arrow-left

All pages
gitbookPowered by GitBook
1 of 1

Loading...

External Cache Configuration

This guide demonstrates how to configure an external key-value cache (such as Redis or Memcached) with the Immuta Enterprise Helm chart (IEHC).

circle-info

Kubernetes namespace

The following section(s) presume the IEHC was deployed into namespace immuta and that the current namespace is immuta.

hashtag
Prerequisite

The guide must be completed before proceeding.

hashtag
Redis

  1. Edit secret immuta-secret that was created in the guide.

  2. Add key-value IMMUTA_SERVER_CACHE_PROVIDER_OPTIONS_PASSWORD: <cache-password>.

hashtag
Edit Helm values

Edit the immuta-values.yaml file to include the relevant Helm values listed below. Update all with your own values.

hashtag
Redis

circle-info

TLS configuration

TLS must be configured both client-side and server-side. The following Helm values demonstrate connecting to Redis with TLS enabled.

hashtag
Memcached

hashtag
Apply Helm values

Perform a to apply the changes made to immuta-values.yaml.

Immuta in production
Immuta in production
placeholder values
Helm upgradearrow-up-right
kubectl edit secret/immuta-secret
cache:
  enabled: false

secure:
  extraConfig:
    server:
      cache:
        provider:
          constructor: catbox-redis
          options:
            host: <redis-fqdn>
            port: <port>
            # Setting options.tls to an empty dict enables TLS without configuring any other options.
            tls: {}

            # Dict representation of TLS config options json-object for package ioredis
            # https://github.com/redis/ioredis
            #
            # tls:
            #   ca:
            #   key:
            #   cert:

  extraEnvVars:
  - name: IMMUTA_SERVER_CACHE_PROVIDER_OPTIONS_PASSWORD
    valueFrom:
      secretKeyRef:
        key: IMMUTA_SERVER_CACHE_PROVIDER_OPTIONS_PASSWORD
        name: immuta-secret
cache:
  enabled: false

secure:
  extraConfig:
    server:
      cache:
        provider:
          constructor: catbox-memcached
          options:
            host: <memcached-fqdn>
            port: <port>
helm upgrade <release-name> oci://ocir.immuta.com/stable/immuta-enterprise --values immuta-values.yaml --version 2024.2.20