Red Hat OpenShift GitOps Guide to the Galaxy | Red Hat Livestreaming, 9 Sep 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: GitOps Guide to the Galaxy: OpenShift GitOps v1.2

Description

Are you ready to take a deep dive into the OpenShift GitOps Operator? In this episode, we’ll take a look at the new release of OpenShift GitOps Operator v1.2! We'll explore what's new in this version and look ahead to what is coming in the future. New to OpenShift GitOps? OpenShift GitOps is a Kubernetes operator that allows you to take popular Kubernetes tools and services, integrate them with your git repo, and have Kubernetes automatically deploy and manage your application.

Follow us:
Christian Hernandez https://twitter.com/christianh814
Chris Short https://twitter.com/ChrisShort

What is GitOps Guide to the Galaxy?
Every other Thursday at 3pm ET hosts Christian Hernandez and Chris Short sit down to discuss everything in the GitOps universe, from end-to-end CICD pipelines to creating Git workflows.

Subscribe to Red Hat's YouTube channel:
https://www.youtube.com/redhat/?sub_confirmation=1

About OpenShift:
Red Hat OpenShift is an open source container application platform based on the Kubernetes container orchestrator for enterprise application development and deployment.
Openshift.com https://red.ht/33Fh6uV
OpenShift on github https://github.com/openshift/
OpenShift on redhat.com https://red.ht/2o4ccDk

#RedHat #GitOps #Kubernetes

A

How about now, folks, can you hear us.

A

Anything anything beautiful.

B

There we go, I can, I can hear.

A

It now all right, awesome yeah. I can see the sound bumping yeah.

C

All right there we go.

B

Cool now that zoom here we go okay, now that zoom is back, we can read, we could retell all of our jokes.

C

A

Good morning, good afternoon, good evening,.

C

Welcome to get ups.

A

Guide to the galaxy sorry about that, like christian was away, he came back. We were a little a few seconds behind and like everything glitched for me for a second and then we just jumped in and it didn't look like uh zoom stuck with us there. uh So apologies for that. So christian hernandez is here. I am chris short, the host of the most christian hernandez, the the get ups guide to the galaxy captain. Here there.

B

We go I'll, be your captain on this journey. Yeah.

C

As we were saying.

B

So um uh so yeah, I'm doing so in case you guys didn't hear chris asked how I was doing doing well excited about a few things right, so excited about um uh kubecon coming up right, yeah.

A

B

um You know I'll I'll, be there in person.

C

B

Well, I'm you know I'll, be uh it's still quite a drive. People don't understand how large calif um well.

A

Yeah los angeles is the country gets bigger. The further west you go.

B

Yes, yeah yeah, exactly yeah, because I was talking to someone about like oh yeah, like my daughter, went to new york. You know for the afternoon and I was like wait a minute, we're in boston. It was like well yeah. Technically, you can take a train and.

C

B

Yeah here here in la you know, you can drive for two hours and still be in la so yeah.

C

B

I'm a local but but the drive to downtown is going to be a big drive for me, but I'm still excited I'll, be there it's a hybrid event um so um excited about that excited about the um get ops con.

A

B

Where I should, I should probably start uh uh sharing my screen here, because they do have um I'm trying to do the sully thing of uh topic. Topically sure what you're talking.

A

About, what's your cpu up to you got something running in the background there.

B

I might let's, let's see here, I think it might be. um Is it probably zoom? It's probably zoom. It might be also chrome, because you know how chrome likes to oh.

A

B

Yeah, maybe that'll that'll be better here. Let's check it out see here.

C

B

Is xorg so.

A

Well, that's probably zone yeah.

B

That's probably has probably zoom doing things here, but um so here I'm also excited about a github scon. I mentioned it last stream here um this is a day, zero event right so um october 12th, which is, I think, a tuesday there's two day, zero events, which is crazy. I think I think.

A

um I think they're calling it like pre-event activity events or something like that, because.

C

B

C

A

Anymore, because there's two day zeros, basically there's.

B

Two days, yeah.

A

B

And zero and double zero.

C

B

And so uh this is october 12th, which is tuesday. uh You have um plenty of time to register. If you can't make it live, it's a hybrid event, so you can do it virtually um and just kind of a quick shout out for for me. I have a.

B

uh I have a keynote talk, so if you do see me in person, um you know I'll be talking about some cool stuff, I'm talking about actually pipeline as pipeline as code right, which is something we kind of talked touched a little bit about uh about tecton, maybe in a future episode after I do the um you know after kubecon I'll I'll touch on it.

B

But if you want to get a sneak peek of a pipeline as code and how it um interacts, you know how in get ops right, how how it'll um you know fits in in the get-ups methodology um right, uh you know tune in right either virtually or um if you're, there um you'll feel free to say hi so um I'll be there. um I.

A

Should be there unless other unless something happens right yeah.

B

Chris should be there right. We should we should, uh when.

A

Actually, I I am somehow doing three days: zero things on the same day, so yeah. This should be interesting for me,.

B

That's a lot of running yeah because I have other stuff to do on.

C

B

Events and I'm like you know it's like ah that's good, I'm gonna have to wear my my jogging shoes to run all over the convention center yeah.

A

You know I didn't think about that, but yeah I could probably bring him it'll, probably be chilly or ish, maybe in san diego or los angeles. Sorry, I don't know it's.

B

Been it's been warm, so I don't know.

A

Okay never mind.

B

Yeah, it's been kind of warm as of late, so but in october it should be a little cooler, but still warm for those.

A

Literally in a month, that's what I'm flying: okay, yeah.

B

So there we go so get ops con make it if you can um I'll be there um in person. So if you can't be there virtually still open um another thing, I kind of wanted to bring up there's kind of this uh cool tool. Actually I think you sent this to me.

A

Yeah no, this is definitely.

B

One I recommend it to you. This is, um and this is like so for those of you don't know we're actually uh chris and I are actually in the same team technically right, they did some re-org but like we ended up on the same team anyway, um um under different managers. But you know we were in constant communication and even chris is always sending me things.

C

B

Even though I don't respond chris, I do take a look at them and I.

C

Know this one: this is how I know you do. Yeah.

B

This one, I really really like right, so this is uh octopilot from dailymotion right, so um a lot of cool stuff coming out from from companies that are actually doing something like intuit right, like intuit. Obviously as argo city um and dailymotion has something called octopilot right and so autopilot is um helps you uh in your get-offs workflows.

B

So um by managing your pull requests right, which.

A

Sounds a little crazy at first, but.

B

Yeah yeah yeah, so it's it's.

A

When you read about it, you're like oh, this makes sense.

B

Yeah, this makes sense, and often it actually offers a uh a great uh it's a great use case. It solves a very a very great uh use case, so essentially what this does is it manages your uh your prs and your um um you know all.

C

Of your workflows, yeah approvals.

B

All of that, via a um via cli or or an api right in in in most cases right and it aims to be like a swiss army knife right to propagate changes. So the idea being um uh you know this example here right is you know you, you pass the token obviously and the repo information, but you said, hey updates is yaml um with this. um um With this information right, you can use uh yq as well.

B

We're saying you know basically regex saying hey yeah, you know take this stuff update it like so and for the workflow. I'm trying to think of it, like a great use case, is like image updates, yeah right, like you're.

A

Doing those need to happen behind the scenes.

B

Yeah yeah exactly so like.

A

B

You know you do an update. Your ci happens cool you have a new image, build okay, like how do you propagate that out that argo, because, like you know, essentially argo acts on a a repo? Well, then, you know you need to make a pr and manage that, and how do you do that automatically? um There is uh octopi that has that right and it has uh being able to essentially manage your get workflows.

B

um You know in a get ups friendly way, so I think this is really cool.

A

This is one of the neat ones that I was like. Oh I gotta send this to christian yeah yeah.

B

This is, uh this is great. It could actually um support for manipulating encrypted files as well, which I thought was really really cool like hey. This.

C

B

Really really cool so uh kudos to the guys dailymotion, um who one came up with this and two who open source? This is great, uh a great tool, so um I'm pretty sure you dropped it in the chat already. But yes, that's the thing um when you're um something that can help you when you're, when you're automating uh some of this stuff right some of the some of the things like okay. Well, you know argo cd acts on a particular branch or a particular git repo.

B

What happens until then right, because that's the tail end right. That's.

C

The easy part right, argo.

B

City is just applying those manifests well how.

C

Do I get to there.

B

And this is a a tool that can help you to do that as well um and oh, which is pretty you know, which is it's pretty cool, because I actually see this here, the yq tool they actually just like pull in the actual yq um source code right. So they could yeah.

C

And why queue is to.

A

Yaml as jq is to json, if you're, not yeah,.

B

Yeah, which I like, I liked your posts that you do it on twitter, your.

B

I'm like thank you, someone sent it.

A

Someone responded back with that tweet, it's like how could you say something so bold yet so.

C

Yeah yeah exactly yeah, it's like.

B

Oh, my gosh, it's just which is like I'm a white q guy right. I've always been, um but.

C

Oh yeah, you know.

B

Json isn't meant to be made human real, but and it's not it's definitely not right, but.

A

Some people, it's amazing, how many people were like. Well, I can read it. It was also amazing how many people were like well compared to like 20 year old thing. It's way better.

C

Yeah, like yes, yeah, can be better better and still be not great. You know.

B

Yeah exactly yeah yeah, like you know, um riding a bike is better than walking it'll get you there faster, but it's not not a speed train right, for example, right.

A

Right exactly so just said, I could read xml, it doesn't make it human readable.

B

Oh yeah yeah exactly I can read xml, it doesn't make it great, so uh so autopilot great great stuff. So um I like I like some of these things that you sent me chris, so keep keep sending them. I I will. I will do. I have a.

C

B

Have a backlog so so I just got to octopile it. So there we go so there you have it all right cool. So today's topic right, so today's topic, um talking about openshift, getups version, 1.2 right so 1.2 actually released. I want to say like like a month ago or a couple months ago, maybe even more like eight weeks ago, okay released right um and I kind of want to go over some of the things. uh The updates we made that you know this may seem a little late, because 1.3 is actually on the horizon.

A

B

Like but but as you know, chris we had guests, we had other topics to cover. We only have an hour, so it's um but we're. Finally here so I kind of want to go over um uh some of the things that we came up with with openshift 1.2 um openshift 1.2 came out with version. Argo version 2.0 right, so that was like a a major thing that we had there like in a major release of argo, um and so I want to go over here.

A

Zoom window with what I'm doing right now, but I'm trying to make it more readable for y'all yeah.

B

Let's just try to make it I'll make this a little bigger too, and oh actually, how do I.

A

B

A

Plus, plus, depending upon the device yeah.

B

There we go all right I'll, send you the chat, so I'm actually going to go over um the release. Notes right, because the release notes is the best way um for this information right, so um so uh so support matrix right um for uh 1.2.

B

Obviously, argo cd is ga we're still tech preview for it with some of the stuff like application set um stuff like cam, is still in tech preview and the getup service, which is like the um the service that manages cam right, because cam is the the cli but the actual service that manages cam.

B

um It's on tech preview, uh we haven't talked about cam much touched on it a little bit because, like there's a lot of stuff still in the air with cam, maybe I'll invite bose to come on and demo cam a little bit more go a little deeper. uh So it's tech preview right so meaning that it's not 100 supported right. It's the best effort, not fully baked yeah works, not fully baked. I use application set that should be.

B

I don't know when that'll be ga, but that's you know the acm guys are using application, sets in production, so yeah. um So uh some of the new features right. So one of the one of the things that happens when you install the operator, the um the openshift git apps operator, is that it deploys a default. Argo uh cd instance um so like when you install the operator, like you, get like a um an opinionated deployment of argo cd.

B

So if you do not want that, you can actually set this environment variable in your subscription and it'll uh disable that so essentially it'll just add the crds, but it just won't deploy a uh argo cd instance um and so you've set that value to true. um You know: it'll uh it'll prevent that that openshift's namespace to be deployed a little caveat with. That, though, is if you install an argo cd instance in an open ship, get ops, name space. It causes a little weirdness.

B

C

So yeah, I would kind of expect yeah so like if you're gonna, disable.

B

The default argo city instance do not name your namespace openshift get ops so, but everything else is cool right. So um then you can then deploy your own um um instance right of our of argo cd in your own way. So um another good cool feature here is the um uh requests and limits are now configured for argo cd workloads, meaning that before there was no um limits.

A

B

For up for the actual uh installation of openshift get ops right so like it was able to consume.

A

The entire industrial resources yeah, if it wanted to right yeah.

B

um So we we, um we figured out and capped it yeah yeah. We kept it right so, like all the all the components of openshift getups now has uh limits onto it and the actual namespace operationship github's namespace has a resource quota set to it. um This caused a little bit of unforeseen consequences. There's a lot of people who actually were deploying stuff inside of openshift get ops.

A

B

um Which we never intended right, but we never actually told people not to do it, but like we, we we assumed.

A

People, wouldn't we wouldn't do it yeah well, because we kind of have that running well with it, at least you- and I do um that running thing of if it starts with the openshift dash, don't mess with it like don't.

B

Yeah don't mess with it. Yeah yeah don't put stuff yeah. So that's a really good rule of thumb. I think probably sully says that a lot um is that uh if it starts with openshift, the namespace starts with openshift. Don't put anything in it, so um so don't put anything in it. That's just you know. Stuff like this happens right so.

C

B

um So yeah, so then that's that's! That's it right. um It actually also. This caused the issues when you're upgrading from version 1.1 to 1.2, which which is another section um which I'll go over in a little bit so and then argo city authentication, is now automated with red hat sso.

B

We we did this, the other, um uh the other stream right last uh last time stream a couple weeks ago, um you know before it was a manual manual process, but now you just put uh you know this spec sso provider equals key cloak and then it automatically automatically sets everything up for you, yeah yeah. So that's that's really cool. So then you can.

C

Use openshift authentication.

B

To log in so um before, there was no support for route sharding. um So for those of you who use openshift and you don't know, you can actually do route sharding. So um you know you can have multiple routers and, depending on the application, you can send it to a different router yeah. um Our argo cd didn't know how to handle that. So we added the actual um the ability to do route sharding right so saying, hey. You know when you're your routes, a match. You know like everything in kubernetes, it's a key value pair.

A

B

So for this argo cd, you know put it on these labels.

B

And this here this is probably my favorite update um for openshift get ops. Oh um yeah,.

A

B

Which is which is part of the the demo? I'm gonna do right, so cool. um uh So now the openshift get ops operator will automatically grant permissions depending on the label. So let me explain what used to happen right. So um there was a cluster resource, there's a cluster argo cd right, which is openshift git ups, which we talked about a little bit about earlier um and it comes with like.

B

I think, the ability to only read resources but not apply it. So then you were um it was.

B

It was on the operator to like you know, you know um not the actual bagel operator, but you know person operator.

C

It was up to the admin.

B

I guess I should say it was up to the admin to set up those rbac rules right like what can argo city do? um You know, I have an opinion on that right like if you have argo city managing your cluster. It needs cluster admin, but a lot of people don't like that. But um you know it's. You know least uh what is it the the rule of these information.

A

B

Least, privilege, um so now you can actually what you can do. Is you can label your um uh your namespace um with this? uh Is it a label? Annotation, it's a label, so you can label uh your namespace with saying: hey. um Let this uh argo city instance manage me so so then argo cd will then do um the operator will then put the proper permissions in order for argo cd to manage that namespace.

B

So you can kind of have um this kind of cool situation where um you could deploy argo cd right with this least privilege and then um annotate. Oh sorry, label the namespaces, where uh you want control, so you have um so you can say: hey I install lego city, all right cool. I wanted to manage uh namespace123 and then it'll automatically manage those namespaces for you without you having to do anything else and it won't touch any other namespace. So that's! um This is cool, especially for if you're doing something like.

B

What we call namespace scoped, argo cd, meaning that um there's no uh there's no cluster argo cd, but there's like an argo city for my specific namespace and I create another namespace, and I want that argo cd to manage that namespace. um I just label it and I don't have to do anything else. um So this is really cool and I'll. I'll show this in a minute um um how this works out, because it's actually really really cool.

B

So um some of the things that were fixed the um for let's see we'll get stuck in out of sync status: oh yeah! So this um uh there's a there's a jira issue. I don't know if you want to link this or if you, if you put the um the link in the chat, uh people can take a look at that, but.

B

Like if a user created additional instances of argo city managed by the default instance, some things will just get out of sync right, even though it's it's synced up, some of the um some of the things will will uh will end up in out of sync status, so they they fix that right. So uh some of the unknown issues right. um So when you delete an instance right, the um the managed by label um are not removed right so like so.

B

Basically when you deploy an argo cd instance, and then you delete it that annotate, that label still stays in place to um any name space that it's managed by, so that um so just kind of just take a note of that right, like if you're deleting names. um If you're dealing with argo city instance, you may want to go back to those namespaces and remove that label. um That's getting uh that's getting checked, okay, we'll lead there.

B

We go it's late over there by him or early, depending on how you look at it, depending how you look at it's very, very, very late or extremely early, so it depends whether you're late to bed or early to rise. um So this is what I was talking about before the resource code has been enabled.

B

um So um when you upgrade from uh openshift get outs from version 1.1 to 1.2, um some of the applications uh was uh getting um killed right because yeah so um and then it actually uh spun up it would like. You know there was a ton of replication controllers that would spin up because it would spin up and it would get um killed. It would spin up and get oom killed, it'll spit up and get killed.

B

um uh So the the the transition from 1.1 to 1.2 wasn't 100 clean. So that was a it was a known issue so, uh which is why we um um say one don't deploy anything in openshift get ups right. So that's that's one thing uh and and two um always test your upgrades right, don't just like automatically upgrade from one version to another for any operator right. That's not just.

A

I mean yeah make sure you got that dev environment.

B

Yeah yeah exactly.

A

Not to say that if we, even if you're an ops person right like you, should have your way to test those yeah.

B

Wait to test those operators 100 um and because, like in this instance, we made a mistake right, like hey the the resource code that we applied made us not be able to upgrade right so, like you're, just stuck in this weird there's like many versions and like state-of-the-art replication, yeah state of limbo- it's always always um always bad, so um so yeah, so that's kind of just kind of the lowdown on the 1.2 release. um So let's talk about uh this, um uh this update here my favorite update right.

B

So let's go back to um managing right managed by so um we'll go to a use case here. Let's have a openshift cluster right. All uh um I'll update it here. So I do I'm going to log in as a non-admin right, because this um affects non-admins.

B

Come on here we go, you can.

A

Do it, I believe.

B

I believe did the cluster get cold, we don't know.

A

Is the cluster running? I don't know you better catch it. You better click.

B

Is your cluster running? I don't know you better catch it. I think it's running it's here.

A

B

Yeah it's there. uh Let's just reopen it sometimes yeah. It doesn't like.

A

Oh, oh so braided silver went through the uh home, killing experience.

B

Yeah that one killing thing is it: it happened to customers too, that's so that was, it was a. It was.

A

A fun upgrade experience walid asked what a single node cluster do for like environment upgrades testing and.

B

I mean I maybe yeah if, if, if the single node cluster is big enough right to run the.

A

Yeah, if the cluster is big enough and then, if it's a close enough representation of production, yes, like you, shouldn't, have this pristine single node cluster to test an upgrade for it right.

C

Like you need to have.

A

Like your argo pipelines, you know installing operators or, if whatever it is, that you have in prod, you should have in that single net cluster too. So that's gonna be a lot of stuff. You have to think about so yeah I mean if you really want to make sure operators don't break your environment kind of thing, but yeah yeah.

C

A

V1 versus v1.1, it might work.

A

Yeah, that's true: while he does stay close enough to production is becoming impossible with time for on-prem and.

B

Oh yeah, that's it's yeah!.

A

Yeah, I hear you um yeah, it's it's, you know, there's trade-offs and you gotta decide on those. For sure uh three note: cluster single note cluster. However, you want to test just just test it. You know yeah, please, sugar. On top.

B

uh Well, I thought it was a cookie issue, but I don't think it it's not.

A

B

Maybe it is broke come on. Well I mean it. I wanted to show the ui, but now my cluster's running fine, which is weird because uh it's always a cs3.

A

C

Yeah, look at that.

B

That's, uh let's open up, chrome and see if it works in chrome, sometimes it'll, work in chrome.

B

Wait where's the is that it yeah. It is okay.

B

I'm working on another window here.

A

So brandon silver says I think, to test. If you are at risk for bugs from the upgrade impacting your workloads, you should be able to verify that by replicating a single node cluster I'll, tell you. If you'll hit a it'll, tell you if you'll hit the bug, but you won't see a realistic replication of what would happen in production if it happened.

A

C

Like you won't know, the impact.

A

C

A

Thing happened with operator.

A

You know, after effect, that's a very good point.

B

So it actually works on chrome, so I'll just bring that over here. Okay, all right! So here I am developer right, as you see here, make this a little bigger. Thank you um developer. So I'm not I'm not an admin right. So here um uh I'm gonna go over like how to create a namespace, scoped, argo cd.

B

um So for for this here I actually have um get operator. This is this. Is the admin view operators right? I have the openshift ops operator installed right, so it installs all the crds.

B

um So this just I did that as an admin, but now as a developer, um I'm able to um create my own argo city instance that manages my own namespace right. So um let me copy login command here.

B

um I won't do a sully. This is a temper and show my show my key to the world. Oh.

A

That's kind of funny.

B

um That is, that is funny, if you guys can watch that episode. That's great! um I don't! I don't care about this token, because this this cluster is shortly yeah.

C

B

This is why I do temporary clusters like same.

A

Yeah everything gets blown away after my demos nowadays.

B

Yeah all right cool, so what video we'll see? Who am I I'm developer right um oc get projects no resource found right. So in the ui you can add a create a project here. Let's call this: uh what is this demo or test?

B

Actually, uh let's see here, give me a good name. Chris here get ops, wonder test, wonder test, don't know what wonder test. I like wonder, test all right. uh Let's create that um so once I create that I can deploy my own version of of argo city for my name space here. I think you can do it.

B

um The best way I found of doing it is actually plus yeah little plus button and importing the yaml. So, let's, let's um let me do a cat of argo cd of this yam all right.

B

Right so some of the things um I probably should take out with this two wonder tests there we go. um You know some of the things you know um application set right, I'm gonna play application set. um You know some of the things I don't really care about is grafana right or anything like that.

B

um Aj aja, I don't care about so, uh but some of the things here, resource customizations, um so I'll, probably do an entire episode of just resource customizations, um and uh this here you know like if I am gonna, do steel secrets, there's a there's, a bug with sealed secrets about it'll. Never it seals. The seal secret operator doesn't return a proper health check like every resource right. I think it returns like an empty string or something um so I kind of just say hey if there's an empty string.

B

That means it's good, basically ignoring the health um and then routes for openshift.

B

Since I like to keep um my routes, agnostic, meaning that I keep my my host field empty uh okay and let the route create the route so um so, instead of it not being out of sync, I will I'll just say: hey just ignore this difference. Right, like basically don't track this ignore differences is great right for, uh for things like operators, where, like it, has its own controller, doing things that it auto fills right right.

C

B

um And then uh the health checks are also great I'll. Do an entire episode about research? Customization is a great topic um cool.

B

Do things like resource exclusion right um so kind of just this is kind of like a standard, argo cd um deployment? uh How do I.

A

Create down at the bottom yeah.

B

No, actually, I think, um I think, there's I'm trying to find the um uh argo cd operator. One thing that you guys can help us out with a hundred percent. Well is uh here we go here. I'll put this in the chat for you, chris is documentation.

A

Oh yeah always need help with documentation. Folks, like it doesn't matter what the project is thought.

B

That the project did need help wait. You're sharing your screen is paused. I don't want to pause.

A

What is that about?.

B

Can you see my screen.

A

Yeah, I don't know if it's doing anything, though all.

B

Right, I'm gonna close the tab. Can you see that? No, no okay? How do I unpause it.

A

You're sharing start and stop again turn.

B

It off turn it back on there we go. Is that better?

B

B

Well, I just figured out okay. Oh there we go, there's a all.

C

Right, how's that.

B

Great all right, there's I was looking through the settings and like I'm like, where is it like? There's a big button that says resume.

B

I missed the big button, all right.

A

Yeah yeah, I know someone said that's funny, someone sent me an email and they have like red text and, like that was an action item and I didn't like. I completely glossed over it because I thought it was.

B

A

Of an image or something.

C

A

I was like okay completely.

C

Missed that sorry completely.

B

Missed the big one, um so uh I put that in the chat chris, so you can share but yeah. That is the.

A

um Apparently, didn't want to go to restream, so let me put it over there.

B

Yeah, so by the way you know people always ask. Well how do you get this configuration? It's like you know what you're completely right. Some of our documentation is lacking, especially with argo cd. So if you're a really good technical writer and want to contribute to open source, you are golden I'll. Tell.

C

You that right now.

B

Yeah very welcome um so here so I can.

A

Create are a technical writer that wants to contribute to open source. I have.

B

C

A

Amount of work that you could do.

B

That's right endless amount of work. There is there's.

A

People countless projects that need help that I know of yeah.

B

Exactly so um so uh here, let's go to uh I've. Rarely in the developer. um uh Let's go to uh deployments, come on guys you're.

A

In wonder, test.

B

Yes, I mean wonder: test okay,.

A

B

There it is there.

A

It is okay, all.

B

C

So then, but it says deployments.

A

Thoroughly, I see why you type that yeah.

B

uh Okay, it's deployment, okay and then um so this here um you know it deploys an application. That's argo! Cd right! So if I go see get pods, uh oh wait! I'm not uh oc project.

B

What is it wonder test there? We go um that's running if I say oc get argo cd right. I can list my ergo cd instance, which is hello, getups right um and I do oc, get get pods sorry, get secrets.

B

And then the secret here is.

B

I think it's this one so we'll see at secrets this guy.

B

Yeah, so um so here usually at the base64 decode it not if you're, using oc right. So this is pretty cool. If you do oc extract, oh yeah, uh secret, uh hello, git, ops, cluster and then I think it's two a dash right there. It is.

A

B

So there you go this. Will this will do that base64 decoding for you so which I think is pretty cool, where's fancy. If I do oc get routes, wonder test gotta love, wonder dust. He.

C

Needed something I needed something.

A

Two words came to mind.

B

Well, we used to do um back uh if, for for those of you been watching um red hat streaming, which it used to be called openshift tv. When we first started right, we supported we started doing like star wars character, but, like you run out of names, so quick right like by the by the third stream, you run out of names um all right, so this is um argo cd that is to my specific name space. So if I go, let's try to deploy something here. Let's do um this is something simple uh does.

A

The argo community use tags like first time issue help verify technical details. Things like that.

B

It should yeah like a good first issue right.

C

Yeah yeah, it's.

A

One of those things I'll just do.

B

The blue deployment yeah, if they, if they don't, they should.

C

B

So, let's deploy here so new application- um oh wait! So I have so. This is like one one of the things that I do and I think it's it's good uh good practice right. I keep. I do oc get pods.

B

I keep my getups controller and where I'm deploying to in different name spaces, and so.

C

A

B

Yeah yeah, so if I do an oc, a new, oh, no sonny, it's a new project. Let me clear this we'll see new project uh they'll call this.

A

Empty squad.

C

Squat, I don't.

B

Know this is a squat all right. So now we have this this this application here. um Do I do a namespace on this here hold on route? No overlays, uh not the overlays.

A

B

It when you go.

A

To your notes,.

B

Yeah then, let's pin this here um makes it easier to navigate. So I do have a namespace. I don't want namespace. So what what I changed this earlier? uh Is it this one?

B

This one has a namespace so, but by the way, um this is a the reason why you never put the namespace in in the in the yaml manifest right. You always put it in the customize controller, because now now you get a situation like me, where I can't find something that has no name space in it.

B

I thought I put this here hold on overlays.

B

Bass, I did put namespace okay, uh all right screw. It.

A

Do you want to do a find I I can show you all a trick. Real, quick.

B

Find space dot name.

A

No seriously, you can do it, you hit dot hit period on your keyboard,.

B

Oh dot, like this yeah yeah.

A

B

You see so this will set up a web.

A

B

A

B

What is that? Control uh f.

A

Well, it's a looking glass over there on your screen, but yeah. Where is it.

C

A

Side second, one down.

B

A

Yeah, okay, see: look, you can search the repo there.

B

Oh everything has a namespace.

C

I didn't say it was gonna, be easy. I just seem to be I'm just saying hey. This will help. Actually, let's.

B

uh Let's do this, so I'm gonna kill two birds with one stone here: all right.

C

B

Let's go back here all right, so I have uh this repo here. This is a private repo, um meaning you can't see it um and I think this one I do not put. I did put namespace blue all right. Let's, uh let's go back here, I'm gonna say screw it all right, oc, delete project! Sorry, chris, we're not gonna use that uh we're not gonna squat we're going to use bgd next.

C

B

All right so project bgd right. So then, let's um and let's deploy we're going to deploy the blue guy cool. uh So let's take this all right so now um create a new app. I'm gonna call this. uh You know egd blue project default. uh Let's do manual whatever that means uh repository url this guy and then uh the path is kind of easy. Here we go.

B

Blue right cluster, this guy and namespace bgd right what should have created so I created this namespace I own this argo cd instance and its namespace, I own the bgd namespace as well, but when I click create um come on, you can do it. Oh project wow that helps right, it'll be create um status.

B

Is I get an error right because um I can't manage that that name space right from from this from my name space here right, so uh the new version of get ops, um I can label my namespace with the manage managed by managed by oh nice, yeah and so um where source namespace is the namespace of the argo city instance is deployed.

B

So I can do something like oc um oc, edit name space, a bgd right and then we put uh is a label right now, annotation label- I it's always there should be.

B

I don't think we have a consensus of like when something's a label versus when something's. uh um uh What's.

C

Annotation yeah.

B

We'll see get.

B

I put it in wonder test. That's right.

A

Oh geez: well, I already forgot the name yeah.

B

Me too, I was like, oh god,.

C

Working better names, it's like no, he didn't put it in openshift.

B

Yeah, so what what are you doing so I.

A

B

uh Argo cd managed by wonder solo, I'm saying my name: space is managed by this argo city institute, yeah.

A

That's so what's making the association here cannot.

B

C

A

You have to do it as a namespace honor.

B

Why can't uh I'll see.

A

User developer cannot list namespaces in api group. Let's.

B

See I'll see edit project, I think I can do it that way. I think this is the openshift way of doing it either. I could just do it as admin. um What's the that, guy there we go.

A

Space there you go.

B

Please edit the position.

B

Field is immutable. What.

A

What try updating the namespace.

B

Oh okay, sweetheart and.

A

B

Yeah, in my face.

A

Okay, but you just did this.

B

A

B

I think I may have to do this as an admin. Oh.

A

Yeah yeah, okay,.

B

Okay, what I can do is, I can do oc um with oc, delete, wait that won't work. No.

A

Because you can't, if you can't edit it, you can't muck with it.

B

Well, I I wonder as a as a regular user can I create a namespace if.

C

You should, let's see, let's try it right.

C

A

B

Yeah, I think I have to go through the project, we'll see no.

A

Deleted deleted, it says deleted.

B

B

See what I hate right? Okay, so let's do this oc uh create namespace, uh try run equals client, oh yaml, um bgd yaml, so I created the yaml okay.

C

B

And then it's metadata labels right yeah, we don't know we'll, try it.

C

B

Test all right: let's see if this works, we'll see, create f.

C

A

Create I can't believe I didn't catch, that.

B

Yeah, it didn't uh yeah.

A

No, you that's weird. What did you did you do something weird to the yeah.

B

I think I think yeah I think I broke it, but let's I'm going to do it as.

A

I'm pretty sure I broke this yeah, you all love it christian breaking stuff.

A

Oh me, dropping stuff. There.

B

We go uh clc, get uh oh wait, we'll see.

B

So this is another. uh This is an admin command by the way here, uh what I'm going.

C

B

Do sorry oc, create oc, adm new project and then you can do uh admin equals developer and then bgd and I should be able to see oc project dgd yeah, I'm already on project we'll see project.

B

It's already there oc pods, there's no pods there. Okay, uh oc and I'll apply.

B

Okay cool. uh So now, if I do oc get project bgd, oh yaml, I should see there. We go all right.

A

B

Back to our regularly scheduled program now I added the label. I don't know what I did wrong I'll.

C

B

Got nothing I don't when, when I look back I'll, see that's what I did and then I'll mention in the next stream so tune in for the next stream yeah, um so that label is there right and then now um now I I would have to refresh oh.

A

Come on, you can do it.

B

Oh think that come on.

A

Think you're still the same.

B

Yeah come on, let's go there, it is it's doing something.

A

Something's going on.

B

How do I terminate okay, so it's already.

B

A

Hit refresh again, oops.

B

Yeah sometimes this takes a little while to.

A

If you do uh ctrl shift r, maybe that maybe something's in your cache on your browser.

C

A

B

Let's do something: okay, uh let's take a look at my other configuration, uh because I do have this working here.

B

This is my ci cd demo, which I'll go over in another stream, but um this is.

B

Managed by okay, so I do have that label managed by then I have to.

B

uh Do I do anything else.

B

Well, these are the applications, so it would have to be under my tenants, ergo cd, oh um yeah. I think I missed something hold on. Oh.

A

B

Yeah I needed to create a cluster roll.

C

B

All right, uh although I thought that should have been created automatically automagically, let's go oc. um Oh wait! I have to go num, I'm an admin, oc, get uh cluster roll, binding cluster roll binding and then grab argo.

B

We shift operator controller okay. So that's that controller. um uh What do you call it? Well, uh wonder, wonder wonder test yeah.

A

B

We find a bug, so why does this work? I do this declaratively and it works but like when I do it manually. It doesn't interesting.

A

Well, wonderful.

B

Declared of course, it works.

C

B

Yeah I have uh interesting okay.

A

I'm not sure if that's by design or not.

B

Yeah, so let's, let's just cop, let's just copy this right for the sake of demo right that should have worked, but I will um I'll check with the engineers they always they love. Hearing from me.

A

So I was doing this thing live once yeah.

C

B

um Let's see here, uh we don't need those annotations, uh we'll call this uh wonder.

A

This is gonna, be your prefix for everything. Now.

B

Yeah, argo cd: we don't need this uh annotations, uh wonder wonder, and it is okay. So this is the part I need to know. uh Oc get a service account. Oops, oh see, project.

B

Wonder test- and I am looking for argo cd application controller- this guy here.

B

So I was doing this thing live once uh oops oc get uh no wait. I already know what it is. It's wonder test.

B

Yes, okay, so cholesterol, cholesterol, binding oc, apply see if this makes it work crazy.

A

B

A

B

There it goes nothing all right, it's hard refresh.

A

B

Well, it's uh this is the problem see.

A

Tea is the promise of having end of day shows. Nothing goes.

C

Right, nothing goes, nothing is going right. This.

A

Week, on our end of day shows.

C

B

Yeah, it's uh huh interesting because it's weird because um because it does work quote unquote, I wonder what I did wrong because now.

A

It's just a matter of like figuring out.

B

Yeah the steps.

A

I didn't apply.

B

The one yeah one yeah, one of the things one of the things about get ups is like you do it once and you forget about it, because it's in a repo.

C

um Because I do have a.

B

Working working demo here.

B

Tenants so argo cd, it's a roll back, so I did the r back.

B

All right, oh no, this is for something else.

A

B

A

B

Back there we go this just.

A

On the next episode of get off's guide to the galaxy.

B

So I did that. Okay, yes yeah on the next episode! Well, next episode, we're talking about this directory structure that I created we'll talk about directory structures but uh see the production yeah so managed by. So I got that we can't.

A

B

It doesn't matter man tenants, maybe I should just deploy this demo, so I can just show you.

A

Yeah, um maybe it's wonder test, that's what's doing it.

B

We picked the wrong name, we picked wonder test, there's.

A

Some there's something hard-coded in openshift that says wonder is for something.

C

B

I have a funny funny story about that. um We used to um this is running solaris back in you know, um we would collect and delete uh core dump files right. Okay,.

A

Yeah yeah yeah totally normal thing to have.

B

So we hired like this developer team uh to develop like some point of sale, thing: okay,.

C

B

They have like folders in their application right like so, they did a git clone and one of their folders if their application was called the core right. I.

C

See like good coming of this so like the website went down.

B

Website went down. I was like well what well like. Why did the website go where's? Why is this directory keep getting deleted? I was like, oh because we collect you know we collect things that start with core right so like if you do like core dash something it'll anyway. So that's oh.

C

My god, so by the.

B

Way so you're joking about the wonder test so like crazy things have happened right.

C

That's amazing.

A

That is amazing.

B

uh uh I had to general binding. uh Oh, this is interesting.

A

um I got nothing on man, I mean I did our wreck.

B

I did our back twice.

A

Now, at at least, is it the name street.

C

B

But like now, I'm just doing what the operator should be doing right.

C

B

uh Are back to because then now, what I'm doing is I'm just giving admin access.

B

A

Yeah, so the user.

B

Yeah but like I'm, I'm already administered.

A

Welcome dev, that's what you have in here.

B

Yeah under test yeah, no, it should be uh bgd.

A

Right in this case, yeah bgd, that's right. Sorry.

B

uh We don't need this annotations right um right, but I'm already admin so like this. Will I mean.

C

I'm just doing this because I'm.

B

Just trying everything right, yeah.

B

Right like this, um I named.

C

It wrong, but I mean well.

B

Yeah sure, but I'm already admin on there so like this you know that's just shooting.

A

We can look at the operator logs and see why it's not.

B

Yeah, let's do that, let's go to admin, uh oc, get uh we'll see pro project open shift get offs. Let's do oc, get pods, we'll see logs of the application controller.

B

uh Digital, this gives me nothing just.

C

B

Custom resource definition ignore status yeah, just kind of this allocation, just kind of kind of see, go level things here.

B

Garbage collection, sort of looks, like average collection, sort of thing, yeah nothing of value. uh Let's try this guy, I forget which uh get ups. Maybe it's get up server. I forget which one they they log this under.

B

Listening on 8080, thank you. Okay, okay! Well I'll! Try! The oh! Maybe it's! You know the repo server the repo server. um I should do another episode of what each one of these components does that.

A

That would be cool.

B

Yeah uh see how this is just same thing, yeah same thing and then uh the repo server.

A

B

That's the one I just did yeah.

A

That yeah so yeah.

B

And then the repo server is actually the controller that um communicates with the git repo right.

B

A

There's something there: oh, there could be something broken and off there. Maybe I don't know if it's private, you said it was private right.

B

uh No, no! Okay, not this one. uh Let's just say.

A

B

Yeah, nothing, nothing.

C

B

And it's just regular, it's as if it's as if it did nothing which right, which is, which is what we're experiencing right, that it didn't do what it what it said it was gonna do.

C

B

So that's strange, okay cool well at least um we have a recorded, and I could just say tell the engineers, oh hey, by the way, by the way this is this happened. Tell me why.

C

Yeah that whole thing.

B

C

B

So we will uh so I'll move on to the next thing. I wanted to talk about, okay, uh which which isn't um which I'll, actually I'm not going to use this one, I'm actually going to go back to the admin, oc, get routes and then use my um uh repo server there we go. This is my um my argo cd.

B

My cluster argo cds server, so let's go to oc, get secrets. This should be relatively quick, uh we'll see a secret of my cluster to oops. I can spell two equals dash.

B

I can do this. You know the last stream of the week man. It's always.

C

That's a good point here we go all right, so this.

A

B

Let me close this uh and close this crash and burn stuff, um so I have this private repo right so like if you want, if you want, um if you want to do chris, if you want to verify this for me, if you can send that to everyone, you should get a uh a before 404 right, yeah like here right, I'm not logged in here I get the uh this is not the repo you're looking for um sort.

A

Of thing it is, I promise yes,.

B

But it is there because it's private right- and so this I have a private repo and there's a few ways to do this.

B

One is when you set up your configurations so here. If you go to your settings and you go to repositories, there's two ways: you can do this right, so you can connect using https right and just give the url and give your username and password um and that'll work right.

B

um It even works for private meaning, like you've, hosted, get github right if you have like a hosted, github server, you just put in your tls secret there and it'll use that um this won't work for me because I have two-factor authentication so that won't work for me yeah. um So I have to do using ssh right. So, um okay. So if I do ssh here, um I just put that by the way, dot git actually matters if you're using git lab right.

B

A

Amazing, when it doesn't and does.

B

Yeah, so um so in get lab, you have to put the dot get because it does a uh a 302 and argo cd doesn't handle those like it'll say: can access repo right so when in doubt, put the put the dot get oops it's in the wrong place. It's right here, repository url and I'll. Do this here, uh pri private uh bgd, and this here I will. I absolutely will not do a sully. I will I'll do this off screen. Thank you because this is this.

B

Is my private, uh your private ssh key, so the one that you're yeah you're not supposed to show anyone um and this here I will cry if it gets out so.

A

C

A

Know why, like I don't share my screen too often right.

C

B

All right there we go um so once you add, you know the git repo and you do a did. I clear my screen here. Yes, I did. Okay, I could put this back up here. um It'll have successful right. So when you see this, that means it's successfully connected cool. You know it's so then you can actually go here and um you know you.

C

B

Private vgd uh default sync policy manual right repository and then uh let's just deploy the blue. Actually, let's do vgd blue okay right in the cluster right and then space bgd right and you create it.

B

um You know I should say out of sync pretty soon right and when I sync it it'll actually go. um Go and sync that nice right look at that. It's syncing it's in progress right, so you can do it uh with ssh in your private repo right. um If you don't want to do with ssh and you want, but you also don't want to do a username and password. You can actually do it with tokens.

B

um So the way that looks here is: um let's go back to the repo in this repositories. I'll just actually delete this right, yeah delete it and then, if I refresh here, it'll go unknown state right, because I can't you.

C

A

I can't it doesn't. Let me connect to that.

B

There's no connection to that repo, so it gets a.

A

B

Like the rest of us, just like the rest of us right exactly uh so here another way of doing this, if you go into your settings and you go into uh where is it.

A

um They move it. I feel like manage.

B

Access second, one down.

A

B

Yeah should the password.

C

B

It's actually, I think it's actually in my settings over here. Oh, is it.

A

Oh yeah, it is.

B

Developer settings yeah and uh tokens right so here again off screen, I'm gonna generate a token.

B

A

I mean you could do it on screen and burn it. I mean it doesn't really matter. Oh.

B

True yeah yeah, true, uh let's do this. uh Let's call this argo, um which.

A

I think this is pretty cool. Sorry.

B

You can actually set expiration dates now your tokens and.

A

Github before these are forever yeah, no and like you would yeah anyways yeah.

C

You would forget that you had this token yeah yeah. All of a sudden. You can still do.

A

Stuff in your repo.

B

Yeah exactly um and give it permission so I can probably use someone will tag me later hit me up on twitter or.

C

Email or whatever, whatever.

B

The least restrictive is, I haven't, found it yet. I just basically do all all. I just do the full control of private repositories, because I haven't found a combination that works yet, but if you can get like a read-only or a clone-only setting just let me know right and then I'll generate token here offscreen.

B

It will uh copy that my coffee buffer copy, okay and then uh cool. So now I have a token here awesome um and then here you can do uh same thing right, so go to repositories. Storage, create https right, so you just do an http username it just you can put whatever username you want as long as it's not clear: it's not it's not it! So it's suspending anything not empty string. So.

A

You can do like.

B

Not used right, you can do whatever you want right. You could. You know uh you know foo, you can do uh barf right. Oh, it's uh yogurt! Whatever.

A

Right um baseball's, the mask.

B

Yeah, this is not actually, I won't mess around, but not use right and the password is your token right. So just put your token as the password and.

C

Then, for the repo.

B

um How do I go back.

C

A

Back back back.

B

I'm gonna burn the token anyway, so the matter this token will not exist all right, so you just put in uh this repository url and then uh connect and then unable to replace the authentication required. But I already did that way.

A

Do you need the doc yet, oh, maybe or.

C

Do you need your username in.

A

B

No, I did this as not used last time.

A

B

Let's go to the docs because I actually um argo cde.

B

Because the docs.

B

Connect people using https answer credentials.

B

Access token, okay, username, you might access talking following instructions. Github then connect repository using any non empty string as username and access token value as the password. Unless I am hold on. Let me look at my copy buffer.

A

B

Oh crap, okay, I messed up the token.

C

B

Hopefully, someone will.

A

Tell thankfully,.

B

I understand I delete this token. Generate a token.

B

B

Full access generate.

B

Oh, I had a space and I copied that.

A

B

Do okay, that'll, do it all right? Let's, let's go back uh all right, let's see here, let's see if connect come on there, we go there.

C

B

So that was the issue I had a space in my when I copied the token always some, obviously something so here it is actually using. So you do a non uh non-empty string for username, as it says in the docs um and your token as a password, and I think this is probably what most people want to do. I like using ssh but for some reason, some um some organizations don't allow that forget not sure why whatever, um but you can use your token so here um uh see what I do to do a refresh.

B

Should this work? Oh actually, uh this might not work. What's the error here, the error is probably it's looking for a repo that doesn't exist yeah. It still thinks it's using ssh. So let's create a new app uh bgd green.

C

Yeah there you go.

B

Manual, whatever manual is.

B

uh Green and then cluster url namespace, I think it's bgd.

C

A

B

There we go so it's out of sync. That means I can connect to the the repo.

B

A

B

That's a way to connect to your private repos is uh one through ssh right through the adding the private key username and password right. So you can upload that if you don't want to upload username and password, you can use a token. um You just use the same mechanism as username and password. You will um put non-empty string as username and the password you just put the token in making sure you don't copy the space when you copy your token.

C

A

An important that's, an important thing.

C

Don't don't do what I did but minor.

A

B

Minor detail but but uh but I failed because so that way you guys don't fail. That's right very.

C

Good, you can use me as.

B

uh uh As an example of don't fail, so uh that's it right. I guess uh two out of three ain't: bad right, nice.

A

B

Here we go, we got two out of three demos done um and if.

A

You were in baseball, you'd, be doing amazing right now,.

B

That's right right, I'm adding 750s or what.

C

A

B

667 or whatever it is, that's.

A

C

That's like I'd be in the major leagues.

A

I'd be majorly again next level major league play yeah.

C

Yeah all right awesome.

A

C

A

Thank you. Everybody for tuning in.

C

Thank you appreciate.

A

It and uh we hope that you appreciate this uh series of demonstrations as always catch up with us by subscribing to the streaming calendar. You can always talk to us on discord if you're got a question or anything feel free to ping. Me uh short at redhat.com, and I can get an answer for you and uh I'm also on twitter at chrisshort.

B

Yep um christianh814 on twitter or uh christian redhat.com right. I actually got that. Oh.

A

Good for you, christian.

B

Christian redhat.com, I will, which probably makes me like stay here forever right, because now you're stuck yeah now, I'm stuck because I got the cool email. I got my first name so.

B

Yeah, I never want to give this up so uh go ahead. Hit us up, um discord is probably the best place um catch us on there and yeah. Thank you. Everyone for watching.

A

Yeah awesome stay safe out there. Folks, thank you, cheers.

B