openunison-k8as-add-cluster helm chart not creating the sso-config configmap (Multi Cluster Manual Configuration)

[dnlshar]

Hi,

I'm trying to implement a manual multi-cluster configuration for our Kubernetes clusters by following the steps mentioned on your Docs, however when i reached the step where i need to describe the sso-config config map i realized it's messing.

[mlbiam]

I'm trying to implement a manual multi-cluster configuration for our Kubernetes clusters by following the steps mentioned on your Docs

Can you please be more specific? Please provide specific commands and output

[dnlshar]

1. Created the open unison namespace in our cluster k create ns openunison
2. Added the tremolo helm repo helm repo add tremolo https://nexus.tremolo.io/repository/helm/ and then helm repo update
3. installed the openunison operator helm install openunison tremolo/openunison-operator --namespace openunison
4. Created the secrets object orchestra-secrets-source containing the K8S_DB_SECRET and the unisonKeystorePassword.
5. Installed the orchestra chart with our values file helm install orchestra tremolo/orchestra --namespace openunison -f /path/to/ourValues.yaml
6. Installed the login portal using the same values helm install orchestra-login-portal tremolo/orchestra-login-portal --namespace openunison -f /path/to/ourValues.yaml

[mlbiam]

These instructions cover installing your control-plane openunison. This one will act as an identity provider for your satellite openunison (see attached diagram)

once your control plane openunison is running, the next step is to follow https://openunison.github.io/multi_cluster_sso/#manual-configuration-steps on the satellites which will generate the appropriate ConfigMap

[dnlshar]

Thanks. i have two more questions regarding the network configurations and Okta for the satellites. Do they need different url's than the control plane or a new ones?
For example, if i set my control plane values hosts as follows: ou.acme.com, oudb.acme.com, ouapi.acme.com. should i use the same for the satellite values hosts or do i need something else, for instance ou.sattlite1.acme.com etc..?
Also do i have to create a new application in Okta for each satellite?

Thanks.