srijan2607 opened a new pull request, #572: URL: https://github.com/apache/airavata/pull/572
This pull request updates Apache Airavata's installation, configuration, and deployment instructions to support modern Java versions, improve Docker-based deployment, and enhance security practices. The changes introduce environment variable support for sensitive credentials, resource limits for Docker services, and comprehensive documentation updates for secure production deployments. **Deployment and Security Improvements:** * Added an `env.example` file with environment variable templates for all sensitive credentials and resource limits, along with a production security checklist. * Updated Docker Compose configuration (`docker-compose.yml`) to use environment variables for all sensitive credentials (MySQL, RabbitMQ), and to set resource limits and reservations for all major services. [[1]](diffhunk://#diff-e45e45baeda1c1e73482975a664062aa56f20c03dd9d64a827aba57775bed0d3L6-R46) [[2]](diffhunk://#diff-e45e45baeda1c1e73482975a664062aa56f20c03dd9d64a827aba57775bed0d3R59-R66) [[3]](diffhunk://#diff-e45e45baeda1c1e73482975a664062aa56f20c03dd9d64a827aba57775bed0d3R89-R96) [[4]](diffhunk://#diff-e45e45baeda1c1e73482975a664062aa56f20c03dd9d64a827aba57775bed0d3R122-R125) [[5]](diffhunk://#diff-e45e45baeda1c1e73482975a664062aa56f20c03dd9d64a827aba57775bed0d3R138-R145) * Updated documentation (`README.md`, `INSTALL`) to emphasize the importance of changing default passwords, using environment variables, and following security best practices for production deployments. [[1]](diffhunk://#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5L240-R249) [[2]](diffhunk://#diff-b83b327f0b62e8168163c61f15fb0ac2c14169729e4f4184678337a15cd04decL4-R12) [[3]](diffhunk://#diff-b83b327f0b62e8168163c61f15fb0ac2c14169729e4f4184678337a15cd04decR32-R56) **Platform and Build Updates:** * Updated prerequisites in `INSTALL` to require Java 17+ (Java 21 recommended) and Maven 3.8+, and added Docker/Docker Compose as recommended for deployment. * Enhanced Maven `pom.xml` configuration to add necessary `--add-opens` JVM arguments for compatibility with newer Java versions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
