aweiteka

#!/bin/bash
IFS='
'

URL="https://api.openshift.com"
for CLUSTER in $(ocm cluster list --managed --columns "name,subscription.href" --padding 70 | grep -v SUBSCRIPTION)
do
  SUBREF=$(echo $CLUSTER | awk '{print $2}')
  CLUSTERNAME=$(echo $CLUSTER | awk '{print $1}')
  ENTITY=$(curl -s -H "Authorization: Bearer $(ocm token)" $URL/$(curl -s -H "Authorization: Bearer $(ocm token)" $URL$SUBREF | jq -r .creator.href) |jq -r .organization.name)

aweiteka

kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: aggregate-sd-csv-admin
  labels:
    # Add these permissions to the "dedicated-admin" role.
    rbac.authorization.k8s.io/aggregate-to-dedicated-admin: "true"
rules:
- apiGroups: ["operators.coreos.com"]
  resources: ["clusterserviceversions"]

aweiteka

---
apiVersion: authorization.openshift.io/v1
kind: ClusterRole
metadata:
  annotations:
    authorization.openshift.io/system-only: "true"
  creationTimestamp: null
  name: dedicated-cluster-admin
rules:
- apiGroups:

aweiteka

package main

import (
	"encoding/json"
	"fmt"
	"io/ioutil"
	"os"
)

type ModuleArgs struct {

aweiteka

Goal

Hack on openshift-ansible roles against a local openshift environment. We have to use an openshift-ansible container to workaround local dependencies.

Steps

NOTE: run from base of local openshift-ansible repo.

1. Bring up local cluster

aweiteka

$ curl http://172.31.59.87:9100/metrics
# HELP go_gc_duration_seconds A summary of the GC invocation durations.
# TYPE go_gc_duration_seconds summary
go_gc_duration_seconds{quantile="0"} 5.7344e-05
go_gc_duration_seconds{quantile="0.25"} 0.000151705
go_gc_duration_seconds{quantile="0.5"} 0.000206746
go_gc_duration_seconds{quantile="0.75"} 0.000301577
go_gc_duration_seconds{quantile="1"} 0.079028318
go_gc_duration_seconds_sum 6.089335658
go_gc_duration_seconds_count 1461

aweiteka

{
    "default": [{"type": "reject"}],
    "transports": {
        "docker": {
            "registry.example.com:5000/big/app": [
                {
                    "type": "signedBy",
                    "keyType": "GPGKeys",
                    "keyPath": "/path/to/foo.gpg" /* assumes you've already downloaded foo pubkey to host */
                },

aweiteka

# NOTE: each 'hostname' needs to be unique
#       but they are simply arbitrary names for each cluster
[dev]
dev ansible_connection=local gather_facts=no

[stage]
stage ansible_connection=local gather_facts=no

[prod]
prod ansible_connection=local gather_facts=no

aweiteka

Running ManageIQ and OpenShift on Laptop

Prereq

Assumes oc cluster up or similar workflow.

Deploy MIQ

Run via docker

aweiteka

#!/bin/bash

# download and install openshift client 'oc' from gzip tar

if [[ $# -eq 0 ]]; then
  echo "No parameter provided. Use the full URL to the gzip tar oc client to download."
  echo "example: ${0} https://github.com/openshift/origin/releases/download/v3.6.0/openshift-origin-server-v3.6.0-c4dd4cf-linux-64bit.tar.gz"
  exit
fi