From ee0b26c61e4eb9251fb3a2fcc31fb276dcae7865 Mon Sep 17 00:00:00 2001 From: Priyanshu Date: Wed, 27 Feb 2019 08:36:28 +0530 Subject: HTTPS support for workflow 1. Added support for both http and https on BE. 2. By default the HTTPS is not enabled. 3. Added some logging properties. 4. updated ReadMe. Change-Id: I5337b19d6fe5eeaf7ded47019dc6bd3fbdcca309 Issue-ID: SDC-2136 Signed-off-by: priyanshu --- README.md | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index 4a84a7a3..87b980cb 100644 --- a/README.md +++ b/README.md @@ -98,7 +98,8 @@ messages. You can also see the logs of the initialization container using `docke `docker run -d -e SDC_PROTOCL=http/https -e SDC_ENDPOINT=: -e SDC_USER= -e SDC_PASSWORD= -e CS_HOSTS= -e CS_PORT= -e CS_AUTHENTICATE=true/false -e CS_USER= -e CS_PASSWORD= --e JAVA_OPTIONS= nexus3.onap.org:10001/onap/workflow-backend:latest` +-e SSL_ENABLED=true/false -e SSL_KEY_PASSWORD= -e SSL_KEYSTORE_PATH= +-e SSL_KEYSTORE_TYPE= -e JAVA_OPTIONS= nexus3.onap.org:10001/onap/workflow-backend:latest` ### Environment Variables @@ -122,12 +123,21 @@ assumed if this variable is not specified. - CS_PASSWORD — Cassandra password if CS_AUTHENTICATE is *true*. +- SSL_ENABLED — whether ssl authentication must be used to connect to application. A *false* will be +assumed if this variable is not specified. + +- SSL_KEY_PASSWORD — SSL key password if SSL_ENABLED is *true*. + +- SSL_KEYSTORE_PATH — SSL Keystore path if SSL_ENABLED is *true*. + +- SSL_KEYSTORE_TYPE — SSL Keystore type if SSL_ENABLED is *true*. + - JAVA_OPTIONS — optionally, JVM (Java Virtual Machine) arguments. ### Example Assuming you have a dedicated Cassandra container as described in Database section, and the access to it is not -protected with a password. The following command will start a backend container: +protected with a password. The following command will start a backend container without SSL support: `docker run -d --name workflow-backend -e SDC_PROTOCOL=http -e SDC_ENDPOINT=$(docker inspect sdc-BE --format={{.NetworkSettings.IPAddress}}):8080 -- cgit 1.2.3-korg