🛠️ Managing InterSystems InterSystems API Manager (IAM = Kong Gateway) configurations in CI/CD

🔍 Context: InterSystems IAM configurations 

As part of integrating InterSystems IRIS into a secure and controlled environment, InterSystems IAM relies on Kong Gateway to manage exposed APIs.
Kong acts as a modern API Gateway, capable of handling authentication, security, traffic management, plugins, and more.

However, maintaining consistent Kong configurations (routes, services, plugins, etc.) across different environments (development, testing, production) is a major challenge. This is where tools like

Kong provides an open source configuration management tool (written in Go), called decK (which stands for declarative Kong)

• Check that decK recognizes your Kong Gateway installation via deck gateway ping

deck gateway ping   
Successfully connected to Kong!
Kong version:  3.4.3.11

• Export Kong Gateway configuration to a file named "kong.yaml" via deck gateway dump

deck gateway dump -o kong.yaml

• After modifying the IP adcresses in kong.yaml file, show the differences via deck gateway diff

deck gateway diff kong.yaml

updating service test-iris  {
   "connect_timeout": 60000,

Using IRIS 2024.1.2 when I mount the routine database as read-only I get an error when executing dynamic SQL queries.

What globals need to be mapped in a read-write database in order to allow execution plans to be written?

Hello,

as it took me some time to figure out what's wrong, I would like to share this experience, so that you do not fall into the same trap.

I've just noticed that if you name your package "code" (all lowercase), in a class using some embedded python using [Language = python], you'll face the <THROW> *%Exception.PythonException <PYTHON EXCEPTION> 246 <class 'ModuleNotFoundError'>: No module named 'code.basics'; 'code' is not a package

Class code.basics Extends%RegisteredObject
{

ClassMethod Welcome() As%Status [ Language = python ]
{
print('Welcome!')
return True
}
}

IRISAPP>w##class(

In a containerized environment, you can manage your container time via the TZ variable or via the /etc/timezone and /etc/localtime directories:

environment:
      - TZ=Europe/Paris

volumes:
    - "/etc/timezone:/etc/timezone:ro"
    - "/etc/localtime:/etc/localtime:ro"

You can find complete examples here:

IRIS Community

IRISHealth_Community

IRIS production

IRISHealth production

For practical reasons, it may be desirable that after a Linux server restart, the IRIS instance is automatically started. 

Below you will find the steps to follow to automate the startup of IRIS during a reboot of the Linux server, via systemd :

1. Create an iris.service file in /etc/systemd/system/iris.service containing the following information

[Unit]
Description=InterSystems IRIS Data Platform
After=network.target

[Service]
Type=forking
User=irisusr
ExecStart=/usr/bin/iris start iris
ExecStop=/usr/bin/iris stop iris quietly
Restart=on-failure
RemainAfterExit=yes

[Install]

Production Configuration

This demo has an interoperability production with 16 items. 

Production Configuration HL7 + Kafka Producer

The first part of this demonstration consists of sending an HL7 SIU file which will be transmitted to the 2 other HL7 flows (HTTP and TCP), and transformed and transmitted to the Kafka server. HTTP and TCP flows will transform HL7 messages in the same way before sending them to Kafka as well.

• 3 HL7 Business Services
• 1 HL7 router
• 2 HL7 Business Operations
• one Business Operation sending the transformed messages to Kafka

Business Rule

The production has a business

Hi Community,

What is the correct syntax in a merge.cpf file to create a database with its associated resource ?

Hi Community,

I'm looking for someone who has already made data ingestion into IRIS (or Caché) from Pentaho Data Integration.

Thanks in advance.

Hi Community,

Starting a FHIR repository project with IRIS for Health, what are the pros and cons to use R5 instead of R4 ?
What is the effort to migrate from R4 to R5 the FHIR repo ?
What are the risks or disadvantages to use R5 ?

Thanks

What are the advantages/disadvantages of using the Person resource with a link to the Patient and Practitioner resources, rather than using the Patient and Practitioner resources directly without using the Person resources?

Hello Community,

SQL language remains the most practical way to retrieve information stored in a database.

The JSON format is very often used in data exchange.

It is therefore common to seek to obtain data in JSON format from SQL queries.

Below you will find simple examples that can help you meet this need using ObjectScript and Python code.

ObjectScript : using Dynamic SQL with %SQL.Statement +  JSON structures with %DynamicObject and %DynamicArray

ClassMethod getJSON() As%String
{
    // declaration of an SQL queryset query = "SELECT top 3 name,age,to_char(dob,'Day DD Month YYYY') as dob

Hello Community,

When using an SQL type Business Service, it may happen that we need to replay certain rows from the source table.

Let's take as an example the Business Service "from customer SQL" using the generic class EnsLib.SQL.Service.GenericService

Different cases arise, depending on the settings used on this Business Service.

First case :

If the Business Service only uses a KeyFieldName

In this case, to reprocess IDs 123, 456 and 789, it will be enough to delete them from the global ^Ens.AppData for the Business Service concerned on the "adaptor.sqlrow" reference:

kill^Ens.AppData("from

Hello,

I have been facing a problem for several months, I have several flows that work in SFTP with the iris class EnsLib.FTP.PassthroughService

The problem is that from time to time I get an error message that says:

"A connection could not be established because the target computer expressly refused it"

I had the case for a server at our house and we solved the problem by extending the call interval parameter to 60 seconds,

However I have the same error for an external server with exactly the same configuration as the first flow, I contacted their infrastructure department who told me that an

Hello Community!

Take advantage of watching the new video to discover the innovative solution which strengthens communication between community medicine and hospital practitioners for better patient care in the context of semi-emergency and contributes to the relief of emergency services in the region of Mayenne in France.

📺 MayVilleHop, the new City Hospital coordination platform

Hi Community,

to learn quickly and in total autonomy on IRIS, I offer you some links which can help you in this beautiful bicycle ride rich in discoveries: 

1. InterSystems Developer Hub​​​​​​
   • Full Stack TutorialBuild the IT infrastructure for a company that roasts and sells coffee. See how InterSystems IRIS can serve as your IT architecture backbone
   • REST + Angular ApplicationBuild a simple URL bookmarking app using InterSystems IRIS, REST service engine, and the Angular web framework
   • Apply Machine LearningCreate, train, validate and use prediction models for hospital readmissions

Hello developers,

In this article, I'll show you how to run code at compile time with ObjectScript macros.

Here's a use case that recently led me to use this feature:

As part of a medical application developed for more than 20 years, we have a large number of parameters. Although we have procedures for documenting these settings, it can be helpful to have a quick view of which settings are actually used by the application code.

To get this view, we could search the code with regular expressions.

Hello Community,

Anyone who has (near or distant, with a preference for the 1st option) knowledge of the use of Amazon QuickSight with IRIS is invited to share his|her experience in this discussion.

Thanking you in advance.

Hello Community!

I want to share with you an interesting solution that will allow you to perform integration testing for your healthcare applications. Let me introduce you to Pandora – a FHIR server testing software designed by Fyrstain, offering cutting-edge solutions for healthcare interoperability testing.

Currently, the SQL privileges (SELECT, INSERT, UPDATE, DELETE) are managed at the tables level, which can be very tedious when you have to administer many roles in an organization, and need to keep them sync with a constantly evolving data models.
By managing privileges at the schemas level, will allow to give SELECT and other DML privileges to *all* or *several schemas* to a role|user, fixing the need to manually synchronize the new tables|views to the roles.

If you agree, I invite you to vote for this idea.

Hello,

I have a global whose structure is multi-level and I am trying through a class and a SQL query to display a table which includes all the values ​​and levels.

^AFO("Site","Ville")="66722,3743"
^AFO("Site","Ville","111BB","OBT")=",MMM,XXX,"
^AFO("Site","Ville","111OW","OBT")=",XXX,MMM,"
^AFO("Site","Ville","AANVRBIBS","zzz")    =    "1^^1"
^AFO("Site","Ville","AANVRBIBS","zzz","*","dut")    =    "*afhalen waar gevonden"
^AFO("Site","Ville","AANVRBIBS","zzz","*","eng")    =    "*Pickup where found"
^AFO("Site","Ville","AANVRBIBS","zzz","*","fre")    =    "*Lieu où trouvé"

and here is the table

Hi,

what is our experience of Microsoft Dynamics integration with IRIS/Ensemble ?

If you have any experience with IRIS/Ensemble using interoperability flows with Microsoft Dynamics, please share it is this discussion.

Best regards,

Sylvain

When installing IRIS, all the system AUDIT events are not enabled.

What is the fastest way to activate all events?

  System > Security Management > System Audit Events 

I'm looking for an efficient way in DBeaver to filter system tables (ex: belonging to a schema starting with "%").

By using a user with the %All role, DBeaver shows us a long list of system schemas, which forces us to go down the list before accessing the user tables.

It sometimes happens that due to an adverse event the AUDIT database (IRISAUDIT) has grown to such proportions that the disk it resides on is full and the daily purge cannot be expected to reclaim disk space.

As IRISAUDIT is a system database required at startup, there is no question of attempting to restart IRIS after simply deleting IRIS.DAT from the <IRIS ROOT>/mgr/irisaudit/ database, nor of hot swapping, by system manipulations trying to dismount, replace, remount, since it is simply not possible to dismount it.

IRISAUDIT database: mounting required when starting IRIS

IRISAUDIT base:

Is it planned that LOAD DATA takes into account several DATE/DATETIME formats with, for example, a parameter indicating the format used in the source data?

example :

LOAD DATA .../...
USING
{
  "from": {
    "file": {
       "dateformat": "DD/MM/YYYY"
    }
  }
}

During a major version upgrade it is advisable to recompile the classes and routines of all your namespaces (see Major Version Post-Installation Tasks).

do $system.OBJ.CompileAllNamespaces("u")

do ##Class(%Routine).CompileAllNamespaces()

To automate this administration task and keep a log of any errors, below is an example of a class to import and compile into the USER namespace that you can use after each upgrade : admin.utils.cls

Class admin.utils
{
ClassMethod upgrade(verbose As %Boolean = 0) As %Status
{
set ns=$Namespace
// Stopping all

Kong provides an open source configuration management tool (written in Go), called decK (which stands for declarative Kong)

• Check that decK recognizes your Kong Gateway installation via deck ping

deck ping   
Successfully connected to Kong!
Kong version:  2.3.3.2-enterprise-edition

• Export Kong Gateway configuration to a file named "kong.yaml" via deck dump

deck dump

• After modifying the kong.yaml, show the differences via deck diff

deck diff
updating service alerts  {
   "connect_timeout": 60000,
-  "host": "172.24.156.176",
+  "host": "192.10.10.18",
   "id":

Monitoring IRIS through SAM (sam:1.0.0.115)

While I've used to make it work in the past, I'm not able any more to fix the already faced issue : "State: Unreachable"

Despite all the ip-addresses attempts (or hostname = host.docker.internal)  and while "/api/monitor/metrics" is running well...

Could someone provide good practices to make it work cleanly ?

Let's consider you would like to efficiently store your historical data in a similar structure than the one used for your current data, but without sharing the same physical storage (ie : not in the same global). What is the most efficient way to do it ?

Below a simple class of your current data : 

Class data.current.person Extends (%Persistent, %Populate)
{
Parameter DEFAULTGLOBAL = "^on.person";
Property name As %String;
Property dob As %Date(FORMAT = 4);
Property activ As %Boolean [ InitialExpression = 1 ];
Property created As %TimeStamp [ InitialExpression = {$zdt($h,3)} ];

Storage