IBM Security Verify

 View Only

  • 1.  Wording in Warning message

    Posted Fri November 19, 2021 08:24 AM
    Hi,
    ISVA 10.0.2.0 in a Kubernetes environment.

    maybe a silly question, but after deploying changes made to the Reverse proxy configuration the following msg box is displayed.


    Should we read this as restarting all isva-runtime(s), all deployed webseal reverse proxies containers or all (config,runtime wrp and dsc) ISVA containers?

    Thanks in advance

    ------------------------------
    Anders Domeij
    CGI Sweden AB
    ------------------------------


  • 2.  RE: Wording in Warning message

    Posted Fri November 19, 2021 04:04 PM
    Anders,
     
    That message indicates that you need to start any federation/AAC runtime containers.  A different message is displayed when you need to restart a WRP container.
     
    What changes to the system were made to produce this message?  WebSEAL changes should cause a different message to be displayed, asking you to restart the containers for the WRP instance which has been modified.
     
     
    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor
     
     



    Original Message


  • 3.  RE: Wording in Warning message

    Posted Mon November 22, 2021 03:40 AM
    Hi Scott,

    Thanks for the clarification!

    If I remember correctly the message appeared after editing files in the WRP Management root and deploying the changes.

    The message we see for other changes in the wrp are much more "explicit" -- they tell the names of the wrp containers that need to be restarted.

    In a Kubernetes environment a 'clash' in nomenclature opens the playing field for some confusion.
    "any runtime containers" when bound to the ISVA namespace (as you pointed out) refers to the runtime and AAC containers, but from a Kubernetes point of view also includes the wrp, config and dsc containers as they all are "Kubernetes runtime" containers.

    Hence the question :-)  
    Rgds

    ------------------------------
    Anders Domeij
    CGI Sweden AB
    ------------------------------

    Original Message


  • 4.  RE: Wording in Warning message

    Posted Mon November 22, 2021 07:45 PM
    Anders,
     
    You are correct when you say that a deployment of changes to the server-root files will not correctly show that a restart of the applicable WRP is required.  This problem has been addressed in the upcoming 10.0.3 release (due out next month).
     
    I also agree that the use of the term 'runtime' is a little bit overloaded - and could easily refer to either the runtime containers or the fed/aac runtime.  I've personally started to refer to the 'runtime containers' as 'worker containers' to try and avoid this confusion.  I am hoping that this new terminology might catch on.
     
    Thanks.
     
     
    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

     
     
     



    Original Message