AUTH/Current/AuthPEGuide/Deploy

Learn how to deploy Genesys Authentication.

Related documentation:

• Suite-level guide
• All services
• Genesys Authentication Release Notes

RSS:

• For private edition

Important

Make sure to review Before you begin for the full list of prerequisites required to deploy Genesys Authentication.

Prepare your environment

To prepare your environment for the deployment, first confirm the cluster is running:

oc get clusterversion

Create a new namespace (also called a project) for Genesys Authentication:

oc new-project gauth

Finally, enable a security context for the default service account:

oc adm policy add-scc-to-user genesys-restricted -z default -n gauth

Deploy in OpenShift

To deploy Genesys Authentication in OpenShift, you'll need the Helm package and your overrides file.

Copy values_gauth.yaml and the Helm package (gauth-<version>.tgz) to the installation location.

Log in to the OpenShift cluster from the host where you will run the deployment:

oc login --token <token> --server <url of api server>

Select the gauth namespace you created in Prepare your environment:

oc project gauth

For debugging purposes, use the following command to render templates without installing so you can check that resources are created properly:

helm template --debug /gauth-<version>.tgz -f values-gauth.yaml

The result shows Kubernetes descriptors. The values you see are generated from Helm templates, and based on settings from values_gauth.yaml. Ensure that no errors are displayed; you will later apply this configuration to your Kubernetes cluster.

Now you're ready to deploy Genesys Authentication:

helm install gauth ./gauth-<version>.tgz -f values-gauth.yaml

Check the installed Helm release:

helm list

The results should show the Genesys Authentication deployment details. For example:

NAME    NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
gauth   gauth           1               2021-05-20 11:56:32.5531685 +0530 +0530 deployed        gauth-0.1.77    0.1

Check the gauth namespace status:

helm status gauth

The result should show the namespace details with a status of deployed:

NAME: gauth
LAST DEPLOYED: Thu May 20 11:56:32 2021
NAMESPACE: gauth
STATUS: deployed
REVISION: 1
TEST SUITE: None

Check the Genesys Authentication OpenShift objects created by Helm:

oc get all -n gauth

The result should show all the created pods, service ConfigMaps, and so on.

Expose Genesys Authentication

After deploying, make the Genesys Authentication services accessible from outside the cluster using the standard HTTP port. Make sure to use the same hostname for all three routes. Genesys recommends using the following host format: gauth.<cluster-subdomain>. For example, the VCE cluster (https://console-openshift-console.apps.<yourclusterdomain>.com/) should have the hostname gauth.apps.<yourclusterdomain>.com

oc create route edge --service=<env-service> --hostname=<hostname> --path /environment
oc create route edge --service=<gauth-service> --hostname=<hostname> --path /auth
oc create route edge --service=<gauth-auth-ui-service> --hostname=<hostname> --path /ui/auth

Verify the new route is created in the gauth namespace:

oc get route -n gauth

The result includes the following information about the services:

NAME            HOST/PORT                                          PATH                SERVICES              PORT   TERMINATION   WILDCARD
env             gauth.apps.<yourclusterdomain>.com                 /environment        gauth-environment     https                 None
gauth           gauth.apps.<yourclusterdomain>.com                 /auth               gauth-auth            https                 None
gauth-auth-ui   gauth.apps.<yourclusterdomain>.com                 /ui/auth            gauth-auth-ui         https                 None

Note: HOST is the host name generated by OpenShift.

Validate the deployment in OpenShift

Verify that you can now access Genesys Authentication at the following URL: https://<hostname>/ui/auth/sign-in.html