►
From YouTube: Advanced Cluster Management for Kubernetes Brian Tannous & Kamesh Sampath Red Hat OpenShift Commons
Description
Advanced Cluster Management for Kubernetes
Brian Tannous & Kamesh Sampath (Red Hat)
OpenShift Commons Briefing
June 2020
Advanced Cluster Management for Kubernetes controls clusters and applications from a single console, with built-in security policies. In this briefing, Red Hat’s Brian Tannous and Kamesh Sampath will explain how to extend the value of OpenShift by deploying apps, managing multiple clusters, and enforcing policies across multiple clusters at scale.
They will also demo how to deploy your applications on multiple OpenShift clusters in combination with OpenShift Pipelines.
A
All
right,
everybody
welcome
back
to
yet
another
OpenShift
Commons
briefing
this
time
we're
going
to
be
introducing
advanced
cluster
management
for
kubernetes.
It's
been
a
topic.
That's
been
requested
a
couple
of
times,
so
I'm
really
happy
to
have
Brian
tennis
and
kamesh
Sampath
with
us
to
walk
us
through
what
that
actually
is,
and
hopefully
give
us
a
really
great
demo,
as
they
are
want
to
do
often
so
I'm
going
to
let
Brian
and
kamesh
introduce
themselves
and
take
it
away.
We'll
have
live
Q&A
at
the
end.
B
C
Okay,
thanks
thanks
Larry
thanks,
everyone
I
think,
probably
just
my
first
public
comments,
briefing
that
I'm
adding
so
I'm
I'm
kind
of
work
out
of
India
as
part
of
my
dad
data
fiber
to
see
our
team
and
actively
evangelize
on
key
Bonelli's,
open
shapes
and
savageness
technologies,
be
a
Java
developer
for
life
long.
Maybe
this
this
year,
exactly
last
week,
I
just
crossed
my
20
years
into
the
I-beam
testing,
so
kind
of
doing
development
from
day
one.
Until
now,
that's
pretty
quick
introduction
about
myself.
C
B
No,
no
North,
no
speed,
I
think
we're
I.
Think
we're
good
I.
Think
some
of
the
stuff
is
is
really
awesome.
You
know
how
we
can
manage
and
spin
up
and
do
a
lot
of
stuff
with
multiple
clusters,
because
the
world
of
Brunetti
is
it.
An
open
shift
is
getting
more
and
more
complex
and
how
you
start
thinking
about
it.
So
there's
there's
a
need
to
ACM
and
let's
figure
out
what
this
is
so
number.
One
first
point
that
I
do
want
to
make
is,
if
you
aren't
familiar,
make
sure
you
check
out
this
site.
B
So
this
is
our
main
landing
page
talks
about
what
ACM
is
and
there's
a
the
ability
to
go
and
get
the
tech
preview
so
that
you
could
try
this
out
yourself
so
number
one
make
sure
that
you
check
this
out.
That
way,
you
know
you
could
you
could
try
it
out
current
status
of
what
advanced
cluster
management,
recruitment
and
ease
is.
Is
we're
currently
in
tech
preview
with
this,
and
you
know
you
guys,
could
you
guys
could
try
it
out
if
you
think
that
it's
interesting
so
number
one,
though
what
is
ACM
so
why?
B
D
B
Are
increasing
need
to
have
multiple,
kubernetes
or
multiple
OpenShift
clusters
available?
Some
people
might
use
this
for
development.
Some
people
might
use
a
a
cluster,
for
you
know
different.
You
know
products
or
you
know,
publications.
We
want
to
go
and
have
one
particular
business
unit.
That
might
you
know,
have
specific
requirements
versus
another
one,
and
there
are
different
opinions.
You
know
even
within
red
hat
of
should
I
have
one
large
cluster
that
has
all
of
our
things.
Or
should
we
spread
this
out
and
have
you
know
particular
needs
mat
for
each
cluster
for
each?
B
You
know,
group
that
might
be
using
some
of
this
stuff
so
having
the
ability
to
number
one.
The
complete
lifecycle
of
an
open
ship
cluster
is
one
of
the
main
pillars
of
wood
advanced
cluster
management.
Is
we
have
the
ability
to
spin
up
clusters?
We
have
the
ability
to
manage
their
update
cycle
check
to
see
if
they're,
you
know,
need
an
update
things
like
that.
We
have
the
ability
to
connect
to
existing
clusters
right
and
we'll
showcase
some
of
that
stuff
in
that
in
the
demo.
B
On
top
of
all
of
those
things,
when
you
have
multiple
clusters-
or
you
know,
multiple
components
out
there
right,
you
have
to
have
a
way
to
be
able
to
manage
policy,
make
sure
that
you
know
we're
able
to
have
the
governance.
The
risk
assessment
compliance
these
things
within
the
cluster.
We
need
to
make
sure
that
each
cluster
is
meeting.
Those
specific
requirements
is
what
I
mean
and
ACM
allows
us
to
do.
Some
of
that
and
then
the
third
aspect
is
when
you
have
multiple
clusters,
you
get
some
benefits
there.
B
You
know
you
can
target
a
deployment
to
multiple
locations
to
have
your
own
complete,
hybrid
cloud.
You
could
make
this
on.
You
know
any
cloud
provider
on-premise
all
these
things
right
and
there's
benefits
to
that.
You
know
you
have
the
ability
to
deploy
your
application
to
multiple
geographic
regions
to
be
able
to
have
some
sort
of
you
know.
Do
your
assessment
in
place
right?
What
happens
when
something
doesn't
work?
You
have
the
ability
to
you
know
maybe
possibly
deploy
this
out
in
multiple
places,
and
you
could
you
know
manage
that
appropriately.
So
will
showcase.
B
You
know
talking
about
how
to
deploy
some
of
this
stuff
there.
Kamesh
is
awesome
to
help
her
advocate.
Here's
some
details
that
we
have
some
of
this
I
have
a
slide.
I'll,
add
it
to
the
deck,
so
whatever
we
send
that
out
as
well.
One
of
the
things
the
kamesh
was
mostly
a
recently
interests
are
working
on
is
the
Kay
native
cookbook.
If
you're
interested
in
server
list
approaches,
you
don't
want
to
deal
with
openshift
EMM,
all
or
kubernetes
llamo,
but
you
still
want
to
deploy
your
application
on
those
types
of
environments.
B
You
should
be
looking
at
server
list,
you
should
be
looking
at
que
native
and
the
book
is
free.
It's
a
download
so
check
out
that
link
if
you
haven't
seen
it
so
what
some
of
this
looks
like
so
the
first
pillar
of
this
would
be
the
unified,
multiple
cluster
management
right
and,
like
I
mentioned,
it
gives
us
the
ability
to
create
an
update
and
get
rid
of
kubernetes
clusters,
and
we
can
tie
the
advanced
cluster
management,
the
main
hub
into
our
own,
multiple
cloud
environments.
B
So
what
I
mean
by
that
is,
we
could
go
and
specify
an
AWS
credential,
a
GC,
P,
credential
and
Azure
credential
in
you
know,
there's
you
know
more
to
come.
Probably,
but
currently
we
do
those
things
and
once
you've
created
the
connection
to
those
cloud
providers,
we
could
go
and
spin
up
in
kubernetes
openshift
cluster
that
easily
we
could
search
and
find
any
resource
that
we
have.
That
is
running
on
those
particular
clusters
across
our
entire
domain,
which
is
pretty
awesome
right.
B
But
whenever
you
have
the
complexity
of
multiple
clusters,
where
did
I
deploy
this
thing?
Where
does
it
go?
We
need
to
make
sure
that
we
have
the
ability
to
easily
find
that
an
ACM
does
give
us
that
ability.
That's
pretty
neat
right
once
you
have
deployments
that
are
that
you
know
complex
across
these
multiple
clusters.
You
need
to
be
able
to
find
things
quickly
and
ACM.
Does
that
for
us
one
of
the
other
things
is.
B
Importantly,
like
I
mentioned
policy
based
governance,
risk
and
compliance
is
a
big
part
of
this
right.
We
don't
want
to
have
to
you
know,
wait
for
a
security
team
to
you
know,
tell
us
hey,
something's,
wrong
or
whatnot.
We
want
to
be
able
to
get
alerted
quickly
right,
so
ACM
allows
us
to
essentially
set
up
some
of
these
policies
for
security
applications
and
infrastructure.
B
So
we
could
do
that
and
we
could
visualize
that
this
cluster,
or
this
set
of
resources
is
meeting
the
requirements
that
we
have
right
so
number
one
right
and
we
have
the
visibility
into
this.
So
we
could
see
some
of
the
the
screenshots
of
you
know
how
this
kind
of
looks
like
to
be
able
to
validate
make
sure
that
compliance
is
there
right
we
wanna.
We
want
to
make
sure
that
these
clusters
are
in
compliance
when
we
have
many
of
them,
because
it
is
harder
to
manage,
but
ACM
hopefully
takes
away
some
of
that
complexity.
B
It
makes
it
easier
with
some
of
that
and
finally,
the
third
aspect
is
really
the
application
and
how
that's
deployed
you
know
it's
nice
to
have.
You
know
some
of
the
infrastructure
tools
that
allow
us
to
manage
multiple
clusters.
Spin
them
up,
do
that
stuff
and
make
sure
they're
things
that
are
on
there
in
compliance,
but
really
what
it
comes
down
to
is
how
do
I
deploy
my
app
and
how
do
I
do
it
at
scale?
Now
that
I'm
able
to
have
multiple
clusters?
B
How
do
I,
how
do
I
manage
all
of
that
stuff
appropriately
and
ACM,
helps
with
some
of
that
too,
and
we're
going
to
show
that
in
the
demo,
so
you
can
easily
scale
some
of
these
deployments
in
a
simple.
You
know
unified
view,
and
you
can
see,
we've
got
an
application
with
many
different
pieces
and
components.
Here
you
could
deploy
applications
from
multiple
sources.
You
know
just
like
you
could
do
a
lot
of
this
stuff
with
with
kubernetes
and
open
shipped
by
default.
B
We're
able
to
do
this
on
multiple
clusters
so
that
we
could
have
a
unified
vision
across
some
of
this
stuff
and
again,
like
always
being
able
to
see
and
understand,
what's
going
on,
is
very
important,
especially
when
you
have
the
complexity
of
multiple
clusters.
The
ACM
gives
us
a
quick
visualization
across
our
clusters
so
that
we
could
see
how
the
relationship
of
deployed
applications
actually
goes
through
the
chain
and
I
know
that
I've
seen
a
lot
of
this
stuff.
B
Well,
the
problem
is
some
of
this
stuff.
With
you
know,
talking
about
how
a
service
mesh
works
right,
you
know
we
want
to
be
able
to
manage
how
those
things
go
across
right.
Acm
gives
us.
Some
of
these
views
gives
us
the
ability
to
see
some
of
that
stuff,
though
anyways
with
that,
let
me
pass
it
over
to
kamesh
and
we'll
get
going
with
the
with
the
demo.
So
you
could
see
how
some
of
this
stuff
actually
looks
in
real
life
before.
C
Before
I
jump
into
the
jump,
demo
like
I
just
want
to
share
a
few
things,
and
then
he
probably
the
problem
which
mind
was
saying
earlier
to
see
why
we
need
this
stuff
I,
why
we
need
ACN,
so
right
now,
I'm
just
going
to
show
you
multiple
different
console,
at
least
for
my
case.
I
just
have
three
clusters
right
now
running
one.
If
you
see
this
one,
this
is
this
one
which
is
running
on
GCP,
which
I
spin
up
in
the
morning
and
then
I
have
one
more
cluster
which
is
running
on
Azure
I.
C
Think
I
just
spend
up
sometimes
bad
and
then
I
have
a
third
cluster
so
which
I
ran
on
AWS
I.
Think
I
have
three
clusters
totally
in
fact
now
add
it
to
a
cm
which
is
going
to
be
four
clusters.
I.
Just
imagine
this
a
small
demo
which
I'm
going
to
do
for
10-15
minutes,
but
if
you
imagine
the
scenario
so
we
have,
we
need
three
clusters
show
this
demo
and
multiple
other
stops
right.
So
this
will
be
a
typical
scenario
when
you
start
deploying
your
application.
C
Enterprise
right,
your
clusters
keeps
growing
and,
as
you
keep
your
clusters
keep
growing.
So
you
also
have
the
problem
of
having
multiple
times
multiple
thing:
open
up,
multiple
management
things
and
becomes
kind
of
becomes
a
nightmare
once
upon
a
time
when
you
have
to
bind
to
manage
multiple
commands
clusters.
So
that's
that's
a
real
reason.
What
Brian
was
saying
earlier,
like
we
got
this
ACM
to
basically
manage
your
multiple
criminalist
masters
from
one
single
place.
So
when
I
get
into
ACN,
I
can
start
to
see
my
clusters
across
I
can
import.
C
My
clusters
will
see
one
example,
and
you
can
also
spin
clusters
on
the
fly
from
ACN
itself
just
before
going
there.
So
what
I
want
to
use
that
you
can
find
these
demos
I
put
the
deviled
eggs
on
the
chat,
but
still
I'm,
sorry
sharing
this
once
more,
the
bottom?
What
about
demos
I'm
going
to
show
you
today?
So
they
are
available
right
here
on
this
github
repository,
that's
demo,
a
CA
manifest
it's
going
to
deploy
a
very
simple
application:
I'll
shadow
application
as
well.
So
this
is
application
github
URL,
where
you
can
go!
C
Look
at
the
application
as
well-
and
these
are
the
two
things
which
is
bonnet
show
you
today
nothing
big
about
this
application.
The
only
thing
is
that
we're
going
to
deploy
the
same
application
is
small
different
clouds,
but
what
basically
is
going
to
do
is
I
might
want
to
use
a
cm
to
do
this
deployed
and
end
of
the
day
on
the
verge
of
deployment.
C
Acm
is
also
going
to
take
care
that
to
tag
this
particular
adding
in
a
normal
variable
to
each
of
these
deployments,
saying
that
it
loves,
create
up
livers
or
do
CPR
ashada.
Okay,
that's
what
three
clouds
which
are
going
to
sing
today.
So
if
you
are
interested
in
getting
started
with
management
deploying
your
own
cluster,
so
this
is
the
github
repository
which
you
can
go
there
for
a
cm,
meetup.com,
open
cluster
management
and
when
she
are
there,
so
you
should
see
this
little
one.
This
deploy
folder.
That
gets
you
deploy
the
application
from
scratch.
C
If
you
are
interested
in
the
leading
edge
Bills
of
apple
cluster
management,
you
can
do
it
from
here.
It
gives
you
all
instructions,
basically
how
to
get
started
with
a
cm
on
your
local
cluster,
which
your
cluster,
which
you
have
in
case.
If
you're
interested
to
go
pretty
quick
or
Bay,
you
can
also
do
it
from
the
operators
console's.
If
we
go
to
the
operator
hall
I'm
just
showing
one
example
where
I've
installed
this,
you
can
just
say
a
cm
advanced.
Let
me
type
this
one
ad.
C
C
B
C
Is
like
so
once
you
install
this
operator
right.
Basically,
let
me
show
if
I
get
this
one
on
my
install
operators.
Let
me
go
to
mine,
so
this
is
namespaces.
If,
if
this
is
not
a
global
installing,
so
you
can
choose
a
name
space
where
you
wanna
install,
because
it's
not
global
by
default,
so
I
just
have
that
install
on
advanced
master
management
namespace.
So
this
or
the
two
operators
that
get
installed
once
you
get
it
installed,
you
see
bunch
of
API
that's
available.
C
One
very
first
thing
that
you
need
required
for
this
to
work
is
that
you
need
to
go
and
click
on
this
multi
cluster
arm.
So
that's
going
to
show
you
the
multi
cluster
of
a
property
they
just
create
and
then
create
one,
for
example,
to
create
this.
This
is
going
to
give
you.
This
is
pretty
much
as
needed,
so
you
need
to
specify
a
secret
for
now
so,
which
is
which
you
can
log
into
play
and
then
register
yourself
to
get
a
secret
so
which
allows
you
to
pull
this
one.
C
So
if
you
use
the
secret
to
pull
the
operators,
I
mean
you
may
just
require
another
day,
so
this
is
the
only
thing
that
is
required
for
you
to
create
don't
mind
about
the
spending
is
already
installed,
but
there
is
a
fix
that
going
on
to
have
this
show
proper
status.
So
this
is
what
is
required
for
you
to
get
started
with
thing,
and
once
it's
done,
you
will
see
that
on
the
namespace,
approximately
we
have
not
approximately
precisely
it
will
have
35
pods
running.
C
So
this
is
a
real
life
by
which
you
can
verify
that
okay,
Akamai
ACM
up
and
running
for
me,
so
this
one
day
to
do
see
this
another
way.
Is
that
you
once
you
do
this
when
you
go
to
the
routes
side
of
things
on
the
networking
staff,
so
you
should
see
the
multi
cloud
console
which
should
be
there.
You
can
click
on
this
console
link
which
would
basically
get
you
to
this
place.
What
you
see
right
now,
so
that's
pretty
very
quick
intro
like
how
we
get
started
with
installing
a
cm
on
your
clusters.
C
So
with
that,
what
we
do
is
like
it
looks
like
go
and
see
what
other
things
you
can
do
right
so
so
much
you
click
on
this
red
thing
here
you
see
that
much
of
things
you'll
have
an
observing
drama
and
topology,
and
all
these
steps
before
overview.
These
are
which
we
evolved
from
the
cluster
that
you
already
have
so
one
thing
which
is
showed
right
now
from
Braemore
showing
some
time
earlier.
C
So
this
is
going
to
give
you
an
overview
to
have
I
have
one
cluster
uninsured
and
one
cluster
remains
on
already
important,
and
there
are
two
clusters
which
will
also
import
one
more
DCP
cluster
in
a
second.
Let's
just
show
how
we
can
import
the
clusters.
You
can
also
go
and
add
a
provider
connection
so
that
we
can
create
this
stuff
as
well.
Okay.
So
this
is
the
overview
page
to
manage
the
clusters.
You
have
to
go
to
your
manage
clusters
here.
If
you
click
to,
then
I
still
get
to
the
clusters.
C
What
I
have
install?
If
you
see
this,
I
have
couple
of
clusters
one
this
AWS
one
is
what
I
created
just
before
this
particular
session,
because
approximately
takes
20
to
30
minutes
for
this
cluster
to
be
created
on
the
fly,
so
I
thought
like
we
could
do
it
earlier
so
that
he
can.
You
know
like
how
to
do
this,
so
one
of
the
things
is
that
he
can
just
do
a
cluster
which
basically
clips
to
a
cluster.
C
So
this
should
take
you
to
this
particular
screen
where
I
can
take
okay,
what's
a
cluster
name,
I
need
to
use.
What's
the
domain
name,
I
can
give
all
the
typical
open
chip,
insulation
parameters
right
and
then
choose
one
of
those
cloud
providers
right,
for
example,
when
it's
queues
Google
here
it'll,
ask
you
bunch
of
other
stuff
right.
Few
are
the
parameters
that
you
typically
do
when
you
create
stuff?
Okay,
so.
B
C
So
we
need
to
add
those
demise
and
other
stuff
created,
including
if
you
go
to
the
official
opposite
Docs.
You
should
see
that
what
are
the
basic
things
that
you
need
to
have
on
each
of
those
clouds
to
have
these
things
set
up.
So
those
basic
things
are
prerequisites.
They
call
us
or
required
before
you
come
here.
I
just
basically
creates
a
cluster
once
you
have
all
those
basic
setup
down,
so
so
will
be
one
thing
like
so
coming
back
to
this
one
as
a
only
cap.
C
Assuming
that
we
have
please
don't
mind
and
everything
set
up
you
come
here,
you
can
choose
the
possibly
the
possible
over
chip
installation
that
the
pen
do
4.3,
4.1,
8,
4.4,
etc,
and
then,
once
you
go
here,
so
you
just
see
the
connection
right
still
be
wondering
what
this
connection
is.
Basically,
so
the
connection
is
basically
is
the
set
of
things
that
you
actually
use
with
the
opposite,
installer
to
kind
of
instigate
a
plaster
ride.
Let
me
go
and
explain
this
further.
C
C
Basically
the
service,
icon,
Jason
that
you
need
to
put
here
and
if
you
go
to
trial
or
a
bunch
of
calm,
then
you
should
get
the
cool
secret
as
well.
So
that
you
need
the
full
secret
to
pull
the
images
and
possibly
the
SSH
keys,
which
you
need
so
that
it
can
in
case,
if
we
want
to
those
missions,
we
can
using
those
keys
as
well.
So
these
are
the
some
parameters
which
is
asked
for
once
you
give
this
in
use.
The
same
parameter
can
be
reused
whenever
you're
swinging
in
new
clusters.
B
Familiar
if
anybody's
familiar
with
the
open
shift
install
command
on
how
to
install
open
shift
on
any
of
these
cloud
providers.
This
is
the
exact
same
set
of
inputs
that
you
have
to
give
for
each
specific
cloud
right
with
AWS.
You're
gonna
have
to
give
a
Access
ID
and
a
secret
right,
so
that
stuff
still
needs
to
be
provided,
but
you
just
provided
in
here
and
then
you
could
use
this
to
easily
spin
up
stuff
right.
C
Another
thing
I
need
I
like
to
say
here-
is
that
the
point
to
mention
this
again,
but
all
custom
resources
that
gets
created
behind
the
scene
in
case?
If
you
are
organization
where
you
have
the
CI
CD
in
place,
then
he
could
completely
do
a
get
get
ops
from
this.
Even
sports,
meaning
of
your
own
clusters,
could
be
good
jobs
as
well.
That's
also
possible,
but
that's
too
advanced
what
this
particular
session.
C
C
I
think
that's
that
I
think
everything
you
see
ID
here,
so
everything
gets
cleared.
Everything
is
a
CRE
that
we
can
create
and
then
push
it
into
a
github
repository
and
then
use
them
as
part
up
in
redox
flow.
So
so
this
is
all
I
added.
These
two
things,
probably
demo
a
CA
I
mean
AWS
demo,
GCPD,
sir,
for
me
Amazon
or
natural
cloud.
C
So
once
you
have
this
this,
not
only
that
you
have
to
create
a
new
class
that
I
can
also
pull
in
my
existing
cluster
into
this
particular
stuff,
for
example,
so
I
have
created
one
class
and
I
said
earlier
using
this
connection
and
this
ishow
cluster
I
did
an
import
another
day
and
then
now,
let's
do
an
input
again
on
the
fly.
Let's
say:
I
want
import
another
password
and
let's
give
me
the
cluster
name
as
I,
give
back
ng,
CP
and
then
I
also
use
another
day
in
space
bar.
C
You
see
this
there's
a
customer
source
definition
getting
created
multi-cloud
and
it
creates
bunch
of
other
objects
on
the
fly,
and
then
you
service,
no
extension
every
star,
and
now,
if
I
go
back
to
my
console,
to
go
to
my
class
to
I
should
see
something
like
this.
My
back-end
DCP
is
pending
import
because
there
are
something
has
to
be
deployed
in
the
particular
cluster.
Let's
give
some
time
for
it,
then
it
also
adds
a
bunch
of
other
labels
here.
So
you'll
also
have
these
labels
imported
as
well.
C
C
C
I
think
I've
seen
people
like
on
the
on
the
on
a
CMS,
very
I've,
seen
people
while
also
importing
their
local
vinyl
of
cube
clusters
right
like
a
mini
cube
or
a
kind
clusters
kind
of
stuff
into
this.
They
are
doing
experimenting
with
those
things
as
well,
which
means
that
it
also
gives
you
an
option
that
you
can
get
that
hat
I
mean
money
laughing
that
is
also
inside,
but
right
now,
which
one
the
overshift
and.
A
C
Think
we
can
use
I,
think
we
can
use.
I
will
be
cheap,
badminton
last
well,
but
in
this
demo,
I'm
showing
it
on
cloth
because
that's
easiest
for
the
demo.
If
you
watch
our
summit
demo
session,
so
we
actually
imported
a
bare-metal
cluster
inside
ACN
and
then
we
also
spawned
that
application
on
the
barometric
cluster.
That's
one!
That's
also
possible.
A
What
I
figured
so
it
looks
like
it
needs
a
Kwai
secret
is
clay
include,
did
his
part
of
a
cm.
C
No
I
think
you
can
use
your
quick
upon
any
energetic
way.
A
corn
I
use
my
own
account
right
here
and
then
you
can
just
create
a
secret
there
on
there
from
there
and
then
from
the
crater
phone.
You
can
create
a
secret
from
there.
Let
me
show
that
to
you
understand
this
is
my
query:
account
I,
just
wanna
get
into
microwave
I
found.
If
you
go
to
your
account
settings
right
here,
it's
acting
a
free
thing.
If
you
just
go
and
create
your
own
account
here.
C
So
if
you
go
here
and
then
you
can
just
do
this
generate
interpret
software
once
you
do
this
particular
stock.
What
happens
like
it
gives
you
multiple
options
like
your
Papa
login
command,
you
will
keep
me
on
a
secret
there's,
multiple
other
things.
That's
get
sold
for
you,
I
just
need
to
pull
out
your
secret
down
and
then
follow
the
instructions.
C
That's
there
in
the
open
deployment
for
you
either
this
and
if
you're
using
an
operator,
you
don't
need,
then,
if
you
just
use,
usually
create
the
secret
inside
your
namespace
and
then
specify
that
in
a
grey
right.
So
what
I
was
meaning
is
that
once
you
create
it
thing,
let
me
go
back
to
the
install
operators
that
Mars
cluster
management.
You
need
to
create
this
CID,
so
once
you
create
this
CID,
so
it
asks
you
for
this
image
pull
secretly.
C
So
what
you
can
do
is
like
once
you
go
once
you're
in
way
and
got
your
secret
downloaded.
It's
animal
that
gets
downloaded
just
do
a
few
party
create
to
create
the
ml
secret
on
the
namespace
very
want
to
deploy
a
cm
once
you
have
done
that
then
specified
that
secret
name
here,
so
that
they
made
a
sweet
spot
for
you.
A
And
then
there
Menasha
is
asking
who
manage
the
cadential
is
and
billing
from
AWS
GCE
or
Azure?
Is
there.
C
B
Those
are
those
would
be
your
credentials
for
your
AWS
accounts
or,
depending
on
how
you
know
your
workplace
or,
however,
you
have
that
set
up
you're,
just
using
the
credentials
for
your
own
account.
This
is
not
you
know,
build
or
manage,
or
whatever
by
Red
Hat
you,
you
just
have
that
provider
cannot
connection
with
the
particular
access
ease
to
be
able
to
get
into
those
top
providers
so
that
it's
completely
managed
on
your
own
account.
Okay,.
A
C
I
think
one
of
the
good
thing
about
a
CMS
that
in
case,
if
it
rains
I,
add
that
which
is
multiple
times
due
to
this
coverage
situation.
Is
that
I'm
not
happy
enough
instances
of
GCP
in
India
clusters,
so
whenever
I
spin,
these
apps
so
I
usually
get
a
failure
because
things
are
not
available.
So
what
ACM
dance
it
like?
It's
rolls
back
this
particular
stuff.
You
say:
let
you
roll
back
completely
like
it's
like
your
database
transactions
are
made
right,
it's
completely
done
or
it's
rolled
back
completely.
C
B
C
C
C
It
just
needs
an
opposite
cluster
to
deploy,
but
since
we
are
not
technically
more
the
all
the
images
right
there
in
our
play
repository
so
whether
you
import
them
locally
and
point
you
to
something
doing
some
act
behind
the
scenes,
but
not
on
the
outside
right,
maybe
like
you,
can
still
do
but
lots
of
required.
That's.
B
B
C
But
since
it's
a
management,
cluster
I
keep
them
out
of
the
applications,
because
I
don't
see
if
something
wrong
happens,
I'm
easy
to
go
and
change
this
particular
stuff
right
can
import
into
any
the
new
ACM
the
more
deploy
applications.
Then
that's
probably
really
dependency
on
this
cluster
here
so
which
I
don't
want
particularly
another
day
right.
So
just
to
show
that,
like
we
see
this,
this
node
the
Google
node,
also
been
imported
right
now,
which
means
my
Google
cluster.
So
let
me
go
and
show
you
something
here.
C
If
you
see
here
so
this
is
not
your
cluster
I'm
on
the
package.
Gcp
remember
this
is
a
project.
We
specify
the
input
in
the
cluster.
This
is
a
little
bit
more
details
and
getting
in
so
you'll
see
a
bunch
of
pods
and
diplomas
getting
created
the
plot
here,
the
benomar.
You
try
to
say
that
you
monitor
plot
of
applications
right,
so
let
me
go
and
find
this
out
borrowed
it
back
and
GCP,
so
it
takes
some
time
for
it
to
get
the
cluster
important
here.
So.
C
You
see
a
bunch
of
parts,
maybe
they
have
changed
it
now.
So
it
says
that
that's
how
it
connects
your
your
cluster
management,
cluster
and
application.
Maybe
I'll
try
to
find
it
out
and
post
it
back.
So
you
can
find
a
bunch
of
course
getting
creative
running
their
respective
communicate
to
the
backend
all
right.
So,
let's
without
further
basic
time,
I
think
they're
running
20,
minutes
more
I.
Think
I'll
just
quickly
show
you
to
deploy
an
application
or
two
things.
As
I
told
you
earlier.
C
All
these
scripts
are
available
in
the
github
repository,
so
you
can
just
use
that
one.
So
what
I'm
going
to
do
right
now
is
born
and
apply
a
bunch
of
applications.
I
think
I'm,
gonna
deployed
that
only
I
mean
the
management
cluster,
but
it's
going
to
spread
out
into
multiple
class.
The
next
second
example
I
want
to
apply
on
a
G
or
and
in
W
guys
for
that
example
right,
so
so
what
it?
Basically
one
of
the
good
thing
is
like
it
end
of
the
day.
C
It's
going
to
show
you
like
this:
it's
going
to
be
a
simple
hello,
world
kind
of
a
demo,
but
the
topology
another
day.
It's
going
to
look
like
this
right.
I
have
a
back-end
AWS
I
have
a
packet
mazur
and
I
have
a
front-end
application
another
day,
so
bad,
it's
gonna
distribute
the
application,
how
it
happens.
So
let
me
go
to
the
code.
C
So
again,
it's
it's
related,
a
bunch
of
see
IDs
again
that
I
think
I'm
overflowing
with
Co
DS
right
now,
so,
for
example,
so
the
basic
three
basic
thing
that
is
required
to
get
started
with
this:
it's
basically
a
namespace
Val.
You
want
to
deploy
this
application.
This
namespace
is
going
to
be
created
in
all
the
clusters.
C
C
So
it's
going
to
adopt
giftshop
methodology
behind
the
scenes,
which
means
that
I
need
to
go
pick
up
stuff
from
github
and
then
use
those
Yama's
which
will
be
a
customization
or
terminators
manifest
or
any
kind
of
manifest
that
you
have
it's
going
to
pick
them
up
from
data
I.
Think
that's
the
easiest
channel
have
there
are
multiple
other
channels,
I,
don't
remember
them
top
of
my
head.
C
If
you
go
to
the
open
cluster
management,
therefore,
we
have
listed
all
the
other
possible
channels
which
we
have,
but
for
the
for
the
demo
sake
we'll
be
using
github
I
can
go
together,
but
then
uses
github
developer
demos.
Definitely
with
this
task
application
inside
that
so
and
then
it
says
it
okay.
This
is
what
I'm
going
to
use
as
my
channel
for
my
guitar.
C
So
what
I
mean
to
say
right
now,
when
I'm
going
to
deploy
my
application
I'm
going
to
define
a
few
things
like
your
channel,
your
applications,
grouping
of
this
particular
stuff
and
all
of
the
stuff.
It's
going
to
go
on
use
this
channel
to
download
this
manifest
and
up
like
this
manifest
introspective
what
you
call
your
clouds
right.
So
when,
if
you
go,
do
this
the
applet?
Basically
it's
nothing,
but
this
is
okay.
It's
a
group
kind
of
imagine
like
a
logical
group
of
all
the
deployed
applications.
C
They
can
move
this
application
together,
I
call
it
a
hybrid
cloud,
that's
going
to
be
the
demo
which
I'm
joined
right
now
and
then
I
can
specify
a
bunch
of
components.
I'll
show
you
this
component
kinds
as
well
in
a
second,
so
this
is
going
to
be
a
subscription
model,
that's
going
to
be
which
all
the
that
have
the
subscription
done.
So
why
don't
want
to
say
this?
C
Go
on
deploy
these
one
lean
in
all
the
Amenia
clusters,
which
has
this
particular
label
as
cloud
and
then
the
cloud
is
going
to
say
either
Amazon
as
your
mobile.
Okay,
just
turn
off
select
our
typical
select
type
thing,
which
happens
within
few
minutes
for
the
services
it's
going
to
go.
They
do
the
same
thing
here,
for
example,
if
we
go
here
on
to
our
console,
you
see
this
AWS
as
a
cloud
Amazon.
This
also
has
a
cloud
Azure,
and
this
also
has
a
cloud
Google
right.
C
I
have
am
not
deployed
to
other
things
in
this,
so
just
to
show
you
that
when
I
apply,
this
Ruth
is
good
to
go
only
to
awh
Roger,
but
not
with
Google
fight
still
I
have
Google
I
can
bring
in
Google
as
well,
but
this
is
going
to
be
a
label
which
is
going
to
be
used
here.
So
that's
what
this
says:
okay,
go
on.
Select
these
things
apply
these
subscriptions
only
on
those
clusters,
which
has
this
particular
key.
C
A
label
with
any
of
these
values
right
I
think
there
are
other
expression,
also
is
possible,
but
this
easiest
one
there,
okay,
this
our
first
three
things
which
we
need
to
create
I
need
to
create
a
namespace
I
need
to
create
a
channel
and
I
need
to
create
an
application.
Alright.
So
let's
go.
Do
this
I'm
just
going
to
follow
the
instruction
from
the
demo
just
to
follow
this
one
right
here,
so
I'm
just
going
to
say
copy
this
one.
Let
me
go
and
see
that
I
am.
D
B
C
B
C
D
C
I
think
I
have
bunch
of
things
the
same
thing:
what
I'm,
showing
on
my
vs
code,
I
just
saying
that
create
this
apply
the
namespace,
create
the
get
up
channel
and
create
the
application.
That's
what
about
to
say
it's
not
going
to
basically
do
anything
right
now,
because
I
don't
have
such,
which
is
it
to
be
creative,
that
my
subscription
has
to
be
created.
This
is
going
to
create
this
ones
here.
So
all
this
ones,
if
you
go
to
the
console
and
if
I
go
to
the
manage
applications,
you
should
see
this
thing.
C
Application
thing
starting
up
right
now,
but
I
do
not
have
any
clusters
imported.
You
see
this
a
great
cloud
application
which
we
saw
just
now
created,
but
it's
not
managed
any
cluster
of
Sutton.
Alright.
This
is
an
empty
topology
right
now,
because
I've
not
created
other
thing,
that's
required
right.
So
what
is
other
thing
is
required,
so
we
say
that
okay,
I
need
I
need
to
be
on
the
cloud.
I
need
an
application,
but
how
do
I
select,
which
all
the
things
where
I
need
to
place,
which
are
the
clusters
that
a
native
place?
Okay?
C
So
those
are
the
two
other
grd
that
is
required,
for
example.
So
let's
go
and
say:
I
have
a
use
customer
as
here.
So
if
you
see
here
what
I'd
want
to
do
is
like
so
it's
going
to
have
a
subscription.
Basically,
if
you
remember,
let
me
pull
this
one
of
Babel,
so
that
I
can
explain
these
two
things
in
family.
So,
let's
take
what
is
there
and
the
application
in
application?
C
If
you
remember,
I
said
that
I
need
the
subscript
shape
here
right,
the
component
kinds,
which
is
going
to
be
used
to
hear
this
of
subscription.
That's
exactly
what
is
here
and
then
what
substitution
basically
tells
you
is
that
okay,
so
it
goes
and
tells
go
and
find
out
all
the
things
just
labels
throughout
all,
because
it's
a
basic
one,
I'm
just
going
to
say
that
github
path
is
front
end
and
a
CMS
is
front
end
a
CMS
right,
wondering
man.
C
This
is
like
this
is
going
to
go
to
my
github
repository,
that
is
from
my
channel
so,
which
is
here
and
from
my
channel
I'm,
going
to
say:
okay,
go
and
pick
this
stuff
up
from
this
particular
repository,
which
is
going
to
come
here
right
from
this
go
to
this
channel
and
then
which
path
and
going
to
say
I
can
just
even
say
they
get
up
branch
which
I
want
to
play
here.
Go
on
pull
this
funky
top
branch.
C
Okay,
so
let
me
go
and
show
that
to
you
as
well
in
a
second,
this
is
going
to
be
hybrid
cloud.
This
is
this.
Application
should
want
to
deploy
and
then
I'm
on
a
branch
a
seeing
here.
That's
exactly
what
I
say
there
right
in
my
application
subscription.
So
that's
what
I
say
here
and
then
I
define
a
placement
tool
bar
you
want
to
place
this
on.
Okay,
this
is
an
example
of
a
front-end,
so
I
say,
go
and
do
the
front
and
let's
open
a
back-end
clustered
here.
C
So
that's
more
thing
which
are
going
to
deploy
right
now,
so
the
placement
tool
I
say
this
is
going
to
go
into
all
the
environment.
That's
going
to
be
having
and
ramen
called
as
dev
the
label
and
then
it's
going
to
say,
like
a
tiered
back-end
in
any
cloud
for
that
matter,
it's
going
to
get
you
bunch
of
clusters
right
now,
an
array
of
clusters
all
right
and
then
it's
all
one
deed,
go
and
deploy
bond
Leon
cluster,
which
are
ready
right.
If
it's
not
ready,
then
you
start
call
it
deploy.
C
That's
not
for
you
alright.
So
this
is.
These
are
the
two
things
required
I
say
subscription,
which
says
that
its
size,
your
placement
rules
and
the
subscription
goes
into
your
application.
That
application
says
that
which
uses
a
particular
subscription
to
deploy
your
application.
All
right,
so
I'll
take
a
quick
pause
here
to
see
if
a
question,
otherwise
I
can
take
the
questions
once
I
do
a
first
deployment
and
it
again
the
first
deployment
and
they
will
start
taking
the
questions
as
well.
C
C
D
D
D
B
C
C
D
D
C
D
D
B
B
Once
you
do
that,
you
then
could
use
a
cm
to
attach
to
either
AWS
GCP
or
at
least
right
now,
and
you
could
create
a
cluster
using
a
cm.
What
we
did
was
we
already
had
a
cluster
provided
and
we
generated
a
command
to
basically
add
this
into
or
a
cm.
So
you
just
go
specify
some
details
there
and
you
add
some
of
that
stuff.
Just
copy
and
paste
that
into
you
know
your
OC
command
or
coop
CTL
command
and
you'll.
C
Probably
the
apps
to
apply
a
patch
enemies,
so
I
think
I
might
be
missing
something
I'm,
not
sure.
What's
there
are
the
the
one
got
updated
right
now,
I
think
I'm
not
sure
we're
at
the
top
of
the
hour.
Maybe
the
instructions
are
here,
probably
if
I
find
something
I'll
update
the
instructions
right
here.
C
So
if
you
find
the
clusters
or
I'll
do
a
recording
of
this
again
and
then
push
it
back
with
to
the
end
so
that
you
can
push
it
out
and
but
if
you
another
day
like
it's,
what
it
basically
does
it
like
it
goes
find
this
out
and
goes
to
this
one
and
then
fine
starts
applying
these
overlays,
which
is
here
right,
AWS
or
GCP
anything.
So
it's
smart
enough
to
find
there's
a
customization
file
at
the
root
of
those
repositories
in
github
will
pick
those
files
and
start
applying
those
points
on
the
respective
clusters.
D
A
That
just
gives
us
an
excuse
to
invite
you
back
again,
and
maybe,
if
you
run
the
demo
again
when
it's
working
and
record
it,
we
can
put
it
in
the
link
with
this
talk
as
well.
So
you
know,
maybe
we
can.
We
can
do
it
that
way,
but
I
also
would
love
to
have
you
back
commit
to
talk
about
Candida
and
to
really
dive
deep
into
that
again.
Sometime
soon,
so
I
think
we've
managed
to
answer
everybody's
questions
that
came
in
from
all
the
different
chat
areas
and
I'm.
Just
gonna
look
quickly
here
again
Brian.
A
If
you
have
any
final
words
or
a
final
slide
on
how
to
get
a
hold
of
you,
you
want
to
throw
that
up.
You're
welcome
to
or
I
can
just
add
that
resources
link
at
the
end
of
the
video.
If
you
haven't,
got
anything
prepped
I'm,
fine
with
that
too,
and
there
were
a
lot
of
links
that
they
shared
with
us
here
in
the
chat
so
I'm
going
to
try
and
grab
all
of
those
and
include
those
in
the
in
the
YouTube
edited
version
of
this
yeah.
So
there
you
go
I
think.
B
This
is
probably
the
best
takeaway
side.
You
know
if
you
are
interested
in
trying
advanced
cluster
management
ribbon
ideas
feel
free
to
try
it
out
hit
this
link
and
you'll
be
able
to
get
the
tech
preview,
but
we
basically
showed
some
of
the
beginning
steps
of
how
you
get
this
going.
I
got
to
create
that
create
that
or
install
that
operator
on
your
cluster
of
the
management
cluster
and
then
tie
it
to
existing
clusters
that
you
have
or
create
the
connection
for
the
AWS
GCP
or
Azure
cloud
providers
buy
that
stuff
together.
B
But
you
know
once
you
provide
that
stuff
you'll
be
able
to
spin
clusters
up
using
ACM
and
they
are
you
know
connected,
and
you
could
get
some
of
this
stuff
we'll
make
sure
that
we
get
a
demo.
So
you
guys
could
see
this.
You
know
at
least
applications
things.
You
know
on
multi
clusters
like
that,
but
yeah
main
takeaway
is
try
it
out
here
and
yeah.
If
you
have
any
feedback
or
questions
or
whatnot
I
know
we
had
the
question
about
disconnected
installs.
B
A
There's
a
lot
of
things
to
cover.
There's
one
last
set
of
questions
for
found,
Dollfuss
asking
and
coming
in
from
YouTube.
You
know
if
you
have
time,
I'll
read
them
out.
Can
you
integrate
your
own
automation
to
run
pre
or
post
ACM
deployment
like
ansible
both
for
clusters,
application
deployments,
preferably
running
automations
from
you,
keep
saying
ASM,
it's
a
I
think
he
means
ACM
and
not
calling
ACM
api
outside
of
the
automation
platform.
Is
that
a
future
talk
or
is
that
something
you
can
answer
in
a
few
minutes?
I.
C
More
experience
in
the
air
for
me
again
I
think
you
could
potentially
put
it
as
a
future.
Talk
because
I'm
not
sure
answer
Billy
but
definitely
began.
I
was
flying
something
with
pipelines,
tech
pipelines
with
this,
so
that
your
cluster
gets
pinned
up
automatically
using
the
same
principle
of
what
we
apply
right
now,
but
it
runs
instead
of
you
running
the
commands,
it
will
be
run
by
your
pipelines.
C
A
That
would
be
great
and
there
has
been
in
the
chat,
a
running
thread
and
I
just
want
to
follow
up
and
Ryan,
Jarvan
and
and
I've
been
hearing
this
too,
as
well
about
using
ACM
for
without
kubernetes
for
just
managing
core
OS
using
ignition,
though
I
think
there
is
something
there,
the
IOT
edge
kind
of
use
case
for
ACM.
We
were
just
in
the
ok,
the
working
group.
A
Vadim
rutkowski
are
all
going
to
be
chatting
about
Fedora
core
OS
Fedora
for
IOT
and
we'll
touch
a
little
bit
on
using
okd
as
well
with
that.
So
there's
there's
a
lot
here
and
commish
really
again:
I'm
gonna
make
you
talk
about
Kay
native,
because
I
think
you
could
do
it
rocket
and
I'd
love
to
I'll
have
to
get
the
book
now
and
read
it
because
I
didn't
realize
it
was
out
there.