https://developers.redhat.com/products/red-hat-openshift-service-on-aws/overview
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPs1K0CpZDWrWO8kWa8tvHH0onX5Q7ODMdgsIRGo7jbJ [email protected] |
- Information on the Cloud Credential Operator: https://github.com/openshift/cloud-credential-operator/blob/master/docs/sts.md
- Official documentation for STS on ROSA: https://docs.openshift.com/rosa/rosa_architecture/rosa-sts-about-iam-resources.html
- Official documentation for creating a ROSA cluster with STS: https://docs.openshift.com/rosa/rosa_install_access_delete_clusters/rosa-sts-creating-a-cluster-quickly.html
- Blog post about STS and ROSA: https://cloud.redhat.com/blog/what-is-aws-sts-and-how-does-red-hat-openshift-service-on-aws-rosa-use-sts
- Want to make your own STS enabled app? Step by step instructions: [http
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
[Unit] | |
Description=Node Exporter | |
Wants=network-online.target | |
After=network-online.target | |
[Service] | |
Type=simple | |
ExecStart=/usr/local/bin/node_exporter --collector.systemd --collector.processes | |
[Install] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
# Admin script for workshops | |
export AWS_ACCESS_KEY_ID=$(grep -A 2 my_aws_profile ~/.aws/credentials | grep aws_access_key_id | awk '{print $3}') | |
export AWS_SECRET_ACCESS_KEY=$(grep -A 2 my_aws_profile ~/.aws/credentials | grep aws_secret_access_key | awk '{print $3}') | |
export KOPS_STATE_STORE="s3://your-bucket-here" | |
deploy() { | |
echo $1 | |
cluster_name=$1 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
apiVersion: extensions/v1beta1 | |
kind: Deployment | |
metadata: | |
name: federation-controller-manager | |
namespace: federation | |
labels: | |
app: federated-cluster | |
spec: | |
template: | |
metadata: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
apiVersion: extensions/v1beta1 | |
kind: Deployment | |
metadata: | |
name: federation-apiserver | |
namespace: federation | |
labels: | |
app: federated-cluster | |
spec: | |
template: | |
metadata: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
core@sbpcore-hyp01 ~ $ etcdctl --endpoint 'http://127.0.0.1:4001' ls | |
Error: client: etcd cluster is unavailable or misconfigured | |
error #0: x509: cannot validate certificate for 10.0.1.14 because it doesn't contain any IP SANs | |
error #1: x509: cannot validate certificate for 10.0.0.12 because it doesn't contain any IP SANs | |
error #2: x509: cannot validate certificate for 10.0.2.11 because it doesn't contain any IP SANs |