Alfresco Content Services (ACS) is an Enterprise Content Management (ECM) system that is used for document and case management, project collaboration, web content publishing, and compliant records management. The flexible compute, storage, and database services that Kubernetes offers make it an ideal platform for Alfresco Content Services. This helm chart presents an enterprise-grade Alfresco Content Services configuration that you can adapt to virtually any scenario with the ability to scale up, down or out, depending on your use case.
The Helm chart in this repository supports deploying the Enterprise or Community Edition of ACS.
The Enterprise configuration will deploy the following system:
The Community configuration will deploy the following system:
Alfresco provides tested Helm charts as a "deployment template" for customers who want to take advantage of the container orchestration benefits of Kubernetes. These Helm charts are undergoing continual development and improvement, and should not be used "as is" for your production environments, but should help you save time and effort deploying Alfresco Content Services for your organisation.
The Helm charts in this repository provide a PostgreSQL database in a Docker container and do not configure any logging. This design has been chosen so that they can be installed in a Kubernetes cluster without changes and are still flexible to be adopted to your actual environment.
For your environment, you should use these charts as a starting point and modify them so that ACS integrates into your infrastructure. You typically want to remove the PostgreSQL container and connect the cs-repository directly to your database (might require custom images to get the required JDBC driver in the container).
Another typical change would be the integration of your company-wide monitoring and logging tools.
For the best results we recommend deploying ACS to AWS EKS. If you have a machine with at least 16GB of memory you can also deploy using Docker for Desktop.
There are also several examples showing how to deploy with various configurations:
- Deploy with AWS Services (S3, RDS and MQ)
- Deploy with Intelligence Services
- Deploy with Microsoft 365 Connector (Office Online Integration)
- Enable access to Search Services
- Enable Email Services
- Use a custom metadata keystore
- Install ACS license as part of the deployment
An autogenerated list of helm values used in the chart and their default values can be found here: Alfresco Content Services Helm Chart
Since the Alfresco Content Services chart also has local chart dependencies you can find the list of values that can be configured for these charts in their respective base folder:
- Alfresco ActiveMQ Helm Chart
- Alfresco Search Helm Chart
- Alfresco Insight Zeppelin Helm Chart
- Alfresco Sync Service Helm Chart
⚠️ As of chart version 5.2.0 (ACS 7.2.0) it is now required to pass a shared secret for solr and repo to authenticate to each other (see below)
global:
tracking:
auth: secret
sharedsecret: 50m3S3cretTh4t!s5tr0n6
⚠️ If you want to deploy ACS pre 7.2.0 with charts version 5.2.0+ make sure to add the values below to yourvalues.ymlfile. starting from ACS 7.2.0 the configuration below will not work anymore.
global:
tracking:
auth: noneℹ️ Due to protocol and ingress restrictions FTP is not exposed via the Helm chart.
To customise the Helm deployment, for example applying AMPs, we recommend following the best practice of creating your own custom Docker image(s). The Customisation Guide walks you through this process.
The easiest way to troubleshoot issues on a Kubernetes deployment is to use the Lens desktop application, which is available for Mac, Windows and Linux. Follow the getting started guide to configure your environment.
Alternatively, the traditional Kubernetes dashboard can also be used. Presuming you have deployed the dashboard in the cluster you can use the following steps to explore your deployment:
-
Retrieve the service account token with the following command:
kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep eks-admin | awk '{print $1}') -
Run the kubectl proxy:
kubectl proxy & -
Open a browser and navigate to:
http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/#/login -
Select "Token", enter the token retrieved in step 1 and press the "Sign in" button
-
Select "alfresco" from the "Namespace" drop-down menu, click the "Pods" link and click on a pod name. To view the logs press the Menu icon in the toolbar as highlighted in the screenshot below:
This approach allows to connect to a specific application in the cluster. See kubernetes documentation for details.
Any component of the deployment that is not exposed via ingress rules can be accessed in this way, for example Alfresco Search, DB or individual transformers.
Log files for individual pods can also be viewed from the command line using the kubectl utility.
Retrieve the list of pods in the alfresco namespace by using the following command:
kubectl get pods -n alfrescoThen to retrieve the logs for a pod using the following command (replacing the pod name appropriately):
kubectl logs acs-alfresco-cs-repository-69545958df-6wzl6 -n alfrescoTo continually follow the log file for a pod use the -f options as follows:
kubectl logs -f acs-alfresco-cs-repository-69545958df-6wzl6 -n alfrescoIf you wish to change the log levels for a specific Java package or class in a running content-repository these can be changed via the Admin Console. However, please be aware that the changes are applied only to one content-repository node, the one from which the Admin console is launched. Use the following URL to access the log settings page: https://<host>/alfresco/service/enterprise/admin/admin-log-settings
To add additional repository log statements across the whole cluster use the extraLogStatements property via the values file as shown in the example below:
repository:
...
extraLogStatements:
org.alfresco.repo.content.transform.TransformerDebug: debug
org.alfresco.repo.security.authentication.identityservice: debugNOTE: ACS deployment does not include any log aggregation tools. The logs generated by pods will be lost once the pods are terminated.
This tool allows you to download a ZIP file containing information useful for troubleshooting and supporting your system. Issue a GET request (Admin only) to: https://<host>/alfresco/service/api/admin/jmxdump