IBM-ODM-Kubernetes

IBM Operational Decision Manager on Certified Kubernetes

Deploying IBM Operational Decision Manager on a Certified Kubernetes Cluster

This repository centralizes materials to deploy IBM® Operational Decision Manager ODM on Certified Kubernetes. It is deployed in a clustered topology that uses WebSphere® Application Server Liberty on a Kubernetes cluster.

ODM is a decisioning platform to automate your business policies. Business rules are used at the heart of the platform to implement decision logic on a business vocabulary and run it as web decision services.

The ODM Docker material is used here, which is available in the odm-ondocker repository. It includes Docker files and Docker Compose descriptors. The Docker files are used to build images of ODM runtimes. The Docker Compose descriptors can be used to group these images and push to your repository for a Kubernetes provisioning. Docker Compose and Kubernetes are two distinct technology paths to provision a container-based topology supported by ODM.

Deploying ODM Rules on a specific platform

• Amazon EKS
• Azure AKS
• Google Cloud GKE
• Redhat OpenShift Kubernetes Service on IBM Cloud (ROKS)
• Minikube - Minikube can be used to evaluate ODM locally.

Integrating with Third-Party Providers

Integration with OpenID Providers

To integrate with OpenID providers for authentication and authorization, follow these steps:

• Configure ODM with an OpenID Okta service
• Configure ODM with an Azure Active Directory service
• Configure ODM with a Keycloak service
• Configure ODM with a Cognito User Pool

Managing Secrets within a Vault

Ensure secure management of secrets within your deployment using one of the following methods:

• Manage secrets with Secret Store CSI Driver: Use the Secrets Store CSI Driver (e.g., HashiCorp Vault) to securely manage sensitive information such as client secrets and keys. This option is designed to minimize configuration efforts and reduce the workload on your part.
• Manage secrets with Vault via InitContainer: Use an InitContainer to securely retrieve secrets from a Vault (e.g., HashiCorp Vault) and inject them into your application containers. This option requires more hands-on work but it offers greater flexibility to tailor the secret management to your specific requirements.

We encourage you to explore both configurations to identify which setup aligns better with your operational needs and simplicity preferences.

Integration with Analytics Tools

To enable analytics and monitoring capabilities within your deployment, consider integrating with analytics tools using Decisions' monitoring features:

• MPMetrics Integration : Use MPMetrics for comprehensive monitoring and performance tracking.
• OpenTelemetry Integration : Leverage OpenTelemetry for observability and tracing functionalities. This article with guide you to configure your deployment to work seamlessly with OpenTelemetry.

Contribution to customize the deployment

• Scope the Decision Server Console to a dedicated node with kustomize

Issues and contributions

For issues relating specifically to the Dockerfiles and scripts, please use the GitHub issue tracker. For more general issue relating to IBM Operational Decision Manager you can get help through the ODMDev community or, if you have production licenses for Operational Decision Manager, via the usual support channels. We welcome contributions following our guidelines.

Notice

© Copyright IBM Corporation 2024.

License

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    https://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.