ข้ามไปยังเนื้อหา
เอกสารคู่มือ

This is the Experimental version (Latest). It is under active development and may change. For the most reliable documentation, use the version selector in the top-right to switch to Stable, or click here to go to the Stable version's homepage.

Opstella Installation Overview

อัพเดทล่าสุด:

เนื้อหานี้ยังไม่มีในภาษาของคุณ

Opstella will be on 🟢 Management Kubernetes Cluster.

Certain Services will be installed across Kuberenetes Clusters

  • 🟢 Management Kubernetes Cluster
  • 🟦 Non-Production Workload Kubernetes Cluster
  • 🟥 Production Workload Kubernetes Cluster

Application Dependencies

Section titled “Application Dependencies”
  • 📦PostgreSQL SQL Database
  • 📦Redis Pub/Sub Service and In-Memory Cache
  • 📦Dapr Microservices Backing Service

Prerequisites

Section titled “Prerequisites”
  • 🔑 Google Service Account Key (JSON)
    • Download the JSON key file provided by Opstella Support.
    • This key will be used to authenticate with Google Artifact Registry.
  • 🔑Pull Credentials from Registry (Harbor, For Air-Gapped Environment).

Summary

Section titled “Summary”

Opstella compose of multiple services which can be summarise by the following

No.ToolDescriptionKubernetes NamespaceKubernetes Cluster
1.PostgreSQLDatabase Serviceopstella-system🟢 Management
2.RedisPub/Sub Service and In-Memory Cacheopstella-system🟢 Management
3.DaprOpstella Platform Microservices Backing Servicedapr-system🟢 Management
4.Dapr ConfigurationConfiguration for Opstella Platformopstella-system🟢 Management
5.Opstella UIFrontend Serviceopstella-system🟢 Management
6.Opstella CoreBackend Serviceopstella-system🟢 Management
7.Opstella Clear SessionMicroservice - Clear User Session with Single Sign-On Processopstella-system
🟢 Management 🟢 Management 🟦 Non-Production Workload 🟥 Production Workload
8.Opstella Worker-GitLabMicroservice - GitLab Managementopstella-system🟢 Management
9.Opstella Worker-GrafanaMicroservice - Grafana Managementopstella-system🟢 Management
10.Opstella Worker-HarborMicroservice - Harbor Managementopstella-system🟢 Management
11.Opstella Worker-KubernetesMicroservice - Kubernetes Managementopstella-system🟢 Management
12.Opstella Worker-KeycloakMicroservice - Keycloak Managementopstella-system🟢 Management
13.Opstella Worker-SonarqubeMicroservice - Sonarqube Managementopstella-system🟢 Management
14.Opstella Worker-VaultMicroservice - Vault Managementopstella-system🟢 Management
15.Opstella Worker-ArgoCDMicroservice - ArgoCD Managementopstella-system🟢 Management
16.Opstella Worker-DefectDojoMicroservice - DefectDojo Managementopstella-system🟢 Management
17.Opstella Worker-HeadlampMicroservice - Headlamp Managementopstella-system🟢 Management
18.New Opstella Kubernetes Integration (ok8s-integration)Opstella Kubernetes Integration Systemopstella-system🟢 Management

Preparation

Section titled “Preparation”

Create Namespace across Kubernetes Clusters

Section titled “Create Namespace across Kubernetes Clusters”

🟢 Management Kubernetes Cluster

Section titled “🟢 Management Kubernetes Cluster”

  1. Connect to 🟢 Management Kubernetes Cluster ; i.e w/ Kubeconfig File

    Set Kubeconfig File

    Ensure you have defined and loaded your Global Shell Variables as described in Shell Variables.

    Terminal window
    source $HOME/opstella-installation/shell-values/kubernetes/management_cluster.vars.sh

  2. Create Kubernetes Namespace dapr-system

    2.1 Create Kubernetes Namespace

    Terminal window
    kubectl create namespace dapr-system

    2.2 Add Label for dapr-system namespace for PSA Exception

    AS OF SEP 2024: Dapr is not yet fully compliant to PSA restricted profile, and require to make an exception

    Terminal window
    kubectl label namespace/dapr-system pod-security.kubernetes.io/enforce=baseline
    kubectl label namespace/dapr-system pod-security.kubernetes.io/enforce-version=latest

  3. Create Kubernetes Namespace opstella-system

    Terminal window
    kubectl create namespace opstella-system

  4. Create Kubernetes Namespace opstella-shared-runner

    4.1 Create Kubernetes Namespace

    Terminal window
    kubectl create namespace opstella-shared-runner

    4.2 Add Label for opstella-shared-runner namespace for PSA Exception

    Terminal window
    kubectl label namespace/opstella-shared-runner pod-security.kubernetes.io/enforce=privileged
    kubectl label namespace/opstella-shared-runner pod-security.kubernetes.io/enforce-version=latest

  5. Create Kubernetes Secret for TLS Certificate in Namespace opstella-system, before you proceed (if you not have it done).

🟢 Management Kubernetes Cluster

Section titled “🟢 Management Kubernetes Cluster”

  1. Connect to 🟢 Management Kubernetes Cluster ; i.e w/ Kubeconfig File

    Ensure you have defined and loaded your Global Shell Variables as described in Shell Variables.

    Terminal window
    source $HOME/opstella-installation/shell-values/kubernetes/management_cluster.vars.sh

  2. Create Kubernetes Namespace opstella-system

    Terminal window
    kubectl create namespace opstella-system

🟦 Non-Production Workload Kubernetes Cluster

Section titled “🟦 Non-Production Workload Kubernetes Cluster”

  1. Connect to 🟦 Non-Production Workload Kubernetes Cluster ; i.e w/ Kubeconfig File

    Ensure you have defined and loaded your Global Shell Variables as described in Shell Variables.

    Terminal window
    source $HOME/opstella-installation/shell-values/kubernetes/nonprod_cluster.vars.sh

  2. Create Kubernetes Namespace opstella-system

    Terminal window
    kubectl create namespace opstella-system

🟥 Production Workload Kubernetes Cluster

Section titled “🟥 Production Workload Kubernetes Cluster”

  1. Connect to 🟥 Production Workload Kubernetes Cluster ; i.e w/ Kubeconfig File

    Ensure you have defined and loaded your Global Shell Variables as described in Shell Variables.

    Terminal window
    source $HOME/opstella-installation/shell-values/kubernetes/prod_cluster.vars.sh

  2. Create Kubernetes Namespace opstella-system

    Terminal window
    kubectl create namespace opstella-system

Finished?

Use the below navigation to proceed