rcarrata

Application GW Load Balancer in ARO

• Set environment variables useful for this guide:

export NAMESPACE=aro-agw
export AZR_CLUSTER=aro-$USER
export AZR_RESOURCE_LOCATION=eastus
export AZR_RESOURCE_GROUP=aro-$USER-rg
export AppGW_CIDR="10.0.10.0/23"

rcarrata

HyperShift

• Set environment variables

CLUSTER_NAME="rosa-hcp-rcs"
PREFIX_NAME="hcp-rcs"
REGION="us-east-1"
VERSION="4.14.9"
USER=rcarrata

rcarrata

OCM Management - Hibernate

With Hibernate, OpenShift clusters can be stopped and started by simply shutting down their machines and starting them back up

On the other hand, developers can view or programatically manage clusters through https://api.openshift.com/.

Hibernate using api.openshift.com

• Get an openshift offline token from https://console.redhat.com/openshift/token:

rcarrata

#!/bin/bash

API=$(oc whoami --show-server | cut -d '/' -f3-)
APPS=$(oc whoami --show-console | cut -d '.' -f2-)
APPS_ROUTE="*.$APPS:443"

echo "## Certificate for $APPS_ROUTE"
echo | openssl s_client -connect $APPS_ROUTE | openssl x509 -noout -text
echo "--------------------------------"
echo ""

rcarrata

# Enable APIs OSD in GCP
# based in https://docs.openshift.com/dedicated/osd_planning/gcp-ccs.html#ccs-gcp-customer-procedure_gcp-ccs

# Set your GCP project 
PROJECT_ID="mygcp-project"
echo "# Setting your $PROJECT_ID GCP project"
gcloud config set project $PROJECT_ID 

# Enable required APIs in GCP
apis=("deploymentmanager.googleapis.com" "compute.googleapis.com" "cloudapis.googleapis.com" \

rcarrata

#!/bin/bash

# Set up a the patch for upgrade towards 4.9 safely
# Check https://access.redhat.com/articles/6329921 for more information
oc -n openshift-config patch cm admin-acks --patch '{"data":{"ack-4.8-kube-1.22-api-removals-in-4.9":"true"}}' --type=merge

# Change the channel to the Fast 4.9 (Stable 4.9 not available at this moment
oc patch clusterversion version --type="merge" -p '{"spec":{"channel":"fast-4.9"}}'

# Upgrade towards the latest 

rcarrata

#### Prereqs
kubectl create ns influx
oc adm policy add-scc-to-user anyuid -z default -n influx

#### HostNetwork  
# pods in the host network of a node can communicate with all pods on all nodes without NAT
# Not using a separated network namespace. The pod will see the entire ip stack
# https://kubernetes.io/docs/concepts/cluster-administration/networking/#the-kubernetes-network-model

cat <<EOF > /tmp/influxdb-hostnetwork.yaml

rcarrata

echo "## Please give me the AWSKEY"
read AWSKEY

echo "## Please give me the AWS_SECRET_KEY"
read AWSSECRETKEY

echo "## Please give me the REGION"
read REGION

aws --version &> /dev/null

rcarrata

cat /etc/yum.repos.d/racadm.repo <<EOF
[racadm]
name=Racadm
baseurl=http://linux.dell.com/repo/hardware/dsu/os_dependent/RHEL8_64
enabled=1
gpgcheck=0
EOF


yum clean all

rcarrata

# Install utils
sudo yum -y install wget yum-utils bash-completion vim

# Install Docker
sudo yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/centos/docker-ce.repo
sudo yum remove -y podman
sudo yum install docker-ce docker-ce-cli containerd.io -y
sudo systemctl start docker