autonomic-bot
f283a371bb
Sanitized single-commit public mirror of recipe-maintainer. - Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders. - Removed plans/ and planned-updates/ (deployment-planning docs) so no client/ deployment domains appear in the public repo. - All other secret stores were already gitignored. - docs.coopcloud.tech retained as a submodule (public upstream).
54 lines
1.6 KiB
Markdown
54 lines
1.6 KiB
Markdown
# La Suite Drive — First-Time Setup
|
|
|
|
## Prerequisites
|
|
|
|
- DNS: `lasuite-drive.<domain_suffix>` must resolve to the server
|
|
- **Keycloak** must be deployed and running (dependency)
|
|
|
|
## Steps
|
|
|
|
1. **Create the app:**
|
|
```bash
|
|
abra app new lasuite-drive --server <SERVER> --domain lasuite-drive.<DOMAIN_SUFFIX> --no-input
|
|
```
|
|
|
|
2. **Generate secrets:**
|
|
```bash
|
|
abra app secret generate lasuite-drive.<DOMAIN_SUFFIX> --all -m --no-input
|
|
```
|
|
Save output to `recipe-info/testsecrets/lasuite-drive.<DOMAIN_SUFFIX>`.
|
|
|
|
3. **Deploy:**
|
|
```bash
|
|
abra app deploy lasuite-drive.<DOMAIN_SUFFIX> --chaos --force --no-input
|
|
```
|
|
|
|
4. **Post-deploy — Migrations:**
|
|
```bash
|
|
script -qefc 'abra app cmd lasuite-drive.<DOMAIN_SUFFIX> backend migrate --no-input' /dev/null
|
|
```
|
|
|
|
5. **Post-deploy — Minio buckets:**
|
|
```bash
|
|
abra app restart lasuite-drive.<DOMAIN_SUFFIX> minio-createbuckets --no-input
|
|
```
|
|
This will appear to hang — that is expected. Wait for it to complete.
|
|
|
|
6. **Keycloak SSO integration:**
|
|
```bash
|
|
python3 recipe-info/lasuite-drive/setup_keycloak_integration.py
|
|
```
|
|
This creates a `lasuite-drive` realm, OIDC client, and test user in Keycloak. It also inserts the client secret and updates the env file.
|
|
|
|
7. **Redeploy with SSO config:**
|
|
```bash
|
|
abra app deploy lasuite-drive.<DOMAIN_SUFFIX> --chaos --force --no-input
|
|
```
|
|
|
|
8. **Verify:** curl `https://lasuite-drive.<DOMAIN_SUFFIX>` returns HTTP 200.
|
|
|
|
## Notes
|
|
|
|
- Credentials are saved to `recipe-info/lasuite-drive/keycloak-test-credentials.<DOMAIN_SUFFIX>.toml`.
|
|
- OIDC test user: `testuser` / `testpass123`.
|