[EnMasse] Adapting the EnMasse deployment

[Ulf Lilleengen]

On 16. juni 2017 12:44, Ulf Lilleengen wrote:
> On 16. juni 2017 12:08, Lohmann Carsten (INST/ECS4) wrote:
>> Hi Ulf,
>>
>>>  Out of curiosity, what is it that you wish to modify in this config?
>>
>> We want to use a config similar to the one used in Hono:
>>
>> https://github.com/eclipse/hono/blob/master/dispatchrouter/qpid/qdrouterd-with-broker.json 
>>
>>  > I.e. with our sslProfile / certificates and vhost definitions.
>>
> 
> One thing to look out for there is that the enmasse router config is 
> created dynamically from a static fixed template + configuration from 
> the router agent (address config for instance).
> 
> To make it work properly in EnMasse, you have to merge that config with 
> the static enmasse router config:
> 
> https://github.com/EnMasseProject/dockerfiles/blob/master/qdrouterd/qdrouterd.conf.template 
> 
> 

Just to elaborate on this part: Eventually we hope to provide a way in 
EnMasse to do this without overriding the router config. For certs, you 
can edit the certificates used by the router by creating/editing the 
secret 'certs-$namespace' where $namespace is the namespace where you 
deployed EnMasse to, which will be used for external connections.

We intend to improve the certificate management in the near future in 
combination with keycloak integration.

How to add vhost definitions is something that needs more discussion, 
but we're working on a backlog so this is useful input.

-- 
Ulf