Tag Archives: OpenShift

#Spinnaker on #OpenShift

Development, ,

To be able to deploy Spinnaker onto OpenShift cluster there is a need to make restrictions slightly softer:

oc -n spinnaker edit scc restricted

Then modify next part, the main thing is runAsUser to change type to RunAsAny.

requiredDropCapabilities:
  - KILL
  - MKNOD
  - SETUID
  - SETGID
  runAsUser:
    type: RunAsAny
  seLinuxContext:
    type: MustRunAs

#OpenShift #oc #cluster up with external accessible URL

Development, ,

Set up cluster:

oc cluster up --routing-suffix=okd --base-dir=_cluster_config_dir --public-hostname=master.okd

Tear down cluster:

oc cluster down

Change cluster settings:

vim _cluster_config_dir/kube-apiserver/admin.kubeconfig
apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: LS0t
    server: https://master.okd:8443
  name: 127-0-0-1:8443
- cluster:
    certificate-authority-data: LS0tL
    server: https://master.okd:8443
  name: master-okd:8443
...

and:

 vim _cluster_config_dir/kube-apiserver/master-config.yaml
...
masterPublicURL: https://master.okd:8443
...
oauthConfig:
  alwaysShowProviderSelection: false
  assetPublicURL: https://master.okd:8443/console/
  ...
  masterCA: ca-bundle.crt
  masterPublicURL: https://master.okd:8443
  masterURL: https://master.okd:8443
...

Start up cluster again:

oc cluster up --routing-suffix=okd --base-dir=_cluster_config_dir --public-hostname=master.okd
Getting a Docker client ...
Checking if image openshift/origin-control-plane:v3.11 is available ...
Creating shared mount directory on the remote host ...
Determining server IP ...
Checking if OpenShift is already running ...
Checking for supported Docker version (=>1.22) ...
Checking if insecured registry is configured properly in Docker ...
Checking if required ports are available ...
Checking if OpenShift client is configured properly ...
...
...skipping...
 
The server is accessible via web console at:
    https://master.okd:8443
 
You are logged in as:
    User:     developer
    Password: <any value>
 
To login as administrator:
    oc login -u system:admin