Edit

Mesos

1. On the ML server, edit the ${INSTALL_DIR}/**environment.conf.

2. Set the S3_ENDPOINT_URL=https://s3 variable.

3. Edit the ${INSTALL_DIR}**/config/vds/env.properties file.

4. Set the S3_ENDPOINT_URL=https://s3 variable.

5. Add the certificates to a truststore:

   (openssl x509 -noout -modulus -in certificate.pem | openssl md5 &&  openssl rsa -noout -modulus -in certificate.key | openssl md5) | uniq
   

   Make sure that your private key matches the certificate: if more than one hash is displayed, they don't match.

   If the key is correct, import the certificate to the truststore and restart the vds service. If you use different certificates for S3 and WF, import both of them to the truststore:

   $KEYTOOL -import -alias ALIAS -file $CERT_PEM -keystore $TRUSTSTORE -storepass PASSWORD
   

   Example:

   ${INSTALL_DIR}/lib/jdk1.8.0_101/bin/keytool -import -alias s3 -file ${INSTALL_DIR}/apps/ssl/certificate.pem -keystore ${INSTALL_DIR}/ssl/truststore -storepass PASSWORD
   

   You will be asked to enter a keystore password.

   If the key already exists and it's not correct, delete the alias:

   ${INSTALL_DIR}/lib/jdk1.8.0_101/bin/keytool -delete -alias s3 -keystore ${INSTALL_DIR}/ssl/truststore
   

6. Add the following parameters to ${INSTALL_DIR}/vds.compose to scaling-vds, gateway, and mesos blocks (replace PASSWORD with the correct one):

     environment:
       JAVA_OPTS: "-Xmx1G -Djavax.net.ssl.trustStore=/mnt/config/truststore -Djavax.net.ssl.trustStorePassword=PASSWORD"
   

   The results should be the following, for example, for scaling-vds:

   scaling-vds:
     container_name: scaling-vds
     image: workfusion/wfml2-meta-model-scaling-service:${VDS_VERSION}
     command: --spring.config.location=/mnt/config/env.properties,/mnt/config/scaling-service.properties
     ports:
       - "9501:9080"
     environment:
       JAVA_OPTS: "-Xmx1G -Djavax.net.ssl.trustStore=/mnt/config/truststore -Djavax.net.ssl.trustStorePassword=PASSWORD"
     volumes:
       - "./logs:/mnt/logs"
       - "./config/vds:/mnt/config"
   

7. Add the truststore file to ${INSTALL_DIR}/config/vds directory.

8. Stop containers from the Linux console or Portainer WI.

9. Re-create containers from the Linux console:

   cd ${INSTALL_DIR}
   /usr/local/bin/docker-compose -f vds.compose up -d
   

10. Add certificates to the truststore on the APP server.

    ${INSTALL_DIR}/lib/jdk1.8.0_101/bin/keytool -keystore ${INSTALL_DIR}/lib/jdk1.8.0_101/jre/lib/security/cacerts -importcert -alias WF -file ${INSTALL_DIR}/apps/ssl/certificate.pem
    

11. Restart the Tomcat service on the APP server.