You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -46,20 +47,23 @@ The pattern has been tested on Azure for two installation methods:
46
47
> You need an external CA signed certificate for to be added (e.g. with let's encrypt) to a self-managed install
47
48
48
49
### `1.0.0`
50
+
49
51
1.0.0 supports OpenShift Sandboxed containers version `1.8.1` along with Trustee version `0.2.0`.
50
52
51
53
The pattern has been tested on Azure for one installation method:
52
54
53
55
1. Self managed OpenShift install using the `openshift-install` CLI
54
56
2. Installing on top of an existing Azure Red Hat OpenShift (ARO) cluster
55
57
56
-
## Validated pattern flavours
57
-
**Today the demo has one flavour**.
58
+
## Validated pattern flavours
59
+
60
+
**Today the demo has one flavour**.
58
61
A number are planned based on various different hub cluster-groups.
59
-
You can change between behaviour by configuring [`global.main.clusterGroupName`](https://validatedpatterns.io/learn/values-files/) key in the `values-global.yaml` file.
62
+
You can change between behaviour by configuring [`global.main.clusterGroupName`](https://validatedpatterns.io/learn/values-files/) key in the `values-global.yaml` file.
60
63
61
64
`values-simple.yaml`: or the `simple` cluster group is the default for the pattern.
62
-
It deploys a hello-openshift application 3 times:
65
+
It deploys a hello-openshift application 3 times:
66
+
63
67
- A standard pod
64
68
- A kata container with peer-pods
65
69
- A confidential kata-container
@@ -76,26 +80,27 @@ The instructions here presume you have a cluster. See further down for provision
76
80
2. If using a particular version (e.g. `1.0.0`) checkout the correct tag.
77
81
78
82
> [!TIP]
79
-
> Forking is essential as the validated pattern uses ArgoCD to reconcile it's state against your remote (forked) repository.
83
+
> Forking is essential as the validated pattern uses ArgoCD to reconcile it's state against your remote (forked) repository.
80
84
81
85
#### Configuring required secrets / parameters
82
86
83
-
The secrets here secure Trustee and the peer-pod vms. Mostly they are for demonstration purposes.
87
+
The secrets here secure Trustee and the peer-pod vms. Mostly they are for demonstration purposes.
84
88
This only has to be done once.
85
89
86
90
1. Run `sh scripts/gen-secrets.sh`
87
91
88
92
> [!NOTE]
89
93
> Once generated this script will not override secrets. Be careful when doing multiple tests.
90
94
91
-
#### Configuring let's encrypt.
95
+
#### Configuring let's encrypt
92
96
93
97
> [!IMPORTANT]
94
98
> Ensure you have password login available to the cluster. Let's encrypt will replace the API certificate in addition to the certificates to user with routes.
95
99
96
100
Trustee requires a trusted CA issued certificate. Let's Encrypt is included for environments without a trusted cert on OpenShift's routes.
97
101
98
102
If you need a Let's Encrypt certificate to be issued the `letsencrypt` application configuration needs to be changed as below.
103
+
99
104
```yaml
100
105
---
101
106
# Default configuration, safe for ARO
@@ -140,13 +145,15 @@ Red Hat a demo platform. This allows easy access for Red Hat associates and part
140
145
1. **NOTE: openshift installer must be updated regularly if you want to automatically provision the latest versions of OCP**
141
146
2. Get access to an [Azure Subscription Based Blank Open Environment](https://catalog.demo.redhat.com/catalog?category=Open_Environments&search=azure&item=babylon-catalog-prod%2Fazure-gpte.open-environment-azure-subscription.prod).
142
147
3. Import the required azure environmental variables (see coded block):
148
+
143
149
```shell
144
150
export GUID=
145
151
export CLIENT_ID=
146
152
export PASSWORD=
147
153
export TENANT=
148
154
export SUBSCRIPTION=
149
155
export RESOURCEGROUP=
156
+
150
157
```
151
158
1. Ensure Let's encrypt
152
159
1. Run the wrapper install script
@@ -171,12 +178,13 @@ Red Hat a demo platform. This allows easy access for Red Hat associates and part
0 commit comments