Install Continuous Delivery for PE

Much like Puppet Enterprise (PE), Continuous Delivery for PE should be installed in a central location by an administrator. Installing Continuous Delivery for PE requires you to pull and run a Docker container, then follow our guided setup to create the root account and configure your installation.  

1. Continuous Delivery for PE is delivered as a Docker container. Pull down the latest version by running:

   docker pull puppet/continuous-delivery-for-puppet-enterprise:latest

2. Run the image with the command appropriate to your database infrastructure, replacing the options with the appropriate values, as per the instructions below.
   For MySQL:

   docker run --rm --name cdpe -e DB_ENDPOINT=<MY_DATABASE_ENDPOINT> -e DB_USER=<MY_DB_USERNAME> -e DB_PASS=<MY_DB_PASS> -e DB_PREFIX=<OPTINAL_PREFIX_TO_DB_TABLES> -e DUMP_URI=<DUMP_URI> -e PFI_SECRET_KEY=<KEY_FOR_DB_SECRETS_ENCRYPTION> -p 8080:8080 -p 8000:8000 -p 7000:7000 puppet/continuous-delivery-for-puppet-enterprise:latest

   For Amazon DynamoDB:

   docker run --rm --name cdpe -e DB_ENDPOINT=ddb://<AWS_REGION> -e DB_USER=<AWS_ACCESS_KEY> -e DB_PASS=<AWS_SECRET_KEY> -e DUMP_URI=<DUMP_URI> -e PFI_SECRET_KEY=<KEY_FOR_DB_SECRETS_ENCRYPTION> -p 8080:8080 -p 8000:8000 -p 7000:7000 puppet/continuous-delivery-for-puppet-enterprise:latest

   --name

   A friendly name you give to the running image. We used cdpe in the example above.

   DB_ENDPOINT

   The mysql:// or ddb:// endpoint used to connect to your database. For example, mysql://samplehost:3306/cdpe

   DB_USER and DB_PASS

   For MySQL: Login credentials for your MySQL user. For security purposes, the database user you select should only be able to connect to this database.

   For Amazon DynamoDB: Access and secret keys for your DynamoDB user.

   Important: Make sure you generate credentials with full create, read, update, and delete permissions for DynamoDB resources.

   For security purposes, the database user you select should only be able to connect to this database.

   DB_PREFIX

   When starting up, Continuous Delivery for PE creates tables in MySQL or DynamoDB. If you'd like the tables to share a prefix, such as cdpe-, enter it here.

   Tip: If you wish to simulate a fresh installation of a given version of Continuous Delivery for PE, entering a new database table prefix will cause all the database tables to regenerate. 

   DUMP_URI

   How to address port 7000 of this container, which is the endpoint used by the Continuous Delivery for PE web UI to connect to the correct instance of the Continuous Delivery agent service. In a typical installation, this value is dump://localhost:7000.

   PFI_SECRET_KEY

   A 16-byte secret key used for AES encryption of secrets (such as PE access tokens) supplied to Continuous Delivery for PE.

   If you're a *nix user, generate this key by running:

   dd bs=1 if=/dev/urandom count=16 2>/dev/null | base64

   If you're a Windows user, generate this key by running:

   $randomBytes = New-Object Byte[](16)
   [Security.Cryptography.RNGCryptoServiceProvider]::Create().GetBytes($randomBytes) 
   $encodedBytes = [System.Convert]::ToBase64String($randomBytes)
   

   -p 8080:8080 -p 8000:8000 -p 7000:7000

   The three ports used by Continuous Delivery for PE for the web UI (8080), the backend service (8000), and the agent service (7000). You can map these ports to any port of your choosing.

3. When the Docker container is up and running, you'll see a Server:Started notification.
4. Point your web browser to localhost:8080 to access the Continuous Delivery for PE web UI. Click Get Started.
5. Follow the prompts to configure your installation. You'll be asked to:

   1. Select the email address and password that will be associated with the root account.

      Note: The root account is used for installing and configuring your organization's Continuous Delivery for PE instance.

   2. Configure the endpoints Continuous Delivery for PE services will be available on.

      Important: For production-grade systems supporting multiple Continuous Delivery for PE users, configure these services to point to the DNS endpoints of load balancers. This is especially vital if you plan to run multiple container replicas of Continuos Delivery for PE.

   3. Integrate your external storage (Amazon S3 or Artifactory) by adding credentials.

   4. Upload a Continuous Delivery for PE license file. See Generate a license for instructions on creating a free 30-day trial license.

6. When configuration is complete, you'll see a success message. Click Create your user account to sign out of the root account.
   Tip: If your organization uses GitHub, return to the root console and set up your GitHub OAuth application before signing out as root. See Integrate with GitHub for instructions.