Skip to content

Repository contains mock implementation of auth for e-signet

License

Notifications You must be signed in to change notification settings

mosip/esignet-mock-services

Repository files navigation

eSignet mock implementations

Repository contains mock implementations for eSignet. Only for non-production use.

Installing in k8s cluster using helm

Pre-requisites

  1. Set the kube config file of the Esignet K8 cluster having dependent services.
  2. Below are the dependent services required for Mock Identity Services deployment:
    Chart Chart version
    Postgres 10.16.2
    Postgres Init 12.0.1-B3
    mock-identity-softhsm 12.0.1-B2

Install Pe-requisites for mock services

  • Install kubectl and helm utilities.
  • Run prereq.sh to setup below mentioned pre-requisites for mock services.
    • Setup softhsm for mock-identity in Softhsm namespace.
    • Copy required configmaps and secrets to mockid namespace.
    • Initialise mock Identity DB.
    • Create empty secret for client-private-key and jwe-userinfo-key for mock relying party service.
    cd deploy
    ./prereq.sh
    

Install esignet mock services

  • Install kubectl and helm utilities.
  • setup KUBECONFIG variable to point to esignet k8 cluster kubeconfig file.
    export KUBECONFIG=path/to/kubeconfig.config
    
  • Execute installation script:
    ./instll-mock.sh
    
  • During installation of each module a prompt appears requesting information regarding the presence of a public domain and a valid SSL certificate on the server.
    • Opt (y,Y) : In case the Domain is mapped publically and valid SSL certificate is present.
    • Ops (n,N) : If the server lacks a public domain and a valid SSL certificate, it is advisable to select the n option.
      • Opting it will enable the init-container with an emptyDir volume and include it in the deployment process.
      • The init-container will proceed to download the server's self-signed SSL certificate and mount it to the specified location within the container's Java keystore (i.e., cacerts) file.
      • This particular functionality caters to scenarios where the script needs to be employed on a server utilizing self-signed SSL certificates.
  • During Installation a prompt is there to confirm if prometheus service monitor is already deployed.
    • Opt (y,Y) : In case Monitoring is installed with prometheus service monitor.
    • Ops (n,N) : In case Monitoring is not installed or prometheus service monitor is not available.

Delete

  • Run delete-mock.sh to remove esignet services.
    cd deploy
    ./delete-mock.sh
    

Restart

  • Run restart-mock.sh to restart esignet services.
    cd deploy
    ./restart-mock.sh
    

Partner onboarder

  • Perform Partner onboarding for esignet mock relying party using steps only if mosip-identity plugin is used.

License

This project is licensed under the terms of Mozilla Public License 2.0.