How to install OpenShift 4 on Bare Metal - User Provisioned Infrastructure (UPI)

Quickly spin up an OpenShift 4 cluster to start building and running your container workloads.

This tutorial follows the Bare Metal UPI method of installation and uses ESXi to virtualise the 'bare metal' machines. More information and details instructions are available in the GitHub Repo.

---

---

[EricLowryUT]

Just followed these instructions for a 4.6 install and it worked like a charm... only thing I did different is that I simply allowed the coreos image to boot completely and then I cut and pasted the following:

sudo coreos-installer install /dev/sda \
--insecure \
--insecure-ignition \

(replacing bootstrap.ign with master.ign and worker.ign respectively)

I like this approach because it was much easier to cut and paste into the running vm than it is to type out the kernel options when booting each VM.

[enricowelder]

Excellent video! So clear and well laid out. I like also how you give an overview of the whole process in the beginning, since this is almost impossible to get from the RedHat documentation when you start with it for the first time.

[Oswee]

Had done this with 4.2. But i used Ansible. Doing this by hand is pretty time consuming. Ocp-svc server usually is called Bastion server. :) Will do this in couple of days again but this time for provisioning will use Terraform and Vault for secrets. Hope there are not a lot of changes since 4.2. Great video! Also... if interested in S3 compatible alternative, there are great project called MinIO.

[canislupax]

Thank you so much Ryan for doing this! Great How-To. Calm and very clear and structured explanations! Perfekt!

[hstigjk]

Hi Ryan, an awesome video. One addition, you need to add a firewall rule to ocp-svc - firewall-cmd --zone=internal --add-port=53/tcp --permanent. I found that random Pods would fail DNS lookup. Further investigation showed that happened when the DNS response exceeded 512 bytes on UDP.

[gypsykid]

Thanks man your video helped alot understanding pre install setup.
warning: utilize your .ign files with in 24 hours of creation else it will give certificate error.

[Hibernate]

While the documentation of openshift is a complete mess, you explain the things like a walk in the park. Bravo!

[EricLowryUT]

Hey Ryan, the HAProxy stats page is totally cool - but I just learned a valuable lesson. I have followed these instructions a couple of times now, with great success. Today, I started working with a slightly larger cluster - one with 3 workers instead of 2. When I looked at the haproxy stats page - one of my worker nodes was red. I freaked out and spent a bunch of time trying to figure it out. Turns out, Openshift "ingress" spins up 2 pods listening on http (80) and https (443) - so you are only going to get "green" on two of your worker nodes at any time.

TLDR; if you have more than 2 worker nodes, it's ok if HAProxy thinks some of them are down. Trust `oc get nodes` to tell you if the nodes are up and running!

[namitaigit]

This is amazing and supremely helpful! Especially the architecture definition and deployment flow in the beginning. Thank you so much.

[gzcwnk]

quickly, LOL, uh so far that best instructions I have found!

[sebastiaanstoffels]

Just wanted to say, many months on....this vid is still mighty useful! :)

[islameldemery]

Thank you! I followed your steps and got my cluster up and running. Sweet!
Worth to mention for windows users (I'm coming from .NET world), I used mobaxterm to edit all configuration files graphically as I'm not as good as Ryan with vim. When configuring certain files Ryan used vim shortcuts to search, find/replace text which I'd have missed easily.
I also first deployed all VMs inside a virtual machine of esxi just to test. Although it succeeded, the ocp web console wasn't stable and signs out randomly few minutes after login (the session should last for 24 hours). But when deployed to an esxi on bare metal (exactly like the video) it's perfect and totally stable. I actually used my workstation for that, made myself a vm for development, and passed the GPU/USBs to it using esxi passthrough.
Make sure you watch Ryan's other videos to setup nfs storage and load balancer.

[rajendrakumarmanchikalapud]

Thank you very much Ryan, It helped me a lot in setting up my first OCP4.6 .👍👍

[anandchandrasekaran]

Thanks a lot for the video and git hub repo. it was extremely helpful to install and setup OCP in UPI method.

[aceisastud]

Wow, this is very good. Thanks a lot Ryan! You won the internet with this video :)

[adriancappelletti]

Very Well done! I'm not an experet in this field. Certainly you need to know the basics of Linux, Routing and Protocolas like DHCP or TCP. But man...I by watgin the vide a have a pretty good sense how things need to executed in which order and why. thanks!

[dheena]

great work. Thanks a LOT. Should have watched this a week before, may have saved time.

[boris]

Actually this is brilliant. Thank you, good guy!

[mohzaher]

Neat, Clear and Complete. Thanks, mate. I could never tell how much time you saved me

[nyyang]

this video is so helpful to me! thanks