slaskawi

apiVersion: v1
items:
- apiVersion: extensions/v1beta1
  kind: Deployment
  metadata:
    annotations:
    labels:
      run: infinispan-server
    name: infinispan-server
    namespace: default

slaskawi

$ minikube delete
Deleting local Kubernetes cluster...
Machine deleted.

slaskawi

$ kubectl create configmap cloud-xml --from-file=cloud.xml
configmap "cloud-xml" created

slaskawi

Oct 31 13:24:42 [localhost] journal: Trace[700908767]: [500.966012ms] [497.022807ms] Transaction committed
Oct 31 13:24:44 [localhost] journal: 2017-10-31 13:24:44.224899 W | etcdserver: apply entries took too long [121.180931ms for 1 entries]
Oct 31 13:24:44 [localhost] journal: 2017-10-31 13:24:44.224918 W | etcdserver: avoid queries with large range/delete range!
Oct 31 13:24:47 [localhost] journal: 2017-10-31 13:24:47.699339 W | wal: sync duration of 1.236060053s, expected less than 1s
Oct 31 13:24:49 [localhost] journal: F1031 13:24:49.664849    7745 start_master.go:506] timed out waiting for the condition
Oct 31 13:24:49 [localhost] systemd-machined: Machine 0dd622705470f2449e7ae17925d03947 terminated.
Oct 31 13:24:49 [localhost] oci-register-machine[7786]: 2017/10/31 13:24:49 Register machine: poststop 0dd622705470f2449e7ae17925d039475e9e0f6b3db05301004d5ebce37aaf2f 0 /var/lib/docker/devicemapper/mnt/021d578e95ba866d54a0654b12f06329f56961b7159b409f28e44a8ca7213121/rootfs
Oct 31 13:24:49 [localhost] doc

slaskawi

apiVersion: "v1"
kind: "List"
items:
- apiVersion: v1
  kind: DeploymentConfig
  metadata:
    labels:
      environment: "infrastructure"
      project: "infinispan"
      version: "9.1.0.Final"

slaskawi

oc create secret generic client1-server-keystore --from-file=./client1_server_keystore.jks
oc create secret generic client2-server-keystore --from-file=./client2_server_keystore.jks

slaskawi

<server>
  <management>
        <security-realms>
            <security-realm name="SSLRealm1">
                <server-identities>
                    <ssl>
                        <keystore path="client_1_server_keystore.jks"
                                  relative-to="jboss.server.config.dir" keystore-password="secret"/>
                    </ssl>
                </server-identities>

slaskawi

# Generating key stores
keytool -genkey -noprompt -trustcacerts -keyalg RSA -alias "client1" -dname "CN=Client_1, OU=Infinispan, O=JBoss, L=Red Hat, ST=World, C=WW" -keypass "secret" -storepass "secret" -keystore "client_1_server_keystore.jks"
keytool -genkey -noprompt -trustcacerts -keyalg RSA -alias "client2" -dname "CN=Client_2, OU=Infinispan, O=JBoss, L=Red Hat, ST=World, C=WW" -keypass "secret" -storepass "secret" -keystore "client_2_server_keystore.jks"

# Generating trust stores
keytool -export -keyalg RSA -alias "client1" -storepass "secret" -file "client1_cert.cer" -keystore "client_1_server_keystore.jks"
keytool -export -keyalg RSA -alias "client2" -storepass "secret" -file "client2_cert.cer" -keystore "client_2_server_keystore.jks"

keytool -import -noprompt -v -trustcacerts -keyalg RSA -alias "client1" -file "client_1_server_keystore.cer" -keypass "secret" -storepass "secret" -keystore "client_1_truststore.jks"
keytool -import -noprompt -v -trustcacerts -keyalg RSA -alias "client2" -file "client_2

slaskawi

$ docker run -m 500M --cpu-quota=600000 jboss/infinispan-server

JAVA_OPTS already set in environment; overriding default settings with values: -Xms64m -Djava.net.preferIPv4Stack=true -Xmx350m -XX:ParallelGCThreads=6 -XX:ConcGCThreads=6 -Djava.util.concurrent.ForkJoinPool.common.parallelism=6
=========================================================================

  JBoss Bootstrap Environment

  JBOSS_HOME: /opt/jboss/infinispan-server

  JAVA: /usr/lib/jvm/java/bin/java

slaskawi

$ docker run -m 500M --cpu-quota=600000 jboss/infinispan-server -n