Jon Keam jkeam

MAD Roadshow Links

Architecture

Nodes

The following is a good diagram of the various services running. Note, we can use infranodes to pull those cluster services from the compute nodes (things like registry, observability, monitoring, etc). Diagram from the docs.

Setup for Demo for GitLab with Rancher and OpenShift runners

Git Repo

The code for this project is here [email protected]:jkeam/spring-petclinic-pac.git and the file we should be using is .gitlab-ci-kube.yml so in the repo that's in GitLab, make sure to blow away the original .gitlab-ci.yml and rename .gitlab-ci-kube.yml to .gitlab-ci.yml.

GitLab Variables

Something like below:

Demo for GitLab with Rancher and OpenShift runners

Pre Demo

Generate new KUBE_CONFIG with fresh OCP token

Demo

OpenShift Project Request Template

Automatically create an EgressNetworkPolicy (note this is for OpenShiftSDN, for OVNKubernetes use EgressFirewall)

Before

oc new-project before
oc get EgressNetworkPolicy  # notice nothing is returned

	apiVersion: v1
	kind: Pod
	metadata:
	name: podman-priv
	spec:
	containers:
	- name: priv
	image: quay.io/podman/stable:v4.4.1
	args:
	- sleep

	# Pod Security Admission Demo

	## Part 1 - What is this

	1. New Project:
	oc new-project psa-test


	2. Create deployment
	oc create -f https://raw.githubusercontent.com/radikaled/psa/main/deploy/psa-test-deployment.yaml

	#!/bin/bash

	# create dir for container
	mkdir -p /tmp/work

	# give permissions to container user
	podman unshare chown -R 1001:1001 /tmp/work

	# relabel
	sudo semanage fcontext -a -t container_file_t '/tmp/work(/.*)?'

	#!/bin/bash

	openssl genrsa -des3 -out server.pass.key 2048
	openssl rsa -in server.pass.key -out server.key
	openssl req -nodes -new -key server.key -out server.csr

	#!/bin/bash

	# Types of Droplets
	# s-2vcpu-4gb
	# s-4vcpu-8gb
	#
	# Creation Params
	# doctl compute ssh-key list
	# doctl compute droplet list
	#

	#!/bin/bash

	stern --selector=app=sticky-sessions-app

	# add timestamps: stern -t --selector=app=sticky-sessions-app