RackWare Inc.

• How to discover the OpenShift cluster in SWIFT.
  • Discover the AWS OpenShift cluster with SWIFT

1. First, we need to login to the SWIFT dashboard and navigate to the ‘container cluster’ menu and click on Add button.

1. Once you click on the Add button you will appear a screen below and select the ‘cloud type’ from the dropdown menu.
2. We support several clouds for OpenShift.

1. Friendly name: You need to enter a friendly name according to your cluster or project.
2. Cloud Type: Choose the ‘cloud type’ from the dropdown as SWIFT supports various clouds.
3. Service Account Token: 
   1. You need to fetch the token from the OpenShift cluster. Before doing this, ensure that the OpenShift cluster is provisioned and available for use.
   2. Then you need to copy the ‘DNS entries’ from the cluster config and add them to your laptop's host file as well as the Linux host file.
   3. Now you can access the console for the OpenShift cluster using the OpenShift portal URL (you can use this from the DNS entries themselves).
   4. Use the username and password available in cluster details. You can login with ‘kubeadmin’ and their ‘password’. It is mentioned in the OpenShift config file.
   5. After logging in Click on kube:admin button at top right corner and click on Copy login command. There we can find the login command if we wish to access the CLI.
   6. Install OC CLI if it is not installed on the VM.
   7. Login using ‘oc login’ CLI.
   8. Create a Service account token using following CLI, replace ‘pk-test’ with your namespace.
      1. oc create sa kubeadmin -n pk-test
   9. Apply role-based access control using following CLI.
      1. oc apply -f /home/rbac.yaml -n pk-test

----rbac.yaml

apiVersion: rbac.authorization.k8s.io/v1       

kind: ClusterRoleBinding

metadata:

name: swift-admin-crb

subjects:

- kind: ServiceAccount

   name: <sa name>

   namespace: <sa namespace>

roleRef:

    kind: ClusterRole

    name: cluster-admin

     apiGroup: rbac.authorization.k8s.io

1. Describe the service account. 
2. oc describe sa kubeadmin -n pk-test
3. it will print output as below -

Name: kubeadmin

Namespace: default

Labels: <none>

Annotations: <none>

Image pull secrets: kubeadmin dockercfg-qh5lk

Mountable secrets: kubeadmin-dockercfg-qh5lk

Tokens: kubeadmin-token-vbzcd

1. Describe above secret token to get the key to be used in cluster discovery.
   1. oc describe secret kubeadmin-token-vbzcd -n pk-test. It will show the one ‘secret key’ that key need to copy and paste it in ‘Service Account Token’ box in SWIFT.
2. Apply cluster role binding using following CLI.
   1.  oc apply -f /home/crb.yaml -n pk-test

 ---crb.yaml

apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

    name: swift-admin-crb

   subjects:

   - kind: ServiceAccount

      name: kubeadmin

       namespace: pk-test

    roleRef:

       kind: ClusterRole

        name: cluster-admin

        apiGroup: rbac.authorization.k8s.io

1. Port: Provide by-default 6443.
2. IP Address/DNS Name: Put the IP address that you saved from the cluster config into the /etc/hosts file.
3. Access Key: Provide the Access key of your aws account.
4. Region: Select the region where you cluster is provisioned.
5. Secret Key: Provide your aws secret key
6. TRAIPOD Config, Cluster Private IP Config and Advanced Options: You can refer to the AWS K8S cluster discovery section. We have explained it very well there, as this option is very similar across all clouds.
7.  Now you can ‘Add’ cluster by pressing add button and AWS OpenShift cluster will be discovered within few seconds.

1. First, we need to login to the SWIFT dashboard and navigate to the ‘container cluster’ menu and click on ‘Add’ button.
2. Once you click on the Add button you will appear a screen below and select the ‘cloud type’ from the dropdown menu.

1. Friendly name: You need to enter a friendly name according to your cluster or project.
2. Cloud Type: Choose the ‘cloud type’ as a ‘Google GCP’ from the dropdown as SWIFT supports various clouds.
3. Service Account Token, Port & IP Address:  You can refer to the steps we followed for AWS OpenShift above. Similarly, you can create and provide the token, port, and IP address.
4. Region: Choose region from dropdown where your cluster is located.
5. Private Key File: Click on the button to browse your local system and select the private key file (e.g., service-account-key.json).
6. TRAIPOD Config, Cluster Private IP Config and Advanced Options: You can refer to the AWS K8S cluster discovery section. We have explained it very well there, as this option is very similar across all clouds.
7. Now you ‘Add’ cluster by pressing add button and GCP OpenShift cluster will be discovered within few seconds.