Demo Web and CLI Templates Yaml Containers

In this article, we provide a step-by-step guide to installing a production-ready Kubernetes cluster using OpenShift. Although earlier documentation may reference CodeReady Containers, the current product name is OpenShift Local. This guide focuses on setting up a production cluster rather than a local development environment.

Accessing the OpenShift Console

Begin by logging into Red Hat’s Cloud Console and navigating to the OpenShift section under "Manage Infrastructure." Here, you will find options such as Assisted Installer Clusters, Archives, and Register Cluster (if you have an existing OpenShift cluster). Click on Create Cluster.

For production environments, all options except the local installation are production-ready. If your subscription is active, your console may appear as follows:

If an OpenShift trial is in progress on your account, you might see a dedicated trial interface similar to managed services like ROSA, but it represents a trial version of OpenShift:

Cloud Options for OpenShift

Under the cloud category, you can choose from several deployment options:

• OpenShift on Azure
• OpenShift on IBM Cloud
• OpenShift on AWS
• Self-managed installation on cloud instances or virtual machines

These environments are preconfigured for automation. For example, the AWS option provides two deployment choices:

• User Provisioned Infrastructure: You manage the infrastructure.
• Installer Provisioned Infrastructure: Deployment is automated.

If you are already hosted on a cloud provider such as Azure or AWS, opting for a managed service can simplify operations. For instance, on Azure, you can take advantage of Azure Red Hat OpenShift as demonstrated below:

Selecting the service leads you to create an Azure Red Hat OpenShift cluster—a fully managed solution:

For users desiring more control, installation on a cloud instance, virtual machine, or even on bare metal in a data center is also supported. However, most users choose the cloud-managed options for ease of use.

Creating an Azure Red Hat OpenShift Cluster

Follow these steps to create your Azure Red Hat OpenShift cluster:

1. Initiate Cluster Creation:
   From the OpenShift service in Azure, click Create Azure Red Hat OpenShift.

2. Configure the Cluster:

   • Resource Group: Select a resource group (for example, "CodeCloud").
   • Region: Choose your desired region (e.g., East US for New Jersey).
   • Cluster Name & Domain: Provide a suitable name such as "CodeCloud Test Cluster" for both fields.

   

3. Select Machine Sizes:
   Configure the master (control plane) and worker nodes by selecting the appropriate virtual machine sizes. A typical configuration might include three to four worker nodes for high availability and two control plane nodes.

   

4. Authentication Setup:
   To set up authentication, specify a service principal from Azure Active Directory (AAD):

   • Open a new tab to access Azure Active Directory.
   • Create an app registration (for example, "CodeCloud OpenShift") using default settings for a single tenant.
   • Copy the Client ID from the app registration.

   

   • Next, generate a new client secret in the app registration and save its value.

   

5. Red Hat Pull Secret:
   Retrieve your OpenShift pull secret from Red Hat’s Console at the following path:
   console.redhat.com/OpenShift/install/Azure/ARO-provisioned
   Paste the pull secret into the Azure configuration.

   

6. Network Configuration:
   Setup networking by creating two subnets—one for the master (control plane) and one for the worker nodes.

   • API Server Visibility: Choose between a public API server accessible via a public IP or a private one. A public API is acceptable if your RBAC permissions are secure.
   • Ingress Visibility: Select public if external access to front-end applications is required, or private for internal access.

7. Tags and Review:
   Add relevant tags (for instance, "cluster OpenShift") and click Review + Create.

   If you encounter a validation error regarding the object ID, revisit your app registration to modify API permissions:

   • Click Add a permission
   • Select Azure Service Management
   • Ensure the required permission for user impersonation is checked.

   

8. Create the Cluster:
   Click Create. The cluster creation process may take some time; feel free to take a break while you wait.

Managing Resource Quotas

The installation requires a total of 36 virtual CPU cores. If your current Azure account lacks this quota, follow these steps:

1. Navigate to Help and Support and select Create a support request.
2. Describe your issue and choose Service and Subscription Limits, Quotas.
3. For the quota type, select Compute VM Cores vCPUs.
4. Click Manage Quota to adjust the limit for the standard DSv3 family in your selected region.

Accessing the OpenShift Cluster Console

After the cluster is created, click OpenShift to access the cluster console. You will need to use the default credentials, which you can retrieve using the command below:

az aro list-credentials \
  --name kodekldoutest \
  --resource-group Kodecloud

The command output will resemble:

{
  "kubeadminPassword": "TGDMM-Q85fj-4X2wx-kKNaK",
  "kubeadminUsername": "kubeadmin"
}

Copy the password and log in using the username "kubeadmin." Once logged in, you will be presented with the OpenShift dashboard:

You have now successfully set up a production-ready OpenShift cluster.

This guide has taken you through the comprehensive process of provisioning an OpenShift cluster on Azure Red Hat OpenShift, covering important aspects such as authentication, networking, and resource quota configuration. Enjoy managing your production Kubernetes environment!