Deployments in ArangoGraph

Below projects in the ArangoGraph deployment hierarchy are deployments. A deployment contains an ArangoDB, configured as you choose. You can have any number of deployments under one project.

Organizations → Projects → Deployments

Each deployment can also be backed up manually or automatically by schedules you can define.

In essence, you can create whatever structure fits you for a given organization, its projects and deployments.

How to create a new deployment

1. If you do not have a project yet, create a project first.
2. In the main navigation, in the Projects section, click the project for which you want to create a new deployment.
3. In the Deployments tab, you will see an empty list or a list with your project’s existing deployments.
4. Click the New deployment button.
5. Set up your deployment. The configuration options are described below.

In the General section

• Enter the name and optionally a short description for the deployment.

In the Location section

1. Select the Provider and Region of the provider.

   Once a deployment has been created, it is not possible to change the provider and region anymore.

2. Select the DB Version. Note: If you don’t know which DB version to select, leave the version selected by default.
3. In the CA Certificate field
   • The default certificate created for your project will automatically be selected.
   • If you have no default certificate, or want to use a new certificate create a new certificate by typing the desired name for it and hitting enter or clicking the name when done.
   • Or, if you already have multiple certificates, select the desired one.
4. Optional but strongly recommended: In the IP allowlist field, select the desired one in case you want to limit access to your deployment to certain IP ranges. To create a allowlist, navigate to your project and select the IP allowlists tab.

In the Configuration section

Choose between a OneShard, Sharded or Single Server deployment.

• OneShard deployments are suitable when your data set fits in a single node. They are ideal for graph use cases.

• Sharded deployments are suitable when your data set is larger than a single node. The data will be sharded across multiple nodes.

• Single Server deployments are suitable when you want to try out ArangoDB without the need for high availability or scalability. The deployment will contain a single server only. Your data will not be replicated and your deployment can be restarted at any time.

OneShard

• Select the memory size of your node. The disk size is automatically set for you based on the selected memory size.

Sharded

• In addition to the memory size as in the OneShard configuration, select the number of nodes for your deployment. The more nodes you have, the higher the replication factor can be. Same as in OneShard, the disk size is automatically set for you.

Single Server

• Like with OneShard and Sharded deployments, you can choose the memory size. Note, however, that the size you choose is for the entire deployment. For OneShard and Sharded deployments the chosen sizes are per node.

In the Summary section

1. Review the configuration, and if you’re ok with the setup press the Create button.
2. You will be taken to the deployment overview page. Note: Your deployment is at that point being bootstrapped, this process will take a few minutes. Once it is ready, you will receive a confirmation email.

How to access your deployment

1. In the main navigation, in the Projects section, click the project for which you created a deployment earlier.
2. Navigate to the Deployments tab.
3. For each deployment in your project, you see the status. While your new deployment is being set up, it will display the bootstrapping status.
4. Press the View button to show the deployment page.
5. When a deployment displays a status of OK, you can access it.
6. Click the Open endpoint button or on the endpoint URL property to open the dashboard of your new ArangoDB deployment.

At this point your ArangoDB deployment is available for you to use — Have fun!

If you have disabled the auto-login option to the database web interface, you need to follow the additional steps outlined below to access your deployment:

1. Click the copy icon next to the root password. This will copy the deployment root password to your clipboard. You can also click the view icon to unmask the root password to see it.

   Do not use the root username/password for everyday operations. It is recommended to use them only to create other user accounts with appropriate permissions.

2. Click the Open endpoint button or on the endpoint URL property to open the dashboard of your new ArangoDB deployment.
3. In the username field type root, and in the password field paste the password that you copied earlier.
4. Press the Login button.
5. Press the Select DB: _system button.

Password settings

How to enable the automatic root user password rotation

Password rotation refers to changing passwords regularly - a security best practice to reduce the vulnerability to password-based attacks and exploits by limiting for how long passwords are valid. The ArangoGraph Insights Platform can automatically change the root user password of an ArangoDB deployment periodically to improve security.

1. Navigate to the Deployment for which you want to enable an automatic password rotation for the root user.
2. On the Overview tab, click the button with the gear icon next to the ROOT PASSWORD.

3. In the Password Settings dialog, turn the automatic password rotation on and click the Confirm button.

   

4. You can expand the Root password panel to see when the password was rotated last. The rotation takes place every three months.

Auto login to database UI

ArangoGraph provides the ability to automatically login to your database using your existing ArangoGraph credentials. This not only provides a seamless experience, preventing you from having to manage multiple sets of credentials but also improves the overall security of your database. As your credentials are shared between ArangoGraph and your database, you can benefit from end-to-end audit traceability for a given user, as well as integration with ArangoGraph SSO.

You can enable this feature in the Password Settings dialog. Please note that it may take a few minutes to get activated. Once enabled, you no longer have to fill in the root user and password of your ArangoDB deployment.

This feature can be disabled at any time. You may wish to consider explicitly disabling this feature in the following situations:

• Your workflow requires you to access the database UI using different accounts with differing permission sets, as you cannot switch database users when automatic login is enabled.
• You need to give individuals access to a database’s UI without giving them any access to ArangoGraph. Note, however, that it’s possible to only give an ArangoGraph user database UI access, without other ArangoGraph permissions.
• For some reason, you require driver access via 8529 port and you are unable to use the designated 18529 driver port.

Before getting started, make sure you are signed into ArangoGraph as a user with one of the following permissions in your project:

• data.deployment.full-access
• data.deployment.read-only-access

Organization owners have these permissions enabled by default. The deployment-full-access-user and deployment-read-only-user roles which contain these permissions can also be granted to other members of the organization. See how to create a role binding.

How to edit a deployment

You can modify a deployment’s configuration, including the ArangoDB version that is being used, change the memory size, or even switch from a OneShard deployment to a Sharded one if your data set no longer fits in a single node.

1. Go to the Projects section and select an existing deployment from the list.
2. Open the deployment you want to change.
3. On the Overview tab, click the Edit button.
4. In the Version and Security section, you can do the following:
   • Upgrade the ArangoDB version that is currently being used. See also Upgrades and Versioning
   • Select a different CA certificate.
   • Add or remove an IP allowlist.
5. In the Configuration section, you can do the following:
   • Upgrade the memory size per node. The disk size is automatically set for you.
   • Change OneShard deployments into Sharded deployments. To do so, click Sharded. In addition to the other configuration options, you can select the number of nodes for your deployment. This can also be modified later on.

   Notice that you cannot switch from Sharded back to OneShard.

   When upgrading the memory size in AWS deployments, the value gets locked and cannot be changed until the cloud provider rate limit is reset.

6. All changes are reflected in the Summary section. Review the new configuration and click Save.

How to connect a driver to your deployment

ArangoDB drivers allow you to use your ArangoGraph deployment as a database system for your applications. Drivers act as interfaces between different programming languages and ArangoDB, which enable you to connect to and manipulate ArangoDB deployments from within compiled programs or using scripting languages.

To get started, open a deployment and go to the Overview tab. In the Quick start section, click on the Connecting drivers button and select your programming language. The code snippets provide examples on how to connect to your instance.

How to delete a deployment

1. In the main navigation, in the Projects section, click the project that holds the deployment you wish to delete.
2. On the Deployments tab, click the deployment you wish to delete.
3. Click the Danger zone tab.
4. Click the Delete deployment button.
5. In the modal dialog, confirm the deletion by entering Delete! into the designated text field.
6. Confirm the deletion by pressing the Yes button.
7. You will be taken back to the deployments page of the project. The deployment being deleted will display the Deleting status until it has been successfully removed.