Skip to main content
Version: 1.5

Install with a Helm chart

Before you start​

Before you install TRON ASOC with a Helm chart, make sure that:

  • the kubectl and helm utilities are installed on your workstation;
  • the kubeconfig configuration is set up—kubectl get nodes returns a list of cluster nodes;
  • you have access to the harbor.tronsec.ru registry;
  • the Kubernetes cluster meets the following requirements:
    • ingress-nginx-controller and IngressClass are installed and configured;
    • StorageClass is configured and marked as default—check it with kubectl get storageclass;
    • the administrator has permission to create resources in the target namespace;
    • approved PVs or external databases (PostgreSQL, ClickHouse, and S3-compatible Storage) are deployed and accessible from the cluster.

Install​

Follow these steps to install TRON ASOC with a Helm chart:

  1. Set the environment variables:
export CHART_USERNAME=""
export CHART_PASSWORD=""
export CHART_URL="harbor.tronsec.ru"
export VERSION="1.5.0"
info

Request the CHART_URL, CHART_USERNAME, CHART_PASSWORD, and VERSION values from support.

  1. Sign in to the Helm chart registry:
helm registry login \
--username $CHART_USERNAME \
--password $CHART_PASSWORD \
$CHART_URL
  1. Download the chart:
helm pull oci://$CHART_URL/asoc/charts/asoc --version $VERSION
  1. Extract the chart and go to the asoc directory:
tar xvf asoc-$VERSION.tgz
cd asoc
  1. Edit the values.yaml file to match your infrastructure. The table below describes the main parameters.
ParameterDescription
default.domainDomain name for the web interface
secret.infracreds.envs.POSTGRES_*PostgreSQL credentials
secret.infracreds.envs.MINIO_*MinIO/S3 credentials
secret.infracreds.envs.CLICKHOUSE_*ClickHouse credentials
pullSecret.asoc-pullsecret.*Credentials for accessing the image registry
  1. Generate an encryption key for the database:
openssl rand -hex 32
  1. Install TRON ASOC:
helm upgrade --install asoc \
--create-namespace \
--namespace asoc \
--values values.yaml \
.
info

You can also pass parameter values through the command line without editing the values.yaml file. Run the following command:

helm upgrade --install asoc . \
--create-namespace \
--namespace asoc \
--values values.yaml \
--set default.domain="example.com" \
--set secret.infracreds.envs.POSTGRES_USER="user" \
--set-string secret.infracreds.envs.POSTGRES_PASSWORD="pass" \
--set secret.infracreds.envs.MINIO_ROOT_USER="tron" \
--set-string secret.infracreds.envs.MINIO_ROOT_PASSWORD="tronnort" \
--set secret.infracreds.envs.CLICKHOUSE_ADMIN_USER="houseclick" \
--set-string secret.infracreds.envs.CLICKHOUSE_ADMIN_PASSWORD="asoccosa" \
--set-string secret.infracreds.envs.NEW_ENCRYPTION_SECRET_KEY="keyyek" \
--set pullSecret.asoc-pullsecret.username="userresu" \
--set-string pullSecret.asoc-pullsecret.password="passssap"

Check the installation​

Follow these steps to check that TRON ASOC is working:

  1. Make sure that the pods are running:
kubectl get pods -n asoc

The pods must have the Running status, and the READY value must match the expected value, for example, 1/1.

  1. Check the Ingress status:
kubectl get ingress -n asoc
  1. Open the address specified in default.domain in your browser and sign in.