README_DEMO
Prerequisites
The following prerequisites must be satisfied to deploy IShield on a cluster.
- A Kubernetes cluster and cluster admin access to the cluster to use
kubectlcommand
Install Integrity Shield and see how Integrity Shield verifies integrity of a sample resource
This section describe how to use demo script for deploying Integrity Shield (IShield) on your cluster and see how it protect integrity of resources.
Retrive the source from integrity-enforcer Git repository.
git clone this repository and moved to integrity-enforcer directory
$ git clone https://github.com/IBM/integrity-enforcer.git
$ cd integrity-shield
$ pwd /home/repo/integrity-enforcer
In this document, we clone the code in /home/repo/integrity-enforcer.
Setup environment variable.
Setup ISHIELD_ROOT_REPO as below. /home/repo/integrity-enforcer is the root directory where Integrity Shield is cloned.
$ export ISHIELD_REPO_ROOT=/home/repo/integrity-enforcer
Setup KUBECONFIG as below. ~/kube/config/minikube is the Kuebernetes config file with credentials for accessing a cluster via kubectl.
$ export KUBECONFIG=~/kube/config/minikube
Execute demo script in /home/repo/integrity-enforcer/demo/quick-start/
$ cd demo/quick-start/
$ ./demo.sh