...
| Expand |
|---|
| title | Example - Secret object |
|---|
|
| Code Block |
|---|
kubectl create secret generic authorization-server-secrets --namespace <namespace> \
--from-literal=managementApiUsername=<username> \
--from-literal=managementApiPassword=<password> \
--from-file=jwtKeystore=<keystore file path encoded in Base64 format> path> \
--from-literal=jwtKeyId=<id> \
--from-literal=jwtKeyPassword=<password> \
--from-literal=jwtKeystorePassword=<password> |
|
Keystore file can be encoded in Base64 format with the following command:
| Code Block |
|---|
| base64 -i <keystore file path> -o <B64 keystore file name>.txt |
Helm Values
| Expand |
|---|
| title | Example - Helm installation with existing kubernetes secret |
|---|
|
| Code Block |
|---|
helm upgrade <installation name> --install ue-internal/usage-engine-private-edition --version <helm chart version> --set "global.imagePullSecrets[0].name=ecrcred" \
--set persistence.enabled=true \
--set environment=docker-desktop \
--set operator.installCRDs=false \
--set authorizationServer.enabled=true |
|
| Expand |
|---|
| title | Example - Helm Installation without Kubernetes Secret |
|---|
|
| Code Block |
|---|
helm upgrade <installation name> --install ue-internal/usage-engine-private-edition --version <helm chart version> --set "global.imagePullSecrets[0].name=ecrcred" \
--set persistence.enabled=true \
--set environment=docker-desktop \
--set operator.installCRDs=false \
--set authorizationServer.enabled=true \
--set-file authorizationServer.jwt.keystore=<keystore file path> path encoded in Base64 format> \
--set authorizationServer.jwt.key-id=<id> \
--set authorizationServer.jwt.key-password=<password> \
--set authorizationServer.jwt.keystore-password=<password> \
--set authorizationServer.management-api.username=<username> \
--set authorizationServer.management-api.password=<password> |
|
Keystore file can be encoded in Base64 format with the following command:
| Code Block |
|---|
base64 -i <keystore file path> -o <B64 keystore file name>.txt |
Random
If neither Secret nor Helm values are used to provide managementApiPassword credentials, the required values are automatically populated with random data. For users with access rights, the randomized credentials can be retrieved by doing:
...