Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Also adds credentials handling for the redis-session profile and cache syncing for clustered environments. After this it's possible to configure one or both as Redis credentials on oskari-ext.properties:
If these properties are not defined the code will work like without credentials. If you have the keys with empty values, things will probably not work.
Previously a password could be configured the basic Redis connectivity, but it wasn't used for storing/accessing session information on the redis-session profile (this didn't work at all for redis-server that requires credentials resulting in exception like
NOPERM this user has no permissions to access one of the keys used as arguments.
) or for the pub/sub functionality that the caching uses for syncing changes between servers. Password can be configured on Redis versions <6 and the user can be used on 6+.https://redis.io/docs/latest/operate/oss_and_stack/management/security/acl/
This allows for example creating a user named
user
with passwordpasswd
on redis-cli:With
~*
meaning access to all keys and+@all
means access to all commands. On Redis 6.2 there is also&*
which means pub/sub for anything and it might be required for the cache syncing.