User's Guide: Create Application Configuration

1.0 Introduction

An application configuration is an object used to customize the behavior for EDP/EnclaveOS applications.

• For EnclaveOS applications, use this to insert files on the disk in a specific path.

• For EDP applications, use this to provide a key/value map to the applications.

The Application Configuration also provides information regarding connections to datasets or other applications when they are part of a workflow.

For example: You can have an Nginx Enclave OS image and use application config to provide a custom nginx.conf to it.

1.1 Workflow Application Configuration

Application configuration objects can be assigned to apps in draft workflows. These draft workflows are sent for approval and finalized once all users approve the Workflow.

Fortanix CCM then generates a secondary/derived object called Workflow Application Configuration. This contains the original object plus information on Workflow connections needed by enclaves to access the data. For more details about workflows, refer to User's Guide: Workflows.

2.0 Create an Application Configuration

To create an application configuration, you need to have a pre-existing group, application, and an image of the application.

1. Click the Applications menu item in the Fortanix CCM UI left navigation panel and select the Configurations menu item.

2. Click + ADD CONFIGURATION to add a new configuration.

   

3. In the ADD APPLICATION CONFIGURATION window, fill the following:

   • Image - select the application images for which you want to create a configuration.

   • Name – Enter the name of the configuration.

   • Group – Select the required group name from the drop down menu to associate this configuration with that group.

   • Description – Enter a description of the configuration.

   • Ports – Enter the connections to be used in the workflow. These are not network ports, they are string-based tags that will be used to identify connections. You can add multiple ports depending on how the connection should work. For example: “input”, “output”, “heartbeat”, and so on.

   • Labels (optional) – attach one or more key-value labels to the configuration.

   • Configuration items – These are key-value pairs used for configuring the app.

     • For Enclave OS applications, the Key is the path of the file that contains the Value for configuring an app.

       NOTE

       We only allow files in the path /opt/fortanix/enclave-os/app-config/rw for EOS applications.

     • For EDP applications, set a Key and Value to configure the app. 

   

4. Click SAVE CONFIGURATION to save the configuration.