Validating the Deployment

After the deployment procedure is complete, you should validate the deployment to ensure that everything is working according to your needs. The deployment may take approximately 3-4 minutes to complete.

To validate if the Kubernetes based Container Software deployment using Helm charts is successful, invoke the following commands to verify the status (STATUS is DEPLOYED) for a Helm chart with release, my-release and namespace, my-namespace.

Check the Helm chart release status by invoking the following command and verify that the STATUS is DEPLOYED:
```
helm status my-release
```
Wait for the pod to be ready. To verify the pods status (READY) use the dashboard or through the command line interface by invoking the following command:
```
kubectl get pods -l release my-release -n my-namespace -o wide
```
To view the service and ports exposed to enable communication in a pod invoke the following command:
```
kubectl get svc -l release= my-release -n my-namespace -o wide
```
The screen output displays the external IP and exposed ports under EXTERNAL-IP and PORT(S) column respectively. If external LoadBalancer is not present, refer Master node IP as external IP.

Exposed Services

If required, this chart can create a service of ClusterIP for communication within the cluster. This type can be changed while installing chart using service.type key defined in values.yaml. There are three ports where IBM SEAS processes run, Non-secure API port (61365), Secure API port (61366) and Jetty port (9080) whose values can be updated during chart installation using service.nonSecure.servicePort or service.secure.servicePort or service.jetty.servicePort. If external LoadBalancer is not present, then refer to Master node IP for communication.

Note: NodePort service type is not recommended. It exposes additional security concerns and is hard to manage from both an application and networking infrastructure perspective.

DIME and DARE Security Considerations

This topic provides security recommendations for setting up Data In Motion Encryption (DIME) and Data At Rest Encryption (DARE). It is intended to help you create a secure implementation of the application.

All the xml configuration data, which is at rest is encrypted with a generated key used by the application.
Data in motion is encrypted using transport layer security (TLS 1.2). For more information see, TLS Encryption.