►
Description
Join data experts Chris Blum, Michelle DiPalma, and data novice Chris Short every other week for a hands-on Office Hour about Red Hat OpenShift Data Science. Be ready with your questions and learn a few things along the way.
A
A
A
A
A
A
A
B
A
B
Absolutely
yes,
so
we're
gonna
encrypt
some
stuff
and
it's
it's
a
pretty
straightforward
demo.
I
think
I'd
like
to
show
you
how
to
do
that,
how
to
configure
odf
open
data
foundation
to
encrypt
at
rest.
Cluster-Wide
we'll
talk
about
some
stuff,
that's
coming
in
the
future,
but
I
won't
demo
it
we'll
just
kind
of
talk
about
it
and
then,
if
we
have
time
it
would
be
nice
to
show
off
some
of
the
changes
in
access
redhead.com
under
our
our
product
area.
If
we
yeah.
A
B
Okay,
so
this
is
our
ocs
training
page.
So
I
just
want
to
take
a
moment
to
shout
out
to
my
team
about
this
wonderful
site
that
they
set
up
so
we're
full
of
our
team's
full
of
practitioners,
and
there
are
they
just
they
really
put
together
wonderful
training,
and
it's
just.
I
highly
recommend
that
anyone
who's
thinking
about
odf
or
has
odf
come
to
these
pages
go
through
them.
You
will
learn
so
much
just
by
picking
one
and
going
through
it
cli
based
installs.
B
B
A
B
B
C
B
In
and
they
say
what,
how
can
you
know
like
you?
Just
you
just
want
to
check
that
box,
make
sure
it's
done
and
handled
properly,
so
there
can
be
more
than
that
there
can
be
pv
level
encryption
which
would
think
about
that
as
isolating
apps
from
each
other.
So
you
know
a
great
example
would
be
payroll,
stuff,
hr,
stuff
things
that
should.
A
B
Encrypted
running
in
a
name
space
on
your,
you
just
want
to
take
that
extra
step
to
make
sure
that
there's
isolation
there.
The
key
things
to
note
here
one
is
cluster-wide:
encryption
is
ga
in
odf,
4.7,
pb
level.
Encryption
is
tech
preview,
so
I'm
holding
off
on
the
demo
for
that
until
it's
until
we're
further
along.
Unless
we
find
people
really
want
to
see
it,
maybe
we
can
schedule
another
one
or
something,
but
I'm
just
going
to
hold
off
on
it,
and
the
other
thing
is
going
to
mention.
A
V
level
would
be
for
apps
right,
like
this
app
as
a
finance
app.
It
has
to
be
encrypted.
You
know
sarbanes-oxley
says
I
have
to
encrypt
this
thing
or
my
entire
cluster.
Whatever
right,
like
there's
all
kinds
of
reasons
I
feel
like
encryption
is
a
good
idea
like
almost
by
default.
Now
I
feel
like
it
would
be.
B
B
A
B
B
So
that
makes
total
total
sense.
So
one
of
the
things
to
note
so
that's
for
cluster
white
encryption,
one
of
things
to
note
for
pv
level
encryption
is
that
it
actually
only
stores
the
access
key
in
vault.
The
rest
is
still
stored
in
openshift,
so
this
is
part
of
why
I
didn't
want
to
demo
it.
Yet
I'm,
like
you
know
more
things
are
coming.
It
totally
has
a
place
and
a
use.
We
can
just
look
at
the
document
and
you
can
test
it
out,
but
it's
it's
not
production.
A
B
Can't
can't
call
support.
Excuse
me,
you
can't
call
support
and
say
I'm
running
this
tech
preview
thing
in
production
and
I'm
having
trouble
so
that
would
just
freak
them
out.
So
don't
do
that.
Wait!
Wait
for
it
to
become
true.
So,
oh
just
I'm
going
to
commit
to
saying
odf
for
the
entire
show.
Okay,
so.
A
B
B
I
will
prove
this
to
you
not
there,
but
here
openshift
version
I'm
going
to
show
you
how
to
set
up
a
vault,
a
very
simple,
really
simple,
vault
install
and
then
we're
going
to
install
odf
and
we'll
talk
about
the
steps
there
so
and,
and
primarily
so.
Vault
is
running
on
my
bastion
host,
my
jump
post.
Okay,.
B
Just
yes,
it's
not
in
my
cluster
at
all,
it's
outside
so
and
also
you
really
only
need
a
few
things
out
of
vault
and
and
I'm
mentioning
this
because
chances
are,
our
customers
are
actually
turning
to
a
security
team
for
fault
right
like
it
would.
I
would
it's
probably
unusual
that
your
storage
people
are
actually
running
the
vault
server
itself,
they're
going
to
go
to
their
security
team
and
say:
oh
I'm
trying
to
do
this.
Can
you
please
create
the
following,
so
we
will
go
through
that
so
that
you
know
what
you're
asking.
A
I
would
think
you
know,
given
the
show
or
the
channel's
makeup,
there's
actually
probably
a
lot
of
people
that
are
worried
about
storage
and
encrypting
it
and
vault,
and
they
probably
need
to
figure
out
like
that
picture
and
what
they
need
to
do
to
get
to
where
we
want
them
to
be.
As
far
as
encryption
at
rest,.
B
C
A
A
B
B
And
then
this
little
piece
here
right
so
in
aws
I
did
go
in
and
add
a
nice
domain
name
to
my
jump
host,
which
I
you
know
not
the
not
the
amazon
name
but
a
real
actual
domain,
yeah,
that's
good,
yep
and
then
down
here
all
this
happened.
All
of
this
worked
really
well,
and
I
also
copied
everything
into
the
right
spot.
B
B
A
A
B
B
Yeah
yeah
and
I
actually
let's
have
a
look
at
mine,
but
I
did
this
as
well,
so
I
think
it's
there.
It
is
ta-da.
So
let's
have
a
look
at
this.
Oh
okay,
so
watch
the
in
the
document.
It's
pointed
out
what
you
need
to
change
you
have
to
like.
I
did
a
full
path
to
it
and
all
the
other
good
stuff
here
we
go.
This
is
what
I
got
out
of.
Let's
encrypt.
A
B
A
B
So
and
then
I
changed
all
these
pieces
too.
Here
is
my
that's
the
domain,
kms
demo
kind
of
stuff
and
the
port
notice,
the
port,
and
just
this
all
this
information
I
already
just
decided
to
put
in
because
otherwise,
I'm
sure
at
this
hour
of
the
day,
I
would
get
the
pasting
wrong
or
the
typing
wrong,
so
I
did
it
otherwise
yeah
I
was
gonna
make
you
do
it,
but
you
know.
B
So
I
made
these
directories
here.
You
go
they're
all
there.
What
you
need
is
stored
under
them.
Everything
is
exactly
as
it
should
be.
We
just
looked
at
this
file
right
right
there,
okay,
so
we're
at
2.4.
So
if
you
take
a
look
at
this,
I
have
this
already
in
my
history.
Hang
on
a
second
and
it's
gonna
run
in
the
foreground,
and
I'm
I'm
okay
with
that.
B
B
And
we're
happy
we'd,
actually
there's
no
information
here
that
I
need
to
store
at
this
time.
There
will
be
information
when
we
create
the
dedicated
kv
store,
but
we're
up
and
running
it's
happy.
You
have
some
and
now
I
could
go
here,
but
I
don't
have.
I
don't
have
it's
not
initialized?
Let's
do
that
from
the
cli,
because
I
think
it's
it's
a
little
more
useful
to
do
it
from
the
cli
you'll
see
I'm
following
the
document
exactly
which
I
just
adore
so.
A
A
B
B
Let's
do
a
vault
status,
so
the
other
one
I
have
in
my
history
is
okay,
so
I'm
setting
the
volt
address
this
was
this
url
was
actually
in.
Where
is
it
sorry
here
you're
at
it's
in
my
history?
So
I'm
just
showing
it
to
you,
but
the.
So
that's
like
what
you
have
to
know,
but
I
know
this
because
I
set
this
up
right.
I
went
into
dns
and
I
set
up
the
record
so
here
we
are.
We
set
this.
B
A
If,
like
I
mean
maybe
in
larger
organizations,
that's
the
case,
but
I
mean
I'd
probably
know
like
if
someone
is
running
openshift
for
their
organization,
they're
running
all
the
stuff
attached
to
it
as
well.
Probably
so,
if
they
needed
vault,
they
would
probably
have
it
somewhere
for
like
their
I.t
department
or,
for
you
know,
their
application
team,
whatever
it
may
be.
I
feel
like
vault
is
portable
enough
to
where
you
can
just
say:
hey
everybody
gets
a
vault,
here's
a
vault,
here's
a
vault!
You
know
that
kind
of
thing.
C
B
B
So,
let's
that
will
be
interesting.
I
may
have
to
just
open
them
up
for
like
while
we're
here,
I'm
okay
with
that.
Okay.
So
here
we
are
vault
status
following
what
the
documentation
says.
So
at
this
point,
we're
initialized,
but
we're
also
sealed
so
maybe
some
security
vault
people
can
talk
more
seriously
about
what
that
means,
but
it's
already
been
initialized,
but
it's
still
still.
I
don't
know
so
we
if
I
run
this,
I
think
I'll
get
an
error,
because
I've
already
initialized
that's
right.
B
B
B
A
A
B
C
B
B
B
B
B
A
B
Data-
I
don't
want
it,
I
want.
I
want
just
the
regular
I
can.
I
want
the
config,
but
I
don't
want
the
data
okay.
So
let's
go
back
to
another
running
server,
sudo,
vaults,
server,
config,
okay,
that
that's
what
I
want
and
I
killed
it
over
here,
perfect.
Okay,
so
we
are
running
it
should
not
you!
We
are
here,
it's
nice
and
fresh.
So
then
I
come
over
here.
I
should
have.
B
C
B
B
C
C
B
Truly
fresh
like
I
should
have,
it
would
have
been
fine,
so
we
have
done
this
vault
operator
knit
we
have
done.
The
unseal
save
the
information.
We
have
saved
the
information
we
did
all
of
this.
Our
vault
should
be
nice
and
happy,
and
we
can
now
do
this
default
login
with
the
key.
Let
me
go
back
and
get
that
root.
Key
hang
on.
B
B
B
B
B
B
This
is
all
so
that
odf
can
actually
use
vaults
to
store
keys,
that
you're
going
to
see
every
osd
have
which
I'll
show
you
that
in
a
second
you'll
see
as
we
get
started,
hang
on
michelle's
getting
her
act
together
here,
okay,
so
important
part
that
comes
out
of
this,
your
client
token,
that's
what
you
need
from
there,
so
I'm
just
going
to
cut
and
paste
it
there.
We
go
into
our
document
here.
B
B
We
can
go
look
at
the
web
ui
for
kms.
If
we
want
hang
on
a
second,
let
me
go
back
to
the
token
and
I'll
just
show
it
to
you.
The
idea
is,
I
want
to
show
you
that
well,
actually
I
can
even
yeah.
Let's
do
this.
I
want
to
show
you
that
while
we
create
odf,
you'll
see
the
keys
getting
created
that
that's
really
part
of.
Why
I'm
showing
you
all
this.
B
B
B
No
absolutely
you're
totally
right,
okay,
so
let's
switch
to
deploying
odf
this
you've
seen
a
million
times.
This
is
not
new.
This
part
right
go
to
the
operator
operator
hub
type
in
storage.
This
should
all
feel
nice
and
easy
and
familiar
scroll
down
until
you
see
the
red
hats,
it's
going
to
be
4.7.
A
B
C
A
B
I
didn't
notice
even
after
having
complained
about
such
a
thing,
I
didn't
notice
when
they
fixed
it.
Shame
on
me,
okay,
so
we're
installing,
and
then
I'm
just
going
to
go
watch
it
here
right.
So
we
have
a
moment
yep,
it's
just
going
to
take
some
time
all
right.
Let
me
I'm
going
to
stop
my
share.
You
know.
Do
my
security,
stuff
and
I'll
come
right
back
two
seconds.
C
A
B
A
C
A
B
B
B
A
C
B
A
B
B
A
B
So
let
me
know
if
anything
happens.
Okay,
so
here
we
are
service.
Name
number!
Four!
If
you
look
at
it
provide
a
unique
name
for
your
service
call
it
anything
you
want
yeah,
you
just
need
a
unique
stream
here,
we'll
call
it
external
kms,
and
here
that
matters
yeah
but
see
I
I
you
see
my
typo
yeah
and
it
says
okay.
I
learned
the
hard
way
so
here
and
it's
a
full
url.
So
I'm
going
to
put
in
wrong
one
wrong
one.
Here
we
go.
B
B
B
A
B
B
A
B
A
B
B
B
Office
hours,
encryption
old-
I
have
all
my
stuff
here:
okay,
so
this
is
the
full
chain
right.
Okay,
and
this
is
notice.
I
have
to
check,
hang
on
a
second
see,
I'm
that
worried
about
getting
it
wrong.
Hang
on
this
one
full
chain:
oh
certain
pen,
okay,
perfect
just
wanted
to
check
how
it
was
names.
This
is
cert
this
one
and
then
the
part,
the
key
okay.
So
we've
got
all
of
our
information.
I'm
gonna
set
it
up,
we're
gonna,
save
it
and
we
say
next
and
then
we
say
create.
B
B
B
B
We
haven't
talked
about
data
in
motion,
so
right
data
in
motion-
encryption
not
yet
not
not
yet
for
this
part
of
odf,
so
the
multi-cloud
gateway
has.
Everything
has
always
had
encrypted
both
at
rest
and
in
motion.
It
uses
has
an
https
endpoint
so,
but
we
don't
have
that.
Yet
it's
come,
and
I
I
don't
have
a
roadmap
for
that
for
for
this
part,
but
as
soon
as
I
do
we'll
like
post
it
in
the
kind
of
what's
new
stuff,
but
as
far
as
address
goes
it's
encrypted.
It's
all
good,
hang
on!
A
B
C
B
B
A
B
A
B
B
You
can
expand
if
you
want.
Also
this
isn't
I'm
not
doing
anything,
that's
not
in
the
document.
So
if,
if
I'm
going
too
fast
or
whatever,
you
can
always
refer
back
to
the
document,
but
let's
can
you
make
it
small,
so
I
can
do
this
here
on
the
oh.
This
is
still
says
progressing.
Is
that
that's
it's
not
it's
ready.
B
A
D
B
B
Awesome
so
that's
kind
of
that's
kind
of
it
for
what's
ga
now,
so
you
can
do
this
today
in
your
production
classroom
notice
that
if,
if
you,
if
you're
in
an
earlier
version
and
when
you
go
to
4.6,
it's
not
an
upgraded
path
right,
it's
an
installed
app.
So
I
just
want
to
make
sure
I
point
that
out.
So
if
you
could.
B
B
Else
knows
better,
please
tell
me,
and
there
are
some
other
things
you
should
that
you
have
to
be
aware
of
they
were
the
pv
future.
Encryptions
are
rbd
only
until
they're
waiting
on
some
upstream
stuff
to
make
them
cfs
encryption
as
well.
For
pv
and
oh,
there
are
no
there's,
no
cloning
and
snapshotting
with
encryption
yeah,
so
you
have
to
think
about
it.
B
B
When
you
go
through
this
document,
so
we
did
three
we
did
2.4
to
here
and
we
did
cluster-wide
at
rest
encryption.
We
did
these
pieces,
we
just
expanded
the
cluster.
If
you
go
on
and
do
you
should?
Certainly
we
can
do
persistent
volume
at
rest
and
do
that
maybe
next
time,
and
because
it
is
tech,
preview
and
all
this
stuff,
but
and
then
test
out
an
application,
and
what
have
you
so
and
there's
a
full
cli
deployment
here?
It's
just
it's
just
wonderful
anything!
You
need
it's
all
it's
all
right
here.
B
I
really
it's
really
well
done.
I
encourage
everyone
to
to
do
this
part
as
well
and
at
the
very
bottom.
You
have
this
so
now
you
can
do
these
in
different
pieces,
so
here
in
four,
you
have
for
the
very
paranoid,
as
you
mentioned.
If
you
want
to
do
cluster-wide
encryption,
then
in
in
addition,
do
application
pb
encryption
you
can.
You
can
do
both
just
keep
in
mind
that
one
is
tech
previews
one.
A
B
A
A
The
I
mean
this
is
really
straightforward.
Right,
like
I
mean
I
understand
that
encryption
is
not
straightforward
to
anybody,
but,
like
you
know,
math
nerds
and
super
geniuses
or
whatever
right
like
I
get
it
there's
encrypted
unencrypted
all
that
fun
stuff,
but
like
applying
keys
and
all
that
like
this
documentation,
is
really
good.
Your
team
doesn't.
B
B
B
A
B
B
Exactly
right
so
yeah,
so
I
I
don't
know
how
they
manage
that,
but
they
do.
They
somehow
manage
this
nice
name
change
as
we
go
so
right
now.
This
is
still
the
openshift
container
storage
access
page,
and
there
are
a
couple
things
I
wanted
to
bring
to
people's
attention
and
one
of
them
is
you
can
request
a
workshop.
You
can
request
a
two-hour
workshop.
Someone
like
me
will
run
it
with
you
who
will
go
and-
and
just
so
you
know,
we
give
you
a
cluster
to
test
with.
B
We
get
together
on
and
have
a
meeting
on
phone
and
we
will
go
through
hahahaha,
something
like
this
general
deploy
and
use,
and
we
go
it's
really
wonderful,
like
we
just
go
through
it
all
pvc
cloning
and
smashing
stuff
that
you
and
I
have
done,
but
in
a
big
two-hour
workshop
where
people
clients
can
come
and
just
like
mess
things
up
and
they
don't
have
to
worry
about
anything
in
their
own
environment.
So
that's
what
this
literally,
this
general
deployment
use
maps
to
this
workshop.
A
Nice
so
question
from
frequent
watcher,
rapscallion
reeves.
Can
you
give
a
quick
one
sentence,
reason
for
the
name,
change
I'll,
give
you
two
sentences?
How
about
that
and-
and
I
can
explain
part
of
it
after
you-
do
your
piece
right
like
what
we
were
talking
about
before
the
show
started.
I
can
mention
that
now.
Okay,
if
you
remember.
B
A
Right
exactly
yeah,
there's
more
to
data
than
just
storing
it
right,
there's,
there's
actual
use
of
that
data
called
data
science
right
and
after
some
conversations
with
some
folks
this
week
we
are
going
to
have
some
data
scientists
coming
on
the
channel
here,
probably
after
the
4th
of
july.
Just
the
way
everything
works
out.
You
know
scheduling
wise.
A
I
don't
want
to
put
them
on
a
show
where
everybody's
off
that
week
or
whatever
you
know
or
that
kind
of
deal,
but
the
the
data
science
team
has
agreed
to
come
on
the
show
and
do
some
aiml
with
us,
and
I
can't
wait
to
learn
more
about
that,
because
that's
the
space
that
I've
always
been
super
curious
about
never
had
enough
time
to
dive
in
and
also
I'm
really
bad
at
math.
So
like
it's
a
little
intimidating.
B
A
B
Oh
okay,
okay,
yeah,
seven
seconds,
okay
and
then
also,
I
think
I
I
do
think
that
storage
teams
are
more
and
more
required
to
think
like
services
right
offering
there's
been
a
fundamental
shift
right.
So
you
have
your
your
team,
that's
responsible
for
your
appliances
and
how
all
of
this
other
stuff,
but
they
slowly,
they're,
writing
code,
they're,
doing
stuff
in
open
shift
and
kubernetes
they
it's
their
world,
has
changed
and
we're
trying
to
change
with
them
and
anticipate
their
needs
right.
A
A
B
It's
kind
of
a
name
but
okay,
so
so
maybe
you
can
ask
them
like
as
part
of
this
page,
we
have
to
start
conveying
that
right.
We
have
to
start
getting
people
to
think
of
this.
As
you
know,
a
foundation
and
services.
So
we
try
the
usual
stuff
over
here
documentation
and
what
have
you
and
and
what's
new,
that
kind
of
like
recent
kcs
articles
and
things
like
that.
B
But
as
you
go
further,
I
today
I
want
to
talk
about
the
knowledge
tab
and
I'm
we're
trying
to
think
about
what
our
customers
would
want
to
see
here.
So
I
love
to
watch
the
the
scale
testing,
the
10
billion
objects
demo
and
I'm
interested
in
what
people
think
about
the
articles,
blogs
and
demos
that
are
presented
under
these
two
topics.
B
A
B
A
Like
it's
like,
it
is
a
foundational
step
right.
You
have
to
put
the
data
somewhere,
it
has
to
live
somewhere,
but
then
you
do
things
on
top
of
it
or
with
it
and
pushing
those
workloads
and
having
people
think
more
holistically
about
their
data
is
important.
Right,
like
I
know
that
kubernetes
is
great
at
those
12-factor
apps
right,
like
you,
know,
stateless
all
that
fun
stuff,
but
state
matters
right,
like
state
exists.
Your
business
has
state
your
business
is
state
right
and.
B
B
C
C
A
B
A
B
You
still
have
the
same
design
decisions
too
right,
like
are
you
going
to
like?
I
think
we
did
we
added
capacity
and
we
just
added
more
osds,
but
you
know
you
might
have
a
scenario
where
you
have
to
add
more
volumes
to
the
standing
than
the
infra
nodes.
You
have
like
you
same
design
decisions
yeah.
I
don't
think
you
change
as
much
other
than
you
now
have
your
key
stored
in
an
external
vault,
so
yeah.
A
Which
should
be,
you
know,
nicely,
tucked
away
in
a
vpc
that
no
one
else
can
get
to
right.
The
same
with
your
clusters.
Speaking
of
some
report,
I
forget
who
I
think
was
qualis.
One
of
the
security
teams
out.
There
said
that
there
was
over
10,
000
or
50
000,
some
ridiculous
number
of
just
exposed
kubernetes
apis
on
the
internet.
So
please
don't
be
one
of
those
people.
Please
please.
Please
hide
your
apis
behind
something
right
like.
D
A
C
C
B
A
B
B
A
C
A
Awesome
so
audience,
let
me
know,
as
always,
you
can
reach
me
at
short
at
redhat.com
and
we
have
our
discord
server
as
well.
You
can
hit
me
up
there.
I
am
chris
short
on
twitter
with
two
s's
michelle.
Do
you
have
any
social
or
anything
that
people
can
reach
you
at
that?
You
want
to
share.
No
is
a
fine
answer,
but
yeah
like
the.
If
you
have
any
questions,
feel
free
to
send
them
my
way
I'll
get
them
forwarded
to
the
right
people,
even
though
I'm
really
kind
of
slow
at
email.
A
A
So
it's
a
wonderful
day
here
on
the
channel
and
please
tune
in
for
our
other
shows,
as
you
see
them,
and
if
you're
watching
this
after
the
fact
go
to
the
openshift
youtube
page
check
out
our
playlist
for
all
the
shows
they
are
there
and
when
in
doubt
openshift
tv
is
the
place
to
go.
So.
Thank
you,
michelle.
Thank
you.
Audiences.