Amster usage examples
In this section, you can find examples of tasks you can do with Amster.
For Amster examples in Docker and Kubernetes deployments, see the ForgeRock DevOps (ForgeOps) documentation. |
Clone an Access Management instance
This example shows the high-level steps required to clone an AM instance, from exporting the configuration of the original instance, to installing the new instance and importing the configuration into it.
Follow these steps to clone an AM instance using Amster:
-
Create a transport key in the original AM instance, if one does not exist already. For more information, refer to Create transport keys to export configuration data.
-
Keep the transport key safe by exporting it to another keystore. The key is required to import the configuration into the new AM instance. For more information, see Duplicate and install a transport key.
-
Connect to the original AM instance using the
amster
command. For more information, refer to Connect to AM. -
Export all the configuration of the original AM instance using the
export-config
command. For more information, refer to Export configuration data. -
Take note of the value of the Password Encryption Key field on the original AM, for example,
O6QWwHPO4os+zEz3Nqn/2daAYWyiFE32
.To locate it, log in to the original AM instance, and navigate to Deployment > Servers > Server Name > Security > Encryption.
-
In the new server, deploy the AM
.war
file in a web container, but do not configure it. -
Install the new AM instance using the
install-openam
command, specifying the original AM password encryption key with the--pwdEncKey
option. For example:am> install-openam \ --serverUrl https://openam.example.com:8443/openam \ --adminPwd forgerock \ --pwdEncKey O6QWwHPO4os+zEz3Nqn/2daAYWyiFE32 \ --acceptLicense
For more information, refer to Install AM with Amster.
-
Import the transport key of the original AM instance into the keystore of the new AM instance. For more information, see Duplicate and install a transport key.
-
Connect to the new AM instance using the
amster
command. For more information, refer to Connect to AM. -
Import the configuration of the original AM instance using the
import-config
command. For more information, refer to Import configuration data.
Amster sample scripts
This section covers sample scripts and files found in the /path/to/amster/samples
directory:
transport-key.sh
-
Shell script to manage transport keys. You can use it as a template for your own scripts to create, delete, and export the key to another keystore.
Invoke the script’s help for a list of possible actions:
$ ./transport-key.sh help
For more information about the transport key, refer to Create transport keys to export configuration data.
realm.amster
-
Amster script containing an example of different operations that can be done at realm level, such as creating a data store, displaying its configuration, modifying it, and deleting it.
For more information about writing scripts for Amster, see Scripts.
import-example.amster
-
Amster script containing an example of the
import-config
command.For more information about writing scripts for Amster, see Scripts.
export-example.amster
-
Amster script containing an example of the
export-config
command.