detiber

Testing external etcd upgrade

Insecure etcd

Using Ubuntu with kubeadm, kubelet, and kubectl v1.9.5 installed (specifically the libvirt vagrant box heptio/quickstart-ubuntu)

• install v1.9.7

  sudo apt-get install -y curl software-properties-common

detiber

Using Ubuntu with kubeadm, kubelet, and kubectl v1.9.5 installed (specifically the libvirt vagrant box heptio/quickstart-ubuntu)

• install v1.9.7

  sudo apt install curl
  curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
  sudo apt update
  sudo apt install kubelet=1.9.7-00 kubeadm=1.9.7-00 kubectl=1.9.7-00
  sudo kubeadm init

detiber

CFSSL as an external CA for non-ha kubeadm intialized clusters

Using cfssl to Create an External CA Infrastructure

Install cfssl

# This requires an existing Go environment with GOPATH set
go get -u github.com/cloudflare/cfssl/cmd/...

detiber

Building and Testing OpenShift Origin for Alternative Arches

Build/test tooling image

The official build/test tooling image (https://hub.docker.com/r/openshift/origin-release/) is used for providing a consistent and repeatable build and test environment for the OpenShift Origin CI/CD pipelines as well as for individual contributors as well. Currently the official image is x86_64 only, but you can find a pre-built manifest-list image that supports x86_64, ppc64le, and aarch64 here: https://hub.docker.com/r/openshiftmultiarch/origin-release/. The PR to update the official images for ppc64le and aarch64 can be found here: openshift/release#97

Using the openshiftmultiarch/origin-release image with hack/env

The hack/env script in the origin repository is used for invoking commands within the official origin-release image. It is possible to override which image is used by the tooling with the OS_BUILD_ENV_IMAGE environment variable. To override the default image and verify tha

detiber

#!/usr/bin/env python

import sys

from github3 import login
from kubernetes.client.rest import ApiException
from openshift import config
from openshift.client import ApiClient, UserOpenshiftIoV1Api, V1Group
from yaml import load

detiber

---
- hosts: localhost
  vars_prompt:
  - name: creds_file
    prompt: "GCE Credentials File:"
    default: "{{ lookup('env', 'GCE_CREDS_FILE') | default '~/gce-credentials.json' }}"
  - name: service_account
    prompt: "GCE Service Account:"
    default: "{{ lookup('env', GCE_SERVICE_ACCOUNT) | default(none) }}"
  - name: project_id

detiber

      - storage-ro                                                                                      
      - compute-rw                                                                                      
      - monitoring                                                                                      
      - logging-write                                                                                   
      - 'https://www.googleapis.com/auth/ndev.clouddns.readwrite'  

detiber

---
# See https://kubernetes.io/docs/concepts/storage/persistent-volumes/#storageclasses for further documentation                                                                                              
kind: StorageClass                                                                                    
apiVersion: storage.k8s.io/v1beta1                                                                    
metadata:                                                                                             
  name: ocp                                                                                           
  annotations:                                                                                        
    storageclass.beta.kubernetes.io/is-default-class: "true"                                          
provisioner: kubernetes.io/aws-ebs                                                                    
parameters:                                                                                   

detiber

  source keystonerc_admin
  TENANT_NAME=L104353
  TENANT_ID=$(openstack project show ${TENANT_NAME} -f value -c id)
  EXTERNAL_SUBNET_ID=$(openstack subnet show external -f value -c id)

  #Create port for openshift master
  neutron port-create external --name openshift-master --tenant-id ${TENANT_ID} --allowed-address-pairs type=dict list=true ip_address=172.20.17.5 --fixed-ip subnet_id=${EXTERNAL_SUBNET_ID},ip_address=172.20.17.5
  neutron port-create external --name openshift-infra --tenant-id ${TENANT_ID} --allowed-address-pairs type=dict list=true ip_address=172.20.17.6 --fixed-ip subnet_id=${EXTERNAL_SUBNET_ID},ip_address=172.20.17.6
  neutron port-create external --name openshift-node1 --tenant-id ${TENANT_ID} --allowed-address-pairs type=dict list=true ip_address=172.20.17.51 --fixed-ip subnet_id=${EXTERNAL_SUBNET_ID},ip_address=172.20.17.51
  neutron port-create external --name openshift-node2 --tenant-id ${TENANT_ID} --allowed-address-pairs type=dict list=true ip_address=172.20.17.52 --fixed-ip subn

detiber

[OSEv3:children]
nodes
masters
nfs
etcd

[OSEv3:vars]
openshift_master_cluster_public_hostname=None
ansible_ssh_user=root
openshift_master_cluster_hostname=None