Red Hat OpenShift The Level Up Hour | Red Hat Livestreaming, 30 Sep 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: The Level Up Hour (S1E9): Podman Pods and Using CRC as a Registry

Description

First up, let's get our kube-yaml working. Then let's deploy it around using OpenShift as a container registry. Lastly, let's see if we are convincing you!

Learn more at https://red.ht/leveluphour

A

Good morning, good afternoon, good evening, wherever you're hailing from welcome to the level up hour here on openshift tv, I am chris short principal technical marketing manager here at red hat. Also the producer of this wonderful thing. We call open shift tv check us out at openshifttv.com or openshift.tv.

A

That is an actual domain name. Now tells you how old I am I'm.

B

Pretty sure openshift.com is a domain as well openshift.com.

A

Is also a domain and actually openshift.tv sends you to openshift.com streaming, so you know you can take the shortcut if you want to so today, we've got langdon white, it's the level up hour. Langan, you want to say hello, talk about what we're talking about today.

B

Yes, and of course, you know how much I missed you all uh last week when we uh we're doing devconf instead um yeah, so I'm uh langdon white, I am on chris's team, we're another technical marketing manager. uh I've been doing some rail stuff here and there for a few years and now doing more uh actually always been doing containers for a long time now, um and uh thank you jp dade, we should uh do that devconf thing uh pretty regularly. Oh wait! We do it every year um and.

A

Do it every year, but we don't do it virtually every year.

B

That's true, that's true, although I'm really looking forward to how conferences change oh and like, like I'm thinking that there should be a virtual component to every in-person conference going forward.

A

um That's interesting. You mentioned that because that is actually so uh max's school is my son's school is a co-op and my wife is on the board, so they have decided to do a smaller in-person component. That's very isolated and has like the families have to follow a certain set of rules under which I'm under and then there's a hybrid component. So the actual openshift.tv setup went on the road to the school to do the in beginning of year school meeting, all at once, so that everybody could be included.

B

A

It worked, it worked well right.

B

I really wish more tech people were getting involved with supporting like schools in those meetings or whatever.

C

B

The number of times I've, I've, tweeted out and and like showed, uh you know and said something kind of argumentative about like. Why are so many of these meetings, both actually governmental, as well as like school, but like limited in in head count when.

A

B

Could just be doing youtube, live or whatever, or you know, twitch and and broadcasting it to everybody.

C

I'm sure you have.

B

A limited number who maybe who can ask questions because that's a little bit harder, but I mean you know the twitch twitch stream can handle thousands. You know and they're limiting them to 300 people in a zoom call. You know.

A

So it's interesting. You mentioned that because next week we will actually be doing the what's new in openshift46. That's.

B

Right, I usually.

A

Do that call internally only so this time we're actually going to release it to the field and y'all here on openshift tv at the exact same time, I'm.

B

Totally looking forward to that, I think that's good.

A

It's an experiment, we're going to try it we're going to see how it goes. You know we're concerned about how the field feels about it. You know and like everyone should tune in for that, because guess what you will know what's coming in openshift 46 at the same time as everyone else does right right. That's.

B

The most that's the most beautiful.

A

Part yeah well, the engineers know right like and the pm's know and, like everybody knows, the feature set, but you know this will actually be the polished final. Ga kind of here's. What's new kind of thing well,.

B

And what and what made it right, which is.

A

Always the question right, you know it's like any software.

B

A

Exactly so, narendra asked what is fields and when I, and we say the field at uh red hat, we mean like our solutions: architects, our sales folks are people that are out there, helping customers day-to-day right. So that goes from support all the way up to you know, folks, like me, and everyone else right, because there'll be certain people on our team at langham, that'll learn about a feature for the first time. Oh certainly on that call right, because there's so much stuff going on yeah right right.

B

A

Actually opened up an internal meeting to the public yeah, essentially.

B

And just by way of context, uh uh the field is is not limit. It's not a red hat. Isn't it's a very common corporate america uh term? You know for for basically that kind of sales organization, whatever whatever that looks like, um and basically it comes from uh them being in the field which means actually connecting.

A

Hands on keyboards, with customers, kind of thing.

B

Exactly exactly yeah, okay, so let's dive into.

A

What we're talking about today.

B

Well, we we first, we always have to start with slides. You know, because otherwise it wouldn't feel like we.

A

Got it, we've got to get our context and thank you for following person, whose name I can't say so. Thank you for following. I appreciate that I just saw the graphic go off so.

A

All right, oh, let's see slides, I see cool. Oh.

B

You do okay, yeah uh sweet, because you know.

A

You weren't expecting that I was like oh technology.

B

um Although, oh, I shared the window instead of sharing the screen, but.

A

Oh well now you can't do.

B

A

B

That's all right, uh okay, so the level up hour in case you were lost. uh That's that's what this show is. um Hopefully my sound is better today. Last uh from doing the show notes uh for two weeks ago, uh yeah, I did not sound good, so hopefully.

A

It'll sound better today, you're kind of sounding quieter, now, all of a sudden so well.

B

Maybe if I was louder.

A

uh How's, that is, that it better.

B

That's great perfect: there we go all right, it'll, probably auto, adjust in a minute and screw it up yep. uh So we always say: follow us on twitter um and I'm making announcements about this show. uh You know, ask us questions there that your things you might want to see about the show. um You could also find this. Oh yeah, uh I, oh you have don't you have a.

A

I can, I do have a hot key for it. Let me see I yeah my brain.

B

A

Yet this morning, folks, I I apologize. Oh boy, oh you did that. Oh sweet, sweet internet points now folks.

B

Apparently we're doing it.

B

I don't think we should go into them. I think we should just leave it there and we'll just we'll put it up again. I think we should wait for the reminder, because I want that moment so so we'll just we're just going to run with it. I say we're not doing them yet.

A

All right, alexa says: there's no reminder scheduled anyway, so this is going to.

B

Be there is the actual discord link.

A

B

uh All right so today we are going to talk about uh basically a continuation from last week of uh how do we make the pod yaml play like how do we make podman play cube? It's such a weird name uh work because we had trouble with it last time um and as always, the uh uh the show notes are up in the github repo uh which one of these days, I really really should turn into like a proper website, um but you know that's the way.

B

It is uh so check that out, um you know, feel free to leave issues or comments or whatever, if you, if there was anything that you thought we should have, uh there's video highlights there etc, and that's it for that segment. Let's share differently.

A

Okay, so jp dade is doing his thing. uh I love you jp dade, uh so when our windows uh worker knows going to be supported in ocp well, my answer, infosec uh 812 seems like you're in it seems like you're, a red hat employee. Please identify yourself. If you are, um if you're not, uh I can tell you that it is actively being worked on, but it is a multi-vendor thing right, like we have to work with microsoft on this.

A

So it's it takes time right, like moving code within multiple organizations actually takes time um and, as you can imagine, um there's some incentive for you know microsoft to you know, potentially you know there's some word going around that they might be developing their own linux based like hypervisor thing, so it could be that, like they might be spending more engineering time on that, as opposed to helping us get, you know, openshift worker notes, working or whatever the problem may be. You know when mike barrett was on last week jp day.

A

That was a person to ask, so I will go. Ask him.

B

Personally, I think you should make him come on the show again and you can just make the whole show about. When do we get windows? When do we get this.

A

Explaining the whole process of how we get to this.

B

uh Okay, so I should have shared the screen. Unfortunately, it popped such that uh oh boy technology is seriously defeating me today. uh Let's put that down there and then hopefully that'll be less confusing for at least me um okay should we should we get into it.

A

If jp date has more questions jp, you know where to find me.

B

A

Will go find mike barrett, don't email mike barrett directly. I will find him. I will ask him the question.

A

I will get you the answer. I promise right.

B

Right, um which will probably be someday.

A

In the future, yes,.

C

A

What is that famous einstein quote about the future that they always use in civilization? I never worry about the future. It's just a day away or whatever.

B

Oh, I don't know that one.

A

I I would be a time traveler.

B

Or one you know that you get, you know you throw a party for for all the time travelers and if no one shows up you know time travel doesn't exist.

A

Okay, I can go with that.

B

Right, you, don't you don't tell anybody about the party.

A

Right, you just say like.

B

Yeah, okay right and then you announce it after the party is over and then of course time travel doesn't exist. If nobody comes on the flip side, it could just be that you throw bad parties who knows which.

A

Is entirely possible, but my wife's birthday party was dope this weekend. So if okay, I've told people to come to that as a time traveler saying show up to that.

B

All right we're on episode is this: nine good gracious.

A

Sure I thought you had to give her a repo for that.

B

A

uh Here's the quote: narendra found it for me. I never think of the future. It comes soon enough. Thank you, narendev there. You go really appreciate it, because that is the most like. That is the biggest thing right like I get it. People are they're they're dealing with obsolete technologies, sometimes in the windows world, when it comes to containers and and and people are frustrated, and I get it. I know I feel your pain. Trust me. I feel your pain.

A

I have to feel this. I I feel the pain too right, like I have a small data center technically in my house now right like so the the the enhancements that we're working on are there in github as as infosec 12 points out, and I will get you an answer from mike barrett. He is typing right now, um unless he completely ducks me and is like we'll see.

B

uh Sure, let's see so let me I was trying to figure out how to demonstrate this, um but let's do it this way.

B

um My naming convention, I think, is incredibly hard to type, which was probably a mistake on my part. uh Well,.

C

You didn't do that completion yeah, but you can't.

B

Tab complete anything, you know uh all right so.

A

Until you're, getting like season 12.

B

Right um so now we have okay. So let's see what we have already, because I can't necessarily remember what we left. um But so, if you recall, if we add a minus p, it will show us. The name of any pods that are created uh looks like we don't have anything there so far, so we're just gonna uh create our uh pods again or our pot again and oh, my goodness, I need more coffee.

C

B

Run so we do podman run, but we're gonna start adding the minus. Is it minus p? No, I think it's dash dash pod uh tools, pod um and minus d, minus t and then oh, we need data. I wonder if we could. I wonder if we could have it in the scroll back. I bet not yeah.

B

uh Okay, so then we're gonna, say um minus v and we're gonna do backtick pwd data data, colon mount data and then we're going to say minus v, backtick pwd, oh boy,.

A

B

Data keys- I really can't type today.

A

And then jp data, I have your answer already.

B

Well, go ahead because I'm I'm just typing at this point.

A

Yeah, so from mike directly, it looks like we're trying to get something out by the end of the year and the beginning of next year, but we should see uh community versions of the operator and operator hub in the middle of october, so you can start kicking the tires on. It sounds like pretty soon right, like at the very least, you know, get ready for the ga.

B

Release well, that's positive yeah.

A

It's super positive, that's that's more progress than I was expecting right.

C

Right no offense to.

A

Red hat or anything else, but.

C

A

This has been a process. Folks, let me tell you, I've been trying to stay away from it so anytime. I answer questions like am I poking the bear or have we made.

C

B

All right and then we're going to do our kind of data interaction layer here and we're gonna put this other container in the pod all right. So now we have two pods connected together using the volumes from command.

B

Sorry, two containers connected together using volumes from inside of a pod called tools pod, uh which is what we did last time. uh The temptation to say last week is very high, um so now what we can do is we can generate our yaml again.

A

B

A

All with the generating yaml song, I love.

B

You can tell me to shut.

A

Up anytime every day,.

B

I've played that song so many times all.

A

Right, I love the ammo building.

C

B

B

All right, so here's our yaml file um just kind of revisiting um that it's uh you know it just creates a description in cube or kubernetes yemo um and should we say kubernetes or should we say kubernetes.

C

B

Yeah me too, uh it's kind of like soa versus so uh um no it's soa, please, uh okay, so we have our containers described in here. um You know the one container points at the other containers for its volumes and then the volumes are mounted uh from a particular place. That is something to keep in mind because we're going to talk about that in a few minutes. um But now here is the trickeriness.

B

uh Let me just find my links here so what I discovered so okay, so first, what we have to do is. uh Oh. I actually wanted to point out one quick thing, because uh I didn't know you could do this.

A

Oh, what didn't you know? What didn't the great langdon know.

B

There's lots and lots, I don't know um all right so just to confirm we have uh our two directories. uh You know mounted across right and you know I won't bother to touch it, but one of the things we talked about a couple weeks ago was um what.

A

You just want sorry to interrupt accessibility, colors of your font. Is it too small folks, let us know, are people having a problem reading it.

B

A

Like I thought, I thought you had color blindness issues and like verified this, oh.

B

No, actually, I don't.

A

B

I did do some reading uh to try to choose the right thing. I actually prefer uh like a green on black text, um which.

A

B

Yeah awful on screen, I think it's really good for uh for me.

A

For you, yeah yeah yeah, like it's.

B

A

Not great for this yeah.

B

So the background color of the terminal is too light. Well, I'm not sure do we want to fuss with that now I could try fluttering with it. Let's see what it looks like um see, I even have a profile labeled video, um I'm trying to remember how this oh, so this is straight up solarized, uh so.

A

I don't think solarized is an accessible theme.

B

Really, I thought that's the whole point of it was.

A

B

Get dracula color theme.

A

Or dark not dracula, darcula d-a-r-c-u-l-a, uh let's.

B

Terminal color.

A

Is the background color of your terminal is too light is what narendev is complaining about right.

C

Now I'm not complaining.

A

About but pointing out, I'm sorry initiative. I did not mean to say complaining that was totally a mistake on my part. uh It is too light with the text right. So I think if you just darken the.

B

A

B

Let's see if we can do maybe a bit of both is that better? I don't know. Let me make the background a little lighter how's that any better.

C

A

It's well it's kind of shaded and, like you got to turn off the settings for me to actually see it see it.

B

A

That is definitely darker on lighter to me. um It is. It is more stand outish to my to my vision so learn to have. Let us know we'll continue forward and if there's a problem we can move forward. But this this was actually a question I was going to put out on twitter today. What theme do you use when you're live streaming? What font do you use when you're live streaming, because later today I might be terminally on the live stream so yeah? I haven't said that yet because I got behind today.

B

So the research that I did said that you should, generally speaking you straight up black on white right, um the thing that I was I was trying to darken it up a little bit just because otherwise it's really hard on my eyes. um So uh you know just I I think it's very very bright. So that's why it was a bit darker, um but we'll play with this I'll. Try to remember to save this theme.

A

Before I close this window later,.

C

Today, yes,.

B

um But we'll give this a whirl and see how it goes.

C

B

Back to our regularly scheduled programming.

A

Let us know please.

B

Yes um and anyone else who has an opinion, uh so we know that there is our oh I'm inside the pod, okay. So what I was talking about was: um oh I'm inside the container. Now I'm gonna mix up those terms all the time. You know it all right. So one of the things I said a couple weeks ago was uh you got to be careful here, because you don't want to exit out of this container, because then it will turn off the container.

B

However, I recently discovered a nice little feature of it being in a pod, so I accidentally did an exit. So if I do podman psp all you'll see that it was exited and that's no good for my pod, because I want it to be running um so what I discovered is you can do restart.

B

And assuming I did that correctly and look at that, it's back, um which is a lot harder to do with a container. In my experience um I don't know- maybe maybe I just don't do it that much but with uh with a pod, it's a nice little fancy feature. um So what we're actually trying to do is we want to?

B

uh Oh, I already did the ammo so we're going to actually just delete this whole pod um and say pod rm, minus f tools, pod every time I type rm minus f, my fingers get afraid uh because I'm afraid I'm gonna like wipe out my os um and so we're gonna, kill the whole pod and just to confirm it's gone. Yet it's gone um now. We're gonna try to play our yaml file, and so we get an error there and upon some further research.

B

I discovered why that is, um and here is the bug report, which is, uh I think, every engineer's favorite kind of bug, report files relatively in-depth bug about this exact issue. Right.

C

B

Comes back later and says: oh fixed it um and.

A

Don't tell anybody why.

B

A

Thank god, I have no.

B

Idea, whether zav loose is a male or female name. um So basically you can't launch a a container in you know, kind of via the cube like pattern with a tag of latest so.

A

B

If you look in oh actually, let me do it with vi and then we can edit it um so basically and- and we were kind of we were on the right track two weeks ago- to uh discover this problem because we thought it was actually the registry declaration.

B

That was the problem, um but in fact I mean it is a problem with the image.

B

So on a lark, I just removed uh the the tag uh which is kind of interesting, because this will work, but it kind of seems to defeat the whole point. um So so my assumption is that the the goal is to make you be declarative about which exact and we've talked about tags before which exact uh version of the container image that you actually want to consume in this case, so uh not generate play.

B

So now, if we run the exact same thing, uh oh right, but it has another feature that if you try it and it fails, it still creates it enough that you have to destroy it. um But now we can play it and it should just work and we get a nice. uh You know we get an id for the pod and then we get ids for the containers themselves. uh If we say podman psp all we see that it has actually contradi uh created.

B

Sorry, my eyes order um created the containers, as we hoped, so this doesn't work the way I expect uh for, as I said, a couple reasons one um I think anything I generate from a tool should immediately be consumable by a tool.

B

And second, I don't think that the um that the kind of, if you're, removing colon latest like what exactly are you implying like you, should either you should either be saying you you have to give a tag or you don't have to give a tag um and it kind of.

A

You choose right right, it can't really be both so.

B

I spent a while and wrote this long ticket um uh about this problem. um I, as you can see here, I experimented on both uh fedora and on rel, just to make sure it wasn't like they've changed since then, um and uh you know, but it's still the same on fedora 32, which is the latest. You know current release of fedora uh with the latest pod man podman to something or another here right.

A

B

So yeah, so I filed an issue with that um because okay.

A

B

Yeah, uh let's see what the response is um given, how usually fast they are to respond. I'm actually slightly surprised. I didn't already get uh some feedback on this um all right, so that was cool nice, so the next problem, so so did we cover what you proposed. We should cover uh about this situation from two weeks ago.

A

Well, I mean I just want to say like here's, the yaml that you would use in you know a kubernetes pod first and and just do that with podman right like that was my goal, and if we have done that right, I'm good. uh If you had a cluster where you could say: okay, we're gonna, take this spot and put it on the cluster. Now that'd be dope like if you could spin up mini cube.

B

We are going to do something similar.

A

Okay, right now, it works.

B

um Not quite that partially, because what I haven't done, a lot of experimentation with is um basically getting those uh the data bindings or the the volume bindings into that yaml, and I wanted to play around with seeing if podman will do it for me, um but I haven't. I haven't done that yet so we're gonna do kind of a step on the way there, but not that that step. Yet.

B

um So. On that note I have created um so this happens to be running on fedora. It doesn't have to be it's just the one I had lying around right.

A

B

I am running uh crc, which is code ready, containers.

A

Let me grab it.

B

A bunch of stuff for.

A

Actually, you can just get to it by going to our try link sorry.

B

Oh, try don't open shift um so uh basically so code ready containers, a lot of the developer stuff in red hat lan is now prefixed or labeled or whatever, with the single word uh code ready as one one word. uh So that's why, um like the rel uh developer, focused libraries or whatever are called uh is called the code ready repo. Now uh we have code ready containers, we have code ready workspaces. So basically it's kind of like trying to indicate you know: here's a here's, a brand where all the developer focus components are.

A

B

Crc is a running instance of open shift that you can, um you know, kind of just deploy on your own. It doesn't require a license, and you know all that stuff. So I'm just running this. uh For the sake of this conversation.

C

B

And let's just see so.

A

Crc is a way to get your hands on openshift before you actually deploy like a full-blown openshift stack right like.

B

Exactly exactly we.

A

Did and narendra does point out. We did have an awesome stream on crc extension for vs code and it's smooth installation and was mind-blowing, which is right. I will go find that in our archives. Thank you for reminding me nuremdev, because that was a like the the vs code. Openshift connector now will actually just be, like click click crc instance available in your c in your ide. So it's like whoa.

B

I haven't actually tried that I should go.

A

Yeah, like it's really cool dude,.

B

I periodically kind of go and grab the open shift. um You know plugins for vs code and then I use them for a while, and then I do something else and just.

A

Right, like I go off to some other experiment and then.

B

Right, that's exactly where I am.

A

B

So uh one thing that I have done is um crc is normally bound to localhost, so I did some fancy routing so that I can so what's going on here is, I have um you know my local laptop, which is I'm sshinging to a server which then in turn is running two virtual machines? One is this relay based one that I've talked about before and then one is another virtual machine, running crc um and then in order to get the routing so that the crc can be reached from other points on my network, um I.

B

uh Basically, just uh this is gonna get a little bit complicated, but basically, network manager has multiple choices for how not there um just the directory, oh conf, um for how to do dns, one of the non-default.

A

B

Excuse me is using dns mask sorry, that's at the bottom of the screen, but that's less for you. um So what this does is just say: network manager, please use dns mask for any dns related activity.

B

Then I add in some routing by adding in a um conf file here uh ignore the other one I have. I have two copies of crc, one that you can launch with vagrant if you're interested it's uh there's a repo for it, um but this one was a straight install because I wanted to do it with rel um and I'm having trouble with vagrant on rail right now so got some routing, yay uh and so now what that means is. I can do this um and.

A

You know I can go first warning which.

C

A

Of a self-signed shirt but yeah: well, you can do this, but.

B

As a programmer, you're used to that.

A

Yeah you're dealing with self-signed search all the time unless you're really really diligent about using let's encrypt and have some mechanism of doing that. Yeah.

B

Yeah um and you know, maybe we should file a bug about crc having a let's encrypt uh cert. You know.

A

That would oh, that would be a lot of like churn in the let's encrypt world. I don't know if that'd be healthy for that team. I don't.

B

Know, oh that's true. That's true. I don't know.

A

B

So uh by default you get uh two accounts on this uh on this instance right one that is uh the cube admin and then one which is um just this kind of developer account uh point being I just wanted to show you I logged in you know: I have the platform there, um but then what I want to do is um I want a place to store my container so that I can use this yaml with podman elsewhere on my network right.

B

So in order to do that, I need to put those containers in a shared place and we talked about this a bit a few episodes ago, but I wanted to show kind of doing it with openshift, because by default the openshift registry is locked to openshift itself.

B

um You know for security reasons, obviously uh so, but I wanted to kind of go through how you would open it up and then you can um use it uh elsewhere and so what we do- and I really don't care if you see the passwords good luck getting to that machine.

A

B

So you know if it's even around in like three hours, um but the point being is that whenever, whenever you uh you create a new crc instance, it generates passwords for you.

C

B

So that you can access it and you.

A

Gotta have that access to you know like if you're gonna stand up a kubernetes census on your local host. You kind of want to keep admin.

B

Yeah right right exactly um this is better than it used to be, though, because it used to be a non-generated password. It was like.

A

B

A

Right yeah, yeah, yeah.

B

uh So so that's better um all right! So then we need I'm sorry. Just looking at my notes, um ah I knew I had to step out of order. um So what we do is, then we need to essentially set uh some policy statements. So basically um we need to add this registry viewer policy to or the role really right, but as a policy to the developer user. So just you know the user is actually called developer. So that's why that's there? It's not like some class of user or something like that.

B

So uh so we add the registry viewer and then because we want to be able to push to it. We also need to add the registry editor role, and so we do that.

B

But then the next step, which can be a little bit confusing, I think, is that now we need to go find out where, like what is the name of the registry, because it's not going to be the same as like the name of the console or the name of the api right, it's going to be its own address, and so um and the nice at least. I think the nice thing about openshift. Is it does most of its routing, essentially through dns, so you just have to you know, find out what those those names are.

B

So what we do is we switch to the openshift image registry project. Excuse me and then we ask for um the route to that thing right or to the registry, and so that's what this one's doing.

B

You know there's a weird there's, no nice hard return there, unfortunately- and I put this in my notes because we didn't want to see me messing with json bass again like we did a few episodes ago.

B

So if you see here, that's the name like the dns name of our registry.

A

Which is local, which is just on your box, like.

B

Right, it's not the c box, but yeah right, yeah yeah, so I am just going to give that a handle. Let me just make sure that's not like taken or something.

B

Cool okay, so I'm gonna.

A

B

It a name just so I don't have to remember to type it. I.

A

Really perturbed, I can't find this one open shift, connector show because it answers all of our questions. Oh.

B

Well, that makes everything as far as like getting just.

A

uh Open shift up and running or crc open up and running, I mean um nope, that's not it.

B

All right, so we created a an environment variable just called registry, just to make things a little bit easier. So now- um and I may have already done this- but we can take a look um so as we discussed a few episodes ago, if you want to push an image to somewhere else, you need to t. Oh sorry, I'm gonna cough again.

B

You can cough away exactly um you. uh You need to tag it with the like target. Okay. So so we have our simpler tools, but currently it's tagged with localhost, which means it's not going to be uh available or you can't push it into that registry because it doesn't have that name. However, during preparing for the show, I did that, but I'm just going to do it again.

B

Just so, you can see how to do it right, and so you just kind of give it uh what you have and then what you want it to be, but we can cheat now.

B

You would think it would be a nice cheat except I can't type um nice and that should have given us no change at all, uh because we already had it tagged right. um However, what we can or what we need to also do is also tag. Our data container.

B

And now we should see two data containers, here's the local host data container and then here is our registry data container. Now we can um push. Oh, let's see. Actually, who are we? So one of the handy, useful commands is to find out who I am so. I don't actually want to be a cube admin. I want to log in as um the developer account right. So I think it's oc. Who am I minus t?

B

Yes, so now we do oc login see you developer, uh anybody know what the password is or the the flag is. It might be that uh wait.

A

B

So, uh oh actually, sorry it's not oc login.

A

No it'll ask you for the password. I think right so.

C

A

Done right, like you, gotta put in the whole path and everything and then ask you for password.

B

Right so so what so yeah, but I was going down kind of the wrong path, because I don't want to use oc to push it. I want to use podman to push it um into the oc or into the openshift registry right. So I need to do a podman login, except I have to pass it a bunch of weird flags. um First of all, going back to our let's encrypt problem. We want to say uh tls verify uh false, maybe um and then we wanna say minus: u and we're gonna say developer.

B

Then we wanna say I think it's just minus p. I have a a place. I can look. uh Look it up if we need to, because I wrote a lab that does this, um but I don't do it often enough to like remember exactly how to do it. um So who am I oc? Oh my, and we give it a minus t which will actually give us the token uh a token for login rather than a password for login and in order to log into the registry.

B

You have to use the token not a real password just to make things a little bit more confusing.

A

Just to make things more secure.

B

Right right, what did I do wrong.

B

My do I need backticks.

B

A

Advanced bash skills.

B

Are sometimes weak.

A

um You, no, you do not need backticks in there where.

C

A

B

To oh, I need a website. I need an equal on the false. I know that oh.

A

B

Yep and then- and that was- I think, my only error uh if anyone's interested- I am pulling this content, I will throw it in the chat from this lab. I did for one of the red hat summits.

B

um So, theoretically, that'll work, nope.

A

Okay, no okay cool, not going.

C

To work all right here we go.

A

And norenda found our thread or our uh stream on the uh open shift. Connector. Thank you narendev. I was. I was on the path, but I'm trying to like pay.

B

Attention things.

A

At once, yeah yeah.

B

All right, so I finally figured out. I needed parents, not squigglies, um you know so, but as you can see uh again, my login succeeded right. So now I actually have access to that registry, and so we can, let's cheat by cutting cheating. What.

A

B

Actually, we can just do dollar registry.

A

And you know what narendev uh I'm actually going to drop this in my pocket and uh insta paper thing. So I don't forget it because I feel like it would be useful. I will just you know, have at the ready, which means it might turn into a bot command. Even um so yeah.

A

I want to get started super quick with crc dun, dun dun.

B

Oh I'm doing something wrong.

A

Well invalid, it must be of the format project, slash name so.

B

Oh, I need to give a project name.

A

Yeah yeah, like.

B

So let's say do I need to and I need to do it as developer right. So I think so.

A

We'll remember where.

B

Yes, all right and then let's say oc just create right and then do I need to say project or is it just create? I think it's just create.

A

No, it's oc new dash project.

B

B

And then we're gonna say project. um Let's just call it tools.

A

Not empty squad.

A

B

Feel like I've missed the no.

A

Goal nope: that's fine, don't go back.

B

All right, so we got the project yeah I just wanted. I was looking to make sure I didn't get an error um all right. So now we have a namespace to put it in and it should. The thing is, my tag might be wrong. Now.

C

B

All right see, I got ahead of myself and this is what happens.

B

And again, we're not actually kind of doing anything, we're just re-labeling our existing images. We, you know, we only have one copy on disk all that stuff.

B

All right there we go.

B

Waiting patiently for our images to load.

A

Or push okay, I need to butcher me for a second hang on no problem.

B

All right and now is when we need the jeopardy music.

B

And all right, and so now we want to push the other one.

A

B

All right so now we have both those containers. Our container images really are in our registry, so we can now do cool things like. uh Actually, I can't remember what we still have local all right. So, let's remove our tools. Pod.

B

uh How about pod.

B

uh Tools, pod and then what we can also do is now remove our images. Oh those got really long, um so we're gonna, say rm, uh we're just gonna. Do it with the code. I think this should work uh with the like uuid.

B

No, how about rmi.

B

A

By the way, narendra or not, narendra for lead is in youtube, chat, uh saying you need to enable anonymous push. I don't know how old that message was, but yeah.

B

Oh yeah, you could enable anonymous push, obviously that uh just does open it up uh just for everybody right right, so you know do that with a grain of salt. um You know with my crc instance. I probably could, but I kind of wanted to show the the right way of doing it should give it to certain users.

A

Yeah yeah like a handoff way right.

B

Right um all right so now we've gotten rid of our simpler tools and our data container.

B

So what is cool is we can still play? Oh sorry, I need to do a modification, though, um and let's echo dollar registry just to make it in so we can get in the buffer.

B

All right and then.

A

Can you hear the the eye message in the background? Okay, let me yes, I'm sorry.

C

It's my daughter. She.

A

uh She likely has covid and her test just came back negative, but there's a possibility of it being false positive. That was indicated in the letter saying that it was negative, so yeah right um trying to figure out a new site testing site for her to go to, which is just a nightmare. Right now,.

B

um uh Yeah I can, I can see that.

C

B

Oh, I almost forgot our tools because we put it in a namespace.

B

B

That should be enough and we can now pod man play oh cube tools, pod, and this should just work, but it doesn't. Oh, hmm oh, we could probably pass.

B

Put it in the wrong place, probably.

A

A

Well, the good news is my daughter's super excited about school stuff, so she must be feeling a little better.

B

Is she also excited about watching the level of power, because we should get her? We should get her on the show.

A

Oh well, I mean you know, um I will tell her to tune in right now right and let them you know. She won't see the past chat. But if I invite her to the discord she will but like even for her right like the live streaming. Stuff is still like, like she watches stuff on youtube, but like the twitch realm is still like kind of like. Oh there's, a lot of stuff going on over there dad right.

C

Now, yes, you're right.

B

uh Yeah she she needs to get more into gaming. I guess.

A

Well, you know, and it's just like she's she's, going down this ux uh ui design pattern route and it's awesome the work she does. I mean she's, incredibly talented, so why that's.

B

A good point: why don't we have a pattern, fly twitch.

A

Show well yeah: why don't we.

B

A

um Yeah, like narendo, if you're right, yes, we do archive all the live stream chats like and that's for multiple reasons but yeah um dreams owner says twist chat and some channels overwhelms me as well. Yeah.

C

A

Yeah, I don't blame you there at all, um but no we do have uh so we have the developer experience office hours where we talk about the the dev console and the ui and ux behind that and we're just adding ali's ali mobrum's team. The admin console ux ui side that starts hell tomorrow. I think uh yeah, the future of openshift administration with pm and uxd, so ux design. uh Our team is coming on tomorrow at 11 a.m.

A

To talk about the admin console, so we've got the dev console and the admin console of openshift covered. If there's any other ux or design elements you want covered that'd be.

B

Difficult, I was thinking um like one about uh developing user experiences using the same tool chain. We do, for the openshift consoles, for example, which is this uh upstream open source project called patternfly. That's kind of what I was thinking of.

A

Yeah, like that, would be kind of like a great show, I feel like because well they have taken.

B

A

Fly kind of off the shelf and like done stuff with it right and right, it's good.

B

Well and that team does uh does university workshops about um like doing uh you, know, information architecture, ideation, refinement, turning that into projects all that stuff. uh So I think that team would actually be great at doing a twitch show about that. I think so. Maybe we should go hassled. It.

A

Yeah, if you have a connection on that team link me up, please yeah all.

B

Right so back to the regularly scheduled programming it worked, um so you know we we did have a little bit of false start because of that uh self-signed cert problem, so we just need to uh you know, include the tls verify equals false, but, as you can see, it pulled the containers from our registry and then deployed them as a pod.

B

A

And- and this is why this whole show turned into another show last week or.

B

The week before, yeah yeah exactly um and that's basically what I wanted to cover, uh and so we will, uh I think, we're going to step into the openshift side of things. um Maybe next time, yeah.

A

B

There's uh something else that I.

A

B

That I want to cover first.

A

Yeah um we've got seven minutes left. I just wanted to. Let people know that yeah we got some sweet, speed internet points. We got to give out right, like let's hit it again, real quick um and then I wanted to mention that the next show uh we're going over a new tool that is coming out with four six. uh It's called the assisted installer for bare metal um and we might actually employ the assisted installer on my bare metal thing sitting across the house over there. So that could be a very interesting show for anybody.

A

That's interested in tuning in.

B

That does sound like fun all right so, but maybe you should give out. You know we were talking about giving out internet points on other shows. um Oh.

A

Boy, oh, don't get me started.

B

That's the whole.

A

That's the whole legal thing and it's the whole yeah yeah, but yeah like we need to get points points.

B

A

Like to mean something, I think just.

B

C

A

They mean a lot to us right, but they need to have like some intrinsic value of some sort right like.

B

A

Beyond you have the points right right right, like swag points, are great right.

B

A

How do I use my swag points right? Like that's my thing right, like great we've, got all these points or ways to correct points. There are ways to just blah, so conference points yeah, that's a good idea right, like right, you've kind.

C

Of used confidence, yeah, yeah.

A

Confidence points right, like you know, you've been on the show enough right, like you feel like you can, you know, go run some pods and kubernetes clusters on your own right, like.

C

A

Right indication right, like you know, maybe we could make these points so popular length and that people put them on their resume.

B

Right that I mean, I will say, there's a lot of crazy plans. I had for these points uh so we'll we'll see how much we can get to um ocp.

A

Features points right like the more points you have, the more feedback you get.

B

How about the more the more value of your vote on.

A

Right right, yeah.

B

That seems like a terrible idea, but it'd be hilarious. um All right- and here we go, uh as I indicated a few episodes ago,.

A

Wow, there's there's a point spread happening here holy.

B

Yes, um and so someone has uh has revealed their dark horse uh status uh and that is noah friction which cracks me up.

C

B

Then, and but narendra you, that is, that is nothing to sneeze at uh 900 points and then.

C

B

Is still holding strong at 400 points, um you know we we uh we're starting to get a little bit of spread. We need to uh need to keep doing those points we gotta get.

A

B

Up there, uh I will throw the uh details in the chat again just in case anybody missed it um and there it is. Thank.

A

You um noah friction. What is that from noah.

B

uh I actually I haven't seen it before. I thought it was just a play on words, um so yeah. So there's our internet points for this episode and uh you know, go collect some more because they're the best um and I think they're, hilarious and.

A

You know noah's on discord.

B

There we go, uh and I actually remember looking at the points and giving those the points for joining the discord to noah nice or I I saw that it was there. um I had done it previously um reminder if you have joined the discord and I haven't uh dm'd you the code to get the points for joining the discord. uh Just remind me dm me send me an email uh hit me up on twitter, whatever you like, and I will.

A

No meaning to the name for noaa friction by the way discord is blocked at jp day's work. Sorry buddy.

B

A

Not blocked on your phone.

B

Right, you can always.

A

You can always well unless you're in a facility where you gotta drop your phone off at the door, but yeah.

B

um Or do like consultants do and just to set yourself up and sell proxy and and route all your traffic through that.

C

B

Not I'm not saying I'm.

A

Not saying break.

B

Your your uh company's.

A

No, no, no, absolutely not. I've never set up an ssh tunnel to get.

B

Traffic out to the world, no, never specifically remember actually one of the consulting companies. I worked for um moved their vpn tunnel to 443 so that you could uh connect to the vpn.

C

From behind firewalls.

B

C

B

Admit who that was, though, and.

A

Jpd just said no way.

B

uh There's probably a container for that.

A

Yep, no, I know there's open vpn containers there's uh uh what is it? The outline is the um vpn tool of choice that I use it was designed by google's jigsaw group for journalists. You know it's ease of use, kind of thing and it up but like it's super easy to use and it's packaged as an app image which is technically a container so yeah.

B

Right right, although not an oci-compliant one, it's the best.

A

No, which, fortunately, I think they need to work on that, but yeah, that's just.

B

Yeah like if, if we could get some coalescing of you know app image, snaps.

A

B

Want to call it yeah um yeah, but oh flat, packs um and then what's the other there's another one too right. um I don't know.

A

What snaps and brew brew install that whole thing: yeah.

B

Well, that yeah, that's that's a kind of quasi.

A

Chocolatey yeah yeah, although microsoft.

B

Actually shipped one now so chocolatey is probably going.

A

I would they're going away. They've got a lot of penetration. Oh.

B

Yeah yeah uh or like some sort of merger or whatever I'm just saying, is that now that there's a an official one.

A

B

There will be a lot more support for package management on windows right.

A

New jacket nuggets, whatever they call it yeah. I think it's.

B

Nuget actually.

A

Nuget yeah yeah.

B

um So and then.

A

Sorry we are over time so yeah.

B

Yeah and it's all now, just rambling uh so collect your internet points. uh Let us know how we're doing give us some feedback. I really um I want to know where we want to go with this show. So uh you know that would be really good, we'll try to make sure we bring that up at the beginning of the episode next time and sorry, jp dave had a statement, but.

A

You guys were talking about self-signed certificates. I have been fighting with doing that here for the internal search we need. I should just put one up and do it in my r d lab.

C

B

A

Yeah sometimes you gotta just show the people that it's not broken.

B

Right all right thanks all right.

A

Thank you, everybody and tune in for the next show, which is starting soon exactly.

B

A

Y'all see you next.

C

C