Configure
In this step, you will configure the environment context with your GCP account details. These account details will be used by Environment Manager to interact with your account in GCP and provide configuration details for the environment. You will also provide configuration details to integrate the MLOps platform with external platforms such as Okta.
MLOps Contexts¶
GCP Context¶
You will populate your GCP service account credentials into the GCP config context.
- Navigate to Environments -> Config Contexts
- Click on the existing gcp-sa-config context name
- Select File Paths
- Enter in the GCP Service Account Key JSON file (Note, this setting is configured in your GCP account account under IAM & Admin -> Service Accounts -> SELECTED SERVICE ACCOUNT -> Keys
- Ensure that you select the sensitive checkbox for both fields
- Click Save
Important
The Rafay agent automatically writes back the environment variables to Git. The resources (esp. secrets) you identify as sensitive. will be automatically encrypted using a secret sealer before being synced to your Git repo.
--
OKTA Context¶
You will populate your OKTA credentials into the OKTA config context.
- Navigate to Environments -> Config Contexts
- Click on the existing okta-config context name
- Select Input Variables
- Populate the Client ID, secret and domain variables for your OKTA account.
- Ensure that you select the sensitive checkbox for the sensitive fields
- Click Save
DNS Context¶
You will populate your domain certificate details into the DNS config context.
- Navigate to Environments -> Config Contexts
- Click on the existing dns-certs context name
- Select Input Variables
- Populate the domain certificate and key ensuring the values are base64 encoded
- Ensure that you select the sensitive checkbox for both fields
- Click Save
Rafay Context¶
You will use the CLI configuration details of your Rafay Org to populate this config context. This information is required to load and configure resources in your Org.
The values needed can be found in a CLI config file. To obtain a CLI config file, navigate to Home -> My Tools -> Download CLI Config
- Navigate to Environments -> Config Contexts
- Click on the existing rafay-auth-config context name
- Select File Paths
- Populate the variable with the contents of your CLI configuration file
- Ensure that you select the sensitive checkbox
- Click Save
Resource Quota Contexts¶
If you enabled user resource quotas during the setup process, the following contexts will need to be populated.
Rafay Context¶
You will use the CLI configuration details of your Rafay Org to populate this config context.
The values needed can be found in a CLI config file. To obtain a CLI config file, navigate to Home -> My Tools -> Download CLI Config
- Navigate to Environments -> Config Contexts
- Click on the existing rafay-auth-config-rq-context context name
- Select File Paths
- Populate the variable with the contents of your CLI configuration file
- Ensure that you select the sensitive checkbox
- Click Save
Cluster Context¶
You will populate your Cluster credentials into the OKTA config context.
- Navigate to Environments -> Config Contexts
- Click on the existing kubeconfig-mounter-rq-context context name
- Select File Paths
- Populate the variable with the contents of your cluster kubeconfig file
- Ensure that you select the sensitive checkbox
- Click Save