<< PREVIOUS     NEXT >>  

 

LFR

 

  1. Log in to the Artifactory site using Virsec-provided credentials from the local machine

  2. Navigate to the directory vsp > releases > public > 2 > 2.9 > <Patch_Version> > Helm

  3. Right-click on the file vsp-lfr-<version>.tgz, listed on the page and download it to the local system

  4. Install VSP LFR by executing the below steps:

    1. Log in to the Management Node

    2. Copy the downloaded file vsp-lfr-<version>.tgz

  5. Execute the below command to display the configurable parameters:

    1. helm inspect values ./vsp-lfr-<version>.tgz

       

       

  6. (Optional) Instead of a complete LFR refresh, only the required LFR files can be downloaded in an incremental refresh

    image106

    When prompted, provide the Artifactory username and password.

    1. CMS_SYNC: Update all the CMS files. Once the script execution is complete, ensure that the script setup.sh is also executed

    2. VSP_OS_LIST: Specify the required Operating System (comma separated without spaces)

    3. VSP_OS_VERSIONS: Provide the version numbers for the specified Operating System (comma separated without spaces)

    4. VSP_OS_SKUS: Provide the required SKU. Allowed values are web, host, mem. By default, files related to all SKUs are downloaded

    5. image.env.RELEASE: VSP Release Version. Example: 2.9.0

  7. Execute the below commands to install LFR and display the LFR URL (using either Method 1 or 2)

    1. Method 1: Using helm upgrade command

      1. For On-Premise environments:

        1. Helm 3:

          helm upgrade vsp-lfr ./vsp-lfr-<RELEASE_VERSION>.tgz --set artifactory.username="<ARTIFACTORY_USERNAME>" --set artifactory.password='<ARTIFACTORY_PASSWORD>' --set artifactory.token="<ARTIFACTORY_TOKEN>" --namespace virsec

           

        2. Helm 2:

          helm upgrade --name vsp-lfr ./vsp-lfr-<RELEASE_VERSION>.tgz --set artifactory.username="<ARTIFACTORY_USERNAME>" --set artifactory.password='<ARTIFACTORY_PASSWORD>' --set artifactory.token="<ARTIFACTORY_TOKEN>" --namespace virsec

           

      2. For AWS EKS/ GOOGLE GKE environments:

        1. Helm 3:

          helm upgrade vsp-lfr ./vsp-lfr-<RELEASE_VERSION>.tgz --set cloudProvider=eks --set artifactory.username="<ARTIFACTORY_USERNAME>" --set artifactory.password='<ARTIFACTORY_PASSWORD>' --set artifactory.token="<ARTIFACTORY_TOKEN>" --namespace virsec

           

        2. Helm 2:

          helm upgrade --name vsp-lfr ./vsp-lfr-<RELEASE_VERSION>.tgz --set cloudProvider=eks --set artifactory.username="<ARTIFACTORY_USERNAME>" --set artifactory.password='<ARTIFACTORY_PASSWORD>' --set artifactory.token="<ARTIFACTORY_TOKEN>" --namespace virsec

           

      3. Verification: Execute the below command to verify the upgrade:

        helm status vsp-lfr

         

      4. Execute the provided commands to retrieve LFR URL:

        kubectl -n virsec get pods -o wide -l run=vsp-lfr | grep vsp-lfr | awk '{print $7}' | xargs -I {} kubectl -n virsec get node -o wide {} | tail -n 1 | awk '{print $6}') | xargs -I {} kubectl patch service vsp-lfr -n virsec -p '{"spec":{"externalIPs": [ "{}" ]}}'

         

        export SERVICE_IP=$(kubectl get svc --namespace virsec vsp-lfr -o jsonpath='{.spec.externalIPs[0]}')

         

        echo https://$SERVICE_IP:8443/vsp

         

         

    2. Method 2: Using kubectl command

      1. For On-Premise environments:

        1. Helm 3:

          helm template vsp-lfr ./vsp-lfr-<RELEASE_VERSION>.tgz --set artifactory.username="<ARTIFACTORY_USERNAME>" --set artifactory.password='<ARTIFACTORY_PASSWORD>' --set artifactory.token="<ARTIFACTORY_TOKEN>" --namespace virsec > vsp-lfr.yaml

           

        2. Helm 2:

          helm template --name vsp-lfr ./vsp-lfr-<RELEASE_VERSION>.tgz --set artifactory.username="<ARTIFACTORY_USERNAME>" --set artifactory.password='<ARTIFACTORY_PASSWORD>' --set artifactory.token="<ARTIFACTORY_TOKEN>" --namespace virsec > vsp-lfr.yaml

           

      2. For AWS EKS/ GOOGLE GKE environments:

        1. Helm 3:

          helm template vsp-lfr ./vsp-lfr-<RELEASE_VERSION>.tgz --set cloudProvider=eks --set artifactory.username="<ARTIFACTORY_USERNAME>" --set artifactory.password='<ARTIFACTORY_PASSWORD>' --set artifactory.token="<ARTIFACTORY_TOKEN>" --namespace virsec > vsp-lfr.yaml

           

        2. Helm 2:

          helm template --name vsp-lfr ./vsp-lfr-<RELEASE_VERSION>.tgz --set cloudProvider=eks --set artifactory.username="<ARTIFACTORY_USERNAME>" --set artifactory.password='<ARTIFACTORY_PASSWORD>' --set artifactory.token="<ARTIFACTORY_TOKEN>" --namespace virsec > vsp-lfr.yaml

           

      3. Execute the below commands to deploy LFR URL:

        kubectl apply -f vsp-lfr.yaml

         

         

      4. Execute the below commands to retrieve LFR URL:

        kubectl -n virsec get pods -o wide -l run=vsp-lfr | grep vsp-lfr | awk '{print $7}' | xargs -I {} kubectl -n virsec get node -o wide {} | tail -n 1 | awk '{print $6}') | xargs -I {} kubectl patch service vsp-lfr -n virsec -p '{"spec":{"externalIPs": [ "{}" ]}}'

         

        export SERVICE_IP=$(kubectl get svc --namespace virsec vsp-lfr -o jsonpath='{.spec.externalIPs[0]}')

         

        echo https://$SERVICE_IP:8443/vsp

         

 

<< PREVIOUS     NEXT >>