The idea for iris-user-manager

Discussion

Oliver Wilms · Jun 29, 2023

I want to deploy IRIS apps running in containers in Kubernetes with user accounts configured.

I have a %ZSTART routine which looks for an XML file with Users export data and if the %ZSTART routine finds this file, it imports it. This Users export data can be obtained by running a class method.

I have defined a task which can be scheduled or run on demand. This tasks imports user data from an XM file.

In Kubernetes I can provide a ConfigMap to stage the Users data for the %ZSTART routine.

I want to define Users data once and get it deployed to many IRIS apps running multiple replicas in a Kubernetes cluster.

How can I configure usernames and passwords for multiple users to de deployed in a Kubernetes ConfigMap to be mounted by any IRIS container?

Running the export Users data classMethod comes to mind, but what if some users do not have terminal access?

I developed a CSP page, where a user can choose a user account in the current IRIS instance and export it to an area on the CSP page. After a user sets up his or her user account in IRIS, the user can utilize this CSP page to display user data which can be copied and pasted into an email to the configuration manager who can configure the ConfigMap to deploy the user data to any IRIS container deployed in a Kubernetes cluster.

Another option is to direct users to configure their user account with a password on an IRIS instance where the configuration manager can export the user data and configure the ConfigMap to deploy the user data to any IRIS container deployed in a Kubernetes cluster.

Evgeny Shvarov · Jun 30, 2023

Another option is to use MergeCPF to add users.

See an example repo from @Guillaume Rongier with MergeCPF usage. Guillaume modifies user in this repo, but probably you can create one with the same approach.

Also it is very easy to let IRIS execute MergeCPF file - just update the following Env Variable listed in docker-compose.yml.

1 0

Oliver Wilms · Jun 30, 2023

Thank you, Evgeny, for pointing out how to update user(s) by using CPF Merge. I still like to have an option to configure a group of users in a single file and import this group of users with their passwords into several different IRIS instances which may use different CFP Merge files already. If there is a change to my users, I just update the XML file which gets imported using %ZSTART routine whenever any IRIS instance starts.

0 0