=====OPenshift=====

Trainning class for basics of openshift

DO080 - Containers, Kubernetes and Red Hat OpenShift Technical Overview

====OCP upgrade Process====

[[linux:openshift:open-case | open case with Redhat]]

[[https://daadateam.visualstudio.com/Integration_Services/_wiki/wikis/Integration-Hub.wiki/448/Post-Update-Checklist | post upgrade list from Sean]]

====Openshift reboot node====

[[linux:openshift:reboot | Reboot a Node]]


====Openshift errors and fixes====

[[:linux:Ansible:Fixes]] Ansible errors and fixes
====Openshift Commands used =====

to monitor an upgrade

<code> watch oc get mcp </code>

To drain a node or see what is holding up a drain (make sure to specify correct node!!)

<code>  oc adm drain worker2.int-services-lab.daa.ie --ignore-daemonsets --delete-emptydir-data </code>

If something is stuck on evicting you can delete it using

First connect to associated project to get more information. This is listed under namespace in the gui when you expand the pod details)

<code> oc project project name </code>

To get pods associated with this project (namespace)

<code> oc get pods </code>

from here you will see pods and their state. THe Stuck pod will be seen as terminating and will be there for a while. You can delete it using

<code> oc delete pod/NAME_of_POD _STUCK --force </code>

For **DMZ** during patching there is a requirement to have extra worker nodes. WE can temporarily do this by modifying the configuration of the infra nodes.
just add this line in the **yml** configuration under line 14
<code> node-role.kubernetes.io/worker: ''  </code>

====Ldap====

[[https://dev.azure.com/daadateam/Integration_Services/_wiki/wikis/Integration-Hub.wiki/437/DMZ-Azure-ldap-Config?anchor=updating-azure-ldap-client-secret| link to update ldap secret.. needs to be done every 12 months]]

====Upgrading====

remember to open a [[https://access.redhat.com/solutions/3521621 |proactive case]] with redhat and submit a 
[[https://docs.redhat.com/en/documentation/openshift_container_platform/4.6/html/support/gathering-cluster-data#gathering-cluster-data| must gather]]