LDAP trust store password
If you add a custom Black Duck web application trust store, use these methods for specifying an LDAP trust store password.
Use these methods for specifying an LDAP trust store password when using Docker Swarm.
-
Use the docker secret command to tell Docker Swarm the password by using LDAP_TRUST_STORE_PASSWORD_FILE. The name of the secret must include the stack name. 'HUB' is the stack name in this example:
docker secret create HUB_LDAP_TRUST_STORE_PASSWORD_FILE <file containing password>
Add the password secret to the webapp service in the
docker-compose.local-overrides.yml
file located in thedocker-swarm
directory:secrets: - LDAP_TRUST_STORE_PASSWORD_FILE
Add text, such as the following, to the
secrets
section located at the end of thedocker-compose.local-overrides.yml
file:secrets: LDAP_TRUST_STORE_PASSWORD_FILE: external: true name: "HUB_LDAP_TRUST_STORE_PASSWORD_FILE"
-
Mount a directory that contains a file called LDAP_TRUST_STORE_PASSWORD_FILE to
/run/secrets
by adding a volumes section for the webapp service in thedocker-compose.local-overrides.yml
file located in thedocker-swarm
directory.webapp: volumes: ['/directory/where/file/is:/run/secrets']
Note: You only need to mount a directory that contains the LDAP_trust_store_password_file if the trust store is fully replaced and it is protected by a different password.