Deployment of CNC Console IAM

Table 4-2 Deployment of CNC Console IAM

Step.No Procedure Description
1 Search helm chart Execute the following command to check the version of the helm chart installation.
helm search <deployment_name>
Example: helm search cncc-iam
 
NAME                  CHART VERSION APP VERSION  DESCRIPTION
ocspf-helm-repo/cncc-iam  3.0.0        8.0.1     Open Source Identity and Access 
                                                 Management For Modern App
2 Prepare custom-cncc-iam_values_<version>.yaml file Prepare a custom-cncc-iam_values_<version>.yamlfile with the required parameter information.
3 Deploy cncc-iam Installation using helm repository

Execute the following command:

helm install <helm-repo> -f <custom-cncc-iam_values_<version>.yaml --name <deployment_name> --namespace <namespace_name> -- version <helm_version>

Where:

helm-repo: repository name where the helm images, charts are stored

values: helm configuration file which needs to be updated based on the docker registry

deployment_name and namespace_name : depends on customer configuration

Example: helm install ocscp-helm-repo/ocscp -f custom-cncc-iam_values_1.1.0.yaml --name cncc-iam --namespace cncc-iam --version 1.1.0

Note: Update dbVendor, dbHost , dbName fields in custom-cncc-iam_values_<version>.yaml

Example:
dbVendor: mysql 
dbName: cnccdb 
dbHost: mysql-sds.default.svc.cluster.local 
dbPort: 3306

Note: DB must be created before its DB account name is mentioned.

Installation using helm tar

Execute the following command:

helm install -f custom-cncc-iam_values_<version>.yaml --name cncc-iam --namespace <namespace> <chartpath>./<chart>.tgz

Example:helm install -f custom-cncc-iam_values_1.1.0.yaml --name cncc-iam --namespace cncc-iam ./cncc-iam.tgz

4 Check repository status Execute the following command to check the deployment status.

helm status <deployment_name>

5 Check service status Check if all the services are deployed and running:

kubectl -n <namespace_name> get services

Example:

$ kubectl -n cncc get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
cncc-iam-headless ClusterIP None <none> 8285/TCP,8443/TCP 9m13s
cncc-iam-http ClusterIP 10.233.25.75 <none> 8285/TCP,8443/TCP 9m13s
cncc-iam-ingress-gateway LoadBalancer 10.233.7.236 10.75.182.72 8080:30346/TCP,5701:32182/TCP 9m13s
6 Check pod status Check if all the pods are up and running by executing the following command:

kubectl -n <namespace_name> get pods

Example:

$ kubectl -n cncc get pods
NAME READY STATUS RESTARTS AGE
cncc-iam-0 1/1 Running 0 44h
cncc-iam-ingress-gateway-6748d55f98-szdqm 1/1 Running 0 12h