waynedovey

apiVersion: hypershift.openshift.io/v1beta1
kind: HostedCluster
metadata:
  name: 'test4'
  namespace: 'clusters'
  labels:
spec:
  etcd:
    managed:
      storage:

waynedovey

apiVersion: machine.openshift.io/v1beta1
kind: MachineSet
metadata:
  annotations:
    capacity.cluster-autoscaler.kubernetes.io/labels: kubernetes.io/arch=amd64
    machine.openshift.io/GPU: "0"
    machine.openshift.io/memoryMb: "16384"
    machine.openshift.io/vCPU: "4"
  labels:
    machine.openshift.io/cluster-api-cluster: high-roller-hztrp

waynedovey

---
- name: Provision Secondary ENIs for OpenShift Nodes (one-step create+attach)
  hosts: localhost
  connection: local
  gather_facts: no
  collections:
    - amazon.aws

  vars:
    region: "ap-southeast-2"

waynedovey

helm repo add netapp-trident https://netapp.github.io/trident-helm-chart
helm repo update

# Create a namespace for Trident
kubectl create namespace trident

# Install the Trident operator
helm install trident-operator netapp-trident/trident-operator --namespace trident

# Create a service account

waynedovey

apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
  name: cluster
spec:
  identityProviders:
  - name: my_htpasswd_provider 
    mappingMethod: claim 
    type: HTPasswd
    htpasswd:

waynedovey

apiVersion: v1
baseDomain: sandbox.acme.com
compute:
- name: worker
  hyperthreading: Enabled
  replicas: 0
controlPlane:
  name: master
  replicas: 1
  architecture: amd64

waynedovey

podman pull registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8:3.72.1
podman tag registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8:3.72.1 quay.io/wdovey/advanced-cluster-security/rhacs-main-rhel8:3.72.1
podman push --remove-signatures quay.io/wdovey/advanced-cluster-security/rhacs-main-rhel8:3.72.1

podman pull registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8:3.72.1
podman tag registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8:3.72.1 quay.io/wdovey/advanced-cluster-security/rhacs-scanner-rhel8:3.72.1
podman push --remove-signatures quay.io/wdovey/advanced-cluster-security/rhacs-scanner-rhel8:3.72.1

podman pull registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8:3.72.1
podman tag registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8:3.72.1 quay.io/wdovey/advanced-cluster-security/rhacs-scanner-db-rhel8:3.72.1

waynedovey

# managedclustersetbinding.yaml
cat << EOF | oc apply -f -
apiVersion: cluster.open-cluster-management.io/v1alpha1
kind: ManagedClusterSetBinding
metadata:
  name: production-clusters
  namespace: openshift-gitops
spec:
  clusterSet: production-clusters
EOF

waynedovey

apiVersion: apps/v1
kind: Deployment
metadata:
  name: wordpress-mysql
  labels:
    app: wordpress
spec:
  selector:
    matchLabels:
      app: wordpress

waynedovey

#!/bin/bash

_NAMESPACE="nfs-external-provisioner"

oc new-project ${_NAMESPACE}

oc adm policy add-scc-to-user hostmount-anyuid \
  -n ${_NAMESPACE} \
  -z nfs-subdir-external-provisioner