title: “OC Commands”
date: 2020-10-19T14:55:06
slug: os-commands
Nodes auflisten
oc get nodes
Top der Nodes
oc adm top node
Describe a Node
oc describe node master01
Zeige letzte 3 Logeinträge des Pods
oc logs --tail 3 -n openshift-image-registry cluster-image-registry-operator-564bd5dd8f-s46bz
Zeige letzte 3 Logeinträge des nodes master01 der journalunit kubelet
oc adm node-logs --tail 3 -u kubelet master01
Einen Debug Pod auf master01 starten
oc debug node/master01
\* chroot /host
\* crictl ps --name openvswitch
In ein Projekt wechseln
oc project execute-troubleshoot
OC Status anzeigen (API URL, Projekt)
oc status
Events des aktuellen Namespace anzeigen
oc get events
Ein Docker IMAGE inspizieren
skopeo inspect docker://registry.access.redhat.com/rhscl/postgresql-96-rhel7:1
Ein Deployment editieren
oc edit deployment/psql
Clusteroperatoren und Status anzeigen
oc get clusteroperators
Important oc set commands:
oc set env Update environment variables on a pod template
oc set image Update image of a pod template
oc set resources Update resource requests/limits on objects with pod templates
oc set selector Set the selector on a resource
oc set serviceaccount Update ServiceAccount of a resource
oc set data Update the data within a config map or secret
Start a debug Pod based on a Deoployment
oc debug -t deployment/grafana -n nn-capmgt --image busybox
Create Secrets (different Types)
oc create secret docker-registry my-secret --docker-server=DOCKER\_REGISTRY\_SERVER --docker-username=DOCKER\_USER
oc create secret generic my-secret --from-literal=key1=supersecret --from-literal=key2=topsecret
oc create secret generic my-secret --from-file=ssh-privatekey=path/to/id\_rsa --from-literal=passphrase=topsecret
oc create secret tls tls-secret --cert=path/to/tls.cert --key=path/to/tls.key
Ingress https and http
http: oc expose svc my-service --hostname my-service.apps.ocp4.example.com
edge: oc create route edge --cert=cert.pem --key=key.pem --service=nginx --hostname=tls.apps.ocp4-thasanger.paas.pop.noris.de
passthrough: oc create route passthrough name-https --service https-svc --port 8443 --hostname todo-https.apps.ocp4.example.com
Extract secret to File
oc extract secrets/router-ca --keys tls.crt -n openshift-ingress-operator
Create a deployment with env vars
oc new-app --name wordpress \> --docker-image docker.io/library/wordpress:5.3.0 \> -e WORDPRESS\_DB\_HOST=mysql -e WORDPRESS\_DB\_USER=root \> -e WORDPRESS\_DB\_NAME=wordpress
