Skip to content

Latest commit

 

History

History
67 lines (39 loc) · 1.99 KB

04_install_gangway.md

File metadata and controls

67 lines (39 loc) · 1.99 KB

Install & Validate Gangway

Steps to Install and Validate Dex & Gangway workflow:

  • Install Gangway through the below command

AWS

./shared-services-cluster-setup/aws/scripts/05-install-gangway.sh

vSphere

./shared-services-cluster-setup/vsphere/scripts/05-install-gangway.sh
  • Validate all the objects have been initialized

    kubectl get all -n tanzu-system-auth
  • Download the kubeconfig for the OKTA user which was created in the prerequisites step.

    From the params.yml file, get the gangway url for shared service cluster. It should be something similar to gangway.svc.tkg.lab.yourdomain. Navigate to the URL.

    mgmt-cls-2

    Sign in using the same account which you used to setup OKTA initially. As soon as you sign in, you will land to the page where you can download the KUBECONFIG for this user.

    mgmt-cls-2

    Download the KUBECONFIG and place it to the K8/shared-svc-cluster folder of this repository.

  • Open a new Terminal and export the KUBECONFIG variable with the value of the above location of KubeConfig which was just downloaded.

    export KUBECONFIG=/Users/.../tkg-hol/k8/shared-svc-cluster/kubeconf.txt

    Once the config is set, try to run any kubectl command, and you will see the below error:

    Error from server (Forbidden): pods is forbidden: User "user00001" cannot list resource "pods" in API group "" in the namespace "default"
    

    Example:

    mgmt-cls-2

  • To provide proper access to this user, log in to Tanzu Mission Control. Navigate to Policies > Access Polices > Select the Cluster Group / Cluster and add a Direct Access Policy for the user

    mgmt-cls-2

    And now run the command, you should be able to see all the objects.

    kubectl get all
    

    mgmt-cls-2

Continue to Next Step: Configure Wavefront