Permissions needed for install (IPI)
Below is documented what is required to operate for the UPI case (untested and not verified)
needed for integrated registry
Seth Jennings sjenning
sjenning
/ origin-latest.sh
Last active
July 23, 2018 16:01
Get latest repo and packge version for origin upstream builds
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| set -euo pipefail | |
| #set -x | |
| # tree can be the name of a branch (master, release-3.8, etc) or a release tag (v3.9.0-alpha.4) | |
| TREE="$1" | |
| REPOURL=$(curl -s "https://storage.googleapis.com/origin-ci-test/releases/openshift/origin/$TREE/.latest-rpms") | |
| echo "copy to following lines into your openshift-ansible inventory file" |
sjenning
/ sdk-olm-demo
Created
August 1, 2018 21:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| = start an openshift test cluster = | |
| = download dep == | |
| cd $GOPATH/bin | |
| wget https://github.com/golang/dep/releases/download/v0.5.0/dep-linux-amd64 | |
| mv dep-linux-amd64 dep | |
| chmod +x dep | |
| = build operator-sdk = | |
| go get github.com/operator-framework/operator-sdk | |
| cd $GOPATH/src/github.com/operator-framework/operator-sdk | |
| make dep |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package main | |
| import ( | |
| "fmt" | |
| "os" | |
| "time" | |
| "k8s.io/api/core/v1" | |
| "k8s.io/apimachinery/pkg/fields" | |
| "k8s.io/apimachinery/pkg/types" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| platform: libvirt | |
| libvirt: | |
| uri: qemu:///system | |
| network: | |
| name: tectonic | |
| ifName: tt0 | |
| dnsServer: 10.42.10.1 | |
| ipRange: 192.168.124.0/24 | |
| imagePath: /home/sjennings/Downloads/rhcos-qemu.qcow2 | |
| containerLinux: |
sjenning
/ tectonic-installer-notes.txt
Last active
September 20, 2018 03:19
tectonic installer notes
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| instances start with rhcos image + ignition configs (per role) generated by "tectonic init" | |
| for aws: user_data | |
| for libvirt: qemu_fw_cfg | |
| == master === | |
| kubelet.service starts | |
| runs bootstrap control plane runs as static pods on the bootstrap master | |
| bootkube.service starts | |
| runs kube-core-renderer container | |
| https://github.com/coreos-inc/tectonic-operators/blob/master/renderer/Documentation/README.md |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // Place your settings in this file to overwrite the default settings | |
| { | |
| "go.buildOnSave": true, | |
| "go.lintOnSave": true, | |
| "go.vetOnSave": true, | |
| "go.buildTags": "", | |
| "go.buildFlags": [], | |
| "go.lintFlags": [], | |
| "go.vetFlags": [], | |
| "go.coverOnSave": false, |
sjenning
/ release-images.txt
Last active
October 17, 2018 15:39
List of images inventoried by the release image
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # updated 10/11/18 | |
| # oc get is origin-v4.0 -n openshift -o yaml | grep tag: | cut -f6 -d' ' | |
| ansible | |
| artifacts | |
| aws-machine-controllers | |
| base | |
| catalog | |
| cli | |
| cluster-autoscaler |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # cat horizon/custom_local_settings | |
| LAUNCH_INSTANCE_DEFAULTS = { | |
| "create_volume": False, | |
| } | |
| SESSION_TIMEOUT = 86400 |
sjenning
/ minimum-iam-privileges.md
Last active
October 28, 2020 07:55
Minimum AWS IAM Privileges for OCP4
sjenning
/ extract-ignition-filesystem.py
Created
January 21, 2020 20:32
Extracts a filesystem from an ignition file
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python3 | |
| import json | |
| import os | |
| import sys | |
| import base64 | |
| ign_file = open(sys.argv[1]) | |
| ign_json = json.load(ign_file) | |
| ign_file.close() |