Install the serve gateway chart for ingress exposure.
Prerequisites (must be prepared before install):
1. Wildcard DNS is created and points to the gateway static IP
2. TLS certificate and certificate map are provisioned and ready
3. Gateway static IP and related cloud policies are prepared
The command supports provider selection via --type. Currently only gcp is
implemented; aws/other providers return an explicit not-implemented error.
Examples:
# Print generated values from config
tare install-gateway identity.json --type gcp --config gcp-gateway.json --print-helm-values
# Preview prerequisite gcloud commands
tare install-gateway identity.json --type gcp --config gcp-gateway.json --dry-run-prereqs
# Apply prerequisites then install
tare install-gateway identity.json --type gcp --config gcp-gateway.json --apply-prereqs
# Wait until Gateway reports an address
tare install-gateway identity.json --type gcp --config gcp-gateway.json --wait
Usage:
tare install-gateway <identity-file> [flags]
Flags:
Main:
--ack-prereqs Confirm wildcard DNS/cert map/static IP prerequisites are already handled
--apply-prereqs Apply supported GCP prerequisites using gcloud before install
--certificate-map-name string GCP certificate map name (recommended)
--certificate-name string Certificate resource name used for cert-map entry automation
--config string Path to gcp-gateway.json configuration file
--dns-authorization-name string DNS authorization name for managed certificate workflow
--dry-run-prereqs Print prerequisite gcloud commands and continue
--project-id string GCP project ID for prerequisite automation
--security-policy string Optional GCP security policy name
--serve-domain string Serve wildcard domain used by prerequisite workflow
--serve-url string Gateway host (default: cfg.serveUrl, then cfg.serveDomain)
--static-ip-name string GCP static IP name (recommended)
--type string Gateway provider type (gcp supported; aws/others not implemented yet) (default "gcp")
--wait Wait for Gateway to report an address after deploy
Inspect:
--print-helm-values Print generated Helm values to stdout without deploying
--print-resources Print all Kubernetes resource manifests via helm template to stdout without applying
Other:
--customer string Customer label (default: inferred from identity file)
--environment string Environment label (required when customer is saas)