如何在自己的MacBook上体验OpenShift 4.1

在4版本后，CDK和minishift基本不跟新了，取代的是一个CodeReady Containter,定位和CDK以及minishift一样，简称CRC,是在本地环境中运行一个开发环境，目前仍然是在Alpha版本阶段，没有正式的GA,在4.2版本会GA.

CRC目前只支持linux和mac环境，windows环境的支持正在开发中。

1.下载

需要下载的包括如下：

CRC:

https://github.com/code-ready/crc/releases

在v0.87.0-alpha-4.1.0的assets里面下载crc-0.87.0-darwin-amd64.tar.xz

Images:

http://cdk-builds.usersys.redhat.com/builds/crc/4.1.0/virtualbox/

这个网站需要登录redhat内网

OC客户端

http://cloud.redhat.com

下载完成后放到同一个目录下

2.设置运行

./crc setup

这一步需要上网下载oc.tar.gz, 因为速度慢我想设置一个本地的mirror.openshift.com,结果证书验证不过。第二天网速正常就过了。输出如下

然后启动

ericdeMacBook-Pro:openshift ericnie$ ./crc start -d virtualbox -b crc_vbox_4.1.0.tar.xz

crc - Local OpenShift .x cluster

INFO Checking if oc binary is cached

INFO Checking if VirtualBox is Installed

INFO Checking file permissions for resolver

INFO Extracting the Bundle tarball ...

INFO Creating VM ...

INFO Bridge IP on the host: 192.168.130.1

INFO Restarting the network

INFO Check internal and public dns query ...

WARN Failed Public dns query: ssh command error:

command : host -R  quay.io

err     : exit status

output  : Host quay.io not found: (NXDOMAIN)

 :

INFO Starting OpenShift cluster ... [waiting 3m]

INFO To access the cluster using 'oc', run 'oc login -u kubeadmin -p btGHD-oHFCZ-xTZUv-bTRsv https://api.crc.testing:6443'

INFO Access the OpenShift web-console here: https://console-openshift-console.apps-crc.testing

INFO Login to the console with user: kubeadmin, password: btGHD-oHFCZ-xTZUv-bTRsv

WARN Make sure add 'nameserver 192.168.130.100' as first entry to '/etc/resolv.conf' file

INFO Running

看一下需要的配置

ericdeMacBook-Pro:openshift ericnie$ crc config view

crc - Local OpenShift .x cluster

- bundle                             : crc_vbox_4.1.0.tar.xz

- cpus                               :

- memory                             :

- vm-driver                          : hyperkit

我的mac配置是8G,但这个虚拟机就要用8G

3.访问

ericdeMacBook-Pro:openshift ericnie$ oc login -u kubeadmin -p btGHD-oHFCZ-xTZUv-bTRsv https://api.crc.testing:6443

The server uses a certificate signed by an unknown authority.

You can bypass the certificate check, but any data you send to the server could be intercepted by others.

Use insecure connections? (y/n): y

Login successful.

You have access to the following projects and can switch between them with 'oc project <projectname>':

  * default

    kube-public

    kube-system

    openshift

    openshift-apiserver

    openshift-apiserver-operator

    openshift-authentication

    openshift-authentication-operator

    openshift-cloud-credential-operator

    openshift-cluster-machine-approver

    openshift-cluster-node-tuning-operator

    openshift-cluster-samples-operator

    openshift-cluster-storage-operator

    openshift-cluster-version

    openshift-config

    openshift-config-managed

    openshift-console

    openshift-console-operator

    openshift-controller-manager

    openshift-controller-manager-operator

    openshift-dns

    openshift-dns-operator

    openshift-etcd

    openshift-image-registry

    openshift-infra

    openshift-ingress

    openshift-ingress-operator

    openshift-kube-apiserver

    openshift-kube-apiserver-operator

    openshift-kube-controller-manager

    openshift-kube-controller-manager-operator

    openshift-kube-scheduler

    openshift-kube-scheduler-operator

    openshift-machine-api

    openshift-machine-config-operator

    openshift-marketplace

    openshift-monitoring

    openshift-multus

    openshift-network-operator

    openshift-node

    openshift-operator-lifecycle-manager

    openshift-operators

    openshift-sdn

    openshift-service-ca

    openshift-service-ca-operator

    openshift-service-catalog-apiserver-operator

    openshift-service-catalog-controller-manager-operator

Using project "default".

按照提示设置/etc/resolv.conf, 主要是添加192.168.130.100这个解析，所有的master地址：api.crc.testing 和 console域名console-openshift-console.apps-crc.testing都解析到虚拟机上。

ericdeMacBook-Pro:openshift ericnie$ cat /etc/resolv.conf

#

# macOS Notice

#

# This file is not consulted for DNS hostname resolution, address

# resolution, or the DNS query routing mechanism used by most

# processes on this system.

#

# To view the DNS configuration used by this system, use:

#   scutil --dns

#

# SEE ALSO

#   dns-sd(), scutil()

#

# This file is automatically generated.

#

nameserver 192.168.130.100

nameserver 192.168.0.102

nameserver 202.96.134.33

CSR批准，环境刚建立完成是没有批准的，需要手工批一下

ericdeMacBook-Pro:openshift ericnie$ oc get csr

NAME        AGE       REQUESTOR                        CONDITION

csr-2vnqs   17d       system:node:crc-4gdnp-master-   Pending

csr-4lpf5   17d       system:node:crc-4gdnp-master-   Pending

csr-4n67j   17d       system:node:crc-4gdnp-master-   Pending

csr-4pv76   17d       system:node:crc-4gdnp-master-   Pending

csr-5t449   17d       system:node:crc-4gdnp-master-   Pending

csr-6rpkz   17d       system:node:crc-4gdnp-master-   Pending

csr-88dx8   17d       system:node:crc-4gdnp-master-   Pending

csr-9cphd   17d       system:node:crc-4gdnp-master-   Pending

csr-c8cds   17d       system:node:crc-4gdnp-master-   Pending

csr-d249k   17d       system:node:crc-4gdnp-master-   Pending

csr-j54cg   17d       system:node:crc-4gdnp-master-   Pending

csr-jx6ls   17d       system:node:crc-4gdnp-master-   Pending

csr-l4mmk   17d       system:node:crc-4gdnp-master-   Pending

csr-l99nh   17d       system:node:crc-4gdnp-master-   Pending

csr-mm64p   17d       system:node:crc-4gdnp-master-   Pending

csr-mtjgp   17d       system:node:crc-4gdnp-master-   Pending

csr-pv82g   17d       system:node:crc-4gdnp-master-   Pending

csr-qpwc4   17d       system:node:crc-4gdnp-master-   Approved,Issued

csr-qs9nf   17d       system:node:crc-4gdnp-master-   Pending

csr-t2sb6   17d       system:node:crc-4gdnp-master-   Pending

csr-vp6pb   4m        system:node:crc-4gdnp-master-   Pending

csr-vpqpc   17d       system:node:crc-4gdnp-master-   Pending

csr-wb9r7   17d       system:node:crc-4gdnp-master-   Pending

csr-wglrj   17d       system:node:crc-4gdnp-master-   Pending

csr-x9dvz   17d       system:node:crc-4gdnp-master-   Pending

批准命令为,大家可以写一个shell脚本一次批准生效

ericdeMacBook-Pro:openshift ericnie$ oc adm certificate approve csr-j54cg csr-d249k csr-c8cds csr-9cphd csr-88dx8 csr-6rpkz

certificatesigningrequest "csr-j54cg" approved

certificatesigningrequest "csr-d249k" approved

certificatesigningrequest "csr-c8cds" approved

certificatesigningrequest "csr-9cphd" approved

certificatesigningrequest "csr-88dx8" approved

certificatesigningrequest "csr-6rpkz" approved

co是Cluster Operator? 可见machine-config, marketplace(涉及的operatorhub)和monitor(涉及集群监控)都没有在这个开发环境中。

ericdeMacBook-Pro:openshift ericnie$ oc get co

NAME                                 VERSION   AVAILABLE   PROGRESSING   DEGRADED   SINCE

authentication                       4.1.     True        False         False      18d

cloud-credential                     4.1.     True        False         False      18d

cluster-autoscaler                   4.1.     True        False         False      18d

console                              4.1.     True        False         False      18d

dns                                  4.1.     True        False         False      55m

image-registry                       4.1.     True        False         False      54m

ingress                              4.1.     True        False         False      56m

kube-apiserver                       4.1.     True        False         False      18d

kube-controller-manager              4.1.     True        False         False      18d

kube-scheduler                       4.1.     True        False         False      18d

machine-api                          4.1.     True        False         False      18d

machine-config                       4.1.     False       False         True       18d

marketplace                          4.1.     False       False         False      18d

monitoring                                     False       True          True       18d

network                              4.1.     True        False         False      18d

node-tuning                          4.1.     True        False         False      55m

openshift-apiserver                  4.1.     True        False         False      54m

openshift-controller-manager         4.1.     True        False         False      51m

openshift-samples                    4.1.     True        False         False      18d

operator-lifecycle-manager           4.1.     True        False         False      18d

operator-lifecycle-manager-catalog   4.1.     True        False         False      18d

service-ca                           4.1.     True        False         False      18d

service-catalog-apiserver            4.1.     True        False         False      18d

service-catalog-controller-manager   4.1.     True        False         False      18d

storage                              4.1.     True        False         False      18d

看一下nodes,可见一台机器既做了master，又做了worker

ericdeMacBook-Pro:openshift ericnie$ oc get nodes

NAME                 STATUS   ROLES           AGE   VERSION

crc-4gdnp-master-   Ready    master,worker   18d   v1.13.4+cb455d664

访问管理控制台

https://console-openshift-console.apps-crc.testing

通过kubeadmin登录