Adding to system services

If you change certificates (to intermediate, ACME, Let’s Encrypt) in the management cluster, an update is always required:

• “Platform software control module” (shturval-backend);
• “Platform graphic control module” (shturval-frontend);
• “Authentication management module” (shturval-auth).

When services such as ArgoCD, Grafana are running in the cluster, then when adding an intermediate or ACME certificate to the cluster, customvalues ​​must be configured in these system services (shturvalserviceconfigs). This will ensure that authorization works correctly when switching to services from the cluster.

For management cluster #

Backend, Frontend, Auth #

1. Prepare resource manifests ShturvalServicePatch for application to specifications (ssc) ModuleI software management of the Platform (shturval-backend), Graphical management module of the Platform (shturval-frontend), Authentication management module (shturval-auth). In the customvalues block, add parameters as in the examples below.

apiVersion: ops.shturval.tech/v1beta2
kind: ShturvalServicePatch
metadata:
  name: <resource name>
spec:
  shturvalServiceConfigName: shturval-backend
  customvalues:
    tls:
      enabled: true
      backend_tls_secretname: <your parameter value>
      cluster_issuer_name: <your parameter value>

apiVersion: ops.shturval.tech/v1beta2
kind: ShturvalServicePatch
metadata:
  name: <resource name>
spec:
  shturvalServiceConfigName: shturval-frontend
  customvalues:
    tls:
      enabled: true
      front_tls_secretname: <your parameter value>
      docs_tls_secretname: <your parameter value>
      cluster_issuer_name: <your parameter value>

apiVersion: ops.shturval.tech/v1beta2
kind: ShturvalServicePatch
metadata:
  name: <resource name>
spec:
  shturvalServiceConfigName: shturval-auth
  customvalues:
    tls:
      enabled: true
      auth_tls_secretname: <your parameter value>
      cluster_issuer_name: <your parameter value>

2. Load the prepared ShturvalServicePatches using manifest import. To do this:

• Click on the manifest import icon located to the left of the user name. Upload files or drag ShturvalServicePatch manifests into the window that opens. Verify and click Download.

3. To view the applied manifests, go to the Services and repositories section and open the Installed services page, go to management:

• Platform software control module (shturval-backend). The Applied PatchSSC tab will display the loaded ShturvalServicePatch.

• Platform graphic control module (shturval-frontend). The Applied PatchSSC tab will display the loaded ShturvalServicePatch.

• Authentication management module (shturval-auth). The Applied PatchSSC tab will display the loaded ShturvalServicePatch.

Grafana #

1. Prepare a ShturvalServicePatch manifest to apply to the Grafana Metrics Graphics Module (shturval-dashboards) specification (ssc). Add parameters to the customvalues block, as in the example given.

apiVersion: ops.shturval.tech/v1beta2
kind: ShturvalServicePatch
metadata:
  name: <resource name> 
spec:
  shturvalServiceConfigName: shturval-dashboards
  customvalues:
    grafana.ini:
      security:
        cookie_secure: true
      auth.generic_oauth:
        tls_skip_verify_insecure: true
    ingress:
      annotations:
        cert-manager.io/cluster-issuer: <your parameter value> 
      enabled: true
      tls:
      - hosts:
        - <your parameter value> 
        secretName: <your parameter value> 

2. Upload the prepared ShturvalServicePatch for shturval-dashboards to the management cluster using manifest import. To do this:

• Click on the manifest import icon located to the left of the user name. Upload the file or drag the manifest of the created ShturvalServicePatch into the window that opens. Verify and click Download.

3. After downloading the manifest, from the Services and repositories section, open the Installed services page, find Graphical metrics display module (Grafana) (shturval-dashboards) and go to management. The Applied PatchSSC tab will display the loaded ShturvalServicePatch.

For any cluster type #

###ArgoCD

1. Prepare a ShturvalServicePatch manifest to apply to the Application Continuous Delivery (ArgoCD) specification (ssc) (shturval-cd).Add parameters to the customvalues block, as in the example given.

apiVersion: ops.shturval.tech/v1beta2
kind: ShturvalServicePatch
metadata:
  name: <resource name>
spec:
  shturvalServiceConfigName:  shturval-cd
  customvalues:
    server:
      ingress:
        annotations:
          cert-manager.io/cluster-issuer: <your parameter value> 
        enabled: true
        hostname: <your parameter value>
        path: /
        pathType: Prefix
        tls: true

2. Upload the prepared ShturvalServicePatch for shturval-dashboards to the cluster using manifest import. To do this:

• Click on the manifest import icon located to the left of the user name. Upload the file or drag the manifest of the created ShturvalServicePatch into the window that opens. Verify and click Download.

3. After downloading the manifest, from the Services and Repositories section, open the Installed Services page, find the Continuous Application Delivery Module (ArgoCD) (shturval-cd) and go to management. The Applied PatchSSC tab will display the downloadedShturvalServicePatch.