Installing InfoScale on Kubernetes
All information about the worker nodes must be added to the
cr.yaml file. All worker nodes become part of InfoScale cluster after cr.yaml is applied. After you download, unzip, and untar YAML_8.0.300.tar.gz, all files required for installation are available.
Note: You must download images required for installation from the Veritas Download Center and push those to the Custom registry.
Configure a new user - infoscale-admin, associated with a Role-based Access Control ( RBAC) clusterrole defined in
infoscale-admin-role.yaml, to deploy InfoScale and its dependent components. infoscale-admin as a user when configured has clusterwide access to only those resources needed to deploy InfoScale and its dependent components such as NFD/Cert Manager in the desired namespaces.
To provide a secure and isolated environment for InfoScale deployment and associated resources, the namespace associated with these resources must be protected from access of all other users (except super user of the cluster), with appropriate RBAC implemented.
Run the following commands on the master node to create a new user -infoscale-admin and assign a clusterrole to infoscale-admin. You must be logged in as a super user.
-
`kubectl config use-context kubernetes-admin@kubernetes```You have switched the context to
kubernetes-admin@kubernetes.
1.
kubectl apply -f /YAML/Kubernetes/infoscale-admin-role.yamlHere,infoscale-admin-role.yamlis downloaded as a part ofYAML_8.0.300.tar.gz.
1.
kubectl create clusterrolebinding infoscale-admin-clusterrolebinding --clusterrole=infoscale-admin-role --user=infoscale-adminThis step binds the cluster roleinfoscale-admin-role.yamlto a new user -infoscale-admin.
1.
openssl genrsa -out infoscale-admin.key 2048You have generated a key forinfoscale-adminby using 2048 bits.openssl req -new -key infoscale-admin.key -out infoscale-admin.csr -subj "/CN=infoscale-admin"You have created a certificate signing request forinfoscale-admin.openssl x509 -req -in infoscale-admin.csr -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -out infoscale-admin.crt -days <Number of days>The certificate is signed by Kubernetes, a crt file is created, and is valid for the number of days you specified in the command.
1.
mkdir /certs && mv infoscale-admin.crt infoscale-admin.key /certs````infoscale-admin.crtandinfoscale-admin.keymoved to/certsfolder for thelico.yamlto reference.
1.
cd /certs````kubectl config set-credentials infoscale-admin --client-certificate=/certs/infoscale-admin.crt --client-key=/certs/infoscale-admin.key````kubectl config set-context infoscale-admin.context --cluster=kubernetes --user=infoscale-admin````kubectl config use-context infoscale-admin.contextCredentials are set forinfoscale-adminand its context created.
1.
kubectl config current-context infoscale-admin.contextEnsures that the current context isinfoscale-admin.context.
You must perform all installation-related activities by logging in as infoscale-admin. A cluster super-user can also install InfoScale.
-
Edit
/YAML/Kubernetes/iso.yamlas under -
Replace
image: 192.168.1.21/veritas/infoscale-sds-operator:8.0.300- <rhel8/ol8>withimage: <IP address of custom registry>/infoscale-sds-operator:8.0.300-<rhel8/ol8>.
-
Edit
/YAML/Kubernetes/lico.yamlas under -
Replace
image: 192.168.1.21/veritas/infoscale-licensing-operator:8.0.300-ol8withimage: <IP address of custom registry>/infoscale-licensing-operator:8.0.300-<rhel8/ol8>.
-
Edit
/YAML/DR/Kubernetes/dro_deployment.yamlas under -
Replace
image: 192.168.1.21/veritas/infoscale-dr-manager:8.0.300-rhel8withimage: <IP address of custom registry>/veritas/infoscale-dr-manager:8.0.300-<rhel8/ol8>.
-
Optionally, if you want to change the default kubelet path, edit
/YAML/Kubernetes/iso.yamlas under.```txt env:
-
name: KUBELET_PATHvalue: \<enter the new path\>
The default path is``/var/lib/kubelet``.
> **Note:** Do not change the kubelet path after clusters are configured.
1. Run the following command on the master node to install Veritas InfoScale.``kubectl create -f /YAML/Kubernetes/iso.yaml``1. Run the following command on the master node to verify whether the installation is successful``kubectl get pods -n infoscale-vtas|grep infoscale-sds-operator``An output similar to the following indicates a successful installation.``READY 1/1``indicates that Storage cluster resources can be created.```txt
NAME READY STATUS RESTARTS AGE
infoscale-sds-operator-6dc9bc8856-lh72f 1/1 Running 0 2d18h
```