This is a cache of https://docs.openshift.com/container-platform/4.11/post_installation_configuration/index.html. It is a snapshot of the page at 2024-11-25T13:56:34.726+0000.
Post-installation configuration overview | Post-installation configuration | OpenShift Container Platform 4.11
    OpenShift docs are moving and will soon only be available at docs.redhat.com, the home of all Red Hat product documentation. Explore the new docs experience today.
  1. Documentation
    2. history
×

Postinstallation configuration overview

After installing OpenShift Container Platform, a cluster administrator can configure and customize the following components:

  • Machine

  • Bare metal

  • Cluster

  • Node

  • Network

  • Storage

  • Users

  • Alerts and notifications

Configuration tasks to perform after installation

Cluster administrators can perform the following postinstallation configuration tasks:

  • Configure operating system features: Machine Config Operator (MCO) manages MachineConfig objects. By using MCO, you can perform the following tasks on an OpenShift Container Platform cluster:

    • Configure nodes by using MachineConfig objects

    • Configure MCO-related custom resources

  • Configure bare metal nodes: The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts. It maintains an inventory of available bare metal hosts as instances of the BareMetalHost Custom Resource Definition (CRD). The Bare Metal Operator can:

    • Inspect the host’s hardware details and report them on the corresponding BareMetalHost. This includes information about CPUs, RAM, disks, NICs, and more.

    • Inspect the host’s firmware and configure BIOS settings.

    • Provision hosts with a desired image.

    • Clean a host’s disk contents before or after provisioning.

  • Configure cluster features: As a cluster administrator, you can modify the configuration resources of the major features of an OpenShift Container Platform cluster. These features include:

    • Image registry

    • Networking configuration

    • Image build behavior

    • Identity provider

    • The etcd configuration

    • Machine set creation to handle the workloads

    • Cloud provider credential management

  • Configure cluster components to be private: By default, the installation program provisions OpenShift Container Platform by using a publicly accessible DNS and endpoints. If you want your cluster to be accessible only from within an internal network, configure the following components to be private:

    • DNS

    • ingress Controller

    • API server

  • Perform node operations: By default, OpenShift Container Platform uses Red Hat Enterprise Linux CoreOS (RHCOS) compute machines. As a cluster administrator, you can perform the following operations with the machines in your OpenShift Container Platform cluster:

    • Add and remove compute machines

    • Add and remove taints and tolerations to the nodes

    • Configure the maximum number of pods per node

    • Enable Device Manager

  • Configure network: After installing OpenShift Container Platform, you can configure the following:

    • ingress cluster traffic

    • Node port service range

    • Network policy

    • Enabling the cluster-wide proxy

  • Configure storage: By default, containers operate using ephemeral storage or transient local storage. The ephemeral storage has a lifetime limitation. TO store the data for a long time, you must configure persistent storage. You can configure storage by using one of the following methods:

    • Dynamic provisioning: You can dynamically provision storage on demand by defining and creating storage classes that control different levels of storage, including storage access.

    • Static provisioning: You can use Kubernetes persistent volumes to make existing storage available to a cluster. Static provisioning can support various device configurations and mount options.

  • Configure users: OAuth access tokens allow users to authenticate themselves to the API. As a cluster administrator, you can configure OAuth to perform the following tasks:

  • Specify an identity provider

  • Use role-based access control to define and supply permissions to users

  • Install an Operator from OperatorHub

  • Manage alerts and notifications: By default, firing alerts are displayed on the Alerting UI of the web console. You can also configure OpenShift Container Platform to send alert notifications to external systems.