This topic tells you how to install Application Single Sign-On for VMware Tanzu (commonly called AppSSO) from the Tanzu Application Platform (commonly called TAP) package repository.
NoteFollow the steps in this topic if you do not want to use a profile to install Application Single Sign-On. For more information about profiles, see Components and installation profiles.
The AppSSO package installs the following resources:
appsso
namespace with a deployment of the AppSSO controller and services for webhooks.Before installing Application Single Sign-On, ensure that you have Tanzu Application Platform installed on your Kubernetes cluster.
The sso.apps.tanzu.vmware.com
package has these dependencies:
cert-manager.tanzu.vmware.com
: Required at installation time and runtime. For more information see, Install cert-manager.
crossplane.tanzu.vmware.com
: Required at installation time and runtime. For more information see, Install Crossplane.
service-bindings.tanzu.vmware.com
: Required at runtime. For more information see, Install Service Bindings.
ImportantInstallation time dependencies must be present on the cluster at the time the Application Single Sign-On package is being applied.
Runtime dependencies don’t have to be present when the Application Single Sign-On package is being applied, but they are required eventually for it to function fully.
Learn more about the AppSSO package by running:
tanzu package available get sso.apps.tanzu.vmware.com --namespace tap-install
Install the AppSSO package by running:
tanzu package install appsso \
--namespace tap-install \
--package sso.apps.tanzu.vmware.com \
--version 5.1
Confirm the package has reconciled by running:
tanzu package installed get appsso --namespace tap-install
To configure the Application Single Sign-On package to meet your needs, see Package configuration for Application Single Sign-On.
To upgrade to a later version of the package, see Upgrade Application Single Sign-On.
When deployed on an OpenShift cluster, additional OpenShift-specific resources are installed. For more information, see Application Single Sign-On for OpenShift clusters.