If you use Kubernetes/OpenShift in any capacity, you have no doubt seen commands that start with
oc being used to interact with the system. The
oc tool can do a lot, and is pretty intuitive to use once you understand a few things.
Note: I work for Red Hat, but I work on OpenShift stuff and am NOT a part of RHEL or CentOS in a professional capacity. I am a community member, and have been for almost 10 years now, much longer than I’ve worked at Red Hat. I have run CentOS in personal production for years and rely on it. Everything I am about to say is my opinion alone, and is not an official statement from Red Hat in any way. As employees we are allowed (and encouraged!) to participate in the community, and that is what I am doing…
Note: This article was originally published by the author on the Red Hat Developer Blog. You can read the original on the Red Hat Developer Blog here.
One of the most common questions I get as a consultant is, “What is the difference between a liveness and a readiness probe?” The next most frequent question is, “Which one does my application need?”
Anyone who has tried Duck Duck Go-ing these questions knows that they are difficult to answer using an internet search. In this article, I hope to help you answer these questions for yourself. I will share my opinion…
A namespace is a unit of organization that brings with it some management implications. If you put time into a designing a good namespace configuration, you get a lot of administrative functions for free, such as RBAC policies.
RBAC role bindings are done at the namespace scope, which means a user will generally have the same access permissions to each type of object in the namespace. …
There are numerous tasks that need to be done to ready a newly installed OpenShift cluster for use by developers. One such task is configuring default requests and limits, as well as project quotas.
Note: All examples here were developed/tested on OpenShift 4.5.5
Note: In bash shell code examples, the $ at the beginning is just used to indicate a command prompt. If you are copy/pasting commands with me, do not include the leading $ in your paste
So you are using OpenShift as your target platform (great choice!), but you need a local development environment? There is a lot of value in being able to run and test your application locally. With OpenShift this can be a bit of a challenge if you don’t know what’s out there. This blog post is intended to help offer some guidance to you.
There are a number of potential ways to go. The following is my recommendation based on experience and personal opinion.
In my opinion, there are 3 rough options, in order of preference:
Before reaching our goal of understanding mTLS, we need to understand regular TLS. There are tons of resources out there that vary in technical depth. My goal here is familiarization, not mastery (which requires complex understanding of cryptography and various standards like X.509. If you are aiming for mastery, I suggest looking into a course or a fine book. If you are hoping to become familiar with the basic ideas and terminology, look no further!
Why you should care:
Asymmetric encryption is one of those things that you use hundreds of times a day, but rarely (if ever) notice it. The ideas behind it are in widespread use, but most of the time you don’t need to understand it to benefit from it.
If you work in web development or…
How to leave your MacBook Pro and get a better, “Just Works” experience on Linux
I’ve had a lot of friends lately talking about leaving the Mac world (for a variety of reasons). They are mostly developers, but some are not. The overarching theme however, is that they want something that for the most part, “just works.”
You’ll find no shortage of opinions out there, and I’m sure there are plenty that will disagree with me. However, having recently purchased several different laptops, and having successfully helped many people convert and be happy, this is my advice:
You’ve got two…
Ben Porter is a Linux and open source advocate, currently working as an OpenShift consultant for Red Hat.