Deployment Architecture Upgrade

This document outlines the steps required for migrating the deployment architecture from V2 to V3.

Step 1: New environment setup with V3 Architecture

This is required for migration from V2 to V3 architecture

1. Make sure to have all the pre-requisites ready as per the details present in the section pre-requisites

2. Setup Wireguard Bastion host

3. Setup wireguard client in your local and complete the configuration

4. Setup Observation K8 cluster

5. Configure Observation k8 cluster

6. Observation cluster’s nginx setup

7. Observation cluster applications setup

8. Observation cluster keycloak-rancher integration

9. Setup new MOSIP k8 cluster

10. MOSIP k8 cluster configuration

11. MOSIP cluster nginx setup

12. Setting up Monitoring for MOSIP cluster

13. Setting up Alerting for MOSIP cluster

14. Setting up Logging for MOSIP cluster

Step 2: Deployment of external services

(Required for V2 to V3 architecture migration)

1. Setup postgres server

   Note:

   i. Deploy postgres server in a seperate node.

   ii. Make sure postgres initialisation is not done (only install postgres).

2. Setup Keycloak server

   Note: Make sure keycloak initialisation is not done (only install keycloak).

3. Setup Softhsm

4. Setup Minio server

5. Setup ClamAV

6. Setup ActiveMQ

7. Setup Message Gateway

8. Setup docker registry secrets if you are using private dockers.

   Note: These instructions are only applicable if you need to access Private Docker Registries. You may disregard them if all of your Docker containers are downloaded from the public Docker Hub.

9. Setup Captcha for the required domains.

10. Setup Landing page for new MOSIP cluster.

Step 3: Backup and restoration of external services

This step is required for V2 to V3 architecture migration.

1. Softhsm (only required if softhsm is used instead of real HSM)

   i. Backup keys

   ii. Restore old key

   iii. Update softhsm ida and softhsm kernel security pin

2. Postgres

   i. Export

   ii. Import

   iii. secret creation

   iv. Increase postgres max_connections to 1000

3. Keycloak

   i. Export

   ii. Import

4. Minio

   i. Export the existing Minio as directory

   ii. Clone Minio

5. Kafka

   i. setup external minio for backup.

   ii. backup kafka

   iii. restore kafka

6. Conf-secrets

Update the secrets in existing secrets in conf-secrets namspace.

1. Packets in landing to be copied from old environment to the upgraded environment or same NFS folder can be mounted to regproc packet server and group 1 stage groups. Refer here for more details.

• dmz-sc.yaml

• dmz-pkt-pv.yaml

• dmz-pkt-pvc.yaml

• dmz-landing-pv.yaml

• dmz-landing-pvc.yaml