Preface
Red Hat Advanced Developer Suite - software supply chain (RHADS - SSC) is not really a single product. Instead, it is a set of products that combine to form a highly automated, customizable, and secure platform for building applications.
By default, RHADS - SSC includes the following products:
- Advanced Cluster Security (ACS): to scan your artifacts for vulnerabilities.
- Developer Hub: a self-service portal, to consolidate management of applications across their lifecycle.
- Enterprise Contract: to validate your artifacts against customizable policies.
- OpenShift GitOps: to manage Kubernetes deployments and their infrastructure.
- OpenShift Pipelines: to enable automation and provide visibility for continuous integration and continuous delivery (CI/CD) of software.
- Quay.io: a container registry, to store your artifacts.
- Trusted Artifact Signer: to sign and validate the artifacts that RHADS - SSC produces.
- Trusted Profile Analyzer: to deliver actionable information about your security posture.
You can see exactly which versions of these products RHADS - SSC supports in the compatibility and support matrix of our Release notes.
Red Hat Advanced Developer Suite - software supply chain supports many alternatives to this default combination of products. Later in the installation process, this documentation explains how to customize your deployment to meet your needs.
Because a fully-operational instance of RHADS - SSC involves all of the products listed above, installing RHADS - SSC takes some effort. However, we have automated the vast majority of this process with an installer tool packaged as a container image.
Be aware that the RHADS - SSC installer is not a manager: it does not support upgrades. The installer generates your first deployment of RHADS - SSC. But after installation, you must manage each product within RHADS - SSC separately. And while the installer can be run multiple times, doing so after manually changing the configuration of a product may have unpredictable results.
Additionally, the products that the installer deploys are production ready, but they are sized for a proof of concept or a very small team. For larger teams, manual reconfiguration of the products is most likely necessary and should be done by following procedures documented for each individual product.
Lastly, please be aware that the RHADS - SSC subscription only includes Red Hat Developer Hub, Red Hat Trusted Artifact Signer, Red Hat Trusted Profile Analyzer, and Enterprise Contract. The RHADS - SSC installer deploys all the other products listed above, too. But to use them, you must purchase a subscription for OpenShift Plus.
To integrate products and external service with RHADS - SSC, you must run integration commands. These commands support both of the following methods:
- Manually enter the variable values in your terminal. This guide uses this method in all examples.
-
Create a
private.envfile and source it to make variables available in your shell session before running integration commands.
Installation steps
To install RHADS - SSC using the installer, you must complete the following steps:
- Download the RHADS - SSC installer image.
- Create a ConfigMap that controls the components and features to install. This configuration is stored in the cluster and used by the installer during deployment.
- (Optional) Customize the ConfigMap to disable products you plan to integrate later.
- Integrate products and external services.
- Deploy RHADS - SSC.
The following pages of this document explain each of those installation steps in detail.