Add registry storage configuration modules#14390
Add registry storage configuration modules#14390bmcelvee merged 1 commit intoopenshift:enterprise-4.1from
Conversation
|
The preview will be availble shortly at: |
There was a problem hiding this comment.
image-registry-private-configuration shouldn't be modified by users. After today's scrum I'd say there are 2 options:
- the cloud credentials are sufficient to create an S3 bucket, in this case the operator will do the storage configuration automatically;
- the operator is not capable of creating S3 buckets, in this case the administrator should create an S3 bucket, setup a Bucket Lifecycle Policy to abort incomplete multipart uploads that are one day old, and fill the storage configuration in configs.imageregistry.operator.openshift.io/cluster.
39145ae to
35146c6
Compare
35146c6 to
0495a79
Compare
There was a problem hiding this comment.
When UPI on AWS cluster is ready, s3 storage is automatically configured.
There was a problem hiding this comment.
@wzheng1 this is only true if the cluster admin/installer provides an AWS account that has permission to create S3 buckets.
There was a problem hiding this comment.
We should reference AWS docs on how to create an S3 bucket.
There was a problem hiding this comment.
Whether this doc works? https://docs.aws.amazon.com/AmazonS3/latest/gsg/GetStartedWithS3.html
There was a problem hiding this comment.
The AWS UPI doc says that you need the S3 permission to create a bucket, and the steps as written have you create a bucket to store your bootstrap ignition config.
There was a problem hiding this comment.
If you delete all s3 part on AWS with UPI, it will be generated automatically, admin doesn't need to input manually.
There was a problem hiding this comment.
Admin may want to create a cluster with credentials that doesn't allow to create buckets. In this case the administrator should configure it manually.
|
Another thing I think need to add is to pay attention whether the cluster has default storage class, since if it has, any pvc will be attached to it automatically, this doesn't adapt to image-registry since inconsistent accessMode. So user has to specify in pv which pvc should be claimed like below: |
0495a79 to
5e2a627
Compare
There was a problem hiding this comment.
@wzheng1 this is only true if the cluster admin/installer provides an AWS account that has permission to create S3 buckets.
There was a problem hiding this comment.
We should reference AWS docs on how to create an S3 bucket.
There was a problem hiding this comment.
Add bucket: <bucket-name>
There was a problem hiding this comment.
oc get pods -n openshift-image-registry
There was a problem hiding this comment.
oc get clusteroperator image-registry
There was a problem hiding this comment.
oc get pod -n openshift-image-registry
5e2a627 to
fffc92e
Compare
|
@openshift/team-documentation - please peer review (I think the suggested PVs for bare metal and vSphere will need to change once we have storage updates, but that can come in a follow-up PR.) |
There was a problem hiding this comment.
The AWS UPI doc says that you need the S3 permission to create a bucket, and the steps as written have you create a bucket to store your bootstrap ignition config.
There was a problem hiding this comment.
@huffmanca, when you're back in the office, we need to talk about the install-level prereqs we need to state for storage.
There was a problem hiding this comment.
I'd move "such as Azure File or NFS." info to the prereq.
Can you show the commands that you'd run for these two steps?
There was a problem hiding this comment.
What am I looking for here?
There was a problem hiding this comment.
$oc edit configs.imageregistry.operator.openshift.io
storage:
pvc:
claim:
If you leave the claim name to be blank, a pvc named image-registry-storage will be created automatically.
There was a problem hiding this comment.
Can you change the registry storage after installation? Do they need to go here, or just in the installation assemblies?
There was a problem hiding this comment.
Yes, you can, as long as you are admin : ) vsphere and baremetal UPI installation should configure storage after installation, as original installation will prompt storage not configured error.
There was a problem hiding this comment.
Would you use Azure or NFS with vSphere? I'd still move this info to the prereqs and show the commands to do these first two steps.
There was a problem hiding this comment.
This makes it look like your storage is still not configured. Is that right? If you wait and run the command again, should you see a different message?
fffc92e to
4d5cf25
Compare
4d5cf25 to
04ce691
Compare
There was a problem hiding this comment.
@adambkaplan @dmage - would either of you be able to provide the procedures for these two steps or point me to where I can find them? Thanks!
. To configure your registry to use storage, change the spec.storage.pvc in
the configs.imageregistry/cluster resource.
. Provide a suitable persistent volume.
adambkaplan
left a comment
There was a problem hiding this comment.
@bmcelvee the steps here don't really make sense to me. Configuring PVC storage is much simpler:
- Cluster admin must set up Persistent Volume(s) that support
ReadWriteManyaccess modes (ex: NFS) - prerequisite and out of scope. - Make sure the registry is not up - check status of the cluster operator or operator config:
$ oc get clusteroperator image-registryor$ oc get config.imageregistry.operator.openshift.io/cluster -o yaml - Edit the cluster operator config to set the storage to use PVC
- Wait for the registry to come up (watch the clusteroperator - should report Available=true)
There was a problem hiding this comment.
| * PV with `ReadWriteMany` access mode, such as Azure File or NFS. | |
| * A provisioned Persistent Volume with `ReadWriteMany` access mode, such as Azure File or NFS. |
You may also want out-link to upstream docs on PVs: https://v1-13.docs.kubernetes.io/docs/concepts/storage/persistent-volumes/
There was a problem hiding this comment.
@bmcelvee I'd consider this out of scope for this portion of the doc - the assumed prerequisite is that the cluster admin provisioned storage that can be satisfied via a PVC.
04ce691 to
749b501
Compare
|
I think we've reached a point where this content can be merged. If it requires additional content or changes, those items can be addressed in a follow-up PR. |
https://jira.coreos.com/browse/DEVEXP-278
https://jira.coreos.com/browse/DEVEXP-268
https://jira.coreos.com/browse/DEVEXP-267
https://jira.coreos.com/browse/OSDOCS-243