Configurable Settings - Java Dynamic Agent on Windows
How to apply changes to the Controller environment
Changes in the installation.yaml
can be applied by running the install script or the upgrade script. Note that re-running the install script will delete any information that would have been stored previously.
Required fields in installation.yaml
Explanation of the Variable and Key Values | ||
---|---|---|
controller.name |
String | This will be the identifier used in the VF Server UI. So, this should be as precise a name as possible, e.g. "UAT Viper" or "Prod App1" |
controller.host |
String | The controller.host is the address that the vFunction Server address with which the Controller will connect. The value needs to start with http:// or https://. The value can be an IP Address or a FQDN |
controller.org_id
|
Strings | Once the Server is installed, the Admin can log into the UI and create the App. In the UI's Install Controller dialog box, the YAML values for the org_id, app_id, client_id and client_secret will be displayed. The values for this YAML file should be copied for the Server UI to here |
controller.type |
String | "java" |
agent.application_server |
String | The potential strings that can be used are: weblogic, websphere85, websphere9, was-liberty, tomcat, wildfly, payara, liberty, other |
agent.application_java_version |
Integer | By default, the value here is assumed to be "8" if this key is left commented out. Uncomment the key and change the value to "11" or "17" based on the Java version used by the App |
Sample with required fields in installation.yaml
controller:
name: Prod App1
host: http://10.0.0.143
org_id: 3cf59199-0a0a-0a0a-0a0a-7c63ffac776e
app_id: 7b1ab58d-0a0a-0a0a-0a0a-098a113ad721
client_id: 20761b99-0a0a-0a0a-0a0a-94c2e0bc1859
client_secret: 6b5b7bc1-0a0a-0a0a-0a0a-2bd10db75e2f
type: java
jolokia_port: 8778
instrconf_additions:
inclusions:
exclusions:
server_application:
agent:
application_server: tomcat
application_java_version: 11
override_properties:
viper:
port: 8090
archives:
- C:\vfunction\archives\*.jar
stored_procedures:
spring:
custom_context_roots:
root_bean_classes:
Optional fields in installation.yaml
agent.override_properties
agent:
override_properties:
- com.vfunction.runtime.config.aop.xml.db.tracking.enabled=true - com.vfunction.runtime.config.aop.xml.db.tracking.jdbcdriver.enabled=false |
|
controller.instance_id
controller:
instance_id: containerized
|
|
controller.instrconf_additions
controller:
instrconf_additions:
inclusions:
# - a.b.c. exclusions:
- com.vfunction.newmodule. |
|
controller.tags
controller:
tags:
- applicationName - moduleName |
|
Optional fields in global.yaml
agent.use_java_6_or_7_jre
agent:
use_java_6_or_7_jre: true
|
|
controller.poll_interval_secs
controller:
poll_interval_secs: 10
|
|
controller.upload_interval_secs
controller:
upload_interval_secs: true
|
|
general.custom_logs_folder
general:
custom_logs_folder: C:\custom_log_directory\
|
|
general.custom_sleep_after_service_start
general:
custom_sleep_after_service_start: 10
|
|
general.custom_sleep_after_service_stop
general:
custom_sleep_after_service_stop: 10
|
|
proxy.url
proxy:
url: http://proxy_url:8172
|
|
viper.use_machine_java_for_viper
viper:
use_machine_java_for_viper: true
|
|
Client Certificates for a Controller
Adding a Client Certificate and Key to the Controller allows for the vFunction Server and Controller to have some form of verification.
The Controller loads and sends the Client Certificates to a Server that verifies the source of the traffic. That Server could be set up as an intermediary that manages token validation, such as an IBM DataPower Gateway, before being sent onto the vFunction Server.
The vFunction Nginx Container could also be configured to “ssl_verify_client on” and point to the Client Certificate which would be loaded on the Nginx Container’s filesystem somewhere like /etc/nginx/certs/ca.crt.
To use Client Certificates, place a client_certificate.crt and client_certificate.key file into the vFunction Instance’s Configuration directory. For example:
- C:\vfunction\config\installation\instances\default-java\client_certificate.crt
C:\vfunction\config\installation\instances\default-java\client_certificate.key
The contents of the client_certificate.crt should be formatted as:
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
The contents of the client_certificate.key should be formatted as:
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----