Chapter 3. Deploying OpenShift sandboxed containers workloads

Procedure

1. From the Administrator perspective in the web console, navigate to Operators OperatorHub.
2. In the Filter by keyword field, type OpenShift sandboxed containers.
3. Select the OpenShift sandboxed containers tile.
4. Read the information about the Operator and click Install.

5. On the Install Operator page:

   1. Select preview-1.1 from the list of available Update Channel options.

   2. Verify that Operator recommended Namespace is selected for Installed Namespace. This installs the Operator in the mandatory openshift-sandboxed-containers-operator namespace. If this namespace does not yet exist, it is automatically created.

      Note

      Attempting to install the OpenShift sandboxed containers Operator in a namespace other than openshift-sandboxed-containers-operator causes the installation to fail.

   3. Verify that Automatic is selected for Approval Strategy. Automatic is the default value, and enables automatic updates to OpenShift sandboxed containers when a new z-stream release is available.
6. Click Install.

Verification

1. From the Administrator perspective in the web console, navigate to Operators Installed Operators.
2. Verify that the OpenShift sandboxed containers Operator is listed in the in operators list.

Procedure

1. From the Administrator perspective in the web console, navigate to Operators Installed Operators.
2. Select the OpenShift sandboxed containers Operator from the list of operators.
3. In the KataConfig tab, click Create KataConfig.
4. In the Create KataConfig page, select to configure the KataConfig CR via YAML view.

5. Copy and paste the following manifest into the YAML view:

   apiVersion: kataconfiguration.openshift.io/v1
   kind: KataConfig
   metadata:
     name: cluster-kataconfig

   Copy to Clipboard Toggle word wrap

   If you want to install kata as a RuntimeClass only on selected nodes, include the label in the manifest:

    apiVersion: kataconfiguration.openshift.io/v1
    kind: KataConfig
    metadata:
      name: cluster-kataconfig
    spec:
      kataConfigPoolSelector:
        matchLabels:
         <label_key>: '<label_value>' 

   1

   Copy to Clipboard Toggle word wrap

   1

   Labels in kataConfigPoolSelector only support single values; nodeSelector syntax is not supported.

6. Click Create.

Verification

1. In the KataConfig tab, select the new KataConfig CR.
2. In the KataConfig page, select the YAML tab.

3. Monitor the installationStatus field in the status.

   A message appears each time there is an update. Click Reload to view the updated KataConfig CR.

   Once the value of Completed nodes equals the number of worker or labeled nodes, the installation is complete. The status also contains a list of nodes where the installation is completed.

Procedure

1. From the Administrator perspective in the web console, expand Workloads and select the type of workload you want to create.
2. In the workload page, click to create the workload.

3. In the YAML file for the workload, in the spec field where the container is listed, add runtimeClassName: kata.

   Example for Pod

       apiVersion: v1
       kind: Pod
       metadata:
         name: example
         labels:
           app: httpd
         namespace: openshift-sandboxed-containers-operator
       spec:
         runtimeClassName: kata
         containers:
           - name: httpd
             image: 'image-registry.openshift-image-registry.svc:5000/openshift/httpd:latest'
             ports:
               - containerPort: 8080

   Copy to Clipboard Toggle word wrap

   Example for Deployment

       apiVersion: apps/v1
       kind: Deployment
       metadata:
         name: example
         namespace: openshift-sandboxed-containers-operator
       spec:
         selector:
           matchLabels:
             app: httpd
         replicas: 3
         template:
           metadata:
             labels:
               app: httpd
           spec:
             runtimeClassName: kata
             containers:
               - name: httpd
                 image: >-
                   image-registry.openshift-image-registry.svc:5000/openshift/httpd:latest
                 ports:
                   - containerPort: 8080

   Copy to Clipboard Toggle word wrap

4. Click Save.

Procedure

1. Create the Namespace object for the OpenShift sandboxed containers Operator.

   1. Create a Namespace object YAML file that contains the following manifest:

      apiVersion: v1
      kind: Namespace
      metadata:
        name: openshift-sandboxed-containers-operator

      Copy to Clipboard Toggle word wrap

   2. Create the Namespace object:

      $ oc create -f Namespace.yaml

      Copy to Clipboard Toggle word wrap

2. Create the OperatorGroup object for the OpenShift sandboxed containers Operator.

   1. Create an OperatorGroup object YAML file that contains the following manifest:

      apiVersion: operators.coreos.com/v1
      kind: OperatorGroup
      metadata:
        name: openshift-sandboxed-containers-operator
        namespace: openshift-sandboxed-containers-operator
      spec:
        targetNamespaces:
        - openshift-sandboxed-containers-operator

      Copy to Clipboard Toggle word wrap

   2. Create the OperatorGroup object:

      $ oc create -f OperatorGroup.yaml

      Copy to Clipboard Toggle word wrap

3. Create the Subscription object to subscribe the Namespace to the OpenShift sandboxed containers Operator.

   1. Create a Subscription object YAML file that contains the following manifest:

      apiVersion: operators.coreos.com/v1alpha1
      kind: Subscription
      metadata:
        name: openshift-sandboxed-containers-operator
        namespace: openshift-sandboxed-containers-operator
      spec:
        channel: "preview-1.1"
        installPlanApproval: Automatic
        name: sandboxed-containers-operator
        source: redhat-operators
        sourceNamespace: openshift-marketplace
        startingCSV: sandboxed-containers-operator.v1.1.0

      Copy to Clipboard Toggle word wrap

   2. Create the Subscription object:

      $ oc create -f Subscription.yaml

      Copy to Clipboard Toggle word wrap

Procedure

1. Create a YAML file with the following manifest:

   apiVersion: kataconfiguration.openshift.io/v1
   kind: KataConfig
   metadata:
     name: cluster-kataconfig

   Copy to Clipboard Toggle word wrap

2. (Optional) If you want to install kata as a RuntimeClass only on selected nodes, create a YAML file that includes the label in the manifest:

   apiVersion: kataconfiguration.openshift.io/v1
   kind: KataConfig
   metadata:
     name: cluster-kataconfig
   spec:
     kataConfigPoolSelector:
       matchLabels:
         <label_key>: '<label_value>' 

   1

   Copy to Clipboard Toggle word wrap

   1

   Labels in kataConfigPoolSelector only support single values; nodeSelector syntax is not supported.

3. Create the KataConfig resource:

   $ oc create -f <file name>.yaml

   Copy to Clipboard Toggle word wrap