Skip to content

Prerequisites

Terraform

Install Terraform.

Kubernetes cluster configuration

  • Install tanka
  • On Linux, after downloading the binary per instructions, run sudo chmod +x /usr/local/bin/tk
  • Confirm successful installation with tk --version
  • Optionally install Jsonnet if editing the jsonnet templates.

TBD

Database configuration

TBD

Install CockroachDB to generate CockroachDB certificates.

  • These instructions assume CockroachDB Core.
  • You may need to run sudo chmod +x /usr/local/bin/cockroach after completing the installation instructions.
  • Confirm successful installation with cockroach version

Cloud CLI client

  1. Install and initialize AWS CLI.
  2. Confirm successful installation with aws --version.
  3. If you don't have an account, sign-up: https://aws.amazon.com/free/
  4. Configure terraform to connect to AWS using your account.
  5. We recommend to create an AWS_PROFILE using for instance aws configure --profile aws-interuss-dss Before running terraform commands, run once in your shell: export AWS_PROFILE=aws-interuss-dss Other methods are described here: https://registry.terraform.io/providers/hashicorp/aws/latest/docs#authentication-and-configuration
  1. Install and initialize Google Cloud CLI.
  2. Confirm successful installation with gcloud version.
  3. Check that the DSS project is correctly selected: gcloud config list project
  4. Set another one if needed using: gcloud config set project $GOOGLE_PROJECT_NAME
  5. Enable the following API using Google Cloud CLI:
  6. compute.googleapis.com
  7. container.googleapis.com
  8. If you want to manage DNS entries with terraform: dns.googleapis.com
  9. Install the auth plugin to connect to kubernetes: gcloud components install gke-gcloud-auth-plugin
  10. Run gcloud auth application-default login to generate credentials to call Google Cloud Platform APIs.
  11. If the result of performing the authorization indicates 404 in the browser, check whether a local dummy-oauth instance is running (using port 8085). Stop the dummy-oauth instance if it is running.