Sentry On-Premise Clover fork

Official bootstrap for running your own Sentry with Docker and GKE.

Requirements

• Docker 1.10.0+
• Compose 1.6.0+ (optional)
• GKE 1.7.8+ (optional)
• GCloud SDK (optional)

Up and Running with Docker Compose

Assuming you've just cloned this repository, the following steps will get you up and running in no time!

There may need to be modifications to the included docker-compose.yml file to accommodate your needs or your environment. These instructions are a guideline for what you should generally do.

1. mkdir -p data/{sentry,postgres} - Make our local database and sentry config directories. This directory is bind-mounted with postgres so you don't lose state!
2. docker-compose run --rm web config generate-secret-key - Generate a secret key. Add it to docker-compose.yml in base as SENTRY_SECRET_KEY.
3. docker-compose run --rm web upgrade - Build the database. Use the interactive prompts to create a user account.
4. docker-compose up -d - Lift all services (detached/background mode).
5. Access your instance at localhost:9000!

Note that as long as you have your database bind-mounted, you should be fine stopping and removing the containers without worry.

Up and Running with GKE

• Ask for IAM permissions (within the GCP project of choice) please open a JIRA ticket or if it's urgent ask in #eng-infrastructure
• Follow these instructions
• git clone this repo
• cd into this repo's directory sentry_onpremise/
• gcp_project:
  • eng-sandbox
  • clover-core-staging
  • clover-core

make build
docker tag sentry_onpremise:latest gcr.io/$gcp_project/sentry_onpremise:N.X
gcloud docker -- push gcr.io/$gcp_project/sentry_onpremise:N.X

• NOTE: After you run the gcloud command copy the URL "gcr.io/$gcp_project/sentry_onpremise:N.X"
• Paste it into the sentry.yaml file
• Next navigate to the sentry_onpremise_kubernetes repo

Enabling SSO with Okta

• See the Clover forked sentry_auth_saml2
• Check the sentry.conf.py:

SENTRY_FEATURES['organizations:sso'] = True
SENTRY_FEATURES['organizations:sso-saml2'] = True

• Check the clover-sentry-onbuild-sso
• ensure that these are being pulled in libxmlsec1-dev & pkg-config

Securing Sentry with SSL/TLS

If you'd like to protect your Sentry install with SSL/TLS, there are fantastic SSL/TLS proxies like HAProxy, Nginx and Ingress-GCE.

Sentry Resources

• Documentation
• Bug Tracker
• Forums
• IRC (chat.freenode.net, #sentry)

GKE Resources

• Documentation
• Support # Note can be any GCP project
• GCP Reps:
  • Chris Kang
  • [email protected]
  • Rebecca Gardner
  • [email protected]

Kubernetes Resources

• Documentation
• Bugs
• Slack
• StackOverflow
• Forums