Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Install only the 1.12.x (currently 1.12.6) version of Docker (the only version that works with Kubernetes in Rancher 1.6)
curl https://releases.rancher.com/install-docker/1.12.sh | sh

Install rancher (use 8880 instead of 8080)
sudo docker run -d --restart=unless-stopped -p 8880:8080 rancher/server

In Rancher UI (http://127.0.0.1:8880) , Set IP name of master node in config, create a new onap environment as Kubernetes (will setup kube containers), stop default environment

register your host(s) - run following on each host (get from "add host" menu) - install docker 1.12 if not already on the host

curl https://releases.rancher.com/install-docker/1.12.sh | sh
docker run --rm --privileged -v /var/run/docker.sock:/var/run/docker.sock -v /var/lib/rancher:/var/lib/rancher rancher/agent:v1.2.2 http://192.168.163.131:8880/v1/scripts/BBD465D9B24E94F5FBFD:1483142400000:IDaNFrug38QsjZcu6rXh8TwqA4


install kubectl
curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl
chmod +x ./kubectl
sudo mv ./kubectl /usr/local/bin/kubectl

paste kubectl config from rancher

mkdir ~/.kube

vi ~/.kube/config

clone oom (scp your onap_rsa private key first)

git clone ssh://michaelobrien@gerrit.onap.org:29418/oom

fix nexus3 security temporarily for

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyOOM-3

vi oom/kubernetes/oneclick/createAll.bash

create_namespace() {
  kubectl create namespace $1-$2
+  kubectl --namespace $1-$2 create secret docker-registry regsecret --docker-server=nexus3.onap.org:10001 --docker-username=docker --docker-password=docker --docker-email=email@email.com
+  kubectl --namespace $1-$2 patch serviceaccount default -p '{"imagePullSecrets": [{"name": "regsecret"}]}'
}


Wait until all the hosts show green in rancher, then run the script that wrapps all the kubectl commands

run the one time config pod (with mounts for all the other pods) - the pod will stop normally

cd oom/kubernetes/configroot@obriensystemsucont0:~/onap/oom/kubernetes/config# kubectl create -f

Before running pod-config-init.yaml

pod "config-init" created

Fix DNS resolution before running any more pods ( add service.ns.svc.cluster.local

root@obriensystemskub0:~/oom/kubernetes/oneclick# cat /etc/resolv.conf

- make sure your config for openstack is setup correctly - so you can deploy the vFirewall VMs for example

vi oom/kubernetes/config/docker/init/src/config/mso/mso/mso-docker.json

replace

"identity_services": [{
"identity_url": "http://OPENSTACK_KEYSTONE_IP_HERE:5000/v2.0",

~/onap/oom/kubernetes/config# kubectl create -f pod-config-init.yaml

pod "config-init" created

Fix DNS resolution before running any more pods ( add service.ns.svc.cluster.local or svc.cluster.local temporarily)

~/oom/kubernetes/oneclick# cat /etc/resolv.conf

nameserver 192.nameserver 192.168.241.2

search localdomain service.ns.svc.cluster.local

cd ../oneclick
vi createAll.bash 

./createAll.bash -n onap

Wait until the containers are all up - you should see...

...

create_namespace() {
  kubectl create namespace $1-$2
+  kubectl --namespace $1-$2-$2 create secret docker-registry regsecret --docker-server=nexus3.onap.org:10001 --docker-username=docker --docker-password=docker --docker-email=email@email.com
+  kubectl --namespace $1-$2 patch createserviceaccount secretdefault docker-registry regsecret --docker-server=nexus3.onap.org:10001 --docker-username=docker --docker-password=docker --docker-email=email@email.com
+  kubectl --namespace $1-$2 patch serviceaccount default -p '{"imagePullSecrets": [{"name": "regsecret"}]}'
}

...

-p '{"imagePullSecrets": [{"name": "regsecret"}]}'
}


Image Added

Fix MSO mso-docker.json

Image Added

Before running pod-config-init.yaml - make sure your config for openstack is setup correctly - so you can deploy the vFirewall VMs for example

vi oom/kubernetes/config/docker/init/src/config/mso/mso/mso-docker.json

replace

"identity_services": [{
"identity_url": "http://OPENSTACK_KEYSTONE_IP_HERE:5000/v2.0",

Monitor Container Deployment

...

Trying to get an authorization file into the robot pod

root@obriensystemskub0:~/oom/kubernetes/oneclick# kubectl cp authorization onap-robot/robot-44708506-nhm0n:/home/ubuntu

above works?
root@obriensystemskub0:~/oom/kubernetes/oneclick# kubectl cp authorization onap-robot/robot-44708506-nhm0n:/etc/lighttpd/authorization
tar: authorization: Cannot open: File exists
tar: Exiting with failure status due to previous errors


Running ONAP Portal UI Operations

...