Merge pull request #53 from djkormo/example-installation

Example installation
djkormo · Feb 8, 2024 · 42429a0 · 42429a0
2 parents 44277b2 + c28e3e6
commit 42429a0
Show file tree

Hide file tree

Showing 13 changed files with 680 additions and 0 deletions.
diff --git a/install-examples/README.md b/install-examples/README.md
@@ -0,0 +1,112 @@
+## install cert-manager 
+```
+helm repo add jetstack https://charts.jetstack.io --force-update
+```
+```
+helm repo update
+```
+```
+helm search repo cert-manager
+helm search repo cert-manager --versions | grep v1.
+```
+```
+helm install \
+  cert-manager jetstack/cert-manager \
+  --namespace cert-manager \
+  --create-namespace \
+  --version v1.12.6  \
+  --set installCRDs=true
+```
+
+## Install adcs-issuer 
+
+### add helm repo
+
+```
+helm repo add djkormo-adcs-issuer https://djkormo.github.io/adcs-issuer/
+```
+
+### update
+
+``` 
+helm repo update djkormo-adcs-issuer
+```
+
+### check all versions 
+```
+helm search repo adcs-issuer  --versions
+```
+
+
+### install in cert-manager namespace
+
+```console 
+helm install adcs-issuer  djkormo-adcs-issuer/adcs-issuer --version 2.0.8 \
+  --namespace cert-manager --values values-cert-manager-namespace.yaml  --create-namespace
+```
+
+
+```
+kubectl -n cert-manager get deploy
+kubectl -n cert-manager logs deploy/adcs-issuer-controller-manager
+```
+
+
+### install adcs issuer in adcs-issuer namespace
+
+```console 
+helm install adcs-issuer  djkormo-adcs-issuer/adcs-issuer --version 2.0.8 \
+  --namespace adcs-issuer --values values-adcs-issuer-namespace.yaml --create-namespace
+```
+
+#### Checks 
+```
+kubectl -n adcs-issuer get deploy
+kubectl -n adcs-issuer logs deploy/adcs-issuer-controller-manager
+```
+
+## install adcs-simulator
+
+### install adcs-simulator in adcs-issuer namespace
+
+```
+kubectl apply -R -f adcs-simulator/adcs-issuer-namespace/ -n adcs-issuer
+
+```
+
+
+
+#### Checks 
+```
+kubectl -n adcs-issuer logs deploy/adcs-sim-deployment
+kubectl -n adcs-issuer get clusteradcsissuer,adcsrequest
+kubectl  -n adcs-issuer get secrets --field-selector type=kubernetes.io/tls 
+kubectl -n adcs-issuer get certificate  -ojsonpath="{range .items[*]}{.metadata.name} not before: {.status.notBefore} not after: {.status.notAfter}{'\n'}{end}" 
+```
+
+<pre>
+
+NAME                                        READY   SECRET            AGE
+certificate.cert-manager.io/adcs-sim-cert   True    adcs-sim-secret   25s
+
+NAME                                                                            AGE
+clusteradcsissuer.adcs.certmanager.csf.nokia.com/adcs-cluster-issuer-adcs-sim   22m
+
+NAME              TYPE                DATA   AGE
+adcs-sim-secret   kubernetes.io/tls   2      20m
+
+adcs-sim-cert not before: 2024-02-07T21:05:58Z not after: 2025-02-06T21:05:58Z
+
+</pre>
+
+
+#### Installed helm charts 
+
+```console
+helm list -A
+```
+<pre>
+NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART                           APP VERSION
+adcs-issuer     adcs-issuer     1               2024-02-07 21:57:18.0829885 +0100 CET   deployed        adcs-issuer-2.0.8               2.0.8
+cert-manager    cert-manager    1               2024-02-07 22:16:03.1434831 +0100 CET   deployed        cert-manager-v1.12.6            v1.12.6
+</pre>
diff --git a/...l-examples/adcs-simulator/adcs-issuer-namespace/adcs-simulator-adcs-issuer-namespace.yaml b/...l-examples/adcs-simulator/adcs-issuer-namespace/adcs-simulator-adcs-issuer-namespace.yaml
@@ -0,0 +1,85 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: adcs-sim-deployment
+  namespace: adcs-issuer
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      control-plane: adcs-sim
+  template:
+    metadata:
+      labels:
+        control-plane: adcs-sim
+    spec:
+      containers:
+      - args:
+        - --dns=adcs-sim-service.adcs-issuer.svc,adcs2.example.com 
+        - --ips=10.10.10.1,10.10.10.2
+        - --port=8443
+        command:
+        - /usr/local/adcs-sim/manager
+        image: djkormo/adcs-sim:0.0.5
+        imagePullPolicy: Always
+        env:
+        - name: ENABLE_DEBUG
+          value: "false"  
+        name: manager
+        volumeMounts:
+
+        # emptydirs for storing csr and cert files
+        - name: csr
+          mountPath: "/usr/local/adcs-sim/ca"
+
+        # ca cert 
+        - name: config-pem
+          mountPath: "/usr/local/adcs-sim/ca/root.pem"
+          subPath: root.pem
+          readOnly: true
+
+        # ca key
+        - name: config-key
+          mountPath: "/usr/local/adcs-sim/ca/root.key"
+          subPath: root.key
+          readOnly: true
+
+        ports:
+        - containerPort: 8443 # the same as --port=8443 in arguments
+          name: adcs-sim
+          protocol: TCP
+        resources:
+          limits:
+            cpu: 100m
+            memory: 500Mi
+          requests:
+            cpu: 100m
+            memory: 100Mi
+
+      terminationGracePeriodSeconds: 10
+
+      volumes:
+
+        - name: csr
+          emptyDir:
+            sizeLimit: 50Mi 
+
+        - name: config-pem
+          configMap:
+            name: adcs-sim-configmap # configmap for storing ca cert
+
+        - name: config-key
+          configMap:
+            name: adcs-sim-configmap # configmap for storing ca key
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: adcs-sim-service
+  namespace: adcs-issuer
+spec:
+  ports:
+  - port: 8443
+    targetPort: 8443
+  selector:
+    control-plane: adcs-sim
diff --git a/install-examples/adcs-simulator/adcs-issuer-namespace/certificate-adcs-sim.yaml b/install-examples/adcs-simulator/adcs-issuer-namespace/certificate-adcs-sim.yaml
@@ -0,0 +1,24 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+
+  name: adcs-sim-cert
+  namespace: adcs-issuer
+spec:
+  commonName: example.com
+  dnsNames:
+  - adcs1.example.com
+  - adcs2.example.com
+
+  issuerRef:
+    group: adcs.certmanager.csf.nokia.com
+    kind: ClusterAdcsIssuer
+    name: adcs-cluster-issuer-adcs-sim
+
+  duration: 2160h # 90d
+  renewBefore: 360h # 15d
+  subject:
+    organizations:
+      - Your organization
+
+  secretName: adcs-sim-secret
diff --git a/install-examples/adcs-simulator/adcs-issuer-namespace/clusteradcsissuer-adcs-sim.yaml b/install-examples/adcs-simulator/adcs-issuer-namespace/clusteradcsissuer-adcs-sim.yaml
@@ -0,0 +1,13 @@
+apiVersion: adcs.certmanager.csf.nokia.com/v1
+kind: ClusterAdcsIssuer
+metadata:
+  name: adcs-cluster-issuer-adcs-sim
+spec:
+  caBundle: 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
+  credentialsRef:
+    name: adcs-issuer-credentials # secret with username and password
+  statusCheckInterval: 1m
+  retryInterval: 1m
+  url: https://adcs-sim-service.adcs-issuer.svc:8443 # external host
+  templateName: BasicSSLWebServer # external template 
+
diff --git a/install-examples/adcs-simulator/adcs-issuer-namespace/configmap-adcs-sim.yaml b/install-examples/adcs-simulator/adcs-issuer-namespace/configmap-adcs-sim.yaml
@@ -0,0 +1,96 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: adcs-sim-configmap
+  namespace: adcs-issuer
+data:
+
+  root.pem: |
+    -----BEGIN CERTIFICATE-----
+    MIIF1zCCA7+gAwIBAgIUKPE3KrkaTPCJKqXKY8pttmj152UwDQYJKoZIhvcNAQEL
+    BQAwZDELMAkGA1UEBhMCUEwxDzANBgNVBAgMBldhcnNhdzEPMA0GA1UEBwwGTW9y
+    ZG9yMRAwDgYDVQQKDAdBRENTU0lNMQswCQYDVQQLDAJJVDEUMBIGA1UEAwwLZXhh
+    bXBsZS5jb20wHhcNMjMxMjMxMTI1MjQ1WhcNMzMxMjI4MTI1MjQ1WjBkMQswCQYD
+    VQQGEwJQTDEPMA0GA1UECAwGV2Fyc2F3MQ8wDQYDVQQHDAZNb3Jkb3IxEDAOBgNV
+    BAoMB0FEQ1NTSU0xCzAJBgNVBAsMAklUMRQwEgYDVQQDDAtleGFtcGxlLmNvbTCC
+    AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALknWaSZSfOn33GlDJhE51Iw
+    E4+FE6b/C0PoYta+oe87SMd146xdjBCb+AtNYQnpvEnVG2a8G1mj4rHxkToB/Rxc
+    r9wm2TZ5tD1IpOSDEpgIYNEsX7kfrqKlKA/8regFoB7QLkk5MsOmMo+YOrZccbZJ
+    U144WMmu0nlR1mXDMDtA6DOyaIHCTCPMkV8F70PwNDC0U7jKgWSAHAZG4kPjXMJT
+    mdx1cvN5rK7wKC0cF+vEGStcL/sSvMZhAt08n+rqEGnt7aWtlaDAmKUe0Jl58Bv8
+    ZoX76vVUw//7hEhrMQKlcm/Ui4UTH0niyN8h8SJQnYXw6VFMa8s1o6Su4xHoxvr7
+    T2LrTJa2/4PconyD8lo6KYDwOkEj+udzimgU6O/l3LE7WRAhxRhPB63aecop0sl8
+    Nmz5NtylvU0xeTWFd4gOTQFgQNN9ViMqqnUhxdB4q3cKnMm5DH7Lr2drEElCJq3R
+    xvqbrW9wrotie4+g1fLty6ZLnksEvGs26ueAjlXQDGSeOdM8lMtyV6GlkgI65nhh
+    cbsAcR8vTLITUbO66JaN3QlIkpxMY70hgvYYTI/yx3CTHdn6fhpSmrJlxX9Ng2gU
+    ahtQiMPqwn/7+2MUUEkChz3RWQWSbqEM3DFi9MiYHmP/cfBQrGXHZvw7nk026uuq
+    GKlbIUk+pZTbhMgePYR3AgMBAAGjgYAwfjAdBgNVHQ4EFgQUTKZUB+EXTViSnWiv
+    3X4eR7xtiuEwHwYDVR0jBBgwFoAUTKZUB+EXTViSnWiv3X4eR7xtiuEwDwYDVR0T
+    AQH/BAUwAwEB/zArBgNVHREEJDAiggtleGFtcGxlLmNvbYINKi5leGFtcGxlLmNv
+    bYcECgAAATANBgkqhkiG9w0BAQsFAAOCAgEAcd5greti44ukjgxWSNoYFs6HZ659
+    OostxKLH0jMFSUQxvt5trK9kjw27hWYg5C73WIc3Xle/byPSykTQsxq9ti96qe0T
+    U4+hsfdFVekqlN83h3pZ/LoD9yElX2vzFkLaiqn/7GWdf6m472zpgXx6oPlP6GTV
+    n9pbqPhbutMSAjpomrR5SiuePosViV1UjPv6QUvKWuS+GOP0HzY+Ku1yfez1/pRp
+    0t5JTgMNUoYSkjC4dSyPBy9HQMxR7Oig3MNzYeuC90sYvv6GJ4n9sqQxcj+aDc3g
+    bDxFZV9Qu19W+zCgLP25aqsc3R52c0dEbByZVEj2u36U7o2sgERPViv3Nw9qcfZE
+    mTZ/+UQ9yuYrf9aKc0qSU5qVouzx1nG9TQbX/5ghZgmwULRLTig2owAibD05JU0e
+    aynSCbmEJkdIPx5drKzbaB9RKJ//jrkpmUSCO8B9RjRVZmmIItxdn28pyDy7A8JX
+    XYwBFQIftCB1WPixxrliTiYrQotKgK4T7A/ytTayFMtaMvBqM7oulj5v3PowcfZj
+    hkezaNPsRx4cLSG/9Pc02Q0EHCjLzl8S8F8/m06njYu9kPdG77uV25ovSaNynBm4
+    jf17P52P5zqPwWQsOMOu51OTDhyagDh1qVJayr4k9skApIyYEBTshBBuOwrP/nxF
+    F8SDNn5wjsYpUIs=
+    -----END CERTIFICATE-----
+
+ 
+  root.key: |
+    -----BEGIN RSA PRIVATE KEY-----
+    MIIJKQIBAAKCAgEAuSdZpJlJ86ffcaUMmETnUjATj4UTpv8LQ+hi1r6h7ztIx3Xj
+    rF2MEJv4C01hCem8SdUbZrwbWaPisfGROgH9HFyv3CbZNnm0PUik5IMSmAhg0Sxf
+    uR+uoqUoD/yt6AWgHtAuSTkyw6Yyj5g6tlxxtklTXjhYya7SeVHWZcMwO0DoM7Jo
+    gcJMI8yRXwXvQ/A0MLRTuMqBZIAcBkbiQ+NcwlOZ3HVy83msrvAoLRwX68QZK1wv
+    +xK8xmEC3Tyf6uoQae3tpa2VoMCYpR7QmXnwG/xmhfvq9VTD//uESGsxAqVyb9SL
+    hRMfSeLI3yHxIlCdhfDpUUxryzWjpK7jEejG+vtPYutMlrb/g9yifIPyWjopgPA6
+    QSP653OKaBTo7+XcsTtZECHFGE8Hrdp5yinSyXw2bPk23KW9TTF5NYV3iA5NAWBA
+    031WIyqqdSHF0HirdwqcybkMfsuvZ2sQSUImrdHG+putb3Cui2J7j6DV8u3Lpkue
+    SwS8azbq54COVdAMZJ450zyUy3JXoaWSAjrmeGFxuwBxHy9MshNRs7rolo3dCUiS
+    nExjvSGC9hhMj/LHcJMd2fp+GlKasmXFf02DaBRqG1CIw+rCf/v7YxRQSQKHPdFZ
+    BZJuoQzcMWL0yJgeY/9x8FCsZcdm/DueTTbq66oYqVshST6llNuEyB49hHcCAwEA
+    AQKCAgButRqiko1nRQ8Tko6PVVPDDsADZpyzk3gW6JKAuId21cnUiabSXzTqkXek
+    umW1Wa6drvCtYvgvhxB7OWeOebXwCXOVfR0Pt4GPyyndAIpToV7Sc2fg9xKiaYIk
+    3P7W5tYw1mV2nt69oVhGB83DUE8loX5ZrfNY1FFA/S/mtOjX5R1yG9DlFVoVZbHe
+    UVwZET0Dii8tJNhtUTRwhF2yHfZOs1IiQY+0CSK5jxtWrZ+X9y7dgEeoJjH9o+/k
+    fOVZvw6FaCBamgoHjmE3Cc/MlN5+vVJH9rMscbyoCKm163HolShxuXKa5S4mLZXR
+    5SebTvyBI+U+GSWy4aWxSGi5QqgGUJBXBJxvYjlzH1j6KYxgZdWEiB7cPZ7pgGUQ
+    doswszZMVGm+FDZdzzNox3fUkpFhqlqE71h8A4R96KAoFh4+Y9c61A6qYejOdR1q
+    rlK08zIQGP7X0g0lC7Ufov5oY4giQQSbAizCjuHjMvavxDthuIBEHkPi9OnUQrbe
+    FBphfiKyJb3sidmv1HI4Ibr7hyulZzt0StNpjNRImkYEAh32Gfwa/oxg+lMa6Zwa
+    G6Hjuwu+ccTASTRpsrnP9KGkSWMoQd9SIS8prXWftEKmHuoSVE0lPfCEBCtK6vrt
+    WXZ6V49MQpDQP4KBsjFOe9GoB2s1NyxYYkAtYoS0J0ZcD3rQoQKCAQEA7JWGiSye
+    oaYWnNInQzmnuenorbM16yOV0gDuPyxq+mmwNufF6kqNGrHORyjQOG9+embKfjjV
+    XIh5am2xfiIchN/fLCf4Z0YxGb9jSqyTLmmJSqKmvjGX8uLWE3dw/8dJyAYScQEi
+    HnGstoEjS2mpd9ZuTi9v/ylEFKMgQNcEbvKyNSsjH/E8CMJjbGDNELVUI6mk9z1v
+    jX+/yLSGOBBMI+1zutWWSG0Y9p2qBTDGVRM1xvlXI8wz9fwxkM0MvsPqV0jG2f2k
+    fvY49opEjsFYFQmoB3xATnlStB2KdCOmwcG6a8Ki7EfdGHxh6wkSNIwWoyXsLYr1
+    01yxBtakz9wi2QKCAQEAyFlOgfT7eel7gxOMEuiwSp0NfUnuq3/z91ZHNQc4y5Mz
+    idud7h+1pTDON905sFVFksn7V6p57RNRJoezzw6FbtBF8YDo4UgI+Jp7CREJ7b6R
+    oOMfTXOLGw4cTBKYxcKCkMiuUaMV9qFBKCuV2eCjlw3KprBEu5CBgdLpbESMu/jw
+    Wlg/QAvGnW2Y7Vm610f9dL6DCve8v6TnOJQ5ziTQ8MmfEw3Cv2f61DW+5kDcEnAo
+    4yTTBjlccaHeqxIhCGUkkgdQ09NRuH/SQIy2PuWSqv0VxmAYm7nwywh44tmFka1L
+    DyMqUjnntPjx2VEKZanCyOABYM1FMuei2q/rUeOvzwKCAQB2Tf9MsSdSJj/Ag8Zm
+    c3pQGYvk8GzR/KV6skRxCsEkH52ilxv9IPKWmrtQEjStQ/O3OZegrsLi1swAUIIl
+    VOF2AI0VA5fP7OW4vl/kg4/F8bhZviQrj5kwOAZdDalP/lQC1iZ6o9pv5uA7EzCX
+    EWtRJcVbC5WxvuzwdPI3+k2ZPXun4r5ZxsQCjVIya+WfqU092CNKD0qtM2iv8LX9
+    awjoHmF02EGiTgvhps3ScqV6/XQy35SXrhF9vHL8uczZyBZzN01YzOFpK68oedP2
+    nvBw9Lc1pwhxNXIJ54vIr9s/oKScJmRaS0VgbTJ52btk03iudNQ5ofdzjjJn/QXF
+    e4thAoIBAQCmH072ePDPzGZqcBnUT/ZlV8YondX1hDoBWxvd/2f7fMneRCi2mrpe
+    B5LmRVwhNwNiTHJI5YUFq9+86AaS6EKBeNaWAkKXEcjGgikEgolOBZbw5YI+EVFF
+    lLSn6z+bssXaUVwhOu3qOxkwursdFqPuizP+dOf48kBAKmb8K/bZofeBoeyIKXt9
+    a7PDEoTXHs0tMQ6tWG+8JHrIsjcgE+zfyv5IqT9SwF/997abaypPa4qrlQwY/BUH
+    76UXCggz0tG497HwgicfqXTnqwUuL+MmPoYAoAunjEz5vMOnrZ+QBDXZjln4JiVX
+    LJg0jnrlgxaMwxjBcFMxe1nQpM+lbfqHAoIBAQCLi8J/k0zJcCrz1q74+/vrtiWn
+    n5IEYTvYf3E2YsjauV/fvQnFmk7xaDasFCHH33Sw10rZL/ofeRU+zidxLU2UEko8
+    nSuzwrJ1ICVRPZ5v+uKzKXHSArq3xW4ixApbYTwSw0nBLW+MnGMVh6Ql3IHiPs36
+    +umQvgfIH9apwQt15GFHF+2rYRUtbfpHTarbguBOR2xCWMNP/Q11GgS4YTO8GTQU
+    gAXXy28+WWM3hj/1JJfUycpdmqbjdrxZRp1+HaNbD2OD98vUrPDxLxy5DU16GFrV
+    rihNn9tScbEkBGWDEaGE0EQZ7Y066yAzRPceZ1ZaAPFqWiaYSkhn1iXFGmGV
+    -----END RSA PRIVATE KEY-----
diff --git a/install-examples/adcs-simulator/adcs-issuer-namespace/secret-adcs-sim.yaml b/install-examples/adcs-simulator/adcs-issuer-namespace/secret-adcs-sim.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: adcs-issuer-credentials
+  namespace: adcs-issuer # namespace of cert managera and adcs operator
+type: Opaque
+data:
+  password: cGFzc3dvcmQ= # password
+  username: dXNlcm5hbWU= # username
+