topic Re: Best approach to configure alfresco repository deployed using helm in Alfresco Forum

Best approach to configure alfresco repository deployed using helm

alexwang — Tue, 04 Jan 2022 14:54:28 GMT

I currently have Alfresco enterprise version 6.2.2 deployed via Kubernetes. While working with our business and platform teams in IT, we've noticed a few issues:

* File upload API used by our internal application to alfresco was limited to 25mb or less, business requires a larger upload limit

* Audit Access is disabled by default. Security team requires auditing, but there's no menu on the web console to enable and persist this setting.

Based on my understanding from reading the documentation, all of these issues can be addressed via configurations specified in the global configuration file which resides in Alfresco Repository.

However, the challenge is the fact that the Alfresco suite was deployed via Helm into Kubernetes. Since the Pods are ephemeral, adding configurations to the global configuration file has been a challenge. In addition, adding configurations and "restarting the application to apply changes" will not be possible without losing the configurations I've added in the first place.

I have 2 questions:

1) Please correct me if I'm mistaken, but Alfresco has a default upload limit of 4GB for files. Why is it limiting the uplaod API to 25MB or less?

2) What is the best approach to persist configurations in a Kuberentes environment with deployment done using Helm?

Re: Best approach to configure alfresco repository deployed using helm

abhinavmishra14 — Tue, 11 Jan 2022 16:37:46 GMT

@alexwang Yes, alfresco-global.properties can be used.

1- To increase limit:

system.content.maximumFileSizeLimit=-1

There seem to be flash uploader limitations too, i am not fully aware but you can review this thread: https://hub.alfresco.com/t5/ecm-archive/maximum-upload-size/m-p/100874

If you are using cmis interface:

opencmis.maxContentSize=-1

2- Enable basic access audit:

audit.enabled = true
audit.alfresco-access.enabled=true

Review this doc for more details and any custom implementations if you need to make: https://docs.alfresco.com/content-services/community/admin/audit/

Since you are using the k8 deployment via HELM, i would suggest you refer this repo: https://github.com/Alfresco/acs-deployment/tree/master/helm

There are two ways:

1- Update the java_opts with properties

environment:
    JAVA_OPTS: "
      -Dsystem.content.maximumFileSizeLimit=-1
      -Daudit.enabled = true
      -Daudit.alfresco-access.enabled=true
      "

https://github.com/Alfresco/acs-deployment/blob/master/helm/alfresco-content-services/values.yaml#L60

2- Use/create the templates to update the properties, see this for reference : https://github.com/Alfresco/acs-deployment/blob/master/helm/alfresco-content-services/templates/config-repository.yaml