multi-tenancy-gitops icon indicating copy to clipboard operation
multi-tenancy-gitops copied to clipboard

Update `bootstrap.sh` script in cloud-native-toolkit-demos/multi-tenancy-gitops-mq to support Security & HA flags

Open osowski opened this issue 3 years ago • 1 comments

We need to update https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/scripts/bootstrap.sh to support flags for enabling Security and HA components respectively.

This is dependent upon https://github.com/cloud-native-toolkit/multi-tenancy-gitops/issues/105 being completed first.

Currently, the only "activations" required are for Security, but HA is dependent on Security being enabled.

The resources required to be activated for this include but may not limited to the following:

  • multi-tenancy-gitops-services/operators/cert-manager/operator.yaml installing the correct Marketplace version, and not the Community version
  • multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/2-services/kustomization.yaml
    • argocd/operators/cert-manager.yaml
    • argocd/instances/cert-manager-instance.yaml
  • multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/1-infra/kustomization.yaml
    • argocd/namespace-openldap.yaml
  • Items from https://github.com/cloud-native-toolkit/multi-tenancy-gitops/issues/105 in their respective namespaces.

osowski avatar Sep 03 '21 14:09 osowski

1. Activate OpenLDAP namespace via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/1-infra/kustomization.yaml#L10
2. Activate OpenLDAP instance via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/2-services/kustomization.yaml#L29
3. Activate CertManager Operator via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/2-services/kustomization.yaml#L31
4. Activate CertManager Instance via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/2-services/kustomization.yaml#L32
5. Activate all MQ-level CertIssuers and Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/3-apps/kustomization.yaml#L11
6. Activate CI Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/ci/kustomization.yaml#L2-L3 (only required if secured in that namespace)
7. Activate DEV Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/dev/kustomization.yaml#L2-L3 (only required if secured in that namespace)
8. Activate STAGING Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/staging/kustomization.yaml#L2-L3 (only required if secured in that namespace)
9. Activate PROD Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/prod/kustomization.yaml#L2-L3 (only required if secured in that namespace)
10. Once Hollis's current PR is merged, you will also need to activate the `mq-client-jks-password-secret` via uncomment similar to https://github.com/osowski-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/prod/kustomization.yaml#L4 

osowski avatar Sep 17 '21 13:09 osowski