infinispan

Install Infinispan or Red Hat DataGrid server configurations.

Role Defaults

Service configuration defaults

Variable	Description	Default
`jdg_port`	Alternate port for the service	`11222`
`jdg_jgroups_port`	Alternate port for the jgroups cluster	`7800`
`jdg_jgroups_relay_port`	Alternate port for the jgroups relaying cluster	`7801`
`jdg_port_offset`	Optional port offset for colocated installations	`0`
`jdg_nodename`	Instance name for service (ie. cluster node identifier)	`{{ inventory_hostname }}`
`jdg_bind_addr`	Alternate bind address for the daemon	`localhost`
`jdg_jgroups_relay`	Enable cross-DC relaying	`False`
`jdg_jgroups_relay_sites`	List of site names for cross-DC relaying	`[]`
`jdg_jgroups_relay_site`	Site the inventory host is in when cross-DC is enabled	`''`
`jdg_jgroups_jdbcping`	Enable clustering using JDBC PING discovery	`False`
`jdg_keycloak_persistence`	Enable persitence datasource for keycloak caches	`False`
`jdg_service_user`	Posix account for the service installation	`jdg`
`jdg_service_group`	Posix group for the service installation	`jdg`
`jdg_logfile_format`	Main logfile format: FILE or JSON-FILE	`FILE`
`jdg_logfile_root_level`	Root logging level: TRACE, DEBUG, INFO, WARN, ERROR	`INFO`
`jdg_logfile_enable_audit`	Enable additional audit.log logfile	`True`
`jdg_logfile_enable_hotrod_accesslog`	Enable additional hotrod-access.log	`False`
`jdg_logfile_enable_rest_accesslog`	Enable additional rest-access.log	`False`
`jdg_logfile_maxsize`	Max file size, triggers rotation	`100 MB`
`jdg_default_realm_tls`	Enable TLS server certificate	`False`
`jdg_keystore_path`	Path to keystore containing server identity certificate	`/etc/pki/java/cacerts`
`jdg_keystore_password`	Keystore password	`changeit`
`jdg_keystore_alias`	Alias for the certificate to load from keystore	`{{ inventory_hostname }}`
`jdg_keystore_key_password`	Key passphrase for TLS server identity	`''`
`infinispan_keycloak_caches`	Creates remote caches for keycloak	`False`
`jdg_jvm_package`	RHEL java package runtime	`java-11-openjdk-headless`
`jdg_java_home`	JAVA_HOME of installed JRE, leave empty for using specified `jdg_jvm_package` RPM path	`None`
`jdg_enable`	Install Red Hat DataGrid when true	`True` when credentials available, `False` otherwise

Download and install defaults

Variable	Description	Default
`jdg_offline_install`	Perform an offline install	`False`
`jdg_version`	DataGrid version to install	`8.2.0`
`jdg_default_installation_path`	Target extracted installation	`/opt/infinispan/redhat-datagrid-{{ jdg_version }}-server/`
`jdg_bundle`	Archive name for Red Hat DataGrid	`redhat-datagrid-{{ jdg_version }}-server.zip`
`jdg_rhn_id`	Customer portal product ID for Red Hat DataGrid	`{{ jdg_rhn_ids[jdg_version] }}`
`jdg_rhn_url`	Customer portal base download URL	`https://access.redhat.com/jbossnetwork/restricted/softwareDownload.html?softwareId=`
`jdg_download_url`	Complete customer portal default URL for DataGrid, or alternate download location	`{{ jdg_rhn_url }}{{ jdg_rhn_id }}`
`infinispan_version`	Infinispan version to install	`12.1.7.Final`
`infinispan_bundle`	Archive name for Infinispan download	`infinispan-server-{{ infinispan_version }}.zip`
`infinispan_download_url`	Download URL for infinispan	`https://downloads.jboss.org/infinispan/{{ infinispan_version }}/{{ infinispan_bundle }}`
`infinispan_installation_path`	Specific unxtracted installation path for infinispan	`/opt/infinispan/infinispan-server-{{ infinispan_version }}/`
`jdg_app_download_dir`	Directory where to download archives	`/opt/infinispan`
`jdg_healthcheck`	Check health of service at end of installation	`True`
`jdg_bind_address`	Alternate bind address for the daemon	`localhost`
`jdg_caches`	List of cache definitions to configure statically	`[]`
`infinispan_users`	List of users to create	`[]`
`rest_cache_api_path`	Path of infinispan rest api	`/rest/v2/caches/`
`jdg_configure_firewalld`	Ensure firewalld is running and configure infinispan/jdg ports	`False`

Role Variables

The following are a set of required variables for the role:

Variable	Description
`supervisor_password`	Password for the administration console user account
`infinispan_users`	List of user definitions to create

Sample user definition format:

infinispan_users:
  - { name: 'testuser1', password: 'test', roles: 'observer' }
  - { name: 'testuser2', password: 'test', roles: 'application' }

The following are required when jdg_jgroups_jdbcping is enabled:

Variable	Description	Default
`jdg_jdbc_engine`	backend database engine (values: `['mariadb','postgres']`)	`mariadb`
`jdg_jdbc_driver_version`	driver version to download	`2.7.4`
`jdg_jdbc_url`	URL for jdbc connection	`jdbc:mariadb://localhost:3306/keycloak`
`jdg_jdbc_user`	username for jdbc connection	`keycloak-user`
`jdg_jdbc_pass`	password for jdbc connection	`keycloak-pass`

When setting up cross-DC relaying, also setup mariadb in active-active mode (ie. with galera cluster), and switch the JDBC to url to the sequential scheme; similar configuration for other database engines.

Dependencies

The roles depends on the redhat_csp_download role of middleware_automation.redhat_csp_download collection. To install, from the collection root directory, run:

ansible-galaxy collections install -r requirements.yml

Python lxml and jmespath libraries are needed on the host that executes this module. To install, from the collection root directory, run:

pip install -r requirements.txt

Example Playbook

The following is an example playbook that makes use of the role to install Infinispan

---
- hosts: ...
      collections:
        - middleware_automation.infinispan
      tasks:
        - name: Include Infinispan role
          include_role:
            name: infinispan
          vars:
            supervisor_password: "changeme"
            infinispan_users: []

Choosing what to install

The role will install Red Hat DataGrid when the following variables are defined in the playbook execution:

rhn_username: '<customer portal account username>'
rhn_password: '<customer portal account password>'

and jdg_enable is left to its default, or set to True.

The default installed version will be the baseline 8.3 release; it is possible to install updates setting jdg_version to 8.x.y; check what versions are available in the jdg_rhn_ids dictionary keys, declared at variables

Offline installation

Performing an offline installation is possible by:

setting jdg_offline_install to True
making the file available to ansible controller, using as filename jdg_bundle if jdg_enable is True, infinispan_bundle otherwise.

Keycloak integration

Enabling infinispan_keycloak_caches will prepare the following caches in a dedicated cache container for remote keycloak access:

- sessions
- offlineSessions
- clientSessions
- offlineClientSessions
- loginFailures
- actionTokens
- work

for more details, refer to the: INSTALLATION AND CONFIGURATION GUIDE - 3.4.6. Infinispan caches

Deploying custom cache configurations

It is possible to deploy caches statically in the infinispan.xml server configuration, by populating the jdg_caches list of dicts. In case of clustered deployments, this configuration must be executed against all nodes in the cluster, as they are not propagated by the service. To deploy cache configurations at runtime, refer to the infinispan_cache role instead.

For more details, refer to:

How to configure caches

A cache configuration can be passed-in as an XML file or string, as it is generated by the infinispan server console; otherwise, it is possible to define configuration dicts, used to populate the available templates.

To pass XML directly, as string or with a file:

jdg_caches:
  - cache_xml: >
          <local-cache name="testcachexml" statistics="true">
            <encoding media-type="application/x-protostream"/>
          </local-cache>
  - cache_xml: "{{ lookup('file', user_data_file) }}"

To configure caches:

jdg_caches:
  - cache_config:
      name: 'my-distributed-cache'
      template: 'distribute-cache'
      encoding: 'application/x-jboss-marshalling'
      persistence: False

It is possible to mix and match the two configurations in the jdg_caches list.

License

Apache License 2.0