Chapter 9. Postinstallation configuration for a disconnected IBM Cloud cluster
After you install a cluster on IBM Cloud® in a disconnected environment, you must complete the postinstallation configuration steps to prepare the cluster for use.
9.1. Disabling the default software catalog sources Copy linkLink copied to clipboard!
To use only trusted or locally available Operator catalogs, disable the default software catalog sources that OpenShift Container Platform configures during installation. In a restricted network environment, you must disable the default catalogs as a cluster administrator.
Procedure
Disable the sources for the default catalogs by adding
disableAllDefaultSources: trueto theOperatorHubobject:$ oc patch OperatorHub cluster --type json \ -p '[{"op": "add", "path": "/spec/disableAllDefaultSources", "value": true}]'TipOr, you can use the web console to manage catalog sources. From the Administration
Cluster Settings Configuration OperatorHub page, click the Sources tab, where you can create, update, delete, disable, and enable individual sources.
9.2. Installing the policy resources into the cluster Copy linkLink copied to clipboard!
Mirroring the OpenShift Container Platform content using the oc-mirror OpenShift CLI (oc) plugin creates resources, which include catalogSource-certified-operator-index.yaml and imageContentSourcePolicy.yaml.
-
The
ImageContentSourcePolicyresource associates the mirror registry with the source registry and redirects image pull requests from the online registries to the mirror registry. The
CatalogSourceresource is used by Operator Lifecycle Manager (OLM) Classic to retrieve information about the available Operators in the mirror registry, which lets users discover and install Operators.NoteOLM v1 uses the
ClusterCatalogresource to retrieve information about the available cluster extensions in the mirror registry.The oc-mirror plugin v1 does not generate
ClusterCatalogresources automatically; you must manually create them. The oc-mirror plugin v2 does, however, generateClusterCatalogresources automatically.For more information on creating and applying
ClusterCatalogresources, see "Adding a catalog to a cluster" in "Extensions".
After you install the cluster, you must install these resources into the cluster.
Prerequisites
- You have mirrored the image set to the registry mirror in the disconnected environment.
-
You have access to the cluster as a user with the
cluster-adminrole.
Procedure
-
Log in to the OpenShift CLI as a user with the
cluster-adminrole. Apply the YAML files from the results directory to the cluster:
$ oc apply -f ./oc-mirror-workspace/results-<id>/
Verification
Verify that the
ImageContentSourcePolicyresources were successfully installed:$ oc get imagecontentsourcepolicyVerify that the
CatalogSourceresources were successfully installed:$ oc get catalogsource --all-namespaces
9.3. Telemetry access for OpenShift Container Platform Copy linkLink copied to clipboard!
To provide metrics about cluster health and the success of updates, the Telemetry service requires internet access. When connected, this service runs automatically by default and registers your cluster to OpenShift Cluster Manager.
After you confirm that your OpenShift Cluster Manager inventory is correct, either maintained automatically by Telemetry or manually by using OpenShift Cluster Manager,use subscription watch to track your OpenShift Container Platform subscriptions at the account or multi-cluster level. For more information about subscription watch, see "Data Gathered and Used by Red Hat’s subscription services" in the Additional resources section.