Skip to main contentIBM Cloud Pak Playbook

CAM - Installation Guide

Overview

Prerequisites

  • OCP 4.0+

  • Install CLI Tools

    • Helm CLI
    • Kubernetes CLI
    • IBM Cloud Pak CLI

    For CLI install help, check out the Knowledge Center guides here.

  • Install MCM
  • Install Service Catalog (Required for OCP 4.0+. See install here)

Online Installation

    Offline Installation

    1. Download the installer file from Passport Advantage (PPA):
    File NamePart NumberVersion
    icp-cam-x86_64-4.1.tar.gzCC4E1EN1.2
    IBM_CLOUD_AUTO_MGR_4.2_Lnx.tar.gzCC5QFEN1.3
    1. Create SCC policy

      oc adm policy add-scc-to-user ibm-anyuid-hostpath-scc system:serviceaccount:services:default

      Note: Persistent volumes with RWX mode is needed for Cloud Automation Manager. Visit here for more information.

    2. Generate a deployment ServiceID API Key in the services namespace using the following commands:

      export serviceIDName='service-deploy'
      export serviceApiKeyName='service-deploy-api-key'
      cloudctl login -a <ibm_cloud_pak_mcm_console_url> --skip-ssl-validation -u admin -p <ibm_cloud_pak_mcm_admin_password> -n services
      cloudctl iam service-id-create ${serviceIDName} -d 'Service ID for service-deploy'
      cloudctl iam service-policy-create ${serviceIDName} -r Administrator,ClusterAdministrator --service-name 'idmgmt'
      cloudctl iam service-policy-create ${serviceIDName} -r Administrator,ClusterAdministrator --service-name 'identity'
      cloudctl iam service-api-key-create ${serviceApiKeyName} ${serviceIDName} -d 'Api key for service-deploy'

      The output with the API Key should look something like this:

      Name service-deploy-api-key
      Description Api key for service-deploy
      Bound To crn:v1:icp:private:iam-identity:mycluster:n/services::serviceid:ServiceId-163c213a-37f5-4f8b-8a3c-2fd7b3887a4f
      Created At 2020-01-22T14:46+0000
      API Key <API KEY HERE>

      Save the API Key for use during install configuration in Step 5b.

    3. Load the PPA Archive using cloudctl assuming you already logged in from the previous command

      Run the following commands with a user with Cluster Admin access:

      docker login -u $(oc whoami) -p $(oc whoami -t) $(oc registry info)
      cloudctl catalog load-archive --archive <archive-name> --registry $(oc registry info)/services
    4. Sync CAM Helm Charts

    • Login to MCM UI and sync helm repositories; Go to Administer > Helm repository
    • Click Sync All in the upper-right corner
    1. Configure and Install CAM

    2. In upper right-hand corner, click the Catalog icon

    3. Search for ibm-cam and click the chart from the local-helm repository

    4. Click Configure in the bottom-right, or click the Configuration tab

    5. Enter the following install parameters:

    • Release name - Enter cam in release name.

    • Target namespace - From the drop down list, select services.

    • Select I have read and agreed to license agreements to accept the license agreements.

    • Expand Parameters > All Parameters section

    • Worker node architecture - select amd64

    • Docker image pull secret: for offline installation, set to default

    • Product Identifier - Enter IBMCloudAutomationManager_5737E67_4100_EE_000 (v1.2) or IBMCloudAutomationManager_5737E67_4200_EE_000 (v1.3)

    • IAM Service API Key - Enter the IAM service API Key you created earlier

    • Optionally, select Optimize the installation for offline to optimize the installation for offline. For example, skip internet access to import public starter templates from github.com on the public internet during the installation.

    • Optionally, select Enable audit to enable the audit for actions in Cloud Automation Manager. It requires the management logging service to be installed. For installing the Cloud Automation Manager on IBM Multicloud Manager 3.2.1, select Enable legacy audit. For installing the Cloud Automation Manager on IBM Multicloud Manager 3.2.x or higher, select ICP32. For audit related installation parameters, see Installation parameters.

    • Optionally, select Enable FIPS for CAM to enable FIPS.

    • Under IBM Cloud Private > Port, enter port value 443, or choose your own port

    • Under Image, set Repository value to image-registry.openshift-image-registry.svc:5000/services/

    • If using Dynamic Storage, Check Enable Dynamic Provisioning and set your Storage Class Name. Repeat for each volume. Note that the Storage Class must support RWM mode

      Click Install

    1. Confirm Installation

      Monitor your install with

      watch oc get pods

      You should see something like this:

      CAM Install Pods

      Once completed, access CAM in a browser using the url from

      oc get routes

    Additional Resources