Fix jobname prefix - #4943
Conversation
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
|
😺 Thank you for creating this PR! To publish your content to Zowe Docs, follow these required steps.
Need help? Contact the Doc Squad in the #zowe-doc Slack channel. |
|
💾 The release label is missing. Add a If you have addressed this issue already, refresh this page in your browser to remove this comment. |
|
📌 The subject area label is missing. Add an If you have addressed this issue already, refresh this page in your browser to remove this comment. |
Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
…ulti-service deployment mode Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
… multi-service deployment Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
…er configuration Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
|
🔍 The review label is missing. Add a If you have addressed this issue already, refresh this page in your browser to remove this comment. |
| # TODO: Note that in our testing environment we are testing this rule without x.509 certificate. Need double checking before publishing | ||
| # TODO There is another rule with name ApimlZLUXClientRule and it uses ApimlNoX509ClientEnvAction and ApimlNoX509ClientConnAction |
There was a problem hiding this comment.
This is the rule for app server and ZSS and we agreed to leave it like this until Jakub S. can confirm. If something has changed and we are clear to use no X.509 I can remove these last TODO
There was a problem hiding this comment.
Ok let's leave this comment open until we find out when that part will be handled
| RemoteAddr All | ||
| LocalPortRange 1024-65535 | ||
| RemotePortRange 7554 # Gateway port | ||
| Jobname # Jobname under which the onboarded service is running |
There was a problem hiding this comment.
Needs to be updated for services such as app server (probably someone from webui)
| # TODO: Note that in our testing environment we are testing this rule without x.509 certificate. Need double checking before publishing | ||
| # TODO The rule we use in our testing environment is ApimlZLUXClientRule | ||
| # Example outbound TTLS rule for a Zowe client calling App server and ZSS |
| Priority 50 | ||
| } | ||
|
|
||
| # TODO: Updated to what we have in our testing environment. Need double checking with Jakub S. before publishing |
| # Connections from Zowe components to App Server and ZSS | ||
| TTLSRule ZoweClientRule1 | ||
| # TODO: Note that this rule has as default Priority = 1, therefore ZoweTrustClientRule will be the one really matching connections to App server and ZSS | ||
| # TODO Therefore if we verify that x509 is needed, we should set some priority higher than 50. In our testing environment we do not send X.509 certificate |
|
|
||
| # Example outbound rule from API Gateway to app server and zss. | ||
| # Example outbound rule from API Gateway to App server and ZSS. | ||
| # TODO: This rule is a duplicate of ZoweClientRule1. If we verify that no X509 cert is needed, than communication is already covered by ZoweTrustClientRule which has a higher priority and takes precedence, therefore it can be removed. |
Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
…ervice articles Signed-off-by: Nafi Xhafa <nafi.xhafa@broadcom.com>
Signed-off-by: Andrew Jandacek <andrew.jandacek@broadcom.com>
Signed-off-by: Andrew Jandacek <andrew.jandacek@broadcom.com>
Describe your pull request here:
Fix jobname prefixes to keep them consistent.
WIP: Checking possible bug in jobname prefix in NodeJS, if confirmed we need to add a note or two.
Related to zowe/zlux#1071
List the file(s) included in this PR:
docs/user-guide/address-network-requirements.md
docs/user-guide/configuring-at-tls-for-zowe-server.md