Skip to main content

Deployment

HAP Deployment ModeOperations Platform Deployment Solution
Standalone ModeBased on Docker Compose
Cluster ModeBased on Kubernetes

  • The deployment server should reserve CPU and memory resources of at least 2C and 4G, with available disk space no less than 50G.

  • To reduce deployment complexity, it is recommended to deploy the operations platform on an existing HAP server.

  • If you need to deploy the operations platform on a separate server, refer to the Environment Variables list and use environment variables to pass connection information to the agent service.

Component Requirements​

  1. MySQL users must have the following permissions:

    • SELECT permission: Allows reading tables and data in the database
    • SHOW DATABASES permission: Allows viewing all databases
    • PROCESS permission: Allows viewing other users' threads for performance data
    • REPLICATION CLIENT permission: Used to access replication status and information

  2. MongoDB users are recommended to use the root role. If minimal permissions are required, refer to the following user creation and authorization statement:

    use admin
    db.createUser({
    user: "opsuser",
    pwd: "your_secure_password",
    roles: [
       { role: "clusterMonitor", db: "admin" },
       { role: "readAnyDatabase", db: "admin" },
       { role: "clusterManager", db: "admin" },
       { role: "dbAdmin", db: "mdwsrows" },
       { role: "readWrite", db: "mdwsrows" },
       { role: "dbAdmin", db: "mdservicedata" },  
       { role: "readWrite", db: "mdservicedata" },
       { role: "dbAdmin", db: "mdworksheet" },    
       { role: "readWrite", db: "mdworksheet" },  
       { role: "dbAdmin", db: "mdworkflow" },    
       { role: "readWrite", db: "mdworkflow" }    
    ]
    })

  3. Redis must have read access to Redis data.

  4. Kafka, if authentication is enabled, must have read Kafka metadata permissions.

  5. Elasticsearch users must have read and write index permissions.

  6. The Flink service address must allow access from the operations platform's internal network environment.