Jon Keam jkeam

## mad_roadshow_links.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                jkeam
                / mad_roadshow_links.md
            
            
              Last active
              March 28, 2023 16:46
                — forked from brandoncox/MAD Roadshow links
            
          
      View mad_roadshow_links.md
  
      
    MAD Roadshow Links
Architecture
Nodes
The following is a good diagram of the various services running.  Note, we can use infranodes to pull those cluster services from the compute nodes (things like registry, observability, monitoring, etc).  Diagram from the docs.


## rootful-priv.yaml
apiVersion: v1
kind: Pod
metadata:
 name: podman-priv
spec:
 containers:
   - name: priv
     image: quay.io/podman/stable:v4.4.1
     args:
       - sleep

## setup-gitlab-with-rancher-and-ocp.md

      
              1 file
            
          
              0 forks
            
          
              1 comment
            
          
              0 stars
            
          
                jkeam
                / setup-gitlab-with-rancher-and-ocp.md
            
            
              Last active
              March 3, 2023 02:20
            
              
                Setup for Demo for GitLab with Rancher and OpenShift runners
              
          
      View setup-gitlab-with-rancher-and-ocp.md
  
      
    Setup for Demo for GitLab with Rancher and OpenShift runners
Git Repo
The code for this project is here git@github.com:jkeam/spring-petclinic-pac.git and the file we should be using is .gitlab-ci-kube.yml so in the repo that's in GitLab, make sure to blow away the original .gitlab-ci.yml and rename .gitlab-ci-kube.yml to .gitlab-ci.yml.
GitLab Variables
Something like below:

  
## gitlab-with-rancher-and-ocp.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                jkeam
                / gitlab-with-rancher-and-ocp.md
            
            
              Last active
              March 3, 2023 02:01
            
              
                Demo for GitLab with Rancher and OpenShift runners
              
          
      View gitlab-with-rancher-and-ocp.md
  
      
    Demo for GitLab with Rancher and OpenShift runners
Pre Demo

Generate new KUBE_CONFIG with fresh OCP token

Demo

  
## psa.txt
# Pod Security Admission Demo

## Part 1 - What is this

1. New Project:
oc new-project psa-test


2. Create deployment
oc create -f https://raw.githubusercontent.com/radikaled/psa/main/deploy/psa-test-deployment.yaml

## openshift-project-request-template.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                jkeam
                / openshift-project-request-template.md
            
            
              Created
              January 31, 2023 03:16
            
              
                OpenShift Project Request Template - EgressNetworkPolicy
              
          
      View openshift-project-request-template.md
  
      
    OpenShift Project Request Template
Automatically create an EgressNetworkPolicy (note this is for OpenShiftSDN, for OVNKubernetes use EgressFirewall)
Before
oc new-project before
oc get EgressNetworkPolicy  # notice nothing is returned

  
## podman_share_dir.sh
#!/bin/bash

# create dir for container
mkdir -p /tmp/work

# give permissions to container user
podman unshare chown -R 1001:1001 /tmp/work

# relabel
sudo semanage fcontext -a -t container_file_t '/tmp/work(/.*)?'

## generate-csr.sh
#!/bin/bash

openssl genrsa -des3 -out server.pass.key 2048
openssl rsa -in server.pass.key -out server.key
openssl req -nodes -new -key server.key -out server.csr

## running_stern.sh
#!/bin/bash

stern --selector=app=sticky-sessions-app

# add timestamps: stern -t --selector=app=sticky-sessions-app

## create-digital-ocean-droplet.sh
#!/bin/bash

# Types of Droplets
# s-2vcpu-4gb
# s-4vcpu-8gb
#
# Creation Params
# doctl compute ssh-key list
# doctl compute droplet list
#
	apiVersion: v1
	kind: Pod
	metadata:
	name: podman-priv
	spec:
	containers:
	- name: priv
	image: quay.io/podman/stable:v4.4.1
	args:
	- sleep
	# Pod Security Admission Demo

	## Part 1 - What is this

	1. New Project:
	oc new-project psa-test


	2. Create deployment
	oc create -f https://raw.githubusercontent.com/radikaled/psa/main/deploy/psa-test-deployment.yaml
	#!/bin/bash

	# create dir for container
	mkdir -p /tmp/work

	# give permissions to container user
	podman unshare chown -R 1001:1001 /tmp/work

	# relabel
	sudo semanage fcontext -a -t container_file_t '/tmp/work(/.*)?'
	#!/bin/bash

	openssl genrsa -des3 -out server.pass.key 2048
	openssl rsa -in server.pass.key -out server.key
	openssl req -nodes -new -key server.key -out server.csr
	#!/bin/bash

	stern --selector=app=sticky-sessions-app

	# add timestamps: stern -t --selector=app=sticky-sessions-app
	#!/bin/bash

	# Types of Droplets
	# s-2vcpu-4gb
	# s-4vcpu-8gb
	#
	# Creation Params
	# doctl compute ssh-key list
	# doctl compute droplet list
	#