chore(docs): add nat gateway (#33)

* fix: add ripple ns

Signed-off-by: Chris Butler <[email protected]>

* feat: enable LE

Signed-off-by: Chris Butler <[email protected]>

* chore(docs): add nat gateway

Signed-off-by: Chris Butler <[email protected]>

---------

Signed-off-by: Chris Butler <[email protected]>

Author: butler54

.gitignore

@@ -17,4 +17,5 @@ azure-env.sh
 .openshift*
 .DS_Store
 openshift-install
-node_modules
+node_modules
+.envrc

README.md

@@ -26,6 +26,7 @@ Future work includes:
 - Only known to work today with everything on one cluster. The work to expand this is in flight.
 - If not using ARO you must either provide your own CA signed certs, or use let's encrypt.
 - Must be on 4.16.14 or later.
+**- Users must provide a NAT Gateway attached to the worker node subnet when using Azure.**
 
 ## Major versions
 
@@ -40,6 +41,7 @@ The pattern has been tested on Azure for two installation methods:
 1. Installing onto an ARO cluster
 2. Self managed OpenShift install using the `openshift-install` CLI. **REQUIRES ADDITIONAL CONFIGURATION**
 
+
 ### `1.0.0`
 1.0.0 supports OpenShift Sandboxed containers version `1.8.1` along with Trustee version `0.2.0`.
 
@@ -78,6 +80,10 @@ This only has to be done once.
 
 1. Run `sh scripts/gen-secrets.sh`
 
+#### Check your cluster on Azure has a NAT gateway attached
+OpenShift does not require a NAT gateway by default, however, peer-pods do require a NAT gateway attached to the worker node subnet.
+
+
 #### Configuring let's encrypt.
 
 Trustee requires a trusted CA issued certificate. Let's Encrypt is included for environments without a trusted cert on OpenShift's routes.

rhdp/wrapper.sh

@@ -76,10 +76,10 @@ sleep 60
 echo "---------------------"
 echo "pattern install"
 echo "---------------------"
-export KUBECONFIG=`pwd`/openshift-install/auth/kubeconfig
+#export KUBECONFIG=`pwd`/openshift-install/auth/kubeconfig
 
 
-./pattern.sh make install
+#./pattern.sh make install
 echo "---------------------"
 echo "pattern install done"
 echo "---------------------"

values-simple.yaml

@@ -16,6 +16,8 @@ clusterGroup:
   - kbs-access
   - encrypted-storage
   - experiment
+  - ripple
+  
 
   subscriptions:
     # ACM is kept anticipating 
@@ -95,7 +97,7 @@ clusterGroup:
       # Default to 'safe' for ARO
       overrides:
       - name: letsencrypt.enabled
-        value: false
+        value: true
     hello-openshift:
       name: hello-openshift
       namespace: hello-openshift