support custom hono-device-registry

.drone.yml

@@ -5,21 +5,23 @@ pipeline:
     environment:
       - DEPLOY_IMAGE_TAG=0.5
       # Kubernetes namespace to deploy to
-      - NS=hono-stg-dev1
+      - NS=premstg1
       # Kubernetes cluster to deploy to
       # Get a copy of arduino-kubeconfig
       # $ export KUBECONFIG=/path/to/arduino-kubeconfig
       # $ kubectl config use-context stg.k8s.iot.arduino.cc
       - CLUSTER=stg.k8s.iot.arduino.cc
+      # !! Replace what is assigned to ACM_CERT below and add to secrets: []
     commands:
+      - export ACM_CERT=$${US_EAST_1_CM_CERT}
       - sed -i "s/\.hono/\.$${NS}/" $${CI_WORKSPACE}/demo-certs/ca_opts
       - cd $${CI_WORKSPACE}/demo-certs && ./create_certs.sh && cd $${CI_WORKSPACE}
       - sed -i "s/\.hono/\.$${NS}/" $${CI_WORKSPACE}/dispatchrouter/qpid/qdrouterd-with-broker.json
       - sed -i "s/\.hono/\.$${NS}/" $${CI_WORKSPACE}/example/src/main/config/grafana_datasource.json
-      - mvn clean install -DskipTests -Ddeploy_image_tag=$${DEPLOY_IMAGE_TAG} -Ddocker.host=$${DOCKER_HOST} -Daws.cm.cert=$${CM_CERT} -Dclient.ns=$${NS} -Dcluster.domain=$${CLUSTER} -Pbuild-docker-image -lbuild.out
+      - mvn clean install -DskipTests -Ddeploy_image_tag=$${DEPLOY_IMAGE_TAG} -Ddocker.host=$${DOCKER_HOST} -Daws.cm.cert=$${ACM_CERT} -Dclient.ns=$${NS} -Dcluster.domain=$${CLUSTER} -Pbuild-docker-image -lbuild.out
       - tail -100 build.out
       - grep -q "BUILD SUCCESS" build.out
-    secrets: [ docker_host, cm_cert ]
+    secrets: [ docker_host, us_east_1_cm_cert ]
 
   show-error:
     image: alpine
@@ -34,4 +36,3 @@ pipeline:
     commands:
       - s3cmd --access_key=$${AWS_ACCESS_KEY} --secret_key=$${AWS_SECRET_KEY} --recursive --force --delete-removed sync $${CI_WORKSPACE}/example/target s3://$${DRONE_BUCKET}/$${CI_REPO}/$${CI_COMMIT_BRANCH}/
     secrets: [ aws_access_key, aws_secret_key, drone_bucket ]
-

example/pom.xml

@@ -33,7 +33,11 @@ Also contains scripts for deploying a Hono instance to a Docker Swarm, a Kuberne
   <properties>
     <docker.skip.build>true</docker.skip.build>
     <hono.messaging.host>hono-service-messaging.${client.ns}</hono.messaging.host>
-    <hono.registration.host>hono-service-device-registry.${client.ns}</hono.registration.host>
+    <!--<hono.registration.host>${client.ns}-hono-device-registry-internal.${client.ns}</hono.registration.host>-->
+    <hono.registration.host>hono-device-registry.${client.ns}.${cluster.domain}</hono.registration.host>
+    <hono.registration.hostnameVerificationRequired>false</hono.registration.hostnameVerificationRequired>
+    <hono.registration.port>5671</hono.registration.port>
+    <hono.registration.tlsEnabled>true</hono.registration.tlsEnabled>
     <hono.auth.host>hono-service-auth.${client.ns}</hono.auth.host>
     <!-- 
       The shared secret to use for creating/validating registration assertions.

example/src/main/config/hono-adapter-http-vertx-config.yml

@@ -19,17 +19,27 @@ hono:
   registration:
     name: 'Hono REST Adapter'
     host: ${hono.registration.host}
-    port: 5671
+    port: ${hono.registration.port}
     username: ${hono.adapter.http.username}
     password: ${hono.adapter.http.password}
-    trustStorePath: ${hono.trustStore.path}
+    # Verification is disabled by default. Setting the <em>trustStorePath</em>
+    # property enables verification of the server identity implicitly and the
+    # value of this property is ignored.
+    #trustStorePath: ${hono.trustStore.path}
+    hostnameVerificationRequired: ${hono.registration.hostnameVerificationRequired}
+    tlsEnabled: ${hono.registration.tlsEnabled}
   credentials:
     name: 'Hono REST Adapter'
     host: ${hono.registration.host}
-    port: 5671
+    port: ${hono.registration.port}
     username: ${hono.adapter.http.username}
     password: ${hono.adapter.http.password}
-    trustStorePath: ${hono.trustStore.path}
+    # Verification is disabled by default. Setting the <em>trustStorePath</em>
+    # property enables verification of the server identity implicitly and the
+    # value of this property is ignored.
+    #trustStorePath: ${hono.trustStore.path}
+    hostnameVerificationRequired: ${hono.registration.hostnameVerificationRequired}
+    tlsEnabled: ${hono.registration.tlsEnabled}
   metric:
     reporter:
       graphite:

example/src/main/config/hono-adapter-kura-config.yml

@@ -19,17 +19,27 @@ hono:
   registration:
     name: 'Hono Kura Adapter'
     host: ${hono.registration.host}
-    port: 5671
+    port: ${hono.registration.port}
     username: ${hono.adapter.kura.username}
     password: ${hono.adapter.kura.password}
-    trustStorePath: ${hono.trustStore.path}
+    # Verification is disabled by default. Setting the <em>trustStorePath</em>
+    # property enables verification of the server identity implicitly and the
+    # value of this property is ignored.
+    #trustStorePath: ${hono.trustStore.path}
+    hostnameVerificationRequired: ${hono.registration.hostnameVerificationRequired}
+    tlsEnabled: ${hono.registration.tlsEnabled}
   credentials:
     name: 'Hono Kura Adapter'
     host: ${hono.registration.host}
-    port: 5671
+    port: ${hono.registration.port}
     username: ${hono.adapter.kura.username}
     password: ${hono.adapter.kura.password}
-    trustStorePath: ${hono.trustStore.path}
+    # Verification is disabled by default. Setting the <em>trustStorePath</em>
+    # property enables verification of the server identity implicitly and the
+    # value of this property is ignored.
+    #trustStorePath: ${hono.trustStore.path}
+    hostnameVerificationRequired: ${hono.registration.hostnameVerificationRequired}
+    tlsEnabled: ${hono.registration.tlsEnabled}
   metric:
     reporter:
       graphite:

example/src/main/config/hono-adapter-mqtt-vertx-config.yml

@@ -19,17 +19,27 @@ hono:
   registration:
     name: 'Hono MQTT Adapter'
     host: ${hono.registration.host}
-    port: 5671
+    port: ${hono.registration.port}
     username: ${hono.adapter.mqtt.username}
     password: ${hono.adapter.mqtt.password}
-    trustStorePath: ${hono.trustStore.path}
+    # Verification is disabled by default. Setting the <em>trustStorePath</em>
+    # property enables verification of the server identity implicitly and the
+    # value of this property is ignored.
+    #trustStorePath: ${hono.trustStore.path}
+    hostnameVerificationRequired: ${hono.registration.hostnameVerificationRequired}
+    tlsEnabled: ${hono.registration.tlsEnabled}
   credentials:
     name: 'Hono MQTT Adapter'
     host: ${hono.registration.host}
-    port: 5671
+    port: ${hono.registration.port}
     username: ${hono.adapter.mqtt.username}
     password: ${hono.adapter.mqtt.password}
-    trustStorePath: ${hono.trustStore.path}
+    # Verification is disabled by default. Setting the <em>trustStorePath</em>
+    # property enables verification of the server identity implicitly and the
+    # value of this property is ignored.
+    #trustStorePath: ${hono.trustStore.path}
+    hostnameVerificationRequired: ${hono.registration.hostnameVerificationRequired}
+    tlsEnabled: ${hono.registration.tlsEnabled}
   metric:
     reporter:
       graphite: