multi-tenancy-gitops
multi-tenancy-gitops copied to clipboard
Update `bootstrap.sh` script in cloud-native-toolkit-demos/multi-tenancy-gitops-mq to support Security & HA flags
We need to update https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/scripts/bootstrap.sh to support flags for enabling Security and HA components respectively.
This is dependent upon https://github.com/cloud-native-toolkit/multi-tenancy-gitops/issues/105 being completed first.
Currently, the only "activations" required are for Security, but HA is dependent on Security being enabled.
The resources required to be activated for this include but may not limited to the following:
-
multi-tenancy-gitops-services/operators/cert-manager/operator.yamlinstalling the correct Marketplace version, and not the Community version -
multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/2-services/kustomization.yaml-
argocd/operators/cert-manager.yaml -
argocd/instances/cert-manager-instance.yaml
-
-
multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/1-infra/kustomization.yaml-
argocd/namespace-openldap.yaml
-
- Items from https://github.com/cloud-native-toolkit/multi-tenancy-gitops/issues/105 in their respective namespaces.
1. Activate OpenLDAP namespace via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/1-infra/kustomization.yaml#L10
2. Activate OpenLDAP instance via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/2-services/kustomization.yaml#L29
3. Activate CertManager Operator via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/2-services/kustomization.yaml#L31
4. Activate CertManager Instance via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/2-services/kustomization.yaml#L32
5. Activate all MQ-level CertIssuers and Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-mq/blob/ocp47-2021-2/0-bootstrap/argocd/single-cluster/3-apps/kustomization.yaml#L11
6. Activate CI Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/ci/kustomization.yaml#L2-L3 (only required if secured in that namespace)
7. Activate DEV Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/dev/kustomization.yaml#L2-L3 (only required if secured in that namespace)
8. Activate STAGING Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/staging/kustomization.yaml#L2-L3 (only required if secured in that namespace)
9. Activate PROD Certificates via uncomment https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/prod/kustomization.yaml#L2-L3 (only required if secured in that namespace)
10. Once Hollis's current PR is merged, you will also need to activate the `mq-client-jks-password-secret` via uncomment similar to https://github.com/osowski-demos/multi-tenancy-gitops-apps/blob/ocp47-2021-2/mq/environments/prod/kustomization.yaml#L4