pcemigrate
The migrate command allows for the transfer of policy objects and workloads between PCEs, typically from an on-premise PCE to Illumio Cloud. It provides flexibility by tracking migration progress for easy resumption in the event of an interruption.
The migration process can be completed in one step by exporting policy objects to JSON files and then importing them into the target PCE.
Alternatively, a two-step process is available: first, export objects using the
--only-export-objectsoption, then import them into the target PCE. This two-step method enables the sharing or testing of policy objects across different systems.Users can choose which management objects to migrate, with no management objects migrating by default.
pcemigrate
Note
To understand each one of the commands, run the command: pcemigrate command --help for more information.
./pcemigrate --help
pcemigrate is a tool that helps migrate policy objects from one PCE to another PCE.
Usage:
pcemigrate [command]
PCE Management Commands:
pce-add Adds a PCE to the pce.yaml file.
pce-remove Remove a pce configuration parameters from pcemigrate
configuration YAML file.
pce-list List all PCEs in pcemigrate YAML configuration file.
set-proxy Set pcemigrate specific proxy.
clear-proxy Clear pcemigrate specific proxy.
settings Display global settings or change pcemigrate global settings.
See flag options below.
Import/Export Commands:
label-export Create a JSON export of all labels in the PCE.
label-import Create and update labels from a JSON.
labelgroup-export Create a JSON export of all label groups in the PCE.
labelgroup-import Create and modify label groups from a JSON file.
label-dimension-export Create a JSON export of all labels dimensions in the PCE.
label-dimension-import Create label dimensions on the target PCE from a JSON.
svc-import Create services from a JSON file.
svc-export Create a JSON export of all services in the PCE.
vservice-import Create services from a JSON file.
vservice-export Create a JSON export of all virtual services in the PCE.
svcbnd-export Create a JSON export of all service bindings in the PCE.
svcbnd-import Create service binding from a JSON file.
ipl-export Create a JSON export of all IP lists in the PCE.
ipl-import Create and update IP Lists from a JSON File.
wkld-export Create a JSON export of all workloads in the PCE.
wkld-import Create workloads from a JSON file.
ruleset-export Create a JSON export of all rulesets in the PCE.
ruleset-import Create rulesets from a JSON file.
eb-export Create a JSON export of all enforcement boundaries/deny rules in the PCE.
eb-import Create Enforcement boundaries/Deny rules in the PCE from a JSON file.
adgroup-export Create a JSON export of all AD groups in the PCE.
adgroup-import Create and update AD groups from a JSON.
permission-export Create a JSON export of all permissions.
permission-import Create permissions from a JSON file.
auth-sec-principal-export Create a JSON export of all auth security principals.
auth-sec-principal-import Create auth security principals from a JSON file.
access-restriction-export Create a JSON export of all access restrictions.
access-restriction-import Create access restrictions from a JSON file.
pairing-profile-export Create a JSON export of all pairing profiles in
the PCE.
pairing-profile-import Create pairing profiles from a JSON file
user-export Create a JSON export of all users.
user-import Create users from a JSON.
container-cluster-export Create a JSON export of all container clusters in the PCE.
container-cluster-import Create container clusters from a JSON.
cwp-export Create a JSON export of all container workload profiles
in the PCE.
cwp-import Create container workload profiles from a JSON file.
provision-export Create a JSON file of objects pending provisioning
or of provisioning versions
provision Provision all policy objects pending provisioning
or those in the input JSON file.
Policy Objects Migration Commands:
migrate Handles policy objects, workloads and policies initial replication from a source PCE to a target PCE.
sync Sync policy objects changes from the source PCE (--from-pce) to the destination PCE (--to-pce).
create-config-map Retrieve Policy object from target PCE and create Policy map data as if migrate completed successfully between source and target.
Workload Management Commands:
umwl-cleanup Create a JSON with hrefs of unmanaged workloads that meet specified criteria.
umwl-delete Delete unmanaged workloads that meet specified criteria.
create-unmanaged-workload Create unmanaged workloads for each matching managed workload on the system.
wkld-metadata-export Create JSON file of managed workloads meta data.
wkld-sync-label Apply labels to managed workload
unpair Unpair workloads through an href input file
or by a hostname filter and labels.
VEN Migration Command:
transplant-vens Handles bulk transferring of VENs from one PCE to another.
transplant-vens-status Provides the status of the migration of VENs from a source PCE to a target PCE.
ven-migrate-config Generate the ven migration parameters YAML file
enc-ven-migrate-conf Generate an encrypted version of venmigrate yaml file
Version Command:
version Print pcemigrate version.
Database Migration Command:
db-import Imports DB data dump for PCE (default: agent db)
db-export Exports DB data dump for PCE (default: agent db)
db-migrate Migrates and cleans database data based on flags
Other Commands:
delete Delete any object with an HREF (e.g., unmanaged workloads, labels, services, IPLists, etc.) from the PCE.
Use "pcemigrate [command] --help" for more information on a command.