19.16. 为多个受管集群创建 ZTP 自定义资源

流程

1. 创建用于向站点 Baseboard Management Controller (BMC) 进行身份验证的 secret。确保 secret 名称与 SiteConfig 中使用的名称匹配。在本例中，secret 名称为 test-sno-bmh-secret:

   apiVersion: v1
   kind: Secret
   metadata:
     name: test-sno-bmh-secret
     namespace: test-sno
   data:
     password: dGVtcA==
     username: cm9vdA==
   type: Opaque

   Copy to Clipboard Toggle word wrap

2. 为站点创建 pull secret。pull secret 必须包含安装 OpenShift 和所有附加组件 Operator 所需的所有凭证。在本例中，secret 名称是 assisted-deployment-pull-secret：

   apiVersion: v1
   kind: Secret
   metadata:
     name: assisted-deployment-pull-secret
     namespace: test-sno
   type: kubernetes.io/dockerconfigjson
   data:
     .dockerconfigjson: <Your pull secret base64 encoded>

   Copy to Clipboard Toggle word wrap

流程

1. 创建一个或多个 SiteConfig 自定义资源（site-config.yaml 文件），其中包含集群的站点计划数据。例如：

   apiVersion: ran.openshift.io/v1
   kind: SiteConfig
   metadata:
     name: "test-sno"
     namespace: "test-sno"
   spec:
     baseDomain: "clus2.t5g.lab.eng.bos.redhat.com"
     pullSecretRef:
       name: "assisted-deployment-pull-secret"
     clusterImageSetNameRef: "openshift-4.9"
     sshPublicKey: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDB3dwhI5X0ZxGBb9VK7wclcPHLc8n7WAyKjTNInFjYNP9J+Zoc/ii+l3YbGUTuqilDwZN5rVIwBux2nUyVXDfaM5kPd9kACmxWtfEWTyVRootbrNWwRfKuC2h6cOd1IlcRBM1q6IzJ4d7+JVoltAxsabqLoCbK3svxaZoKAaK7jdGG030yvJzZaNM4PiTy39VQXXkCiMDmicxEBwZx1UsA8yWQsiOQ5brod9KQRXWAAST779gbvtgXR2L+MnVNROEHf1nEjZJwjwaHxoDQYHYKERxKRHlWFtmy5dNT6BbvOpJ2e5osDFPMEd41d2mUJTfxXiC1nvyjk9Irf8YJYnqJgBIxi0IxEllUKH7mTdKykHiPrDH5D2pRlp+Donl4n+sw6qoDc/3571O93+RQ6kUSAgAsvWiXrEfB/7kGgAa/BD5FeipkFrbSEpKPVu+gue1AQeJcz9BuLqdyPUQj2VUySkSg0FuGbG7fxkKeF1h3Sga7nuDOzRxck4I/8Z7FxMF/e8DmaBpgHAUIfxXnRqAImY9TyAZUEMT5ZPSvBRZNNmLbfex1n3NLcov/GEpQOqEYcjG5y57gJ60/av4oqjcVmgtaSOOAS0kZ3y9YDhjsaOcpmRYYijJn8URAH7NrW8EZsvAoF6GUt6xHq5T258c6xSYUm5L0iKvBqrOW9EjbLw== root@cnfdc2.clus2.t5g.lab.eng.bos.redhat.com"
     clusters:
     - clusterName: "test-sno"
       clusterType: "sno"
       clusterProfile: "du"
       clusterLabels:
         group-du-sno: ""
         common: true
         sites : "test-sno"
       clusterNetwork:
         - cidr: 1001:db9::/48
           hostPrefix: 64
       machineNetwork:
         - cidr: 2620:52:0:10e7::/64
       serviceNetwork:
         - 1001:db7::/112
       additionalNTPSources:
         - 2620:52:0:1310::1f6
       nodes:
         - hostName: "test-sno.clus2.t5g.lab.eng.bos.redhat.com"
           bmcAddress: "idrac-virtualmedia+https://[2620:52::10e7:f602:70ff:fee4:f4e2]/redfish/v1/Systems/System.Embedded.1"
           bmcCredentialsName:
             name: "test-sno-bmh-secret"
           bmcDisableCertificateVerification: true 

   1

   
           bootMACAddress: "0C:42:A1:8A:74:EC"
           bootMode: "UEFI"
           rootDeviceHints:
             hctl: '0:1:0'
           cpuset: "0-1,52-53"
           nodeNetwork:
             interfaces:
               - name: eno1
                 macAddress: "0C:42:A1:8A:74:EC"
             config:
               interfaces:
                 - name: eno1
                   type: ethernet
                   state: up
                   macAddress: "0C:42:A1:8A:74:EC"
                   ipv4:
                     enabled: false
                   ipv6:
                     enabled: true
                     address:
                     - ip: 2620:52::10e7:e42:a1ff:fe8a:900
                       prefix-length: 64
               dns-resolver:
                 config:
                   search:
                   - clus2.t5g.lab.eng.bos.redhat.com
                   server:
                   - 2620:52:0:1310::1f6
               routes:
                 config:
                 - destination: ::/0
                   next-hop-interface: eno1
                   next-hop-address: 2620:52:0:10e7::fc
                   table-id: 254

   Copy to Clipboard Toggle word wrap

   1

   如果您使用 UEFI SecureBoot，请添加这一行以防止因为无效或本地证书而失败。

2. 保存文件并将其推送到可从 hub 集群访问的 ZTP Git 存储库，并定义为 ArgoCD 应用程序的源存储库。

流程

1. 创建 PolicyGenTemplates，并将其保存到可从 hub 集群访问 ZTP Git 存储库，并定义为 ArgoCD 应用程序的源存储库。

2. ArgoCD 检测到应用没有同步。同步后，ArgoCD 会将新的 PolicyGenTemplate 应用到 hub 集群，并启动相关的资源 hook。这些 hook 负责生成应用到 spoke 集群的策略封装配置 CR 并执行以下操作：

   1. 根据基本分布式单元 (DU) 配置集和所需的自定义，创建 Red Hat Advanced Cluster Management (RHACM) 策略。
   2. 将生成的策略应用到 hub 集群。

流程

1. 使用以下命令监控集群安装进度：

   $ export CLUSTER=<cluster_name>

   Copy to Clipboard Toggle word wrap

   $ oc get agentclusterinstall -n $CLUSTER $CLUSTER -o jsonpath='{.status.conditions[?(@.type=="Completed")]}' | jq

   Copy to Clipboard Toggle word wrap

   $ curl -sk $(oc get agentclusterinstall -n $CLUSTER $CLUSTER -o jsonpath='{.status.debugInfo.eventsURL}') | jq '.[-2,-1]'

   Copy to Clipboard Toggle word wrap
2. 使用 Red Hat Advanced Cluster Management (RHACM) 仪表板来监控策略协调的进度。