API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 11th, 2018
98
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.87 KB | None | 0 0
raw download clone embed print report
  1. [root@domdev01 ~]$ oc get nodes
  2. NAME STATUS ROLES AGE VERSION
  3. doadev01.sg.gbs.pro Ready compute 3d v1.11.0+d4cacc0
  4. doidev01.sg.gbs.pro Ready infra 3d v1.11.0+d4cacc0
  5. doidev02.sg.gbs.pro Ready infra 3d v1.11.0+d4cacc0
  6. domdev01.sg.gbs.pro Ready master 3d v1.11.0+d4cacc0
  7. domdev02.sg.gbs.pro Ready master 3d v1.11.0+d4cacc0
  8. domdev03.sg.gbs.pro Ready master 3d v1.11.0+d4cacc0
  9.  
  10.  
  11.  
  12. [root@domdev01 ~]$ oc get pods | egrep "Error|CrashLoopBack"
  13. [root@domdev01 ~]$
  14.  
  15.  
  16.  
  17.  
  18.  
  19. https://docker-registry-default.internalservices-dev.devops.tst
  20.  
  21.  
  22.  
  23.  
  24.  
  25.  
  26. ### Namespace "webconsole-config" ConfigMap
  27. ### per modificare il puntamento delle metriche su tutte le app
  28.  
  29. apiVersion: webconsole.config.openshift.io/v1
  30. clusterInfo:
  31. adminConsolePublicURL: https://console.apps-dev.devops.tst/
  32. consolePublicURL: https://doconsole-dev.sg.gbs.tst/console/
  33. loggingPublicURL: https://kibana.apps-dev.devops.tst
  34. logoutPublicURL: ''
  35. masterPublicURL: https://doconsole-dev.sg.gbs.tst:443
  36. metricsPublicURL: https://hawkular-metrics.apps-dev.devops.tst/hawkular/metrics
  37. extensions:
  38. properties: {}
  39. scriptURLs: []
  40. stylesheetURLs: []
  41. features:
  42. clusterResourceOverridesEnabled: false
  43. inactivityTimeoutMinutes: 0
  44. kind: WebConsoleConfiguration
  45. servingInfo:
  46. bindAddress: 0.0.0.0:8443
  47. bindNetwork: tcp4
  48. certFile: /var/serving-cert/tls.crt
  49. clientCA: ''
  50. keyFile: /var/serving-cert/tls.key
  51. maxRequestsInFlight: 0
  52. namedCertificates: null
  53. requestTimeoutSeconds: 0
  54.  
  55.  
  56.  
  57.  
  58.  
  59.  
  60.  
  61.  
  62.  
  63.  
  64.  
  65.  
  66.  
  67.  
  68.  
  69.  
  70.  
  71.  
  72.  
  73.  
  74.  
  75. [root@domdev01 ~]$
  76. [root@domdev01 ~]$ oc new-app bsella https://git.sg.gbs.pro/projects/ARCH/repos/openshift --source-secret=bancasella-bitbucket
  77. W1204 11:31:44.435411 14761 dockerimagelookup.go:233] Docker registry lookup failed: Get https://registry-1.docker.io/v2/: x509: certifi cate is valid for *.NET.GBS.PRE, not registry-1.docker.io
  78. error: local file access failed with: stat bsella: no such file or directory
  79. error: unable to locate any images in image streams, templates loaded in accessible projects, template files, local docker images with nam e "bsella"
  80. error: git ls-remote failed with: execution of git ls-remote https://git.sg.gbs.pro/projects/ARCH/repos/openshift timed out after 30s; lo cal file access failed with: stat https://git.sg.gbs.pro/projects/ARCH/repos/openshift: no such file or directory
  81. error: unable to locate any images in image streams, templates loaded in accessible projects, template files, local docker images with nam e "https://git.sg.gbs.pro/projects/ARCH/repos/openshift"
  82.  
  83. Argument 'https://git.sg.gbs.pro/projects/ARCH/repos/openshift' was classified as an image, image~source, or loaded template reference.
  84.  
  85. The 'oc new-app' command will match arguments to the following types:
  86.  
  87. 1. Images tagged into image streams in the current project or the 'openshift' project
  88. - if you don't specify a tag, we'll add ':latest'
  89. 2. Images in the Docker Hub, on remote registries, or on the local Docker engine
  90. 3. Templates in the current project or the 'openshift' project
  91. 4. Git repository URLs or local paths that point to Git repositories
  92.  
  93. --allow-missing-images can be used to point to an image that does not exist yet.
  94.  
  95. See 'oc new-app -h' for examples.
  96. [root@domdev01 ~]$
  97.  
  98.  
  99.  
  100.  
  101. gbs02293
  102. sella112018
  103.  
  104.  
  105. [root@domdev01 ~]$ docker login git.sg.gbs.pro -u gbs02293
  106. Password:
  107. Error response from daemon: Get https://git.sg.gbs.pro/v1/users/: dial tcp 172.20.136.117:443: i/o timeout
  108. [root@domdev01 ~]$
  109.  
  110.  
  111. [root@domdev01 ~]$ docker images
  112. REPOSITORY TAG IMAGE ID CREATED SIZE
  113. registry.redhat.io/rhel7/etcd 3.2.22 635bb36d7fc7 13 days ago 259 MB
  114. registry.redhat.io/openshift3/ose-node v3.11 901c817d48cc 3 weeks ago 1.17 GB
  115. registry.redhat.io/openshift3/ose-control-plane v3.11 e043f4037c7f 3 weeks ago 807 MB
  116. registry.redhat.io/openshift3/ose-kube-rbac-proxy v3.11.43 346b8706ab75 3 weeks ago 487 MB
  117. registry.redhat.io/openshift3/ose-console v3.11 3d8540e8cdb8 3 weeks ago 254 MB
  118. registry.redhat.io/openshift3/ose-web-console v3.11 c9309fc930f5 3 weeks ago 322 MB
  119. registry.redhat.io/openshift3/ose-pod v3.11 47ea091bca33 3 weeks ago 238 MB
  120. registry.redhat.io/openshift3/ose-pod v3.11.43 47ea091bca33 3 weeks ago 238 MB
  121. registry.redhat.io/openshift3/ose-service-catalog v3.11.43 dc09eb43a18c 3 weeks ago 309 MB
  122. registry.redhat.io/openshift3/ose-template-service-broker v3.11.43 354b1216b490 3 weeks ago 313 MB
  123. registry.redhat.io/openshift3/prometheus-node-exporter v3.11.43 1ca7e0622370 3 weeks ago 225 MB
  124. registry.redhat.io/openshift3/ose-logging-fluentd v3.11.43 0fef36d87b56 3 weeks ago 289 MB
  125. registry.redhat.io/openshift3/registry-console v3.11 73938699cd8a 3 weeks ago 237 MB
  126. docker-registry-default.internalservices-dev.devops.tst:5000/bsella/apache-httpd latest ff2239568726 2 months ago 353 MB
  127. docker-registry-default.router.default.svc.cluster.local/sella/apache-httpd 1.0 ff2239568726 2 months ago 353 MB
  128. [root@domdev01 ~]$
  129. [root@domdev01 ~]$
  130. [root@domdev01 ~]$ docker push docker-registry-default.internalservices-dev.devops.tst:5000/bsella/apache-httpd
  131. The push refers to a repository [docker-registry-default.internalservices-dev.devops.tst:5000/bsella/apache-httpd]
  132. Get https://docker-registry-default.internalservices-dev.devops.tst:5000/v1/_ping: Gateway Timeout
  133. [root@domdev01 ~]$
  134. [root@domdev01 ~]$
  135.  
  136.  
  137.  
  138. [root@domdev01 ~]$ telnet docker-registry-default.internalservices-dev.devops.tst 5000
  139. Trying 172.17.244.49...
  140.  
  141. [root@domdev01 ~]$ docker push docker-registry-default.internalservices-dev.devops.tst/bsella/apache-httpd
  142. The push refers to a repository [docker-registry-default.internalservices-dev.devops.tst/bsella/apache-httpd]
  143. 74647f952e28: Retrying in 1 second
  144. 9cd8a8f6bf9d: Retrying in 1 second
  145. 22888f7bc143: Retrying in 1 second
  146. 170cdd8a9ac5: Retrying in 1 second
  147. 911cee7531eb: Retrying in 1 second
  148. f0897fc7c83e: Waiting
  149. cd97d0208235: Waiting
  150. f9bf6da67ad7: Waiting
  151. 1d31b5806ba4: Waiting
  152.  
  153.  
  154.  
  155. ####### LOGGING
  156. # For each infra node run the following command:
  157. chown 1000:1000 /mnt/local-storage/elasticsearch-storage
  158.  
  159. # From one master node run the following commands:
  160. oc project openshift-logging
  161. oc adm policy add-scc-to-user privileged system:serviceaccount:openshift-logging:aggregated-logging-elasticsearch
  162. oc scale dc logging-es-data-master-ak4ni4on --replicas=0
  163. oc patch dc logging-es-data-master-ak4ni4on -p '{"spec":{"template":{"spec":{"containers":[{"name":"elasticsearch","securityContext":{"privileged": true}}]}}}}'
  164. oc label node doipre01.sg.gbs.pro logging-es-node=1
  165. oc set volume dc logging-es-data-master-ak4ni4on --add --overwrite --name=elasticsearch-storage --type=hostPath --path=/mnt/local-storage/elasticsearch-storage
  166. oc rollout latest dc/logging-es-data-master-ak4ni4on
  167. oc scale dc logging-es-data-master-ak4ni4on --replicas=1
  168.  
  169. #################
  170.  
  171. ## REGISTRY ##
  172. - update route in:
  173. - Hostname: docker-registry.internalservices.devops.pre
  174. ## REGISTRY CONSOLE ##
  175. - Create a new secret with CRT+KEY+CA
  176. - Key: extensio -> .cert
  177. - Mount secret to container (edit DC)
  178. - update route in:
  179. - Hostname: registry-console.internalservices.devops.pre (example)
  180. - TLS Termination : reencrypt
  181. - Certificate: registry-console crt
  182. - Private Key: registry-console crt
  183. - CA Certificate: registry-console crt + CA
  184. - Destination CA Certificate: registry-console crt + CA
  185.  
  186. ## PROMETHEUS ##
  187. - From openshift-monitoring project edit the following route:
  188. - alertmanager-main
  189. - Hostname: alertmanager-main-openshift-monitoring.internalservices-dev.devops.tst (example)
  190. - put into the fields Certificate, CA Certificate, Destination CA Certificate the value contained into the secret alertmanager-main-tls/tls.crt
  191. - put into the fields Private Key the value contained into the secret alertmanager-main-tls/tls.key
  192. - prometheus-k8s
  193. - Hostname: prometheus-k8s-openshift-monitoring.internalservices-dev.devops.tst (example)
  194. - put into the fields Certificate, CA Certificate, Destination CA Certificate the value contained into the secret prometheus-k8s-tls/tls.crt
  195. - put into the fields Private Key the value contained into the secret prometheus-k8s-tls/tls.key
  196. - grafana
  197. - Hostname: grafana-openshift-monitoring.internalservices-dev.devops.tst (example)
  198. - put into the fields Certificate, CA Certificate, Destination CA Certificate the value contained into the secret grafana-tls/tls.crt
  199. - put into the fields Private Key the value contained into the secret grafana-tls/tls.key
  200.  
  201. ## ROUTE SHARDING ##
  202. https://docs.openshift.com/container-platform/3.11/install_config/router/default_haproxy_router.html#using-router-shards
  203.  
  204. oc adm router router-pre --replicas=1 --force-subdomain='${name}-${namespace}.apps.devops.pre' --selector="region=pre,node-role.kubernetes.io/infra=true"
  205. oc set env dc/router-pre "DEFAULT_CERTIFICATE_PATH=/etc/pki/tls/private/tls.crt" "EXTENDED_VALIDATION=true"
  206. ## REMOVE - name: ROUTER_OVERRIDE_HOSTNAME value: "true"
  207.  
  208. ### Datacenter produzione
  209. master tutti i sede
  210.  
  211. infra01 -> ced
  212. infra02 -> sede
  213. infra03 -> ced
  214. infra04 -> sede
  215.  
  216. node01 -> ced
  217. node02 -> sede
  218. node03 -> ced
  219. node04 -> sede
  220.  
  221.  
  222. [{'name': 'node-config-master', 'labels': ['node-role.kubernetes.io/master=true']},{'name': 'node-config-infra-sede', 'labels': ['node-role.kubernetes.io/infra=true','failure-domain.beta.kubernetes.io/zone=sede']},{'name': 'node-config-infra-ced', 'labels': ['node-role.kubernetes.io/infra=true','failure-domain.beta.kubernetes.io/zone=ced']},{'name': 'node-config-compute-sede', 'labels': ['node-role.kubernetes.io/compute=true','failure-domain.beta.kubernetes.io/zone=sede']},{'name': 'node-config-compute-ced', 'labels': ['node-role.kubernetes.io/compute=true','failure-domain.beta.kubernetes.io/zone=ced']}]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!