This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
## OpenShift4 pull-secret: | |
1. Download your pull-secret from [console.redhat.com](https://console.redhat.com/openshift/install/aws/installer-provisioned) | |
- click on “Download Pull Secret”. Save it somewhere, e.g. ~/some-dir/pull-secret | |
2. Add the apps.ci auth to pull-secret! _internal OpenShift developers only_ | |
- Obtain an API token by visiting https://oauth-openshift.apps.ci.l2s4.p1.openshiftapps.com/oauth/token/request | |
copy the oc login cmd and paste in terminal to login to the ci cluster, then run this: | |
- `$ oc registry login --to ~/some-dir/pull-secret` | |
This will append the auth from registry.ci.openshift.org to your cloud.openshift.com pull-secret but it will also | |
make the pull-secret multi-line. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
set -o errexit | |
# Create a container | |
container=$(buildah from alpine) | |
# Run this from wherever the built binaries are available | |
buildah config --label maintainer="Sally O'Malley <somalley@redhat.com>" $container |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
apiVersion: v1 | |
kind: Namespace | |
metadata: | |
name: rekor-system | |
labels: | |
openshift.io/cluster-monitoring: true | |
--- | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: Role | |
metadata: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$ df -Th | |
Filesystem Type Size Used Avail Use% Mounted on | |
devtmpfs devtmpfs 3.8G 0 3.8G 0% /dev | |
tmpfs tmpfs 3.8G 0 3.8G 0% /dev/shm | |
tmpfs tmpfs 3.8G 25M 3.8G 1% /run | |
/dev/mapper/rhel-root xfs 70G 5.4G 64G 8% / | |
/dev/vda1 xfs 794M 214M 581M 27% /boot | |
/dev/vda2 vfat 200M 8.0K 200M 1% /boot/efi | |
tmpfs tmpfs 777M 0 777M 0% /run/user/1000 | |
---------------------------------------------------------- |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
set -euxo pipefail | |
trap "rm -rf create-registry-certs" EXIT | |
# Set up local registry with long-lived certs with SAN | |
# if in gcp instance | |
#HOSTNAME=$(curl "http://metadata.google.internal/computeMetadata/v1/instance/hostname" -H "Metadata-Flavor: Google") | |
HOSTNAME=localhost | |
sudo dnf -y install podman httpd httpd-tools make |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
### Run `make sigstore-testenv-up` from local checkout of containers/skopeo before running this script. | |
### This script must run from local checkout of sigstore/sigstore | |
set -ex | |
echo "running tests" | |
export VAULT_TOKEN=testtoken |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# This is an example configTarget that is used in testing. | |
# Harpoon will start with this config then will load targets from ./examples/config-reload.yaml | |
targets: | |
- name: config | |
methods: | |
configTarget: | |
configUrl: https://raw.githubusercontent.com/sallyom/harpoon/config-upload/examples/config-reload.yaml | |
schedule: "*/1 * * * *" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Helper function for fancy git prompt. | |
# Place this in ~/.bashrc | |
# Then, `source ~/.bashrc` will execute the prompt function w/out having to reboot | |
# (otherwise, any ~/.bashrc settings take effect with every reboot. | |
# Lines 7-38 go in ~/.bashrc | |
function parse_git_branch { | |
git branch --no-color 2> /dev/null | sed -e '/^[^*]/d' -e 's/* \(.*\)/(\1)/' | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
mkdir ~/.kube && sudo cp /var/lib/microshift/resources/kubeadmin/kubeconfig ~/.kube/config | |
sudo chown -R ec2-user:ec2-user ~/.kube | |
curl -o oc.tar.gz https://mirror.openshift.com/pub/openshift-v4/clients/oc/latest/linux/oc.tar.gz | |
tar -xzvf oc.tar.gz | |
sudo install -t /usr/local/bin oc | |
rm oc.tar.gz oc kubectl README.md | |
SNAPSHOTTER_VERSION=v4.2.1 | |
# Change to the latest supported snapshotter version |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
1. Edit /etc/default/grub | |
- Append `systemd.unified_cgroup_hierarchy=1` to line `GRUB_CMDLINE_LINUX=` | |
2. Generate grub config file | |
```shell | |
grub2-mkconfig -o /boot/grub2/grub.cfg | |
``` | |
3. reboot |
NewerOlder