openshift

2016-06-23

Ansible安装openshift说明

官方安装方法

下面是官方安装方法：
准备基础环境：
https://docs.openshift.org/latest/install_config/install/prerequisites.html

安装openshift:
https://docs.openshift.org/latest/install_config/install/advanced_install.html

主机列表

192.168.31.133(centos7.2) master.example.com openshift-master 主节点
192.168.31.134(centos7.2) node1.example.com  openshift-node1 从节点
192.168.31.132(centos7.2) node2.example.com  openshift-node2 从节点
192.168.31.135(centos7.2) Dns Dns服务器 #DNS安装网上自行找教程,如果不安装DNS,就需要在每台机器绑定Host

设置host

#master和node都需要执行
hostname -f的结果要跟hostname一样
hostnamectl --transient、hostnamectl --static、 hostnamectl --pretty三个命令得出的结果要一致，如果不一致，则要自己设置下
hostnamectl set-hostname master.example.com
如 hostnamectl --pretty set-hostname master.example.com
hostnamectl --static set-hostname master.example.com
hostnamectl --transient set-hostname master.example.com

安装需要的依赖包

#master和node都需要执行
yum install -y wget git net-tools bind-utils iptables-services bridge-utils bash-completion
yum install -y rubygem-thor rubygem-parseconfig util-linux pyOpenSSL libffi-devel python-cryptography
yum update –y

安装及设置EPEL

1
2
3

#master和node都需要执行
yum -y install https://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-7.noarch.rpm
sed -i -e "s/^enabled=1/enabled=0/" /etc/yum.repos.d/epel.repo

安装ansible和pyOpenSSL

#master执行
wget https://bootstrap.pypa.io/get-pip.py --no-check-certificate
python get-pip.py
pip install ansible==1.9.4    #注意ansible安装版本范围在大于1.8小于2.0版本,高于2.0版本会安装不成功

yum -y --enablerepo=epel install pyOpenSSL

下载openshift-ansible

1
2
3

#master执行
cd ~
git clone https://github.com/openshift/openshift-ansible

安装及设置docker

#master和node都需要执行
yum install docker -y
修改docker配置文件/etc/sysconfig/docker
OPTIONS='--selinux-enabled --insecure-registry 172.30.0.0/16'
重启docker
systemctl restart docker

设置无密钥访问

#master执行
ssh-keygen
ssh-copy-id -i ~/.ssh/id_rsa.pub master.example.com
ssh-copy-id -i ~/.ssh/id_rsa.pub node1.example.com
ssh-copy-id -i ~/.ssh/id_rsa.pub node2.example.com

修改ansible配置文件

#master执行
# Create an OSEv3 group that contains the masters and nodes groups
[OSEv3:children]
masters
nodes

# Set variables common for all OSEv3 hosts
[OSEv3:vars]
# SSH user, this user should allow ssh based auth without requiring a password
ansible_ssh_user=root

# If ansible_ssh_user is not root, ansible_sudo must be set to true
#ansible_sudo=true

deployment_type=origin

# uncomment the following to enable htpasswd authentication; defaults to DenyAllPasswordIdentityProvider
#openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider', 'filename': '/etc/origin/master/htpasswd'}]

# host group for masters
[masters]
master.example.com

# host group for nodes, includes region info
[nodes]
master.example.com openshift_node_labels="{'region': 'infra', 'zone': 'default'}"
node1.example.com openshift_node_labels="{'region': 'primary', 'zone': 'east'}"
node2.example.com openshift_node_labels="{'region': 'primary', 'zone': 'west'}"

安装openshift

1 2	#master执行 ansible-playbook ~/openshift-ansible/playbooks/byo/config.yml

删除openshift

1 2	#master执行 ansible-playbook ~/openshift-ansible/playbooks/adoc/uninstall.yml

测试安装是否成功

#master执行
# oc get nodes

NAME                      LABELS                                                                     STATUS
master.example.com        kubernetes.io/hostname=master.example.com,region=infra,zone=default        Ready,SchedulingDisabled
node1.example.com         kubernetes.io/hostname=node1.example.com,region=primary,zone=east          Ready
node2.example.com         kubernetes.io/hostname=node2.example.com,region=primary,zone=west          Ready