6. Configuration

This section collects various topics about the configuration of Nubus for Kubernetes.

6.1. Available configurations

• 6.1.1. Secrets in Nubus for Kubernetes
  • 6.1.1.1. Auto-generated secrets
  • 6.1.1.2. Custom secret values
  • 6.1.1.3. Existing secrets
  • 6.1.1.4. List of secrets
• 6.1.2. Use external PostgreSQL database
  • 6.1.2.1. Configure external PostgreSQL database
  • 6.1.2.2. Define custom database names
• 6.1.3. Use external S3-compatible object storage
  • 6.1.3.1. Prepare external S3-compatible object storage for Nubus
  • 6.1.3.2. Configure deployment for using external S3-compatible object storage
• 6.1.4. Use external NATS message queue
  • 6.1.4.1. Prepare the existing NATS deployment
  • 6.1.4.2. Configure the connection
  • 6.1.4.3. Configure the secrets
  • 6.1.4.4. Apply the configuration
• 6.1.5. Scalability
  • 6.1.5.1. Directory Manager
  • 6.1.5.2. Management UI
  • 6.1.5.3. Identity Provider
  • 6.1.5.4. Portal Service
  • 6.1.5.5. Identity Store and Directory Service
• 6.1.6. Directory service high availability and scalability
  • 6.1.6.1. LDAP Primary
  • 6.1.6.2. LDAP Secondary
  • 6.1.6.3. LDAP Proxy
  • 6.1.6.4. Configuration
• 6.1.7. Keycloak Extensions
  • 6.1.7.1. Enable Keycloak Extensions
  • 6.1.7.2. Enable features
  • 6.1.7.3. Enable encrypted connection to database

6.2. Apply configuration

In many sections you come to the point where you need to apply the changes to Nubus for Kubernetes. This step is the same for most of them. To reduce duplicate content, you find the needed steps here. The affected sections refer back here.

To apply the updated configuration from the values file, use the following steps:

1. Set environment variables for the Helm command. Use the commands in Listing 3.3.

2. To upgrade your Nubus deployment, run the command in Listing 6.20.

   Listing 6.20 Apply configuration changes from values file

   $ helm upgrade "$RELEASE_NAME" \
      --namespace "$NAMESPACE_FOR_NUBUS" \
      --values custom_values.yaml \
      --version "$VERSION" \
      oci://artifacts.software-univention.de/nubus/charts/nubus