Showing posts from 2015

Kubernetes Namespaces and OpenAM

I have been conducting some experiments running the ForgeRock stack on Kubernetes. I recently stumbled on namespaces.

In a nutshell Kubernetes (k8) namespaces provide isolation for instances. The typical use case is to provide isolated environments for dev, QA, production and so on.

I had an "Aha!" moment when it occurred to me that namespaces could also provide multi-tenancy on a k8 cluster. How might this work?

Let's create a two node OpenAM cluster using an external OpenDJ instance:

See  for some samples used in this article

kubectl create -f am-dj-idm/

The above command launches all the containers found in the given directory, wires them up together (updates DNS records), and create a load balancer on GCE.

 If I look at my services:

 kubectl get service 

I see something like this:

NAME       LABELS          SELECTOR   IP(S) PORT(S) 
openam-svc name=openam-svc site=site1 80/TCP 

A script to download ForgeRock nightly binaries

Here is a little script to download all of the nightly builds for the ForgeRock stack. Handy for testing!

This file is part of the frstack project. You may find a more up to date copy here

Sample todo app using Angular2 and Dart

Here is a sample todo app written in Angular2 and Dart. This is largely copied from David East's sample JS angular2 app.

Running OpenAM and OpenDJ on Kubernetes with Google Container Engine

Still quite experimental, but if you are adventurous, have a look at:

This will set up a two node Kubernetes cluster running OpenAM and OpenDJ.  This uses images on the Docker hub that provide nightly builds for OpenAM and OpenDJ.

I will be presenting this at the ForgeRock IRM summit this thursday. Fingers crossed that the demo gods smile down on me!

Nice Demo of OpenAM log analysis using the ELK stack

The folks at Identropy have put together a nifty video showing analysis of OpenAM audit log events using the ELK stack (Elasticsearch, Logstash, Kibana).

Check it out here:

Frstack to automate ForgeRock install has a new home.

A quick update:

The 'frstack' project to automate the installation of the ForgeRock stack (OpenAM, OpenIDM, OpenDJ and OpenIG) has been moved from my personal github account to the new ForgeRock account.

You can find it at:

Happy Installing!