Configuring the ForgeRock® Identity Platform in a DevOps Environment

Course Description

This specialist-led workshop instructs students through the deployment of the ForgeRock Identity Platform™  on a Kubernetes cluster operating in Google Kubernetes Environment (GKE).The workshop initially explains how to use the ForgeRock (CDK) Cloud Developer's Kit  to deploy a model configuration of the Platform, which also includes ForgeRock® Access Management (AM) & ForgeRock® (IDM) Identity Management , which share ForgeRock® (DS) Directory Service  as an identity store.The CDK is utilized to configure the Platform & redeploy the updated configuration in an existing Kubernetes cluster.

Learners then create a new cluster deploy the Platform by following the (CDM) Cloud Deployment Model . Monitoring add-ons tools are also included with the CDM example. The skills acquired by performing deployments with the CDK & CDM reference examples, help you identify the Kubernetes cluster & the Platform configuration requirements needed for preparation to drive deployments into other environments, such as test & production.

The last Module of the workshop explores the challenges of migrating an existent on-prem ForgeRock deployment to Kubernetes.

This workshop utilizes the ForgeRock DevOps documentation set as a reference for the hands-on labs.

Also, it is essential that you have already successfully finished the relevant ForgeRock Core Concepts courses before attending this workshop. It is advantageous that you also have experience working with DevOps technology such as Skaffold, Kubernetes,  Kustomize, Git, among other related tools.

Prerequisites

The given are prerequisites for successfully finishing this course-

Audience Profile

  • Developers who customize & deploy ForgeRock® Access Management (AM), ForgeRock® Directory Server (DS), & ForgeRock® (IDM) Identity Management components.
  • Deployment engineers who routinely put up Kubernetes clusters & deploy integrated software in the cloud.
  • Site engineers who configure the Kubernetes cluster & who launch the Platform into production.

Learning Objectives

Upon accomplishment of this course, you should be able to-

  • Intro to the ForgeOps toolset & documentation, get familiar with DevOps tools & deploy the ForgeRock® Identity Platform (Identity Platform) utilizing the Cloud Deployment Kit (CDK)
  • Configure the ForgeRock® Identity Platform (Identity Platform) utilizing the Cloud Deployment Model (CDM)
  • Utilize the provided ForgeRock scripts to add monitoring, run benchmarks, & explore the backup and restore tools for the ForgeRock® Identity Platform (Identity Platform). Construct your custom base Docker images. 
  • Migrate the FEC Portal example application to Kubernetes.

Content Outline

Introduce the ForgeOps toolset & documentation, get familiar with DevOps tools, & deploy the ForgeRock® Identity Platform (Identity Platform) utilizing the Cloud Deployment Kit (CDK).

Lesson One- Introducing ForgeRock DevOps Documentation & Examples

Introduce the Identity Platform, explain how to use the ForgeRock DevOps documentation to position the Identity Platform to a shared cluster, & introduce the DevOps techniques & tools required for successful deployment-

  • Explain the Identity Platform and related DevOps techniques for deploying the Identity Platform to Kubernetes
  • Access your CloudShare lab environment & developer desktop
  • Approach your associated GCP account for deploying the Identity Platform
  • Explain the ForgeRock DevOps documentation and the CDK & CDM methods of deployment
  • Explain the DevOps tools for deployment & deploy a simple application to validate the environment
  • Deploy a straightforward application to validate the tools and environment

Lesson Two- Deploying the Identity Platform to GKE utilizing the CDK

Utilize the DevOps Developer's Guide- CDK documentation to schedule the Kubernetes cluster, clone the forgeops repository, & deploy the Identity Platform to Kubernetes cluster operating in GKE-

  • Schedule your DevOps environment
  • Prepare to utilize an existing cluster for the Identity Platform
  • Position the Identity Platform to a GKE cluster
  • Confirm the Identity Platform is deployed & accessible
  • Operate with basic DevOps commands to explore the Identity Platform
  • Clear the Identity Platform deployment & clean up the environment
  • Collate deployment of the Identity Platform on other cloud providers

Lesson Three- Troubleshooting When Problems Arise

Deliver some troubleshooting tips to assist diagnose issues that might occur while conducting the hands-on portion of this workshop-

  • Approaching troubleshooting of general issues in Kubernetes systematically
  • finding DevOps related troubleshooting references
  • Running commands for troubleshooting environment issues
  • Executing commands for troubleshooting containerization issues
  • Running commands for troubleshooting orchestration issues
  • Identifying resources for getting additional support

Lesson Four- Deploying the Identity Platform with Custom Docker Images

To build & push Docker images using a private Docker registry to position the Identity Platform with customized configurations of ForgeRock® (AM) Access Management , ForgeRock® (IDM) Identity Management , and ForgeRock® Identity Gateway (IG)-

  • Guide the forgeops repository
  • Explain data used during deployment of the Identity Platform
  • Deploying the Identity Platform utilizing a customized configuration profile
  • Deploy the Identity Platform utilizing a customized configuration profile
  • Explain how to work with Kubernetes manifests and objects
  • Explain how to use Kustomize overlays to modify Kubernetes objects
  • Utilize Kustomize overlays to modify deployment configurations

Configure the ForgeRock® Identity Platform (Identity Platform) utilizing the Cloud Deployment Model (CDM).

Lesson One- Managing Multiple Deployment Environments

Plan & prepare for moving the Identity Platform (CDM) Cloud Deployment Model -based deployment from the development or (PoC) Proof of Concept stage into a test, and ultimately a production environment-

  • Handle multiple environments with Skaffold profiles and Kustomize
  • Schedule for deployment to multiple environments
  • Drive from development to other environments utilizing Property Value Substitution

Lesson Two- Preparing Your Environment for Deployment Based on the CDM

Describe the CDM, describe the needs for establish your deployment environment on GKE for CDM, & deploy a fresh cluster based on one of the CDM configuration samples-

  • Explain the CDM
  • Explain the requirements for creating and setting up the deployment environment for the CDM
  • Construct a Kubernetes cluster
  • Position the Secret Agent Operator
  • Position an ingress controller on the cluster
  • Position the certificate manager on the cluster
  • Position the monitoring tools on a cluster
  • Place your local environment to push Docker images

Lesson Three- Deploying the CDM

Deploy the Identity Platform utilizing the CDM "small" profile-

  • Deploy the CDM

Utilize the provided ForgeRock scripts to add monitoring, run benchmarks, & explore the backup and restore tools for the ForgeRock® Identity Platform (Identity Platform). Form your custom base Docker images. Manage Secrets.

Lesson One- Monitoring & Benchmarking Your Deployment

Deploy the Prometheus & Grafana monitoring tools within your deployed cluster & monitor your Kubernetes deployment objects & Identity Platform components. Generate test load & benchmark the deployment (optional)-

  • Explain the monitoring infrastructure for the CDM
  • Deploy the monitoring tools on a cluster
  • Monitor the CDM deployment
  • Benchmark the CDM deployment for monitoring (optional)

Lesson Two- Backing Up & Restoring the Identity Platform

Explain how to back up & restore the Identity Platform on a Kubernetes cluster-

  • Explain backup and restore with CDM
  • Allow scheduled backups, initiate a backup, and export user data

Lesson Three- Building Your Own Base Docker Images

Form your own base Docker image & reference it in the related product's Dockerfile for a CDM or CDk deployment of the Identity Platform with your customizations-

  • Outline of building custom base Docker images
  • Schedule ForgeRock software for your own base Docker images
  • Create your own base Docker images
  • Deploy your own base Docker images

Lesson Four- Handling Secrets

Explain and handle secrets for securing access to features deployed with your configuration of the Identity Platform-

  • Overview of the forgeops secret generation
  • Managing secrets

Migrate the FEC Portal exemplary application to Kubernetes.

Lesson One- General Considerations

Discuss how to migrate an already existing, on-prem deployment to Kubernetes, know about planning the migration, and to secure a production environment-

  • Plan the migration
  • Production Considerations
  • Prepare your environment

Lesson Two- Migrating an On-Prem DS Configuration to Kubernetes

Discuss how to migrate an already existing DS configuration to Kubernetes, & then implement the migration assignments for the provided FEC Portal use case-

  • Discuss how you can migrate an already existing DS configuration to Kubernetes
  • Migrate the DS configuration & sample user data using the CDK

Lesson Three- Migrating an On-Prem AM Configuration to Kubernetes

Discuss how to migrate an already existing AM configuration to Kubernetes, & then implement the migration tasks for the given FEC Portal use case-

  • Discuss how one can migrate an existing AM configuration to Kubernetes
  • Migrate an already existing AM configuration to Kubernetes
  • Discuss how one can customize the AM web application
  • Customize the AM web application during deployment

Lesson Four- Migrating an On-Prem IDM Configuration to Kubernetes

Discuss how to migrate a prior IDM deployment to Kubernetes and implement the migration assignments for the given FEC Portal use case-

  • Consult how you can migrate an existing IDM configuration to Kubernetes
  • Relocate the configuration from an on-prem IDM to the CDK
  • Relocate identity data from a prior version of IDM to Kubernetes

FAQs

A- To attend the training session you should have an operational Desktops or Laptops with required specification along with good internet connection to access the labs.

A- We would always recommend you to attend the live session to practice & clarify the doubts instantly and get more value from your investment. However, due to some contingency if you have to skip the class Radiant Techlearning would help you with the recorded session of that particular day.  However, those recorded sessions are not meant only for personal consumption and NOT for distribution or any commercial use.

A- Radiant Techlearning has a data center containing the Virtual Training environment for the purpose of participant’s hand-on-practice. 

Participants can easily access these labs over Cloud with the help of remote desktop connection. 

Radiant virtual labs provide you the flexibility to learn from anywhere in the world and in any time zone. 

 

A- The learners will be enthralled as we engage them in real world and industry Oriented projects during the training program. These projects will improve your skills and knowledge and you will gain better experience. These real time projects, they will help you a lot in your future tasks and assignments.

 

Send a Message.


  • Enroll