Installing OpenShift on ESI

Owners and lessees can easily install OpenShift on hardware managed through ESI through the use of the OpenShift Assisted Installer. This guide assumes that the relevant roles have been granted access to the required Ironic actions.

Prerequisites

Access to the OpenShift Assisted Installer
- You may use https://console.redhat.com or a local installation of the OpenShift Assisted Installer
Access to an external network.
Usage of ESI-managed nodes in the ‘available’ state

The Ironic provisioning network must also be able to reach the Assisted Installer. If using https://console.redhat.com, an ESI administrator can configure this access with an external network and an OpenStack router:

openstack router create provisioning-router
openstack router set --external-gateway <external network> provisioning-router
openstack router add subnet external-router <provisioning subnet>

Create a Private Network

Start by creating a private network. In addition, do the following

Create an OpenStack router for external network access and floating IP capabilities
Configure a private DNS server for your private network

Prepare Cluster on Assisted Installer

Log onto the Assisted Installer and select ‘OpenShift’ from the menu
Click on ‘Create Cluster’, select the ‘Datacenter’ tab, and create a cluster from the ‘Assisted Installer’ subsection
Input ‘Cluster details’ and click ‘Next’
- If you’re only using a single node, click the ‘Install single node OpenShift (SNO)’ checkbox
In the ‘Host discovery’ step, click the ‘Add hosts’ button
- Select ‘Minimal image file: Provision with virtual media’
- Input your SSH public key
- Click ‘Generate Discovery ISO’ and record the Discovery ISO URL

Configure Ironic Nodes

Run these commands to configure your nodes to boot from the generated OpenShift ISO:

openstack baremetal node set --instance-info deploy_interface=ramdisk <node>
openstack baremetal node set --instance-info boot_iso=<discovery iso url> <node>

Attach the node to Ironic’s provisioning network:

openstack esi node network attach --network <provisioning network> <node>

Deploy

Once your nodes are ready, run the deploy command:
```
openstack baremetal node deploy <node>
```

Wait for the nodes to appear on the Assisted Installer as Ready. Once they do, switch the nodes to your private network and configure them to boot from disk:

openstack esi node network list    # find names of ports attached to nodes
openstack esi node network detach <node> <port>
openstack esi node network attach --network <private network> <node>
openstack baremetal node boot device set <node> disk --persistent

Wait for the nodes to be Ready again. Once they are, select your nodes and click ‘Next’.
In the ‘Networking’ step, assign an API IP and an Ingress IP. These IPs should be in your private subnet range, outside of its allocation pool. Wait for the nodes in the ‘Host inventory’ section to be Ready (this may take a few minutes). Once they are, click ‘Next’.
In the ‘Review and create’ step, verify your installation parameters. Click ‘Install cluster’ when ready.
Installation will begin and eventually complete. Once it does, the Assisted Installer will have credentials for logging into your OpenShift console.

Post Install

Allow external access to your API IP and Ingress IP as follows:

openstack port create \
          --network <private network> \
          --fixed-ip subnet=<private subnet>,ip-address=<internal api ip> \
          <port name for api>
openstack floating ip create external
openstack floating ip set --port <port name for api> <external floating ip for api>

openstack port create \
          --network <private network> \
          --fixed-ip subnet=<private subnet>,ip-address=<internal ingress ip> \
          <port name for ingress>
openstack floating ip create external
openstack floating ip set --port <port name for ingress> <external floating ip for ingress>

Configure public DNS as required using the external floating IPs.
Configure private DNS as required using the internal IPs.

Add Hosts

Log onto the Assisted Installer, select ‘Clusters’, and click on your cluster.
Navigate to the ‘Add Hosts’ tab.
Click on the ‘Add hosts’ button.
- Select ‘Minimal image file: Provision with virtual media’
- Input your SSH public key
- Click ‘Generate Discovery ISO’ and record the Discovery ISO URL

Run these commands to configure your nodes to boot from the generated OpenShift ISO and to attach it to the provisioning network:

openstack baremetal node set --instance-info deploy_interface=ramdisk <node>
openstack baremetal node set --instance-info boot_iso=<discovery iso url> <node>
openstack esi node network attach --network <provisioning network> <node>

Deploy the nodes:
```
openstack baremetal node deploy <node>
```

Wait for the nodes to appear on the Assisted Installer. Once they do, switch the nodes to your private network and configure them to boot from disk:

openstack esi node network list    # find names of ports attached to nodes
openstack esi node network detach <node> <port>
openstack esi node network attach --network <private network> <node>
openstack baremetal node boot device set <node> disk --persistent

Wait for the nodes to be Ready. In order to do so, you may have to do the following:
- Assign an external floating IP to the node and log in as the core user.
- Restart the OpenShift validations with the command sudo podman container restart next-step-runner
Once the nodes are Ready, click ‘Install ready hosts’.
- The installation is complete when the nodes’ statuses change to Installed.
From your OpenShift cluster console, navigate to ‘Compute > Nodes’.
- The new nodes will appear there as Discovered.
- Click on their statuses to approve their CSRs.

Remove Hosts

Follow the Openshift documentation for deleting nodes from a cluster.
For each node that was removed, run openstack baremetal node undeploy <node>