Questions tagged [openshift]

36 questions
9
votes
1 answer

What is the difference between objects project and namespace in Openshift 4.x

In openshift 4.x, you have an API for project which seems to be totally similar to namespace in the sense that when you create a project there a namespace created and the other way around. I know namespace is a standard object in kubernetes and…
3
votes
3 answers

Any point in running containers as non-root on openshift

The openshift documentation reads : To further protect RHCOS systems in OpenShift Container Platform clusters, most containers, except those managing or monitoring the host system itself, should run as a non-root user. Dropping the privilege level…
bryan hunt
  • 73
  • 5
2
votes
3 answers

kubernetes: how to check pod IP range allocated to node

Every node in a kubernetes cluster has a dedicated range of IP addresses that it can allocate to the pods. How can one check what that IP range is?
1
vote
0 answers

How to get the sudo permissions to the conatiner in openshift platform? on onpermises setup

I am facing below issue while running sudo command sudo: The "no new privileges" flag is set, which prevents sudo from running as root. sudo: If sudo is running in a container, you may need to adjust the container configuration to disable the…
1
vote
0 answers

Openshift nginx proxy_pass not redirecting from current host to another

This is my DockerFile FROM docker-enterprise.net/developers-nginx/nginx1.22/rhel8/nginx-rhel8:latest USER root RUN mkdir /.ionicsecurity && \ chmod 775 /.ionicsecurity && \ mkdir /nginxapps && \ mkdir /nginxapps/html && \ …
Pat
  • 111
  • 1
  • 4
1
vote
1 answer

Nginx configuration in OpenShift

I have been struggling with a solution to have nginx running, in OpenShift there is no use of root user during creation of the containers. Then, I was getting the following error: 2023/06/21 10:37:45 [emerg] 1#1: mkdir()…
John Barton
  • 113
  • 1
  • 4
1
vote
0 answers

How to include two phase types to look for in `oc wait` command

I'm editing a script that calls the oc wait command with these parameters: oc wait --for=condition=Ready pod --field-selector=status.phase!=Terminating -l app=foo --timeout=55s The above command executes successfully, but I need to check for…
wwillfred
  • 11
  • 1
1
vote
2 answers

Reset kubeadmin password in OKD 4.7

I tried to find password in .openshift_install.log file and I found something but it didn't work. I tried to oc get secrets kubeadmin -n kube-system -ojsonpath='{.data.kubeadmin}' | base64 --decode && echo "" and it didn't work neither. How can I…
1
vote
1 answer

Is there an "initial memory allocation" different from the "limit" in Openshift/Kubernetes?

In java, you have min heap space (-Xms) and max heap space (-Xmx). Min heap space is allocated to the JVM from start, "max heap space" is the limit where the JVM will say "out of heap space" when reaching it. Are there such different values (initial…
Tristan
  • 139
1
vote
1 answer

how openshift service loadbalance between pods?

This is a pretty basic question so I figure I must be missing something obvious, Does openshift service uses round-robin to load balance between pods? Or does it forward requests to the pod with the greatest amount of available resources? Or is it…
1
vote
0 answers

Open shift internal registry lost connection with the cluster

As a result getting image pull error while submitting the deployment to the kube API. Even the docker registry pod IP is in connection but VIRTUAL IP of docker registry lost connection with the cluster. Observed these logs in server. Error response…
1
vote
1 answer

401 Unauthorized when trying to log on to Openshift 4.5 with Google identity provider

I recently deployed a version 4.5 OKD cluster and everything seems fine, but I can't get the Google identity provider to work for signing in. I followed the instructions here, but with no success. When I try to log in with my company google identity…
JSM
  • 21
0
votes
0 answers

Drupal on Openshift: Image Generation Fails After Modifying Image Styles (Permission Issue on PVC)

I have a Drupal 10 deployment running on Kubernetes/OpenShift, where image generation fails after modifying an image style also the previews images and upload failes. The web/sites/default/files directory is mounted as a PersistentVolumeClaim (PVC),…
0
votes
0 answers

Grafana Dashboard queries don't work in browser but work through curl/postman

Setup I initially had TIG-stack (Telegraf, InfluxDB and Grafana) deployed in a Linux server where it worked as expected. I've recently deployed it on OKD (OpenShift upstream). I have several dashboards each of which work when the time range is small…
Anas
  • 1
0
votes
0 answers

OpenShift cluster

I need advise on building test Open Shift cluster using least hardware (rack space). Looking on requirements here: https://www.ibm.com/docs/en/cloud-paks/cp-security/1.10?topic=planning-hardware-requirements and these storage types supported by…
1
2 3