IBM Client Engineering - Solution Document

IBM CMIS on OpenShift

• Introduction and Goals
  • Background and Business Problem
• Solution Strategy
  • Overview
  • Building Block View
  • Deployment
    • Pre-Requisites
      • Stage Container Images
        • Obtain Entitlement Key
      • Pull CMIS Image
      • Stage CMIS Image to Artifactory
  • Security
  • Cost
  • Testing
• Architecture Decisions

Introduction and Goals

Background and Business Problem

🚧️

Solution Strategy

🚧️

Overview

🚧️

Building Block View

┌─────────────────────────────────────────────────────────────────────┐
│K8S Namespace                                                        │
│                                                                     │
│                                                                     │
│                                                                     │
│      ┌────────────────────────────────────────────────────────┐     │
│      │                                                        │     │
│      │                       CMIS PODS                        │     │
│      │                                                        │     │
│      └────────────────────────────▲───────────────────────────┘     │
│           ┌───────────────────────┴──────────────────┐              │
│           │                                          │              │
│ ┌ ─ ─ ─ ─ ─ ─ ─ ─ ─   ┌ ─ ─ ─ ─ ─ ─ ─ ─  ┌ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ┐  │
│      ConfigMaps    │       Secrets     │          Volumes           │
│ │ ┌───────────────┐   │┌───────────────┐ │┌────────────────────┐ │  │
│   │   cmis-ldap   ││   │ldap-truststore│  │ cmis-config-store  │    │
│ │ └───────────────┘   │└───────────────┘ │└────────────────────┘ │  │
│                    │   ┌───────────────┤                            │
│ │                     ││ cmis-keystore │ │┌────────────────────┐ │  │
│                    │   └───────────────┤  │  cmis-log-store    │    │
│ │                     │┌───────────────┐ │└────────────────────┘ │  │
│                    │   │ cpe-keystore  │                            │
│ │                     │└───────────────┘ │                       │  │
│  ─ ─ ─ ─ ─ ─ ─ ─ ─ ┘   ─ ─ ─ ─ ─ ─ ─ ─ ┘  ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─   │
│                                                                     │
│                                                                     │
└─────────────────────────────────────────────────────────────────────┘

• ConfigMaps
• cmis-ldap
  • This configmap will hold the directory service configuration file. ibm_ldap_odsee_1.xml

Note on encrypting passwords. See attached sample task used to encrypt sensitive passwords.

• Volumes

cmis-config-store - 1Gb

cmis-log-store - 5Gb

Deployment

Pre-Requisites

Stage Container Images

Obtain Entitlement Key

1. Go to the Container software library.

2. Click the "Copy key."

3. Copy the entitlement key to a safe place, like a password manager. You will need this entitlement key to login to the IBM Container Registry.

4. (Optional) Verify the validity of the key by logging in to the IBM Entitled Registry using a container tool:

   export IBM_ENTITLEMENT_KEY=the key from the previous steps
   podman login cp.icr.io --username cp --password "${IBM_ENTITLEMENT_KEY:?}"

You can use `podman` or `docker` depending on > how you have set up your environment.

Pull CMIS Image

At the time of writing, we will work with CMIS Version 3.0.7.0 As part of this solution document. CMIS v3.0.7.0-IF001 will be used to demonstrate rolling upgrades using Jenkins and ArgoCD Pipelines.

• Pull two images
  • ga-307-cmis
  • ga-307-cmis-if001

podman pull cp.icr.io/cp/cp4a/fncm/cmis:ga-307-cmis

podman pull cp.icr.io/cp/cp4a/fncm/cmis:ga-307-cmis-if001

Stage CMIS Image to Artifactory

Push the images to your internal Artifactory instance

Security

🚧️

Cost

🚧️

Testing

Architecture Decisions