This workshop is self-paced, with the intention of being completed within 2 hours. The slide deck sets the stage for the workshop, then students should proceed through the exercises at their own pace.
There’s a few different services involved in this workshop. They all should be up and available after provisioning, but if they need convincing use the information below. Remember to connect to the approriate node when attempting to interact with services.
Workshop Service | Description | Network Port | Restart Command | Platform | Student Facing |
---|---|---|---|---|---|
Edge Manager Cockpit WebUI | Web interface for system administration, accessing the Image Builder webUI | tcp/9090 | sudo systemctl restart cockpit.service | Local edge management system | False |
Local rpm-ostree Repo | Apache web server hosting /var/www/html/rhde-image ostree repo | tcp/11080 | sudo systemctl restart httpd | Local edge management system | False |
Remote rpm-ostree Repo | Apache web server hosting rpm-ostree repo | ostree-repo-route | Delete deployment, re-run provisioner | OpenShift | False |
Ansible Controller | Each student has their own instance of Controller | controller-route | Dump application components, let operator rebuild | OpenShift | True |
Dnsmasq | Provides DHCP and DNS for the workshop network | udp/53 | sudo podman pod restart workshop-rhde_aap_rhsi-priv | Local edge management system | False |
Reverse Proxy | Nginx reverse proxy for workshop services with valid wildcard certiticate | tcp/80,tcp/443 | podman pod restart workshop-rhde_aap_rhsi | Local edge management system | False |
iPXE | Hosts iPXE menu file | tcp/8081 | podman pod restart workshop-rhde_aap_rhsi | Local edge management system | False |
Gitea | Source control server for students | gitea-route | helm uninstall, re-run provisioner | OpenShift | True |
TFTP | Hosts the installation environment files | udp/69 | podman pod restart workshop-rhde_aap_rhsi | Local edge management system | False |
Attendance | Nodejs web server with student pages/information | attendance-route | Delete deployment, re-run provisioner | OpenShift | True |
Hypervisor Cockpit WebUI | Web interface for system administration, accessing the virtual edge devices | tcp/9090 | sudo systemctl restart cockpit.service | hypervisor | True |
Reverse Proxy | Nginx reverse proxy for workshop services with valid wildcard certiticate | tcp/80,tcp/443 | podman pod restart reverse-proxy | hypervisor | False |
RHSI | Each student has their own instance of RHSI | many | Delete components, let operator rebuild | OpenShift | True |
To restart services, restarting the pods is safe:
# Restart priv pod
sudo podman pod restart workshop-rhde_aap_rhsi-priv
# Restart non-priv pod
podman pod restart workshop-rhde_aap_rhsi
In addition, individual containers can be restarted.
All instructions in the main provisioner file hold true, except this workshop uses a custom playbook over the generic provision_lab.yml
playbook. Simply replace provision_lab.yml
with rhde_aap_rhsi.yml
to provision this workshop.
In terms of capacity the recommendation is to allocate 1 compute node for every 2 students.
Remember to include in the extra_vars file the hash of the ansible manifest and in the ansible-navigator.yml the reference to the correct Execution Environment (2024-02-15).
Expected provision time is: 90 minutes. Plan ahead accordingly. Provisioning will take longer on slower connections (ex: hotel wifi, conference wifi, etc).
The provisioner runs the OpenShift installation process from the edge-manager system. The oc
CLI tooling will be automatically installed. The directory /home/{{ ansible_user }}/ocp-install
will contain the kubeadmin password, kubeconfig, and installation state files/logs.