IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Quiesceing a wrp instance in a Kubernetes pod

  • 1.  Quiesceing a wrp instance in a Kubernetes pod

    Posted Thu November 25, 2021 05:01 AM
    Hi,

    Is there a way to gracefully stop a wrp instance before killing the pod?
    We have made changes to junctions, published the configuration and these changes do not seem to take effect without a wrp container restart.
    Currently the "easy" way to restart is to kill the pod and start a new one which will then read the new configuration file.
    On the other hand, this isn't very polite to those users that already logged in :-)


    Rgds

    ------------------------------
    Anders Domeij
    CGI Sweden AB
    ------------------------------


  • 2.  RE: Quiesceing a wrp instance in a Kubernetes pod

    Posted Thu November 25, 2021 03:27 PM
    Anders,
     
    Unfortunately there is currently no 'nice' way to tell the WRP container that new junction configuration information is available without having to restart the pod.  If you are concerned about users having to authenticate again the only real option at the moment is to use failover cookies, or configure the WRP to use an external session cache (Redis would be the best option here).
     
    I hope that this helps.
     
     
    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor
     
       
     
     



    Original Message