https://rancher.com/ logo
Join Slack
Powered by
This message was deleted.
# elemental
a
This message was deleted.
w
Hey Baboo! Yes, the nodes will be labeled according to the MachineRegistrations 
machineInventoryLabels
field. These labels can then be used in a 
MachineInventorySelectorTemplate
to select which nodes goes to which clusters. https://elemental.docs.rancher.com/machineinventoryselectortemplate-reference/
It's also possible to use SMBIOS/hardware data to add dynamic labels: https://elemental.docs.rancher.com/hardwarelabels so you only need one MachineRegistration for different clusters.
f
A single MachineRegistration for multiple clusters sounds appealing but only if this doesn’t have security implications. Would it be possible to determine based on the IP address of a node? From the SMBIOS link you sent it doesn’t seem to be.
Or let’s put it like this; in a multi tenant environment with lots of clusters what would be the easiest, cleanest but still secure way to add nodes to a specific cluster.
w
Great question! I would say the most secure way is to get the tpm hash beforehand from your vendor and prepopulate machineInventories with correct labels. That way when machines come online they will register and get the correct cluster. This is a bit of manual work but would be the most secure.
If you want to do it dynamically with IP-address you would probably need to write a small operator to check the 
<http://elemental.cattle.io/registration-ip|elemental.cattle.io/registration-ip>
of nodes and use that to set a label that you can use in a selector.
This is something we want to make smoother so if you have any suggestions or thoughts that would also be valuable! 👍
👍 1
Open in Slack
PreviousNext
Powered by