-
Epic
-
Resolution: Done
-
Undefined
-
None
-
Azure: Support Marketplace images for all nodes
-
BU Product Work
-
False
-
False
-
Green
-
Done
-
OCPSTRAT-482 - Support custom RHCOS image location for GCP and Azure
-
OCPSTRAT-482Support custom RHCOS image location for GCP and Azure
-
0% To Do, 0% In Progress, 100% Done
-
OCP/Telco Definition of Done
Epic Template descriptions and documentation.
<--- Cut-n-Paste the entire contents of this description into your new Epic --->
Epic Goal
- Simplify ARO's workflow by allowing Azure marketplace images to be specified in the `install-config.yaml` for all nodes (compute, control plane, and bootstrap).
Why is this important?
- ARO is a first party Azure service and has a number of requirements/restrictions. These requirements include the following: it must not request anything from outside of Azure and it must consume RHCOS VM images from a trusted source (marketplace).
- At the same time upstream OCP does the following:
-
- It uses quay.io to get container images.
- Uses a random blob as a RHCOS VM image such as this. This VHD blob is then uploaded by the Installer to an Image Gallery in the user’s Storage Account where two boot images are created: a HyperV gen1 and a HyperV gen2. See here.
To meet the requirements ARO team currently does the following as part of the release process:
-
- Mirror container images from quay.io to Azure Container Registry to avoid leaving Azure boundaries.
- Copy VM image from the blob in someone else's Azure subscription into the blob on the subscription ARO team manages and then publish a VM image on Azure Marketplace (publisher: azureopenshift, offer: aro4. See az vm image list --publisher azureopenshift --all). ARO does not bill for these images.
- ARO has to carry their own changes on top of the Installer code to allow them to specify their own images for the cluster deployment.
Scenarios
- ...
Acceptance Criteria
- Custom RHCOS images can be specified in the install-config for compute, controlPlane and defaultMachinePlatform and they are used for the installation instead of the default RHCOS VHD.
Out of scope
- A VHD blob will still be uploaded to the user's Storage Account even though it won't be used during installation. That cannot be changed for now.
Dependencies (internal and external)
- ...
Previous Work (Optional):
- …
Open questions::
- …
Done Checklist
- CI - CI is running, tests are automated and merged.
- Release Enablement <link to Feature Enablement Presentation>
- DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
- DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
- DEV - Downstream build attached to advisory: <link to errata>
- QE - Test plans in Polarion: <link or reference to Polarion>
- QE - Automated tests merged: <link or reference to automated tests>
- DOC - Downstream documentation merged: <link to meaningful PR>
- split from
-
CORS-1757 post-merge testing: Azure: Publish and leverage CoreOS Image coming from a trusted source
- Closed