Видео

HI , can you help how to configure MFA (Multi factor authentication ) like keycloak in in openshift 4.14

Hernandez Shirley Lewis Matthew Young Richard

GRUB parameters "coreos.inst.install_dev=sda coreos.inst.image_url=192.168.22.1:8080/ocp4/rhcos coreos.inst.insecure=yes coreos.inst.ignition_url=192.168.22.1:8080/ocp4/master.ign" not working to boot VMware Workstation VM! I tried other ISO images (RHEL v9.4) the installer comes up fine!

Yeah this is a great video - specifically appreciate how you address why an Operator is different than simplying using a Helm chart, etc... Because I found that some Operators do tick that box, but didn't understand the "continuous monitoring" side of the house.

How can we encrypt this SC so that the files are protected on the NFS servers?

This is amazing... Just a question. why did you choose batremetal option instead of VMware vsphere?

Hi Ryan, This video is very helpful and easy understanding. One question: what content we put in /share/registry (nfs share)

Hi Ryan, just curious what is the drawing software you demonstrated your lab setup?

Can you post some trouble shooting info on your github site

1) What is the process for booting the master/workstations from the ignition files? Bootstrap,master,worker all should be powered on at the same time. Bootstrap first then the master machine about an hour later, then the workers after another hour What does the wait for bootstrap to complete mean 1) The bootstrap server has all the files from the bastion server independent of the status of the master/nodes 2) Or masters and workers are all configured and working What indication can we look at to see what is happening on the bootstrap server. The are logs but what should we look for in the logs. Thanks

Excellent explanation! It's calming to listen to too.

I installed openshift 4.15, i made a few tries until i configured openshift with dedicated cp nodes and 2 worker nodes (like in the movie). If there were 3 cp+worker nodes (default setting), authentication operator was in degraded mode , console didn't start , also there was something on ingress. And a big thanks for the howto :).

Hello ryan Its great video but, what if i want to increase nfs storage after the utilization is full to 100% /nfsmount ?? How to proceed futher

The best

Actually this is brilliant. Thank you, good guy!

I have tried too many times. But failed at the end.

Whats the difference between this and OKD?

Hello, i am not sure what is wrong, but the farest I have gone is when bootstrap is ready but the controll plane nodes are going DOWN and UP. I have restarted the procedure at least 6 times from scratch. At one point I have realized the ocp-svc node has different timezone than the bootstrap and controll plane nodes hence the certificates generated by the installer on the svc node are different and bootstrap and controllers failing. After fixing this, API is still not stable. Don't have a clue what is wrong. Just while I have been typing the API bootstrap and one controller came UP, but after copule of minutes they usually go DOWN again. Never seen full green by all 3 cp nodes both API and config backend.

please keep this up2date!

Thanks a lot for the video and git hub repo. it was extremely helpful to install and setup OCP in UPI method.

Excellent

Do you talk like thaaatttt😶

What is the actual duration to fully configure and setup end to end? what if I had a 360 worker node config, how long should I expect to install that?

now there are lot of changes in the openshift. Will be useful if u cover the latest new OLM architecture in the openshift

While booting coreos getting an error cant find /dev/sda....could anyone help on this please?

I'm stuck on bring up the worker node. anybody know why? the error is worker node failed to fetch ignition file. worker.ign

Thank you very much! Great howto!

sometimes it works sometimes it doesnt, is this anything to do with the masking or DNS setup?

trying to ping github to get argo working

Hi Ryan, an awesome video. One addition, you need to add a firewall rule to ocp-svc - firewall-cmd --zone=internal --add-port=53/tcp --permanent. I found that random Pods would fail DNS lookup. Further investigation showed that happened when the DNS response exceeded 512 bytes on UDP.

Hi Ryan, i tried your mentioned method but two operators (Console and Authentication) shows not available, can you guide me on that i am stuck here.

Hi Is it workable on my laptop (8 Core , 64GB RAM). Regards Zaheer

Hello Ryan, I am trying to setup the lab by following this video. I am using VMware Vsphere to setup the openshift container cluster. I have a VLAn created for internal network but for external network, I don't know how to create an external VM network which you added as an additional network for the helper machine. I got struck here for past 1 week. I don't know how to take it further. Since I new to VMware and linux , learning it. Please guide me how to setup the external network and connect?

Hi, I am facing issue while bootstraping process, I have tried it several times and my bootstrap process is getting failed. from bootstrap node I am following exactly what is mentioning in this video [root@ocp-bootstrap ~]# journalctl -b -f -u bootkube.service -- Logs begin at Sun 2023-09-03 18:26:26 UTC. -- Sep 03 19:48:32 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: Error: unhealthy cluster Sep 03 19:48:33 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: etcdctl failed. Retrying in 5 seconds... Sep 03 19:48:43 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: {"level":"warn","ts":"2023-09-03T19:48:43.415866Z","logger":"client","caller":"v3@v3.5.9/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0003d4a80/localhost:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing dial tcp [::1]:2379: connect: connection refused\""} Sep 03 19:48:43 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: localhost:2379 is unhealthy: failed to commit proposal: context deadline exceeded Sep 03 19:48:43 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: Error: unhealthy cluster Sep 03 19:48:43 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: etcdctl failed. Retrying in 5 seconds... Sep 03 19:48:53 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: {"level":"warn","ts":"2023-09-03T19:48:53.903948Z","logger":"client","caller":"v3@v3.5.9/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0003c0a80/localhost:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing dial tcp [::1]:2379: connect: connection refused\""} Sep 03 19:48:53 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: localhost:2379 is unhealthy: failed to commit proposal: context deadline exceeded Sep 03 19:48:53 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: Error: unhealthy cluster Sep 03 19:48:54 ocp-bootstrap.lab.ocp.lan bootkube.sh[2463]: etcdctl failed. Retrying in 5 seconds... ^C

Useful information. Tks Ryan.

Hi Ryan I have separate servers for DNS,AD and DHCP so which part I have to skip for creating it. As there are 18 section for building UPI.

Hi Ryan Do you have publish a video on UPI method with Assisted Installer. Regards Zaheer

Is this installation possible on Hyper V

Hi Ryan, OKD port group is the interface that facing to internet right ?

Hi Ryan , thank you for your effort , just want to inform you that I have problem follwing your steps , as the redhat interface has been changed and I cannot find the redhat coreOS

exelenet. thanks!

Can this be installed any regions? Is it payable?

How i can access to dashboard from my laptop?

Can it be like 3 control planes as VM and 2 worker nodes as baremetal ?

Hi Ryan, many thanks for this excellent tutorial, i have done on 4.12 successfully. Now I am able to login with kube:admin user only, not from other admin users. Can you or anyone can help on this?

Thank you so much Ryan. Your explanation is just amazing, easy to understand.

cool&perfect👌👌👌

Keep going 👍👍👍👍

Thank you. Very clear.

quickly, LOL, uh no.....but so far that best instructions I have found!