waynedovey

#cloud-config
- name: atomic
    sudo: ['ALL=(ALL) NOPASSWD:ALL']
    password: atomic
    groups: sudo
    shell: /bin/bash

waynedovey

https://www.lisenet.com/2016/firewalld-rich-and-direct-rules-setup-rhel-7-server-as-a-router/

nmcli d
systemctl mask iptables ip6tables ebtables
systemctl mask iptables
firewall-cmd --get-active-zones
firewall-cmd --get-default-zone
firewall-cmd --set-default-zone=public
firewall-cmd --remove-interface=ens224 --zone=public
firewall-cmd --permanent --add-interface=ens224 --zone=dmz

waynedovey

oc edit machinesets ocp4-lbvrr-worker -n openshift-machine-api


            resourcepool: /DC/host/cluster/Resources
            
            
          workspace:
            datacenter: DC

waynedovey

oc patch clusterversion/version --type='merge' -p "$(cat <<- EOF
spec:
  overrides:
  - group: apps/v1
    kind: Deployment
    name: cluster-monitoring-operator
    namespace: openshift-monitoring
    unmanaged: true
EOF
)"

waynedovey

apiVersion: machine.openshift.io/v1beta1
kind: MachineSet
metadata:
  annotations:
    machine.openshift.io/GPU: "0"
    machine.openshift.io/memoryMb: "16384"
    machine.openshift.io/vCPU: "4"
  labels:
    hive.openshift.io/machine-pool: master
    hive.openshift.io/managed: "true"

waynedovey

<-- cr-main.yaml --->

apiVersion: psmdb.percona.com/v1-10-0
kind: PerconaServerMongoDB
metadata:
  name: sydney-cluster
spec:
  unmanaged: false
  crVersion: 1.10.0
  image: percona/percona-server-mongodb:4.4.6-8

waynedovey

#!/bin/bash

_NAMESPACE="nfs-external-provisioner"

oc new-project ${_NAMESPACE}

oc adm policy add-scc-to-user hostmount-anyuid \
  -n ${_NAMESPACE} \
  -z nfs-subdir-external-provisioner

waynedovey

apiVersion: apps/v1
kind: Deployment
metadata:
  name: wordpress-mysql
  labels:
    app: wordpress
spec:
  selector:
    matchLabels:
      app: wordpress

waynedovey

# managedclustersetbinding.yaml
cat << EOF | oc apply -f -
apiVersion: cluster.open-cluster-management.io/v1alpha1
kind: ManagedClusterSetBinding
metadata:
  name: production-clusters
  namespace: openshift-gitops
spec:
  clusterSet: production-clusters
EOF

waynedovey

podman pull registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8:3.72.1
podman tag registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8:3.72.1 quay.io/wdovey/advanced-cluster-security/rhacs-main-rhel8:3.72.1
podman push --remove-signatures quay.io/wdovey/advanced-cluster-security/rhacs-main-rhel8:3.72.1

podman pull registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8:3.72.1
podman tag registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8:3.72.1 quay.io/wdovey/advanced-cluster-security/rhacs-scanner-rhel8:3.72.1
podman push --remove-signatures quay.io/wdovey/advanced-cluster-security/rhacs-scanner-rhel8:3.72.1

podman pull registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8:3.72.1
podman tag registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8:3.72.1 quay.io/wdovey/advanced-cluster-security/rhacs-scanner-db-rhel8:3.72.1