Skip to content

Latest commit

 

History

History
42 lines (31 loc) · 2.5 KB

README.md

File metadata and controls

42 lines (31 loc) · 2.5 KB
Raw
description layout
OpenG2P Deployment
title description tableOfContents outline pagination
visible
true
visible
visible
true
visible
true
visible
true

Deployment

OpenG2P offers production-grade deployment scripts, Helm charts and utilities based on reputed open-source components like Kubernetes, Rancher etc. This architecture is also referred to as V4*. The deployment infra may be used for sandbox, pilot or full-scale rollout. All modules are available as Dockers and Kubernetes is used as the orchestration platform. The deployment architecture is depicted below.

{% hint style="info" %} * This deployment architecture is referred to as "V4" by the OpenG2P team due to the way it has evolved over the past few years. The V4 deployment architecture is an extension of MOSIP's V3 architecture. Unlike V3, where separate clusters are created for environments, in V4, all sandboxes and environments reside in the same cluster with finer access controls {% endhint %}

Deployment architecture (V4)

{% embed url="https://miro.com/app/board/uXjVN5LsWDw=/?share_link_id=356935336772" %} V4 Deployment Architecture {% endembed %}

Essentially, for an organisation, you will need two clusters - one for Rancher (it requires its own dedicated Kubernetes cluster. Learn more >>) and one for all OpenG2P modules and supporting components. All sandboxes and environments reside in the OpenG2P cluster under separate namespaces. The RBAC of Kubernetes is used to provide users access to namespaces. Further, the secure access to applications can be controlled by the following means:

  1. Multiple Wireguard servers enabling separate access channels.
  2. Access control at the application level where login to dashboards, and portals is controlled via authentication and authorisation defined in Keycloak.

The Keycloak inside the Rancher cluster provides organisation-wide authorization and offers single sign-on to all resources.

The above is a recommended architecture that also optimises resource usage.

For deployment, set up the following in the sequence given below:

  • Base infrastructure
  • OpenG2P specific modules (instructions available in module-specific deployment pages)