System owner getting started

Edit online

System owners install and set up IBM® Sovereign Core to provide their tenant owners with capability for digital sovereignty for the region in which they operate. Typically this setup takes less than one day to build. Follow-on steps such as account setup, provisioning a sovereign-ready infrastructure, and proceeding to live monitoring when the setup is complete, are all part of the subsequent application launch.

Before you begin

You need a bare metal landing zone for the installation and setup for IBM Sovereign Core. For information about the Control plane prerequisites and installation, see Prerequisites for IBM Sovereign Core and Installing IBM Sovereign Core.

About this task

You can use this outline of the high-level steps that are required to get up and ready quickly with IBM Sovereign Core. Details on each step are provided with links to read more information.

Procedure

  1. Prepare your environment to help ensure that you have a landing zone, bare metal machine that is running Red Hat® Enterprise Linux (RHEL) 10.1 for the installation procedure.
    For more information about the prerequisites, see Prerequisites for IBM Sovereign Core.
    The automated installer sets up all the required embedded components that you need for IBM Sovereign Core.
  2. Install the product package.
    For information and steps for installing the product, see Installing IBM Sovereign Core.
  3. Locate the template.env and vars.YAML files that you configured before installing the software. As part of that step you added configuration details that are specific to your environment, including temporary passwords.

    The template.env file is at /home/gori-install/mcsp/resources/charts/bootstrap-cd-pipeline/template.env.

  4. Locate the password for the built-in initial admin username gori-admin@local, which you set in the template.env file before you ran the installation.
    1. From a browser, enter the URL https://mspui.<CLUSTER_DOMAIN>.
    2. Log in with the username gori-admin@local and the password you set.
    3. After you log in to the dashboard, add other users to the system and assign them roles. You add new users with their email address as the username. It is recommended to assign at least one other user the owner role.
    4. To access user access management, click the hamburger menu in the upper left corner.
  5. You can provision shared infrastructure and resources to support various services from the platform account. For details, see Setting up the platform account.
  6. Onboard new tenants adding new accounts with the tenant owners' email addresses. After the accounts are created for the tenant owners, you can monitor deployed workloads and capacity from the IBM Sovereign Core home page.
    For details about creating tenant accounts, see Creating a tenant.
  7. Monitor data center inventory and capacity allocation from the IBM Sovereign Core home page. In Resource availability, click the hosts link to view more details.
    You can use Red Hat® Advanced Cluster Management (ACM) to assess the capacity health of your current environment and clusters, see Opening Red Hat® Advanced Cluster Management.
  8. Monitor and review the Sovereignty compliance center in IBM Sovereign Core, for baseline compliance validation and reference. When alerts of issues or risks are displayed, suggested actions to mitigate and fix the problems are displayed.

What to do next

You must monitor capacity and reallocate resources or take remedial action when required. For continuous and current compliance with full certification of catalog and tools, any issues that are flagged in the Sovereign compliance center need follow-up and fixes. To learn more about how to monitor sovereignty compliance, see the compliance center. For information about how to open the compliance center, see Using the Sovereign Compliance Center. Alternatively, open the home screen and open ACM to assess capacity health of your current environment and clusters, see Opening Red Hat® Advanced Cluster Management.