View source for IBM Maximo: Containerized NGINX server with authentication to securely host and distribute customization files.zip

Nginx container running on OpenShift to provide '''customization_files.zip''' file sharing between containers, with token-protected uploads.

= Architecture =

<pre>
[ curl / another container ]
         │
    PUT /files/<filename>          ← protected by X-Upload-Token
    GET /files/<filename>          ← public (download)
         │
  ┌──────▼───────────────────────┐
  │   nginx-fileserver Pod       │
  │   image: nginx-unprivileged  │
  │   port: 8080                 │
  └──────────────────────────────┘
         │
  PersistentVolumeClaim: /data/files
</pre>



= Procedure = 

== 1) Clone repository ==

Edit '''secret-upload-token.yaml''' and replace the value of '''UPLOAD_TOKEN''':

<syntaxhighlight lang="bash">
git clone https://github.com/ebasso/mas-nginx-customization-file-server.git

cd mas-nginx-customization-file-server/yamls
</syntaxhighlight>

== 2) Configure the Secret Token ==

Generate a strong token using 

 openssl rand -hex 32

Edit '''secret-upload-token.yaml''' and replace the value of <code>UPLOAD_TOKEN</code>:

<syntaxhighlight lang="yaml">
stringData:
  UPLOAD_TOKEN: "replace-with-a-secure-token"
</syntaxhighlight>

== 3) Full Deployment ==

<syntaxhighlight lang="bash">
oc new-project mas-nginx

# Apply all resources in the correct order
oc apply -f secret-upload-token.yaml
oc apply -f configmap-nginx.yaml
oc apply -f pvc-nginx-files.yaml
oc apply -f deployment-nginx.yaml
oc apply -f service-nginx.yaml
oc apply -f route-nginx.yaml
</syntaxhighlight>


== 4) Verify the Route URL ==

<syntaxhighlight lang="bash">
oc get route nginx-fileserver -o jsonpath='{.spec.host}'
</syntaxhighlight>

Example: <nowiki>nginx-fileserver-mas-nginx.apps.cluster.example.com</nowiki>

== 5) Upload a File with curl ==

Via Route (External Access)

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')
TOKEN="replace-with-a-secure-token"

curl -v \
  -X PUT \
  -H "X-Upload-Token: ${TOKEN}" \
  -H "Content-Type: application/octet-stream" \
  --upload-file ./customization-files.zip \
  "https://${NGINX_HOST}/files/customization-files.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access) 

 <nowiki>NGINX_HOST=http://nginx-fileserver:8080/files/customization-files.zip</nowiki>

== 6) Download a File with curl ==

<syntaxhighlight lang="bash">
NGINX_HOST=$(oc get route nginx-fileserver -o jsonpath='{.spec.host}')

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>

Via Service (Internal Cluster Access):

<syntaxhighlight lang="bash">
NGINX_HOST=http://nginx-fileserver:8080

curl -O "https://${NGINX_HOST}/files/my-file.zip"
</syntaxhighlight>


=== 6.1) List Available Files ===

<syntaxhighlight lang="bash">
curl "https://${NGINX_HOST}/files/"
# or internally:
curl "http://nginx-fileserver:8080/files/"
</syntaxhighlight>

= See also =

* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias|  Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category:IBM Maximo]]