Skip to content

Instantly share code, notes, and snippets.

@sridhargaddam
Created July 6, 2023 17:16
Show Gist options
  • Save sridhargaddam/ff5e49cf7d07ea259b085f9ea1fc7b24 to your computer and use it in GitHub Desktop.
Save sridhargaddam/ff5e49cf7d07ea259b085f9ea1fc7b24 to your computer and use it in GitHub Desktop.
Commands to deploy a nexodus agent as router in an OCP cluster.
oc create namespace nexodus
oc project nexodus
oc create serviceaccount -n nexodus nexodus
oc adm policy add-scc-to-user -z nexodus privileged
cat <<EOF | oc apply -f -
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: nexd
namespace: nexodus
labels:
name: nexd
spec:
selector:
matchLabels:
name: nexd
template:
metadata:
labels:
name: nexd
spec:
restartPolicy: Always
nodeSelector:
submariner.io/gateway: "true"
hostNetwork: true
hostAliases:
# IP of the machine running the Nexodus Service
- ip: 18.223.99.224
hostnames:
- try.nexodus.127.0.0.1.nip.io
- api.try.nexodus.127.0.0.1.nip.io
- auth.try.nexodus.127.0.0.1.nip.io
tolerations:
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: NoSchedule
- key: node-role.kubernetes.io/master
operator: Exists
effect: NoSchedule
containers:
- name: nexd
image: quay.io/sridhargaddam/nexd:pr1247
securityContext:
allowPrivilegeEscalation: true
capabilities:
add: [NET_ADMIN, NET_RAW, SYS_MODULE]
runAsNonRoot: false
privileged: true
readOnlyRootFilesystem: false
command:
- nexd
args:
- --username
- admin
- --password
- floofykittens
- --insecure-skip-tls-verify
- router
- --child-prefix
- "10.140.0.0/14"
- --child-prefix
- "172.40.0.0/16"
- https://try.nexodus.127.0.0.1.nip.io
serviceAccountName: nexodus
EOF
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment