Skip to content

Preliminary Questions

For Installing Appcircle Server

On Kubernetes/OpenShift Environment

While answering the questions below, it is strongly recommended to review the “Kubernetes/OpenShift Architecture Using Helm Chart” diagram. References to the diagram are indicated under each question.

1. Container Platform Version Which version of the container platform is installed? If you are using OpenShift, please specify the distribution (OCP or OKD) and its version. If you are using Kubernetes, please specify the distribution and its version. If there are differences between “test” and “production” environments, please specify each environment separately. If you are deploying applications with public internet access to a separate cluster, and there are differences, please include the distribution and versions used there as well. Diagram: Appcircle Server

2. Relational Database for IAM Appcircle IAM service requires an external relational database. Which of the following options can you provide? Please specify the version of the database service installed in your environment. Supported database versions for Appcircle IAM service:

  • ** PostgreSQL | 17.x, 16.x, 15.x, 14.x, 13.x
  • ** MSSQL Server | 2022, 2019
  • MariaDB | 11.8 (LTS), 11.4 (LTS), 10.11 (LTS), 10.6 (LTS)
  • MySQL | 8.4 (LTS), 8.0 (LTS)
  • Oracle Database | 23.x (i.e. 23.5+), 19c (19.3+)
  • **: Recommended and frequently used options by the customers for this purpose.
  • Diagram: Authentication service integrations > Relational Database

3. MongoDB Service Appcircle microservices require an external MongoDB service to store data. Is there a MongoDB service installed in your environment? If so, please specify the version.

  • MongoDB versions supported by Appcircle range from 4.2 to 8.0.
  • Support for EOL (end-of-life) versions is planned to be discontinued, so it is recommended not to use 4.x versions in the long term.
  • Diagram: External services that Appcircle depends on > MongoDB

4. HashiCorp Vault Service Appcircle requires an external HashiCorp Vault service to store sensitive user data. Is there a HashiCorp Vault service installed in your environment? If so, please specify the version.

  • If you cannot provide an external HashiCorp Vault service, you can use the one provided by the Appcircle Helm chart (version 1.10.x).
  • However, in this case, an external data storage backend (e.g., a database) must be configured. For other supported storage backends, please refer to the documentation.
  • Diagram: External services that Appcircle depends on > HashiCorp Vault

5. MinIO or S3-compatible Storage Appcircle requires an external MinIO or S3-compatible storage service to store binary files (e.g., IPA, APK).

  • Please specify the version of the storage service you can provide for this purpose.
  • Diagram: External services that Appcircle depends on > S3 Compatible Storage

6. Kubernetes Secrets We use Kubernetes secrets to generate and manage secrets for inter-service communication and configuration in the Helm chart. Does your cluster support the use of Kubernetes secrets?

  • If yes, please also specify whether the secrets used to access external services mentioned in items 2, 3, 4, and 5 can be stored here.
  • If Kubernetes secrets are not allowed, which internal or external service can we use instead? Please specify with the version.
  • Diagram: Appcircle Server

7. Network: Inbound Are all applications deployed in a single cluster?

  • For example, exposing specific services to the internet within the same cluster using network policies. Or do you use a separate cluster for internet-facing applications? If so, please add your notes.
  • Appcircle services can be deployed across two clusters, one of which is a DMZ. The DMZ cluster hosts internet-facing services like “Testing Portal” and “Enterprise Portal.”
  • A setup similar to Docker/Podman architecture with DMZ support is available.
  • Diagram: Testing Distribution Download, Enterprise App Store Download

8. Network: Outbound How do services in the cluster access the internet? Please describe how you plan to meet Appcircle services’ internet access requirements. For example:

  • Appcircle server needs access to the App Store API for certificate and provisioning profile operations.
  • Product licenses are downloaded from Appcircle CDN.
  • Diagram: Google Play/AppGallery/App Store, Appcircle CDN

9. Security Requirements for Container Images What are the security requirements for container images? Please specify according to your organization’s security policies. Some example requirements are listed below:

  • Restrictions on the location from which container images can be accessed
  • Requirement for signed container images
  • Image scan reports may be requested, or internal scanning criteria may apply
  • Time constraints for resolving findings may be enforced
  • Diagram: Artifact Registry

10. Git Providers Please list the Git providers that Appcircle server will access for source code, along with their versions. For supported Git connection options, refer to the documentation.

  • Diagram: Git Provider