9.4.8. 複数の仮想マシンを更新する

手順

1. 次のコマンドを実行して、特権付きサービスアカウントを作成します。

   $ oc adm new-project kubevirt-api-lifecycle-automation

   $ oc create sa kubevirt-api-lifecycle-automation -n kubevirt-api-lifecycle-automation

   $ oc create clusterrolebinding kubevirt-api-lifecycle-automation --clusterrole=cluster-admin --serviceaccount=kubevirt-api-lifecycle-automation:kubevirt-api-lifecycle-automation

2. 次のコマンドを実行して、kubevirt-api-lifecycle イメージのプル URL を決定します。

   $ oc get csv -n openshift-cnv -l=operators.coreos.com/kubevirt-hyperconverged.openshift-cnv -ojson | jq '.items[0].spec.relatedImages[] | select(.name|test(".*kubevirt-api-lifecycle-automation.*")) | .image'

3. 次の例に示すように、ジョブオブジェクトを作成して Kubevirt-Api-Lifecycle-Automation をデプロイします。

   apiVersion: batch/v1
   kind: Job
   metadata:
    name: kubevirt-api-lifecycle-automation
    namespace: kubevirt-api-lifecycle-automation
   spec:
    template:
     spec:
      containers:
      - name: kubevirt-api-lifecycle-automation
        image: quay.io/openshift-virtualization/kubevirt-api-lifecycle-automation:v4.19 

   1

   
        imagePullPolicy: Always
        env:
        - name: MACHINE_TYPE_GLOB 

   2

   
          value: smth-glob9.10.0
        - name: RESTART_REQUIRED 

   3

   
          value: "true"
        - name: NAMESPACE 

   4

   
          value: "default"
        - name: LABEL_SELECTOR 

   5

   
          value: my-vm
        securityContext:
         allowPrivilegeEscalation: false
         capabilities:
          drop:
          - ALL
         privileged: false
         runAsNonRoot: true
         seccompProfile:
          type: RuntimeDefault
      restartPolicy: Never
      serviceAccountName: kubevirt-api-lifecycle-automation