Phase 5: core services¶
The services the Discovery Environment authenticates, searches, caches, and communicates through. Deploy the directory before Keycloak, and Keycloak before anything that needs its client secrets.
Identity¶
- OpenLDAP - accounts and POSIX groups
- Keycloak - realm, LDAP federation, mappers, roles, and OAuth clients
- Grouper - group management the DE authorizes against
Search¶
- OpenSearch - the data search index used by new deployments
- Elasticsearch (legacy) - the superseded search stack
Messaging and state¶
- NATS - internal service-to-service messaging
- Redis HA - caching and session state
- Unleash - feature flags
Storage and utilities¶
- iRODS CSI driver - mounting Data Store paths into pods
- Mail - outbound mail for DE and portal notifications
- Jaeger - distributed tracing (optional)