thank you for your work! I currently try to onboard my Lab OpenShift Cluster to Cloudguard. I managed to get the deployment running, but found some caveats.
First, I found a bug in your onboard-1.sh script: At line 9 you define a namespace variable, which is never used later on:
Later in the script you use the name $myns, which was never defined before. For example in line 24:
oc create namespace $myns
Another issue I found, is located in line 43:
oc create -f uid1000.json --as system:admin
You use a lowercase filename, but the filename of the referenced file in the repo is UID1000.json, which won't work on case-sensitive filesystems.
I created a pull-request to address these issues.
Also there is a bug in this file: On line 18 you define the UID as a string, which has to be an integer:
I also created a PR for that.
Currently I am stuck when creating the cluster via the CG API as I do not get the expected response from the API. When running the request via Postman or via curl, I see the the API sends an
HTTP/1.1 401 Invalid username or password
I doublechecked the API key I created for that at https://portal.checkpoint.com/dashboard/cloudguard#/v2/settings/credentials and I also tried it with a Service Account with the Kubernetes Agent role, but both did not work. I currently have an open SR for that.
Can you confirm, that https://portal.checkpoint.com/dashboard/cloudguard#/v2/settings/credentials is the correct location for creating an API key for onboarding the cluster?