이 콘텐츠는 선택한 언어로 제공되지 않습니다.
Preface
Red Hat Trusted Application Pipeline (RHTAP) is not really a single product. Instead, it is a set of products that combine to form a highly automated, customizable, and secure platform for building applications.
RHTAP includes the following products:
- Advanced Cluster Security (ACS): to scan your artifacts for vulnerabilities.
- Developer Hub: a self-service portal for developers.
- OpenShift GitOps: to manage Kubernetes deployments and their infrastructure.
- OpenShift Pipelines: to enable automation and provide visibility for continuous integration and continuous delivery (CI/CD) of software.
- Quay.io: a container registry, to store your artifacts.
- Trusted Artifact Signer: to sign and validate the artifacts that RHTAP produces.
- Trusted Profile Analyzer: to deliver actionable information about your security posture.
To see exactly which versions of these products RHTAP supports, reference the compatibility and support matrix in our Release notes.
If you already have an instance of Quay.io or ACS, you can integrate it into your deployment of RHTAP.
Because a fully-operational instance of RHTAP involves all of the products listed above, installing RHTAP takes some effort. However, we have automated the vast majority of this process with an installer tool.
Be aware that the RHTAP installer is not a manager: it does not support upgrades. The installer generates your first deployment of RHTAP. After installation, you manage each product within RHTAP separately. And while the installer can be run multiple times, doing so after manually changing the configuration of a product may have unpredictable results.
Additionally, the products that the installer deploys are production ready, but they are sized for a proof of concept or a very small team. For larger teams, manual reconfiguration of the products is most likely necessary and should be done by following procedures documented for each individual product.
Before you can begin installation, you must meet the following prerequisites. Then you can complete all relevant installation steps.
Prerequisites
Installation steps
-
Installing
rhtap-cli - Configuring GitHub for RHTAP
- (Optional) Integrating instances of ACS, Quay, or Jenkins
- Installing RHTAP in your cluster
- (Optional) Post-installation integrations
The following pages of this document explain each of those installation steps in detail. If you have the prerequisites, you are ready to start the installation process by creating a GitHub personal access token.