Install nats

Here are some links for docs. * Docs for nats in k8s. * nats helm chart * CyverseUS howto

install & configure nats (discover)

# create certificates via cert-manager
kubectl apply -n discover -f resources/addons/nats/env/discover/nats-certs.yaml

# apply nodeport service
kubectl apply -n discover -f resources/addons/nats/env/discover/nats-service.yaml

# install nats via helm
helm repo add nats https://nats-io.github.io/k8s/helm/charts/
helm repo update

helm install nats nats/nats -n discover --values resources/addons/nats/values.yaml 

Create nats-services-creds secret

For creating the nats-services-creds we need to take these steps:

exec inside the nats-box pod and run the followings. See Also CyverseUS docs

~ # nsc init

? enter a configuration directory : `/nsc/nats/nsc/stores`
? Select an operator : `Create Operator`
? name your operator, account and user : `de`

~ #  nsc add operator -n cyverse --sys
[ OK ] generated and stored operator key "OANHTCLQLGTQFVRPNBTJ7HD56HTKMORLSLBZYUD7ETQAB3EQUBYFRD7J"
[ OK ] added operator "cyverse"
[ OK ] When running your own nats-server, make sure they run at least version 2.2.0
[ OK ] created system_account: name:SYS id:AA3TP5UNGFT3Z3CZAQDUUKYTWBMCBWMPQQ7Z4BVFG43ZBNRKQUJHBWJF
[ OK ] created system account user: name:sys id:UCSUROZYTQZPVC6NRFUMLOLZ472ZFCUREKVN6J7FOUGXYCU4BCVZ43J3
[ OK ] system account user creds file stored in `/nsc/nkeys/creds/cyverse/SYS/sys.creds`
~ # nsc generate nkey -o --store
OBH2PGMFLUSYDTA3OUTSOJT5LSRIY2CJU6MCEMJJMAMULWZMYHSEISQN
operator key stored /nsc/nkeys/keys/O/BH/OBH2PGMFLUSYDTA3OUTSOJT5LSRIY2CJU6MCEMJJMAMULWZMYHSEISQN.nk

~ # nsc edit operator --sk OBH2PGMFLUSYDTA3OUTSOJT5LSRIY2CJU6MCEMJJMAMULWZMYHSEISQN
[ OK ] added signing key "OBH2PGMFLUSYDTA3OUTSOJT5LSRIY2CJU6MCEMJJMAMULWZMYHSEISQN"
[ OK ] edited operator "cyverse"

~ # nsc add account -n de -K OANHTCLQLGTQFVRPNBTJ7HD56HTKMORLSLBZYUD7ETQAB3EQUBYFRD7J
[ OK ] generated and stored account key "AAPA2QMALWDT7MQOITMTTOULTVMUJM2CW4UGPBKECAJDYCYBK6JZNH2Z"
[ OK ] added account "de"

~ # nsc generate nkey -a --store
ABDVLFKHFWYBHJWUNC35S3VA4YGCW2SVD6MU2RSZBOJD42SJFXZLY372
account key stored /nsc/nkeys/keys/A/BD/ABDVLFKHFWYBHJWUNC35S3VA4YGCW2SVD6MU2RSZBOJD42SJFXZLY372.nk

~ #   nsc edit account -n de --sk ABDVLFKHFWYBHJWUNC35S3VA4YGCW2SVD6MU2RSZBOJD42SJFXZLY372
[ OK ] added signing key "ABDVLFKHFWYBHJWUNC35S3VA4YGCW2SVD6MU2RSZBOJD42SJFXZLY372"
[ OK ] edited account "de"

~ # nsc add user --account de --name services -K ABDVLFKHFWYBHJWUNC35S3VA4YGCW2SVD6MU2RSZBOJD42SJFXZLY372
[ OK ] generated and stored user key "UAYRAHG5GXMA4DX4S46HYWWPIK5MWO64RRHXBGUDB32WXCOW6EKQFJUN"
[ OK ] generated user creds file `/nsc/nkeys/creds/cyverse/de/services.creds`
[ OK ] added user "services" to account "de"

~ # cat /nsc/nkeys/creds/cyverse/de/services.creds

copy secret file from the nats-box pod & create from it a secret

# copy the cred file from the pod 
kubectl -n discover cp nats-box-6cdf5f4bb-q9s5m:/nsc/nkeys/creds/cyverse/de/services.creds services.creds

# create the secret from a file which we have created
kubectl -n discover create secret generic nats-services-creds --from-file services.creds