Permissions needed for install (IPI)
Below is documented what is required to operate for the UPI case (untested and not verified)
needed for integrated registry
Seth Jennings sjenning
sjenning
/ minimum-iam-privileges.md
Last active
October 28, 2020 07:55
Minimum AWS IAM Privileges for OCP4
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # cat horizon/custom_local_settings | |
| LAUNCH_INSTANCE_DEFAULTS = { | |
| "create_volume": False, | |
| } | |
| SESSION_TIMEOUT = 86400 |
sjenning
/ release-images.txt
Last active
October 17, 2018 15:39
List of images inventoried by the release image
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # updated 10/11/18 | |
| # oc get is origin-v4.0 -n openshift -o yaml | grep tag: | cut -f6 -d' ' | |
| ansible | |
| artifacts | |
| aws-machine-controllers | |
| base | |
| catalog | |
| cli | |
| cluster-autoscaler |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // Place your settings in this file to overwrite the default settings | |
| { | |
| "go.buildOnSave": true, | |
| "go.lintOnSave": true, | |
| "go.vetOnSave": true, | |
| "go.buildTags": "", | |
| "go.buildFlags": [], | |
| "go.lintFlags": [], | |
| "go.vetFlags": [], | |
| "go.coverOnSave": false, |
sjenning
/ tectonic-installer-notes.txt
Last active
September 20, 2018 03:19
tectonic installer notes
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| instances start with rhcos image + ignition configs (per role) generated by "tectonic init" | |
| for aws: user_data | |
| for libvirt: qemu_fw_cfg | |
| == master === | |
| kubelet.service starts | |
| runs bootstrap control plane runs as static pods on the bootstrap master | |
| bootkube.service starts | |
| runs kube-core-renderer container | |
| https://github.com/coreos-inc/tectonic-operators/blob/master/renderer/Documentation/README.md |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| platform: libvirt | |
| libvirt: | |
| uri: qemu:///system | |
| network: | |
| name: tectonic | |
| ifName: tt0 | |
| dnsServer: 10.42.10.1 | |
| ipRange: 192.168.124.0/24 | |
| imagePath: /home/sjennings/Downloads/rhcos-qemu.qcow2 | |
| containerLinux: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package main | |
| import ( | |
| "fmt" | |
| "os" | |
| "time" | |
| "k8s.io/api/core/v1" | |
| "k8s.io/apimachinery/pkg/fields" | |
| "k8s.io/apimachinery/pkg/types" |
sjenning
/ sdk-olm-demo
Created
August 1, 2018 21:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| = start an openshift test cluster = | |
| = download dep == | |
| cd $GOPATH/bin | |
| wget https://github.com/golang/dep/releases/download/v0.5.0/dep-linux-amd64 | |
| mv dep-linux-amd64 dep | |
| chmod +x dep | |
| = build operator-sdk = | |
| go get github.com/operator-framework/operator-sdk | |
| cd $GOPATH/src/github.com/operator-framework/operator-sdk | |
| make dep |
sjenning
/ origin-latest.sh
Last active
July 23, 2018 16:01
Get latest repo and packge version for origin upstream builds
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| set -euo pipefail | |
| #set -x | |
| # tree can be the name of a branch (master, release-3.8, etc) or a release tag (v3.9.0-alpha.4) | |
| TREE="$1" | |
| REPOURL=$(curl -s "https://storage.googleapis.com/origin-ci-test/releases/openshift/origin/$TREE/.latest-rpms") | |
| echo "copy to following lines into your openshift-ansible inventory file" |
sjenning
/ node-layout.sh
Last active
September 26, 2017 14:01
OpenShift Node layout with crio+docker using shared xfs and overlay
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # edit /etc/sysconfig/docker-storage | |
| DOCKER_STORAGE_OPTIONS=--storage-driver=overlay2 | |
| # edit /etc/sysconfig/docker | |
| OPTIONS=' --selinux-enabled --log-driver=journald --graph=/var/lib/containers/storage/docker' | |
| # edit /etc/systemd/system/atomic-openshift-node.service | |
| WorkingDirectory=/var/lib/containers/storage/origin/ | |
| # atomic-openshift-node.service has PreExec commands that expect the WorkingDirectory to exist already |