up for all the SAS repositories and there are dozens of them... Has anyone tried this lifecycle approach in a production site?   I think the SAS Mirror Manager should really have a "cleanup" option since it can tell the exact image tags associated with each Cadence release and it can safely remove images from the CR.  ... View more