Page History

Select fields to encrypt

Open the meshlet's configuration file (application-dev.yml) in a text editor and enter encrypt() around the field values you want to be encrypted. 

For example:

proxy:
    host: proxyExample.perspectium.net
    port: 8080
    username: userExample
    password: encrypt(<password_value>)

Where <password_value> is the original unencrypted value. For example, encrypt(mypassword) if your password is mypassword. You do not need to enter quotes or anything around the value. 

Multitenant Meshlet as a Service installation script

To encrypt the fields in the configuration file, you can use the following command in your terminal:

sudo /etc/init.d/psp-meshlet-meshlet_service_name encrypt "filepath/to/application-dev.yml"

Where psp-meshlet-meshlet_service_name is the name of the service as previously installed with the Multitenant Meshlet as a Service installation script and "filepath/to/application-dev.yml is the location of the meshlet's application-dev.yml" is .

 NOTE: When entering the location of the meshlet's application-dev.yml, enter the filepath with "" as shown above. The quotes ensure the filepath is captured correctly in case of directory names with spaces in them.

If the meshlet was installed with the online version of the installation script, this path is generally /opt/perspectium-<MeshletName>Meshlet-<meshlet_service_name>/src/main/resources/config/application-dev.yml.

Using the example from the Multitenant Meshlet as a Service installation script section above where we installed the meshlet with the meshlet service name jira-change-prod (and as the installation mentions above, the actual meshlet service name will be prepended by psp-meshlet-, i.e., psp-meshlet-jira-change-prod), this command would be: 

sudo /etc/init.d/psp-meshlet-jira-change-prod encrypt "/opt/perspectium-JiraChangeMeshlet-jira-change-prod/src/main/resources/config/application-dev.yml"

Verify configuration fields are encrypted

Open the meshlet's configuration file (application-dev.yml) in a text editor and you will see the previous fields with encrypt() now replaced with encrypted() and the values have been encrypted:

proxy:
    host: proxyExample.perspectium.net
    port: 8080
    username: userExample
    password: encrypted(<encrypted_password_value>)

Run your meshlet with the encrypted configuration fields

Now you can run the meshlet with the encrypted configuration fields as specified on installing and running the meshlet

 NOTE: The java command to run the meshlet will need to specify the location of the application.yml meshlet configuration file in the -Dspring.config.location property to properly encrypt the fields specified.

java -Dspring.profiles.active=dev(,basicauth if needed) -Dlogging.config=config/logback-spring.xml -Dspring.config.location=config/application-dev.yml -jar meshlet.jar

Contact Perspectium Support for more information.