Steps required to install Sterling Secure Proxy (SSP) on OpenShift on the IBM Cloud
Download the following file from Passport Advantage:
- IBM Sterling Secure Proxy V 6.0.2 for RHOCP English (CC8IAEN )
- Login on OpenShift
git clone https://github.com/ebasso/sterling-b2b-oncloud.git
cd ssp-openshift-ibmcloud
- Login on OpenShift
oc login --token=sha256~... --server=https://...containers.cloud.ibm.com:31234
- Create a new project on OpenShift for SSP
oc new-project sterling-ssp
Setup RH OpenShift Image Registry
- Get and export variable
oc get route image-registry -n openshift-image-registry
export MY_IMG_REGISTRY=image-registry-openshift-image-registry....us-south.containers.appdomain.cloud
- Change to SSP Project and export project
oc project sterling-ssp
export MY_SSP_PROJECT=sterling-ssp
- Browse to the location where you have downloaded the SSP container image.
unzip SSP.V6020.Docker.tar.zip
tar -xvf SSP.V6020.Docker.tar
tar -xvf ssp_6020_docker.tar
tar -xvf ssp_6020_helmchart.tar
rm SSP.V6020.Docker.tar
rm ssp_6020_docker.tar
rm ssp_6020_helmchart.tar
- Login to Registry. Load/tag/push and check.
docker login -u $(oc whoami) -p $(oc whoami -t) $MY_IMG_REGISTRY
docker load -i ssp_cm_docker_image_6020.tar
docker load -i ssp_engine_docker_image_6020.tar
docker load -i ssp_ps_docker_image_6020.tar
docker tag ssp-cm-docker-image:6.0.2.0 $MY_IMG_REGISTRY/$MY_SSP_PROJECT/ssp-cm-docker-image:6.0.2.0
docker tag ssp-engine-docker-image:6.0.2.0 $MY_IMG_REGISTRY/$MY_SSP_PROJECT/ssp-engine-docker-image:6.0.2.0
docker tag ssp-ps-docker-image:6.0.2.0 $MY_IMG_REGISTRY/$MY_SSP_PROJECT/ssp-ps-docker-image:6.0.2.0
docker push $MY_IMG_REGISTRY/$MY_SSP_PROJECT/ssp-cm-docker-image:6.0.2.0
docker push $MY_IMG_REGISTRY/$MY_SSP_PROJECT/ssp-engine-docker-image:6.0.2.0
docker push $MY_IMG_REGISTRY/$MY_SSP_PROJECT/ssp-ps-docker-image:6.0.2.0
- Check result
oc get imagestream
- Returno do previous directory and extract the helm charts
cd <CHANGE HERE>/ssp-openshift-ibmcloud
tar -xzvf <Downloads_Directory>/ibm-ssp-cm-1.1.0.tgz
tar -xzvf <Downloads_Directory>/ibm-ssp-engine-1.1.0.tgz
tar -xzvf <Downloads_Directory>/ibm-ssp-ps-1.1.0.tgz
Follow the article Deploy Sterling Toolkit on OpenShift to setup toolkit
Follow the article Deploy Secure Proxy Engine on OpenShift
Follow the article Deploy Secure Proxy Configuration Manager on OpenShift
$ oc get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
ssp-cm-ibm-ssp-cm LoadBalancer 172.xx.xxx.204 52.xxx.xxx.12 8443:32103/TCP,62366:30939/TCP 5m32s
ssp-engine-ibm-ssp-engine LoadBalancer 172.xx.xx.244 52.xxx.xxx.11 63366:31072/TCP 22m