Skip to content

Commit

Permalink
format changes
Browse files Browse the repository at this point in the history
  • Loading branch information
unglaublicherdude committed Jun 6, 2024
1 parent 697b149 commit a482962
Showing 1 changed file with 12 additions and 15 deletions.
27 changes: 12 additions & 15 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,12 @@

Vaas helm is a chart for deploying Verdict-as-a-Service on-premise.

## Install Verdict-as-a-Service
### Install Verdict-as-a-Service

1. Create a minimal values.yaml file:
* Create a minimal values.yaml file.
`values`-File for a minimum example deployment:

To access the VaaS docker containers, the image pull secret has to be set in the `global.secret.dockerconfigjson` variable.

minimum `values`-File for an example deployment:
To access the VaaS docker containers, the imagePullSecret has to be set in the `global.secret.dockerconfigjson` variable.

```yaml
global:
Expand All @@ -18,21 +17,19 @@ global:
dockerconfigjson: "$$_BASE64_ENCODED_JSON_CONTAINING_TOKEN_$$"
```
2. Install Verdict-as-a-Service:
* Install Verdict-as-a-Service:
```bash
helm install vaas oci://ghcr.io/gdatasoftwareag/charts/vaas -f values.yaml -n vaas --create-namespace
```

### Updating Verdict-as-a-Service
* Updating Verdict-as-a-Service

```bash
helm upgrade vaas oci://ghcr.io/gdatasoftwareag/charts/vaas -f values.yaml -n vaas
```

# Verdict-as-a-Service on-premises

## Getting started
# Getting started with Verdict-as-a-Service on-premise

Tested prerequisites:

Expand Down Expand Up @@ -83,7 +80,7 @@ export TOKEN_URL=http://vaas/auth/protocol/openid-connect/token # URL of the tok
gradle fileScan
```

## Configuring Verdict-as-a-Service
# Configuring Verdict-as-a-Service

### Cloud lookups

Expand Down Expand Up @@ -186,11 +183,11 @@ In addition, Sentry will always behave as follows:
| `mini-identity-provider.nodeSelector` | mini-identity-provider Node labels for pod assignment | `{}` |
| `mini-identity-provider.ingress.className` | Class name for Ingress | `""` |

### Production environment
# Production environment

In production you will have to configure a few values.

#### Ingress
### Ingress
The default hostname is "vaas". To change it and provide a tls configuration, add this to your values.yaml:

```yaml
Expand Down Expand Up @@ -243,7 +240,7 @@ If you require a different ingressClassName than "default", set:
* gateway.ingress.className
* mini-identity-provider.ingress.className

#### Zero-trust network configurations
### Zero-trust network configurations

If you are using a zero-trust network configuration, network policies have to be enabled (default). The update
CronJob requires access to the Kubernetes API. If the update fails with logs like
Expand All @@ -259,4 +256,4 @@ gdscan:
autoUpdate:
networkPolicy:
k8sApiPort: 6443
```
```

0 comments on commit a482962

Please sign in to comment.