[Needs Review] - Changes to App server Advanced configuration for V2

[DivergentEuropeans]

Signed-off-by: Leanid Astrakou [email protected]

Your checklist for this pull request

🚨Please review the guidelines for contributing to this repository.

• If the changes in this PR is part of the next future release, make this pull request against the docs-staging branch which will be published at the next release boundary. If the changes in this PR are part of the current release, use the default base branch, master. For more information about branches, see https://github.com/zowe/docs-site/tree/master#understanding-the-doc-branches.

• If this PR relates to GitHub issues in docs-site or other repositories, please list in Description, prefixed with close, fix or resolve keywords.

Description (including links to related git issues)

This PR is a WIP for App server Advanced configuration change for V2. For the things that weren't too complicated I changed myself. The remainder I have compiled a list of sections that need to reviewed & these sections should have tasks created for them later

You must use SSL certificates to configure the Zowe Application Server to communicate with the SSL-enabled Mediation Layer. Those certificates were created during the Zowe installation process, and are located in the $RUNTIME_DIR/components/app-server/share/zlux-app-server/defaults/serverConfig directory.

Those certificates are still there, but they now get generated during the zwe step. What do we do about the ones still there? We should specify information about zwe utility specific, i.e. update config will update certificate info in zowe.yaml

Accessing the Application Server

docs-site\docs\user-guide\configure-instance-directory.md

All of this needs replacing

Configuration file

Section may need review

Network configuration

Need to replace examples with zowe.yaml usages

Network example

Section may need total redo

Old defaults

This whole section needs to be replaced
Edit: I replaced it. Someone should check that I did it right.

Configuring ZSS for HTTPS

This section needs to be reviewed

Creating certificates and key ring for the ZSS server using RACF

This section I don't know yet what needs to be changed

Defining the AT-TLS rule

Configuring AT-TLS on Client System

This section I don't know yet what needs to be changed

Configuring the Zowe App Server for HTTPS communication with ZSS

I tried to edit this section but it certainly needs review

Installing additional ZSS instances

This section I don't know yet what needs to be changed, other than removing references to instance directory

Defining the RACF ZOWE class

"from" Creating authorization profiles ---> "to" Configuring basic authorization

This section I believe is mostly kept the same, but it needs to be rereviewed

Session duration and expiration

Configuration

Section needs to be reviewed, as zosmf-auth, zss-auth, and apiml-auth are outdated and sso-auth is now solely used (I believe?)

ZLUX_NODE_LOG_DIR and ZSS_LOG_DIR environment variables

Retaining logs

I am unsure if this still works and should be checked.

Administering the servers and plugins using an API

As I understand, our admin API's are supposed to still work for V2. But I haven't tested these, I don't know if anyone has tested these yet, and this section needs to re-reviewed

❤️Thank you!

[DivergentEuropeans]

Note: There are still some references to INSTANCE_DIR to the sections I added in notes