AKS deployment checklist

1

Provision AKS instance on Azure.

• Consider using managed identity for the AKS service: https://docs.microsoft.com/en-us/azure/aks/use-managed-identity

• Give IQX consultant contributor access to the resource group.

• Access to the Kubernetes Service page via the Azure Portal.

2

Provision Azure SQL instance

• SQL user with db_owner access

3

Advise IQX the connection detail

• AKS: resource group & cluster name

• SQL: server name & SQL user login credentials 

• SMTP: server & OneList mailbox

4

Determine the site’s default time zone, default culture and other supported cultures

5

Deploy OneList

6

Advise customer the OneList environment detail:

• Public IP address

• AKS namespace

7

Install OneList site SSL certificate

8

Configure the DNS for OneList

9

Advise customer the OneList callback URL to configure the ODIC/ADFS provider

10

Register OneList in the OIDC authentication provider

• Advise IQX the Authority URL and the client id

11

Configure the External Authentication provider in RoleManager

12

Provision the OneList API key for each source system

13

Import SAP Adapter transports & System Account to SAP

14

Install the intermediate SSL certificate in SAP

15

Task configuration

16

Verify all the email templates