ralvares

yum install openscap-utils 

wget -O - https://www.redhat.com/security/data/oval/v2/RHEL8/rhel-8.oval.xml.bz2 | bzip2 --decompress > rhel-8.oval.xml

oscap-podman registry.access.redhat.com/ubi8 oval eval --report vulnerability.html rhel-8.oval.xml

ralvares

kind: LDAPSyncConfig
apiVersion: v1
url: ldap://ldap.local
augmentedActiveDirectory:
    groupsQuery: 
        derefAliases: never
        pageSize: 0
    groupUIDAttribute: dn 
    groupNameAttributes: [ cn ] 
    usersQuery:

ralvares

Worker-3
==================================================

apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfigPool
metadata:
  name: worker-3
spec:
  machineConfigSelector:
    matchExpressions:

ralvares

## ADD Certificate

registry=registry.example.local:5000

oc create configmap registry-bastion -n openshift-config --from-file=registry.example.local..5000=/registry/certs/domain.crt
oc patch image.config.openshift.io/cluster --patch '{"spec":{"additionalTrustedCA":{"name":"registry-bastion"}}}' --type=merge

https://access.redhat.com/solutions/5067531

This repository contains a curated set of image streams and templates for OpenShift. 

ralvares

podman login registry.redhat.io

export domain=quay.ralvares.local
export QUAY=/data/quay

mkdir -p $QUAY/postgres-quay
mkdir $QUAY/clair
mkdir -p $QUAY/config/extra_ca_certs

mkdir $QUAY/storage

ralvares

#!ipxe


set cluster_name ocp4
set domain_name example.com

set fileserver 192.168.122.1:80
set kernel rhcos-live-kernel-x86_64
set initrd rhcos-live-initramfs.x86_64.img
set rootfs rhcos-live-rootfs.x86_64.img

ralvares

# Community operators CatalogSource 

## Download and Install opm tool 

wget https://mirror.openshift.com/pub/openshift-v4/x86_64/clients/ocp/latest-4.7/opm-linux.tar.gz
tar xzvf opm-linux.tar.gz 
mv opm /usr/local/bin

## Login to redhat registry 
podman login registry.redhat.io

ralvares

wget https://cloud.centos.org/centos/8/x86_64/images/CentOS-8-GenericCloud-8.2.2004-20200611.2.x86_64.qcow2

qemu-img create -f qcow2 -b /var/lib/libvirt/images/CentOS-8-GenericCloud-8.2.2004-20200611.2.x86_64.qcow2 /var/lib/libvirt/images/provisioner.qcow2 120G

virt-resize --expand /dev/vda1 /var/lib/libvirt/images/CentOS-8-GenericCloud-8.2.2004-20200611.2.x86_64.qcow2 /var/lib/libvirt/images/provisioner.qcow2

virt-customize -a /var/lib/libvirt/images/provisioner.qcow2 --root-password password:Redhat01 --uninstall cloud-init \
    --hostname provisioner.ocp.ralvares.com \
    --run-command 'yum update -y'

ralvares

yum install dnsmasq -y
systemctl enable dnsmasq

cat > /etc/dnsmasq.d/ocp.conf << EOF
listen-address=127.0.0.1
bind-interfaces
addn-hosts=/etc/hosts.dnsmasq
address=/apps.ocp.ocp4.local/192.168.150.10
enable-tftp
tftp-root=/tftpboot

ralvares

oc edit Network.config.openshift.io cluster

---
# Please edit the object below. Lines beginning with a '#' will be ignored,
# and an empty file will abort the edit. If an error occurs while saving this file will be
# reopened with the relevant failures.
#
apiVersion: config.openshift.io/v1
kind: Network
metadata: