Service Reference Card

• Daemons running

  • /usr/lib/jvm/java/bin/java (inside the docker container)

• Init scripts and options

  • Started as a docker container (docker run)

• Configuration files location with example or template

  • The configuration parameters are provided through environment variables of the docker run command

• Logfile locations (and management) and other useful audit information

  • logs can be retrieved with the docker logs command

• Open ports

  • 8080 HTTP port

• Possible unit test of the service

  • Continuous unit tests are conducted during development via Jenkins.

• Where is service state held (and can it be rebuilt)

  • The service state is held in two attached DBs; it can be rebuilt from SQL dumps

• Cron jobs

  • NONE

• Security information

  • Access control Mechanism description (authentication & authorization)

    • IAM OAuth2 bearer token (RFC 6750)

  • Firewall configuration

    • Outbound traffic must be allowed to every port and addresses

    • Inbound traffic must be allowed to HTTP port from any addresses

  • Security recommendations

    • It's advised to put the orchestrator behind a reverse proxy with HTTPS enabled