Ce contenu n'est pas disponible dans la langue sélectionnée.
Deploying RHEL 8 on Google Cloud Platform
Obtaining RHEL system images and creating RHEL instances on GCP
Abstract
Providing feedback on Red Hat documentation Copier lienLien copié sur presse-papiers!
We appreciate your feedback on our documentation. Let us know how we can improve it.
Submitting feedback through Jira (account required)
- Log in to the Jira website.
- Click Create in the top navigation bar.
- Enter a descriptive title in the Summary field.
- Enter your suggestion for improvement in the Description field. Include links to the relevant parts of the documentation.
- Click Create at the bottom of the dialogue.
Chapter 1. Introducing RHEL on public cloud platforms Copier lienLien copié sur presse-papiers!
Public cloud platforms offer computing resources as a service. Instead of using on-premise hardware, you can run your IT workloads, including Red Hat Enterprise Linux (RHEL) systems, as public cloud instances.
1.1. Benefits of using RHEL in a public cloud Copier lienLien copié sur presse-papiers!
RHEL as a cloud instance located on a public cloud platform has the following benefits over RHEL on-premises physical systems or virtual machines (VMs):
Flexible and fine-grained allocation of resources
A cloud instance of RHEL runs as a VM on a cloud platform, which typically means a cluster of remote servers maintained by the provider of the cloud service. Therefore, allocating hardware resources to the instance, such as a specific type of CPU or storage, happens on the software level and is easily customizable.
In comparison to a local RHEL system, you are also not limited by the capabilities of your physical host. Instead, you can choose from a variety of features, based on selection offered by the cloud provider.
Space and cost efficiency
You do not need to own any on-premises servers to host your cloud workloads. This avoids the space, power, and maintenance requirements associated with physical hardware.
Instead, on public cloud platforms, you pay the cloud provider directly for using a cloud instance. The cost is typically based on the hardware allocated to the instance and the time you spend using it. Therefore, you can optimize your costs based on your requirements.
Software-controlled configurations
The entire configuration of a cloud instance is saved as data on the cloud platform, and is controlled by software. Therefore, you can easily create, remove, clone, or migrate the instance. A cloud instance is also operated remotely in a cloud provider console and is connected to remote storage by default.
In addition, you can back up the current state of a cloud instance as a snapshot at any time. Afterwards, you can load the snapshot to restore the instance to the saved state.
Separation from the host and software compatibility
Similarly to a local VM, the RHEL guest operating system on a cloud instance runs on a virtualized kernel. This kernel is separate from the host operating system and from the client system that you use to connect to the instance.
Therefore, any operating system can be installed on the cloud instance. This means that on a RHEL public cloud instance, you can run RHEL-specific applications that cannot be used on your local operating system.
In addition, even if the operating system of the instance becomes unstable or is compromised, your client system is not affected in any way.
1.2. Public cloud use cases for RHEL Copier lienLien copié sur presse-papiers!
Deploying on a public cloud provides many benefits, but might not be the most efficient solution in every scenario. If you are evaluating whether to migrate your RHEL deployments to the public cloud, consider whether your use case will benefit from the advantages of the public cloud.
Beneficial use cases
Deploying public cloud instances is very effective for flexibly increasing and decreasing the active computing power of your deployments, also known as scaling up and scaling down. Therefore, using RHEL on public cloud is recommended in the following scenarios:
- Clusters with high peak workloads and low general performance requirements. Scaling up and down based on your demands can be highly efficient in terms of resource costs.
- Quickly setting up or expanding your clusters. This avoids high upfront costs of setting up local servers.
- Cloud instances are not affected by what happens in your local environment. Therefore, you can use them for backup and disaster recovery.
Potentially problematic use cases
- You are running an existing environment that cannot be adjusted. Customizing a cloud instance to fit the specific needs of an existing deployment may not be cost-effective in comparison with your current host platform.
- You are operating with a hard limit on your budget. Maintaining your deployment in a local data center typically provides less flexibility but more control over the maximum resource costs than the public cloud does.
Next steps
1.3. Frequent concerns when migrating to a public cloud Copier lienLien copié sur presse-papiers!
Moving your RHEL workloads from a local environment to a public cloud platform might raise concerns about the changes involved. The following are the most commonly asked questions.
Will my RHEL work differently as a cloud instance than as a local virtual machine?
In most respects, RHEL instances on a public cloud platform work the same as RHEL virtual machines on a local host, such as an on-premises server. Notable exceptions include:
- Instead of private orchestration interfaces, public cloud instances use provider-specific console interfaces for managing your cloud resources.
- Certain features, such as nested virtualization, may not work correctly. If a specific feature is critical for your deployment, check the feature’s compatibility in advance with your chosen public cloud provider.
Will my data stay safe in a public cloud as opposed to a local server?
The data in your RHEL cloud instances is in your ownership, and your public cloud provider does not have any access to it. In addition, major cloud providers support data encryption in transit, which improves the security of data when migrating your virtual machines to the public cloud.
The general security of your RHEL public cloud instances is managed as follows:
- Your public cloud provider is responsible for the security of the cloud hypervisor
- Red Hat provides the security features of the RHEL guest operating systems in your instances
- You manage the specific security settings and practices in your cloud infrastructure
What effect does my geographic region have on the functionality of RHEL public cloud instances?
You can use RHEL instances on a public cloud platform regardless of your geographical location. Therefore, you can run your instances in the same region as your on-premises server.
However, hosting your instances in a physically distant region might cause high latency when operating them. In addition, depending on the public cloud provider, certain regions may provide additional features or be more cost-efficient. Before creating your RHEL instances, review the properties of the hosting regions available for your chosen cloud provider.
1.4. Obtaining RHEL for public cloud deployments Copier lienLien copié sur presse-papiers!
To deploy a RHEL system in a public cloud environment, you need to:
Select the optimal cloud provider for your use case, based on your requirements and the current offer on the market.
The cloud providers currently certified for running RHEL instances are:
- Amazon Web Services (AWS)
- Google Cloud Platform (GCP)
- Note
This document specifically talks about deploying RHEL on GCP.
- Create a RHEL cloud instance on your chosen cloud platform. For more information, see Methods for creating RHEL cloud instances.
- To keep your RHEL deployment up-to-date, use Red Hat Update Infrastructure (RHUI).
1.5. Methods for creating RHEL cloud instances Copier lienLien copié sur presse-papiers!
To deploy a RHEL instance on a public cloud platform, you can use one of the following methods:
| Create a system image of RHEL and import it to the cloud platform.
|
| Purchase a RHEL instance directly from the cloud provider marketplace.
|
For detailed instructions on using various methods to deploy RHEL instances on Google Cloud Platform, see the following chapters in this document.
Chapter 2. Uploading images to GCP with RHEL image builder Copier lienLien copié sur presse-papiers!
With RHEL image builder, you can build a gce image, provide credentials for your user or GCP service account, and then upload the gce image directly to the GCP environment.
2.1. Configuring and uploading a gce image to GCP by using the CLI Copier lienLien copié sur presse-papiers!
Set up a configuration file with credentials to upload your gce image to GCP by using the RHEL image builder CLI.
You cannot manually import gce image to GCP, because the image will not boot. You must use either gcloud or RHEL image builder to upload it.
Prerequisites
You have a valid Google account and credentials to upload your image to GCP. The credentials can be from a user account or a service account. The account associated with the credentials must have at least the following IAM roles assigned:
-
roles/storage.admin- to create and delete storage objects -
roles/compute.storageAdmin- to import a VM image to Compute Engine.
-
- You have an existing GCP bucket.
Procedure
Use a text editor to create a
gcp-config.tomlconfiguration file with the following content:Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
GCP_BUCKETpoints to an existing bucket. It is used to store the intermediate storage object of the image which is being uploaded. -
GCP_STORAGE_REGIONis both a regular Google storage region and a dual or multi region. -
OBJECT_KEYis the name of an intermediate storage object. It must not exist before the upload, and it is deleted when the upload process is done. If the object name does not end with.tar.gz, the extension is automatically added to the object name. GCP_CREDENTIALSis aBase64-encoded scheme of the credentials JSON file downloaded from GCP. The credentials determine which project the GCP uploads the image to.NoteSpecifying
GCP_CREDENTIALSin thegcp-config.tomlfile is optional if you use a different mechanism to authenticate with GCP. For other authentication methods, see Authenticating with GCP.
-
Retrieve the
GCP_CREDENTIALSfrom the JSON file downloaded from GCP.sudo base64 -w 0 cee-gcp-nasa-476a1fa485b7.json
$ sudo base64 -w 0 cee-gcp-nasa-476a1fa485b7.jsonCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create a compose with an additional image name and cloud provider profile:
sudo composer-cli compose start BLUEPRINT-NAME gce IMAGE_KEY gcp-config.toml
$ sudo composer-cli compose start BLUEPRINT-NAME gce IMAGE_KEY gcp-config.tomlCopy to Clipboard Copied! Toggle word wrap Toggle overflow The image build, upload, and cloud registration processes can take up to ten minutes to complete.
Verification
Verify that the image status is FINISHED:
sudo composer-cli compose status
$ sudo composer-cli compose statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow
2.2. How RHEL image builder sorts the authentication order of different GCP credentials Copier lienLien copié sur presse-papiers!
You can use several different types of credentials with RHEL image builder to authenticate with GCP. If RHEL image builder configuration is set to authenticate with GCP using multiple sets of credentials, it uses the credentials in the following order of preference:
-
Credentials specified with the
composer-clicommand in the configuration file. -
Credentials configured in the
osbuild-composerworker configuration. Application Default Credentialsfrom theGoogle GCP SDKlibrary, which tries to automatically find a way to authenticate by using the following options:- If the GOOGLE_APPLICATION_CREDENTIALS environment variable is set, Application Default Credentials tries to load and use credentials from the file pointed to by the variable.
Application Default Credentials tries to authenticate by using the service account attached to the resource that is running the code. For example, Google Compute Engine VM.
NoteYou must use the GCP credentials to determine which GCP project to upload the image to. Therefore, unless you want to upload all of your images to the same GCP project, you always must specify the credentials in the
gcp-config.tomlconfiguration file with thecomposer-clicommand.
2.2.1. Specifying GCP credentials with the composer-cli command Copier lienLien copié sur presse-papiers!
You can specify GCP authentication credentials in the upload target configuration gcp-config.toml file. Use a Base64-encoded scheme of the Google account credentials JSON file to save time.
Procedure
Get the encoded content of the Google account credentials file with the path stored in
GOOGLE_APPLICATION_CREDENTIALSenvironment variable, by running the following command:base64 -w 0 "${GOOGLE_APPLICATION_CREDENTIALS}"$ base64 -w 0 "${GOOGLE_APPLICATION_CREDENTIALS}"Copy to Clipboard Copied! Toggle word wrap Toggle overflow In the upload target configuration
gcp-config.tomlfile, set the credentials:Copy to Clipboard Copied! Toggle word wrap Toggle overflow
2.2.2. Specifying credentials in the osbuild-composer worker configuration Copier lienLien copié sur presse-papiers!
You can configure GCP authentication credentials to be used for GCP globally for all image builds. This way, if you want to import images to the same GCP project, you can use the same credentials for all image uploads to GCP.
Procedure
In the
/etc/osbuild-worker/osbuild-worker.tomlworker configuration, set the following credential value:[gcp] credentials = "PATH_TO_GCP_ACCOUNT_CREDENTIALS"
[gcp] credentials = "PATH_TO_GCP_ACCOUNT_CREDENTIALS"Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Chapter 3. Deploying a Red Hat Enterprise Linux image as a Google Compute Engine instance on Google Cloud Platform Copier lienLien copié sur presse-papiers!
To set up a deployment of Red Hat Enterprise Linux 8 (RHEL 8) on Google Cloud Platform (GCP), you can deploy RHEL 8 as a Google Compute Engine (GCE) instance on GCP.
For a list of Red Hat product certifications for GCP, see Red Hat on Google Cloud Platform.
You can create a custom VM from an ISO image, but Red Hat recommends that you use the Red Hat Image Builder product to create customized images for use on specific cloud providers. See Composing a Customized RHEL System Image for more information.
Prerequisites
- You need a Red Hat Customer Portal account to complete the procedures in this chapter.
- Create an account with GCP to access the Google Cloud Platform Console. See Google Cloud for more information.
3.1. Red Hat Enterprise Linux image options on GCP Copier lienLien copié sur presse-papiers!
You can use multiple types of images for deploying RHEL 8 on Google Cloud Platform. Based on your requirements, consider which option is optimal for your use case.
| Image option | Subscriptions | Sample scenario | Considerations |
|---|---|---|---|
| Deploy a Red Hat Gold Image. | Use your existing Red Hat subscriptions. | Select a Red Hat Gold Image on Google Cloud Platform. For details on Gold Images and how to access them on Google Cloud Platform, see the Red Hat Cloud Access Reference Guide. | The subscription includes the Red Hat product cost; you pay Google for all other instance costs. Red Hat provides support directly for custom RHEL images. |
| Deploy a custom image that you move to GCP. | Use your existing Red Hat subscriptions. | Upload your custom image and attach your subscriptions. | The subscription includes the Red Hat product cost; you pay all other instance costs. Red Hat provides support directly for custom RHEL images. |
| Deploy an existing GCP image that includes RHEL. | The GCP images include a Red Hat product. | Choose a RHEL image when you launch an instance on the GCP Compute Engine, or choose an image from the Google Cloud Platform Marketplace. | You pay GCP hourly on a pay-as-you-go model. Such images are called "on-demand" images. GCP offers support for on-demand images through a support agreement. |
You can create a custom image for GCP by using Red Hat Image Builder. See Composing a Customized RHEL System Image for more information.
You cannot convert an on-demand instance to a custom RHEL instance. To change from an on-demand image to a custom RHEL bring-your-own-subscription (BYOS) image:
- Create a new custom RHEL instance and migrate data from your on-demand instance.
- Cancel your on-demand instance after you migrate your data to avoid double billing.
3.2. Understanding base images Copier lienLien copié sur presse-papiers!
To create a base VM from an ISO image, you can use preconfigured base images and their configuration settings.
3.2.1. Using a custom base image Copier lienLien copié sur presse-papiers!
To manually configure a virtual machine (VM), first create a base (starter) VM image. Then, you can modify configuration settings and add the packages the VM requires to operate on the cloud. You can make additional configuration changes for your specific application after you upload the image.
3.2.2. Virtual machine configuration settings Copier lienLien copié sur presse-papiers!
Cloud VMs must have the following configuration settings.
| Setting | Recommendation |
|---|---|
| ssh | ssh must be enabled to provide remote access to your VMs. |
| dhcp | The primary virtual adapter should be configured for dhcp. |
3.3. Creating a base VM from an ISO image Copier lienLien copié sur presse-papiers!
To create a RHEL 8 base image from an ISO image, enable your host machine for virtualization and create a RHEL virtual machine (VM).
Prerequisites
- Virtualization is enabled on your host machine.
-
You have downloaded the latest Red Hat Enterprise Linux ISO image from the Red Hat Customer Portal and moved the image to
/var/lib/libvirt/images.
3.3.1. Creating a VM from the RHEL ISO image Copier lienLien copié sur presse-papiers!
Procedure
- Ensure that you have enabled your host machine for virtualization. See Enabling virtualization in RHEL 8 for information and procedures.
Create and start a basic Red Hat Enterprise Linux VM. For instructions, see Creating virtual machines.
If you use the command line to create your VM, ensure that you set the default memory and CPUs to the capacity you want for the VM. Set your virtual network interface to virtio.
For example, the following command creates a
kvmtestVM by using the/home/username/Downloads/rhel8.isoimage:virt-install \ --name kvmtest --memory 2048 --vcpus 2 \ --cdrom /home/username/Downloads/rhel8.iso,bus=virtio \ --os-variant=rhel8.0# virt-install \ --name kvmtest --memory 2048 --vcpus 2 \ --cdrom /home/username/Downloads/rhel8.iso,bus=virtio \ --os-variant=rhel8.0Copy to Clipboard Copied! Toggle word wrap Toggle overflow If you use the web console to create your VM, follow the procedure in Creating virtual machines by using the web console, with these caveats:
- Do not check Immediately Start VM.
- Change your Memory size to your preferred settings.
- Before you start the installation, ensure that you have changed Model under Virtual Network Interface Settings to virtio and change your vCPUs to the capacity settings you want for the VM.
3.3.2. Completing the RHEL installation Copier lienLien copié sur presse-papiers!
To finish the installation of a RHEL system that you want to deploy on Amazon Web Services (AWS), customize the Installation Summary view, begin the installation, and enable root access once the VM launches.
Procedure
- Choose the language you want to use during the installation process.
On the Installation Summary view:
- Click Software Selection and check Minimal Install.
- Click Done.
Click Installation Destination and check Custom under Storage Configuration.
-
Verify at least 500 MB for
/boot. You can use the remaining space for root/. - Standard partitions are recommended, but you can use Logical Volume Manager (LVM).
- You can use xfs, ext4, or ext3 for the file system.
- Click Done when you are finished with changes.
-
Verify at least 500 MB for
- Click Begin Installation.
- Set a Root Password. Create other users as applicable.
-
Reboot the VM and log in as
rootonce the installation completes. Configure the image.
Register the VM and enable the Red Hat Enterprise Linux 8 repository.
subscription-manager register
# subscription-manager registerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Ensure that the
cloud-initpackage is installed and enabled.yum install cloud-init systemctl enable --now cloud-init.service
# yum install cloud-init # systemctl enable --now cloud-init.serviceCopy to Clipboard Copied! Toggle word wrap Toggle overflow
- Power off the VM.
3.4. Uploading the RHEL image to GCP Copier lienLien copié sur presse-papiers!
To run your RHEL 8 instance on Google Cloud Platform (GCP), you must upload your RHEL 8 image to GCP.
3.4.1. Creating a new project on GCP Copier lienLien copié sur presse-papiers!
To upload your Red Hat Enterprise Linux 8 image to Google Cloud Platform (GCP), you must first create a new project on GCP.
Prerequisites
- You must have an account with GCP. If you do not, see Google Cloud for more information.
Procedure
- Launch the GCP Console.
- Click the drop-down menu to the right of Google Cloud Platform.
- From the pop-up menu, click NEW PROJECT.
- From the New Project window, enter a name for your new project.
- Check Organization. Click the drop-down menu to change the organization, if necessary.
- Confirm the Location of your parent organization or folder. Click Browse to search for and change this value, if necessary.
Click CREATE to create your new GCP project.
NoteOnce you have installed the Google Cloud SDK, you can use the
gcloud projects createCLI command to create a project. For example:gcloud projects create my-gcp-project3 --name project3
# gcloud projects create my-gcp-project3 --name project3Copy to Clipboard Copied! Toggle word wrap Toggle overflow The example creates a project with the project ID
my-gcp-project3and the project nameproject3. See gcloud project create for more information.
3.4.2. Installing the Google Cloud SDK Copier lienLien copié sur presse-papiers!
Many of the procedures to manage HA clusters on Google Cloud Platform (GCP) require the tools in the Google Cloud SDK.
Procedure
- Follow the GCP instructions for downloading and extracting the Google Cloud SDK archive. See the GCP document Quickstart for Linux for details.
Follow the same instructions for initializing the Google Cloud SDK.
NoteOnce you have initialized the Google Cloud SDK, you can use the
gcloudCLI commands to perform tasks and obtain information about your project and instances. For example, you can display project information with thegcloud compute project-info describe --project <project-name>command.
3.4.3. Creating SSH keys for Google Compute Engine Copier lienLien copié sur presse-papiers!
Generate and register SSH keys with GCE so that you can SSH directly into an instance by using its public IP address.
Procedure
Use the
ssh-keygencommand to generate an SSH key pair for use with GCE.ssh-keygen -t rsa -f ~/.ssh/google_compute_engine
# ssh-keygen -t rsa -f ~/.ssh/google_compute_engineCopy to Clipboard Copied! Toggle word wrap Toggle overflow - From the GCP Console Dashboard page, click the Navigation menu to the left of the Google Cloud Console banner and select Compute Engine and then select Metadata.
- Click SSH Keys and then click Edit.
Enter the output generated from the
~/.ssh/google_compute_engine.pubfile and click Save.You can now connect to your instance by using standard SSH.
ssh -i ~/.ssh/google_compute_engine <username>@<instance_external_ip>
# ssh -i ~/.ssh/google_compute_engine <username>@<instance_external_ip>Copy to Clipboard Copied! Toggle word wrap Toggle overflow
You can run the gcloud compute config-ssh command to populate your config file with aliases for your instances. The aliases allow simple SSH connections by instance name. For information about the gcloud compute config-ssh command, see gcloud compute config-ssh.
3.4.4. Creating a storage bucket in GCP Storage Copier lienLien copié sur presse-papiers!
To import your RHEL 8 image to GCP, you must first create a GCP Storage Bucket.
Procedure
If you are not already logged in to GCP, log in with the following command.
gcloud auth login
# gcloud auth loginCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create a storage bucket.
gsutil mb gs://bucket_name
# gsutil mb gs://bucket_nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow NoteAlternatively, you can use the Google Cloud Console to create a bucket. See Create a bucket for information.
3.4.5. Converting and uploading your image to your GCP Bucket Copier lienLien copié sur presse-papiers!
Before a local RHEL 8 image can be deployed in GCP, you must first convert and upload the image to your GCP Bucket. The following steps describe converting an qcow2 image to raw format and then uploading the image as a tar archive. However, using different formats is possible as well.
Procedure
Run the
qemu-imgcommand to convert your image. The converted image must have the namedisk.raw.qemu-img convert -f qcow2 -O raw rhel-8.0-sample.qcow2 disk.raw
# qemu-img convert -f qcow2 -O raw rhel-8.0-sample.qcow2 disk.rawCopy to Clipboard Copied! Toggle word wrap Toggle overflow Tar the image.
tar --format=oldgnu -Sczf disk.raw.tar.gz disk.raw
# tar --format=oldgnu -Sczf disk.raw.tar.gz disk.rawCopy to Clipboard Copied! Toggle word wrap Toggle overflow Upload the image to the bucket you created previously. Upload could take a few minutes.
gsutil cp disk.raw.tar.gz gs://bucket_name
# gsutil cp disk.raw.tar.gz gs://bucket_nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow - From the Google Cloud Platform home screen, click the collapsed menu icon and select Storage and then select Browser.
Click the name of your bucket.
The tarred image is listed under your bucket name.
NoteYou can also upload your image by using the GCP Console. To do so, click the name of your bucket and then click Upload files.
3.4.6. Creating an image from the object in the GCP bucket Copier lienLien copié sur presse-papiers!
Before you can create a GCE image from an object that you uploaded to your GCP bucket, you must convert the object into a GCE image.
Procedure
Run the following command to create an image for GCE. Specify the name of the image you are creating, the bucket name, and the name of the tarred image.
gcloud compute images create my-image-name --source-uri gs://my-bucket-name/disk.raw.tar.gz
# gcloud compute images create my-image-name --source-uri gs://my-bucket-name/disk.raw.tar.gzCopy to Clipboard Copied! Toggle word wrap Toggle overflow NoteAlternatively, you can use the Google Cloud Console to create an image. See Creating, deleting, and deprecating custom images for more information.
Optional: Find the image in the GCP Console.
- Click the Navigation menu to the left of the Google Cloud Console banner.
- Select Compute Engine and then Images.
3.4.7. Creating a Google Compute Engine instance from an image Copier lienLien copié sur presse-papiers!
To configure a GCE VM instance from an image, use the GCP Console.
See Creating and starting a VM instance for more information about GCE VM instances and their configuration options.
Procedure
- From the GCP Console Dashboard page, click the Navigation menu to the left of the Google Cloud Console banner and select Compute Engine and then select Images.
- Select your image.
- Click Create Instance.
- On the Create an instance page, enter a Name for your instance.
- Choose a Region and Zone.
- Choose a Machine configuration that meets or exceeds the requirements of your workload.
- Ensure that Boot disk specifies the name of your image.
- Optional: Under Firewall, select Allow HTTP traffic or Allow HTTPS traffic.
Click Create.
NoteThese are the minimum configuration options necessary to create a basic instance. Review additional options based on your application requirements.
- Find your image under VM instances.
From the GCP Console Dashboard, click the Navigation menu to the left of the Google Cloud Console banner and select Compute Engine and then select VM instances.
NoteAlternatively, you can use the
gcloud compute instances createCLI command to create a GCE VM instance from an image. A simple example follows.gcloud compute instances create myinstance3 --zone=us-central1-a --image test-iso2-image
gcloud compute instances create myinstance3 --zone=us-central1-a --image test-iso2-imageCopy to Clipboard Copied! Toggle word wrap Toggle overflow The example creates a VM instance named
myinstance3in zoneus-central1-abased upon the existing imagetest-iso2-image. See gcloud compute instances create for more information.
3.4.8. Connecting to your instance Copier lienLien copié sur presse-papiers!
Connect to your GCE instance by using its public IP address.
Procedure
Ensure that your instance is running. The following command lists information about your GCE instance, including whether the instance is running, and, if so, the public IP address of the running instance.
gcloud compute instances list
# gcloud compute instances listCopy to Clipboard Copied! Toggle word wrap Toggle overflow Connect to your instance by using standard SSH. The example uses the
google_compute_enginekey created earlier.ssh -i ~/.ssh/google_compute_engine <user_name>@<instance_external_ip>
# ssh -i ~/.ssh/google_compute_engine <user_name>@<instance_external_ip>Copy to Clipboard Copied! Toggle word wrap Toggle overflow NoteGCP offers a number of ways to SSH into your instance. See Connecting to instances for more information. You can also connect to your instance using the root account and password you set previously.
3.4.9. Attaching Red Hat subscriptions Copier lienLien copié sur presse-papiers!
Using the subscription-manager command, you can register and attach your Red Hat subscription to a RHEL instance.
Prerequisites
- You must have enabled your subscriptions.
Procedure
Register your system.
subscription-manager register
# subscription-manager registerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Attach your subscriptions.
- You can use an activation key to attach subscriptions. See Creating Red Hat Customer Portal Activation Keys for more information.
- Also, you can manually attach a subscription by using the ID of subscription pool (Pool ID). See Attaching a host-based subscription to hypervisors.
Optional: To collect various system metrics about the instance in the Red Hat Hybrid Cloud Console, you can register the instance with Red Hat Insights.
insights-client register --display-name <display_name_value>
# insights-client register --display-name <display_name_value>Copy to Clipboard Copied! Toggle word wrap Toggle overflow For information about further configuration of Red Hat Insights, see Client Configuration Guide for Red Hat Insights.
Chapter 4. Configuring a Red Hat High Availability Cluster on Google Cloud Platform Copier lienLien copié sur presse-papiers!
To create a cluster where RHEL nodes automatically redistribute their workloads if a node failure occurs, use the Red Hat High Availability Add-On. Such high availability (HA) clusters can also be hosted on public cloud platforms, including Google Cloud Platform (GCP). Creating RHEL HA clusters on GCP is similar to creating HA clusters in non-cloud environments, with certain specifics.
To configure a Red Hat HA cluster on Google Cloud Platform (GCP) using Google Compute Engine (GCE) virtual machine (VM) instances as cluster nodes, see the following sections.
These provide information on:
- Prerequisite procedures for setting up your environment for GCP. Once you have set up your environment, you can create and configure VM instances.
- Procedures specific to the creation of HA clusters, which transform individual nodes into a cluster of HA nodes on GCP. These include procedures for installing the High Availability packages and agents on each cluster node, configuring fencing, and installing network resource agents.
Prerequisites
- Red Hat Enterprise Linux 8 Server: rhel-8-server-rpms/8Server/x86_64
Red Hat Enterprise Linux 8 Server (High Availability): rhel-8-server-ha-rpms/8Server/x86_64
- You must belong to an active GCP project and have sufficient permissions to create resources in the project.
- Your project should have a service account that belongs to a VM instance and not an individual user. See Using the Compute Engine Default Service Account for information about using the default service account instead of creating a separate service account.
If you or your project administrator create a custom service account, the service account should be configured for the following roles.
- Cloud Trace Agent
- Compute Admin
- Compute Network Admin
- Cloud Datastore User
- Logging Admin
- Monitoring Editor
- Monitoring Metric Writer
- Service Account Administrator
- Storage Admin
4.1. The benefits of using high-availability clusters on public cloud platforms Copier lienLien copié sur presse-papiers!
A high-availability (HA) cluster is a set of computers (called nodes) that are linked together to run a specific workload. The purpose of HA clusters is to provide redundancy in case of a hardware or software failure. If a node in the HA cluster fails, the Pacemaker cluster resource manager distributes the workload to other nodes and no noticeable downtime occurs in the services that are running on the cluster.
You can also run HA clusters on public cloud platforms. In this case, you would use virtual machine (VM) instances in the cloud as the individual cluster nodes. Using HA clusters on a public cloud platform has the following benefits:
- Improved availability: In case of a VM failure, the workload is quickly redistributed to other nodes, so running services are not disrupted.
- Scalability: Additional nodes can be started when demand is high and stopped when demand is low.
- Cost-effectiveness: With the pay-as-you-go pricing, you pay only for nodes that are running.
- Simplified management: Some public cloud platforms offer management interfaces to make configuring HA clusters easier.
To enable HA on your Red Hat Enterprise Linux (RHEL) systems, Red Hat offers a High Availability Add-On. The High Availability Add-On provides all necessary components for creating HA clusters on RHEL systems. The components include high availability service management and cluster administration tools.
4.2. Required system packages Copier lienLien copié sur presse-papiers!
To create and configure a base image of RHEL, your host system must have the following packages installed.
| Package | Repository | Description |
|---|---|---|
| libvirt | rhel-8-for-x86_64-appstream-rpms | Open source API, daemon, and management tool for managing platform virtualization |
| virt-install | rhel-8-for-x86_64-appstream-rpms | A command-line utility for building VMs |
| libguestfs | rhel-8-for-x86_64-appstream-rpms | A library for accessing and modifying VM file systems |
| libguestfs-tools | rhel-8-for-x86_64-appstream-rpms |
System administration tools for VMs; includes the |
4.3. Red Hat Enterprise Linux image options on GCP Copier lienLien copié sur presse-papiers!
You can use multiple types of images for deploying RHEL 8 on Google Cloud Platform. Based on your requirements, consider which option is optimal for your use case.
| Image option | Subscriptions | Sample scenario | Considerations |
|---|---|---|---|
| Deploy a Red Hat Gold Image. | Use your existing Red Hat subscriptions. | Select a Red Hat Gold Image on Google Cloud Platform. For details on Gold Images and how to access them on Google Cloud Platform, see the Red Hat Cloud Access Reference Guide. | The subscription includes the Red Hat product cost; you pay Google for all other instance costs. Red Hat provides support directly for custom RHEL images. |
| Deploy a custom image that you move to GCP. | Use your existing Red Hat subscriptions. | Upload your custom image and attach your subscriptions. | The subscription includes the Red Hat product cost; you pay all other instance costs. Red Hat provides support directly for custom RHEL images. |
| Deploy an existing GCP image that includes RHEL. | The GCP images include a Red Hat product. | Choose a RHEL image when you launch an instance on the GCP Compute Engine, or choose an image from the Google Cloud Platform Marketplace. | You pay GCP hourly on a pay-as-you-go model. Such images are called "on-demand" images. GCP offers support for on-demand images through a support agreement. |
You can create a custom image for GCP by using Red Hat Image Builder. See Composing a Customized RHEL System Image for more information.
You cannot convert an on-demand instance to a custom RHEL instance. To change from an on-demand image to a custom RHEL bring-your-own-subscription (BYOS) image:
- Create a new custom RHEL instance and migrate data from your on-demand instance.
- Cancel your on-demand instance after you migrate your data to avoid double billing.
4.4. Installing the Google Cloud SDK Copier lienLien copié sur presse-papiers!
Many of the procedures to manage HA clusters on Google Cloud Platform (GCP) require the tools in the Google Cloud SDK.
Procedure
- Follow the GCP instructions for downloading and extracting the Google Cloud SDK archive. See the GCP document Quickstart for Linux for details.
Follow the same instructions for initializing the Google Cloud SDK.
NoteOnce you have initialized the Google Cloud SDK, you can use the
gcloudCLI commands to perform tasks and obtain information about your project and instances. For example, you can display project information with thegcloud compute project-info describe --project <project-name>command.
4.5. Creating a GCP image bucket Copier lienLien copié sur presse-papiers!
The following document includes the minimum requirements for creating a multi-regional bucket in your default location.
Prerequisites
- GCP storage utility (gsutil)
Procedure
If you are not already logged in to Google Cloud Platform, log in with the following command.
gcloud auth login
# gcloud auth loginCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create a storage bucket.
gsutil mb gs://BucketName
$ gsutil mb gs://BucketNameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
gsutil mb gs://rhel-ha-bucket
$ gsutil mb gs://rhel-ha-bucketCopy to Clipboard Copied! Toggle word wrap Toggle overflow
4.6. Creating a custom virtual private cloud network and subnet Copier lienLien copié sur presse-papiers!
A custom virtual private cloud (VPC) network and subnet are required for a cluster to be configured with a High Availability (HA) function.
Procedure
- Launch the GCP Console.
- Select VPC networks under Networking in the left navigation pane.
- Click Create VPC Network.
- Enter a name for the VPC network.
- Under the New subnet, create a Custom subnet in the region where you want to create the cluster.
- Click Create.
4.7. Preparing and importing a base GCP image Copier lienLien copié sur presse-papiers!
Before a local RHEL 8 image can be deployed in GCP, you must first convert and upload the image to your GCP Bucket.
Procedure
Convert the file. Images uploaded to GCP must be in
rawformat and nameddisk.raw.qemu-img convert -f qcow2 ImageName.qcow2 -O raw disk.raw
$ qemu-img convert -f qcow2 ImageName.qcow2 -O raw disk.rawCopy to Clipboard Copied! Toggle word wrap Toggle overflow Compress the
rawfile. Images uploaded to GCP must be compressed.tar -Sczf ImageName.tar.gz disk.raw
$ tar -Sczf ImageName.tar.gz disk.rawCopy to Clipboard Copied! Toggle word wrap Toggle overflow Import the compressed image to the bucket created earlier.
gsutil cp ImageName.tar.gz gs://BucketName
$ gsutil cp ImageName.tar.gz gs://BucketNameCopy to Clipboard Copied! Toggle word wrap Toggle overflow
4.8. Creating and configuring a base GCP instance Copier lienLien copié sur presse-papiers!
To create and configure a Google Cloud Platform (GCP) instance that complies with GCP operating and security requirements, complete the following steps.
Procedure
Create an image from the compressed file in the bucket.
gcloud compute images create BaseImageName --source-uri gs://BucketName/BaseImageName.tar.gz
$ gcloud compute images create BaseImageName --source-uri gs://BucketName/BaseImageName.tar.gzCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
[admin@localhost ~] $ gcloud compute images create rhel-76-server --source-uri gs://user-rhelha/rhel-server-76.tar.gz Created [https://www.googleapis.com/compute/v1/projects/MyProject/global/images/rhel-server-76]. NAME PROJECT FAMILY DEPRECATED STATUS rhel-76-server rhel-ha-testing-on-gcp READY
[admin@localhost ~] $ gcloud compute images create rhel-76-server --source-uri gs://user-rhelha/rhel-server-76.tar.gz Created [https://www.googleapis.com/compute/v1/projects/MyProject/global/images/rhel-server-76]. NAME PROJECT FAMILY DEPRECATED STATUS rhel-76-server rhel-ha-testing-on-gcp READYCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create a template instance from the image. The minimum size required for a base RHEL instance is n1-standard-2. See gcloud compute instances create for additional configuration options.
gcloud compute instances create BaseInstanceName --can-ip-forward --machine-type n1-standard-2 --image BaseImageName --service-account ServiceAccountEmail
$ gcloud compute instances create BaseInstanceName --can-ip-forward --machine-type n1-standard-2 --image BaseImageName --service-account ServiceAccountEmailCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
[admin@localhost ~] $ gcloud compute instances create rhel-76-server-base-instance --can-ip-forward --machine-type n1-standard-2 --image rhel-76-server --service-account account@project-name-on-gcp.iam.gserviceaccount.com Created [https://www.googleapis.com/compute/v1/projects/rhel-ha-testing-on-gcp/zones/us-east1-b/instances/rhel-76-server-base-instance]. NAME ZONE MACHINE_TYPE PREEMPTIBLE INTERNAL_IP EXTERNAL_IP STATUS rhel-76-server-base-instance us-east1-bn1-standard-2 10.10.10.3 192.227.54.211 RUNNING
[admin@localhost ~] $ gcloud compute instances create rhel-76-server-base-instance --can-ip-forward --machine-type n1-standard-2 --image rhel-76-server --service-account account@project-name-on-gcp.iam.gserviceaccount.com Created [https://www.googleapis.com/compute/v1/projects/rhel-ha-testing-on-gcp/zones/us-east1-b/instances/rhel-76-server-base-instance]. NAME ZONE MACHINE_TYPE PREEMPTIBLE INTERNAL_IP EXTERNAL_IP STATUS rhel-76-server-base-instance us-east1-bn1-standard-2 10.10.10.3 192.227.54.211 RUNNINGCopy to Clipboard Copied! Toggle word wrap Toggle overflow Connect to the instance with an SSH terminal session.
ssh root@PublicIPaddress
$ ssh root@PublicIPaddressCopy to Clipboard Copied! Toggle word wrap Toggle overflow Update the RHEL software.
- Register with Red Hat Subscription Manager (RHSM).
- Enable a Subscription Pool ID.
Disable all repositories.
subscription-manager repos --disable=*
# subscription-manager repos --disable=*Copy to Clipboard Copied! Toggle word wrap Toggle overflow Enable the following repository.
subscription-manager repos --enable=rhel-8-server-rpms
# subscription-manager repos --enable=rhel-8-server-rpmsCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the
yum updatecommand.yum update -y
# yum update -yCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Install the GCP Linux Guest Environment on the running instance (in-place installation).
See Install the guest environment in-place for instructions.
- Select the CentOS/RHEL option.
- Copy the command script and paste it at the command prompt to run the script immediately.
Make the following configuration changes to the instance. These changes are based on GCP recommendations for custom images. See gcloudcompute images list for more information.
-
Edit the
/etc/chrony.conffile and remove all NTP servers. Add the following NTP server.
metadata.google.internal iburst Google NTP server
metadata.google.internal iburst Google NTP serverCopy to Clipboard Copied! Toggle word wrap Toggle overflow Remove any persistent network device rules.
rm -f /etc/udev/rules.d/70-persistent-net.rules rm -f /etc/udev/rules.d/75-persistent-net-generator.rules
# rm -f /etc/udev/rules.d/70-persistent-net.rules # rm -f /etc/udev/rules.d/75-persistent-net-generator.rulesCopy to Clipboard Copied! Toggle word wrap Toggle overflow Set the network service to start automatically.
chkconfig network on
# chkconfig network onCopy to Clipboard Copied! Toggle word wrap Toggle overflow Set the
sshd serviceto start automatically.systemctl enable sshd systemctl is-enabled sshd
# systemctl enable sshd # systemctl is-enabled sshdCopy to Clipboard Copied! Toggle word wrap Toggle overflow Set the time zone to UTC.
ln -sf /usr/share/zoneinfo/UTC /etc/localtime
# ln -sf /usr/share/zoneinfo/UTC /etc/localtimeCopy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Edit the
/etc/ssh/ssh_configfile and add the following lines to the end of the file. This keeps your SSH session active during longer periods of inactivity.Server times out connections after several minutes of inactivity. Keep alive ssh connections by sending a packet every 7 minutes.
# Server times out connections after several minutes of inactivity. # Keep alive ssh connections by sending a packet every 7 minutes. ServerAliveInterval 420Copy to Clipboard Copied! Toggle word wrap Toggle overflow Edit the
/etc/ssh/sshd_configfile and make the following changes, if necessary. The ClientAliveInterval 420 setting is optional; this keeps your SSH session active during longer periods of inactivity.Copy to Clipboard Copied! Toggle word wrap Toggle overflow
-
Edit the
Disable password access.
ssh_pwauth from 1 to 0. ssh_pwauth: 0
ssh_pwauth from 1 to 0. ssh_pwauth: 0Copy to Clipboard Copied! Toggle word wrap Toggle overflow ImportantPreviously, you enabled password access to allow SSH session access to configure the instance. You must disable password access. All SSH session access must be passwordless.
Unregister the instance from the subscription manager.
subscription-manager unregister
# subscription-manager unregisterCopy to Clipboard Copied! Toggle word wrap Toggle overflow Clean the shell history. Keep the instance running for the next procedure.
export HISTSIZE=0
# export HISTSIZE=0Copy to Clipboard Copied! Toggle word wrap Toggle overflow
4.9. Creating a snapshot image Copier lienLien copié sur presse-papiers!
To preserve the configuration and disk data of a GCP HA instance, create a snapshot of it.
Procedure
On the running instance, synchronize data to disk.
sync
# syncCopy to Clipboard Copied! Toggle word wrap Toggle overflow On your host system, create the snapshot.
gcloud compute disks snapshot InstanceName --snapshot-names SnapshotName
$ gcloud compute disks snapshot InstanceName --snapshot-names SnapshotNameCopy to Clipboard Copied! Toggle word wrap Toggle overflow On your host system, create the configured image from the snapshot.
gcloud compute images create ConfiguredImageFromSnapshot --source-snapshot SnapshotName
$ gcloud compute images create ConfiguredImageFromSnapshot --source-snapshot SnapshotNameCopy to Clipboard Copied! Toggle word wrap Toggle overflow
4.10. Creating an HA node template instance and HA nodes Copier lienLien copié sur presse-papiers!
After you have configured an image from the snapshot, you can create a node template. Then, you can use this template to create all HA nodes.
Procedure
Create an instance template.
gcloud compute instance-templates create InstanceTemplateName --can-ip-forward --machine-type n1-standard-2 --image ConfiguredImageFromSnapshot --service-account ServiceAccountEmailAddress
$ gcloud compute instance-templates create InstanceTemplateName --can-ip-forward --machine-type n1-standard-2 --image ConfiguredImageFromSnapshot --service-account ServiceAccountEmailAddressCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
[admin@localhost ~] $ gcloud compute instance-templates create rhel-81-instance-template --can-ip-forward --machine-type n1-standard-2 --image rhel-81-gcp-image --service-account account@project-name-on-gcp.iam.gserviceaccount.com Created [https://www.googleapis.com/compute/v1/projects/project-name-on-gcp/global/instanceTemplates/rhel-81-instance-template]. NAME MACHINE_TYPE PREEMPTIBLE CREATION_TIMESTAMP rhel-81-instance-template n1-standard-2 2018-07-25T11:09:30.506-07:00
[admin@localhost ~] $ gcloud compute instance-templates create rhel-81-instance-template --can-ip-forward --machine-type n1-standard-2 --image rhel-81-gcp-image --service-account account@project-name-on-gcp.iam.gserviceaccount.com Created [https://www.googleapis.com/compute/v1/projects/project-name-on-gcp/global/instanceTemplates/rhel-81-instance-template]. NAME MACHINE_TYPE PREEMPTIBLE CREATION_TIMESTAMP rhel-81-instance-template n1-standard-2 2018-07-25T11:09:30.506-07:00Copy to Clipboard Copied! Toggle word wrap Toggle overflow Create multiple nodes in one zone.
gcloud compute instances create NodeName01 NodeName02 --source-instance-template InstanceTemplateName --zone RegionZone --network=NetworkName --subnet=SubnetName
# gcloud compute instances create NodeName01 NodeName02 --source-instance-template InstanceTemplateName --zone RegionZone --network=NetworkName --subnet=SubnetNameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
4.11. Installing HA packages and agents Copier lienLien copié sur presse-papiers!
On each of your nodes, you need to install the High Availability packages and agents to be able to configure a Red Hat High Availability cluster on Google Cloud Platform (GCP).
Procedure
- In the Google Cloud Console, select Compute Engine and then select VM instances.
- Select the instance, click the arrow next to SSH, and select the View gcloud command option.
- Paste this command at a command prompt for passwordless access to the instance.
- Enable sudo account access and register with Red Hat Subscription Manager.
- Enable a Subscription Pool ID.
Disable all repositories.
subscription-manager repos --disable=*
# subscription-manager repos --disable=*Copy to Clipboard Copied! Toggle word wrap Toggle overflow Enable the following repositories.
subscription-manager repos --enable=rhel-8-server-rpms subscription-manager repos --enable=rhel-8-for-x86_64-highavailability-rpms
# subscription-manager repos --enable=rhel-8-server-rpms # subscription-manager repos --enable=rhel-8-for-x86_64-highavailability-rpmsCopy to Clipboard Copied! Toggle word wrap Toggle overflow Install
pcs pacemaker, the fence agents, and the resource agents.yum install -y pcs pacemaker fence-agents-gce resource-agents-gcp
# yum install -y pcs pacemaker fence-agents-gce resource-agents-gcpCopy to Clipboard Copied! Toggle word wrap Toggle overflow Update all packages.
yum update -y
# yum update -yCopy to Clipboard Copied! Toggle word wrap Toggle overflow
4.12. Configuring HA services Copier lienLien copié sur presse-papiers!
On each of your nodes, configure the HA services.
Procedure
The user
haclusterwas created during thepcsandpacemakerinstallation in the previous step. Create a password for the userhaclusteron all cluster nodes. Use the same password for all nodes.passwd hacluster
# passwd haclusterCopy to Clipboard Copied! Toggle word wrap Toggle overflow If the
firewalldservice is installed, add the HA service.firewall-cmd --permanent --add-service=high-availability firewall-cmd --reload
# firewall-cmd --permanent --add-service=high-availability # firewall-cmd --reloadCopy to Clipboard Copied! Toggle word wrap Toggle overflow Start the
pcsservice and enable it to start on boot.systemctl start pcsd.service systemctl enable pcsd.service
# systemctl start pcsd.service # systemctl enable pcsd.service Created symlink from /etc/systemd/system/multi-user.target.wants/pcsd.service to /usr/lib/systemd/system/pcsd.service.Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
Ensure the
pcsdservice is running.Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
Edit the
/etc/hostsfile. Add RHEL host names and internal IP addresses for all nodes.
4.13. Creating a cluster Copier lienLien copié sur presse-papiers!
To convert multiple nodes into a cluster, use the following steps.
Procedure
On one of the nodes, authenticate the
pcsuser. Specify the name of each node in the cluster in the command.Copy to Clipboard Copied! Toggle word wrap Toggle overflow Create the cluster.
pcs cluster setup cluster-name hostname1 hostname2 hostname3
# pcs cluster setup cluster-name hostname1 hostname2 hostname3Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
Run the following command to enable nodes to join the cluster automatically when started.
pcs cluster enable --all
# pcs cluster enable --allCopy to Clipboard Copied! Toggle word wrap Toggle overflow Start the cluster.
pcs cluster start --all
# pcs cluster start --allCopy to Clipboard Copied! Toggle word wrap Toggle overflow
4.14. Creating a fencing device Copier lienLien copié sur presse-papiers!
High Availability (HA) environments require a fencing device, which ensures that malfunctioning nodes are isolated and the cluster remains available if an outage occurs.
Note that for most default configurations, the GCP instance names and the RHEL host names are identical.
Procedure
Obtain GCP instance names. Note that the output of the following command also shows the internal ID for the instance.
fence_gce --zone us-west1-b --project=rhel-ha-on-gcp -o list
# fence_gce --zone us-west1-b --project=rhel-ha-on-gcp -o listCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
fence_gce --zone us-west1-b --project=rhel-ha-testing-on-gcp -o list
[root@rhel81-node-01 ~]# fence_gce --zone us-west1-b --project=rhel-ha-testing-on-gcp -o list 4435801234567893181,InstanceName-3 4081901234567896811,InstanceName-1 7173601234567893341,InstanceName-2Copy to Clipboard Copied! Toggle word wrap Toggle overflow Create a fence device.
pcs stonith create FenceDeviceName fence_gce zone=Region-Zone project=MyProject
# pcs stonith create FenceDeviceName fence_gce zone=Region-Zone project=MyProjectCopy to Clipboard Copied! Toggle word wrap Toggle overflow - To ensure immediate and complete fencing, disable ACPI Soft-Off on all cluster nodes. For information about disabling ACPI Soft-Off, see Disabling ACPI for use with integrated fence device.
Verification
Verify that the fence devices started.
pcs status
# pcs statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
4.15. Configuring the gcp-vcp-move-vip resource agent Copier lienLien copié sur presse-papiers!
The gcp-vpc-move-vip resource agent attaches a secondary IP address (alias IP) to a running instance. This is a floating IP address that can be passed between different nodes in the cluster.
To show more information about this resource:
pcs resource describe gcp-vpc-move-vip
# pcs resource describe gcp-vpc-move-vip
You can configure the resource agent to use a primary subnet address range or a secondary subnet address range:
Primary subnet address range
Complete the following steps to configure the resource for the primary VPC subnet.
Procedure
Create the
aliasipresource. Include an unused internal IP address. Include the CIDR block in the command.pcs resource create aliasip gcp-vpc-move-vip alias_ip=UnusedIPaddress/CIDRblock
# pcs resource create aliasip gcp-vpc-move-vip alias_ip=UnusedIPaddress/CIDRblockCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
pcs resource create aliasip gcp-vpc-move-vip alias_ip=10.10.10.200/32
[root@rhel81-node-01 ~]# pcs resource create aliasip gcp-vpc-move-vip alias_ip=10.10.10.200/32Copy to Clipboard Copied! Toggle word wrap Toggle overflow Create an
IPaddr2resource for managing the IP on the node.pcs resource create vip IPaddr2 nic=interface ip=AliasIPaddress cidr_netmask=32
# pcs resource create vip IPaddr2 nic=interface ip=AliasIPaddress cidr_netmask=32Copy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
pcs resource create vip IPaddr2 nic=eth0 ip=10.10.10.200 cidr_netmask=32
[root@rhel81-node-01 ~]# pcs resource create vip IPaddr2 nic=eth0 ip=10.10.10.200 cidr_netmask=32Copy to Clipboard Copied! Toggle word wrap Toggle overflow Group the network resources under
vipgrp.pcs resource group add vipgrp aliasip vip
# pcs resource group add vipgrp aliasip vipCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
Verify that the resources have started and are grouped under
vipgrp.pcs status
# pcs statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the resource can move to a different node.
pcs resource move vip Node
# pcs resource move vip NodeCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
pcs resource move vip rhel81-node-03
[root@rhel81-node-01 ~]# pcs resource move vip rhel81-node-03Copy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the
vipsuccessfully started on a different node.pcs status
# pcs statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Secondary subnet address range
Complete the following steps to configure the resource for a secondary subnet address range.
Prerequisites
- You have created a custom network and a subnet
Optional: You have installed Google Cloud SDK. For instructions, see Installing the Google Cloud SDK.
Note, however, that you can use the
gcloudcommands in the following procedure in the terminal that you can activate in the Google Cloud web console.
Procedure
Create a secondary subnet address range.
gcloud compute networks subnets update SubnetName --region RegionName --add-secondary-ranges SecondarySubnetName=SecondarySubnetRange
# gcloud compute networks subnets update SubnetName --region RegionName --add-secondary-ranges SecondarySubnetName=SecondarySubnetRangeCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
gcloud compute networks subnets update range0 --region us-west1 --add-secondary-ranges range1=10.10.20.0/24
# gcloud compute networks subnets update range0 --region us-west1 --add-secondary-ranges range1=10.10.20.0/24Copy to Clipboard Copied! Toggle word wrap Toggle overflow Create the
aliasipresource. Create an unused internal IP address in the secondary subnet address range. Include the CIDR block in the command.pcs resource create aliasip gcp-vpc-move-vip alias_ip=UnusedIPaddress/CIDRblock
# pcs resource create aliasip gcp-vpc-move-vip alias_ip=UnusedIPaddress/CIDRblockCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
pcs resource create aliasip gcp-vpc-move-vip alias_ip=10.10.20.200/32
[root@rhel81-node-01 ~]# pcs resource create aliasip gcp-vpc-move-vip alias_ip=10.10.20.200/32Copy to Clipboard Copied! Toggle word wrap Toggle overflow Create an
IPaddr2resource for managing the IP on the node.pcs resource create vip IPaddr2 nic=interface ip=AliasIPaddress cidr_netmask=32
# pcs resource create vip IPaddr2 nic=interface ip=AliasIPaddress cidr_netmask=32Copy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
pcs resource create vip IPaddr2 nic=eth0 ip=10.10.20.200 cidr_netmask=32
[root@rhel81-node-01 ~]# pcs resource create vip IPaddr2 nic=eth0 ip=10.10.20.200 cidr_netmask=32Copy to Clipboard Copied! Toggle word wrap Toggle overflow Group the network resources under
vipgrp.pcs resource group add vipgrp aliasip vip
# pcs resource group add vipgrp aliasip vipCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
Verify that the resources have started and are grouped under
vipgrp.pcs status
# pcs statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the resource can move to a different node.
pcs resource move vip Node
# pcs resource move vip NodeCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example:
pcs resource move vip rhel81-node-03
[root@rhel81-node-01 ~]# pcs resource move vip rhel81-node-03Copy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the
vipsuccessfully started on a different node.pcs status
# pcs statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow