OpenShift 4: EgressIP for egress(outbound) connection
Introduction By default, all namespaces egress networking will be using host IP where the pod sits as SNAT rule, similar to how our home router...
Author: Muhammad Aizuddin Zali
OpenShift 4: AlertManager + Slack Configuration
Objective Sending alert to Slack and defined proper channel for each alert type. Pre-Requisites: Three channels created in slack #watchdog #clusterwatch Incoming webhook configured for...
OpenShift 4: Installation Bonding Setup
Objective Setting up 2 x LACP bonding using boot params options. At the time this blog is written, Red Hat only support kernel ip argument...
OpenShift 4: DHCPD High Availability
Objective One of the support component to install OpenShift 4 is the DHCP. We need to ensure this DHCP is resilient and highly available hence...
OpenShift 4: Custom API URL Endpoint
Objective On top of the standard api.<cluster_name>.<subdomain> as external API endpoint, we are going to serve this endpoint using custom URL as below: Custom API...
Certificate & TLS: Becoming Custom(or Own) Root Certificate Authority
Objective Becoming organization/private PKI provider Shared rootCA certificate to be trusted by client. Creating a Root Certificate Authority 1. Create your root CA RSA key...
OpenShift 4: Splunk HEC Integration
NOTE: This article focused on technical feasibility and features. For production usage this require detail implementation discussion. Objective. We want to ship containers and apiserver...
OpenShift 4: Red Hat OpenShift Container Storage 4.2 Lab Installation
Official documentation of Red Hat OpenShift Container Storage can be found here. This blog merely written only to show on the technical feasibility such configuration...
OpenShift 4: Libvirt UPI installation.
Hello everyone, just a couple of months ago, Red Hat has released a shiny OpenShift 4 [1] based on CoreOS technology. In this guide, we...
OpenShift 3: DevSecOps with OpenShift – Image Signing
INTRODUCTION Just like an RPM signing, container image singing can be used to verify authenticity of a container image created by users/developers throughout image life-cycle....
