15 Commits

Author SHA1 Message Date
Muawia Khan
fbee5db40f Common secret for CA in secret.yaml
- Creating a common secret for CA, since all the members of the replica set
and the clients need to have a common CA, moving all the relevant configuration
to a common secret.
- Modifying Dockerfiles for some components, once changes are approved
we will publish the new images.
- No documentation changes required.
2017-08-15 14:26:47 +02:00
Krish
3ce4a3d0c3 User service token instead of provider key in threescale-credentials kubernetes secret (#1717) 2017-08-09 10:41:51 +02:00
Muawia Khan
b56f8a6213 Update guide to setup bdb+kubernetes+azure setup
-- Fixed typos in the guide
-- Fixed some syntax errors in commandline instructions
-- Fixed strucuture of sample jsons
-- Fixed bugs in nginx-https-dep file, it was trying to access
an invalid variable in the configmap.
-- Improved some docs to give more clarity for the user.
Atleast all the issues I faced. :)
2017-07-21 15:01:20 +02:00
Krish
b7e13fd087 Secure WebSocket Support (#1619)
* Remove support for whitelist

* Rename nginx to nginx-api

* Remove websocket support from nginx-api

* Change nginx to nginx-api service
The nginx-api service will proxy requests to the BigchainDB HTTP API.

* Rename ngx-instance-0 to ngx-api-instance-0 in nginx_3scale

* Update nginx-api service base docker image and README

* Add nginx-ws service to support Websocket

* Add config files for simple dev setup

* WS support with split NGINX

* NGINX module as single entrypoint into the cluster.

* Tested HTTP and WS with latest configs

* Openresty as separate service

* Remove upstream api port as configuration parameter

* Changes while testing

* Adding READMEs for nginx-http and nginx-https modules

* Documentation update

* Change 'Openresty' to 'OpenResty'.
2017-07-17 13:46:05 +02:00
Krish
ece195ff8d Deployment changes: (#1623)
Update MongoDB container tag to `3.0`.

Doc change to reflect bdb-config.bdb-user parameter usage.

Fix typo in configuration.md.

Add BIGCHAINDB_DATABASE_SSL parameter to bigchaindb-dep.yaml for
Kubernetes deployments.

Refer the the `bdb-user` parameter from ConfigMap in
bigchaindb-dep.yaml.

Consolidate all BigchainDB parameter values under the
`bdb-config` ConfigMap.

Remove `bdb-user` from secrets.yaml.
2017-07-03 15:55:43 +02:00
Troy McConaghy
54e0fc4f57 Clarify the required SSL cert order in cert chain 2017-06-29 11:28:51 +02:00
Troy McConaghy
0feaafef2b entire HTTPS cert chain is needed in secret.yaml 2017-06-28 16:40:52 +02:00
Troy McConaghy
1d6a7624f4 Removed un-needed trailing comma in secret.yaml 2017-06-28 15:44:39 +02:00
Krish
d92f5f2024 Documentation changes (#1595)
* Add documentation for `bdb-user` parameter

* Remove the bdb-keyfile-passphrase parameter

* Formatting changes in bdb-certs.bdb-user subsection
2017-06-28 15:35:26 +02:00
Krish
9ceea89537 Enable Auth over TLS connections (#1552)
* Changes to support auth on the infrastructure
* Auth over TLS/SSL support in BigchainDB, MongoDB, Monitoring Agent, Backup Agent
* Update certificates: Different OUs specified now
* Code formatting
- Make flake happy!
* Raise proper authentication failed error
* Documentation changes for auth
* Support auth in k8s deployment
* Commit certs for monitoring and backup agents
* Configuration to allow Cloud Manager Backup Agent to backup data
* Update docs and remove authentication error
2017-06-22 16:32:04 +02:00
Krish
bca835fed7 Cloud manager GroupID update (#1551)
* Update docker image for mongodb monitoring agent

* Update docker image for mongodb backup agent

* Update secret.yaml and documentation with GroupID requirement

* Delete redundant lines from config file from entrypoint script

* Rename secret and keys
2017-06-16 14:10:21 +02:00
Troy McConaghy
e1082af385 Added clarifying comments to secret.yaml 2017-06-08 17:42:30 +02:00
krish7919 (Krish)
99fb96c9c6 Update description in documentation 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
8fb1c0be8b Update docs to reflect TLS setup 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
7208310111 Global ConfigMap and Secret 2017-06-06 10:01:53 +02:00