RabbitMQ TLS Configuration for Xray (Platform Helm)

Enable RabbitMQ TLS for Xray in JFrog Platform chart (v10.14.1+) with global and rabbitmq TLS settings.

This feature requires JFrog Platform Chart version 10.14.1 or later.

Set global.rabbitmq.auth.tls.enabled and rabbitmq.auth.tls.enabled to true in the values.yaml file.

global:
  rabbitmq:
     auth:
         tls:
            enabled: true
rabbitmq:
   auth:
       tls:
          enabled: true

⚠️
Warning
Set both global.rabbitmq.auth.tls.enabled and rabbitmq.auth.tls.enabled to the same value so that settings are shared between Xray and Pipelines.

Add extraConfiguration: |-management.listener.ssl = {{ .Values.global.rabbitmq.auth.tls.enabled}} to access the RabbitMQ Management Portal through the HTTPS mode.

global:
  rabbitmq:
     auth:
         tls:
            enabled: true
rabbitmq:
   auth:
       tls:
          enabled: true
          extraConfiguration: 
              |-management.listener.ssl = {{ .Values.global.rabbitmq.auth.tls.enabled}}

Choose whether RabbitMQ generates certs or you supply your own.

Set global.rabbitmq.auth.tls.autogenerated and rabbitmq.auth.tls.autogenerated to true in the values.yaml file so that RabbitMQ generates the certs.

global:
  rabbitmq:
     auth:
         tls:
            enabled: true
            autogenerated: true
rabbitmq:
   auth:
       tls:
          enabled: true
          autogenerated: true
          extraConfiguration: 
              |-management.listener.ssl = {{ .Values.global.rabbitmq.auth.tls.enabled}}

Set rabbitmq.auth.tls.autogenerated to false in the values.yaml file to use your own certs.

global:
  rabbitmq:
     auth:
         tls:
            enabled: true
            autogenerated: false
rabbitmq:
   auth:
       tls:
          enabled: true
          autogenerated: false
          extraConfiguration: 
              |-management.listener.ssl = {{ .Values.global.rabbitmq.auth.tls.enabled}}

⚠️
Warning
Set both global.rabbitmq.auth.tls.autogenerated and rabbitmq.auth.tls.autogenerated to the same value so that settings are shared between Xray and Pipelines.

To use your own certs, pass them as a Kubernetes secret.

Pass Certs as a Kubernetes Secret

To pass your certs as a Kubernetes secret, set rabbitmq.auth.tls.existingSecret with the secret name.

global:
  rabbitmq:
     auth:
         tls:
            enabled: true
            autogenerated: false
            existingSecret: <secret name>
rabbitmq:
   auth:
       tls:
          enabled: true
          autogenerated: false
          existingSecret: <secret name>
          extraConfiguration: 
              |-management.listener.ssl = {{ .Values.global.rabbitmq.auth.tls.enabled}}

To install only Xray without other JFrog products alongside Artifactory, add the following to the values.yaml file.
```
xray:
  enabled: true
```
Run the following command to apply the values.yaml in the JFrog Platform installation.
```
helm upgrade --install jfrog-platform --namespace jfrog-platform jfrog/jfrog-platform -f values.yaml
```
You can also run a fresh Xray installation with this updated values.yaml along with the other requirements in Xray Single Node Helm Installation.

Updated 24 days ago