Skip to content

Stackit changes#11208

Open
Nidhi251289 wants to merge 12 commits into
mendix:developmentfrom
Nidhi251289:stackItdocumentation
Open

Stackit changes#11208
Nidhi251289 wants to merge 12 commits into
mendix:developmentfrom
Nidhi251289:stackItdocumentation

Conversation

@Nidhi251289
Copy link
Copy Markdown
Contributor

Stack it changes

Copy link
Copy Markdown
Collaborator

@katarzyna-koltun-mx katarzyna-koltun-mx left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed and waiting for the go ahead.

| User | Username for the registry robot account |
| Password | Token (password) for the robot account |

Before pushing images to container registry, you must first create the repository.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think repositories automatically created when pushing to them.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@walkline https://mendix.slack.com/archives/C0B2Y7ZQ3K4/p1778569861394009
here, gauarav created the registry before
and then u were able to use it

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed. Replaced repository with registry

Example:

```shell
kubectl patch serviceaccount default -n <namespace> -p '{"imagePullSecrets": [{"name": "<secret-name>"}]}'
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe we should mention somewhere that mxpc-cli or the Helm chart will create a secret with the registry credentials, so they can use that secret. Usually, the secret has a name similar to this: mendix-generic-registry-secret.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

If your provider is Azure, [Postgres managed identity authentication](#database-postgres-azwi) can be used instead to increase security.

{{% alert color="info" %}}
The Mendix on-demand PostgreSQL provisioner cannot be used directly. STACKIT PostgreSQL Flex does not expose the `CREATEROLE` privilege, which is necessary for Mendix to automatically create database users with SQL commands. In order to facilitate the use of Postgres, switch to [JDBC plan](#database-jdbc) and create a dedicated database user for the new Mendix environment using the STACKIT CLI or API.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe we should add something like this at the beginning: This limitation applies only to STACKIT PostgreSQL Flex databases. Because Reading just the first santace can lead to a false impression.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed


#### Prerequisites

* A Ceph or S3-compatible bucket.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why are we mentioning Ceph storage here (and several lines below)? I only tested the S3-compatible interface for STACKIT Object Storage.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was already there
I just moved ceph storage in next section

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed


#### Configuring the Plan

In the Ceph plan configuration, enter the following details:
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ceph not needed here?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed

{{% /alert %}}

{{% alert color="info" %}}
The Mendix on-demand PostgreSQL provisioner cannot be used directly. STACKIT PostgreSQL Flex does not expose the CREATEROLE privilege, which is necessary for Mendix to automatically create database users via SQL commands. Hence, a databaser user needs to be created per environment before deployment.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The same comment: Maybe we should add something like this at the beginning: This limitation applies only to STACKIT PostgreSQL Flex databases. Because Reading just the first santace can lead to a false impression.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

Copy link
Copy Markdown
Contributor

@walkline walkline left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me, thanks!

@katarzyna-koltun-mx
Copy link
Copy Markdown
Collaborator

On hold until June, waiting for the go ahead

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants