egeria-docs icon indicating copy to clipboard operation
egeria-docs copied to clipboard

Add docs clarifying how to specify TLS configuration for docker images

Open planetf1 opened this issue 4 years ago • 0 comments
trafficstars

We document how to configure TLS when running egeria at https://odpi.github.io/egeria-docs/guides/admin/configuring-the-omag-server-platform/?h=tls#brief-background-on-tls

However this only covers directly launching the chassis, and not when running in docker.

Our docker image for Egeria is based on Redhat UBI openjdk11 image. Various environment variables can be set.

We currently set ENV JAVA_OPTS_APPEND="-XX:MaxMetaspaceSize=1g"

to avoid some memory issues found with CTS, but more generally this environment variable allows other JVM options to be passed. This would include the ssl configuration referred to in the original link

The docs here should be extended to cover the docker image (there is currently none), and specifically how TLS can be configured when using the image

Further, this should be extended to our other docker images we build for connectors and UI (cc: @davidradl @sarbull @cmgrote @wbittles ) - some of these being based on other images

Also to note - as part of the work on the k8s operator, it too will be making TLS certs available via secrets, and in addition to documentation for the operator, it would be useful to document this technique for the benefit of those deploying with their own yaml/charts etc in k8s

planetf1 avatar Sep 21 '21 07:09 planetf1