How long before a post is approved by the moderator

cajund

Yesterday I posted a fairly lengthy documentation of a roblem I was having with the Docker Implementation of Flyway and TLS. What is the expected time before this is approved by the moderators?

Thanks,

cajund

Thanks for the reply, but this is not the case. I posted a long post (the one your replied to) and when submitted, the system stated that there was moderator action required. The next day, it still wasn't approved and I couldn't find it anywhere. So I posted another that did show up until I edited it, and it then vanished the same way as the first. I then posted this little one and it worked. All fixed now!

Thanks again.

cajund

I reposted my original problem and it disappeared again. Can anyone explain what is going on?

My post was on getting the TLS certs into the Docker container. Nothing I am trying is working.

Thanks,

Peter_Laws

Hello cajund,

I believe because you posted multiple times in rapid succession as a first time user, your posts were briefly flagged as potential spam.They also appear to have been verified as legitimate the same day; apologies for the confusion or concern this may have caused, it should be a one time thing.

Peter_Laws

Hello cajund,

 

We've started an internal discussion if we need to implement a different or better interface for this kind of configuration in flyway.

For the moment, the most scalable path of least resistance in our estimation is scripting the change as opposed to recomposing, and then inserting that via a Docker entry point.

 

This does admittedly have a slightly higher initial setup cost if the user isn't familiar with scripting environmental alterations.

 

Using your example, writing the certs to the keystore in a bash script called entrypoint.sh and then including it in the initial flyway invocation. 

docker run -v ".\entrypoint.sh:/flyway/entrypoint.sh" "--entrypoint=/flyway/entrypoint.sh" redgate/flyway

cajund

Thanks for the reply.

I did take this approach (or a similar one), there are details in my other posting:

https://forum.red-gate.com/discussion/90093/docker-and-ssl-connections

I was running into command issues saving to the keystore. Perhaps there's an example available?

I also think that PR I provided on that other thread was attempting to do the same thing, but I fear it's out of date.

Thanks again.

Peter_Laws

Regarding the keystore itself, no I'm afraid we don't have any, hopefully the manufacturer does.

I'll ask our Java devs if they have any ideas regarding the InvalidAlgorithmParameterException, even though it's not part of our namespace, they might have encountered it.

squigley

Thanks for your patience with this as we've heard the following from our Java devs:
----------------------
Apparently that error can happen if the keystore file they specified is empty or can't be found.
 In their case, if they're running that command as part of entrypoint.sh, then they'll need to make sure that ./rds-ca-bundle.pem is located inside the docker container. So they'll need to mount another volume in their docker command:
-v ./rds-ca-bundle.pem:./rds-ca-bundle.pem
-----------------------
Please let us know if you have any other questions or concerns.