Langkau ke kandungan utama

Langkah 6 - Pasang dan konfigurasikan komponen prasyarat

Kini setelah anda mempunyai akses kepada carta Helm, ia boleh digunakan.

  • Mula-mula pasang komponen prasyarat:
# Install rabbitMQ cluster operator
helm upgrade --install rabbitmq-cluster-operator oci://glasswallhub.azurecr.io/docker/bitnamicharts/rabbitmq-cluster-operator \
--atomic \
--version 4.4.23 \
--set global.imageRegistry=glasswallhub.azurecr.io \
--set global.imagePullSecrets[0]=acr-secret \
--set global.security.allowInsecureImages=true \
--set msgTopologyOperator.fullnameOverride=rabbitmq-messaging-topology-operator \
--set clusterOperator.image.tag=2.15.0-debian-12-r0 \
--set msgTopologyOperator.image.tag=1.17.2-debian-12-r0 \
--set credentialUpdaterImage.tag=1.0.7-debian-12-r0 \
--set rabbitmqImage.tag=4.1.1-debian-12-r2 \
--set clusterOperator.watchAllNamespaces=false \
--set clusterOperator.watchNamespaces={cdrplatform} \
--set msgTopologyOperator.watchAllNamespaces=false \
--set msgTopologyOperator.watchNamespaces={cdrplatform} \
--set clusterOperator.resources.requests.cpu=100m \
--set clusterOperator.resources.requests.memory=256Mi \
--set clusterOperator.resources.limits.cpu=100m \
--set clusterOperator.resources.limits.memory=256Mi \
--set msgTopologyOperator.resources.requests.cpu=100m \
--set msgTopologyOperator.resources.requests.memory=256Mi \
--set msgTopologyOperator.resources.limits.cpu=100m \
--set msgTopologyOperator.resources.limits.memory=256Mi

# Install keda
helm upgrade --install keda "oci://glasswallhub.azurecr.io/ghcr/home-operations/charts-mirror/keda" --atomic \
--set global.image.registry="glasswallhub.azurecr.io/ghcr" \
--set imagePullSecrets[0].name=acr-secret \
--version 2.17.2

# Install nginx ingress controller
helm upgrade --install nginx-ingress oci://glasswallhub.azurecr.io/k8s/ingress-nginx/charts/ingress-nginx --atomic \
--set imagePullSecrets[0].name=acr-secret \
--set global.image.registry="glasswallhub.azurecr.io" \
--set controller.image.image="k8s/ingress-nginx/controller" \
--set controller.admissionWebhooks.patch.image.image="k8s/ingress-nginx/kube-webhook-certgen" \
--set controller.image.digest=null \
--set controller.admissionWebhooks.patch.image.digest=null \
--set controller.service.annotations."service\.beta\.kubernetes\.io/azure-load-balancer-health-probe-request-path"=/healthz \
--version 4.12.8

# Install External Secrets Operator
helm upgrade --install external-secrets oci://glasswallhub.azurecr.io/ghcr/external-secrets/charts/external-secrets \
--set imagePullSecrets[0].name=acr-secret \
--set webhook.imagePullSecrets[0].name=acr-secret \
--set certController.imagePullSecrets[0].name=acr-secret \
--set image.repository="glasswallhub.azurecr.io/ghcr/external-secrets/external-secrets" \
--set webhook.image.repository="glasswallhub.azurecr.io/ghcr/external-secrets/external-secrets" \
--set certController.image.repository="glasswallhub.azurecr.io/ghcr/external-secrets/external-secrets" \
--version 0.16.1 \
--set image.tag=v0.9.11 \
--set installCRDs=true \
--atomic

# Install Glasswall Halo External Secrets
helm upgrade --install cdrplatform-external-secrets cdrplatform-external-secrets -n cdrplatform --atomic --create-namespace \
--set cloud_providers.oracle.enabled=true \
--set cloud_providers.oracle.vault=${vault_ocid} \
--set cloud_providers.oracle.region=${oracle_region} \
--set cloud_providers.oracle.secretName="${vault_secret_name}"

# Install MongoDB kubernetes operator

helm install community-operator mongodb/community-operator --namespace ${operator_namespace} \
--set operator.version=0.13.0 \
--set agent.version=12.0.25.7724-1 \
--atomic

Nota: apabila menaik taraf carta Helm rabbitmq-cluster-operator, CRD tidak akan dipasang. Jika CRD baharu diperkenalkan dalam keluaran baharu, CRD tersebut perlu dipasang secara manual untuk mengelakkan isu dengan pod operator kluster RabbitMQ yang sedang berjalan.

helm pull bitnami/rabbitmq-cluster-operator --untar
kubectl apply -f rabbitmq-cluster-operator/crds/
  • Kemudian, pasang komponen sokongan.

Disebabkan ketidakselarasan dalam OCI API, awalan bagi nilai availability_domain perlu digugurkan untuk arahan di bawah.

Contohnya, untuk nilai UyoZ:UK-LONDON-1-AD-1 hanya UK-LONDON-1-AD-1 diperlukan.

helm upgrade --install cdrplatform-storage cdrplatform-storage -n cdrplatform --wait --atomic \
--set cloud_provider=oracle \
--set oracle.fss.availability_domain=${availability_domain} \
--set oracle.fss.mount_target_ocid=${mount_target_ocid}

helm upgrade --install cdrplatform-rabbitmq cdrplatform-rabbitmq -n cdrplatform \
--set image.registry=glasswallhub.azurecr.io \
--set image.tag=160215 \
--set cloud_provider=oracle