Red Hat Summit Red Hat SummitSuporteConsoleDesenvolvedoresComeçar um testeContato

Este conteúdo não está disponível no idioma selecionado.

Chapter 5. Invoking the Data Grid REST API

Data Grid services expose a REST endpoint at port 8443.

By default, Data Grid requires user authentication for data access and encryption for client connections.

Authentication
Data Grid authorizes data access requests with credentials that you specify with the APPLICATION_USER and APPLICATION_PASSWORD parameters.
Encryption
When Data Grid pods start they generate TLS certificate/key pairs and save them in the service-certs secret. The TLS certificates are signed by the OpenShift certificate authority (CA).

5.1. Creating External Routes to the REST API
Copiar o link

REST clients running outside OpenShift access Data Grid pods through routes with reencrypt termination.

Procedure

  1. Create a route with reencrypt termination. 

    $ oc create route reencrypt ${ROUTE_NAME} \
  --port=https \
  --service ${APPLICATION_NAME}
    Copy to Clipboard Toggle word wrap

    For example: 

    $ oc create route reencrypt cache-service-https-route \
  --port=https \
  --service cache-service
    Copy to Clipboard Toggle word wrap

  2. Run oc get routes to find the HTTPS route hostname, for example: 

    $ oc get routes

NAME                         HOST/PORT
cache-service-https-route    cache-service-https-route-rhdg-helloworld.192.0.2.0.nip.io
    Copy to Clipboard Toggle word wrap

5.2. Making REST Calls
Copiar o link

Prerequisite

  • Configure REST clients for authentication and encryption.

    On OpenShift
    Create truststores with the CA bundle mounted in the pod at:
    /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
    Outside OpenShift
    Create truststores with the CA for your OpenShift environment.

Procedure

  • Invoke the Data Grid REST API as appropriate.

    For example, invoke a PUT call to add a key:value pair: 

    curl -X PUT \
  -u ${USERNAME}:${PASSWORD} \
  -H 'Content-type: text/plain' \
  -d 'world' \
  https://${HOSTNAME_FOR_HTTPS_ROUTE}/rest/default/hello
    Copy to Clipboard Toggle word wrap

5.2.1. Using the OpenShift CA to Make REST Calls
Copiar o link

In cases where the CA certificate is not valid, such as local OpenShift clusters or Red Hat OpenShift Container Platform development installations, you can use service-ca.crt to make REST calls.

Procedure

  1. Get service-ca.crt from Data Grid pods. 

    $ oc rsync ${pod_name}:/var/run/secrets/kubernetes.io/serviceaccount/..data/service-ca.crt .
    Copy to Clipboard Toggle word wrap

  2. Pass service-ca.crt when you invoke REST calls. 

    curl -X PUT \
  -u ${USERNAME}:${PASSWORD} \
  --cacert service-ca.crt \
  -H 'Content-type: text/plain' \
  -d 'world' \
  https://${HOSTNAME_FOR_HTTPS_ROUTE}/rest/default/hello
    Copy to Clipboard Toggle word wrap
Voltar ao topo
Red Hat logoGithubredditYoutubeTwitter

Aprender

Experimente, compre e venda

Comunidades

Sobre a documentação da Red Hat

Ajudamos os usuários da Red Hat a inovar e atingir seus objetivos com nossos produtos e serviços com conteúdo em que podem confiar. Explore nossas atualizações recentes.

Tornando o open source mais inclusivo

A Red Hat está comprometida em substituir a linguagem problemática em nosso código, documentação e propriedades da web. Para mais detalhes veja o Blog da Red Hat.

Sobre a Red Hat

Fornecemos soluções robustas que facilitam o trabalho das empresas em plataformas e ambientes, desde o data center principal até a borda da rede.

Theme

© 2025 Red Hat