UNCLASSIFIED

README.md 1.62 KB
Newer Older
Al Fontaine's avatar
Al Fontaine committed
1 2 3
# Security Notes
# This must be behind VPN/CNAP/internal network only. Cannot be internet facing.

bhearn's avatar
bhearn committed
4
# ActiveMQ
Al Fontaine's avatar
Al Fontaine committed
5

bhearn's avatar
bhearn committed
6
Apache ActiveMQ is an open source, multi-protocol, Java-based messaging server.
Al Fontaine's avatar
Al Fontaine committed
7

bhearn's avatar
bhearn committed
8
## Download from Iron Bank
Al Fontaine's avatar
Al Fontaine committed
9

bhearn's avatar
bhearn committed
10
1. Go to the [Apache webpage](https://ironbank.dso.mil/ironbank/repomap/opensource/apache) in Iron Bank and download the latest ActiveMQ tarball.
Al Fontaine's avatar
Al Fontaine committed
11

bhearn's avatar
bhearn committed
12 13 14 15
2. Navigate to the location of the download and run:
```
docker load -i *tarball*
``` 
Al Fontaine's avatar
Al Fontaine committed
16

bhearn's avatar
bhearn committed
17
## Usage with Kubernetes
Al Fontaine's avatar
Al Fontaine committed
18

bhearn's avatar
bhearn committed
19 20 21 22
1. Create a namespace for our ActiveMQ deployment:
```
kubectl create ns active-mq
```
Al Fontaine's avatar
Al Fontaine committed
23

bhearn's avatar
bhearn committed
24
2. Modify _jetty-realm.properties_ in the 'deployment' directory of this repo to use your own custom usernames and passwords. **This file MUST be configured with proper values in order to deploy**:
bhearn's avatar
bhearn committed
25 26 27 28 29 30 31
```
# Example admin account:
admin_username: <<<ADMIN PASSWORD GOES HERE>>>, admin
#
# Example guest user:
guest_username: <<<GUEST PASSWORD GOES HERE>>>, guest
```
Al Fontaine's avatar
Al Fontaine committed
32

bhearn's avatar
bhearn committed
33 34 35 36
3. Create a secret using your _jetty-realm.properties_ file:
```
kubectl -n active-mq create secret generic active-mq-creds --from-file=jetty-realm.properties
```
Gerard Fulton's avatar
Gerard Fulton committed
37

bhearn's avatar
bhearn committed
38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54
4. Modify line 18 of _activemq-deployment.yaml_ in the 'deployment' directory of this repo to use the ActiveMQ image we loaded from Iron Bank.

5. Create a deployment using your _activemq-deployment.yaml_ file:
```
kubectl -n active-mq apply -f activemq-deployment.yaml
```

6. Create a service using the _activemq-service.yaml_ file:
```
kubectl -n active-mq apply -f activemq-service.yaml
```

You should now be able to navigate to the ActiveMQ dashboard URL and login using your credentials.

## Notes

- exposed ports: 8161, 61616, 5672, 61613, and 1833