title: “Openshift prometheus targets”
date: 2020-02-14T18:02:43
slug: openshift-prometheus-targets

Create Rolebinding for prometheus for scraping:

apiVersion: authorization.openshift.io/v1
kind: Role
metadata:
 name: prometheus-k8s
 namespace: emqx-openshift
rules:
- apiGroups:
 - ""
 attributeRestrictions: null
 resources:
 - endpoints
 - nodes
 - pods
 - services
 verbs:
 - get
 - list
 - watch
---
apiVersion: authorization.openshift.io/v1
groupNames: null
kind: RoleBinding
metadata:
 name: prometheus-k8s
 namespace: emqx-openshift
roleRef:
 name: prometheus-k8s
 namespace: emqx-openshift
subjects:
- kind: ServiceAccount
 name: prometheus-k8s
 namespace: openshift-monitoring
userNames:
- system:serviceaccount:openshift-monitoring:prometheus-k8s

Create a Service Monitor

# Please edit the object below. Lines beginning with a '#' will be ignored,
# and an empty file will abort the edit. If an error occurs while saving this file will be
# reopened with the relevant failures.
#
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
 labels:
 k8s-app: emqx-metrics
 name: emqx-metrics
 namespace: openshift-monitoring
spec:
 endpoints:
 - interval: 30s
 port: metrics
 scheme: http
 targetPort: 9091
 jobLabel: k8s-app
 namespaceSelector:
 matchNames:
 - emqx-openshift
 selector:
 matchLabels:
 k8s-app: emqx-metrics

Create a metrics Service

apiVersion: v1
kind: Service
metadata:
 creationTimestamp: "2020-02-14T16:38:26Z"
 labels:
 k8s-app: emqx-metrics
 name: emqx
 namespace: emqx-openshift
 resourceVersion: "810916"
 selfLink: /api/v1/namespaces/emqx-openshift/services/emqx
 uid: 6c740138-4f48-11ea-8568-fa163e8ef4af
spec:
 clusterIP: None
 ports:
 - name: metrics
 port: 9091
 protocol: TCP
 targetPort: 9091
 selector:
 deploymentconfig: emqx-openshift
 sessionAffinity: None
 type: ClusterIP

title: “okd hosts file”
date: 2020-02-13T14:03:08
slug: okd-hosts-file

# Create an OSEv3 group that contains the masters, nodes, and etcd groups
[OSEv3:children]
masters
nodes
etcd

# Set variables common for all OSEv3 hosts
[OSEv3:vars]
# SSH user, this user should allow ssh based auth without requiring a password
ansible\_ssh\_user=root

# If ansible\_ssh\_user is not root, ansible\_become must be set to true
#ansible\_become=true

openshift\_deployment\_type=origin
openshift\_disable\_check=disk\_availability,docker\_storage,memory\_availability,docker\_image\_availability

# uncomment the following to enable htpasswd authentication; defaults to AllowAllPasswordIdentityProvider
openshift\_master\_identity\_providers=[{'name': 'htpasswd\_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider'}]
openshift\_master\_htpasswd\_users={'admin': 'admin:$apr1$AysC7Y3Y$LN.UA3Pn1qobSrsxJ7qHN0'}
openshift\_master\_htpasswd\_file='/etc/origin/master/htpasswd'
openshift\_docker\_options="--signature-verification=false --insecure-registry 172.30.0.0/16 --log-driver=journald --registry-mirror=https://registry.docker-cn.com"

openshift\_public\_hostname=registry.os.asanger.eu
openshift\_master\_default\_subdomain=apps.os.asanger.eu
openshift\_master\_api\_port=8443
openshift\_master\_console\_port=8443

openshift\_hosted\_infra\_selector=""
openshift\_logging\_install\_logging=false
openshift\_logging\_es\_nodeselector={"node-role.kubernetes.io/infra":"true"}
openshift\_logging\_kibana\_nodeselector={"node-role.kubernetes.io/infra":"true"}
openshift\_logging\_curator\_nodeselector={"node-role.kubernetes.io/infra":"true"}

# host group for masters
[masters]
registry.os.asanger.eu openshift\_public\_hostname=registry.os.asanger.eu

# host group for etcd
[etcd]
registry.os.asanger.eu openshift\_public\_ip=0.0.0.0

# host group for nodes, includes region info
[nodes]
registry.os.asanger.eu openshift\_node\_group\_name='node-config-all-in-one'

title: “Enterprise inventory file”
date: 2020-02-13T09:21:08
slug: enterprise-inventory-file

[OSEv3:children]
masters
nodes
etcd

# Set variables common for all OSEv3 hosts
[OSEv3:vars]
oreg\_auth\_user=tomskiffb
oreg\_auth\_password=v3NtPkdo7nfijV7SoZhf
openshift\_web\_console\_install=true
osm\_use\_cockpit=true
openshift\_logging\_install\_logging=true

openshift\_disable\_check=disk\_availability,docker\_storage,memory\_availability,docker\_image\_availability

# SSH user, this user should allow ssh based auth without requiring a password
ansible\_ssh\_user=root

# If ansible\_ssh\_user is not root, ansible\_become must be set to true
#ansible\_become=true

openshift\_deployment\_type=openshift-enterprise
#deployment\_subtype=registry
openshift\_hosted\_infra\_selector=""
openshift\_logging\_es\_nodeselector={"node-role.kubernetes.io/infra":"true"}
openshift\_logging\_kibana\_nodeselector={"node-role.kubernetes.io/infra":"true"}
openshift\_logging\_curator\_nodeselector={"node-role.kubernetes.io/infra":"true"}

# uncomment the following to enable htpasswd authentication; defaults to DenyAllPasswordIdentityProvider
openshift\_master\_identity\_providers=[{'name': 'htpasswd\_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider'}]
openshift\_master\_htpasswd\_users={'admin': 'admin:$apr1$AysC7Y3Y$LN.UA3Pn1qobSrsxJ7qHN0'}
openshift\_master\_htpasswd\_file='/etc/origin/master/htpasswd'

openshift\_public\_hostname=registry.os.asanger.eu
openshift\_master\_default\_subdomain=apps.os.asanger.eu
openshift\_master\_api\_port=8443
openshift\_master\_console\_port=8443

# host group for masters
[masters]
registry.os.asanger.eu

# host group for etcd
[etcd]
registry.os.asanger.eu

# host group for nodes, includes region info
[nodes]
registry.os.asanger.eu openshift\_node\_group\_name='node-config-all-in-one'

title: “Delete the Router”
date: 2020-02-11T10:45:22
slug: delete-the-router

oc delete all -l router=router