Testing latest power specifc images for strimzi/operator and strimzi/kafka

[Vaibhav-Nazare]

Hi we have been trying to test the latest images for power by deploying strimzi-cluster-operator and creating a kafka-cluster.

We are using following files:
https://github.com/strimzi/strimzi-kafka-operator/tree/main/packaging/install/cluster-operator
https://github.com/strimzi/strimzi-kafka-operator/tree/main/packaging/examples/kafka/nodepools

oc new-project strimzi

oc apply -f packaging/install/cluster-operator/
serviceaccount/strimzi-cluster-operator unchanged
clusterrole.rbac.authorization.k8s.io/strimzi-cluster-operator-namespaced unchanged
rolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator unchanged
clusterrole.rbac.authorization.k8s.io/strimzi-cluster-operator-global unchanged
clusterrolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator unchanged
clusterrole.rbac.authorization.k8s.io/strimzi-cluster-operator-leader-election unchanged
rolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator-leader-election unchanged
clusterrole.rbac.authorization.k8s.io/strimzi-cluster-operator-watched unchanged
rolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator-watched unchanged
clusterrole.rbac.authorization.k8s.io/strimzi-kafka-broker unchanged
clusterrolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator-kafka-broker-delegation unchanged
clusterrole.rbac.authorization.k8s.io/strimzi-entity-operator unchanged
rolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator-entity-operator-delegation unchanged
clusterrole.rbac.authorization.k8s.io/strimzi-kafka-client unchanged
clusterrolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator-kafka-client-delegation unchanged
customresourcedefinition.apiextensions.k8s.io/kafkas.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkaconnects.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/strimzipodsets.core.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkatopics.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkausers.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkamirrormakers.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkabridges.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkaconnectors.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkamirrormaker2s.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkarebalances.kafka.strimzi.io unchanged
customresourcedefinition.apiextensions.k8s.io/kafkanodepools.kafka.strimzi.io unchanged
configmap/strimzi-cluster-operator unchanged
Warning: would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "strimzi-cluster-operator" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "strimzi-cluster-operator" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "strimzi-cluster-operator" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "strimzi-cluster-operator" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
deployment.apps/strimzi-cluster-operator configured

oc get all
NAME                                            READY   STATUS    RESTARTS   AGE
pod/strimzi-cluster-operator-7f869db647-9zdrl   1/1     Running   0          94s

NAME                                       READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/strimzi-cluster-operator   1/1     1            1           95s

NAME                                                  DESIRED   CURRENT   READY   AGE
replicaset.apps/strimzi-cluster-operator-7f869db647   1         1         1       95s

oc describe deployment.apps/strimzi-cluster-operator
Name:                   strimzi-cluster-operator
Namespace:              strimzi
CreationTimestamp:      Tue, 01 Aug 2023 16:51:04 +0000
Labels:                 app=strimzi
Annotations:            deployment.kubernetes.io/revision: 1
Selector:               name=strimzi-cluster-operator,strimzi.io/kind=cluster-operator
Replicas:               1 desired | 1 updated | 1 total | 1 available | 0 unavailable
StrategyType:           RollingUpdate
MinReadySeconds:        0
RollingUpdateStrategy:  25% max unavailable, 25% max surge
Pod Template:
  Labels:           name=strimzi-cluster-operator
                    strimzi.io/kind=cluster-operator
  Service Account:  strimzi-cluster-operator
  Containers:
   strimzi-cluster-operator:
    Image:      quay.io/strimzi/operator:latest
    Port:       8080/TCP
    Host Port:  0/TCP
    Args:
      /opt/strimzi/bin/cluster_operator_run.sh
    Limits:
      cpu:     1
      memory:  384Mi
    Requests:
      cpu:      200m
      memory:   384Mi
    Liveness:   http-get http://:http/healthy delay=10s timeout=1s period=30s #success=1 #failure=3
    Readiness:  http-get http://:http/ready delay=10s timeout=1s period=30s #success=1 #failure=3
    Environment:
      STRIMZI_NAMESPACE:                                   (v1:metadata.namespace)
      STRIMZI_FULL_RECONCILIATION_INTERVAL_MS:            120000
      STRIMZI_OPERATION_TIMEOUT_MS:                       300000
      STRIMZI_DEFAULT_TLS_SIDECAR_ENTITY_OPERATOR_IMAGE:  quay.io/strimzi/kafka:latest-kafka-3.5.1
      STRIMZI_DEFAULT_KAFKA_EXPORTER_IMAGE:               quay.io/strimzi/kafka:latest-kafka-3.5.1
      STRIMZI_DEFAULT_CRUISE_CONTROL_IMAGE:               quay.io/strimzi/kafka:latest-kafka-3.5.1
      STRIMZI_KAFKA_IMAGES:                               3.4.0=quay.io/strimzi/kafka:latest-kafka-3.4.0
                                                          3.4.1=quay.io/strimzi/kafka:latest-kafka-3.4.1
                                                          3.5.0=quay.io/strimzi/kafka:latest-kafka-3.5.0
                                                          3.5.1=quay.io/strimzi/kafka:latest-kafka-3.5.1
                                                          
      STRIMZI_KAFKA_CONNECT_IMAGES:                       3.4.0=quay.io/strimzi/kafka:latest-kafka-3.4.0
                                                          3.4.1=quay.io/strimzi/kafka:latest-kafka-3.4.1
                                                          3.5.0=quay.io/strimzi/kafka:latest-kafka-3.5.0
                                                          3.5.1=quay.io/strimzi/kafka:latest-kafka-3.5.1
                                                          
      STRIMZI_KAFKA_MIRROR_MAKER_IMAGES:                  3.4.0=quay.io/strimzi/kafka:latest-kafka-3.4.0
                                                          3.4.1=quay.io/strimzi/kafka:latest-kafka-3.4.1
                                                          3.5.0=quay.io/strimzi/kafka:latest-kafka-3.5.0
                                                          3.5.1=quay.io/strimzi/kafka:latest-kafka-3.5.1
                                                          
      STRIMZI_KAFKA_MIRROR_MAKER_2_IMAGES:                3.4.0=quay.io/strimzi/kafka:latest-kafka-3.4.0
                                                          3.4.1=quay.io/strimzi/kafka:latest-kafka-3.4.1
                                                          3.5.0=quay.io/strimzi/kafka:latest-kafka-3.5.0
                                                          3.5.1=quay.io/strimzi/kafka:latest-kafka-3.5.1
                                                          
      STRIMZI_DEFAULT_TOPIC_OPERATOR_IMAGE:               quay.io/strimzi/operator:latest
      STRIMZI_DEFAULT_USER_OPERATOR_IMAGE:                quay.io/strimzi/operator:latest
      STRIMZI_DEFAULT_KAFKA_INIT_IMAGE:                   quay.io/strimzi/operator:latest
      STRIMZI_DEFAULT_KAFKA_BRIDGE_IMAGE:                 quay.io/strimzi/kafka-bridge:0.26.1
      STRIMZI_DEFAULT_KANIKO_EXECUTOR_IMAGE:              quay.io/strimzi/kaniko-executor:latest
      STRIMZI_DEFAULT_MAVEN_BUILDER:                      quay.io/strimzi/maven-builder:latest
      STRIMZI_OPERATOR_NAMESPACE:                          (v1:metadata.namespace)
      STRIMZI_FEATURE_GATES:                              
      STRIMZI_LEADER_ELECTION_ENABLED:                    true
      STRIMZI_LEADER_ELECTION_LEASE_NAME:                 strimzi-cluster-operator
      STRIMZI_LEADER_ELECTION_LEASE_NAMESPACE:             (v1:metadata.namespace)
      STRIMZI_LEADER_ELECTION_IDENTITY:                    (v1:metadata.name)
    Mounts:
      /opt/strimzi/custom-config/ from co-config-volume (rw)
      /tmp from strimzi-tmp (rw)
  Volumes:
   strimzi-tmp:
    Type:       EmptyDir (a temporary directory that shares a pod's lifetime)
    Medium:     Memory
    SizeLimit:  1Mi
   co-config-volume:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      strimzi-cluster-operator
    Optional:  false
Conditions:
  Type           Status  Reason
  ----           ------  ------
  Available      True    MinimumReplicasAvailable
  Progressing    True    NewReplicaSetAvailable
OldReplicaSets:  <none>
NewReplicaSet:   strimzi-cluster-operator-7f869db647 (1/1 replicas created)
Events:
  Type    Reason             Age        From                   Message
  ----    ------             ----       ----                   -------
  Normal  ScalingReplicaSet  <invalid>  deployment-controller  Scaled up replica set strimzi-cluster-operator-7f869db647 to 1

After deploying kafka-cluster the cluster doesn't seem to be up and running

oc apply -n strimzi -f packaging/examples/kafka/nodepools/kafka.yaml 
kafkanodepool.kafka.strimzi.io/pool-a created
kafkanodepool.kafka.strimzi.io/pool-b created
kafka.kafka.strimzi.io/my-cluster created

oc get all -n strimzi
NAME                                            READY   STATUS    RESTARTS   AGE
pod/strimzi-cluster-operator-7f869db647-9zdrl   1/1     Running   0          3m21s

NAME                                       READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/strimzi-cluster-operator   1/1     1            1           3m25s

NAME                                                  DESIRED   CURRENT   READY   AGE
replicaset.apps/strimzi-cluster-operator-7f869db647   1         1         1       3m25s

Any pointers on what we are missing here?

[scholzj]

Why are you using the NodePool examples? You did not enabled the feature gate, so they would not work.

[Vaibhav-Nazare]

@scholzj Can you please give me some pointers on how to do it?

[scholzj]

This should get you started: https://strimzi.io/docs/operators/latest/full/deploying.html#ref-operator-cluster-feature-gates-str ... but if you just want to try the ppc64le images, you can simply try one of the Kafka examples without Node Pools.