blob: e798e96d97ac71c6267d01caf369e704eac45efe [file] [log] [blame]
Sergiusz Bazanskide061802019-01-13 21:14:02 +01001HSCloud Clusters
2================
3
4Current cluster: `k0.hswaw.net`
5
6Accessing via kubectl
7---------------------
8
9There isn't yet a service for getting short-term user certificates. Instead, you'll have to get admin certificates:
10
Sergiusz Bazanski73cef112019-04-07 00:06:23 +020011 bazel run //cluster/clustercfg:clustercfg admincreds $(whoami)-admin
Sergiusz Bazanskide061802019-01-13 21:14:02 +010012 kubectl get nodes
13
14Provisioning nodes
15------------------
16
17 - bring up a new node with nixos, running the configuration.nix from bootstrap (to be documented)
Sergiusz Bazanski73cef112019-04-07 00:06:23 +020018 - `bazel run //cluster/clustercfg:clustercfg nodestrap bc01nXX.hswaw.net`
Sergiusz Bazanskide061802019-01-13 21:14:02 +010019
20That's it!
Sergiusz Bazanski2fd58612019-04-02 14:45:17 +020021
22Ceph
23====
24
25We run Ceph via Rook. The Rook operator is running in the `ceph-rook-system` namespace. To debug Ceph issues, start by looking at its logs.
26
27The following Ceph clusters are available:
28
29ceph-waw1
30---------
31
32HDDs on bc01n0{1-3}. 3TB total capacity.
33
34The following storage classes use this cluster:
35
36 - `waw-hdd-redundant-1` - erasure coded 2.1
Sergiusz Bazanski36cc4fb2019-05-17 18:08:48 +020037 - `waw-hdd-yolo-1` - unreplicated (you _will_ lose your data)
Piotr Dobrowolski56918232019-04-09 23:48:33 +020038 - `waw-hdd-redundant-1-object` - erasure coded 2.1 object store
Sergiusz Bazanski2fd58612019-04-02 14:45:17 +020039
40A dashboard is available at https://ceph-waw1.hswaw.net/, to get the admin password run:
41
42 kubectl -n ceph-waw1 get secret rook-ceph-dashboard-password -o yaml | grep "password:" | awk '{print $2}' | base64 --decode ; echo
43
Piotr Dobrowolski56918232019-04-09 23:48:33 +020044Rados Gateway (S3) is available at https://object.ceph-waw1.hswaw.net/. To create
45an object store user consult rook.io manual (https://rook.io/docs/rook/v0.9/ceph-object-store-user-crd.html)
46User authentication secret is generated in ceph cluster namespace (`ceph-waw1`),
47thus may need to be manually copied into application namespace. (see
48`app/registry/prod.jsonnet` comment)
49
50`tools/rook-s3cmd-config` can be used to generate test configuration file for s3cmd.
51Remember to append `:default-placement` to your region name (ie. `waw-hdd-redundant-1-object:default-placement`)