While it would be great if a Helm installation worked every time, you would likely need to troubleshoot from time to time due to the variety of deployment environments and cluster configurations. One of the best ways to start troubleshooting is to inspect what Helm has created for you using the “helm get” subcommands.
Read More
I recently ran into problems trying to reference an ImageStream from my Deployment on OpenShift. I had just built a new image and pushed it to an ImageStream, but when I tried to refer to it from my Deployment, I got ErrImagePull errors…
Read More
When developing Helm charts, you may encounter a use case where you need to create a specific Kubernetes resource only if that particular resource is registered with the API. For example, imagine you maintain a Helm chart that should be made deployable to different Kubernetes …
Read More
When you build a Docker image, a series of layers get cached to speed up subsequent builds. However, this caching can have adverse effects if an image layer contains secrets, such as credentials. A malicious person or process could find the layer containing your secrets …
Read More
There are many times in OpenShift where microservices need to talk to each other internally without exposing routes to the outside world. These microservices interact via the Kubernetes service API, which acts as a load balancer that resolves a set of pods to a single … “Troubleshooting OpenShift Internal Networking”
Read More
There is often some confusion about the ImageStream resource on OpenShift. Many people will create an ImageStream with hopes of pulling an image into their internal registry. They may use this command to create an ImageStream for nexus-repository-manager from the Red Hat Container Catalog: oc … “A Word about OpenShift ImageStreams”
Read More
Earlier this year I helped shoot a video with Red Hat about CI/CD on OpenShift. This video covers three key topics: automating CI/CD configuration, using a git repository for common CI/CD artifacts, and parameterizing Jenkins pipelines. We viewed these topics as a few of the … “CI/CD on OpenShift Best Practices (a few, at least)”
Read More
Advanced audit is a feature that logs requests at the API server level. When enabled, these logs are output to a log file on the master node but are not caught by the EFK stack in OpenShift. Today, we will walk through the advanced audit … “Integrating Advanced Audit with Aggregated Logging in OpenShift 3.11”
Read More