Make Consul as fallback config storage about gluu-docker HOT 4 CLOSED

I will update the requirements if found something else.

from gluu-docker.

opendj

registering and finding peer for replication should be avoided (investigating)

One way to discover a peer can be done by running nslookup <SERVICE_NAME> command from the container. But the implementation may vary depending on the scheduler. For example, in Docker Swarm, the command is nslookup <SERVICE_NAME> <RESOLVER_IP>; meanwhile in Kubernetes, nslookup <SERVICE_NAME> is sufficient. We need a robust way to handle different nslookup queries.

from gluu-docker.

Currently, the configuration are managed in Consul KV. To allow support for non Consul-based config storage (for example Kubernetes' configmap or Docker Swarm's configs), using Consul should be treated as optional (or leave it as fallback).

To allow switching config storage (Consul, k8s' configmap, etc), we will build a set of APIs as a wrapper to config storage API. For example, in config-init container, users can choose whether to use consul or kubernetes to generate/load/dump the cluster configuration. Given the same APIs, other containers entrypoint can choose where to pull the config from (either from consul or kubernetes). The logic of choosing config storage is handled by the config wrapper API.

An example of config wrapper:

def get_config(name, default=None):
    if os.environ["config_storage"] == "consul":
        value = consul.kv.get(name)
    elif os.environ["config_storage"] == "kubernetes":
        value = kubernetes.get(name)
    else:
        value = default
    return value

binddn = get_config("ldap_binddn")

Note, we are aware about injecting k8s configmap (using yaml) into a container, but that requires deep understanding on how our containers work and which config they're needed for. Also, it does change our existing implementation (based on Consul KV), hence the idea is to have a set of APIs that can be used to interact with config storage (currently supporting Consul). Other implementation (k8s configmap, etcd, and others) must conform to the APIs.

from gluu-docker.

All of docker images except OpenLDAP tagged with latest support this feature

from gluu-docker.