Start writing exercise 2 for content mirror.
This commit is contained in:
62
data/workshop/exercise2.mdx
Normal file
62
data/workshop/exercise2.mdx
Normal file
@ -0,0 +1,62 @@
|
|||||||
|
---
|
||||||
|
title: Mirror required content
|
||||||
|
exercise: 2
|
||||||
|
date: '2024-08-23'
|
||||||
|
tags: ['openshift','containers','kubernetes','disconnected']
|
||||||
|
draft: false
|
||||||
|
authors: ['default']
|
||||||
|
summary: "You want features? Mirror them in!🪞"
|
||||||
|
---
|
||||||
|
|
||||||
|
The disconnected OpenShift cluster you have been allocated is the result of a very standard installation, and does not have any post installation features added.
|
||||||
|
|
||||||
|
During this workshop we want to secure the cluster with Advanced Cluster Security, understand our compliance posture against NIST 800-53 with the OpenShift Compliance Operator and then make it easy for our Developers to do the right thing with Red Hat Developer Hub.
|
||||||
|
|
||||||
|
To install and configure these features we first need to mirror some additional content into our disconnected environment, let's get started.
|
||||||
|
|
||||||
|
## 2.1 - Open a terminal on your low side
|
||||||
|
|
||||||
|
Our first step to prepare to mirror content is to get connected to our low side jump host via `ssh`. Replace the placeholder ip address below with the actual ip address you've been allocated for your environment.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
ssh lab-user@<placeholder>
|
||||||
|
```
|
||||||
|
You'll be prompted to enter a password which you can find in your allocated environment details.
|
||||||
|
|
||||||
|
After connecting change directory to the low side workspace where the intial cluster installation was already completed for you and review the folder contents:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd /mnt/low-side-data
|
||||||
|
|
||||||
|
ls -lah
|
||||||
|
```
|
||||||
|
|
||||||
|
Your workspace will look similar to the one below:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
[lab-user@jump low-side-data]$ ls -lah
|
||||||
|
total 25G
|
||||||
|
drwxr-xr-x. 4 lab-user lab-user 4.0K Aug 22 00:22 .
|
||||||
|
drwxr-xr-x. 3 root root 27 Aug 19 04:10 ..
|
||||||
|
-rw-r--r--. 1 lab-user lab-user 473 Aug 22 00:10 imageset-config.yaml
|
||||||
|
-rw-r--r--. 1 lab-user lab-user 696M Aug 21 23:57 mirror-registry.tar.gz
|
||||||
|
-rw-r--r--. 1 lab-user lab-user 24G Aug 22 00:22 mirror_seq1_000000.tar
|
||||||
|
-rwxr-xr-x. 1 lab-user lab-user 146M Mar 26 22:17 oc
|
||||||
|
-rwxr-x--x. 1 lab-user lab-user 144M Mar 22 18:34 oc-mirror
|
||||||
|
-rw-------. 1 lab-user lab-user 183K Aug 22 00:16 .oc-mirror.log
|
||||||
|
drwxr-xr-x. 3 lab-user lab-user 17 Aug 22 00:13 oc-mirror-workspace
|
||||||
|
-rwxr-xr-x. 1 lab-user lab-user 630M Mar 22 19:32 openshift-install
|
||||||
|
drwxr-x---. 2 lab-user lab-user 28 Aug 22 00:22 publish
|
||||||
|
```
|
||||||
|
|
||||||
|
## 2.2 - Get familiar with oc-mirror
|
||||||
|
|
||||||
|
To mirror content into our disconnected environment we will be using the [`oc-mirror`](https://github.com/openshift/oc-mirror) openshift client utility.
|
||||||
|
|
||||||
|
To configure what content `oc-mirror` will download and mirror for us we use a YAML formatted file called an `ImageSetConfiguration`. This file declares:
|
||||||
|
|
||||||
|
1. **What to download** which can include (OpenShift itself, operator bundles, helm charts, or specific container images)
|
||||||
|
2. **What versions**
|
||||||
|
3. **Where to store the downloaded content**
|
||||||
|
|
||||||
|
As part of the initial installation of OpenShift an `ImageSetConfiguration` file has already been created for you.
|
||||||
Reference in New Issue
Block a user