Ce contenu n'est pas disponible dans la langue sélectionnée.
Chapter 10. Creating a RHOCP Bare Metal supplemental certification
The Red Hat OpenShift Bare Metal Certification is a supplemental certification. It might have already been created for you as part of the Red Hat Enterprise Linux System certification.
If it was not automatically created for you, or if you need to apply for the certification at a later date, perform the following steps:
Prerequisites
Your server must have already earned the following certifications:
- Red Hat Enterprise Linux System
- Red Hat OpenShift Container Platform
You must create individual supplemental certifications for each type, IPI or AI. However, if you intend to certify both IPI and AI, create a single supplemental certification request.
For more information about creating the Red Hat OpenShift Container Platform layered certification, see Certifying layered products.
Procedure
- Log in to the Red Hat Partner Connect portal.
- Click the Red Hat Enterprise Linux System certification that is related to the assisted installer certification you want to open.
- Click the Related Certifications tab on the upper left side of the table.
- Click the Red Hat OpenShift Container Platform certification that is related to the assisted installer certification you want to open.
- Click the Related Certifications tab on the upper left side of the table.
At the top of the certifications table, click Add Related Certification.
The Create Related Certification window appears.
- Select Supplemental and click Next.
Review the certification information and click Open.
The supplemental certification is created.
Leave a comment to the Red Hat certification team to specify that you want either or both of the following components added to the test plan:
- Bare Metal Management
- Assisted Installer
- After you get the new test plan, start testing.
10.1. Running the IPI test Copier lienLien copié sur presse-papiers!
The installer-provisioned infrastructure (IPI) test validates whether your BMC-capable bare-metal nodes can be accessed, deployed, and rebooted on an established RHOCP environment.
The test uses the Ironic service already running on the RHOCP environment to provision the bare-metal node undergoing certification.
Prerequisites
- You have the installer-provisioned cluster prepared already.
You have added the bare-metal node to the RHOCP cluster. This node must:
- Have no operating system installed.
- Have not been provisioned.
-
Have access to the
baremetal
and theprovisioning
networks if both are available on the RHOCP environment. If you only configured thebaremetal
network, the server must be connected to it.
The test must validate that the server can be turned on and off remotely. When creating the bmh.yaml
file for the bare-metal node, set the online
field to false
. For example:
Failure to set this field appropriately will cause the test to fail.
Procedure
Identify the IP address of the node where the Ironic service is running. For example:
oc -n openshift-machine-api get pods -o wide | egrep -v ‘image|controller|operator’
# oc -n openshift-machine-api get pods -o wide | egrep -v ‘image|controller|operator’ NAME READY STATUS RESTARTS AGE IP NODE metal3-78b556db65-lgkrp 7/7 Running 0 12d 172.22.0.111 worker-0
Copy to Clipboard Copied! Toggle word wrap Toggle overflow The
metal3
pod runs the Ironic service that the test uses to install the bare-metal node undergoing certification. Make a note of its IP address; this is the Ironic API endpoint that you will use in a later step.Get the credentials of the Ironic service and make a note of them. You will use them in a later step.
oc -n openshift-machine-api get secret/metal3-ironic-password -o template --template '{{.data.username}}' | base64 -d oc -n openshift-machine-api get secret/metal3-ironic-password -o template --template '{{.data.password}}' | base64 -d
# oc -n openshift-machine-api get secret/metal3-ironic-password -o template --template '{{.data.username}}' | base64 -d # oc -n openshift-machine-api get secret/metal3-ironic-password -o template --template '{{.data.password}}' | base64 -d
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Log in to any cluster node. For example:
oc debug host/master-0
# oc debug host/master-0
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Prepare the node to run the certification test:
-
Install
podman
if it is not already installed. Create the
/tmp/results
directory. The test will store the results in this directoryNoteThe node must have access to the
baremetal
and theprovisioning
networks if both are available on the RHOCP environment. If you only configured thebaremetal
network, the node must be connected to it.Log in to the Red Hat Certification image registry:
podman login registry.redhat.io
# podman login registry.redhat.io Username: <registry_service_account_username> Password: <registry_service_account_password> Login Succeeded!
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Download the
redhat-certification-baremetal
image from the Red Hat catalog:podman pull registry.redhat.io/rhcertification/redhat-certification-baremetal
# podman pull registry.redhat.io/rhcertification/redhat-certification-baremetal
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
-
Install
Run the IPI test:
podman run -it --net host -v /tmp/results:/var/rhcert_results:Z redhat-certification-baremetal
# podman run -it --net host -v /tmp/results:/var/rhcert_results:Z redhat-certification-baremetal
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Expand Table 10.1. IPI test parameter description Parameter Description -it
Starts an interactive session.
--net host
Podman uses the network stack of the host for the container. The network configuration of the container is the same as that of the host. The container shares the same service ports that are available to the host.
-v tmp/results:/var/rhcert_results
Allows mounting the content of a host folder
/tmp/results
to/var/rhcert_results
.:Z
Ensures you have read and write permissions on the mount point.
-
Enter the username, password, and the URL of the Ironic service that you acquired before. The URL must be in the format
https://<Ironic_IP_address>:6385
. Select the bare-metal node on which you want to run the test.
The UUID, Name, Power State, and Provision State of the selected node displays. The test will start after you select the node.
Confirm whether the bare-metal node is powered on when prompted. After you confirm this, the test restarts the bare-metal node.
Test result files are generated at
/tmp/results
.- At the Red Hat certification website, submit the results to the supplemental RHOCP certification for your server.
10.2. Running the OpenShift IPI test Copier lienLien copié sur presse-papiers!
The OpenShift installer-provisioned infrastructure (IPI) test validates whether you can access, deploy and reboot your BMC-capable bare-metal nodes on an established RHOCP environment.
The test uses the ironic service already running on the RHOCP environment to provision the bare-metal node undergoing certification.
Prerequisites
Ensure to meet following prerequisites before proceeding with the certification:
- A Controller system that has access to an IPI cluster.
- A bare-metal node in which you run all the tests is called the host under test (HUT).
Figure 10.1. OpenShift IPI test environment
On the Controller system:
You have installed the following packages:
-
redhat-certification
-
redhat-certification-openshift
-
redhat-certification-bmc
-
-
You have stored your pull secret at the location
/opt/dev-scripts/pull_secret.json
. -
Ensure to have the
kubeconfig
file. You can either export it as an environment variable or provide it during the test run time by using the following command:export KUBECONFIG=/root/full/path/kubeconfig
- From the Extra Packages for Enterprise Linux (EPEL) repository, find and install the parallel package.
-
Locate and configure the files
install-config.yaml
andclouds.yaml
with their specific environment details. You can find them at the location/etc/redhat-certification/openshift/
. - You have the installer-provisioned cluster (HUT) ready.
On the HUT:
You have added the bare-metal node to the RHOCP cluster. This node must have the following:
- CoreOS installed.
- Connects to both the baremetal and the provisioning networks, if your RHOCP environment includes them. If only the bare-metal network is configured, ensure the node connects to it.
Procedure
Identify the IP address of the node where the Ironic service is running. For example:
oc -n openshift-machine-api get pods -o wide | egrep -v ‘image|controller|operator’
# oc -n openshift-machine-api get pods -o wide | egrep -v ‘image|controller|operator’ NAME READY STATUS RESTARTS AGE IP NODE metal3-78b556db65-lgkrp 7/7 Running 0 12d 172.22.0.111 worker-0
Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
The
metal3
pod runs the Ironic service that the test uses to install the bare-metal node undergoing certification. Note its IP address; this is the Ironic API endpoint that you will use in a later step. Run the following command to plan and run the
OpenShift_IPI test
on your HUT:rhcert-cli plan rhcert-cli run --test openshift_ipi
$ rhcert-cli plan $ rhcert-cli run --test openshift_ipi
Copy to Clipboard Copied! Toggle word wrap Toggle overflow IPI test runs the following subtests:
-
MustGather validation
- collects the system and diagnostic information, such as configuration details, system logs, and other relevant data of your OpenShift cluster. It is essential for debugging issues. -
CoreOS validation
- checks the CoreOs version available in the OpenShift cluster and validates it against an official Red Hat release. -
Workload validation
- deploys a workload on a specified node, monitors CPU usage, and checks workload impact based on CPU utilization. -
IPI validation
- checks if the OpenShift cluster is deployed by using IPI. -
BMCTest validation
- tests the BMC control and the Redfish boot capabilities of the OpenShift cluster on the OpenShift bare-metal nodes.
-
- At the Red Hat certification website, submit the results to the supplemental RHOCP certification for your server.
Also, upload the
must-gather tar.bz
file located at the default location/etc/redhat-certification/openshift/
by using the following command:rhcert-cli upload --certification-id 123456 --description "Anything about the file" --file /etc/redhat-certification/openshift/must-gather.local.123456.tar.gz
$ rhcert-cli upload --certification-id 123456 --description "Anything about the file" --file /etc/redhat-certification/openshift/must-gather.local.123456.tar.gz
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
10.3. Running the assisted installer test Copier lienLien copié sur presse-papiers!
The assisted installer tests verify that your bare-metal servers can be installed by using the assisted installer for OpenShift Container Platform.
The tests are for bare-metal servers only. VMs are not supported.
If you prefer using Cockpit instead of the command line for Assisted Installer certification testing, you must set up the Cockpit first. See Configuring the systems and running tests by using Cockpit for instructions.
Prerequisites
- You have installed the HUT as a single-node OpenShift cluster by using the assisted installer for Red Hat OpenShift Container Platform.
-
You have configured the
kubeconfig
file as explained in the assisted installer for Red Hat OpenShift Container Platform documentation. You have run
rhcert-provision
command by using either of the following methods:-
By following the steps while running
rhcert-provision
command, which downloads the test plan directly from connect portal, for which authentication is mandatory. - By using the test plan downloaded from connect portal as explained in Creating a Bare Metal supplemental certification documentation.
-
By following the steps while running
Procedure
- Log in to the single-node cluster.
Install the following redhat-certification packages:
-
redhat-certification
redhat-certification-openshift
For example:
dnf install redhat-certification redhat-certification-openshift
# dnf install redhat-certification redhat-certification-openshift
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
-
- In the Red Hat Hybrid Cloud Console, generate an OpenShift Manager API token.
Add the token to the
OFFLINE_TOKEN
variable and export it.For example,
export OFFLINE_TOKEN=<value_of_your_token>
# export OFFLINE_TOKEN=<value_of_your_token>
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Confirm if the cluster is accessible by using the following command:
oc status
# oc status
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Run the tests according to test plan:
rhcert-run
# rhcert-run
Copy to Clipboard Copied! Toggle word wrap Toggle overflow The similar set of tests get displayed as follows:
Alternatively, you can use
rhcert-cli
to run the test as follows:rhcert-cli plan
# rhcert-cli plan
Copy to Clipboard Copied! Toggle word wrap Toggle overflow rhcert-cli run –test assisted_installer
# rhcert-cli run –test assisted_installer
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Save the test result:
rhcert-cli save
# rhcert-cli save
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Submit the results of both tests to the supplemental RHOCP certification for your server at the Red Hat Certification website.