Chapter 3. Configuring authentication and authorization

Procedure

1. Create credentials store by specifying a credentials add command in the deploy.security.batch field.

   Add a password to a store

   deploy:
     security:
       batch: 'credentials add keystore -c password -p secret --path="credentials.pfx"'

   Copy to Clipboard Toggle word wrap

2. Credentials store needs then to be added to the server configuration.

   Configure a credential store

   deploy:
     infinispan:
       server:
         security:
           credentialStores:
             - name: credentials
               path: credentials.pfx
               clearTextCredential:
                 clearText: "secret"

   Copy to Clipboard Toggle word wrap

Procedure

1. Create an identities-batch file that contains the commands to add your credentials.

   apiVersion: v1
   kind: Secret
   metadata:
     name: connect-secret
   type: Opaque
   stringData:
     # The "monitor" user authenticates with the Prometheus ServiceMonitor.
     username: monitor
     # The password for the "monitor" user.
     password: password
     # The key must be 'identities-batch'.
     # The content is "user create" commands for the Data Grid CLI.
     identities-batch: |-
       user create user1 -p changeme -g admin
       user create user2 -p changeme -g deployer
       user create monitor -p password --users-file metrics-users.properties --groups-file metrics-groups.properties
       credentials add keystore -c password -p secret --path="credentials.pfx"

   Copy to Clipboard Toggle word wrap

2. Create an authentication secret from your identities-batch file.

   $ oc apply -f identities-batch.yaml

   Copy to Clipboard Toggle word wrap

3. Specify the authentication secret in the deploy.security.SecretName field.

   deploy:
     security:
       authentication: true
       secretName: 'connect-secret'

   Copy to Clipboard Toggle word wrap
4. Install or upgrade your Data Grid Helm release.