Environment Installation

The instructions here pertain to the deployment of common components for an environment on the Kubernetes cluster. All the components are installed in the same namespace.

Prerequisites

Before you deploy, make sure the following are in place:

• ✅ Infrastruction setup is completed

• ✅ Environment has been setup with common resources installed.

• ✅ Domain name esignet.<your environment>.<your domain name> (e.g. esignet.qa.openg2p.org) is available along with SSL certificate for the domain (the wild certificate should have already been loaded during Infrastructure setup)

• ✅ Project Owner access on the OpenG2P namespace

Installation using Rancher UI

Post Installation

Keycloak

Assigning roles to users

Create Keycloak client roles for the following components and assign them to users:

Component	Role name
OpenSearch Dashboards for logging	admin
OpenSearch Dashboards for Reporting	admin
Kafka UI for Reporting	Admin
Apache Superset	Admin
Minio Console	consoleAdmin

Assigning roles to clients

• For Social Registry to be able to access Keymanager APIs, create a realm role in Keycloak with the name "KEYMANAGER_ADMIN" and assign this as a service account role to the Social Registry Keycloak client.

Modules

Install the modules and other utility apps individually using their respective instructions:

1. Registry

2. PBMS

3. SPAR

4. G2P Bridge

5. Beneficiary Portal