|
| 1 | +# RHAII Helm Chart |
| 2 | + |
| 3 | +Red Hat OpenShift AI Operator Helm chart for non-OLM installation. |
| 4 | + |
| 5 | +This chart installs the RHAI operator and its cloud manager components. Exactly one cloud provider (Azure or CoreWeave) must be enabled. |
| 6 | + |
| 7 | +## Prerequisites |
| 8 | + |
| 9 | +- Kubernetes cluster |
| 10 | +- Helm 3.x |
| 11 | +- Cluster-admin privileges (the chart creates CRDs, ClusterRoles, and namespaces) |
| 12 | + |
| 13 | +## Installation |
| 14 | + |
| 15 | +### Azure |
| 16 | + |
| 17 | +```bash |
| 18 | +helm upgrade rhaii ./charts/rhaii-helm-chart/ \ |
| 19 | + --install --create-namespace \ |
| 20 | + --namespace rhaii \ |
| 21 | + --set azure.enabled=true |
| 22 | +``` |
| 23 | + |
| 24 | +### CoreWeave |
| 25 | + |
| 26 | +```bash |
| 27 | +helm upgrade rhaii ./charts/rhaii-helm-chart/ \ |
| 28 | + --install --create-namespace \ |
| 29 | + --namespace rhaii \ |
| 30 | + --set coreweave.enabled=true |
| 31 | +``` |
| 32 | + |
| 33 | +> **Note:** `helm install --wait` (or `helm upgrade --install --wait` the first time) is not supported at this stage. The chart uses post-install hooks (Jobs) to create Custom Resources after the operators are deployed. These hooks require the CRDs to be registered, but without the Custom Resource the rhods-operator will not start correctly because it needs the cert-manager, which means the `--wait` flag may cause the installation to time out or fail. |
| 34 | +
|
| 35 | +## What the Chart Installs |
| 36 | + |
| 37 | +The chart deploys the following resources: |
| 38 | + |
| 39 | +1. **RHAI Operator** — Deployment, ServiceAccount, RBAC, webhooks, and CRDs in the operator namespace |
| 40 | +2. **Cloud Manager** (Azure or CoreWeave) — Deployment, ServiceAccount, RBAC, and CRDs for the selected cloud provider |
| 41 | +3. **Post-install Job** — A Helm hook that automatically creates the required Custom Resources (Kserve, AzureKubernetesEngine, or CoreWeaveKubernetesEngine) after install/upgrade |
| 42 | + |
| 43 | +### Custom Resources Created by Post-install Hook |
| 44 | + |
| 45 | +The post-install Job creates the following CRs (configurable via values): |
| 46 | + |
| 47 | +- **Kserve** — Created when `components.kserve.enabled=true` (default) |
| 48 | +- **AzureKubernetesEngine** — Created when `azure.enabled=true` and `azure.kubernetesEngine.enabled=true` (default) |
| 49 | +- **CoreWeaveKubernetesEngine** — Created when `coreweave.enabled=true` and `coreweave.kubernetesEngine.enabled=true` (default) |
| 50 | + |
| 51 | +You can customize the spec of each CR through values. For example: |
| 52 | + |
| 53 | +```yaml |
| 54 | +azure: |
| 55 | + enabled: true |
| 56 | + kubernetesEngine: |
| 57 | + spec: |
| 58 | + dependencies: |
| 59 | + certManager: |
| 60 | + managementPolicy: Unmanaged |
| 61 | +``` |
| 62 | +
|
| 63 | +Set `managementPolicy: Unmanaged` for any dependency you want to manage yourself. |
| 64 | + |
| 65 | +## Configuration |
| 66 | + |
| 67 | +| Parameter | Description | Default | |
| 68 | +| --- | --- | --- | |
| 69 | +| `enabled` | Enable/disable all resource creation | `true` | |
| 70 | +| `installCRDs` | Install CRDs with the chart | `true` | |
| 71 | +| `labels` | Common labels applied to all resources | `{}` | |
| 72 | +| `imagePullSecrets` | Image pull secrets for private registries | `[]` | |
| 73 | +| **RHAI Operator** | | | |
| 74 | +| `rhaiOperator.namespace` | Operator namespace | `redhat-ods-operator` | |
| 75 | +| `rhaiOperator.applicationsNamespace` | Applications namespace | `redhat-ods-applications` | |
| 76 | +| `rhaiOperator.image` | Operator container image | `quay.io/opendatahub/opendatahub-operator:latest` | |
| 77 | +| `rhaiOperator.relatedImages` | Related images env vars (`RELATED_IMAGE_*`) | `{}` | |
| 78 | +| **Components** | | | |
| 79 | +| `components.kserve.enabled` | Create Kserve CR via post-install hook | `true` | |
| 80 | +| `components.kserve.spec` | Kserve CR spec | `{}` | |
| 81 | +| **Azure** | | | |
| 82 | +| `azure.enabled` | Enable Azure cloud provider | `false` | |
| 83 | +| `azure.cloudManager.namespace` | Azure Cloud Manager namespace | `rhai-cloudmanager-system` | |
| 84 | +| `azure.cloudManager.image` | Azure Cloud Manager image | `quay.io/opendatahub/opendatahub-operator:latest` | |
| 85 | +| `azure.kubernetesEngine.enabled` | Create AzureKubernetesEngine CR via post-install hook | `true` | |
| 86 | +| `azure.kubernetesEngine.spec` | AzureKubernetesEngine CR spec | See [values.yaml](values.yaml) | |
| 87 | +| **CoreWeave** | | | |
| 88 | +| `coreweave.enabled` | Enable CoreWeave cloud provider | `false` | |
| 89 | +| `coreweave.cloudManager.namespace` | CoreWeave Cloud Manager namespace | `rhai-cloudmanager-system` | |
| 90 | +| `coreweave.cloudManager.image` | CoreWeave Cloud Manager image | `quay.io/opendatahub/opendatahub-operator:latest` | |
| 91 | +| `coreweave.kubernetesEngine.enabled` | Create CoreWeaveKubernetesEngine CR via post-install hook | `true` | |
| 92 | +| `coreweave.kubernetesEngine.spec` | CoreWeaveKubernetesEngine CR spec | See [values.yaml](values.yaml) | |
| 93 | + |
| 94 | +## Testing with kind |
| 95 | + |
| 96 | +You can test the chart locally using [kind](https://kind.sigs.k8s.io/). |
| 97 | + |
| 98 | +### Create a cluster |
| 99 | + |
| 100 | +```bash |
| 101 | +kind create cluster --name rhoai --config ./kind.config.yaml |
| 102 | +``` |
| 103 | + |
| 104 | +An example `kind.config.yaml` that uses local container registry credentials: |
| 105 | + |
| 106 | +```yaml |
| 107 | +kind: Cluster |
| 108 | +apiVersion: kind.x-k8s.io/v1alpha4 |
| 109 | +nodes: |
| 110 | + - role: control-plane |
| 111 | + extraMounts: |
| 112 | + - hostPath: /path/to/your/auth.json |
| 113 | + containerPath: /var/lib/kubelet/config.json |
| 114 | +``` |
| 115 | + |
| 116 | +This mounts a local `auth.json` into the kind node so it can pull images from private registries. Set `hostPath` to the actual path of your container credentials file (e.g. `$HOME/.config/containers/auth.json` or `$XDG_RUNTIME_DIR/containers/auth.json`, depending on your system). |
| 117 | + |
| 118 | +Alternatively, the chart supports `imagePullSecrets` — see the [Configuration](#configuration) section. |
| 119 | + |
| 120 | +### Install the chart |
| 121 | + |
| 122 | +```bash |
| 123 | +helm upgrade rhaii ./charts/rhaii-helm-chart/ \ |
| 124 | + --install --create-namespace \ |
| 125 | + --namespace rhaii \ |
| 126 | + --set azure.enabled=true |
| 127 | +``` |
| 128 | + |
| 129 | +## Uninstall |
| 130 | + |
| 131 | +```bash |
| 132 | +helm uninstall rhaii -n rhaii |
| 133 | +``` |
| 134 | + |
| 135 | +CRDs are **not** removed on uninstall (`helm.sh/resource-policy: keep`). To remove them manually: |
| 136 | + |
| 137 | +```bash |
| 138 | +kubectl delete crd kserves.components.platform.opendatahub.io |
| 139 | +kubectl delete crd azurekubernetesengines.infrastructure.opendatahub.io |
| 140 | +kubectl delete crd coreweavekubernetesengines.infrastructure.opendatahub.io |
| 141 | +``` |
0 commit comments