Creating a Kubernetes Secret for RCU in WDT

7.2.2 Creating a Kubernetes Secret for RCU in WDT

Create a Kubernetes secret for RCU using the create-secret.sh script.

Navigate to the wdt-utils directory:

cd $WORKDIR/kubernetes/create-access-domain/domain-home-on-pv/wdt-utils

Run the following command to create the secret:
```
./create-secret.sh -l "rcu_prefix=<rcu_prefix>" \
-l "rcu_schema_password=<rcu_schema_pwd>" \
-l "db_host=<db_host.domain>" \
-l "db_port=<db_port>" \
-l "db_service=<service_name>" \
-l "dba_user=<sys_db_user>" \
-l "dba_password=<sys_db_pwd>" \
-n <domain_namespace> \
-d <domain_uid> \
-s <domain_uid>-rcu-credentials
```
Where:
- <rcu_prefix> is the name of the RCU schema prefix to be created.
- <rcu_schema_pwd> is the password you want to create for the RCU schema prefix.
- <db_host.domain> is the hostname.domain of the database.
- <db_port> is the database listener port.
- <service_name> is the service name of the database.
- <sys_db_user> is the database user with SYSDBA privilege.
- <sys_db_pwd> is the SYS database password.
- <domain_uid>is the domain_uid that you want to create. This must be the same domain_uid used in Creating a Kubernetes Secret for the WDT Domain.
- <domain_namespace> is the OAM domain namespace.
- <domain_uid>-rcu-credentials is the name you want to create for the RCU secret for this namespace.
  
  Note:
  The secret name must follow the format <domain_uid>-rcu-credentials or domain creation will fail.
For example:
```
./create-secret.sh -l "rcu_prefix=OAMK8S" \
-l "rcu_schema_password=<password>" \
-l "db_host=mydatabasehost.example.com" \
-l "db_port=1521" \
-l "db_service=orcl.example.com" \
-l "dba_user=sys" \
-l "dba_password=<password>" \
-n oamns \
-d accessdomain \
-s accessdomain-rcu-credentials
```
The output will look similar to the following:
```
@@ Info: Setting up secret 'accessdomain-rcu-credentials'.
secret/accessdomain-rcu-credentials created
secret/accessdomain-rcu-credentials labeled
```

Verify the secret is created using the following command:

kubectl get secret <kubernetes_rcu_secret> -o yaml -n <domain_namespace>

For example:

kubectl get secrets -n oamns accessdomain-rcu-credentials -o yaml

The output will look similar to the following:

apiVersion: v1
data:
  db_host: <DB_HOST>
  db_port: MTUyMQ==
  db_service: <SERVICE_NAME>
  dba_password: <PASSWORD>
  dba_user: c3lz
  rcu_prefix: <RCU_PREFIX>
  rcu_schema_password: <RCU_PWD>
kind: Secret
metadata:
  creationTimestamp: "<DATE>"
  labels:
    weblogic.domainUID: accessdomain
  name: accessdomain-rcu-credentials
  namespace: oamns
  resourceVersion: "866948"
  uid: b5e3b4e0-9458-4413-a6ff-874e9af7511b
type: Opaque