Network Operator Application Notes 23.10.0 - Sphinx Test
1.0

universe-infra-control-plane

Chart version: 0.5.0-dev

AppVersion: 0.5.0-dev

Description: A Helm chart with Universe components for infrastructure cluster

Name

Version

Repository

universe-infra-admin-controller 0.5.0-dev built-in
universe-infra-api-gateway 0.5.0-dev built-in
universe-infra-catalog 0.5.0-dev built-in
universe-infra-provisioning-controller 0.5.0-dev built-in
universe-infra-provisioning-executor 0.5.0-dev built-in
universe-infra-provisioning-manager 0.5.0-dev built-in
universe-infra-resource-manager 0.5.0-dev built-in
universe-infra-workload-controller 0.5.0-dev built-in
universe-infra-workload-manager 0.5.0-dev built-in
universe-infra-workload-rule-manager 0.5.0-dev built-in

  • > global (object): global settings which will apply for all subcharts

    Default: see default values for nested options

  • > global.image.tag (string): this tag will be used for most images in all subcharts if tag doesn’t set explicitly fot the image

    Default:

    Copy
    Copied!
                

    null

  • > global.image.registry (string): this registry will be used for most images in all subcharts if registry doesn’t set explicitly fot the image

    Default:

    Copy
    Copied!
                

    null

  • > global.imagePullSecrets (list): imagePullSecrets will be added to all components. If imagePullSecrets explicitly set for a components then global value will be ignored for it.

    Default:

    Copy
    Copied!
                

    []

  • > global.provisioningCRNamespace (string): this namespace will be used for provisioning CRs. If not set, Helm release namespace will be used.

    Default:

    Copy
    Copied!
                

    null

  • > global.nodeSelector (object): nodeSelector will be added to all components. If nodeSelector explicitly set for a components then global value will be ignored for it.

    Default:

    Copy
    Copied!
                

    {}

  • > global.tolerations (list): tolerations will be added to all components. If tolerations explicitly set for a components then global value will be ignored for it.

    Default:

    Copy
    Copied!
                

    []

  • > global.ironicHostIP (string): ip for ironic host

    Default:

    Copy
    Copied!
                

    ""

  • > global.provisioningStorage.hostpath (string): hostpath is used by bootp and ironic

    Default:

    Copy
    Copied!
                

    "/share/provisioning"

  • > global.provisioningStorage.hostname (string): hostname is used by bootp and ironic

    Default:

    Copy
    Copied!
                

    ""

  • > universe-infra-admin-controller (object): settings for universe-infra-admin-controller subchart,

    Default: check universe-infra-admin-controller chart documentation

  • > universe-infra-admin-controller.enabled (bool): enables or disables deployment of universe-infra-admin-controller

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-resource-manager (object): settings for universe-infra-resource-manager subchart,

    Default: check universe-infra-resource-manager chart documentation

  • > universe-infra-resource-manager.enabled (bool): enables or disables deployment of universe-infra-resource-manager

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-resource-manager.service (object): service config for universe-infra-resource-manager

    Default:

    Copy
    Copied!
                

    { "name": "infraresource", "port": 9090 }

  • > universe-infra-provisioning-manager (object): settings for universe-infra-provisioning-manager subchart,

    Default: check universe-infra-provisioning-manager chart documentation

  • > universe-infra-provisioning-manager.enabled (bool): enables or disables deployment of universe-infra-provisioning-manager

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-provisioning-manager.service (object): service config for universe-infra-provisioning-manager

    Default:

    Copy
    Copied!
                

    { "name": "infraprovisioning", "port": 9090 }

  • > universe-infra-provisioning-controller (object): settings for universe-infra-provisioning-controller subchart,

    Default: check universe-infra-provisioning-controller chart documentation

  • > universe-infra-provisioning-controller.enabled (bool): enables or disables deployment of universe-infra-workload-controller

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-provisioning-executor (object): settings for universe-infra-provisioning-executor subchart,

    Default: check universe-infra-provisioning-executor chart documentation

  • > universe-infra-provisioning-executor.enabled (bool): enables or disables deployment of universe-infra-provisioning-executor

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-provisioning-executor.universe-infra-provisioning-mariadb.pv (object): pv for universe-infra-provisioning-mariadb

    Default:

    Copy
    Copied!
                

    { "hostname": "", "hostpath": "/share/mariadb", "name": "mariadb-pv" }

  • > universe-infra-provisioning-executor.universe-infra-provisioning-mariadb.pv.hostpath (string): hostpath is used by pv, specify the host path to store the mariadb data

    Default:

    Copy
    Copied!
                

    "/share/mariadb"

  • > universe-infra-provisioning-executor.universe-infra-provisioning-mariadb.pv.hostname (string): hostname is used by pv, specify a hostname for store the mariadb data

    Default:

    Copy
    Copied!
                

    ""

  • > universe-infra-provisioning-executor.universe-infra-provisioning-bootp.bootp.dnsmasq (object): dnsmasq configuration, refer https://linux.die.net/man/8/dnsmasq

    Default:

    Copy
    Copied!
                

    { "args": null }

  • > universe-infra-provisioning-executor.universe-infra-provisioning-bootp.bootp.dnsmasq.args (string): dhcp-boot: dnsmasq is providing a TFTP service. the filename is required here to enable network booting. Example: args: - –k - –interface=ens9f1 - –dhcp-range=192.168.0.100,192.168.0.200,12h - –dhcp-boot=efi/grubaa64-BlueField-3.9.2.12271.2.7.4.efi

    Default:

    Copy
    Copied!
                

    null

  • > universe-infra-api-gateway (object): settings for universe-infra-api-gateway subchart,

    Default: check universe-infra-api-gateway chart documentation

  • > universe-infra-api-gateway.enabled (bool): enables or disables deployment of universe-infra-resource-manager

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-api-gateway.envoy.config.upstream (object): upstream services

    Default:

    Copy
    Copied!
                

    { "universe-infra-catalog-manager": { "address": "infracatalog", "port": 9090, "prefixes": [ { "prefix": "/universe.catalog" } ] }, "universe-infra-provisioning-manager": { "address": "infraprovisioning", "port": 9090, "prefixes": [ { "prefix": "/universe.admin.provisioning" } ] }, "universe-infra-resource-manager": { "address": "infraresource", "port": 9090, "prefixes": [ { "prefix": "/universe.resource" } ] }, "universe-infra-workload-manager": { "address": "infraworkload", "port": 9090, "prefixes": [ { "idleTimeout": "0s", "prefix": "/universe.workload.v1.WorkloadService/" } ] }, "universe-infra-workload-rule-manager": { "address": "infraworkloadrule", "port": 9090, "prefixes": [ { "prefix": "/universe.workload.v1.WorkloadRuleService/" }, { "prefix": "/universe.admin.workload.v1.AdminWorkloadRuleService/" } ] } }

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-resource-manager (object): universe-infra-resource-manager upstream config

    Default:

    Copy
    Copied!
                

    { "address": "infraresource", "port": 9090, "prefixes": [ { "prefix": "/universe.resource" } ] }

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-resource-manager.prefixes (list): following prefixes will be routed to universe-infra-resource-manager upstream

    Default:

    Copy
    Copied!
                

    [ { "prefix": "/universe.resource" } ]

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-resource-manager.address (string): address of universe-infra-resource-manager upstream

    Default:

    Copy
    Copied!
                

    "infraresource"

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-resource-manager.port (int): port of universe-infra-resource-manager upstream

    Default:

    Copy
    Copied!
                

    9090

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-provisioning-manager (object): universe-infra-provisioning-manager upstream config

    Default:

    Copy
    Copied!
                

    { "address": "infraprovisioning", "port": 9090, "prefixes": [ { "prefix": "/universe.admin.provisioning" } ] }

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-provisioning-manager.prefixes (list): following prefixes will be routed to universe-infra-provisioning-manager upstream

    Default:

    Copy
    Copied!
                

    [ { "prefix": "/universe.admin.provisioning" } ]

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-provisioning-manager.address (string): address of universe-infra-provisioning-manager upstream

    Default:

    Copy
    Copied!
                

    "infraprovisioning"

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-provisioning-manager.port (int): port of universe-infra-provisioning-manager upstream

    Default:

    Copy
    Copied!
                

    9090

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-workload-manager (object): uuniverse-infra-workload-manager upstream config

    Default:

    Copy
    Copied!
                

    { "address": "infraworkload", "port": 9090, "prefixes": [ { "idleTimeout": "0s", "prefix": "/universe.workload.v1.WorkloadService/" } ] }

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-workload-manager.prefixes (list): following prefixes will be routed to universe-infra-workload-manager upstream

    Default:

    Copy
    Copied!
                

    [ { "idleTimeout": "0s", "prefix": "/universe.workload.v1.WorkloadService/" } ]

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-workload-manager.address (string): address of universe-infra-workload-manager upstream

    Default:

    Copy
    Copied!
                

    "infraworkload"

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-workload-manager.port (int): port of universe-infra-workload-manager upstream

    Default:

    Copy
    Copied!
                

    9090

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-workload-rule-manager (object): universe-infra-workload-rule-manager upstream config

    Default:

    Copy
    Copied!
                

    { "address": "infraworkloadrule", "port": 9090, "prefixes": [ { "prefix": "/universe.workload.v1.WorkloadRuleService/" }, { "prefix": "/universe.admin.workload.v1.AdminWorkloadRuleService/" } ] }

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-workload-rule-manager.prefixes (list): following prefixes will be routed to universe-infra-workload-rule-manager upstream

    Default:

    Copy
    Copied!
                

    [ { "prefix": "/universe.workload.v1.WorkloadRuleService/" }, { "prefix": "/universe.admin.workload.v1.AdminWorkloadRuleService/" } ]

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-workload-rule-manager.address (string): address of universe-infra-workload-rule-manager upstream

    Default:

    Copy
    Copied!
                

    "infraworkloadrule"

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-workload-rule-manager.port (int): port of universe-infra-workload-rule-manager upstream

    Default:

    Copy
    Copied!
                

    9090

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-catalog-manager (object): universe-infra-workload-catalog-manager upstream config

    Default:

    Copy
    Copied!
                

    { "address": "infracatalog", "port": 9090, "prefixes": [ { "prefix": "/universe.catalog" } ] }

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-catalog-manager.prefixes (list): following prefixes will be routed to universe-infra-catalog-manager upstream

    Default:

    Copy
    Copied!
                

    [ { "prefix": "/universe.catalog" } ]

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-catalog-manager.address (string): address of universe-infra-catalog-manager upstream

    Default:

    Copy
    Copied!
                

    "infracatalog"

  • > universe-infra-api-gateway.envoy.config.upstream.universe-infra-catalog-manager.port (int): port of universe-infra-catalog-manager upstream

    Default:

    Copy
    Copied!
                

    9090

  • > universe-infra-api-gateway.vaultAnnotations (object): default settings for integration with vault

    Default:

    Copy
    Copied!
                

    { "addAnnotations": false, "clientCertTTL": "24h", "serverCertCommonName": "api-gateway.local", "serverCertSecret": "pki_universe/issue/local" }

  • > universe-infra-api-gateway.service (object): service config for universe-infra-api-gateway

    Default:

    Copy
    Copied!
                

    { "name": "infra-api-gateway", "nodePort": 30001, "type": "NodePort" }

  • > universe-infra-workload-controller (object): settings for universe-infra-workload-controller subchart,

    Default: check universe-infra-workload-controller chart documentation

  • > universe-infra-workload-controller.enabled (bool): enables or disables deployment of universe-infra-workload-controller

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-workload-manager (object): settings for universe-infra-workload-manager subchart,

    Default: check universe-infra-workload-manager chart documentation

  • > universe-infra-workload-manager.enabled (bool): enables or disables deployment of universe-infra-workload-manager

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-workload-manager.service (object): service config for universe-infra-workload-manager

    Default:

    Copy
    Copied!
                

    { "name": "infraworkload", "port": 9090 }

  • > universe-infra-workload-rule-manager (object): settings for universe-infra-workload-rule-manager subchart,

    Default: check universe-infra-workload-rule-manager chart documentation

  • > universe-infra-workload-rule-manager.enabled (bool): enables or disables deployment of universe-infra-workload-rule-manager

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-workload-rule-manager.service (object): service config for universe-infra-workload-rule-manager

    Default:

    Copy
    Copied!
                

    { "name": "infraworkloadrule", "port": 9090 }

  • > universe-infra-catalog (object): settings for universe-infra-catalog subchart,

    Default: check universe-infra-catalog chart documentation

  • > universe-infra-catalog.enabled (bool): enables or disables deployment of universe-infra-catalog

    Default:

    Copy
    Copied!
                

    false

  • > universe-infra-catalog.universe-infra-catalog-manager (object): settings for universe-infra-catalog-manager subchart,

    Default: check universe-infra-catalog-manager chart documentation

  • > universe-infra-catalog.universe-infra-catalog-manager.service (object): service config for universe-infra-catalog-manager

    Default:

    Copy
    Copied!
                

    { "name": "infracatalog", "port": 9090 }

example-values-secure.yaml

Copy
Copied!
            

global: image: tag: latest registry: harbor.mellanox.com/cloud-orchestration-dev/ # imagePullSecrets: # - name: nvcrio-cred nodeSelector: node-role.kubernetes.io/control-plane: "" tolerations: - effect: NoSchedule operator: "Exists" key: node-role.kubernetes.io/master - effect: NoSchedule operator: "Exists" key: node-role.kubernetes.io/control-plane # -- ip for ironic host ironicHostIP: "" provisioningStorage: # -- hostpath is used by bootp and ironic hostpath: /share/provisioning # -- hostname is used by bootp and ironic hostname: "" universe-infra-admin-controller: enabled: true tenantConfig: create: true tenants: - id: tenant1 hostnames: - worker1 - id: tenant2 hostnames: - worker2 - worker3 dpuInventory: create: true dpus: - id: dpu-worker1 host: worker1 - id: dpu-worker2 host: worker2 universe-infra-resource-manager: enabled: true universe-infra-provisioning-manager: enabled: true universe-infra-provisioning-executor: enabled: true universe-infra-provisioning-mariadb: pv: name: mariadb-pv hostpath: /share/mariadb hostname: "" universe-infra-provisioning-bootp: bootp: # -- dnsmasq configuration, refer https://linux.die.net/man/8/dnsmasq dnsmasq: # -- dnsmasq configuration, refer https://linux.die.net/man/8/dnsmasq # args is a list of dnsmasq command parameters. You can set any parameters supported by dnsmasq. # --k, --interface, --dhcp-range and --dhcp-boot are required. # --k: do not go into the background at startup. # --interface: Listen only on the specified interface(s). # --dhcp-range: addresses will be given out from the range <start-addr> to <end-addr>. If the lease time is given, then leases will be given for that length of time. # --dhcp-boot: dnsmasq is providing a TFTP service. the filename is required here to enable network booting. # Example: # args: # - --k # - --interface=ens9f1 # - --dhcp-range=192.168.0.100,192.168.0.200,12h # - --dhcp-boot=efi/grubaa64-BlueField-3.9.2.12271.2.7.4.efi args: - --k - --interface=ens9f1 - --dhcp-range=192.168.0.100,192.168.0.200,12h - --dhcp-boot=efi/grubaa64-BlueField-3.9.2.12271.2.7.4.efi universe-infra-provisioning-controller: enabled: true universe-infra-workload-manager: enabled: true universe-infra-workload-rule-manager: enabled: true universe-infra-workload-controller: enabled: true universe-infra-api-gateway: enabled: true vaultApproleSecret: create: true roleID: dc15780f-1b8a-b285-f875-07d7930f4b95 # example roleID secretID: 98fbf93d-9441-0266-274f-b479a09b60e1 # example secretID vaultAnnotations: addAnnotations: true envoy: config: listener: serverTLS: enabled: true peerValidation: enabled: true universe-infra-catalog: enabled: true

example-values-dev.yaml

Copy
Copied!
            

global: image: tag: latest registry: harbor.mellanox.com/cloud-orchestration-dev/ # imagePullSecrets: # - name: nvcrio-cred nodeSelector: node-role.kubernetes.io/control-plane: "" tolerations: - effect: NoSchedule operator: "Exists" key: node-role.kubernetes.io/master - effect: NoSchedule operator: "Exists" key: node-role.kubernetes.io/control-plane # -- ip for ironic host ironicHostIP: "" provisioningStorage: # -- hostpath is used by bootp and ironic hostpath: /share/provisioning # -- hostname is used by bootp and ironic hostname: "" universe-infra-admin-controller: enabled: true tenantConfig: create: true tenants: - id: tenant1 hostnames: - worker1 - id: tenant2 hostnames: - worker2 - worker3 dpuInventory: create: true dpus: - id: dpu-worker1 host: worker1 - id: dpu-worker2 host: worker2 universe-infra-resource-manager: enabled: true universe-infra-provisioning-manager: enabled: true universe-infra-provisioning-executor: enabled: true universe-infra-provisioning-mariadb: pv: name: mariadb-pv hostpath: /share/mariadb hostname: "" universe-infra-provisioning-bootp: bootp: # -- dnsmasq configuration, refer https://linux.die.net/man/8/dnsmasq dnsmasq: # -- dnsmasq configuration, refer https://linux.die.net/man/8/dnsmasq # args is a list of dnsmasq command parameters. You can set any parameters supported by dnsmasq. # --k, --interface, --dhcp-range and --dhcp-boot are required. # --k: do not go into the background at startup. # --interface: Listen only on the specified interface(s). # --dhcp-range: addresses will be given out from the range <start-addr> to <end-addr>. If the lease time is given, then leases will be given for that length of time. # --dhcp-boot: dnsmasq is providing a TFTP service. the filename is required here to enable network booting. # Example: # args: # - --k # - --interface=ens9f1 # - --dhcp-range=192.168.0.100,192.168.0.200,12h # - --dhcp-boot=efi/grubaa64-BlueField-3.9.2.12271.2.7.4.efi args: - --k - --interface=ens9f1 - --dhcp-range=192.168.0.100,192.168.0.200,12h - --dhcp-boot=efi/grubaa64-BlueField-3.9.2.12271.2.7.4.efi universe-infra-provisioning-controller: enabled: true universe-infra-workload-manager: enabled: true universe-infra-workload-rule-manager: enabled: true universe-infra-workload-controller: enabled: true universe-infra-api-gateway: enabled: true universe-infra-catalog: enabled: true

Previous Helm Charts
Next universe-infra-admin-controller
© Copyright 2023, NVIDIA. Last updated on Feb 7, 2024.