SAP-archive / karydia

Kubernetes Security Walnut
Other
77 stars 10 forks source link

Simple Karydia Installation Option #58

Closed marwinski closed 5 years ago

marwinski commented 5 years ago

Story

As a user I want to have a simple installation option and not a multi-stage manual process.

Implementation Proposal

helm appears to be the natural installation option. In addition some scripts will be required to generate the certificates and include them into the values.yaml file.

If not too complex we can ask the user to install the tools locally (although the tools are even a challenge on a Mac). Easier would be a container

docker run karydia/karydia-configure -v .:/config
Neumann-Nils commented 5 years ago

Helm seems to be the natural installation option. However, it seems quite difficult to integrate the karydia installation process into the helm framework.

While I had a look at helm, I could not find a way to run local scripts within the helm installation process. The only option might be to use hooks (https://github.com/helm/helm/blob/master/docs/charts_hooks.md), which spin up a pod and run certain commands and scripts within this pod. However, I could not get the whole installation process running. At the end, I settled with the following problems:

In general, it could be possible to get a karydia installation running using only helm. However, other options seems more trivial and in the end may be equally user-friendly. Thus, I suggest two different options to consider:

marwinski commented 5 years ago

We use bash and/or python ad/or spiff++ for creating the Values.yaml files. Agreed this is hard to do with helm and not really useful. I think short term a script is absolutely fine that creates the values.yaml. A container is nice to have (and not all that difficult). It will also be useful when we have a controller to automatically install Karydia.