Step 1: Add Helm Charts

You will need to add the necessary helm repositories. Cequence UAP requires each of these components to function. 

• helm repo add cequence https://cequence.gitlab.io/helm-charts/
• helm repo add strimzi https://strimzi.io/charts/
• helm repo add elastic https://helm.elastic.co
• helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
• helm repo add codecentric https://codecentric.github.io/helm-charts
• helm repo add nginx-stable https://helm.nginx.com/stable
• helm repo add bitnami https://charts.bitnami.com/bitnami
• helm repo add jetstack https://charts.jetstack.io
• helm repo add spark-operator https://googlecloudplatform.github.io/spark-on-k8s-operator
• helm repo add keycloak https://codecentric.github.io/helm-charts
• helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx

Run the following command to ensure the latest repositories have been deployed

helm repo update

Downloading Images from your Registry

If you cannot install images in your environment directly from Cequence's registry or the 3rd party dependency registries, please notify your Cequence account team. Cequence will provide the images directly so you can upload them to your corporate standard registry. You can then subsequently install Cequence UAP by pointing to your registry rather than Cequence's or the 3rd party dependencies directly.

Your account team will also guide you on editing the Helm values file to reflect the location of your private images. 

Step 2: Prepare your Cluster

Create a namespace for your platform deployment

Create a namespace to deploy the Cequence UAP Platform. 

kubectl create namespace <platform-namespace>

Set the new namespace as the <platform-namespace>.  

kubectl config set-context --current --namespace=<platform-namespace>

Set up Keycloak and Postgres Secrets

Set up secrets for both Postgres and Keycloak. Be sure to change the namespace.  Use the password that you plan to use as well. 

kubectl create secret generic postgres-credentials --from-literal=postgres-password=cequence --from-literal=password=cequence -n <platform-namespace>

kubectl create secret generic keycloak-admin-user --from-literal=admin-password=cequence --from-literal=password=cequence --from-literal=username=keycloak -n <platform-namespace>

Step 3: Install Dependencies

In this step, you will install the actual 3rd party components needed for Cequence UAP to function. Before proceeding with this step, please check out the UAP 3rd Party Component Dependency Matrix doc to determine which versions to install. 

Note: You will need to edit the steps below to replace the --version <x.x.x> with the correct version numbers from the dependency matrix referenced above. 

Install Certificate Manager

helm upgrade --install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --version x.x.x --set installCRDs=true --set watchAnyNamespace=true

Create your cluster issuer yaml. A sample yaml file is attached at the bottom of this article. 

kubectl create -f issuer-staging.yaml -n cert-manager

Install Strimzi

helm upgrade --install strimzi strimzi/strimzi-kafka-operator -n kafka-system --create-namespace --version x.x.x --set watchAnyNamespace=true

Install eck-operator

helm upgrade --install eck-operator elastic/eck-operator -n elastic-system --create-namespace --version x.x.x --set watchAnyNamespace=true

Install monitoring

helm upgrade --install monitoring prometheus-community/kube-prometheus-stack --namespace monitoring --create-namespace --set watchAnyNamespace=true

Install nginx-ingress.

A sample config file is attached at the bottom of this article. 

helm upgrade --install ingress-nginx ingress-nginx/ingress-nginx  -n nginx-ingress --version x.x.x --create-namespace --set rbac.create=true  --values ingressvalues.yaml

Install Postgres. 

The sample values file is attached at the bottom of this article. 

helm install postgres bitnami/postgresql --version x.x.x -n <platform-namespace> --values postgresql-values.yaml

Install Keycloak

The sample values file is attached at the bottom of this article. 

helm upgrade --install keycloak bitnami/keycloak --version x.x.x -n <platform-namespace> --values keycloak-values.yaml

Install Redis [Required for Fraud Indicators] 

If you don't use Fraud Indicators, you can disregard this step.

helm upgrade --install redis bitnami/redis  -n <platform-namespace>