This topic tells you how to install Application Single Sign-On for VMware Tanzu (commonly called AppSSO) from the Tanzu Application Platform (commonly called TAP) package repository.
Note Follow the steps in this topic if you do not want to use a profile to install Application Single Sign-On. For more information about profiles, see Components and installation profiles.
The AppSSO package installs the following resources:
- The
appsso
namespace with a deployment of the AppSSO controller and services for webhooks. - RBAC
- APIs
Before installing Application Single Sign-On, ensure that you have Tanzu Application Platform installed on your Kubernetes cluster.
The sso.apps.tanzu.vmware.com
package has these dependencies:
-
cert-manager.tanzu.vmware.com
: Required at installation time and runtime. For more information see, Install cert-manager. -
crossplane.tanzu.vmware.com
: Required at installation time and runtime. For more information see, Install Crossplane. -
service-bindings.tanzu.vmware.com
: Required at runtime. For more information see, Install Service Bindings.
Important Installation time dependencies must be present on the cluster at the time the Application Single Sign-On package is being applied.
Runtime dependencies don't have to be present when the Application Single Sign-On package is being applied, but they are required eventually for it to function fully.
-
Learn more about the AppSSO package by running:
tanzu package available get sso.apps.tanzu.vmware.com --namespace tap-install
-
Install the AppSSO package by running:
tanzu package install appsso \ --namespace tap-install \ --package sso.apps.tanzu.vmware.com \ --version {{ vars.app-sso.version }}
-
Confirm the package has reconciled by running:
tanzu package installed get appsso --namespace tap-install
-
To configure the Application Single Sign-On package to meet your needs, see Package configuration for Application Single Sign-On.
-
To upgrade to a later version of the package, see Upgrade Application Single Sign-On.
-
When deployed on an OpenShift cluster, additional OpenShift-specific resources are installed. For more information, see Application Single Sign-On for OpenShift clusters.