Skip to content

Latest commit

 

History

History
83 lines (66 loc) · 2.73 KB

openshift-gcp-nested-virt.md

File metadata and controls

83 lines (66 loc) · 2.73 KB
Raw

Using OpenShift 4.2 in Google Compute Platform with nested virt

At the time of this writing, OpenShift 4.2 isn't released, but the current development builds support Google Compute Platform.

First, stand up a 4.2 devel cluster in GCP.

Find the RHCOS image created by the installer (I browsed in the console, but you can also use the gcloud CLI). The image name will start with a prefix of your cluster name.

Follow the nested virt instructions to create a new "blessed" image with the license:

gcloud compute images create walters-rhcos-nested-virt \
                                   --source-image walter-f57qc-rhcos-image --source-image-project openshift-gce-devel \
                                   --licenses "https://www.googleapis.com/compute/v1/projects/vm-options/global/licenses/enable-vmx"

One of the powerful advantages of OpenShift 4 is the machine API - you can dynamically reconfigure the workers by editing a custom resource.

There are two approaches; you can edit the existing machinesets or create a new one.

Either way you choose, change the disk image:

          disks:
          - ...
            image: walters-rhcos-nested-virt

Install the KVM device plugin from KubeVirt.

Up to this point, you needed to be kubeadmin. From this point on though, best practice is to switch to an "unprivileged" user.

(In fact the steps until this point could be run by a separate team that manages the cluster; other developers could just use it as unprivileged users)

Personally, I added a httpasswd identity provider and logged in with a password.

I also did oc new-project coreos-virt etc.

Schedule a cosa pod:

apiVersion: v1
kind: Pod
metadata:
  labels:
    run: cosa
  name: cosa
spec:
  containers:
  - args:
    - shell
    - sleep
    - infinity
    image: quay.io/coreos-assembler/coreos-assembler:latest
    name: cosa
    resources:
      requests:
        # Today COSA hardcodes 2048 for launching VMs.  We could
        # probably shrink that in the future.
        memory: "3Gi"
        devices.kubevirt.io/kvm: "1"
      limits:
        memory: "3Gi"
        devices.kubevirt.io/kvm: "1"
    volumeMounts:
    - mountPath: /srv
      name: workdir
  volumes:
  - name: workdir
    emptyDir: {}
  restartPolicy: Never

Then oc rsh pods/cosa and you should be able to ls -al /dev/kvm - and cosa build etc!