+

Search Tips   |   Advanced Search

OpenShift For Administrators

Design

1. Move to to Red Hat OpenShift on IBM Cloud
2. Security strategy
3. Choose a supported infrastructure provider.
4. Plan the cluster network setup.
5. Plan for High availability.
6. Plan worker node setup.

Create a cluster

1. Open the required firewall ports and IP addresses
2. Set up the CLIs
   • Command reference
   • Track CLI changelog.
3. Set up automated deployments with the API (Optional)
   • IBM Cloud Kubernetes Service API reference
   • Community Kubernetes API reference.
4. Create the cluster.
5. Access the cluster.
6. Add worker nodes and zones to the cluster.
7. Select an access policy and roles for users.
   • Access roles for individual or groups of users in IBM Cloud IAM
   • Choose the scope of user access to cluster instances, OpenShift project, or resource groups
8. Assign cluster access
   • User access permissions reference.
9. Troubleshoot clusters and masters
10. Troubleshoot worker nodes.

Manage the network

1. Set up VPN connectivity between classic cluster or VPC cluster.
2. Add custom static routes
3. VLAN connections for the worker nodes
4. Troubleshoot cluster networking

Secure the cluster

1. Review security options
2. Classic clusters:
   • Restrict network traffic to edge worker nodes
   • Set up a firewall by using a gateway appliance or Calico network policies.
3. VPC clusters:
   • VPC security groups
4. Encrypt sensitive information
5. Set up a private image registry
6. Set pod priority
7. Set security context constraints (SCCs).

Logging and monitoring

Set up logging and monitoring to help you troubleshoot issues and improve the health and performance of our Kubernetes clusters and apps.

1. Choose solutions for app and cluster logging, audit logging, and monitoring
   • LogDNA
   • Sysdig

Add a registry and CI/CD

1. Set up image registry
   • Internal registry
   • Pull an image from a private registry
   • IBM Cloud Container Registry
   • Create an image pull secret
   • Import an image from the private registry into the internal registry image stream
2. Options for automating app deployment
3. IBM Continuous Delivery Pipeline for IBM Cloud.

Add storage

1. Basics of Kubernetes storage.
2. Requirements for a storage solution.
3. Non-persistent, single-zone persistent, or multizone persistent storage
4. Troubleshooting persistent storage

Add integrations

1. All supported integrations
2. Red Hat OpenShift on IBM Cloud partners
3. IBM Cloud services and third-party integrations
4. Add Cloud Paks
5. Add services by using Operators
6. Add services by using IBM Cloud service binding
7. Troubleshoot apps and integrations

Manage the lifecycle

1. Automatically increase or decrease the number of worker nodes
2. Update clusters, worker nodes, and cluster components
   • Version information and update actions
   • Version changelog
   • Fluentd and Ingress ALB changelog
3. Remove clusters and clean up related resources
4. Troubleshoot clusters and masters
5. Troubleshoot worker nodes
6. Troubleshoot cluster autoscaler