Nubus for Kubernetes - Operation Manual

Contents:

• 1. Introduction
  • 1.1. Audience
  • 1.2. Scope
  • 1.3. Knowledge needed for understanding
  • 1.4. Feedback
  • 1.5. Versioning and changelog
• 2. Requirements
  • 2.1. Kubernetes cluster
  • 2.2. Certificate manager
  • 2.3. Relational database
  • 2.4. Message queue
  • 2.5. S3-compatible object storage
  • 2.6. SMTP server
• 3. Deployment
  • 3.1. Deploy dependencies based on examples included in Nubus
  • 3.2. Use dependencies provided in Kubernetes cluster
  • 3.3. Configuration
  • 3.4. Deploying Nubus
• 4. Getting started
  • 4.1. Provided users
  • 4.2. Open the Portal
  • 4.3. Render Helm Chart template
  • 4.4. Keycloak Admin Console
• 5. Upgrade
• 6. Configuration
  • 6.1. Overview
  • 6.2. Hostname configuration
  • 6.3. Nubus license
  • 6.4. Secrets in Nubus for Kubernetes
  • 6.5. Use external PostgreSQL database
  • 6.6. Use external S3-compatible object storage
  • 6.7. Use external NATS message queue
  • 6.8. Email sending through SMTP
  • 6.9. Scalability
  • 6.10. Directory service high availability and scalability
  • 6.11. Large environments
  • 6.12. Keycloak configuration
  • 6.13. Keycloak Extensions
  • 6.14. Restrict users or groups from capabilities in End User Self Service
  • 6.15. 2FA Helpdesk
  • 6.16. Portal
  • 6.17. User creation wizard
  • 6.18. Logging
• 7. Connect external IAM
  • 7.1. Federation with external IAM systems
  • 7.2. Import from external IAM
  • 7.3. SCIM Server
  • 7.4. SCIM Client
• 8. Backup and restore
  • 8.1. Requirements for backup and restore
  • 8.2. Backup tool: Velero
  • 8.3. Backup
  • 8.4. Restore
  • 8.5. Databases
• 9. Supply chain security
  • 9.1. Artifact types and signing
  • 9.2. Verify Helm chart signatures
  • 9.3. Verify container images
  • 9.4. SBOM and VEX information
  • 9.5. Attestation storage and format
• 10. Deployment of Intercom Service
  • 10.1. Mandatory settings for Intercom Service
  • 10.2. Encrypted connection to key-value database
  • 10.3. Helm Chart reference for Intercom Service
  • 10.4. Deploy Intercom Service
• 11. Troubleshooting NATS
  • 11.1. Prerequisites
  • 11.2. NATS debug session
• 12. Configuration reference
  • 12.1. Aliases
  • 12.2. Helm Chart reference

• Document changelog
  • Year 2026
  • Year 2025
  • Year 2024
• Bibliography
• Glossary