1. OpenShift 클러스터에 Red Hat Advanced Cluster Management for Kubernetes(RHACM)를 설치했습니다. 자세한 내용은 Red Hat Advanced Cluster Management for Kubernetes: Install 를 참조하십시오.
2. 모든 관리형 SNO 클러스터에는 스토리지를 프로비저닝하는 데 사용되는 전용 디스크가 있습니다.

절차

1. OpenShift 인증 정보를 사용하여 RHACM CLI에 로그인합니다.

   자세한 내용은 Kubernetes용 Red Hat Advanced Cluster Management 설치를 참조하십시오.

2. 네임스페이스를 생성합니다.

   # oc create ns lvm-policy-ns

3. 네임스페이스에 정책 YAML을 생성합니다.

   # This policy verifies the installation of the official version of the OpenShift Data Foundation
   # Logical Volume Manager Operator on the managed clusters.
   # If set to "enforce" it installs the operator.
   # Used APIs: OLM, ODF-LVMO #https://github.com/operator-framework/operator-lifecycle-manager
   # https://github.com/red-hat-storage/lvm-operator
   
   apiVersion: policy.open-cluster-management.io/v1
   kind: Policy
   metadata:
    annotations:
      policy.open-cluster-management.io/categories: CM Configuration Management
      policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
      policy.open-cluster-management.io/standards: NIST SP 800-53
    name: policy-lvm-operator
   spec:
    disabled: false
    remediationAction: enforce
    policy-templates:
      - objectDefinition:
          apiVersion: policy.open-cluster-management.io/v1
          kind: ConfigurationPolicy
          metadata:
            name: policy-lvm-namespace
          spec:
            object-templates:
              - complianceType: musthave
                objectDefinition:
                  apiVersion: v1
                  kind: Namespace
                  metadata:
                    name: openshift-storage
                    labels:
                      openshift.io/cluster-monitoring: "true"
            remediationAction: enforce
            severity: high
      - objectDefinition:
          apiVersion: policy.open-cluster-management.io/v1
          kind: ConfigurationPolicy
          metadata:
            name: policy-lvm-operator-operatorgroup
          spec:
            object-templates:
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha2
                  kind: OperatorGroup
                  metadata:
                    name: openshift-storage-operatorgroup
                    namespace: openshift-storage
                  spec:
                    targetNamespaces:
                      - openshift-storage
            remediationAction: enforce
            severity: high
      - objectDefinition:
          apiVersion: policy.open-cluster-management.io/v1
          kind: ConfigurationPolicy
          metadata:
            name: policy-lvm-operator-subscription
          spec:
            object-templates:
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha1
                  kind: Subscription
                  metadata:
                    name: odf-lvm-operator
                    namespace: openshift-storage
                  spec:
                    channel: stable-4.10
                    installPlanApproval: Automatic
                    name: odf-lvm-operator
                    source: redhat-operators
                    sourceNamespace: openshift-marketplace
                    startingCSV: odf-lvm-operator.v4.10.0
            remediationAction: enforce
            severity: high
      - objectDefinition:
          apiVersion: policy.open-cluster-management.io/v1
          kind: ConfigurationPolicy
          metadata:
            name: policy-lvmcluster
          spec:
            object-templates:
              - complianceType: musthave
                objectDefinition:
                  apiVersion: lvm.topolvm.io/v1alpha1
                  kind: LVMCluster
                  metadata:
                    name: odf-lvmcluster
                    namespace: openshift-storage
                  spec:
                    storage:
                      deviceClasses:
                      - name: vg1
            remediationAction: enforce
            severity: high

4. 다음 명령을 실행합니다.

   # oc create -f policy-lvm-operator.yaml -n lvm-policy-ns

   이렇게 하면 정책, 배치 규칙 및 Placement Binding 이 생성됩니다. 정책은 네임스페이스 , OperatorGroup ,Subscription, LVMCluster 리소스를 생성합니다. 이렇게 하면 선택 기준과 일치하는 SNO 클러스터에 Operator가 배포되고 스토리지를 프로비저닝하기 위해 필요한 리소스를 설정하도록 구성해야 합니다. Operator는 설치 후 사용되지 않은 모든 디스크를 사용합니다.