There are three main pre-requisites for a production grade cdefense installation on-premises
- A managed Postgres instance (for AWS RDS db.r5.large)
- enable automated backups
- A kubernetes cluster (/examples/eks) with at least two nodegroups
- node group for jobs
- each node has { label: job }
- node group for all else
- (optional) each node has { label: cdefense }
- node group for jobs
- A cluster auto-scaler
- Database URI has to be the Internal URI valid inside the private network
- DO NOT obscure it behind a DNS as applications will be unable to connect to the database
- DO NOT change Database password or URI after helm install