Steps required to install IBM Control Center on OpenShift on the IBM Cloud
Download the following file from Fix Central:
- 6.2.0.0-IBMControlCenterforLinux64Container-iFix04.zip
- Login on OpenShift
git clone https://github.com/ebasso/sterling-b2b-oncloud.git
cd sterling-b2b-oncloud/scc-openshift-ibmcloud
- Login on OpenShift
oc login --token=sha256~... --server=https://...containers.cloud.ibm.com:31234
- Create a new project on OpenShift for scc
oc new-project sterling-scc
Setup RH OpenShift Image Registry
- Get and export variable
oc get route image-registry -n openshift-image-registry
export MY_IMG_REGISTRY=image-registry-openshift-image-registry....us-south.containers.appdomain.cloud
- Change to scc Project and export project
oc project sterling-scc
export MY_SCC_PROJECT=sterling-scc
- Browse to the location where you have downloaded the scc container image.
unzip 6.2.0.0-IBMControlCenterforLinux64Container-iFix04.zip
- Login to Registry. Load/tag/push and check.
docker login -u $(oc whoami) -p $(oc whoami -t) $MY_IMG_REGISTRY
docker load -i ibmscc_6.2.tar
docker tag scc-docker-image:6.0.2.0 $MY_IMG_REGISTRY/$MY_SCC_PROJECT/scc-docker-image:6.0.2.0
docker push $MY_IMG_REGISTRY/$MY_SCC_PROJECT/scc-docker-image:6.0.2.0
- Check result
oc get imagestream
- Returno do previous directory and extract the helm charts
cd <CHANGE HERE>/scc-openshift-ibmcloud
tar -xzvf <Downloads_Directory>/ibm-scc-helmchart-1.0.0.tgz
Follow the article Deploy DB2 for SCC on OpenShift to setup toolkit
Follow the article Deploy Sterling Toolkit on OpenShift to setup toolkit
- Get pod information
oc project sterling-tookit
oc get pods
NAME READY STATUS RESTARTS AGE
sterling-tookit-59.. 1/1 Running 0 73m
Export Toolkit Pod
export MY_TOOLKIT_POD=sterling-tookit-59..
- Connect to Pod and setup directories
oc rsh pod/$MY_TOOLKIT_POD
cd /var/nfs-data/
mkdir -p scc
chmod -R a+rwx scc
chown -R 1001:1001 scc
exit
- Define our project
oc project sterling-scc
- Change directory and setup permissions on OpenShift
cd ibm-scc/ibm_cloud_pak/pak_extensions/pre-install/clusterAdministration
sh createSecurityClusterPrereqs.sh
cd ../../../../..
- Change Rolebinding
cd ibm-scc/ibm_cloud_pak/pak_extensions/pre-install/namespaceAdministration
sh createSecurityNamespacePrereqs.sh sterling-scc
cd ../../../../..
- Locate the required information on the default storage volume
oc get pv -n openshift-image-registry
NAME CAPACITY ACCESS MOD RECLAIM POLICY STATUS CLAIM STORAGECLASS
...
pvc-99... 100Gi RWX Delete Bound openshift-image-registry/image-registry-storage ibmc-file-gold
...
- Get the details of the PV
oc describe pv pvc-99...
...
failure-domain.beta.kubernetes.io/region=us-south
failure-domain.beta.kubernetes.io/zone=dal10
...
Type: NFS (an NFS mount that lasts the lifetime of a pod)
Server: fsf-xxxxxxx-xx.adn.networklayer.com
Path: /IBMxxSEVxxxxxxx_xx/data01
...
- Create file my-scc-pv.yaml, change from previous command:
cp scc-pv-nfs.yaml my-scc-pv-nfs.yaml
- Allocate PV/PVC
oc create -f my-scc-pv-nfs.yaml
- Change file my-scc-secrets.yaml for ccDBPassword and cognosDBPassword
echo -n "db2pw123" | base64
- Change file my-scc-secrets.yaml for adminPassword
echo -n "passw0rd" | base64
- Create secrets
cp scc-secrets.yaml my-scc-secrets.yaml
oc create -f my-scc-secrets.yaml
- Create file my-scc-override.yaml, and change
cp scc-override.yaml my-scc-override.yaml
- Deploy with Helm
cd ibm-scc
helm install scc --namespace sterling-scc --timeout 120m0s -f ../my-scc-override.yaml .
You can check install using this commands:
$ oc get pods
NAME READY STATUS RESTARTS AGE
sccXXXXX 1/1 Running 0 24s
$ oc logs -f sccXXXXX
$ oc get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
sccXXXXX LoadBalancer 172.xx.xx.132 52.xxx.xxx.16 ..../TCP 5m46s