- Setup DNS to resolv app.yourdomain.com
- Setup hostname and domain on all machines
hostnamectl set-hostname oc.boube.es --static
- Update & install dockers and ansible
yum -y update
yum -y install vim wget git net-tools bind-utils iptables-services bridge-utils bash-completion pyOpenSSL docker
yum -y install https://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm
sed -i -e "s/^enabled=1/enabled=0/" /etc/yum.repos.d/epel.repo ; yum -y --enablerepo=epel install ansible
cd ; git clone https://github.com/openshift/openshift-ansible
- Setup dockers (DEVS must me empty !!!)
cat <<EOF > /etc/sysconfig/docker-storage-setup
DEVS=/dev/sdb
VG=docker-vg
EOF
docker-storage-setup
sed "s/OPTIONS=.*/OPTIONS='--selinux-enabled --insecure-registry 172.30.0.0\/16'/g" -i /etc/sysconfig/docker
systemctl enable docker
systemctl start docker
- Setup SSH keys for access all nodes
sed "s/#PermitRootLogin yes/PermitRootLogin yes/g" -i /etc/ssh/sshd_config ; systemctl restart sshd
ssh-keygen
for host in master.example.com \
node1.example.com \
node2.example.com; \
do ssh-copy-id -i ~/.ssh/id_rsa.pub $host; \
done
- Install openshift with ansible
vim /etc/ansible/hosts:
[OSEv3:children]
masters
nodes
[OSEv3:vars]
ansible_ssh_user=root
deployment_type=origin
[masters]
oc.boube.es openshift_ip=192.168.1.6 openshift_public_ip=192.168.1.6 openshift_public_hostname=oc.boube.es
[nodes]
oc.boube.es openshift_ip=192.168.1.6 openshift_public_ip=192.168.1.6 openshift_node_labels="{'region': 'infra', 'zone': 'default'}" openshift_public_hostname=oc.boube.es
oc-client.boube.es openshift_ip=192.168.1.7 openshift_public_ip=192.168.1.7 openshift_node_labels="{'region': 'primary', 'zone': 'east'}" openshift_public_hostname=oc-client.boube.es
ansible-playbook ~/openshift-ansible/playbooks/byo/config.yml
# Verify
oc get nodes
yum -y update
yum -y install vim wget git net-tools bind-utils iptables-services bridge-utils bash-completion pyOpenSSL docker
- Setup dockers (DEVS must me empty !!!)
cat <<EOF > /etc/sysconfig/docker-storage-setup
DEVS=/dev/sdb
VG=docker-vg
EOF
docker-storage-setup
sed "s/OPTIONS=.*/OPTIONS='--selinux-enabled --insecure-registry 172.30.0.0\/16'/g" -i /etc/sysconfig/docker
systemctl enable docker
systemctl start docker
- Enable SSH Root Login (yes, bad idea, but it's a Q&D install ;P )
sed "s/#PermitRootLogin\ yes/PermitRootLogin\ yes/g" -i /etc/ssh/sshd_config ; systemctl restart sshd