NATS Configurations
NavOps supports addition of NATS leaf nodes. This enables NATS services to be distributed as required to support various customer cloud security topologies.
The cluster object can be configured to specify a custom nats_urls
configuration for agents running in that cluster:
_meta: type: Cluster ... config: cloud_metadata: nats_urls: nats://<token>@w.x.y.z:1234 ...The NATS server is expected to be configured as a leaf node in the NavOps environment.
Additional NATS leaf nodes can be created as part of the NavOps installation. The
following configurations can be used as a guide for configuring a NATS server to
participate in the NavOps NATS network:
port: 4222 authorization { token: "<your-secret-token-for-your-leaf-node>" timeout: 2 } tls { cert_file: "<path-to-your-ssl-cert-if-using-tls>" key_file: "<path-to-your-ssl-key-if-using-tls>" } leafnodes { remotes = [ { url: "nats://<navops-nats-token>@<navops-server-ip>" tls { ca_file: "/opt/navops/etc/ssl/navops-ca.pem" } }, ] }