nerc-project / operations

Issues related to the operation of the NERC OpenShift environment
1 stars 0 forks source link

Request NESE allocation for NERC Test clusters #579

Closed joachimweyl closed 1 week ago

joachimweyl commented 1 month ago

Motivation

We require 4 10 TB NESE allocations for 4 different clusters. Include Michael, Justin, Dylan, & Kim in the communications.

Completion Criteria

4 10TB NESE allocations provided.

Description

Questions

  1. which networks should be allowed to access these pools each?
  2. Do you need three set key access: node, provisioner and healthchecker for each pool or just one per pool?
  3. Who will be handling/receiving the access keys created for the pools?"

Completion dates

Desired - 2024-05-29 Required - TBD

joachimweyl commented 1 month ago

@waygil let me know if you would prefer individual issues for each.

waygil commented 1 month ago

Are all of these request for triple replicated RBD pools? This was how the recent Hypershift pool was set up. One issue is fine as I'll make one request to NESE for this.

joachimweyl commented 1 month ago

Yes

joachimweyl commented 1 month ago

@waygil I have added the people responsible to each request above.

waygil commented 1 month ago

NESE ticket #003199 submitted:

_Hi Milan,

I hope the annual maintenance and NESE upgrades went well on your end. A lot of work for sure, and we appreciate you and your teams efforts in running the NESE service!

I would like to set up the following 4 10TB allocations for the Mass Open Cloud (MOC) :

1) 10TB allocation for the RHOAI test cluster called moc-rbd-rhoai-test (Dylan Stewart – dystewar@redhat.com) 2) 10TB allocation for the RHOAI Beta test cluster moc-rbd-rhoai-beta-test (Dylan Stewart – dystewar@redhat.com) 3) 10TB allocation for the OpenShift test cluster called moc-rbd-openshift-test (Steve Heckman – sheckman@bu.edu) 4) 10TB allocation for the OpenShift Beta cluster called moc-rbd-openshift-beta-test (Dylan Stewart – dystewar@redhat.com)

All of these will be RBD replicated allocations. I’ve included the point people in this email (indicated in parentheses for each allocation) in case additional follow-up is needed on either side to get these set up.

If you would rather have individual support tickets for each request or require other initial information that you would like for these allocations, please let me know.

Thanks!

Wayne_

waygil commented 3 weeks ago

Added 5th request for 10TB covered under issue 1318 and added Taj as a contact for that request.

5) 10TB allocation for a second OpenShift test cluster called moc-rbd-openshift-test2 (Taj Salawu - tsalawu@redhat.com)

-Wayne

joachimweyl commented 2 weeks ago

"I've just created these 5 pools. I would need additional info about which networks should be allowed to access these pools each? Do you need three set key access: node, provisioner and healthchecker for each pool or just one per pool? Who will be handling/receiving the access keys created for the pools?"

Milan

joachimweyl commented 2 weeks ago

OSTicket#003199

larsks commented 2 weeks ago

I've posted the following update to the ticket:

These are all openshift clusters, so they'll need the three auth principals (node, provisioner and healthchecker) that we've used on other clusters. These clusters will all be deployed on the test subnet, VLAN 2175 (10.30.12.0/24).

joachimweyl commented 1 week ago

Milan responded "The keys have been created and sent out." @jtriley will decrypt and add to Vault.

joachimweyl commented 1 week ago

@jtriley when you add the creds to vault please close this issue.

jtriley commented 1 week ago

@larsks @dystewart @tssala23 @joachimweyl external ceph configs for these cluster have been added to vault under the "nerc" secret engine using the cluster names for top-level "folder":