Let's Encrypt ActiveMQ and Karaf!
summary
Uses ACME DNS‑01 via TXT records and the certbot/letsencrypt client to auto-issue and renew per-broker TLS certs so certificates can be provisioned before hosts exist, avoiding wildcard costs and corporate CA complexity. Integrates with Rancher + Docker + Karaf for structure and behavior, adds plugins (GoDaddy DNS) and hooks, converts PEM to JKS keystores and hot-reloads Karaf. Demo issues a real subdomain cert, manages ~100 container brokers in staging, and automates inventory, renewal and revocation successfully.
AI-written summary · about
chapters (21)
- 0:00Introduction
- 0:56Context Problem Definition
- 1:37Main Feature
- 3:12Governance
- 4:05Operations
- 5:52Consistency
- 7:28The solution
- 10:54Cross architecture
- 11:40Broker life cycle
- 14:20Layers of orchestration
- 15:15Reactive topology
- 15:30Lets Encrypt
- 17:30Agni
- 18:37How it works
- 20:27Manual plugin
- 22:16Orchestration layers
- 23:47Certificate management
- 26:39Plugins and hooks
- 27:51Demo
- 30:22Thirdbox
- 39:34Questions
