A comprehensive guide for deploying Single-Node OpenShift (SNO) clusters with Red Hat OpenStack Services on OpenShift (RHOSO) in Red Hat's PSI environment.

• Prerequisites
• Repository Structure
• Initial Setup
• Configuration
• Deployment Workflow
• DNS Configuration
• Post-Deployment Operations
• Troubleshooting
• Cleanup

• Ansible (2.9+) with required collections:

  ansible-galaxy collection install openstack.cloud
  ansible-galaxy collection install community.general

• OpenShift CLI Tools:

  • openshift-install (4.18.10+)
  • oc client

• Container Runtime:

  • Podman (for coreos-installer)

• OpenStack CLI:

  • python-openstackclient
  • Valid OpenStack credentials sourced

1. Source OpenStack credentials:

   source ~/psi-openrc.sh

2. Verify OpenStack connectivity:

   openstack server list

3. Install required Ansible collections:

   ansible-galaxy collection install -r requirements.yml

psi-sno/
├── README.md
├── deploy.yml                    # Main deployment playbook
├── destroy.yml                   # Cleanup playbook
├── bootstrap.yml                 # Bootstrap operations
├── group_vars/
│   └── all.yaml                  # Global configuration
├── install-configs/              # OpenShift install configurations
├── roles/                        # Ansible roles
│   ├── psi-project/             # ISO creation and project management
│   ├── cluster/                 # Infrastructure deployment
│   ├── add-dns-cluster/         # DNS configuration
│   └── create-dns-server/       # DNS server deployment
├── cr/                          # Kubernetes custom resources
├── butane/                      # Machine config templates
├── projects/                    # Generated project directories
└── iso/                         # Downloaded RHCOS ISOs

git clone <repository-url> psi-sno
cd psi-sno

mkdir -p secrets

Pull Secret:

# Get from https://console.redhat.com/openshift/install/pull-secret
cp ~/pull-secret.txt secrets/pull-secret.txt

SSH Key:

cp ~/.ssh/id_rsa.pub secrets/id_rsa.pub

Edit group_vars/all.yaml to match your environment:

# PSI provider network
project_provider_network: "provider_net_shared_3"

# OpenShift version
ocp_version: "4.18.10"

# Instance flavors
sno_flavor: "g.memory.xxl"
sno_volume_size: 120

# DNS configuration
dns_fip: "10.0.108.151"  # Your DNS server floating IP

Create a new install config in install-configs/:

cp install-configs/nfv-sno2-install-config.yaml install-configs/my-cluster-install-config.yaml

Edit the configuration:

apiVersion: v1
baseDomain: nfv.com
metadata:
  name: my-cluster  # Your cluster name
networking:
  machineNetwork:
  - cidr: 192.168.150.0/24  # Your desired network CIDR
# ... rest of configuration

If you need custom networking, edit cr/networking.yaml and cr/nncp.yaml to match your requirements.

Generate the OpenShift installation ISO:

ansible-playbook create_project_iso.yml

What this does:

• Prompts you to select an install config
• Downloads RHCOS live ISO if needed
• Creates ignition configuration
• Embeds ignition into ISO
• Prepares project directory

Deploy the complete infrastructure stack:

ansible-playbook deploy.yml

What this creates:

• OpenStack networks (SNO and OpenStack networks)
• Security groups
• Floating IPs
• Bootable volumes
• Compute instances
• DNS records

Wait for and verify cluster bootstrap:

ansible-playbook bootstrap.yml

What this does:

• Waits for OpenShift bootstrap completion
• Configures server networking
• Sets up time synchronization

Monitor the installation progress:

# From the project directory
cd projects/<your-cluster-name>
openshift-install wait-for bootstrap-complete --log-level=debug
openshift-install wait-for install-complete --log-level=debug

The deployment automatically configures DNS using the add-dns-cluster role:

• Remote DNS: Updates CoreDNS server with cluster records
• Local DNS: Configures local dnsmasq for development access

Verify DNS resolution:

dig +short api.my-cluster.nfv.com
dig +short *.apps.my-cluster.nfv.com

If you need to deploy a new DNS server:

ansible-playbook -i roles/create-dns-server/tasks/main.yml --tags deploy,setup

1. Get cluster credentials:

   cd projects/<your-cluster-name>
   export KUBECONFIG=auth/kubeconfig

2. Verify cluster access:

   oc get nodes
   oc get clusteroperators

3. Get console URL:

   oc get routes -n openshift-console

Deploy networking and storage configurations:

oc apply -f cr/networking.yaml
oc apply -f cr/local-storage.yaml

Start/Stop server:

# Set server action in group_vars or pass as extra var
ansible-playbook deploy.yml -e server_action=hard-reboot

Get server floating IP:

ansible-playbook get_server_fip.yml

1. Bootstrap Timeout:

# Check server console in OpenStack
openstack console log show <server-name>

# SSH to server (if accessible)
ssh core@<server-ip>
sudo journalctl -u bootkube.service

2. DNS Resolution Issues:

# Check local DNS configuration
cat /etc/NetworkManager/dnsmasq.d/99-*.conf

# Restart NetworkManager
sudo systemctl restart NetworkManager

3. Network Connectivity:

# Test from debug pod
oc apply -f cr/simple-pod.yaml
oc exec -it net-debug-container -- /bin/bash

• Installation logs: projects/<cluster-name>/.openshift_install.log
• Bootstrap logs: On cluster node at /var/log/
• OpenStack SDK logs: /tmp/openstack_sdk.log

# List all OpenStack resources for project
openstack server list --name <project-name>
openstack network list --name <project-name>
openstack volume list --name <project-name>

# Check security groups
openstack security group list
openstack security group show <security-group>

# Verify floating IPs
openstack floating ip list

Remove all resources for a project:

ansible-playbook destroy.yml

What this removes:

• Compute instances
• Volumes
• Networks and subnets
• Routers and interfaces
• Ports
• Security groups
• Floating IPs

Remove specific resources:

# Remove server only
openstack server delete <server-name>

# Remove volume
openstack volume delete <volume-name>

# Remove network
openstack network delete <network-name>

# Remove project directory
rm -rf projects/<project-name>

# Remove local DNS configuration
sudo rm /etc/NetworkManager/dnsmasq.d/99-<project-name>.conf
sudo systemctl restart NetworkManager

1. Create Butane templates in butane/ directory
2. Generate machine configs:

   ansible-playbook gen_machineconfig.yml

3. Apply generated configs:

   oc apply -f cr-gen/

Deploy multiple clusters by:

1. Creating separate install configs
2. Running deployment with different project names
3. Each cluster gets isolated networks and resources

Modify cr/nncp.yaml for custom:

• VLAN IDs
• IP address ranges
• Interface names
• DNS servers

For issues and questions:

• Check the troubleshooting section
• Review OpenStack and OpenShift logs
• Consult Red Hat documentation for RHOSO

When reporting issues, include:

• Ansible playbook output
• OpenStack resource states
• OpenShift installation logs
• Network configuration details