IBM MQ FARGATE ECS CONTAINER

[Sampath6677]

Hi, I'm not quite sure of the right place to ask about this. Out of curiosity asked i need to know how to configure ibm mq in fargate ecs container using developer license i tried by using this here is my docker file FROM ibmcom/mq:latest ENV LICENSE=accept ENV MQ_QMGR_NAME=QM2 VOLUME MQ_DEV EXPOSE 1414/tcp EXPOSE 9443/tcp CMD ["tail", "-f", "/dev/null"]

i got this error AMQ9645E: Certificate label 'ibmwebspheremqqm2' not found for channel '????'. [ArithInsert1(407), CommentInsert1
i am unable to login to ibm web console ,

i need step by step documentation for configuration and running ibm mq in fargate ecs container with developer license and logging to ibm web console , please help me in using this ibm mq in fargate ecs container thanks

[Sampath6677]

Hi @Arthur Barr arthurbarr , could u help in this above issue thanks

[d861je]

Hi - it is possible to run the MQ container in ECS Fargate however this is a completely different operational model, such as:

• Task Definition
• Run Task
• Service For instance, here is an example for a Task Definition (this assumes you are EFS):

{
    "executionRoleArn": "$ecsTaskExecutionRoleArn",
    "containerDefinitions": [
        {
            "logConfiguration": {
                "logDriver": "awslogs",
                "options": {
                    "awslogs-group": "ibmmqfargate",
                    "awslogs-region": "eu-west-2",
                    "awslogs-stream-prefix": "ibmmq/fargate"
                }
            },
            "portMappings": [
                {
                    "hostPort": 9443,
                    "protocol": "tcp",
                    "containerPort": 9443
                },
                {
                    "hostPort": 1414,
                    "protocol": "tcp",
                    "containerPort": 1414
                }
            ],
            "environment": [
                {
                    "name": "LICENSE",
                    "value": "accept"
                },
                {
                    "name": "MQ_APP_PASSWORD",
                    "value": "password"
                },
                {
                    "name": "MQ_QMGR_NAME",
                    "value": "QM1"
                }
            ],
            "ulimits": [
                {
                    "name": "nofile",
                    "softLimit": 10240,
                    "hardLimit": 10240
                },
                {
                    "name": "nproc",
                    "softLimit": 4096,
                    "hardLimit": 4096
                }
            ],
            "user": "1001:0",
            "mountPoints": [
                {
                    "sourceVolume": "queuemanager",
                    "containerPath": "/mnt/mqm",
                    "readOnly": false
                }
            ],
            "image": "ibmcom/mq:9.2.3.0-r1-amd64",
            "healthCheck": {
                "command": [
                    "CMD-SHELL",
                    "chkmqhealthy || exit 1"
                ],
                "startPeriod": 300
            },
            "essential": true,
            "name": "ibmmq922"
        }
    ],
    "memory": "1024",
    "family": "ibmmq",
    "requiresCompatibilities": [
        "FARGATE"
    ],
    "networkMode": "awsvpc",
    "cpu": "512",
    "volumes": [
        {
            "efsVolumeConfiguration": {
                "transitEncryption": "ENABLED",
                "authorizationConfig": {
                    "iam": "DISABLED",
                    "accessPointId": "$awsaccesspoint"
                },
                "fileSystemId": "$awsefsid"
            },
            "name": "queuemanager"
        }
    ],
    "tags": [
       {
           "key": "productId",
           "value": " f3beb980b6ca487ea6a3db33262afa3c"
       }
   ]
}

If you are interested in licensing MQ in ECS Fargate (which is required for non-production and production workload) then please reach out to [email protected] for details.

[Sampath6677]

@d861je , thanks for your reply ,can I know Nproc and product I'd and value you mentioned above used for ? , and I need to add is there any use of config.mqsc file here Thanks

[Sampath6677]

@d861je , i started the ecs fargate container with the above taskdefinition , getting this errors in logs of the container

2021-10-22T04:03:22.490Z AMQ8060I: IBM MQ queue manager 'QM1' started as a standby instance. [CommentInsert3(QM1)] 2021-10-22T04:03:41.796Z AMQ9645E: Certificate label 'ibmwebspheremqqm1' not found for channel '????'. [ArithInsert1(407), CommentInsert1(????), CommentInsert2(ibmwebspheremqqm1)] 2021-10-22T04:03:41.796Z AMQ9999E: Channel '????' can you please help , thanks

[d861je]

The above appears to suggest that you are trying to use TLS on a MQ channel, but you have not provided a key/trust store. This isn't really a ECS Fargate issue, simply that you either need to disable TLS on the channel, or provide and configure the required certificates.

[Sampath6677]

@d861je , I see the channel isn't starting and it is giving like ??? In the name of the channel , if possible ,can you provide me the step by step procedure for Ibmmq to be run in fargate without any certs , if certs required , can you please help Thanks