adcm-installer

ADCM Installer

Build

build binary file for current OS/Arch. This is the only way to build under MacOS

make build

build binary file for linux amd64

make linux
# or
make in-docker

Usage

Configure project (persistent installation)

# see `adi init --help` command
adi init adcm-project --adpg -i
# ...
adi apply

Stop ADCM

# see `adi delete --help` command
adi delete

ADCM Secret Storage

ADCM stores its secrets either on filesystem (default) or in a Vault/OpenBao server. Storage selected during adi init:

# embedded Vault: adds a managed OpenBao service and configures ADCM to use it.
# During `adi apply` OpenBao server started in persistence mode,
# initialized, unsealed and a KV v2 mount point is created for each ADCM
# instance. Root token is passed to ADCM via a vault-token secret
adi init adcm-project --adpg --vault

# interactive mode: select secret storage (FileSystem or Vault) and, for
# Vault, the type (embedded or external)
adi init adcm-project --adpg -i

# external Vault via config file (requires an existing KV v2 mount point)
cat config.yaml
secret-storage: Vault
vault-type: external
adcm-vault-url: https://vault.example.com:8200
adcm-vault-token-file: /path/to/token
adcm-vault-mount-point: adcm
adcm-vault-ca-file: /path/to/ca.crt

adi init adcm-project --adpg --from-config config.yaml

Run init with values from config file

cat config.yaml
adcm-db-host: pg.example.com
adcm-db-pass: $_ecRet

adi init adcm-project --from-config config.yaml