OpenShift 4: AlertManager + Slack Configuration
Objective Sending alert to Slack and defined proper channel for each alert type. Pre-Requisites: Three channels created in slack #watchdog #clusterwatch Incoming webhook configured for...
Author: Muhammad Aizuddin Zali
OpenShift 4: Installation Bonding Setup
Objective Setting up 2 x LACP bonding using boot params options. At the time this blog is written, Red Hat only support kernel ip argument...
OpenShift 4: DHCPD High Availability
Objective One of the support component to install OpenShift 4 is the DHCP. We need to ensure this DHCP is resilient and highly available hence...
OpenShift 4: Custom API URL Endpoint
Objective On top of the standard api.<cluster_name>.<subdomain> as external API endpoint, we are going to serve this endpoint using custom URL as below: Custom API...
Custom Root Certificate Authority
Objective Becoming organization/private PKI provider Shared rootCA certificate to be trusted by client. Creating a Root Certificate Authority 1. Create your root CA RSA key...
OpenShift 4: Splunk HEC Integration
NOTE: This article focused on technical feasibility and features. For production usage this require detail implementation discussion. Objective. We want to ship containers and apiserver...
Red Hat OpenShift Container Storage 4.2: Lab Installation
Official documentation of Red Hat OpenShift Container Storage can be found here. This blog merely written only to show on the technical feasibility such configuration...
OpenShift 4: Libvirt UPI installation.
Hello everyone, just a couple of month ago, Red Hat has released a shiny OpenShift 4 [1] based on CoreOS technology. In this guide, we...
DevSecOps with OpenShift – Image Signing
INTRODUCTION Just like an RPM signing, container image singing can be used to verify authenticity of a container image created by users/developers throughout image life-cycle....
Enforcing modern and strong OCP TLS & Cipher Suites
Introduction Enforcing strong and modern cipher is critical to ensure our deployment are well protected from old and weak cipher. Enforcing only strong and modern...
