X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/102df19458ef2c97d1ef4ba0e571e3204d7073e6..8e26a9aeede967030e10cb93b01aad6bd519b484:/doc/install/install-workbench-app.html.textile.liquid diff --git a/doc/install/install-workbench-app.html.textile.liquid b/doc/install/install-workbench-app.html.textile.liquid index 8650ecc14a..7ee8db92f1 100644 --- a/doc/install/install-workbench-app.html.textile.liquid +++ b/doc/install/install-workbench-app.html.textile.liquid @@ -12,10 +12,10 @@ SPDX-License-Identifier: CC-BY-SA-3.0 # "Install dependencies":#dependencies # "Update config.yml":#update-config # "Update Nginx configuration":#update-nginx +# "Trusted client flag":#trusted_client # "Install arvados-workbench":#install-packages # "Restart the API server and controller":#restart-api # "Confirm working installation":#confirm-working -# "Trusted client setting":#trusted_client h2(#dependencies). Install dependencies @@ -25,12 +25,12 @@ h2(#dependencies). Install dependencies h2(#configure). Update config.yml -Edit @/etc/arvados/config.yml@ to set the keys below. The full set of configuration options are in the "Workbench section of config.yml":{{site.baseurl}}/admin/config.html +Edit @config.yml@ to set the keys below. The full set of configuration options are in the "Workbench section of config.yml":{{site.baseurl}}/admin/config.html 
    Services:
-      Workbench:
-        ExternalURL: "https://workbench.ClustedID.example.com"
+      Workbench1:
+        ExternalURL: "https://workbench.ClusterID.example.com"
     Workbench:
       SecretKeyBase: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
     Users:
@@ -52,14 +52,19 @@ You probably want to enable @Users.AutoAdminFirstUser@ .  The first user to log
 
 h2(#update-nginx). Update nginx configuration
 
-Use a text editor to create a new file @/etc/nginx/conf.d/arvados-workbench.conf@ with the following configuration.  Options that need attention are marked with "TODO".
+Use a text editor to create a new file @/etc/nginx/conf.d/arvados-workbench.conf@ with the following configuration.  Options that need attention are marked in red.
 
 
 
server {
-  listen       [your public IP address]:443 ssl;
+    listen       80;
+    server_name  workbench.ClusterID.example.com;
+    return 301   https://workbench.ClusterID.example.com$request_uri;
+}
+
+server {
+  listen       443 ssl;
   server_name  workbench.ClusterID.example.com;
 
-  ssl on;
   ssl_certificate     /YOUR/PATH/TO/cert.pem;
   ssl_certificate_key /YOUR/PATH/TO/cert.key;
 
@@ -77,6 +82,19 @@ Use a text editor to create a new file @/etc/nginx/conf.d/arvados-workbench.conf
 

 
 
+h2(#trusted_client). Trusted client flag
+
+In the API server project root, start the Rails console.  {% include 'install_rails_command' %}
+
+Create an ApiClient record for your Workbench installation with the @is_trusted@ flag set.
+
+
irb(main):001:0> include CurrentApiClient
+=> true
+irb(main):002:0> act_as_system_user do ApiClient.create!(url_prefix: "https://workbench.ClusterID.example.com/", is_trusted: true) end
+=> #<ApiClient id: 2, uuid: "...", owner_uuid: "...", modified_by_client_uuid: nil, modified_by_user_uuid: "...", modified_at: "2019-12-16 14:19:10", name: nil, url_prefix: "https://workbench.ClusterID.example.com/", created_at: "2019-12-16 14:19:10", updated_at: "2019-12-16 14:19:10", is_trusted: true>
+

+
+
 {% assign arvados_component = 'arvados-workbench' %}
 
 {% include 'install_packages' %}
@@ -86,20 +104,3 @@ Use a text editor to create a new file @/etc/nginx/conf.d/arvados-workbench.conf
 h2(#confirm-working). Confirm working installation
 
 Visit @https://workbench.ClusterID.example.com@ in a browser.  You should be able to log in using the login method you configured in the previous step.  If @Users.AutoAdminFirstUser@ is true, you will be an admin user.
-
-h2(#trusted_client). Trusted client flag
-
-Log in to Workbench once to ensure that the Arvados API server has a record of the Workbench client. (It's OK if Workbench says your account hasn't been activated yet. We'll deal with that next.)
-
-In the API server project root, start the Rails console.  {% include 'install_rails_command' %}
-
-At the console, enter the following commands to locate the ApiClient record for your Workbench installation (typically, while you're setting this up, the @last@ one in the database is the one you want), then set the @is_trusted@ flag for the appropriate client record:
-
-
irb(main):001:0> wb = ApiClient.all.last; [wb.url_prefix, wb.created_at]
-=> ["https://workbench.example.com/", Sat, 19 Apr 2014 03:35:12 UTC +00:00]
-irb(main):002:0> include CurrentApiClient
-=> true
-irb(main):003:0> act_as_system_user do wb.update_attributes!(is_trusted: true) end
-=> true
-

-