cdoan1

#!/bin/bash

mask() {
        local n=8                    # number of chars to leave
        local a="${1:0:${#1}-n}"     # take all but the last n chars
        local b="${1:${#1}-n}"       # take the final n chars 
        printf "%s%s\n" "${a//?/*}" "$b"   # substitute a with asterisks
}

cdoan1

#!/bin/bash
#
# use this script to force the certiifcate renew for the default ingress certificate of a hcp.
#
function convert() {
  echo $(date -d "$1" "+%s")
}
function dlog() {
  echo $(date -u +"%Y-%m-%d-%I:%M:%S") $1
}

cdoan1

#!/bin/bash

node=${1}

list=$(oc get hc -A --sort-by=.metadata.creationTimestamp -ojson \
  | jq -r '.items[] | select(.metadata.name | contains("sdq")) | .metadata.name,.metadata.creationTimestamp,.metadata.namespace')

ma=($list)
for ((i=0;i<${#ma[@]};i+=3))
do

cdoan1

#!/bin/bash

oc patch mch multiclusterhub -n multicluster-hub --type=merge \
-p "{\"spec\":{\"overrides\":{\"components\":[{\"name\":\"cluster-backup\",\"enabled\":true}]}}}"

oc patch mce multiclusterengine -n multicluster-engine --type=merge \
-p "{\"spec\":{\"overrides\":{\"components\":[{\"name\":\"managedserviceaccount-preview\",\"enabled\":true}]}}}"

BACKUP_NS=openshift-velero
SECRET_NAME=velero-iam-credentials

cdoan1

#!/bin/bash

function convert() {
    echo $(date -d "$1" "+%s")
}
function dlog() {
    echo $(date -u +"%Y-%m-%d-%I:%M:%S") $1
}

for certificate in $(oc get certificate -n default -o name)

cdoan1

Sizing Worksheet

I am writing this article to document data related to sizing classification for RHACM 2.2 deployments.

We define three generic size classifications, based on the number of managed clusters under management.

Then, we deploy RHACM 2.2 into each of the size classifications, and measure the system based on the workload.

Today, we will keep the workload very generic.

cdoan1

#!/bin/bash
#
# Reference: https://www.openshift.com/blog/openshift-4-2-disconnected-install
#
HOSTNAME=`hostname`
USERNAME=admin
PASSWORD=password

yum -y install podman httpd httpd-tools
mkdir -p $(pwd)/registry/{auth,certs,data}

cdoan1

+-----------------------+                  +-------------------+            +-------------------+       +--------------------+
|                       |                  |                   |            |                   |       |                    |
|                       |                  |                   |            |                   |       |                    |
|                       |                  |                   |            |                   |       |                    |
|                       |                  |                   |            |                   |       |                    |
|      Managed Cluster  --------------------      BIG IP       --------------       API         --------|         HUB        |
|                       |                  |      WAF          |            |       Gateway     |       |                    |
|                       |                  |                   |            |                   |       |                    |

cdoan1

Steps

1. create the placement that references the set of clustersets
2. create managedclustersetbinding to allow placement access to the clusterset
3. create the gitopscluster resource to bind the argocd cluster to the placement
4. enable argocd apps in the klusterletaddonconfig manifests

Reference

https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.3/html/applications/managing-applications#register-gitops

cdoan1

# get CRD sorted

oc get crd -A --sort-by=.metadata.creationTimestamp

# inline template

oc get route keycloak --template "http://{{.spec.host}} "


# Enable DEX