{"type":"doc","content":[{"type":"paragraph","content":[{"text":"In PoC secenarios all secrets are generated from the data of the values file. In production environments, this is not recommended, since ther should not be any confidential data in the values file. Therefore the Kubernetes secrets have to be created beforhand, manually or ideally from a vault. The Smartfacts and OSLC Adapter charts support the use of pre-installed Kubernetes secrets.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Secret Templates","type":"text"}]},{"type":"paragraph","content":[{"text":"Most secrets, except the tls secret, are opaque secets. You can use the following template to construct the secrets:","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Opaque secrets","type":"text"}]},{"type":"codeBlock","content":[{"text":"apiVersion: v1\ndata:\n : \n : \n ...\nkind: Secret\nmetadata:\n name: \ntype: Opaque","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"TLS Secrets","type":"text"}]},{"type":"codeBlock","content":[{"text":"apiVersion: v1\ndata:\n tls.crt: \n tls.key: \nkind: Secret\nmetadata:\n name: \ntype: kubernetes.io/tls","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Docker config json Secrets","type":"text"}]},{"type":"paragraph","content":[{"text":"To generate the value to insert in the secret, fill in the \"...\" placeholder with your username and password for the docker image registry, replace the retistry name “","type":"text"},{"text":"repo.mid.de","type":"text","marks":[{"type":"link","attrs":{"href":"http://repo.mid.de"}}]},{"text":"” with your own registry if needed.","type":"text"}]},{"type":"codeBlock","content":[{"text":"{\n \"auths\":\n {\n \"repo.mid.de\" :\n {\n \"username\":\"...\",\n \"password\":\"...\"\n }\n }\n}","type":"text"}]},{"type":"paragraph","content":[{"text":"Encode the whole json as base64 ","type":"text"},{"text":"with padding","type":"text","marks":[{"type":"strong"}]},{"text":" and insert the base64 string in the secret template:","type":"text"}]},{"type":"codeBlock","content":[{"text":"apiVersion: v1\ndata:\n .dockerconfigjson: ...\nkind: Secret\nmetadata:\n name: \ntype: kubernetes.io/dockerconfigjson","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"List of Secrets","type":"text"}]},{"type":"paragraph"},{"type":"table","attrs":{"layout":"default","width":1320.0,"localId":"86be0a51-ed4f-43c9-a0e9-3092b3a33912"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"Secret purpose","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"default secret name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Secret type","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"name of property to override default secret name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"secret data property name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph","content":[{"text":"content (All contens have to be base64 encoded!)","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Secret necessary when …","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"TLS certificates for ingresses","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-certs","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"kubernets.io/tls","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"global.cert.crtFullChain","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"tls.crt","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph","content":[{"text":"The Server cetificate","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Ingress is terminating tls","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"global.cert.key","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"tls.key","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"The key for the server certificate","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"Username and Password of the Administration user in Keycloak ","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-keycloak-admin-secret","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Opaque","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"KEYCLOAK_PASSWORD","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph","content":[{"text":"The password for the keycloak administrator","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Keycloak.enabled is set to true in values file","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"KEYCLOAK_USER","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"The username of the keycloak administrator. By default this is “keycloak-admin”.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":4,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"Data for connecting to the OIDC provider","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":4,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-oidc-secrets","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":4,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Opaque","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":4,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"global.secrets.oidcSecretName","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"campId","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph","content":[{"text":"ID of camp client in OIDC issuer","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":4,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Connecting to an OIDC provider","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"camSecret","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"Secret of camp client in OIDC issuer","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfactsId","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"ID of smartfacts client in OIDC issuer","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfactsSecret","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"Secret of smartfacts client in OIDC issuer","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"Username and password of the postgresql database used for Keycloak","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-postgresql","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Opaque","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"password","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Keycloak.enabled is set to true in values file","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"postgres-password","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph"}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"The Java truststore used by the Smartfacts platform and genoslc toolservice","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-truststore","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Opaque","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"truststore.jks","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":2,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"property ","type":"text"},{"text":"truststoreEnabled: true","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"is set in values file or if the property is not present (default is “true”)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-truststore-password","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Opaque","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"password","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph","content":[{"text":"The password of the truststore.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"regcred","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"kubernetes.io/dockerconfigjson","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"global.imagePullSecrets[]","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":".dockerconfigjson","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Docker Image Registry needs a login","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-mongodb-connection-secret","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Opaque","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"connection-string","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph","content":[{"text":"The Connection string to the mongodb in the format for Java drivers. The Connection string will contain the username and password of the mongodb user.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Always","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-oauth10a-encryption-key-secret","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Opaque","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"ENCRYPTION_KEY","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph","content":[{"text":"A random string, that should never change again. It is used as secret to encrypt and decrypt the oauth10a configuration data in the mongodb.","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"Always","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[212.0]},"content":[{"type":"paragraph","content":[{"text":"smartfacts-oslc-technical-user-secret","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[140.0]},"content":[{"type":"paragraph","content":[{"text":"Opaque","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[207.0]},"content":[{"type":"paragraph","content":[{"text":"env.tool.","type":"text"},{"text":"adaptedToolTechnicalUserAuthorizationHeader","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[218.0]},"content":[{"type":"paragraph","content":[{"text":"adaptedToolTechnicalUserAuthorizationHeader","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[211.0]},"content":[{"type":"paragraph","content":[{"text":"“Basic ”, with the placeholder replaced with the base64 encoded string of “username:password” of the user. (Yes, at the end username:password is twice encoded with base64)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[125.0]},"content":[{"type":"paragraph","content":[{"text":"OSLC Connectors are used","type":"text"}]}]}]}]},{"type":"paragraph"}],"version":1}

Browser not supported