Klaster OKD 4.19 (OpenShift) na Proxmox 9- Bastion

sudo dnf install @xfce-desktop-environment
# automatyczne uruchomienie środowiska graficznego
sudo systemctl set-default graphical.target
# włączenie dostępu zdalnego przez protokół rdp np. ze stacji Windows
sudo dnf install -y xrdp tigervnc-server
sudo systemctl enable xrdp --now
# zezwolenie na połączenia na porcie 3389
sudo firewall-cmd --permanent --add-port=3389/tcp
sudo firewall-cmd --reload
# przygotowanie automatycznego uruchamiania sesji Xfce dla aktualnego użytkownika
vim ~/startwm.sh
#!/bin/sh
dbus-launch --exit-with-session /usr/bin/startxfce4
# nadanie uprawnień
sudo chmod 755 ~/startwm.sh
sudo reboot

sudo tail -f /var/log/xrdp.log
sudo tail -f /var/log/xrdp-sesman.log

sudo dnf install chromium

cd /home/bastuser/Downloads
# pobranie wersji 4.19
wget https://github.com/okd-project/okd/releases/download/4.19.0-okd-scos.9/openshift-install-linux-4.19.0-okd-scos.9.tar.gz
wget https://github.com/okd-project/okd/releases/download/4.19.0-okd-scos.9/openshift-client-linux-4.19.0-okd-scos.9.tar.gz

# rozpakowanie archiwum
tar -zxvf openshift-client-linux-4.19.0-okd-scos.9.tar.gz
tar -zxvf openshift-install-linux-4.19.0-okd-scos.9.tar.gz
# skopiowanie binarek do właściwego katalogu
sudo mv kubectl oc openshift-install /usr/local/bin/
# sprawdzenie wersji
bastuser@bastion:~/Downloads$ oc version
Client Version: 4.19.0-okd-scos.9
Kustomize Version: v5.5.0
bastuser@bastion:~/Downloads$ openshift-install version
openshift-install 4.19.0-okd-scos.9
built from commit 249d7428c51fe85cabdab6394c4aed86fc24d398
release image quay.io/okd/scos-release@sha256:20214869bfa5d34e673939c1a3c2a061e8d4040b75e6a75110a07e21eb3f9cc6
release architecture multi
default architecture amd64

ssh-keygen

# tworzymy katalog dla plików roboczych
mkdir -p /home/bastuser/install_dir/
# tworzymy konfigurację dla manifestu Kubernetes
nano /home/bastuser/install_dir/install-config.yaml

apiVersion: v1
baseDomain: okdlab.local
metadata:
  name: testcluster
platform:
  none: {}
pullSecret: '{"auths":{"cloud.openshift.com":{"auth":"b3BxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxdVTlVEOQ==","email":"[email protected]"},"quay.io":{"auth":"b3BxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxdVTlVEOQ==","email":"[email protected]"},"registry.connect.redhat.com":{"auth":"xxxxxxxxxxxxxxxxxxxxxxxxxxxxx==","email":"[email protected]"},"registry.redhat.io":{"auth":"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx==","email":"[email protected]"}}}'
sshKey: 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDGy5Fc6Dl8m3cezP5nNOq2jHPTyNJFJdeY+AQ7awOqP [email protected]'
compute:
- hyperthreading: Enabled
  name: worker
  replicas: 0
controlPlane:
  hyperthreading: Enabled
  name: master
  replicas: 3
networking:
  clusterNetwork:
  - cidr: 10.128.0.0/14
    hostPrefix: 23
  networkType: OVNKubernetes
  serviceNetwork:
  - 172.30.0.0/16
fips: false

cp /home/bastuser/install_dir/install-config.yaml /home/bastuser/install_dir/install-config.yaml.bak

cd /home/bastuser
openshift-install create manifests --dir=install_dir/

cd /home/bastuser
sed -i 's/mastersSchedulable: true/mastersSchedulable: False/' install_dir/manifests/cluster-scheduler-02-config.yml

cd /home/bastuser
openshift-install create ignition-configs --dir=install_dir/

bastuser@bastion:

ssh [email protected] "mkdir -p /var/www/html/okd4"
scp -r /home/bastuser/install_dir/* [email protected]:/var/www/html/okd4/
ssh [email protected] "chown -R apache: /var/www/html/ && chmod -R 755 /var/www/html/"

# test dostepnosci plikow przez serwer www
bastuser@bastion:~/install_dir$ curl -s http://192.168.40.15:8080/okd4/metadata.json | jq '.'
{
  "clusterName": "testcluster",
  "clusterID": "d9799c84-bf73-4277-a359-0e72971ada93",
  "infraID": "testcluster-h8zp5",
  "featureSet": "",
  "customFeatureSet": null
}

ssh [email protected] "mkdir -p /var/www/html/okd4 && cd /var/www/html/okd4 && wget -O scos.raw.gz 'https://cloud.centos.org/centos/scos/9/prod/streams/9.0.20250510-0/x86_64/scos-9.0.20250510-0-metal.x86_64.raw.gz' && chown -R apache: /var/www/html/ && find /var/www/html -type d -exec chmod 755 {} \; && find /var/www/html -type f -exec chmod 644 {} \;"