---
# System prepended metadata

title: What to do to have ephemeral HAC in openshift-ci?

---

# What to do to have ephemeral HAC in openshift-ci?

1. Get cicd account for public graphql app-interface endpoint (https://gitlab.cee.redhat.com/service/app-interface#querying-the-app-interface)
2. Get bot account that can manage ephemeral envs on c-rh-c-eph.8p0c.p1.openshiftapps.com cluster (or reuse this one? https://gitlab.cee.redhat.com/service/app-interface/-/blob/master/data/teams/insights/bots/ephemeral-bot.yml)
3. Add necessary secrets to openshift-ci vault (creds to graphql, creds of the bot)
4. Implement automation syncing https://gitlab.cee.redhat.com/insights-platform/frontend-configs/ somewhere publicly (on github)
5. Install and configure bonfire (ideally as mage target in e2e-tests)
    *  In order to be able to run bonfire without VPN one need to export QONTRACT env variables:
        ```
        export QONTRACT_PASSWORD=<PASSWORD>
        export QONTRACT_USERNAME=<USERNAME>
        export QONTRACT_BASE_URL="https://app-interface.devshift.net/graphql"
        ``` 
        and then edit bonfire config like this
        ```
        $ cat ~/.config/bonfire/config.yaml       
        # Bonfire deployment configuration

        # Defines where to fetch the file that defines application configs
        appsFile:
          host: gitlab
          repo: insights-platform/cicd-common
          path: bonfire_configs/ephemeral_apps.yaml

        # (optional) define any apps locally. An app defined here with <name> will override config for app
        # <name> in above fetched config.
        apps:
        - name: insights-ephemeral
          components:
            - name: frontend-configs
              host: github
              repo: <FORK>/frontend-configs
              path: deploy/deploy.yaml
        ```
6. With changes from step 5. it should be possible to run (again as mage target in e2e-tests):
    ```
    $ export NAMESPACE=$(bonfire namespace reserve)
    
    $ bonfire deploy hac --frontends true --source=appsre --clowd-env env-${NAMESPACE} --namespace=$NAMESPACE
    ```
    which should deploy HAC in ephemeral env
7. Following steps should be according to: https://docs.google.com/document/d/1gLgr0sB2NM2aKr4oBi2703Q_r-CYG15OmSphH3dCPb4/edit