5 Deployment #

(Optional) - iLO Federation enables you to manage multiple servers from one system using the iLO web interface.

Setup the necessary items in the Hewlett Packard Enterprise OneView interface, including:

Add Servers and Assign Server Roles

Given the simplicity of the deployment, the operating system and hypervisor can be installed with the SUSE Linux Enterprise Server ISO media and the Hewlett Packard Enterprise Integrated Lights Out virtual media and virtual console methodology.

Domain Name Service (DNS) - an external network-accessible service to map IP Addresses to host names

Network Time Protocol (NTP) - an external network-accessible service to obtain and synchronize system times to aid in time stamp consistency

Software Update Service - access to a network-based repository for software update packages. This can be accessed directly from each node via registration to

Identify the appropriate, supported version of SUSE Linux Enterprise Server by reviewing the support matrix for SUSE Rancher versions Web page.

the "Installing SUSE Rancher on K3s" associated with the respective SUSE Rancher version, or

the "Releases" on the Download Web page.

enable and configure the necessary inbound ports or

stop and completely disable the firewall service.

Monitor the progress of the installation: watch -c "kubectl get deployments -A"

enable and configure the necessary inbound ports or

stop and completely disable the firewall service.

Rancher-generated TLS certificate NOTE: This is the easiest way of installing SUSE Rancher with self-signed certificates.

Let’s Encrypt

Bring your own certificate

Set the following variable with the desired version of cert-manager

CERT_MANAGER_VERSION=""

Note

At this time, the most current, supported version of cert-manager is v1.5.1

Create the cert-manager CRDs and apply the Helm Chart resource manifest

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/${CERT_MANAGER_VERSION}/cert-manager.crds.yaml

# Add the Jetstack Helm repository
helm repo add jetstack https://charts.jetstack.io

# Update your local Helm chart repository cache
helm repo update

# Install the cert-manager Helm chart
helm install cert-manager jetstack/cert-manager \
  --namespace cert-manager \
  --create-namespace \
  --version ${CERT_MANAGER_VERSION}

Set the following variable to the host name of the SUSE Rancher server instance

HOSTNAME=""

Note

This host name should be resolvable to an IP address of the K3s host, or a load balancer/proxy server that supports this installation of SUSE Rancher.

Set the following variable to the number of deployed K3s nodes planned to host the SUSE Rancher service

REPLICAS=""

Set the following variable to the desired version of SUSE Rancher server instance

RANCHER_VERSION=""

Install the SUSE Rancher Helm Chart

helm install rancher rancher-stable/rancher \
  --namespace cattle-system \
  --set hostname=${HOSTNAME} \
  --set replicas=${REPLICAS} \
  --version=${RANCHER_VERSION}

Create an SSH tunnel through the Linux host to the IP address of the SUSE Rancher server on the NodePort, as noted in Step 3:

ssh -N -D 8080 user@Linux-host

On the local workstation Web browser, change the SOCKS Host settings to "127.0.0.1" and port "8080".

Note

This will route all traffic from this Web browser through the remote Linux host. Be sure to close the tunnel and revert the SOCKS Host settings when you are done.

On a client system, use a Web browser to connect to the SUSE Rancher service, via HTTPs.

Provide a new Admin password.

Important

On the second configuration page, ensure the "Rancher Server URL" is set to the host name specified when installing the SUSE Rancher Helm Chart and the port is 443.