16.2.2.3. GitOps ZTP を使用した Lifecycle Agent のインストール

手順

1. ztp-site-generate コンテナーイメージから次の CR を抽出し、source-cr ディレクトリーにプッシュします。

   LcaSubscriptionNS.yaml ファイルの例:

   apiVersion: v1
   kind: Namespace
   metadata:
     name: openshift-lifecycle-agent
     annotations:
       workload.openshift.io/allowed: management
       ran.openshift.io/ztp-deploy-wave: "2"
     labels:
       kubernetes.io/metadata.name: openshift-lifecycle-agent

   LcaSubscriptionOperaGroup.yaml ファイルの例:

   apiVersion: operators.coreos.com/v1
   kind: OperatorGroup
   metadata:
     name: lifecycle-agent-operatorgroup
     namespace: openshift-lifecycle-agent
     annotations:
       ran.openshift.io/ztp-deploy-wave: "2"
   spec:
     targetNamespaces:
       - openshift-lifecycle-agent

   LcaSubscription.yaml ファイルの例:

   apiVersion: operators.coreos.com/v1alpha1
   kind: Subscription
   metadata:
     name: lifecycle-agent
     namespace: openshift-lifecycle-agent
     annotations:
       ran.openshift.io/ztp-deploy-wave: "2"
   spec:
     channel: "stable"
     name: lifecycle-agent
     source: redhat-operators
     sourceNamespace: openshift-marketplace
     installPlanApproval: Manual
   status:
     state: AtLatestKnown

   ディレクトリー構造の例:

   ├── kustomization.yaml
   ├── sno
   │   ├── example-cnf.yaml
   │   ├── common-ranGen.yaml
   │   ├── group-du-sno-ranGen.yaml
   │   ├── group-du-sno-validator-ranGen.yaml
   │   └── ns.yaml
   ├── source-crs
   │   ├── LcaSubscriptionNS.yaml
   │   ├── LcaSubscriptionOperGroup.yaml
   │   ├── LcaSubscription.yaml

2. 共通の PolicyGenerator に CR を追加します。

   apiVersion: policy.open-cluster-management.io/v1
   kind: PolicyGenerator
   metadata:
     name: common-latest
   placementBindingDefaults:
     name: common-placement-binding
   policyDefaults:
     namespace: ztp-common
     placement:
       labelSelector:
         common: "true"
         du-profile: "latest"
     remediationAction: inform
     severity: low
     namespaceSelector:
       exclude:
         - kube-*
       include:
         - '*'
     evaluationInterval:
       compliant: 10m
       noncompliant: 10s
   policies:
   - name: common-latest-subscriptions-policy
     policyAnnotations:
       ran.openshift.io/ztp-deploy-wave: "2"
     manifests:
       - path: source-crs/LcaSubscriptionNS.yaml
       - path: source-crs/LcaSubscriptionOperGroup.yaml
       - path: source-crs/LcaSubscription.yaml
   [...]