Node management

Ensure that you meet the following requirements:

• The NodeSecurityProfile resource (for TLS) must be configured to ensure successful onboarding. For details, see Node security profile.

• A node requires the relevant EDA-CE license resource to be applied. Without this license, the node may not move to the READY state.

  apiVersion: core.eda.nokia.com/v1
  kind: License
  metadata:
    name: eda-license
    namespace: eda-system
  spec:
    enabled: true
    data: "ACoAgOlJq7AABoAU6V6W6XAERezbcYa+ZRZLg8M5IyqMgAABAATAEVEQS1bQkNdLTAuMC4qAAACABIATm9raWEuY29tLOVEQQAAAMAAMQCjorJ+SPKP3if9pcD3OhqlyaWK1VE89JWreOWkyOJcbIWO602C+iwp+FFp8AwAAAADAB4ARWRhIGxpY2Vuc2UgSW50ZXJuYWwgVGVzdAAAAAUAHADl0zNnAAAAAABgKWcAAAAAADohaAAAAADAACQAoKr6XCCQCZj1rWFYik1dGbiqG7TWRK2orh+0sjUKXNYBACkAMDAwMDAwMDAtMDAwMC0wMDAwLTAwMDAtMDAwMDAwMDAwMDAwAAAAAAYADAABAAQAAAAAAMAAMAC/KQqX7Di/m1d0zYz9quIyghaHatF0yDvDgK/fFr011Wa/7FN3LO/OoD3aHg8AXQFkOEh6ejQrTlFyNmVJNTNsVW9SMi9JV2xXd1NqMUF3QVh0eEd6LzhGdlp0WXphTkdOQ1RWRnNCQ3wwZ0p2b21pSDNiZHFTSFBYQ2R6d0xxVlNhM3FZZUZuL1BGMnhoSjN6OS8yS3RlVGpmUngreWFNS1NwZ0p5OE12YlBVbmw2TUFpNHRXR1g4U3R0WXFBN21uVUNhVHp5eXpLOWtXcWgwZVZtR1oyV09RTURML0thaWY1RGMva21tc0NVY042RUdNZUNiTmdvV2RKUFlXZ1o4c2hlaG03b2tsZHdsSDBxMXZWdjhHMjZ4OVUxbTd2ellBN3BDNkFXODJyZ3FsaExWTUJxYm11VDdKSzdPWWhzYVp4Q3h4a2lIbWZ5KytNY3FLVHFBUk1McWhYRzRIb290ME0xK1RaRVZTdUJKNFl5a3pkeHdVV3pGZGRZdjg5Ym5uUHBsdXc9PQAAAAA="

• If the deployment uses EDA DHCP for bootstrapping, the GlobalConfig and UdpProxy CRs may be needed.

  Following is an example of GlobalConfig resource:

  apiVersion: v1
  items:
    - apiVersion: core.eda.nokia.com/v1
      kind: GlobalConfig
      metadata:
        name: global
        namespace: eda-system
      spec:
        dhcp:
          domainName: mv1-3.dclab.nuq.ion.nokia.net
          httpPort: 9200
          httpsPort: 9443
          ipv4Address: 10.11.12.13
          ipv6Address: 3001:cafe:11::2
  kind: List
  metadata:
    resourceVersion: ""

  Following is an example of a UdpProxy resource:

  apiVersion: v1
  items:
    - apiVersion: core.eda.nokia.com/v1
      kind: UdpProxy
      metadata:
        annotations:
          config.k8s.io/owning-inventory: aeb8a5709fd9a90c89d3d3dcc1d9c3817f2618ae-1732279916926223978
          kubectl.kubernetes.io/last-applied-configuration: >
            {"apiVersion":"core.eda.nokia.com/v1","kind":"UdpProxy","metadata":{"annotations":{"config.k8s.io/owning-inventory":"aeb8a5709fd9a90c89d3d3dcc1d9c3817f2618ae-1732279916926223978"},"name":"eda-dhcp","namespace":"eda-system"},"spec":{"bufferSize":65535,"destHost":"eda-dhcp","destPort":67,"idleTimeout":60,"proxyPort":67}}
        name: eda-dhcp
        namespace: eda-system
      spec:
        bufferSize: 65535
        destHost: eda-dhcp
        destPort: 67
        idleTimeout: 60
        proxyPort: 67
    - apiVersion: core.eda.nokia.com/v1
      kind: UdpProxy
      metadata:
        annotations:
          config.k8s.io/owning-inventory: aeb8a5709fd9a90c89d3d3dcc1d9c3817f2618ae-1732279916926223978
          kubectl.kubernetes.io/last-applied-configuration: >
            {"apiVersion":"core.eda.nokia.com/v1","kind":"UdpProxy","metadata":{"annotations":{"config.k8s.io/owning-inventory":"aeb8a5709fd9a90c89d3d3dcc1d9c3817f2618ae-1732279916926223978"},"name":"eda-dhcp6","namespace":"eda-system"},"spec":{"bufferSize":65535,"destHost":"eda-dhcp6","destPort":547,"idleTimeout":60,"proxyPort":547}}
        name: eda-dhcp6
        namespace: eda-system
      spec:
        bufferSize: 65535
        destHost: eda-dhcp6
        destPort: 547
        idleTimeout: 60
        proxyPort: 547
  kind: List
  metadata:
    resourceVersion: ""
  

• The init and relevant images must be downloaded to the artifacts server.

  The following resource must be present:

  apiVersion: v1
  kind: Secret
  metadata:
    name: srl-node-cred
    namespace: eda
  type: Opaque
  data:
    username: YWRtaW4=
    password: Tm9raWFTcmwxIQ==
  ---
  apiVersion: v1
  kind: Secret
  metadata:
    name: srl-ftp-cred
    namespace: eda
  type: Opaque
  data:
    username: ZnRwdXNlcg==
    password: U2ghbmluZyR0YXIxIQ==
  ---
  apiVersion: artifacts.eda.nokia.com/v1
  kind: Artifact
  metadata:
    name: srlinux-24.10.1-492
    namespace: eda
  spec:
    repo: images
    filePath: srl.bin
    remoteFileUrl:
      fileUrl: ftp://10.10.10.10/eda/srl_images/srlinux-24.10.1-492.bin
    secret: srl-ftp-cred
  ---
  apiVersion: artifacts.eda.nokia.com/v1
  kind: Artifact
  metadata:
    name: srlinux-24.10.1-492-md5
    namespace: eda
  spec:
    repo: images
    filePath: srl.bin.md5
    remoteFileUrl:
      fileUrl: ftp://10.10.10.10/eda/srl_images/srlinux-24.10.1-492.bin.md5
    secret: srl-ftp-cred
  ---
  apiVersion: artifacts.eda.nokia.com/v1
  kind: Artifact
  metadata:
    name: sros-iom-24-10-r4
    namespace: eda
  spec:
    repo: images
    filePath: iom.tim
    remoteFileUrl:
      fileUrl: ftp://10.10.10.10/fsp/sros_images/24.10.r4/iom.tim
    secret: srl-ftp-cred
  ---
  apiVersion: artifacts.eda.nokia.com/v1
  kind: Artifact
  metadata:
    name: sros-both-24-10-r4
    namespace: eda
  spec:
    repo: images
    filePath: both.tim
    remoteFileUrl:
      fileUrl: ftp://10.10.10.10/fsp/sros_images/24.10.r4/both.tim
    secret: srl-ftp-cred
  ---
  apiVersion: artifacts.eda.nokia.com/v1
  kind: Artifact
  metadata:
    name: sros-support-24-10-r4
    namespace: eda
  spec:
    repo: images
    filePath: support.tim
    remoteFileUrl:
      fileUrl: ftp://10.10.10.10/fsp/sros_images/24.10.r4/support.tim
    secret: srl-ftp-cred
  ---
  apiVersion: artifacts.eda.nokia.com/v1
  kind: Artifact
  metadata:
    name: sros-cpm-24-10-r4
    namespace: eda
  spec:
    repo: images
    filePath: cpm.tim
    remoteFileUrl:
      fileUrl: ftp://10.10.10.10/fsp/sros_images/24.10.r4/cpm.tim
    secret: srl-ftp-cred
  ---
  apiVersion: artifacts.eda.nokia.com/v1
  kind: Artifact
  metadata:
    name: sros-kernel-24-10-r4
    namespace: eda
  spec:
    repo: images
    filePath: kernel.tim
    remoteFileUrl:
      fileUrl: ftp://10.10.10.10/fsp/sros_images/24.10.r4/kernel.tim
    secret: srl-ftp-cred
  ---

To enable the IPv4 and IPv6 DHCP clients on the management interface, in the Init resource, include the following entries in the mgmt context:

ipv4DHCP: true

ipv6DHCP: true

apiVersion: bootstrap.eda.nokia.com/v1alpha1
kind: Init
metadata:
  name: init-config
spec:
  nodeSelector:
  - 'eda.nokia.com/role=leaf'
  - 'eda.nokia.com/role=spine'
  - 'eda.nokia.com/role=borderleaf'
  - 'eda.nokia.com/role=superspine'
  - 'eda.nokia.com/role=backbone'
  mgmt:
    ipv4DHCP: true
    ipv6DHCP: true
    ipMTU: 9000

To set the management IP address statically, the init script must use the productionAddress setting from the Toponode resource as the IPv4 or IPv6 address in the generated configuration.

The init script sets the address as either IPv4 or IPv6 and sets the prefix length.

The table below displays the different combinations of ipv4DHCP, ipv6DHCP and productionAddress settings and the corresponding resulting initial configuration.

apiVersion: bootstrap.eda.nokia.com/v1alpha1
kind: Init
metadata:
  name: init-config
spec:
  nodeSelector:
  - 'eda.nokia.com/role=leaf'
  - 'eda.nokia.com/role=spine'
  - 'eda.nokia.com/role=borderleaf'
  - 'eda.nokia.com/role=superspine'
  - 'eda.nokia.com/role=backbone'
  mgmt:
    ipv4DHCP: true
    ipv6DHCP: true
    ipMTU: 9000
    staticRoutes:
      - prefix: 10.10.0.0/16
        nextHop: 172.16.255.29
      - prefix: 2001:10:10::/64
        nextHop: "200::"