machineconfiguration.openshift.io/v1 kind: MachineConfigPool metadata: creationTimestamp: 2019-02-08T14:52:39Z generation: 1 labels: custom-kubelet: set-max-pods 1 $ oc label machineconfigpool matchLabels: custom-kubelet: set-max-pods status: conditions: - lastTransitionTime: "2021-06-30T17:04:07Z" message: Success status: "True" type: Success 第 第 1 章 章 推荐的主机 推荐的主机实 实践 践 9 apiVersion: imageregistry.operator.openshift.io/v1 kind: Config metadata: creationTimestamp: 2019-02-05T13:52:05Z finalizers: - imageregistry.operator.openshift.io/finalizer generation: 1 name: cluster

vxlanPort: 4789 第 第 5 章 章 OPENSHIFT CONTAINER PLATFORM 中的 中的 CLUSTER NETWORK OPERATOR 19 v4InternalSubne t 如果您的现有网络 基础架构与 100.64.0.0/16 IPv4 子网重叠，您 可以指定不同的 IP 地址范围供 OVN- Kubernetes 使用。 您必须确保 IP 地址 范围没有与 OpenShift hostPrefix 值为 /23，则最大节点数 量为 2^(23- 14)=512。 在安装后无法更改 此字段。 默认值为 100.64.0.0/16。 v6InternalSubne t 如果您的现有网络 基础架构与 fd98::/48 IPv6 子 网重叠，您可以指 定不同的 IP 地址范 围供 OVN- Kubernetes 使用。 您必须确保 IP 地址 范围没有与 OpenShift type: Container $ oc -n openshift-ingress logs deployment.apps/router-default -c logs 2020-05-11T19:11:50.135710+00:00 router-default-57dfc6cd95-bpmk6 router-default- 57dfc6cd95-bpmk6 haproxy[108]:

ged -n openshift-cnv -o json | jq ".status.conditions" [ { "lastTransitionTime": "2022-12-09T16:29:11Z", "message": "Reconcile completed successfully", "observedGeneration": 3, "reason": "status": "True", "type": "ReconcileComplete" }, { "lastTransitionTime": "2022-12-09T20:30:10Z", "message": "Reconcile completed successfully", "observedGeneration": 3, "reason": "ReconcileCompleted", "status": "True", "type": "Available" }, { "lastTransitionTime": "2022-12-09T20:30:10Z", "message": "Reconcile completed successfully", "observedGeneration": 3, "reason":

type: Container $ oc -n openshift-ingress logs deployment.apps/router-default -c logs 2020-05-11T19:11:50.135710+00:00 router-default-57dfc6cd95-bpmk6 router-default- 57dfc6cd95-bpmk6 haproxy[108]: Syslog syslog: address: 1.2.3.4 port: 10514 httpLogFormat: '%ci:%cp [%t] %ft %b/%s %B %bq %HM %HU %HV' apiVersion: operator.openshift.io/v1 kind: IngressController metadata: 10.0.0.4:6443 tlsClientCert: name: "" status: conditions: - lastTransitionTime: "2021-01-13T20:11:34Z" message: 'kubernetes-apiserver-endpoint-ci-ln-x5sv9rb-f76d1-4rzrp-master-0: tcp

oc create -f .yaml route.route.openshift.io/elasticsearch created $ token=$(oc whoami -t) $ routeES=`oc get route elasticsearch -o jsonpath={.spec.host}` curl -tlsv1.2 --insecure -H "Authorization: uid: 62038aa9-661f-41d7-ba93-b5f1b6ef8751 resourceVersion: '39083' creationTimestamp: '2020-04-13T19:07:55Z' labels: node-role.kubernetes.io/infra: '' ... apiVersion: logging.openshift.io/v1 kind: "catalogsource_operators_coreos_com/update=redhat-marketplace" ] }, "message": "time=\"2020-09-23T20:47:03Z\" level=info msg=\"serving registry\" database=/database/index.db port=50051", "level":

alpha generate dockerfile "$name" indexImage=$(yq eval '.repo + ":" + .tag' catalog.yaml) docker build -t "$indexImage" -f "$name.Dockerfile" . docker push "$indexImage" OpenShift Container Platform 4.14 Operator svc:50051 lastConnect: 2021-08-26T18:14:31Z lastObservedState: READY 13 latestImageRegistryPoll: 2021-08-26T18:46:25Z 14 registryService: 15 createdAt: 2021-08-26T16:16:37Z port: 50051 ... catalogSources: [] conditions: - lastTransitionTime: '2021-01-01T20:17:27Z' lastUpdateTime: '2021-01-01T20:17:27Z' status: 'True' type: Installed phase: Complete plan:

openshift-cnv kubevirt-hyperconverged \ -o=jsonpath='{range .status.conditions[*]}{.type}{"\t"}{.status}{"\t"}{.message}{"\n"}{end}' 第 第 5 章 章 更新 更新 OPENSHIFT VIRTUALIZATION 37 输出示例 出示例 5.4.2. 查看过时的 OpenShift Virtualization 功能。 6.1. 为 VIRT-LAUNCHER POD 扩展 SELINUX 策略 virt-launcher Pod 的 container_t SELinux 策略被扩展来启用 OpenShift Virtualization 的基本功能。 网络多队列需要以下策略，它可在可用 vCPU 数量增加时扩展网络性能： allow process allow process hugetlbfs_t (dir (add_name create write remove_name rmdir setattr)) allow process hugetlbfs_t (file (create unlink)) 以下策略允许 virtiofs 挂载文件系统并访问 NFS： allow process nfs_t (dir (mounton)) allow

oc create -f .yaml route.route.openshift.io/elasticsearch created $ token=$(oc whoami -t) $ routeES=`oc get route elasticsearch -o jsonpath={.spec.host}` curl -tlsv1.2 --insecure -H "Authorization: uid: 62038aa9-661f-41d7-ba93-b5f1b6ef8751 resourceVersion: '39083' creationTimestamp: '2020-04-13T19:07:55Z' labels: node-role.kubernetes.io/infra: '' ... apiVersion: logging.openshift.io/v1 kind: "catalogsource_operators_coreos_com/update=redhat-marketplace" ] }, "message": "time=\"2020-09-23T20:47:03Z\" level=info msg=\"serving registry\" database=/database/index.db port=50051", "level":

https://api-int. .:6443 sh-4.2# podman login -u kubeadmin -p $(oc whoami -t) image-registry.openshift-image- registry.svc:5000 OpenShift Container Platform 4.8 容器 容器镜 镜像 像仓库 仓库（ openshift-image-registry 2015-05-01T19:48:36.300593110Z time="2015-05-01T19:48:36Z" level=info msg="version=v2.0.0+unknown" 2015-05-01T19:48:36.303294724Z time="2015-05-01T19:48:36Z" level=info msg="redis 1fea646002 2015-05-01T19:48:36.303422845Z time="2015-05-01T19:48:36Z" level=info msg="using inmemory layerinfo cache" instance.id=9ed6c43d-23ee-453f-9a4b-031fea646002 2015-05-01T19:48:36.303433991Z t

https://openshift.example.com:6443 (openshift) Username: user1 Password: 3 Login successful. You don't have any projects. You can try to create a new project, by running oc new-project # and sends stdout/stderr from 'bash' back to the client oc attach mypod -c ruby-container -i -t # Get output from the first pod of a replica set named nginx oc attach rs/nginx # Check to see certificate # default to the service CA oc create route reencrypt --service=frontend # If you don't already have a .dockercfg file, you can create a dockercfg secret directly by using: oc create secret