Kubernetes

This article discusses how to set up and configure a Keycloak instance to use OpenShift for authentication via Identity Brokering. This allows for Single Sign On between the OpenShift cluster and the Keycloak instance. The Keycloak instance will be running on the OpenShift cluster and leverage a ServiceAccount OAuth Client. Provisioning Keycloak to your OpenShift namespace Use the below command to create the Keycloak resources in your OpenShift project. oc process -f https://raw.githubusercontent.com/david-martin/keycloak-with-openshift-auth-provider/0.0.2/keycloak-with-openshift-auth-provider.yaml | oc create -f - IMPORTANT: This...

Recently I've received a question from a customer who would like to restrict user permission in OpenShift Container Platform in order to be compliant with his company's security policies. OpenShift has rich and fine-grained RBAC capabilities out of the box, which gives you the possibility to setup exactly who can do actions (verbs in OpenShift word) on every kind of resource. Before we begin to dive deep into this topic, I have provided links to some resources I think will...

Container images usually come with pre-defined tools or services with minimal or limited possibilities of further configuration. This brought us into a way of thinking of how to provide images that contain reasonable default settings but are, at the same time, easy to extend. And to make it more fun, this would be possible to achieve both on a single Linux host and in an orchestrated OpenShift environment. Source-to-image (S2I) has been introduced three years ago to allow developers to...

In this blog entry, I want to introduce a "different" way to work with OpenShift. In the typical way to deploy a Pod to OpenShift, we have available a set of very useful objects we have build/image configurations. This takes the pain from us by hiding the details about image construction but, sometimes we just want to see some code running in the cloud. Or we want to see if our service/application is able to interact with nearby services or...

Today we're going to create a .NET Core 2.0 Web Application using the JBoss Developer Studio and the aCute plugin (C# application development). We'll deploy our application onto an OpenShift instance and continue to modify it while viewing the changes almost instantly. Although the initial setup will be quite involved, it will only need to be done once. You might imagine that the normal workflow for this would be: Make local changes. Commit + push them to version control. Either...

Jenkinsfiles have only become a part of Jenkins since version 2 but they have quickly become the de-facto standard for building continuous delivery pipelines with Jenkins. Jenkinsfile allows defining pipelines as code using a groovy DSL syntax and checking it into source version control which allows you to track, review, audit and manage the lifecycle of changes to the continuous delivery pipelines the same way that you manage the source code of your application. Although the groovy DSL syntax which...

The 2017 edition of the legendary Devoxx conference is over, and as always, it has been a fantastic week. Hosted in Antwerp, Belgium, and sold out months in advance, it's one of the top events of the Java community. Five days fully packed with workshops, regular conference sessions, BOFs, ignite sessions and even quickie talks during the lunch breaks - there was something for everyone. The super-comfortable cinema seats at the Devoxx venue are legendary, but also if you couldn't...

With traditional virtualized infrastructure or Infrastructure-as-a-Service, it is common practice to regularly refresh instances back to a known good state. This provides confidence that the application workloads have the correct runtime configuration, no deltas are being introduced, and they can be relied upon to provide value for the business. In these cases, you might use tools such as Ansible or Jenkins, but when we move our application workloads to containers running on OpenShift Container Platform, we can use native tools...

Before I start talking about IT and how you can manage, control, and optimize your Hybrid IT infrastructure, I propose that we reflect directly on your living room, where you usually watch TV, movies, listen to music, play video games, etc. Even if you do not enjoy this type of entertainment, you know that for each of these devices, it is common to use a remote control allowing you to switch between them, manage them, and control all of your...

JBoss Tools 4.5.1 and Red Hat JBoss Developer Studio 11.1 for Eclipse Oxygen.1A are here waiting for you. Check it out! Installation JBoss Developer Studio comes with everything pre-bundled in its installer. Simply download it from our JBoss Products page and run it like this: java -jar jboss-devstudio-.jar JBoss Tools or Bring-Your-Own-Eclipse (BYOE) JBoss Developer Studio requires a bit more: This release requires at least Eclipse 4.7 (Oxygen) but we recommend using the latest Eclipse 4.7.1A Oxygen JEE Bundle since...

Welcome back, here we will continue with the second part of my post, where we will work with Red Hat Cloudforms. If you remember, in our first post we spoke about Red Hat OpenStack Platform 11 (RHOSP). In addition to the blog article, at the end of this article is also a demo video I created to show to our customers/partners how they can build a fully automated software data center. Hands-on - Part 2 Well, now we need something...

In this blog, I would like to show you how you can create your fully software-defined data center with two amazing Red Hat products: Red Hat OpenStack Platform and Red Hat CloudForms . Because of the length of this article, I have broken this down into two parts. As you probably know, every organization needs to evolve itself becoming a Tech Company, leveraging its own Digital Transformation, embracing or enhancing existing processes, evolving people's mindset, people’s soft/hard skills and of...

No matter how many steps there are, it's always a journey and this story is no exception. It seems like a long trek, but in just 10 steps, you can find your cloud happiness. There are always ups and downs in any journey as you traverse the path you've chosen. This is no truer for a walk to the top of a ridgeline as much as for your digital journey into the cloud. As an application developer, or as an...

We know that containers in Openshift or Kubernetes don't persist data. Every time we start an application, it is started in a new container with an immutable Docker image. Hence, any persisted data in the file systems is lost when the container stops. Hence if an application or container is rebuilt or restarted than we can't view previous logs or if we are using containers with mysql or any other database then schema, tables, and all data will be lost...

The release of OpenShift Container Platform 3.6 brings support for vsphere cloud provider. This provides vsphere VMDK dynamic provisioning for persistent volumes for container workloads. The storage presented to vsphere virtual machines as a VMDK has ReadWriteOnce access mode. In the OCP 3.6 on vSphere reference architecture, much of this process is automated and can be implemented easily. Virtual Machine Disks or VMDKs exists in virtual machines. Configuring the OCP cluster for vsphere cloud provider support requires: Master Node Configuration...

I've started an interesting exploration on the integration of Microsoft Windows Containers and Linux Containers in an OCP Environment. This allows a true bi-modal IT technical implementation by combining the strength of both platforms into one cluster. So, I start this off, with the deployment of an OpenShift Cluster on Azure, using the 3.6 reference architecture. After this is run, I used the Azure Portal to add a Windows Server 2016 Node to the cluster. So if you look closely...

Visual Studio provides a graphical remote debugging ASP.NET Core app with Docker Tools for Windows. Since Visual Studio supports SSH protocol, you can remote debug ASP.NET Core process running on the Linux host. It used to be if you install and setup SSH server on docker container, you can remote debug with Visual Studio. However, it's strongly not recommended due to security reasons. Now I'll explain to you how to remote debug your ASP.NET Core on OpenShift with Visual Studio...

It was a beautiful and lazy Saturday morning in Bengaluru, on 7 October 2017. Kubernetes arrived here and decided it was a great day to meet up with some of its friends here and spend some quality time with them. But alas! Kubernetes could not speak, at least not yet. It certainly could grow and shrink, at moments notice no less, but words, no, those failed it. It needed some help, from some of its most trusted friends, those it...

Creating, associating, and using a JBoss Data Grid (with persistence) with a MicroProfile-based microservice In this blog post, I will cover how to create, populate, and associate a JBoss Data Grid (with persistence using a Postgresql database) to your MicroProfile-based microservice. I will also cover how to modify the microservice so that it makes use of JBoss Data Grid (JDG). This is the continuation of the “A MicroProfile-based microservice on OpenShift Container Platform - Part 2; Creating, associating and using...

Over at the Openshift and Che land, we deal with YAML files for deploying our applications regularly. Unfortunately, the tooling to support editing of these files was not up to our expectations. As we are also tooling developers, we have decided to take matters at hand and implement a language server for kubernetes syntax. An effort which mostly Josh Pinkney and I have worked on for the last few months. As we have progressed with our implementation, we have realized...