OCP 4.10.23 설치(openshift) - 1. private registry, timezone, chrony

 

Openshift란?

Openshift는 Red Hat에서 하이브리드 멀티 클라우드를 관리하기 위한 엔터프라이즈 쿠버네티스 컨테이너 플랫폼 입니다.

 

https://www.redhat.com/ko/technologies/cloud-computing/openshift

레드햇 오픈시프트로 쿠버네티스 컨테이너 오케스트레이션 실행

 

 

 

구성도

 

 

 

 

Cluster 정보

Role	version	Spec.	Network
IP Address
bootstrap	rhcos 4.10.23	4 vCPU / 16GB MEM / 50GB	172.16.2.190
bastion	rhel 8.6	4 vCPU / 16GB MEM / 100GB	172.16.2.191
registry	rhel 8.6	4 vCPU / 16GB MEM / 200GB	172.16.2.192 192.168.1.192(외부)
master1	rhcos 4.10.23	4 vCPU / 16GB MEM / 50GB	172.16.2.193
master2	rhcos 4.10.23	4 vCPU / 16GB MEM / 50GB	172.16.2.194
master3	rhcos 4.10.23	4 vCPU / 16GB MEM / 50GB	172.16.2.195
worker1	rhcos 4.10.23	4 vCPU / 16GB MEM / 50GB	172.16.2.196
worker2	rhcos 4.10.23	4 vCPU / 16GB MEM / 50GB	172.16.2.197
infra1	rhcos 4.10.23	4 vCPU / 16GB MEM / 50GB	172.16.2.198
infra2	rhcos 4.10.23	4 vCPU / 16GB MEM / 50GB	172.16.2.199
Total		24 vCPU / 96GB MEM / 550GB

 

 

Private Registry 구성 - Registry server

 

• Dedicated 이기 때문에 내부 repo 생성
• /var/repo 디렉토리 생성 후 reposync 사용하여 다운로드
• /var/www/html/ 해당 경로에 /var/repo 링크 생성
• Port 58080 open

 

[registry]

아래 repo를 /var/repo에 저장

subscription-manager repos --enable=rhel-8-for-x86_64-baseos-rpms
subscription-manager repos --enable=rhel-8-for-x86_64-appstream-rpms

 

repo 등록

cat <<EOF > /etc/yum.repos.d/registry.repo
[registry-rhel-8-for-x86_64-baseos-rpms]
name=registry-rhel-8-for-x86_64-baseos-rpms
baseurl=http://172.16.2.192:58080/repo/rhel-8-for-x86_64-baseos-rpms/
gpgcheck=0
enabled=1
priority=1

[registry-rhel-8-for-x86_64-appstream-rpms]
name=registry-rhel-8-for-x86_64-appstream-rpms
baseurl=http://172.16.2.192:58080/repo/rhel-8-for-x86_64-appstream-rpms/
gpgcheck=0
enabled=1
priority=1
EOF

 

http install 및 활성화

yum -y update

yum -y install yum-utils createrepo bash-completion net-tools wget nfs-utils httpd podman 

cat /etc/httpd/conf/httpd.conf | grep 8080
Listen 58080

systemctl enable httpd --now

 

repo 디렉토리 링크 걸기

cd /var/www/html/
ln -s /var/repo repo

 

체크

echo 'HELLO' >> /var/www/html/repo/check.html

 

 

 

 

[bastion]

 

등록

cat <<EOF > /etc/yum.repos.d/registry.repo
[registry-rhel-8-for-x86_64-baseos-rpms]
name=registry-rhel-8-for-x86_64-baseos-rpms
baseurl=http://172.16.2.192:58080/repo/rhel-8-for-x86_64-baseos-rpms/
gpgcheck=0
enabled=1
priority=1

[registry-rhel-8-for-x86_64-appstream-rpms]
name=registry-rhel-8-for-x86_64-appstream-rpms
baseurl=http://172.16.2.192:58080/repo/rhel-8-for-x86_64-appstream-rpms/
gpgcheck=0
enabled=1
priority=1
EOF

 

 

확인

 

패키지 install

yum -y update

yum -y install yum-utils createrepo bash-completion net-tools wget nfs-utils httpd podman jq httpd-tools sysstat chrony

 

 

 

Timezone 설정

Redhat에서 권장하는 UTC로 설정(registry, bastion 모두)

 

[registry, bastion]

[root@registry repo]# timedatectl set-timezone UTC
[root@registry repo]# timedatectl

 

 

Chrony

• Registry는 0.kr.pool.ntp.org를 바라봄
• Bastion은 Registry를 바라봄
• Ocp 노드들은 bastion을 바라봄

 

[registry]

vi /etc/chrony.conf
server 0.kr.pool.ntp.org iburst
server 3.asia.pool.ntp.org iburst
server 0.asia.pool.ntp.org iburst
allow 172.16.2.0/24

 

 

 

 [bastion]

[bastion]
vi /etc/chrony.conf
server 172.16.2.192 iburst
allow 172.16.2.0/24