Secure Cloud Development Environment - Enterprise Edition

Full usage instructions can be found at https://strong-network.github.io/aws-marketplace .

Prerequisites EKS Cluster version 1..27 or higher ingress controller to enable access from the outside Elastic application loadbalancer to attach to ingress controller Fully Qualified Domain Name(FQDN) and all of its sub-domains that can be used to access Strong Network (SN) Platform from outside Cert manager to automatically issue certificates that are valid for FQDN mentioned above ECR registry to host SN images Kubectl installed AWS cli Eksctl installed helm version v3 or greater

Setting up cluster Deploying helm charts Create appropriate namespace for SN platform deployment and resources

kubectl create namespace strong

eksctl create iamserviceaccount
--name strong-service-account
--namespace strong
--cluster <ENTER_YOUR_CLUSTER_NAME_HERE>
--attach-policy-arn arn:aws:iam::aws:policy/AWSMarketplaceMeteringFullAccess
--attach-policy-arn arn:aws:iam::aws:policy/AWSMarketplaceMeteringRegisterUsage
--attach-policy-arn arn:aws:iam::aws:policy/service-role/AWSLicenseManagerConsumptionPolicy
--approve
--override-existing-serviceaccounts Pull helm charts to deploy SN platform

export HELM_EXPERIMENTAL_OCI=1

aws ecr get-login-password
--region us-east-1 | helm registry login
--username AWS
--password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com

mkdir awsmp-chart && cd awsmp-chart

helm pull oci://709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/sncommunity/helm_charts --version 1.1.1

tar xf $(pwd)/* && find $(pwd) -maxdepth 1 -type f -delete

Fill following values and deploy helm charts to EKS cluster

hostName variable must match the FQDN mentioned above userAdminEmail is the username/email used to access the admin account for the Platform userAdminPassword is the password used to access the admin account for the Platform mongodb.auth.rootPassword is the password used to access the mongodb instance used by SN Platform twoFaDisabled disables or enables 2 factor authentication to access the Platform helm update strong
--namespace strong ./*
--set ninja.hostName=strong.network
--set ninja.userAdminEmail=admin@strong.network 
--set ninja.userAdminPassword=StrongNetworkAdminPassword1234!
--set ninja.mongodb.auth.rootPassword=mongodbRootPassword1234!
--set ninja.twoFaDisabled=true Push Images to ECR Pull images, run the following script: aws ecr get-login-password
--region us-east-1 | docker login
--username AWS
--password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com

AWSMP_IMAGES="709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/workspaces/pycharm_python:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/workspaces/intellij_ultimate:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/sncommunity/browser_in_browser:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/workspaces/phpstorm_php:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/workspaces/intellij_java:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/sncommunity/sn_enterprise_bundle:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/workspaces/cloud_editor_generic:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/workspaces/android_studio:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/sncommunity/cloud_editor_sidecar_proxy:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/sncommunity/frontend:1.0.0,709825985650.dkr.ecr.us-east-1.amazonaws.com/strong-network/workspaces/goland_go:1.0.0"

for i in $(echo $AWSMP_IMAGES | sed "s/,/ /g"); do docker pull $i; done After pulling images run the following script

aws ecr get-login-password
--region us-east-1 | docker login
--username AWS
--password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com