# Exercise 2 - Change code, build, save and deploy the Authors Microservice

## Step 1: Open the `server.xml` file

```bash
echo $keycloakurl
cd $ROOT_FOLDER/authors-java-jee-cloud/liberty
nano server.xml
```

## Step 2: Change following source code

Replace the `[keycloakurl]` with the value, you got before for in and save the file.

```markup
<mpJwt
     id="myMpJwt"
     jwksUri="[keycloakurl]/auth/realms/cloudnativestarter/protocol/openid-connect/certs"
     issuer="[keycloakurl]/auth/realms/cloudnativestarter"
     userNameAttribute="preferred_username"
     audiences="account">
</mpJwt>
```

## Step 3: Open the `microprofile-config.properties` file

```bash
cd $ROOT_FOLDER/authors-java-jee-cloud/src/webapp/META-INF
nano microprofile-config.properties
```

## Step 4: Change following source code

Replace the `[keycloakurl]` with the value, you got before for in **Step 1** and save the file.

```java
mp.jwt.verify.publickey.location=/META-INF/keycloak-cloudnativestarter-key.pem
mp.jwt.verify.issuer=[keycloakurl]/auth/realms/cloudnativestarter
```

## Step 5: Insert the RS256 JWT key in the file `keycloak-public-key.pem`

The file is saved in that folder `src/main/webapp/META-INF/keycloak-public-key.pem`.

```bash
cd $ROOT_FOLDER/authors-java-jee-cloud/src/main/webapp/META-INF
nano keycloak-public-key.pem
```

```java
-----BEGIN PUBLIC KEY-----
YOUR_KEY
-----END PUBLIC KEY-----
```

Get the key using the URL `http://[keycloakurl]/auth/admin/master/console/#/realms/cloudnativestarter/keys`and then press *public key*. The following image shows the invocation.

![](https://github.com/thomassuedbroecker/keycloak-on-kubernetes-frontend-backend/tree/243a2e4d6a5ccd51e29f46419ed6d8653caf9ab7/workshop/images/liberty-setup-01.png)

## Step 6: Build and save the "Authors" container image in the IBM Cloud Container Registry

```bash
cd $ROOT_FOLDER/authors-java-jee-cloud
ibmcloud cr build -f Dockerfile --tag $REGISTRY/$REGISTRY_NAMESPACE/authors:1 .
```

## Step 7: List the container images to verify the upload.

```bash
ibmcloud cr images
```

## Step 8: Apply the deployment of the Authors service

1. Ensure you are in the `$ROOT_FOLDER/web-app-cloud/deployment`

   ```
   cd $ROOT_FOLDER/authors-java-jee-cloud/deployment
   nano kubernetes.yaml
   ```
2. Open the `../authors-java-jee-cloud/deployment/kubernetes.yaml` file with a editor and replace the value for the container image location with the path we got from the IBM Container Registry and just replace the `authors:1` text, and add following statement `imagePullPolicy: Always` and **save** the file.

*Note:* With the specification `imagePullPolicy: Always` we force that the image is pulled from the IBM Cloud Container Registry and not cashed image in Kubernetes is possible used, when we change our container image IBM Cloud Container Registry.

Before:

```
    image: authors:1
```

Example for the change:

```
   spec:
      containers:
      - name: authors
        image: de.icr.io/cloud-native-tsuedbro/authors:1 
        ports:
        - containerPort: 80
      restartPolicy: Always
```

1. Now we apply the yaml to create the **Authors** Pod.

   ```bash
    kubectl apply -f kubernetes.yaml
   ```
2. Insert this command and verify the output.

   ```bash
     kubectl get pods
   ```

   Sample output:

   ```bash
     NAME                      READY   STATUS    RESTARTS   AGE
     authors-7b6dd98db-wl9wc   1/1     Running   0          6m9s
   ```
3. Cluster/Workernode IP

   ```bash
     export workernodeip=$(ibmcloud ks workers --cluster cloud-native | awk '/Ready/ {print $2;exit;}')
   ```
4. authors `NodePort`

   ```bash
     export authorsnodeport=$(kubectl get svc authors --ignore-not-found --output 'jsonpath={.spec.ports[*].nodePort}')
   ```
5. Open the service in a browser

   ```bash
     export authorsurl=http://${workernodeip}:${authorsnodeport}
     echo $authorsurl
   ```


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://thomas-suedbroecker.gitbook.io/using-keycloak-vue-js-and-java-microservice-on-kub/deploy-keycloak-and-the-example-application-to-kubernetes/exercise-02.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.