Creating the OpenShift Environment

This section describes how to create the OpenShift runtime environment.

Prerequisites

Before creating the runtime environment on OpenShift, ensure that you have a valid OpenShift account and the following information:

• Login URL for the OpenShift account
• Authentication credentials for the OpenShift account

Audience

It is recommended that you have working knowledge of OpenShift.

Logging in to the OpenShift environment

This section describes how you can login to the OpenShift environment.

To log in to the OpenShift environment:

1. Access OpenShift at the following URL: https://<OpenShift Console URL>/dashboards

2. Click Sign In to the Console. The Sign in screen appears.

3. Enter the following details:

   • User name
   • Password

4. Click Log In. After successful authentication, the Dashboard screen appears.

Creating secrets

This section describes how to create the Kubernetes secretes required for the OpenShift deployment.

1. On the Linux instance, navigate to the location where you have extracted the Helm charts.

2. Run the following command to create a Kubernetes secret for accessing the image registry using existing Docker credentials.

oc create secret generic regcred --from-file=.dockerconfigjson=<PATH_TO_DOCKER_CONF
IG>/config.json --type=kubernetes.io/dockerconfigjson --namespace <NAMESPACE>

For example:

oc create secret generic regcred --from-file=.dockerconfigjson=<PATH_TO_DOCKER_CONF
IG>/config.json --type=kubernetes.io/dockerconfigjson --namespace iap-rest

3. Create a credentials file using the following format and ensure that you specify the required values for accessing the AWS.

[default]

aws_access_key_id = <AWS_ACCESS_KEY_ID>

aws_secret_access_key = <AWS_SECRET_ACCESS_KEY>

aws_session_token = <AWS_SESSION_TOKEN>

region = us-east-1

4. Create the Kubernetes secret for accessing the AWS KMS using the credentials file created in step 3.

oc -n <NAMESPACE> create secret generic pty-aws-credentials --from-file=credentials=./credentials