Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

A POC that works in Openshift #82

Closed
wants to merge 1 commit into from
Closed

Conversation

doodlesbykumbi
Copy link
Contributor

@doodlesbykumbi doodlesbykumbi commented Oct 6, 2020

This branch works in OpenShift. It also explores relying on the Bitnami Postgres chart as opposed to rolling our own.
Below are the steps to deploy Postgres then Conjur:

# install Postgres first
PG_PASSWORD=0mbkLSg9ah
PG_NAMESPACE=my-pg-namespace

helm install my-release bitnami/postgresql
kubectl create namespace "${PG_NAMESPACE}"
helm install \
  -n "${PG_NAMESPACE}" \
  --set persistence.enabled="false" \
  --set volumePermissions.securityContext.runAsUser="auto" \
  --set securityContext.enabled=false \
  --set postgresqlPassword=${PG_PASSWORD} \
  --set containerSecurityContext.enabled=false \
  --set shmVolume.chmod.enabled=false \
  my-release bitnami/postgresql


# DATA_KEY can also be generated with DATA_KEY="$(docker run --rm cyberark/conjur data-key generate)"
DATA_KEY="UYyZPDWngzZ9o3eC5+eGGowNofXfSXfKRvqjsaf2FH4="
CONJUR_NAMESPACE=my-conjur-namespace

kubectl create namespace "${CONJUR_NAMESPACE}"
helm install \
   -n "${CONJUR_NAMESPACE}" \
   --set dataKey="${DATA_KEY}" \
   --set image.repository=guygiat/conjur-oss-ocp \
   --set image.tag=latest \
   --set image.pullPolicy=IfNotPresent \
   --set nginx.image.repository=guygiat/nginx-oss \
   --set nginx.image.tag=latest \
   --set nginx.image.pullPolicy=IfNotPresent \
   --set database.url=postgres://postgres:${PG_PASSWORD}@my-release-postgresql.${PG_NAMESPACE}.svc.cluster.local:5432/postgres \
   conjur-oss .

@izgeri
Copy link
Contributor

izgeri commented Oct 6, 2020

@doodlesbykumbi how is this different than the draft that @guygiat has in #71?

@doodlesbykumbi
Copy link
Contributor Author

@izgeri Not different at all. I cherrypicked, from @guygiat's PR, the stuff I needed to prove out the case I was interested in. Wanted to quickly prove that the chart can work in Openshift with PG running via the bitnami/postgresql chart. The goal is captured in this follow up PR, #83.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants