Chapter 11. Configuring Data Grid for OpenShift Clusters

Set openshift.DNS_PING as the value for the JGROUPS_PING_PROTOCOL environment variable.

JGROUPS_PING_PROTOCOL=openshift.DNS_PING

JGROUPS_PING_PROTOCOL=openshift.DNS_PING

Specify the name of the ping service for the cluster as the value for the OPENSHIFT_DNS_PING_SERVICE_NAME environment variable.

OPENSHIFT_DNS_PING_SERVICE_NAME=${PING_SERVICE_NAME}

OPENSHIFT_DNS_PING_SERVICE_NAME=${PING_SERVICE_NAME}

Specify the port number where the ping service is exposed as the value for the OPENSHIFT_DNS_PING_SERVICE_PORT environment variable. The default value is 8888.

OPENSHIFT_DNS_PING_SERVICE_PORT=${PING_SERVICE_NAME}

OPENSHIFT_DNS_PING_SERVICE_PORT=${PING_SERVICE_NAME}

Define a ping service that exposes the ping port, as in the following example:

apiVersion: v1
kind: Service
spec:
  clusterIP: None
  ports:
    - name: ping
      port: 8888
      protocol: TCP
      targetPort: 8888
  selector: deploymentConfig=datagrid-service
metadata:
  annotations:
    description: The JGroups ping port for clustering.
    service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true'

apiVersion: v1
kind: Service
spec:
  clusterIP: None
  ports:
    - name: ping
      port: 8888
      protocol: TCP
      targetPort: 8888
  selector: deploymentConfig=datagrid-service
metadata:
  annotations:
    description: The JGroups ping port for clustering.
    service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true'

Set openshift.KUBE_PING as the value for the JGROUPS_PING_PROTOCOL environment variable.

JGROUPS_PING_PROTOCOL=openshift.KUBE_PING

JGROUPS_PING_PROTOCOL=openshift.KUBE_PING

Specify the OpenShift project name as the value for the OPENSHIFT_KUBE_PING_NAMESPACE environment variable. If you do not set this variable, the server behaves like a single-node cluster.

OPENSHIFT_KUBE_PING_NAMESPACE=${PING_NAMESPACE}

OPENSHIFT_KUBE_PING_NAMESPACE=${PING_NAMESPACE}

Specify a cluster label with the OPENSHIFT_KUBE_PING_LABELS environment variable. If you do not set this variable, pods outside the application but in the same namespace attempt to join.

OPENSHIFT_KUBE_PING_LABELS=labelKey=labelValue

OPENSHIFT_KUBE_PING_LABELS=labelKey=labelValue

Grant authorization to the service account the pod is running under so that it can access the Kubernetes REST API. For example, grant authorization to datagrid-service-account as follows:

oc policy add-role-to-user view \
  system:serviceaccount:$(oc project -q):datagrid-service-account \
  -n $(oc project -q)

oc policy add-role-to-user view \
  system:serviceaccount:$(oc project -q):datagrid-service-account \
  -n $(oc project -q)

Ensure port 8888 is defined as a ping port on the pod container, as follows:

ports:
    - containerPort: 8888
      name: ping
      protocol: TCP

ports:
    - containerPort: 8888
      name: ping
      protocol: TCP

Create a JGroups keystore (.jceks) that contains credentials to encrypt traffic.

You can use the Java keytool to generate a JGroups keystore.

Deploy the JGroups keystore to OpenShift as a secret.

Configure each node in the cluster to use the JGroups keystore with the following environment variables: