Installing the IBM Software Hub configuration admission controller webhook

After you install IBM Software Hub, a cluster administrator can install the IBM Software Hub configuration admission controller webhook.

Installation phase
  • You are not here. Setting up a client workstation
  • You are not here. Setting up a cluster
  • You are not here. Collecting required information
  • You are not here. Preparing to run installs in a restricted network
  • You are not here. Preparing to run installs from a private container registry
  • You are not here. Preparing the cluster for IBM Software Hub
  • You are not here. Preparing to install an instance of IBM Software Hub
  • You are not here. Installing an instance of IBM Software Hub
  • You are here icon. Setting up the control plane
  • You are not here. Installing solutions and services
Who needs to complete this task?

Cluster administrator A cluster administrator must complete this task.

When do you need to complete this task?
This task is required if you want to use a set of shared custom certificates across multiple services. The following services support shared custom certificates:
  • AI Factsheets
  • Analytics Engine powered by Apache Spark
  • Cognos Analytics
  • Data Refinery
  • Data Privacy
  • DataStage
  • Data Virtualization
  • Db2 Big SQL
  • IBM Master Data Management
  • OpenPages
  • RStudio®
  • Watson Studio
  • Watson Studio Runtimes
  • watsonx Assistant
  • watsonx.data™
  • watsonx™ Orchestrate

Repeat as needed If you plan to install multiple instances of IBM Software Hub, you must repeat this task for each instance that you plan to install.

About this task

The IBM Software Hub configuration admission controller is a mutating webhook that injects the cpd-custom-ca-certs secret, the secret mount, and the associated environment variables into IBM Software Hub pods so that they have access to a shared set of custom certificates.

Use the install-cpd-config-ac and enable-cpd-config-ac commands to install and enable the webhook.

Procedure

To install the configuration admission controller webhook:

  1. Log the cpd-cli in to the Red Hat® OpenShift® Container Platform cluster: 
    ${CPDM_OC_LOGIN}
  2. If your cluster pulls images from a private container registry, set the ZEN_VERSION environment variable based on the version of IBM Software Hub on your cluster:
    IBM Software Hub version zen version
    5.4.0 6.10.0 
    export ZEN_VERSION=<version>
  3. Install the configuration admission controller webhook:
    The cluster pulls images from the IBM Entitled Registry 
    cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS}
    The cluster pulls images from a private container registry
    x86_64 clusters
    cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpfs/zen-rsi-adm-controller:${ZEN_VERSION}-amd64
    ppc64le clusters
    cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpfs/zen-rsi-adm-controller:${ZEN_VERSION}-ppc64le
    s390x clusters
    cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpfs/zen-rsi-adm-controller:${ZEN_VERSION}-s390x
  4. Enable the configuration admission controller webhook: 
    cpd-cli manage enable-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS}

What to do next

Now that you've installed and enabled the configuration admission controller webhook, you're ready to complete Applying your entitlements to monitor and report use against license terms.