3.2. 添加自定义用户凭证或凭证存储

流程

1. 通过在 deploy.security.batch 字段中指定 credentials add 命令，创建凭据存储。

   为存储添加密码

   deploy:
     security:
       batch: 'credentials add keystore -c password -p secret --path="credentials.pfx"'

   Copy to Clipboard Toggle word wrap

2. 然后，凭据存储需要添加到服务器配置中。

   配置凭证存储

   deploy:
     infinispan:
       server:
         security:
           credentialStores:
             - name: credentials
               path: credentials.pfx
               clearTextCredential:
                 clearText: "secret"

   Copy to Clipboard Toggle word wrap

流程

1. 创建一个 identity-batch 文件，其中包含用于添加您的凭据的命令。

   apiVersion: v1
   kind: Secret
   metadata:
     name: connect-secret
   type: Opaque
   stringData:
     # The "monitor" user authenticates with the Prometheus ServiceMonitor.
     username: monitor
     # The password for the "monitor" user.
     password: password
     # The key must be 'identities-batch'.
     # The content is "user create" commands for the Data Grid CLI.
     identities-batch: |-
       user create user1 -p changeme -g admin
       user create user2 -p changeme -g deployer
       user create monitor -p password --users-file metrics-users.properties --groups-file metrics-groups.properties
       credentials add keystore -c password -p secret --path="credentials.pfx"

   Copy to Clipboard Toggle word wrap

2. 从 identity -batch 文件创建 身份验证 secret。

   $ oc apply -f identities-batch.yaml

   Copy to Clipboard Toggle word wrap

3. 在 deploy.security.SecretName 字段中指定身份验证 secret。

   deploy:
     security:
       authentication: true
       secretName: 'connect-secret'

   Copy to Clipboard Toggle word wrap
4. 安装或升级 Data Grid Helm 发行版本。