README.md

# Security Notes
# This must be behind VPN/CNAP/internal network only. Cannot be internet facing.

# ActiveMQ

Version: 5.15.13

Apache ActiveMQ is an open source, multi-protocol, Java-based messaging server.

## Download from Iron Bank

1. Go to the [Apache webpage](https://ironbank.dsop.io/ironbank/repomap/opensource/apache) in Iron Bank and download the latest ActiveMQ tarball.

2. Navigate to the location of the download and run:
```
docker load -i *tarball*
``` 

## Usage with Kubernetes

1. Create a namespace for our ActiveMQ deployment:
```
kubectl create ns active-mq
```

2. Modify _jetty-realm.properties_ in the 'deployment' directory of this repo to use your own custom usernames and passwords. **This file MUST be configured with proper values in order to deploy**:
```
# Example admin account:
admin_username: <<<ADMIN PASSWORD GOES HERE>>>, admin
#
# Example guest user:
guest_username: <<<GUEST PASSWORD GOES HERE>>>, guest
```

3. Create a secret using your _jetty-realm.properties_ file:
```
kubectl -n active-mq create secret generic active-mq-creds --from-file=jetty-realm.properties
```

4. Modify line 18 of _activemq-deployment.yaml_ in the 'deployment' directory of this repo to use the ActiveMQ image we loaded from Iron Bank.

5. Create a deployment using your _activemq-deployment.yaml_ file:
```
kubectl -n active-mq apply -f activemq-deployment.yaml
```

6. Create a service using the _activemq-service.yaml_ file:
```
kubectl -n active-mq apply -f activemq-service.yaml
```

You should now be able to navigate to the ActiveMQ dashboard URL and login using your credentials.

## Notes

- root user is needed to extract files from the ActiveMQ gzip
- exposed ports: 8161, 61616, 5672, 61613, and 1833