WSO2 Puppet scripts no longer support running Secure Vault while applying
the scripts themselves. So this scenario is simplified even further.

In your case, I think it would be just a matter of copying the necessary
files. After running the Cipher Tool you get the following files.

1. cipher-text.properties
2. cipher-tool.properties
3. secret-conf.properties (mostly unaltered)
4. Configuration files that have their (above specified) sensitive fields
marked as SecureVaulted.

All you would need to do is to

1. Run cipher-tool manually to generate the above files along with the
encrypted password fields in the configuration files.
2. Copy the above files to the Docker image while building.
3. Generate the `password-tmp` file when starting the Container

Regarding #3, this should be handled by the ENTRYPOINT script. It would
(for example) read a given environment variable, write it into a
`password-tmp`, and then start the server (this is already written in the
WSO2 Dockerfiles [1]).

[1] -
https://github.com/wso2/docker-common/blob/9d20f508cd8426913c1813865c660f6e39b07a25/scripts/entrypoint.sh#L96-L100


Regards,
Chamila de Alwis
Committer and PMC Member - Apache Stratos
Senior Software Engineer | WSO2
+94 77 220 7163
Blog: https://medium.com/@chamilad



On Sat, Sep 9, 2017 at 1:03 PM, Harsha Kumara <[email protected]> wrote:

>
>
> On Sat, Sep 9, 2017 at 7:27 PM, Youcef HILEM <[email protected]>
> wrote:
>
>> Hi Imesh,
>>
>> Could you please provide me with an example to integrate secure vault in
>> https://github.com/wso2/kubernetes-apim/tree/2.1.0/pattern-2?
>>
>> The example (https://docs.wso2.com/display/KA100/Applying+Secure+Vault)
>> uses
>> Puppet Modules.
>> But we do not use Puppet Modules.
>>
>> Thanks
>> Youcef HILEM
>>
>>
>>
>> --
>> Sent from: http://wso2-oxygen-tank.10903.n7.nabble.com/WSO2-Development
>> -f3.html
>> _______________________________________________
>> Dev mailing list
>> [email protected]
>> http://wso2.org/cgi-bin/mailman/listinfo/dev
>>
>
>
>
> --
> Harsha Kumara
> Software Engineer, WSO2 Inc.
> Mobile: +94775505618 <+94%2077%20550%205618>
> Blog:harshcreationz.blogspot.com
>
> _______________________________________________
> Dev mailing list
> [email protected]
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to