walidshaari

HyperShift

• Set environment variables

CLUSTER_NAME="rosa-hcp-rcs"
PREFIX_NAME="hcp-rcs"
REGION="us-east-1"
VERSION="4.14.9"
USER=rcarrata

walidshaari

Red Hat Security: Securing Containers & OpenShift (DO425)

Last update: Tue Jan 14 23:15:49 UTC 2020 by @luckylittle

---

Objectives

1. Understand, identify, and work with containerization features
2. Deploy a preconfigured application and identify crucial features such as namespaces, SELinux labels, and cgroups

walidshaari

#!/bin/bash -xe

SNOWBALL_IP='192.168.1.240'
S3="aws --profile snowballEdge --region snow  --endpoint https://${SNOWBALL_IP}:8443 --ca-bundle /etc/pki/ca-trust/source/anchors/sbe.crt s3"
EC2="aws --profile snowballEdge --region snow --endpoint https://${SNOWBALL_IP}:8243 --ca-bundle /etc/pki/ca-trust/source/anchors/sbe.crt ec2"
BUCKET="redhat-dan"

IGN_CONFIGS='/home/danclark/openshift_clusters/snow/'
IGN_BASE='/home/danclark/openshift_clusters/install-config.yaml'

walidshaari

Completion
install bash-completion package

kubeadm completion bash|tee /etc/bash_completion.d/kubeadm
kubectl completion bash|tee /etc/bash_completion.d/kubectl

Bootstrapping the master node "Kubernetes control panel" :

kubeadm init --apiserver-advertise-address=192.168.205.10 --pod-network-cidr=10.244.0.0/16 --kubernetes-version=v1.6.2
## for calico default is 192.168.0.0/16 for flannel it is 10.244.0.0/16, not sure what needs to be done to vagrant for ips not clash

walidshaari

cbr0 the bridge that links the pods to each other within the node or in other nodes and hence to the external network

flannel0 VXLAN interface acts like any other vNIC device.packets gets routed from cbr0 to flannel0 device if ther is communition between pods in different nodes.

K8s services use iptables to connect a request to its final end point "ep". the svc will be implemented across every nodes in k8s cluster. that managment and update of iptables is guranteed by the kube-proxy, kube proxy is one of the k8s controller that watches the api-server for any service changes and keeps tracks of services and end points.

kube-dns is the in-house dns server, it automticaly adds new services to its records, serving A, and SRV records. 

walidshaari

TLDR: RSVP at https://www.meetup.com/Docker-Dhahran/events/234807816/

Make sure you have a Docker Hub account, if not please register with a good name as it will present your future software repositroy, think of it as you application store, such as Google play, or Apple store, mine for example is wshaari, some of the official names are docker, redhat, microsoft, mysql. 

Create a Docker Hub account here at https://hub.docker.com. You will need a Docker Hub account to access the course materials.

Also register to Docker community so that you can get access to remote mentors, chat with other particpants, ask questions, among other chat activities   https://community.docker.com/registrations/groups/4316

Bring your laptop fully charged.
Prefereably you laptop should have Docker already set-up. if you can not, do not worry as we will have access to online labs, and there are some computers already in the facility. but could prove helpful if there is network congestion, or internet issues if you are interetsed t