91 lines
3.7 KiB
YAML
91 lines
3.7 KiB
YAML
---
|
|
argument_specs:
|
|
main:
|
|
short_description: Install Red Hat OpenShift AI 3.5 with Models-as-a-Service
|
|
description:
|
|
- Installs Red Hat Connectivity Link, Leader Worker Set and the RHOAI operator via OLM,
|
|
configures User Workload Monitoring, the MaaS Gateway, Kuadrant and Authorino TLS,
|
|
creates the maas-db-config secret, and enables a minimal DataScienceCluster with
|
|
aigateway.modelsAsAService Managed.
|
|
- Registers in-cluster OpenAI-compatible servers as ExternalModels (Technology Preview)
|
|
and applies MaaSAuthPolicy / MaaSSubscription resources.
|
|
- PostgreSQL is not provisioned here; run cloudnativepg_operator first (see
|
|
playbooks/deploy_rhoai_maas.yml).
|
|
options:
|
|
rhoai_maas_operators:
|
|
description: OLM operators to install, in order (name, namespace, channel, optional
|
|
operator_group_target_namespaces and namespace_labels).
|
|
type: list
|
|
elements: dict
|
|
rhoai_maas_wait_timeout:
|
|
description: Seconds to wait for each operator, CRD, and deployment to become ready.
|
|
type: int
|
|
default: 900
|
|
rhoai_maas_hostname:
|
|
description: MaaS gateway hostname. Empty uses maas.<cluster ingress domain>.
|
|
type: str
|
|
default: ""
|
|
rhoai_maas_gateway_cert_secret:
|
|
description: >-
|
|
TLS Secret in openshift-ingress used by the Gateway HTTPS listener. Must be
|
|
a single-host cert, not the *.apps wildcard (browser HTTP/2 coalescing).
|
|
type: str
|
|
default: maas-gateway-tls
|
|
rhoai_maas_gateway_cert_issuer:
|
|
description: >-
|
|
cert-manager ClusterIssuer that issues rhoai_maas_gateway_cert_secret for the
|
|
MaaS hostname. Empty skips creating the Certificate.
|
|
type: str
|
|
default: letsencrypt-production
|
|
rhoai_maas_gateway_service_type:
|
|
description: Service type for the Gateway's generated Service.
|
|
type: str
|
|
choices: [ClusterIP, LoadBalancer, NodePort]
|
|
default: ClusterIP
|
|
rhoai_maas_gateway_create_route:
|
|
description: Create a passthrough Route on the default router to the Gateway Service.
|
|
type: bool
|
|
default: true
|
|
rhoai_maas_db_secret_name:
|
|
description: basic-auth Secret (username/password/host/port/database) for the MaaS database.
|
|
type: str
|
|
default: maas-postgres-secret
|
|
rhoai_maas_db_secret_namespace:
|
|
description: Namespace of rhoai_maas_db_secret_name.
|
|
type: str
|
|
default: rhoai-maas-db
|
|
rhoai_maas_db_sslmode:
|
|
description: libpq sslmode used in DB_CONNECTION_URL.
|
|
type: str
|
|
default: require
|
|
rhoai_maas_infra_namespace:
|
|
description: MaaS infrastructure namespace that holds maas-db-config (3.5+).
|
|
type: str
|
|
default: redhat-ai-gateway-infra
|
|
rhoai_maas_dsc_name:
|
|
description: DataScienceCluster name.
|
|
type: str
|
|
default: default-dsc
|
|
rhoai_maas_dsc_managed_components:
|
|
description: DSC components set to Managed.
|
|
type: list
|
|
elements: str
|
|
rhoai_maas_dsc_removed_components:
|
|
description: DSC components set to Removed.
|
|
type: list
|
|
elements: str
|
|
rhoai_maas_external_models:
|
|
description: In-cluster or external OpenAI-compatible endpoints to register as
|
|
ExternalProvider + ExternalModel + MaaSModelRef.
|
|
type: list
|
|
elements: dict
|
|
rhoai_maas_auth_policies:
|
|
description: MaaSAuthPolicy definitions (name, groups, users, model_refs).
|
|
type: list
|
|
elements: dict
|
|
rhoai_maas_subscriptions:
|
|
description: MaaSSubscription definitions (name, priority, groups, users, model_refs
|
|
with tokenRateLimits).
|
|
type: list
|
|
elements: dict
|