Skip to main content
Version: 1.6.1

Installation with a Helm chart

Before you begin​

Before you install TRON.ASOC with a Helm chart, make sure that:

  • the kubectl and helm utilities are installed on the workstation;
  • kubeconfig is configured—the kubectl get nodes command returns a list of cluster nodes;
  • you have access to the harbor.tronsec.ru registry;
  • the Kubernetes cluster meets the following requirements:
    • ingress-nginx-controller and IngressClass are installed and configured;
    • StorageClass is configured and marked as default—check it with the kubectl get storageclass command;
    • the administrator has permission to create resources in the target namespace;
    • approved PVs or external databases (PostgreSQL, ClickHouse, S3-compatible storage) are deployed and accessible from the cluster.

Installation​

To install TRON.ASOC with a Helm chart, follow these steps:

  1. Set the environment variables:
export CHART_USERNAME=""
export CHART_PASSWORD=""
export CHART_URL="harbor.tronsec.ru"
export VERSION="1.6.1"
info

Request the CHART_URL, CHART_USERNAME, CHART_PASSWORD, and VERSION values from support.

  1. Log in to the Helm chart registry:
helm registry login \
--username $CHART_USERNAME \
--password $CHART_PASSWORD \
$CHART_URL
  1. Download the chart:
helm pull oci://$CHART_URL/asoc/charts/asoc --version $VERSION
  1. Extract the chart and go to the asoc directory:
tar xvf asoc-$VERSION.tgz
cd asoc
  1. Edit the values.yaml file to match your infrastructure. The table below describes the main parameters.
ParameterDescription
default.domainDomain name for the web interface
secret.infracreds.envs.POSTGRES_*PostgreSQL credentials
secret.infracreds.envs.MINIO_*MinIO/S3 credentials
secret.infracreds.envs.CLICKHOUSE_*ClickHouse credentials
pullSecret.asoc-pullsecret.*Credentials for accessing the image registry
  1. Generate an encryption key for the database:
openssl rand -hex 32
  1. Install TRON.ASOC:
helm upgrade --install asoc \
--create-namespace \
--namespace asoc \
--values values.yaml \
.
info

You can also pass parameter values through the command line without editing the values.yaml file. Run this command:

helm upgrade --install asoc . \
--create-namespace \
--namespace asoc \
--values values.yaml \
--set default.domain="example.com" \
--set secret.infracreds.envs.POSTGRES_USER="user" \
--set-string secret.infracreds.envs.POSTGRES_PASSWORD="pass" \
--set secret.infracreds.envs.MINIO_ROOT_USER="tron" \
--set-string secret.infracreds.envs.MINIO_ROOT_PASSWORD="tronnort" \
--set secret.infracreds.envs.CLICKHOUSE_ADMIN_USER="houseclick" \
--set-string secret.infracreds.envs.CLICKHOUSE_ADMIN_PASSWORD="asoccosa" \
--set-string secret.infracreds.envs.NEW_ENCRYPTION_SECRET_KEY="keyyek" \
--set pullSecret.asoc-pullsecret.username="userresu" \
--set-string pullSecret.asoc-pullsecret.password="passssap"

Health check​

To verify that TRON.ASOC is working correctly, follow these steps:

  1. Verify that the pods are running:
kubectl get pods -n asoc

The pods should have a Running status, and the READY value should match the expected value (for example, 1/1).

  1. Check the Ingress status:
kubectl get ingress -n asoc
  1. Open the address specified in default.domain in a browser and sign in.