diff --git a/01-Home.md b/01-Home.md index a3ba876..1152b58 100644 --- a/01-Home.md +++ b/01-Home.md @@ -113,98 +113,3 @@ Here we are defining our applications secret or variables. Please refers to [var * [flux kustomization](https://fluxcd.io/flux/components/kustomize/kustomizations/) * [bjw-s template helmchart](https://bjw-s.github.io/helm-charts/docs/app-template/) -# How to - - - -- [Environments](Environments) - - [Variables](Environments#Variables) - - [Secret](Environments#Secret) - - [Encryption]() -- [Storage]() - - [Persistent Storage]() - - [Object Storage]() - - [Database]() - - [PostgreSQL]() - - [MongoDB]() -- [Exposing your application]() - - [SSL]() - - [Certificate]() - - [Domain]() - - -# SSL and DNS - -#### Bring your own certificate and domain - -You can add the `cert-manager.io/cluster-issuer: nginx-production` annotation to your ingress/route to generate a letsencrypt certificate for your domain. You also need to specify the `secretName` in the `tls` section of the ingress. - -Please notice that you need to ensure your domain DNS is resolving to the cluster ingress/route public ip. This can be done with a CNAME record pointing to: - -- `dummy.pub..kvant.cloud` for Kubernetes Ingress -- `dummy.app..kvant.cloud` for Openshift Route - -Example for Ingress: -```yaml -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - annotations: - # add an annotation indicating the issuer to use. - cert-manager.io/cluster-issuer: nginx-production # < set up on all kvant clusters - name: myIngress - namespace: myIngress -spec: - className: external - rules: - - host: example.com - http: - paths: - - pathType: Prefix - path: / - backend: - service: - name: myservice - port: - number: 80 - tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames - - hosts: - - example.com - secretName: myingress-cert # < cert-manager will store the created certificate in this secret. - ``` -#### Use Predefined Domain - -You can spawn any application using your namespace associated Domain. -`${TENANT_DOMAIN}` - -### Storage - -We are providing two type of storage. Object Storage and Volumes. - - -#### Request a Object Storage - -```yaml -apiVersion: objectbucket.io/v1alpha1 -kind: ObjectBucketClaim -metadata: - name: -spec: - generateBucketName: - storageClassName: openshift-storage.noobaa.io - -``` - -#### Request a PV - -In the data section of your helmrelease. - -```yaml -data: - enabled: true - type: persistentVolumeClaim - accessMode: ReadWriteOnce - size: 1Gi -``` - - diff --git a/Guide-ObjectStorage.md b/Guide-ObjectStorage.md index cb3c295..8d93f9a 100644 --- a/Guide-ObjectStorage.md +++ b/Guide-ObjectStorage.md @@ -1,6 +1,9 @@ # Overview +* Basel external Endpoint + https://s3-openshift-storage.apps.basel.kvant.cloud + ## Diagram ```mermaid