enable iscsi on cluster

This commit is contained in:
2025-07-31 11:53:16 -05:00
parent 1742dff512
commit edb019c38e
8 changed files with 21 additions and 128 deletions

View File

@@ -1,53 +0,0 @@
---
# https://github.com/cert-manager/cert-manager/blob/master/deploy/charts/cert-manager/values.yaml
cert-manager:
enabled: true
installCRDs: true
dns01RecursiveNameservers: 1.1.1.1:53
dns01RecursiveNameserversOnly: true
livenessProbe:
enabled: true
prometheus:
enabled: true
servicemonitor:
enabled: true
ca:
enabled: false
tlsCrt: |-
-----BEGIN CERTIFICATE-----
<actual certificate>
-----END CERTIFICATE-----
tlsKey: |-
-----BEGIN PRIVATE KEY-----
<actual key>
-----END PRIVATE KEY-----
le:
prod:
enabled: true
server: https://acme-v02.api.letsencrypt.org/directory
staging:
enabled: true
server: https://acme-staging-v02.api.letsencrypt.org/directory
apiCert:
enabled: true
routerCert:
enabled: true
preferredChain: ""
email: ryan.blundon@protonmail.com
solvers:
- type: dns
dnsConfig:
cloudflare:
apiTokenSecretRef:
name: cloudflare-api-token
key: api-token
email: ryan.blundon@protonmail.com
cnameStrategy: Follow
dnsZones:
- mk-labs.cloud
cluster_name: hub
base_domain: int.mk-labs.cloud

View File

@@ -1,38 +0,0 @@
---
apiVersion: k8s.cni.cncf.io/v1
kind: NetworkAttachmentDefinition
metadata:
annotations:
description: Native VLAN connection for iSCSI
name: vlan121-localnet
namespace: default
spec:
config: |-
{
"name": "iscsi-net",
"cniVersion": "0.3.1",
"type": "vlan",
"master": "enp1s0f0",
"mtu": 1500,
"vlanId": 121,
"linkInContainer": false,
"ipam": {
"type": "static",
"addresses": [
{
"address": "10.10.121.10/24"
}
]
}
}
# {
# "cniVersion": "0.3.1",
# "name": "bridge-net",
# "type": "bridge",
# "isGateway": true,
# "vlan": 2,
# "ipam": {
# "type": "dhcp"
# }
# }

View File

@@ -1,9 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
commonAnnotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
resources:
- ../../base
- ocp-storage-vlan.yaml

View File

@@ -1,28 +0,0 @@
---
apiVersion: nmstate.io/v1
kind: NodeNetworkConfigurationPolicy
metadata:
name: storage-network-ocp-hub
spec:
nodeSelector:
kubernetes.io/hostname: ocp-hub
desiredState:
interfaces:
- name: enp1s0f0.121
state: up
type: vlan
vlan:
base-iface: enp1s0f0
id: 121
- bridge:
port:
- name: enp1s0f0.121
ipv4:
address:
- ip: 10.10.121.10
prefix-length: 24
enabled: true
name: storage-network
state: up
type: linux-bridge
description: Linux bridge with enp1s0 as a port on VLAN 121

View File

@@ -2,6 +2,8 @@
apiVersion: machineconfiguration.openshift.io/v1 apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig kind: MachineConfig
metadata: metadata:
annotations:
argocd.argoproj.io/sync-wave: "11"
labels: labels:
machineconfiguration.openshift.io/role: master machineconfiguration.openshift.io/role: master
name: 99-master-custom-enable-iscsid name: 99-master-custom-enable-iscsid

View File

@@ -7,3 +7,4 @@ commonAnnotations:
resources: resources:
- ../../base - ../../base
- ocp-storage-vlan.yaml - ocp-storage-vlan.yaml
- enable-master-iscsi.yaml # Single Node Only

View File

@@ -0,0 +1,17 @@
---
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
metadata:
annotations:
argocd.argoproj.io/sync-wave: "11"
labels:
machineconfiguration.openshift.io/role: worker
name: 99-worker-custom-enable-iscsid
spec:
config:
ignition:
version: 3.1.0
systemd:
units:
- enabled: true
name: iscsid.service

View File

@@ -7,3 +7,4 @@ commonAnnotations:
resources: resources:
- ../../base - ../../base
- ocp-storage-vlan.yaml - ocp-storage-vlan.yaml
- enable-worker-iscsi.yaml