Setup in Azure Kubernetes Services

Deploy Eclipse Dirigible in Azure Kubernetes Services(AKS) environment.

Prerequisites

Install kubectl.
Install Azure cli.

Note

Configure Azure DNS Zone
Setup letsencrypt certificate for your domain.

Steps

Access the Azure Kubernetes Services (AKS) environment via the Azure cli:

Create deployment configuration file: deployment.yaml

=== "Deployment"

 ```yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: dirigible
 spec:
   replicas: 1
   selector:
     matchLabels:
       app: dirigible
   template:
     metadata:
       labels:
         app: dirigible
     spec:
       containers:
         - name: dirigible
           image: dirigiblelabs/dirigible-all:latest
           imagePullPolicy: Always
           resources:
             requests:
               memory: "1Gi"
               cpu: "0.5"
             limits:
               memory: "4Gi"
               cpu: "2"
           ports:
             - name: http
               containerPort: 8080
           env:
             - name: DIRIGIBLE_THEME_DEFAULT
               value: "fiori"
 ```

=== "Deployment with PVC"

 ```yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: dirigible
 spec:
   replicas: 1
   strategy:
     type: Recreate
   selector:
     matchLabels:
       app: dirigible
   template:
     metadata:
       labels:
         app: dirigible
     spec:
       containers:
         - name: dirigible
           image: dirigiblelabs/dirigible-all:latest
           imagePullPolicy: Always
           resources:
             requests:
               memory: "1Gi"
               cpu: "0.5"
             limits:
               memory: "4Gi"
               cpu: "2"
           ports:
             - name: http
               containerPort: 8080
           env:
             - name: DIRIGIBLE_THEME_DEFAULT
               value: "fiori"
           volumeMounts:
             - name: dirigible-data
               mountPath: /usr/local/tomcat/target/dirigible/repository
       volumes:
         - name: dirigible-data
           persistentVolumeClaim:
             claimName: "dirigible-data"
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: dirigible-data
 spec:
   accessModes:
     - ReadWriteOnce
   resources:
     requests:
       storage: 1Gi
 ```

=== "Deployment with Keycloak"

 ```yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: dirigible
 spec:
   replicas: 1
   strategy:
     type: Recreate
   selector:
     matchLabels:
       app: dirigible
   template:
     metadata:
       labels:
         app: dirigible
     spec:
       containers:
         - name: dirigible
           image: dirigiblelabs/dirigible-keycloak:latest
           imagePullPolicy: Always
           resources:
             requests:
               memory: "1Gi"
               cpu: "0.5"
             limits:
               memory: "4Gi"
               cpu: "2"
           ports:
             - name: http
               containerPort: 8080
           env:
             - name: DIRIGIBLE_THEME_DEFAULT
               value: "fiori"
             - name: DIRIGIBLE_KEYCLOAK_ENABLED
               value: "true"
             - name: DIRIGIBLE_KEYCLOAK_AUTH_SERVER_URL
               value: &lt;your-keycloak-auth-server&gt;
             - name: DIRIGIBLE_KEYCLOAK_REALM
               value: &lt;your-keycloak-realm&gt;
             - name: DIRIGIBLE_KEYCLOAK_SSL_REQUIRED
               value: external
             - name: DIRIGIBLE_KEYCLOAK_CLIENT_ID
               value: &lt;your-keycloak-client-id&gt;
             - name: DIRIGIBLE_KEYCLOAK_CONFIDENTIAL_PORT
               value: "443"
           volumeMounts:
             - name: dirigible-data
               mountPath: /usr/local/tomcat/target/dirigible/repository
       volumes:
         - name: dirigible-data
           persistentVolumeClaim:
             claimName: "dirigible-data"
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: dirigible-data
 spec:
   accessModes:
     - ReadWriteOnce
   resources:
     requests:
       storage: 1Gi
 ```
 !!! note "Replace Placeholders"
     Before deploying, replace the following placeholders:

     - `<your-keycloak-auth-server>` with your Keycloak Auth server _(e.g. `https://keycloak-server/auth/`)_.
     - `<your-keycloak-realm>` with your Keycloak Realm _(e.g. `my-realm`)_.
     - `<your-keycloak-client-id>` with your Keycloak Client Id _(e.g. `my-client`)_.

!!! tip "Eclipse Dirigible versions" Instead of using the latest tag (version), for production and development use cases it is recomended to use a stable release version:

 - All released versions can be found [here](https://github.com/eclipse/dirigible/releases/).
 - All Eclipse Dirigible Docker images and tags (versions) can be found [here](https://hub.docker.com/u/dirigiblelabs).

Create service configuration file: service.yaml

=== "Service"

 ```yaml
 apiVersion: v1
 kind: Service
 metadata:
   name: dirigible
   labels:
     app: dirigible
 spec:
   ports:
     - name: http
       port: 8080
   type: ClusterIP
   selector:
     app: dirigible
 ```

=== "Ingress"

 ```yaml
 apiVersion: v1
 kind: Service
 metadata:
   name: dirigible
   labels:
     app: dirigible
 spec:
   ports:
     - name: http
       port: 8080
   type: NodePort
   selector:
     app: dirigible
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: dirigible
 spec:
   rules:
     - host: dirigible
       http:
         paths:
           - path: /
             pathType: Prefix
             backend:
               service:
                 name: dirigible
                 port:
                   number: 8080
 ```

=== "Custom Domain" !!! info "Note" - You can find more information on this page: Azure DNS Zone Setup.

 ```yaml
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: dirigible
 spec:
   secretName: dirigible
   issuerRef:
     name: letsencrypt
     kind: ClusterIssuer
   commonName: "dirigible.&lt;your-custom-domain&gt;"
   dnsNames:
   - "dirigible.&lt;your-custom-domain&gt;"
 ---
 apiVersion: networking.istio.io/v1beta1
 kind: Gateway
 metadata:
   name: dirigible-gateway
 spec:
   selector:
     istio: ingressgateway
   servers:
   - hosts:
     - dirigible.&lt;your-custom-domain&gt;
     port:
       name: http
       number: 80
       protocol: HTTP
     # Initially it should be commented, then uncomment to enforce https!
     # tls:
     #   httpsRedirect: true
     tls:
       httpsRedirect: false
   - hosts:
     - dirigible.&lt;your-custom-domain&gt;
     port:
       name: https-443
       number: 443
       protocol: HTTPS
     tls:
       credentialName: dirigible
       mode: SIMPLE
 ---
 apiVersion: networking.istio.io/v1alpha3
 kind: VirtualService
 metadata:
   name: dirigible
 spec:
   hosts:
   - dirigible.default.svc.cluster.local
   - dirigible.&lt;your-custom-domain&gt;
   gateways:
   - dirigible-gateway
   - mesh
   http:
   - match:
     - uri:
         prefix: /
     route:
     - destination:
         port:
           number: 8080
         host: dirigible.default.svc.cluster.local
 ```

 !!! note "Replace Placeholders"
     Before deploying, replace the following placeholders:

     - `<your-cloud-dns-zone-name>` with your Cloud DNS Zone name _(e.g. `my-zone`)_.
     - `<istio-ingress-gateway-ip>` with your Istio Ingress Gateway IP _(e.g. `32.118.56.186`)_.
     - `<your-custom-domain>` with your custom domain _(e.g. `my-company.com`)_.

     To enforce HTTPS, after the initial deployment, update the following fragment:
     ```yaml
     # Initially it should be commented, then uncomment to enforce https!
     # tls:
     #   httpsRedirect: true
     ```

Deploy to the Azure Cluster with:

kubectl apply -f deployment.yml

kubectl apply -f service.yml

Open a web browser and go to: https://dirigible.<your-azure-kubernetes-service-domain>

Setup in Azure Kubernetes Services ​

Steps ​

Setup in Azure Kubernetes Services

Steps