Difference between revisions of "UCS/Current/UCSPEGuide/Configure"
From Genesys Documentation
Line 66: | Line 66: | ||
*UCS requires stickiness for some scenarios (from GWS/WWE). You can enable this on the Service level or create ingress rules to enable and configure them. | *UCS requires stickiness for some scenarios (from GWS/WWE). You can enable this on the Service level or create ingress rules to enable and configure them. | ||
*The Ingress configuration requires the sticky sessions. You can enable this on the Service level or create ingress rules to enable and configure them. The cookie name should be set to ''UCS_SESSIONID''. | *The Ingress configuration requires the sticky sessions. You can enable this on the Service level or create ingress rules to enable and configure them. The cookie name should be set to ''UCS_SESSIONID''. | ||
− | + | <!-- | |
If you want to use arbitrary UIDs in your OpenShift deployment, you must override the '''securityContext''' settings in the '''values.yaml''' file, so that no user or group IDs are specified. For details, see {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|topic=ConfigSecurity}}. | If you want to use arbitrary UIDs in your OpenShift deployment, you must override the '''securityContext''' settings in the '''values.yaml''' file, so that no user or group IDs are specified. For details, see {{Link-AnywhereElse|product=PrivateEdition|version=Current|manual=PEGuide|topic=ConfigSecurity}}. | ||
+ | --> | ||
|Status=No | |Status=No | ||
}}{{Section | }}{{Section | ||
Line 107: | Line 108: | ||
|alignment=Vertical | |alignment=Vertical | ||
|structuredtext=Universal Contact Service (UCS) requires '''clientId''' and '''clientSecret''' registered in the Auth Service. These have to be provided during helmchart deployment. | |structuredtext=Universal Contact Service (UCS) requires '''clientId''' and '''clientSecret''' registered in the Auth Service. These have to be provided during helmchart deployment. | ||
+ | <!-- | ||
===Arbitrary UIDs in OpenShift=== | ===Arbitrary UIDs in OpenShift=== | ||
If you want to use arbitrary UIDs in your OpenShift deployment, you must override the '''securityContext''' settings, so that you do not define any specific IDs.<source lang="yaml"> | If you want to use arbitrary UIDs in your OpenShift deployment, you must override the '''securityContext''' settings, so that you do not define any specific IDs.<source lang="yaml"> | ||
Line 117: | Line 119: | ||
containerSecurityContext: {} | containerSecurityContext: {} | ||
</source> | </source> | ||
+ | --> | ||
|Status=No | |Status=No | ||
}}{{Section | }}{{Section |
Latest revision as of 12:45, February 20, 2023
This topic is part of the manual Universal Contact Service Private Edition Guide for version Current of Universal Contact Service.
Contents
Learn how to configure Universal Contact Service (UCS).
Related documentation:
RSS:
Configure a secret to access JFrog
If you haven't done so already, create a secret for accessing the JFrog registry:Now map the secret to the default service account:
kubectl create secret docker-registry <credential-name> --docker-server=<docker repo> --docker-username=<username> --docker-password=<password> --docker-email=<emailid>
kubectl secrets link default <credential-name> --for=pull
Override Helm chart values
Create a file named values.yaml and set the following values depending on your environment.
- Set the number of running PODs:
replicaCount: 2
- Set the repository for the images:
image:
registry: base address of UCS image in artifactory.
repository: ucsx/ucsx
pullPolicy: IfNotPresent
pullSecrets: if needed, set to the appropriate value for your environment.
- Set the ElasticSearch url, for example, http://ucsx-es-client-service.ucsx.svc.cluster.local:9200:
elasticsearch:
url: Set URL to the ElasticSearch for data
- Set the Authentication service information
gauth:
auth:
url: URL to Genesys Auth service
env:
url: URL to GWS Environment service
- Set the memory and CPU limits to the values required for your deployment:
resources:
requests:
memory: "500Mi"
cpu: "300m"
limits:
memory: "1000Mi"
cpu: "2000m"
- Modify the DNS Configuration to match your environment:
dnsConfig:
options:
- name: ndots
value: "3"
- UCS requires stickiness for some scenarios (from GWS/WWE). You can enable this on the Service level or create ingress rules to enable and configure them.
- The Ingress configuration requires the sticky sessions. You can enable this on the Service level or create ingress rules to enable and configure them. The cookie name should be set to UCS_SESSIONID.
Configure Kubernetes
Create a Kubernetes ConfigMap named ucsx-config and save the database parameters under the following keys:
CMX_MASTER_DB_HOST
- the FQDN of the host where PostgresDB server is runningCMX_MASTER_DB_NAME
- the database nameCMX_MASTER_DB_PORT
- The port number of the PostgresDB serverCMX_MASTER_DB_USER
- the database user
Create a Kubernetes Secret named ucsx-secret and save the following secrets under the following keys:
CMX_MASTER_DB_PASSWORD
- the password for the database user to access the databaseCMX_GWS_SERVICE_CREDENTIALS_CLIENT_ID
- the Client ID for GWS AuthCMX_GWS_SERVICE_CREDENTIALS_CLIENT_SECRET
- the Client Secret for GWS Auth
The ConfigMap and Secret can also be created automatically from Helm Chart if the following values are empty:
existingSecret
- to create the SecretexistingConfig
- to create the ConfigMap
The following values will be added to the Secret:
db.password
gauth.auth.clientId
gauth.auth.clientSecret
The following values will be added to the ConfigMap:
db.host
db.name
db.port
db.user
Configure security
Universal Contact Service (UCS) requires clientId and clientSecret registered in the Auth Service. These have to be provided during helmchart deployment.
Comments or questions about this documentation? Contact us for support!