pharmaledger-helmcharts

Helm Charts for Pharma Ledger

DEPRECATED - IMPORTANT

Helm Charts have moved to https://github.com/PharmaLedger-IMI/helm-charts except

• goquorum-genesis-dev
• goquorum-node-dev

which will not be migrated as they are not needed (anymore)!

Requirements

• helm 3

Installing the Helm Repository

Add the repo as follow

helm repo add ph-ethadapter https://pharmaledger-imi.github.io/helmchart-ethadapter

Then you can run helm search repo ph-ethadapter to see the chart(s). On installation use the --version flag to specify a chart version.

Charts

You will find the Helm charts in subfolders of charts.

Name	Description
ethadapter	Pharma Ledger Ethereum Adapter Service
epi	Pharma Ledger epi (electronic product information) application
goquorum-genesis	Quorum Genesis generator with Helm chart in Kubernetes - NOTE: DOES NOT WORK YET!
goquorum-node	Quorum node for a POA network using IBFT for consensys - NOTE: DOES NOT WORK YET!
standalone-quorum	Sandbox only: Standalone Quorum network
smartcontract	Sandbox only: Deployment of the smart contract and creation of input parameters for ethadapter in form of a Kubernetes ConfigMap and Secret

Helm Unittesting

helm-unittest is being used for testing the expected output of the helm chart.

Example: See ethadapter/tests

Sandbox environment

Abstract Overview

Compatibility Matrix

epi application version	epi helm chart version	ethadapter helm chart	smartcontract helm chart	standalone-quorum helm chart
v1.1.1	0.2.0 provide image and tag	0.4.0	0.3.0	0.3.0
v1.1.0	0.2.0 provide image and tag	0.4.0	0.3.0	0.3.0
v1.0.2	0.2.0 provide image and tag	0.3.0	0.2.0	0.2.1
v1.0.1	0.2.0 provide image and tag	0.3.0	0.2.0	0.2.1

Install Quorum network, Smart Contract, ethadapter and epi application

Installation of a Sandbox environment.

Important note about running a container as non-root user, e.g. as proposed for epi here. In this case set podSecurityContext and securityContext. Here for epi application:

podSecurityContext:
  fsGroup: 1000

securityContext:
  capabilities:
    drop:
    - ALL
  readOnlyRootFilesystem: false
  runAsNonRoot: true
  runAsUser: 1000
  allowPrivilegeEscalation: false

Commandline/Shell

Install:

echo "Deploying sandbox quorum"
helm upgrade --install quorum ph-ethadapter/standalone-quorum \
    --namespace=quorum --create-namespace \
    --version=0.3.0 \
    --set config.storage.size="10Gi" \
    --set config.storage.type=pvc \
    --wait --wait-for-jobs \
    --timeout 10m

echo ""
echo "Deploying SmartContract"
helm upgrade --install smartcontract ph-ethadapter/smartcontract \
    --namespace=ethadapter --create-namespace \
    --version=0.3.0 \
    --wait --wait-for-jobs \
    --timeout 10m

echo ""
echo "Deploying EthAdapter"
echo "Note: It will import Smart Contract address from ConfigMap created by helm chart smartcontract"
helm upgrade --install ethadapter ph-ethadapter/ethadapter \
    --namespace=ethadapter --create-namespace \
    --version=0.4.0 \
    --set secrets.orgAccountJson="\{\"address\": \"0xb5ced4530d6ccbb31b2b542fd9b4558b52296784\"\, \"privateKey\": \"0x6b93a268f68239d321981125ecf24488920c6b3d900043d56fef66adb776abd5\"\}" \
    --wait --wait-for-jobs \
    --timeout 10m

echo ""
echo "Deploying epi application"
helm upgrade --install epi ph-ethadapter/epi \
    --namespace=epi --create-namespace \
    --version=0.2.0 \
    --wait --wait-for-jobs \
    --timeout 10m \
    --set config.ethadapterUrl=http://ethadapter.ethadapter:3000 \
    --set image.repository="YOUR REPOSITORY FOR EPI APPLICATION" \
    --set image.tag="YOUR TAG FOR EPI APPLICATION"

Uninstall:

helm delete --namespace=epi epi
helm delete --namespace=ethadapter ethadapter
helm delete --namespace=ethadapter smartcontract
helm delete --namespace=quorum quorum
kubectl delete namespace epi ethadapter quorum

Terraform

terraform.tf

#
# Variables
#
variable "ethadapter_org_account_json" {
  type        = string
  description = "ETH Account and PrivateKey"
  sensitive   = true
}
# 
# Namespaces
#
resource "kubernetes_namespace" "quorum" {
  metadata {
    name = "quorum"
  }
}
resource "kubernetes_namespace" "ethadapter" {
  metadata {
    name = "ethadapter"
  }
}
resource "kubernetes_namespace" "epi" {
  metadata {
    name = "epi"
  }
}
#
# Helm Releases
#
resource "helm_release" "quorum" {
  depends_on = [
    kubernetes_namespace.quorum
  ]

  name      = "quorum"
  namespace = "quorum"

  repository = "https://pharmaledger-imi.github.io/helmchart-ethadapter"
  chart      = "standalone-quorum"
  version    = "0.3.0"

  create_namespace = false
  timeout          = 600
  wait             = true
  wait_for_jobs    = true

  set {
    name  = "config.storage.size"
    value = "10Gi"
  }
  set {
    name  = "config.storage.type"
    value = "pvc"
  }
}
resource "helm_release" "smartcontract" {
  depends_on = [
    kubernetes_namespace.ethadapter,
    helm_release.quorum
  ]

  name      = "smartcontract"
  namespace = "ethadapter"

  repository = "https://pharmaledger-imi.github.io/helmchart-ethadapter"
  chart      = "smartcontract"
  version    = "0.3.0"

  create_namespace = false
  timeout          = 600
  wait             = true
  wait_for_jobs    = true
}
resource "helm_release" "ethadapter" {
  depends_on = [
    kubernetes_namespace.ethadapter,
    helm_release.smartcontract
  ]

  name      = "ethadapter"
  namespace = "ethadapter"

  repository = "https://pharmaledger-imi.github.io/helmchart-ethadapter"
  chart      = "ethadapter"
  version    = "0.4.0"

  create_namespace = false
  timeout          = 600
  wait             = true
  wait_for_jobs    = true

  values = [<<EOF
secrets:
  orgAccountJson: |
    ${var.ethadapter_org_account_json}
EOF
  ]
}
resource "helm_release" "epi" {
  depends_on = [
    kubernetes_namespace.epi,
    helm_release.ethadapter
  ]

  name      = "epi"
  namespace = "epi"

  repository = "https://pharmaledger-imi.github.io/helmchart-ethadapter"
  chart      = "epi"
  version    = "0.2.0"

  create_namespace = false
  timeout          = 600
  wait             = true
  wait_for_jobs    = true

  set {
    name  = "config.ethadapterUrl"
    value = "http://ethadapter.ethadapter:3000"
  }
  set {
    name  = "image.repository"
    value = "TODO: YOUR REPOSITORY WITH EPI IMAGES"
  }
  set {
    name  = "image.tag"
    value = "TODO: YOUR TAG"
  }
}