Platform Installation¶

Prerequisites¶

Kubernetes 1.14+ with RBAC enabled

Helm 2.14+

Install core components¶

Use Git to clone DigitalHub Platform repository

1	$ git clone https://github.com/scc-digitalhub/platformdocs.git

nginx-ingress¶

nginx-ingress is an Ingress controller that uses ConfigMap to store the nginx configuration.

Create an ingress controller¶

$ kubectl create namespace ingress
 $ helm install --namespace ingress --name my-release stable/nginx-ingress

During the installation, a public IP address is created for the ingress controller.

To get the public IP address use the following command:

$ kubectl get service --namespace ingress

 NAME                                    TYPE           CLUSTER-IP     EXTERNAL-IP        PORT(S)                                     AGE
 my-release-ingress-controller           LoadBalancer   10.0.147.113   YOUR_EXTERNAL_IP   80:30058/TCP,443:32725/TCP                  26d
 my-release-ingress-controller-metrics   ClusterIP      10.0.48.136    <none>             9913/TCP                                    25d
 my-release-ingress-default-backend      ClusterIP      10.0.190.184   <none>             80/TCP                                      26d

cert-manager¶

cert-manager is a Kubernetes addon to automate the management and issuance of TLS certificates from various issuing sources.

Installing with Helm¶

Install the CustomResourceDefinition from jetstack repo.

$ kubectl apply --validate=false -f https://raw.githubusercontent.com/jetstack/cert-manager/v0.13.0/deploy/manifests/00-crds.yaml

Create cert-manager namespace.

$ kubectl create namespace cert-manager

Add the jetstack helm repository

$ helm repo add jetstack https://charts.jetstack.io

Update your local Helm chart repository cache.

$ helm repo update

Install cert-manager with helm.

$ helm install \
--name cert-manager \
--namespace cert-manager \
--version v0.13.0 \
jetstack/cert-manager

Check in cert-manager namespace if all pods are up & running

$ kubectl get pods -n cert-manager
NAME                                       READY   STATUS    RESTARTS   AGE
cert-manager-587dc68fc4-kp8hk              1/1     Running   0          3h4m
cert-manager-cainjector-67ff67fd45-vws89   1/1     Running   0          3h4m
cert-manager-webhook-5c8cf6d9d4-8lv6p      1/1     Running   0          3h4m

Create ClusterIssuer definition.

$ cat <<EOF > clusterissuer-test.yaml
apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging
spec:
  acme:
    # You must replace this email address with your own.
    # Let's Encrypt will use this to contact you about expiring
    # certificates, and issues related to your account.
    email: user@example.com
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      # Secret resource used to store the account's private key.
      name: example-issuer-account-key
    # Add a single challenge solver, HTTP01 using nginx
    solvers:
    - http01:
        ingress:
          class: nginx
EOF

Install ClusterIssuer.

$ kubectl apply -f clusterissuer-test.yaml

Install MySQL¶

Create one secret with init script e another with root credentials.

$ kubectl create secret generic mysql-dbscripts --from-file=mysql/init-scripts/
 $ kubectl create secret generic mysql-db-ps --from-literal=rootps=rootpassword

Deploy MySQL container.

$ kubectl apply -f mysql/

Install PostgreSQL¶

Create one secret with init script e another with root credentials.

$ kubectl create secret generic postgres-dbscripts --from-file=postgresql/init-scripts/
 $ kubectl create secret generic postgresscrt  --from-literal=user=rootuser --from-literal=ps=rootpassword

Deploy PostgreSQL container.

$ kubectl apply -f postgresql/

Install platform components¶

AAC¶

Configuration¶

Configure AAC using environment variables in aac/aac-configmap.yaml file.

See documentation for details: https://digitalhub.readthedocs.io/en/latest/docs/service/aac.html

Installation¶

$ kubectl apply -f aac/

Org-Manager¶

Configuration¶

Configure Org-Manager using environment variables in org-manager/org-manager-configmap.yaml file.

See documentation for details: https://digitalhub.readthedocs.io/en/latest/docs/service/orgman.html

Installation¶

$ kubectl apply -f org-manager/

WSO2 API Manager with APIM-Analytics¶

1. APIM-Analytics¶

Configuration¶

Configure APIM-Analytics using environment variables in apim-analytics/apim-analytics-configmap.yml file.

See documentation for details: https://digitalhub.readthedocs.io/en/latest/docs/service/apim.html

Installation¶

$ kubectl apply -f apim-analytics/

2. API-Manager¶

Configuration¶

Configure API-Manager using environment variables in api-manager/apim-configmap.yml file.

See documentation for details: https://digitalhub.readthedocs.io/en/latest/docs/service/apim.html

Installation¶

$ kubectl apply -f api-manager/

Dremio¶

Configuration¶

Configure Dremio using environment variables in dremio/dremio-configmap.yaml file.

See documentation for details: https://digitalhub.readthedocs.io/en/latest/docs/data/dremio.html

Installation¶

$ kubectl apply -f dremio/

Dss¶

Configuration¶

Configure Dss using environment variables in dss/dss-configmap.yaml file.

See documentation for details: https://digitalhub.readthedocs.io/en/latest/docs/data/dss.html

Installation¶

$ kubectl apply -f dss/

JupyterHub¶

Installation & Configuration¶

Install JupyterHub using Helm Chart.

$ helm repo add jupyterhub https://jupyterhub.github.io/helm-chart/
 $ helm repo update
 $ helm install --name jupyterhub --namespace jupyterhub jupyterhub/jupyterhub --values config.yaml

The JupyterHub Helm chart is configurable by values in your config.yaml.

See documentation for details: https://zero-to-jupyterhub.readthedocs.io/en/latest/

Minio¶

Installation & Configuration¶

Install Minio using Helm Chart.

$ helm install --name minio --namespace minio stable/minio --values values.yaml

The Minio Helm chart is configurable by values in your values.yaml.

See documentation for details: https://docs.min.io/docs/deploy-minio-on-kubernetes.html

Nifi¶

Configuration¶

Use the tls-toolkit command line utility to automatically generate the required keystores, truststore.

See documentation for details: https://nifi.apache.org/docs/nifi-docs/html/toolkit-guide.html#tls_toolkit

Create a Secret that holds both keystore and truststore.

$ kubectl create secret generic nifi-keystore --from-file=keystore.jks --from-file=truststore.jks

Installation¶

$ kubectl apply -f nifi/

Nuclio with OAuth2_Proxy¶

1. Nuclio¶

Install Nuclio using Helm Chart.

$ helm repo add nuclio https://nuclio.github.io/nuclio/charts
 $ helm repo update
 $ helm install --namespace nuclio --name nuclio nuclio/nuclio --values values.yaml

The Nuclio Helm chart is configurable by values in your values.yaml.

See documentation for details: https://github.com/nuclio/nuclio/tree/master/hack/k8s/helm/nuclio