Best approach to configure alfresco repository deployed using helm

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

alexwang

I currently have Alfresco enterprise version 6.2.2 deployed via Kubernetes. While working with our business and platform teams in IT, we've noticed a few issues:

* File upload API used by our internal application to alfresco was limited to 25mb or less, business requires a larger upload limit

* Audit Access is disabled by default. Security team requires auditing, but there's no menu on the web console to enable and persist this setting.

Based on my understanding from reading the documentation, all of these issues can be addressed via configurations specified in the global configuration file which resides in Alfresco Repository.

However, the challenge is the fact that the Alfresco suite was deployed via Helm into Kubernetes. Since the Pods are ephemeral, adding configurations to the global configuration file has been a challenge. In addition, adding configurations and "restarting the application to apply changes" will not be possible without losing the configurations I've added in the first place.

I have 2 questions:

1) Please correct me if I'm mistaken, but Alfresco has a default upload limit of 4GB for files. Why is it limiting the uplaod API to 25MB or less?

2) What is the best approach to persist configurations in a Kuberentes environment with deployment done using Helm?

abhinavmishra14

@alexwang Yes, alfresco-global.properties can be used. 

1- To increase limit:

system.content.maximumFileSizeLimit=-1

There seem to be flash uploader limitations too, i am not fully aware but you can review this thread: https://hub.alfresco.com/t5/ecm-archive/maximum-upload-size/m-p/100874

If you are using cmis interface:

opencmis.maxContentSize=-1

 2- Enable basic access audit:

audit.enabled = true
audit.alfresco-access.enabled=true

Review this doc for more details and any custom implementations if you need to make: https://docs.alfresco.com/content-services/community/admin/audit/

Since you are using the k8 deployment via HELM, i would suggest you refer this repo: https://github.com/Alfresco/acs-deployment/tree/master/helm

There are two ways:

1- Update the java_opts with properties

environment:
    JAVA_OPTS: "
      -Dsystem.content.maximumFileSizeLimit=-1
      -Daudit.enabled = true
      -Daudit.alfresco-access.enabled=true
      "

https://github.com/Alfresco/acs-deployment/blob/master/helm/alfresco-content-services/values.yaml#L60

2- Use/create the templates to update the properties, see this for reference : https://github.com/Alfresco/acs-deployment/blob/master/helm/alfresco-content-services/templates/config-repository.yaml