waynedovey

<-- cr-main.yaml --->

apiVersion: psmdb.percona.com/v1-10-0
kind: PerconaServerMongoDB
metadata:
  name: sydney-cluster
spec:
  unmanaged: false
  crVersion: 1.10.0
  image: percona/percona-server-mongodb:4.4.6-8

waynedovey

apiVersion: machine.openshift.io/v1beta1
kind: MachineSet
metadata:
  annotations:
    machine.openshift.io/GPU: "0"
    machine.openshift.io/memoryMb: "16384"
    machine.openshift.io/vCPU: "4"
  labels:
    hive.openshift.io/machine-pool: master
    hive.openshift.io/managed: "true"

waynedovey

oc patch clusterversion/version --type='merge' -p "$(cat <<- EOF
spec:
  overrides:
  - group: apps/v1
    kind: Deployment
    name: cluster-monitoring-operator
    namespace: openshift-monitoring
    unmanaged: true
EOF
)"

waynedovey

oc edit machinesets ocp4-lbvrr-worker -n openshift-machine-api


            resourcepool: /DC/host/cluster/Resources
            
            
          workspace:
            datacenter: DC

waynedovey

https://www.lisenet.com/2016/firewalld-rich-and-direct-rules-setup-rhel-7-server-as-a-router/

nmcli d
systemctl mask iptables ip6tables ebtables
systemctl mask iptables
firewall-cmd --get-active-zones
firewall-cmd --get-default-zone
firewall-cmd --set-default-zone=public
firewall-cmd --remove-interface=ens224 --zone=public
firewall-cmd --permanent --add-interface=ens224 --zone=dmz

waynedovey

#cloud-config
- name: atomic
    sudo: ['ALL=(ALL) NOPASSWD:ALL']
    password: atomic
    groups: sudo
    shell: /bin/bash

waynedovey

#!/bin/bash
if [ -z "$1" ]; then
  echo "pass a namespace" && exit 1
fi
APIURL=$(oc whoami --show-server)
NAMESPACE=${1}
oc get namespace $NAMESPACE -o json |jq '.spec = {"finalizers":[]}' >/tmp/$NAMESPACE.json
curl -k -H "Authorization: Bearer $(oc whoami -t)" -H "Content-Type: application/json" -X PUT --data-binary @/tmp/$NAMESPACE.json "$APIURL/api/v1/namespaces/$NAMESPACE/finalize"

waynedovey

# Custom Node lables 

https://access.redhat.com/solutions/4287111

# VMware Volume permissions

https://access.redhat.com/solutions/4821601

# Vmware Service account Permissons

waynedovey

# Feature Branch
git checkout --orphan fixit
git add -A
git commit -m "update"
git branch -D feature/bastion-create  
git branch -m feature/bastion-create
git push -f origin feature/bastion-create
git gc --aggressive --prune=all

# Master Branch

waynedovey

{
    "Statement": [
        {
            "Action": [
                "cloudformation:CreateStack",
                "cloudformation:DeleteStack",
                "cloudformation:DescribeStackEvents",
                "cloudformation:DescribeStacks",
                "cloudformation:ListStackResources",
                "ec2:CreateTags",