andyrepton

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPs1K0CpZDWrWO8kWa8tvHH0onX5Q7ODMdgsIRGo7jbJ arepton@redhat.com

andyrepton

• Information on the Cloud Credential Operator: https://github.com/openshift/cloud-credential-operator/blob/master/docs/sts.md
• Official documentation for STS on ROSA: https://docs.openshift.com/rosa/rosa_architecture/rosa-sts-about-iam-resources.html
• Official documentation for creating a ROSA cluster with STS: https://docs.openshift.com/rosa/rosa_install_access_delete_clusters/rosa-sts-creating-a-cluster-quickly.html
• Blog post about STS and ROSA: https://cloud.redhat.com/blog/what-is-aws-sts-and-how-does-red-hat-openshift-service-on-aws-rosa-use-sts
• Want to make your own STS enabled app? Step by step instructions: [http

andyrepton

[Unit]
Description=Node Exporter
Wants=network-online.target
After=network-online.target

[Service]
Type=simple
ExecStart=/usr/local/bin/node_exporter --collector.systemd --collector.processes

[Install]

andyrepton

#!/bin/bash
# Admin script for workshops

export AWS_ACCESS_KEY_ID=$(grep -A 2 my_aws_profile ~/.aws/credentials | grep aws_access_key_id | awk '{print $3}')
export AWS_SECRET_ACCESS_KEY=$(grep -A 2 my_aws_profile ~/.aws/credentials | grep aws_secret_access_key | awk '{print $3}')
export KOPS_STATE_STORE="s3://your-bucket-here"

deploy() {
  echo $1
  cluster_name=$1

andyrepton

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: federation-controller-manager
  namespace: federation
  labels:
    app: federated-cluster
spec:
  template:
    metadata:

andyrepton

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: federation-apiserver
  namespace: federation
  labels:
    app: federated-cluster
spec:
  template:
    metadata:

andyrepton

core@sbpcore-hyp01 ~ $ etcdctl --endpoint 'http://127.0.0.1:4001' ls
Error:  client: etcd cluster is unavailable or misconfigured
error #0: x509: cannot validate certificate for 10.0.1.14 because it doesn't contain any IP SANs
error #1: x509: cannot validate certificate for 10.0.0.12 because it doesn't contain any IP SANs
error #2: x509: cannot validate certificate for 10.0.2.11 because it doesn't contain any IP SANs