Preparing the Environment on

Initializing the Jump Box

Mon, 01 Jan 0001 00:00:00 +0000

The Linux instance should be connected to the Kubernetes cluster. The following is the minimum system requirements to be configured for a Linux instance.

Software and Files Required for the Linux instance	Purpose	Link
Docker	Load the images into the repository	Install Docker Engine
Helm	Install Helm Charts	Install Helm
Kubectl	Connect to the Kubernetes cluster	Kubectl reference
AWS CLI	Manage AWS services	AWS Command Line Interface

Extracting the Installation Package

Mon, 01 Jan 0001 00:00:00 +0000

This section describes the steps to download and extract the installation package for the REST protector.

To download the installation package:

Download the REST_RHUBI-9-64_x86-64_K8S_<Version>.tgz file on the Linux instance.
Run the following command to extract the files from the REST_RHUBI-9-64_x86-64_K8S_<Version>.tgz file.

tar -xvf REST_RHUBI-9-64_x86-64_K8S_<Version>.tgz

The signatures directory and the REST_RHUBI-9-64_x86-64_K8S_<Version>.tgz fileare extracted.
Run the following command to extract the files from the REST_RHUBI-9-64_x86-64_K8S_<Version>.tgz file.

tar -xvf REST_RHUBI-9-64_x86-64_K8S_<Version>.tgz

The following directories and files are extracted:

Creating Certificates

Mon, 01 Jan 0001 00:00:00 +0000

This section describes the steps to create certificates required for secure communication. These certificates are for secure communication between:

ESA and the RPP.
RPP and the protector.
KMSProxy and the protector.
REST protector and the curl client.

To download the installation package:

Navigate to the directory where you have extracted the installation package.
Navigate to the certs directory. The following files are available:
- CertificatesSetup_Linux_x64_<Version>tgz - Download the certificates from the ESA. You can use them as the common certificates in the dynamic deployment between the RPProxy and the ESA, and between the RPProxy and the protector. You can also use these certificates separately as the upstream certificate between the ESA and RPProxy in the dynamic deployment.
- CreateCertificate_Linux_x64_<Version>.tgz - Generate self-signed client and server certificates. In the Dynamic method, these certificates are used for communication between RPProxy and the protector, and the REST protector and the curl client. In the Static policy method, these certificates are used for communication between KMSProxy and the protector, and the REST protector and the curl client. Customers can choose to use their own certificates.
Extract both the packages using the following command.

Uploading the Images to the Container Repository

Mon, 01 Jan 0001 00:00:00 +0000

Before you begin, ensure that you have set up your Container Registry.

To upload the images to the Container Repository:

Install Docker on the Linux instance.

For more information about installing Docker on a Linux machine, refer to the Docker documentation.
Run the following command to authenticate your Docker client to Amazon ECR.

aws ecr get-login-password --region <Name of ECR region where you want to upload the container image> | docker login --username AWS --password-stdin <aws_account_id>.dkr.ecr.<Name of ECR region where you want to upload the container image>.amazonaws.com