Welcome toVigges Developer Community-Open, Learning,Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
3.1k views
in Technique[技术] by (71.8m points)

Install openshift 4.5 on existing VPC in AWS

Very new to openshift and I am trying to install openshift 4.5 in our AWS environment in exiting VPC without creating new VPC. I have tried quick installation without custom "install-config.yaml" but it creates new VPC, new Route53, new subnets, new routes etc but that is not my goal. I followed this link https://docs.openshift.com/container-platform/4.5/installing/installing_aws/installing-aws-vpc.html provided by Redhat changed "install-config.yaml" to input all necessary information but still no luck. The errors I am getting varies for example i get "FATAL failed to fetch Metadata: failed to load asset "Install Config": invalid "install-config.yaml" file: [platform: Invalid value:"

In addition to that we are also trying to encrypt EBS volume with KMS according to this page https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html#ocp-4-5-encrypt-ebs-instance-volumes-with-kms-key

My question is it possible to install openshift version 4.5 on existing AWS VPC inside existing subnet? If so where do I put the values to point to existing VPC and existing subnet.

Second question is the base install image has to be redhat core os for OCP 4.5 and fedora core os for OKD 4.5 can it be centos ?

I am using following "install-config.yaml" file to run the install and please note some values are changed.

apiVersion: v1
baseDomain: okdv4.example.com
controlPlane:
  hyperthreading: Enabled
  name: master
  platform:
    aws:
      zones:
      - eu-west-2a
      - eu-west-2b
      rootVolume:
        iops: 4000
        size: 500
        type: io1
        kmsKeyARN: arn:aws:kms:eu-west-2:11111111:key/f2222222222
      type: t3a.large
  replicas: 3
compute:
- hyperthreading: Enabled
  name: worker
  platform:
    aws:
      rootVolume:
        iops: 2000
        size: 500
        type: io1
        kmsKeyARN: arn:aws:kms:eu-west-2:11111111:key/f2222222222
      type: t3a.xlarge
      zones:
      - eu-west-2c
  replicas: 3
metadata:
  name: okd4.cluster
networking:
  clusterNetwork:
  - cidr: 30.128.0.0/14
    hostPrefix: 23
  machineNetwork:
  - cidr: 30.169.4.0/26
  - cidr: 30.169.4.192/26
  - cidr: 30.169.4.64/26
  networkType: OpenShiftSDN
  serviceNetwork:
  - 30.169.4.128/26
platform:
  aws:
    region: eu-west-2
    userTags:
      adminContact: John Doe
      costCenter: 700.070
    subnets:
    - subnet-0ae1111111111
    - subnet-0e72222222222
    - subnet-0d33333333333
    - subnet-0b44444444444
    amiID: ami-004b8123456789
    serviceEndpoints:
    - name: ec2
       url: https://ec2.eu-west-2.amazonaws.com
pullSecret: '{"auths":{"cloud.openshift.com":{"auth":"Nk5NR0tGMUdBTUZHWVJRQkw}}}'
fips: false
sshKey: |
  ssh-rsa 3miJ9QzqQi8jVD
publish: Internal

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)
等待大神答复

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome to Vigges Developer Community for programmer and developer-Open, Learning and Share

2.1m questions

2.1m answers

63 comments

56.5k users

...