Deploying to Kubernetes
OpenIAM can be deployed to Kubernetes. Out-of-the-box, OpenIAM supports deployment to:
- AWS EKS.
- Google GKE.
- A private Kubernetes cluster.
There are several ways to install OpenIAM on Kubernetes. The options are described below along with additional steps required after deployment.
| Installation Option | Description |
|---|---|
| Common installation scenario | A standard installation scenario. It installs OpenIAM to a manually preinstalled AKS, with all infrastructure services internal. |
| Deploying with Terraform | Describes how to install OpenIAM using both Helm and Terraform. |
| Deploying without Terraform | Describes how to install OpenIAM using Helm without Terraform. |
| Installation on Kubernetes platforms | Installs OpenIAM along with the Kubernetes cluster, external database, external Redis service, and all required infrastructure resources such as networks and subnets. Typically used when a customer manually creates these resources on a platform. |
| Configuring HTTPS | Describes how to configure HTTPS in a Kubernetes environment. |
| Configuring a RabbitMQ TLS directory | Explains how to configure the RabbitMQ TLS directory in a Kubernetes environment. |
| Upgrading to newer OpenIAM versions | Provides instructions on upgrading OpenIAM from an older 4.2.1.x version to the latest release. |
| Backing up and restoring the Vault unseal keys | Describes how to back up and restore vault unseal keys in case they are lost or destroyed. |