inecs
af26ad4141
Include the bad id in host/datacenter/cluster errors, expire stale auth in the console, and document Ingress annotations that preserve fault bodies.
94 lines
2.7 KiB
Markdown
94 lines
2.7 KiB
Markdown
**Language / Язык:** [English](kubernetes.md) | [Русский](ru/kubernetes.md)
|
|
|
|
# Kubernetes / Helm
|
|
|
|
Deploy with the chart in
|
|
[`helm/ovirt-api-simulator`](../helm/ovirt-api-simulator).
|
|
|
|
Published image (when pushed):
|
|
[`inecs/ovirt-api-simulator`](https://hub.docker.com/r/inecs/ovirt-api-simulator)
|
|
|
|
## What the chart installs today
|
|
|
|
| Component | Role |
|
|
|---|---|
|
|
| **simulator** Deployment | FastAPI on container port `8080` |
|
|
| **Service** | ClusterIP → `8080` |
|
|
| **PostgreSQL** StatefulSet | Bundled Postgres 17 (optional) |
|
|
| **migrate** initContainer | Idempotent schema migrations |
|
|
| **seed** Job (optional) | `minimal` or `demo` lab data |
|
|
|
|
> The Compose stack publishes Engine HTTPS + UI via nginx `api-gateway`
|
|
> ([ports.md](ports.md)). The Helm chart serves the simulator Service on `:8080`.
|
|
> Optional Ingress: enable with
|
|
> [`values-ingress-example.yaml`](../helm/ovirt-api-simulator/values-ingress-example.yaml)
|
|
> (`proxy-intercept-errors: "false"`, `custom-http-errors: "502,503"` so Engine
|
|
> fault bodies are not rewritten to branded HTML). See
|
|
> [Troubleshooting](troubleshooting.md).
|
|
|
|
## Prerequisites
|
|
|
|
- Kubernetes 1.27+ (or comparable)
|
|
- Helm 3.14+
|
|
|
|
## Install
|
|
|
|
```bash
|
|
helm upgrade --install ovirt-sim ./helm/ovirt-api-simulator \
|
|
-n ovirt-sim --create-namespace \
|
|
--set image.repository=inecs/ovirt-api-simulator \
|
|
--set image.tag=0.1.0 \
|
|
--set config.ovirtSeries=4.5 \
|
|
--set seed.profile=minimal \
|
|
--set secrets.ticketSigningKey="$(openssl rand -hex 32)"
|
|
```
|
|
|
|
For a locally built image, set `image.repository` / `image.tag` to match what
|
|
you loaded into the cluster.
|
|
|
|
Render locally:
|
|
|
|
```bash
|
|
make helm-template
|
|
```
|
|
|
|
## Important values
|
|
|
|
| Value | Purpose |
|
|
|---|---|
|
|
| `image.repository` / `image.tag` | Container image (default `inecs/ovirt-api-simulator:0.1.0`) |
|
|
| `config.ovirtSeries` | Cold-start pack (`4.5`, `3.6`, …) |
|
|
| `seed.enabled` / `seed.profile` | Post-install seed Job |
|
|
| `postgresql.enabled` | Bundled database |
|
|
| `databaseUrl` | External DSN when `postgresql.enabled=false` |
|
|
| `secrets.ticketSigningKey` | Rotate on shared clusters |
|
|
| `service.port` | Service port (default `8080`) |
|
|
|
|
See [`values.yaml`](../helm/ovirt-api-simulator/values.yaml).
|
|
|
|
## Access
|
|
|
|
Port-forward the simulator Service:
|
|
|
|
```bash
|
|
kubectl -n ovirt-sim port-forward svc/<release>-ovirt-api-simulator 8080:8080
|
|
```
|
|
|
|
Then:
|
|
|
|
| Surface | URL |
|
|
|---|---|
|
|
| Engine API | http://127.0.0.1:8080/ovirt-engine/api |
|
|
| SSO token | http://127.0.0.1:8080/ovirt-engine/sso/oauth/token |
|
|
| Web UI | http://127.0.0.1:8080/ |
|
|
| OpenAPI | http://127.0.0.1:8080/docs |
|
|
|
|
Default seeded login: `admin@internal` / `secret`.
|
|
|
|
## Manual reseed
|
|
|
|
```bash
|
|
kubectl exec deploy/<release>-ovirt-api-simulator -- \
|
|
python -m app.ovirt.seed_cli --profile demo
|
|
```
|