dosubot[bot] commented on issue #7928:
URL:
https://github.com/apache/incubator-devlake/issues/7928#issuecomment-2300787106
<!-- Greeting -->
Hello @pmallampati-sift! I'm here to help you with any questions or issues
you might have. I can assist with bug fixes, troubleshooting, and becoming a
contributor.
<!-- Answer -->
To deploy DevLake with a MySQL database hosted on GCP with SSL enabled using
a Helm chart, you need to pass the SSL certificates in the DB connection
string. Here are the steps to achieve this:
1. **Create a Kubernetes secret with the necessary database connection
details and SSL certificates:**
```shell
kubectl create secret generic devlake-mysql-auth \
--from-literal=MYSQL_USER=<your-username> \
--from-literal=MYSQL_PASSWORD=<your-password> \
--from-literal=MYSQL_DATABASE=<your-database> \
--from-literal=MYSQL_ROOT_PASSWORD=<your-root-password> \
--from-literal=DB_URL='mysql://<your-username>:<your-password>@<dbserver>:<port>/<database>?charset=utf8mb4&parseTime=True&tls=custom'
\
--from-file=ca-cert=<path-to-ca-cert> \
--from-file=client-cert=<path-to-client-cert> \
--from-file=client-key=<path-to-client-key>
```
2. **Install the DevLake Helm chart and reference the created secret:**
```shell
helm repo add devlake
https://apache.github.io/incubator-devlake-helm-chart
helm repo update
ENCRYPTION_SECRET=$(openssl rand -base64 2000 | tr -dc 'A-Z' | fold -w
128 | head -n 1)
helm install devlake devlake/devlake \
--set mysql.useExternal=true \
--set mysql.externalServer=<dbserver> \
--set mysql.externalPort=<port> \
--set mysql.username=<your-username> \
--set mysql.password=<your-password> \
--set mysql.database=<your-database> \
--set option.connectionSecretName=devlake-mysql-auth \
--set lake.encryptionSecret.secret=$ENCRYPTION_SECRET
```
Replace `<your-username>`, `<your-password>`, `<your-database>`,
`<your-root-password>`, `<dbserver>`, `<port>`, `<path-to-ca-cert>`,
`<path-to-client-cert>`, and `<path-to-client-key>` with your actual values
<sup>[[1]](https://github.com/apache/incubator-devlake-website/blob/main/docs/GettingStarted/HelmSetup.md)</sup>.
<!-- Dosu Comment Footer -->
*To continue talking to [Dosu](https://dosu.dev), mention @dosu.*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@devlake.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
