Deploy OpenIAM to OpenShift cluster with Helm

The documentation pertaining to deploying OpenIAM to Kubernetes can be found here.

This repository contains all the necessary code to deploy to the above-mentioned platforms, using Helm.

To check out the repository use the following command.

git clone git@bitbucket.org:openiam/kubernetes-docker-configuration.git
cd kubernetes-docker-configuration
git checkout RELEASE-4.2.1.4

Deploying to OpenShift with Helm

The example steps below are shown for Ubuntu 20.04.

1. Install Helm v3.3.4 using the following command.

https://github.com/helm/helm/releases/tag/v3.3.4

For Linux:

• Download Helm

https://get.helm.sh/helm-v3.3.4-linux-amd64.tar.gz

• Unpack it by running the following.

tar -zxvf helm-v3.3.4-linux-amd64.tar.gz

Find the Helm binary in the unpacked directory, and move it to its desired destination, e.g. mv linux-amd64/helm /usr/local/bin/helm.

2. Log in into az.

az login

You will be redirected to Microsoft’s login page in browser. After successfully logging in you will see the following message.

The default web browser has been opened at https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize. Please continue the login in the web browser. If no web browser is available or if the web browser fails to open, use device code flow with `az login --use-device-code`.

[
  {
    "cloudName": "AzureCloud",
    "homeTenantId": "***************************",
    "id": "***************************",
    "isDefault": true,
    "managedByTenants": [],
    "name": "***************************",
    "state": "Enabled",
    "tenantId": "***************************",
    "user": {
      "name": "***************************",
      "type": "user"
    }
  }
]

3. Log in into oc, by running the following.

oc login

You will get the following message.

You must obtain an API token by visiting https://oauth-openshift.apps.********.********.aroapp.io/oauth/token/request

Go to page and get the login command with API token. It will look as follows.

oc login --token=sha256~****************** --server=https://api.********.************.aroapp.io:6443

After a successful authentication, you will see the following message.

Logged into "https://api.********.***********.aroapp.io:6443" as "kube:admin" using the token provided.

You have access to 65 projects, the list has been suppressed. You can list all projects using 'oc projects'

Using project "default".

1. Run the startup script. Make sure to check the deployment steps in the document before running a deploy script.

Set required properties in kubernetes-docker-configuration/openshift/helm/linux/set_env.sh.

cd kubernetes-docker-configuration/openshift/helm/linux

./setup-helm.sh