TLS automation configuration script for Artemis.
-
Navigate to
/kubernetes/scripts. -
Open
generate-artemis-certs.shfile and setup artemis svc name or IP address inSUBJECT_ALT_NAMESas below screenshot.
Use:
1. svc-name when running artemis as helm based
-
VM IP address when running artemis as system service.
-
Generate new certificates.
### Give permissions chmod +x generate-artemis-certs.sh ### Execute script ./generate-artemis-certs.sh -
Go to
kubernetespath and re-apply secrets for newly generated certificates in bothexpertflowandef-externalnamespaces.#### Delete old secret from ef-external kubectl delete -f ./pre-deployment/static-tls/activemq-tls.yaml -n ef-external #### Delete old secret from expertflow kubectl delete -f ./pre-deployment/static-tls/activemq-tls.yaml -n expertflow #### Apply to ef-external kubectl apply -f ./pre-deployment/static-tls/activemq-tls.yaml -n ef-external #### Apply to expertflow kubectl apply -f ./pre-deployment/static-tls/activemq-tls.yaml -n expertflow -
When deploying CX Core, update these variables in
helm-values/ef-cx-custom-values.yaml# helm-values/ef-cx-custom-values.yaml efConnectionVars: ACTIVEMQ_SSL_VERIFY_HOST: "true" ACTIVEMQ_SSL_TRUST_ALL: "false" -
Restart pods if there are any pods running, to be able to establish a connection with newly generated certificates.
### Restart pods in expertflow namespace k delete pods -n expertflow --all