garethahealy / amq-jaas-cert

[DEAD] OpenShift PoC for JBoss AMQ 6.3 using: JaasDualAuthenticationPlugin

amq-jaas-cert

OpenShift PoC for JBoss AMQ 6.3 using: JaasDualAuthenticationPlugin

Upstream docs

• https://github.com/jboss-openshift/application-templates/blob/master/docs/amq/amq63-ssl.adoc

Deploy to OCP

1.Create upstream templates:

oc create -f https://raw.githubusercontent.com/jboss-openshift/application-templates/master/amq/amq63-ssl.json -n openshift
oc create -f https://raw.githubusercontent.com/jboss-openshift/application-templates/master/amq/amq63-image-stream.json -n openshift

2.Create AMQ Service Account (SA):

oc create serviceaccount amq-service-account
oc policy add-role-to-user view system:serviceaccount:$(oc project -q):amq-service-account

3.Create secret:

oc create secret generic amq-app-secret \
    --from-file=amq-broker.ks=generated-certs/amq-broker.ks \
    --from-file=amq-broker.ts=generated-certs/amq-broker.ts

4.Create the BuildConfig for this repo, which extends the base AMQ image:

oc create -f https://raw.githubusercontent.com/garethahealy/amq-jaas-cert/master/openshift-buildconfig.yaml
oc start-build amq6-broker-custom

5.Once the build is complete, deploy the template:

oc process amq63-ssl \
    -p AMQ_KEYSTORE=amq-broker.ks \
    -p AMQ_KEYSTORE_PASSWORD=password \
    -p AMQ_TRUSTSTORE=amq-broker.ts \
    -p AMQ_TRUSTSTORE_PASSWORD=password \
    -n openshift | oc create -f -

6.Manually update the image to be the BC image:

TODO: via patch command

Produce and Consume examples

1.Produce via activemq-admin:

$AMQ_HOME/bin/activemq-admin \
    -Djavax.net.ssl.trustStore=/tmp/src/amq-client.ts \
    -Djavax.net.ssl.trustStorePassword=password \
    -Djavax.net.ssl.keyStore=/tmp/src/amq-client.ks \
    -Djavax.net.ssl.keyStorePassword=password producer \
    --brokerUrl ssl://localhost:61617 \
    --user userDKV \
    --password l4Kkg8Pp \
    --destination queue://MY.TEST.QUEUE \
    --messageCount 1 \
    --message HelloWorld 

2.Consume via activemq-admin:

$AMQ_HOME/bin/activemq-admin \
    -Djavax.net.ssl.trustStore=/tmp/src/amq-client.ts \
    -Djavax.net.ssl.trustStorePassword=password \
    -Djavax.net.ssl.keyStore=/tmp/src/amq-client.ks \
    -Djavax.net.ssl.keyStorePassword=password consumer \
    --brokerUrl ssl://localhost:61617 \
    --user userDKV \
    --password l4Kkg8Pp \
    --destination queue://MY.TEST.QUEUE \
    --messageCount 1

3.Consume via mvn activemq-perf:

mvn activemq-perf:consumer \
    -Djavax.net.ssl.trustStore=/Users/garethah/Documents/github/garethahealy/amq-jaas-cert/amq-client.ts \
    -Djavax.net.ssl.trustStorePassword=password \
    -Djavax.net.ssl.keyStore=/Users/garethah/Documents/github/garethahealy/amq-jaas-cert/amq-client.ks \
    -Djavax.net.ssl.keyStorePassword=password \
    -Dfactory.brokerURL=ssl://192.168.64.2:30789 \
    -Dconsumer.destName=queue://MY.TEST.QUEUE \
    -Dconsumer.recvType=count \
    -Dconsumer.recvCount=1