LDAP trust store password
If you add a custom Black Duck web application trust store, use these methods for specifying an LDAP trust store password.
Use these methods for specifying an LDAP trust store password when using Docker Swarm.
-
Use the docker secret command to tell Docker Swarm the password by using LDAP_TRUST_STORE_PASSWORD_FILE. The name of the secret must include the stack name. 'HUB' is the stack name in this example:
docker secret create HUB_LDAP_TRUST_STORE_PASSWORD_FILE <file containing password>
Add the password secret to the webapp service in the
docker-compose.local-overrides.ymlfile located in thedocker-swarmdirectory:secrets: - LDAP_TRUST_STORE_PASSWORD_FILEAdd text, such as the following, to the
secretssection located at the end of thedocker-compose.local-overrides.ymlfile:secrets: LDAP_TRUST_STORE_PASSWORD_FILE: external: true name: "HUB_LDAP_TRUST_STORE_PASSWORD_FILE" -
Mount a directory that contains a file called LDAP_TRUST_STORE_PASSWORD_FILE to
/run/secretsby adding a volumes section for the webapp service in thedocker-compose.local-overrides.ymlfile located in thedocker-swarmdirectory.webapp: volumes: ['/directory/where/file/is:/run/secrets']
Note: You only need to mount a directory that contains the LDAP_trust_store_password_file if the trust store is fully replaced and it is protected by a different password.
