openshift

Home Lab Setup based on Red Hat CodeReady Containers

chefbckc

•2 min read
Home Lab Setup based on Red Hat CodeReady Containers

Photo by Callum Shaw

This is intended as a quick reference and explanation install CRC in a home lab.

Downloads

Installation

crc

wget https://mirror.openshift.com/pub/openshift-v4/clients/crc/latest/crc-linux-amd64.tar.xz

tar xvf crc-linux-amd64.tar.xz
sudo mv crc-linux-1.25.0-amd64/crc /usr/local/bin

oc & kubectl

wget https://github.com/openshift/okd/releases/download/4.7.0-0.okd-2021-04-11-124433/openshift-client-linux-4.7.0-0.okd-2021-04-11-124433.tar.gz

tar xvf openshift-client-linux-4.7.0-0.okd-2021-04-11-124433.tar.gz 
sudo mv oc /usr/local/bin/
sudo mv kubectl /usr/local/bin/

Create crc user

useradd crc
passwd crc
usermod -aG wheel crc

Setup crc

crc setup

Start oc and provide secret from cloud.redhat.com

crc start

Get crc ip

crc ip

Get crc console

crc console

Enable Remote Access

Install HAProxy with dependencies

sudo dnf -y install haproxy policycoreutils-python-utils

Configuring the Firewall

sudo systemctl start firewalld
sudo firewall-cmd --add-port=80/tcp --permanent
sudo firewall-cmd --add-port=6443/tcp --permanent
sudo firewall-cmd --add-port=443/tcp --permanent
sudo systemctl restart firewalld
sudo semanage port -a -t http_port_t -p tcp 6443

Configure HAProxy

export SERVER_IP=<SERVER_IP_HERE>
export CRC_IP=<CRC_IP_HERE>

Backup orginal haproxy.cfg

sudo cp /etc/haproxy/haproxy.cfg /etc/haproxy/haproxy.cfg.orig

Replace contents of the haproxy.cfg with:

export HOST_IP=$(hostname --ip-address)
export CRC_IP=$(crc ip)
tee /etc/haproxy/haproxy.cfg &>/dev/null <<EOF
defaults
    mode http
    log global
    option httplog
    option  http-server-close
    option  dontlognull
    option  redispatch
    option  contstats
    retries 3
    backlog 10000
    timeout client          25s
    timeout connect          5s
    timeout server          25s
    timeout tunnel        3600s
    timeout http-keep-alive  1s
    timeout http-request    15s
    timeout queue           30s
    timeout tarpit          60s
    default-server inter 3s rise 2 fall 3
    option forwardfor

frontend apps
    bind $HOST_IP:80
    bind $HOST_IP:443
    option tcplog
    mode tcp
    default_backend apps

backend apps
    mode tcp
    balance roundrobin
    option tcp-check
    server webserver1 $CRC_IP check port 80

frontend api
    bind $HOST_IP:6443
    option tcplog
    mode tcp
    default_backend api

backend api
    mode tcp
    balance roundrobin
    option tcp-check
    server webserver1 $CRC_IP:6443 check port 6443
EOF

Start and Enable HAProxy

systemctl start haproxy
systemctl enable haproxy.service

Configuring DNS for Client

Add line to /etc/hosts and replace <SERVER_IP> with ip of crc machine.

<SERVER_IP> api.crc.testing oauth-openshift.apps-crc.testing console-openshift-console.apps-crc.testing default-route-openshift-image-registry.apps-crc.testing

Access

Login with oc or via web console

oc login -u kubeadmin -p https://api.crc.testing:6443

References