cs-tsui / container-cheatsheet

Openshift-Cheatsheet

Approve CSR

oc get csr -o name | sed -e 's/.*\///g' | xargs -I {} oc adm certificate approve {}

oc adm certificate approve $(oc get csr | grep -i pending | awk '{print $1}' | grep -v NAME)

Print out global pull secret

oc get secret pull-secret -n openshift-config -o yaml -o jsonpath='{.data.\.dockerconfigjson}' | base64 -d | jq

See trusted CA

oc get image.config.openshift.io/cluster -o yaml

Check pull secret on OCP nodes

# pull secret on normal cluster
cat /var/lib/kubelet/config.json

# pull secret on ROKS cluster
cat ~/.docker/config.json

# mirror registry file
cat /etc/containers/registries.conf

# trim String - remove first part
echo "delimited.string" | cut -d '.' -f2-

See the syntax for different k8s objects

oc explain pods --recursive

Get Ingress Domain

oc get --namespace=openshift-ingress-operator ingresscontroller/default -o jsonpath='{.status.domain}'

Add SCC

oc adm policy add-scc-to-user anyuid -z my-serviceaccount

Point to specific PVC for image registry and enable

oc patch configs.imageregistry.operator.openshift.io cluster --type merge --patch \
  '{"spec":{"storage":{"pvc":{"claim":"image-registry-storage"}}}}'
  
# Enable
oc patch configs.imageregistry.operator.openshift.io cluster --type merge --patch \
  '{"spec":{"managementState":"Managed"}}'

OpenSSL

Show certs on target host/port

openssl s_client -connect $HOST:$PORT -showcerts

Podman/Docker

Show selected fields

sudo podman ps --format="{{.ID}} {{.Names}} {{.Ports}}"

Save Text with 'cat'

cat << EOF > kafka.properties
bootstrap.servers=kafka:9071
sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username="test" password="test123";
sasl.mechanism=PLAIN
security.protocol=SASL_PLAINTEXT
EOF