Rasheed Amir rasheedamir

I started like this!

apiVersion: v2
name: falco
description: A Helm chart of falco for Kubernetes
dependencies:
  - name: falco
    version: 3.1.0
    repository: https://falcosecurity.github.io/charts

2022-12-18 21:50:17,253+0000 INFO [qtp360473902-6441] *UNKNOWN org.github.flytreeleft.nexus3.keycloak.plugin.KeycloakAuthenticatingRealm - doGetAuthenticationInfo: Convert username helm-user to lower case
2022-12-18 21:50:17,261+0000 INFO [qtp360473902-6441] *UNKNOWN org.github.flytreeleft.nexus3.keycloak.plugin.KeycloakAuthenticatingRealm - doGetAuthenticationInfo failed: Unexpected response from server: 401 / Unauthorized
org.github.flytreeleft.nexus3.keycloak.plugin.internal.http.HttpResponseException: Unexpected response from server: 401 / Unauthorized
at org.github.flytreeleft.nexus3.keycloak.plugin.internal.http.HttpMethod.execute(HttpMethod.java:65)
at org.github.flytreeleft.nexus3.keycloak.plugin.internal.http.HttpMethodResponse$2.execute(HttpMethodResponse.java:37)
at org.github.flytreeleft.nexus3.keycloak.plugin.internal.KeycloakAdminClient.obtainAccessToken(KeycloakAdminClient.java:97)
at org.github.flytreeleft.nexus3.keycloak.plugin.internal.NexusKeycloakClient.authenticate(NexusKeycloakClient

Prepare for the 'Bare Metal' environment on vSphere

Copy the rhcos-X.X.X-x86_64-installer.x86_64.iso & Red Hat Enterprise Linux 8 iso to an ESXi datastore
Create a new Port Group called 'OCP' under Networking
Create 3 Control Plane virtual machines with minimum settings:
- Name: ocp-cp-# (Example ocp-cp-1)
- 8vcpu
- 32GB RAM
- 120GB HDD

NIC connected to the OCP network

# note that helm tempates are converted into yaml and a kubectl apply is run on the yaml object, ie `helm ls` will not show anything

# TODO move these to config files
settings = {
  "start_kind": True,
  "preload_images_for_kind": True,
  "deploy_metallb": True,
  "deploy_ambassador_api": False,
  "deploy_ambassador_edge_gateway": False,

My Openshift Cheatsheet

Examine the cluster quota defined for the environment:

$ oc describe AppliedClusterResourceQuota

Install pkgs using yum in a Dockerfile

[INFO] com.tinyerp:gateway:jar:0.0.1-SNAPSHOT
[INFO] +- org.springframework.boot:spring-boot-starter-web:jar:2.1.2.RELEASE:compile
[INFO] |  +- org.springframework.boot:spring-boot-starter:jar:2.1.2.RELEASE:compile
[INFO] |  |  +- org.springframework.boot:spring-boot-starter-logging:jar:2.1.2.RELEASE:compile
[INFO] |  |  |  +- ch.qos.logback:logback-classic:jar:1.2.3:compile
[INFO] |  |  |  |  \- ch.qos.logback:logback-core:jar:1.2.3:compile
[INFO] |  |  |  +- org.apache.logging.log4j:log4j-to-slf4j:jar:2.11.1:compile
[INFO] |  |  |  |  \- org.apache.logging.log4j:log4j-api:jar:2.11.1:compile
[INFO] |  |  |  \- org.slf4j:jul-to-slf4j:jar:1.7.25:compile

exec java -Xmx300m -javaagent:/opt/agent-bond/agent-bond.jar=jolokia{{host=0.0.0.0}},jmx_exporter{{9779:/opt/agent-bond/jmx_exporter_config.yml}} -XX:ParallelGCThreads=1 -XX:ConcGCThreads=1 -Djava.util.concurrent.ForkJoinPool.common.parallelism=1 -cp . -jar /deployments/ods-1.2.23.jar
I&gt; No access restrictor found, access to any MBean is allowed
Jolokia: Agent started with URL http://100.108.0.15:8778/jolokia/
2018-03-27 18:12:22.367:INFO:ifasjipjsoejs.Server:jetty-8.y.z-SNAPSHOT
2018-03-27 18:12:22.616:INFO:ifasjipjsoejs.AbstractConnector:Started [email protected]:9779
18:12:26.770 [main] DEBUG io.fabric8.kubernetes.client.Config - Trying to configure client from Kubernetes config...
18:12:27.033 [main] DEBUG io.fabric8.kubernetes.client.Config - Did not find Kubernetes config at: [/opt/jboss/.kube/config]. Ignoring.
18:12:27.034 [main] DEBUG io.fabric8.kubernetes.client.Config - Trying to configure client from service account...
18:12:27.034 [main] DEBUG io.fabric8.kubernetes.client.Conf

	import org.springframework.context.annotation.Bean;
	import org.springframework.context.annotation.Configuration;
	import org.springframework.context.annotation.Primary;
	import com.google.common.collect.ImmutableList;
	import com.hazelcast.client.HazelcastClient;
	import com.hazelcast.client.config.ClientConfig;
	import com.hazelcast.client.config.ClientConnectionStrategyConfig;
	import com.hazelcast.client.config.ClientNetworkConfig;
	import com.hazelcast.config.DiscoveryConfig;
	import com.hazelcast.config.DiscoveryStrategyConfig;

	# import config.
	# You can change the default config with `make cnf="config_special.env" build`
	cnf ?= config.env
	include $(cnf)
	export $(shell sed 's/=.*//' $(cnf))

	# import deploy config
	# You can change the default deploy config with `make cnf="deploy_special.env" release`
	dpl ?= deploy.env
	include $(dpl)

	#!/usr/bin/groovy
	@Library('github.com/fabric8io/fabric8-pipeline-library@cf54366') _

	def kubeConfig = params.KUBE_CONFIG

	podTemplate() {

	mavenNode(dockerImage: 'docker:1.11.2') {
	container(name: 'maven') {
	stage("checkout") {