File tree Expand file tree Collapse file tree 1 file changed +11
-14
lines changed
Expand file tree Collapse file tree 1 file changed +11
-14
lines changed Original file line number Diff line number Diff line change @@ -10,32 +10,29 @@ The SDX Edge chart deploys the following components:
1010
1111On Openshift environments, the Kong Data Plane is a passthrough from the Openshift HAProxy.
1212
13- The inbound Proxy is an HTTP/2.0 listener that terminates with an OV or EV certificate issued by a public CA.
14-
15- The outbound Proxy has optional setup of mTLS (Peer-to-Peer) or to an Upstream service.
16-
17- A Client Authentication and Signing certificate is issued and used for connecting to the SDX Operator and for signing messages.
18-
19- ## Development
20-
21- ``` sh
22- helm package sdx-edge
23- helm push sdx-edge-0.1.0.tgz oci://ghcr.io/bcgov/aps-devops
24- ```
13+ The inbound Proxy is an HTTP/2.0 listener that terminates with a certificate issued by an approved Certificate Authority.
2514
2615## Deployment
2716
2817> ` TOKEN ` is a one-time-use token for calling the CA to get a new certificate for mTLS and signing
2918
3019``` sh
20+ export TOKEN=" <TOKEN>"
3121export IP=" <INTERNET_FACING_IP]"
3222export EDGE_ID=" <EDGE NAME>"
3323export DOMAIN=" ${EDGE_ID} .servers.sdx"
3424
3525helm upgrade --install ${EDGE_ID} \
36- --set tls.client.bootstrap.token=$TOKEN \
37- --set tls.client.cn=${DOMAIN} \
26+ --set tls.client.bootstrap.token=${TOKEN} \
3827 --set tls.server.ip=${IP} \
28+ --set tls.client.cn=${DOMAIN} \
3929 --set route.host=${DOMAIN} \
4030 oci://ghcr.io/bcgov/aps-devops/sdx-edge:0.1.0
4131```
32+
33+ ## Development
34+
35+ ``` sh
36+ helm package sdx-edge
37+ helm push sdx-edge-0.1.0.tgz oci://ghcr.io/bcgov/aps-devops
38+ ```
You can’t perform that action at this time.
0 commit comments