Production GNIS Setup

[ThomasThelen]

GNIS-LD is, as a product, is ready to be released to the production Kubernetes cluster. On the production cluster we'll need a few things first.

• [x] gnis namespace
• [x] gnis user
• [x] A CephFS persistent volume
• [x] Updated Ingress rules

[gothub]

The following items should be resolved before gnis can be successfully deployed on the production k8s cluster:

Access

• [x] resolve https://github.com/DataONEorg/k8s-cluster/issues/16

Authorization

• [x] setup kube config context for gnis in prod k8s

Persistent Storage

• [x] have Nick create additional CephFS subvolume for gnis: https://github.nceas.ucsb.edu/NCEAS/Computing/issues/112
• [x] create ceph-csi cephfs based persistent volume for gnis from the new subvolumes
  • [x] create new persistent volume manifest
  • [x] create new persistent volume claim manifest
• [x] configure gnis to use new PV and PVC and test
• [x] install ceph-csi cephfs plugin on production k8s (this has been tested on dev k8s)
• [x] configure persistent volume for existing cephfs subvolume on prod

Let's Encrypt TLS

• [x] configure gnis ingress to use cert-manager on dev k8s and test
• [x] install cert-manager on production k8s
  • [x] add resources that were setup for dev k8s
  • [x] create ClusterIssuer manifest for Let's encrypt staging and production
    • this has been tested and working for metadig-engine on dev k8s

This list details what is required to setup the most current production environment, so that when gnis is setup on prod, it will not have to be re-configured to work with any k8s environment changes. All these items are working in dev k8s, and should not take long to get everything working in prod k8s, except for https://github.com/DataONEorg/k8s-cluster/issues/16.

[ThomasThelen]

The cert-manager requirement has been fulfilled so I checked it off of your list; logs and proof here

[ThomasThelen]

Updating this issue to track that https://gnis-ld.org:30443/ has now been deployed. Our last issue to resolve is the port 80/443 configuration.

[gothub]

@ThomasThelen all tasks in this issue have been completed - pls reopen this if there are other items that need to be done.