Skip to content

02-capsule-installation.md

Latest commit

 

History

History
39 lines (27 loc) · 1.35 KB

02-capsule-installation.md

File metadata and controls

39 lines (27 loc) · 1.35 KB

Capsule Installation

Having our AKS cluster up and running and our kubectl has access to the API as Energy Corp's PaaS cluster administrator, i.e. admin@energycorp.com, we can go on with the Capsule Operator installation.

Login as cluster admin:

az login
az aks get-credentials --resource-group myCoAKSResourceGroup --name myCoAKSCluster

Add Capsule Helm Chart Repository

helm repo add projectcapsule https://projectcapsule.github.io/charts
helm repo update

Installing Capsule Helm Chart

Capsule needs to know the allowed groups it will work with, therefore, we need to register the Object ID of the Azure AD group myCoAKSCapsuleGroup as Capsule User Group under the CapsuleConfiguration:

helm upgrade --install capsule projectcapsule/capsule \
   --namespace capsule-system --create-namespace \
   --set manager.options.forceTenantPrefix=true \
   --set "manager.options.capsuleUserGroups[0]=$CoAKS_CAPSULE_GROUP_OBJECTID"

References

Capsule

What’s next

We are ready to install Capsule Proxy.