12.6. 关于 Migration Toolkit for Virtualization (MTV)供应商

流程

1. 针对您要为其创建供应商的集群运行以下命令：

   $ oc get cm kube-root-ca.crt -o=jsonpath={.data.ca\\.crt}

2. 复制输出的证书。
3. 在 Migration Toolkit for Virtualization (MTV) web 控制台中，创建一个供应商并选择 OpenShift Virtualization。

4. 将证书粘贴到 CA 证书 字段中，如下例所示：

   -----BEGIN CERTIFICATE-----
   <CA_certificate_content>
   -----END CERTIFICATE-----

流程

1. 创建集群角色，如下例所示：

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRole
   metadata:
     name: live-migration-role
   rules:
     - apiGroups:
         - forklift.konveyor.io
       resources:
         - '*'
       verbs:
         - get
         - list
         - watch
     - apiGroups:
         - ""
       resources:
         - secrets
         - namespaces
         - configmaps
         - persistentvolumes
         - persistentvolumeclaims
       verbs:
         - get
         - list
         - watch
         - create
         - update
         - patch
         - delete
     - apiGroups:
         - k8s.cni.cncf.io
       resources:
         - network-attachment-definitions
       verbs:
         - get
         - list
         - watch
     - apiGroups:
         - storage.k8s.io
       resources:
         - storageclasses
       verbs:
         - get
         - list
         - watch
     - apiGroups:
         - kubevirt.io
       resources:
         - virtualmachines
         - virtualmachines/finalizers
         - virtualmachineinstancemigrations
       verbs:
         - get
         - list
         - watch
         - create
         - update
         - patch
         - delete
     - apiGroups:
         - kubevirt.io
       resources:
         - kubevirts
         - virtualmachineinstances
       verbs:
         - get
         - list
         - watch
     - apiGroups:
         - cdi.kubevirt.io
       resources:
         - datavolumes
         - datavolumes/finalizers
       verbs:
         - get
         - list
         - watch
         - create
         - update
         - patch
         - delete
     - apiGroups:
         - apps
       resources:
         - deployments
       verbs:
         - get
         - list
         - watch
         - create
         - update
         - patch
         - delete
     - apiGroups:
         - instancetype.kubevirt.io
       resources:
         - virtualmachineclusterpreferences
         - virtualmachineclusterinstancetypes
       verbs:
         - get
         - list
         - watch
     - apiGroups:
         - instancetype.kubevirt.io
       resources:
         - virtualmachinepreferences
         - virtualmachineinstancetypes
       verbs:
         - get
         - list
         - watch
         - create
         - update
         - patch
         - delete

2. 运行以下命令来创建集群角色：

   $ oc create -f <filename>.yaml

3. 运行以下命令来创建服务帐户：

   $ oc create serviceaccount <service_account_name> -n <service_account_namespace>

4. 运行以下命令，创建将服务帐户链接到集群角色的集群角色绑定：

   $ oc create clusterrolebinding <service_account_name> --clusterrole=<cluster_role_name> --serviceaccount=<service_account_namespace>:<service_account_name>

5. 通过将以下清单保存为 YAML 文件来创建 secret 来保存令牌：

   apiVersion: v1
   kind: Secret
   metadata:
     name: <name_of_secret>
     namespace: <namespace_for_service_account>
     annotations:
       kubernetes.io/service-account.name: <service_account_name>
   type: kubernetes.io/service-account-token

6. 运行以下命令来应用清单：

   $ oc apply -f <filename>.yaml

7. 填充 secret 后，运行以下命令来获取服务帐户 bearer 令牌：

   $ TOKEN_BASE64=$(oc get secret "<name_of_secret>" -n "<namespace_bound_to_service_account>" -o jsonpath='{.data.token}')
     TOKEN=$(echo "$TOKEN_BASE64" | base64 --decode)
     echo "$TOKEN"

8. 复制输出的令牌。
9. 在 Migration Toolkit for Virtualization (MTV) web 控制台中，当您创建供应商并选择 OpenShift Virtualization 时，将令牌粘贴到 Service account bearer token 字段中。