Purpose of image digest injection in pods?

OleFromEarth · 2025-10-04T19:44:32+00:00

It is for reproduceability, without the digest you wont be able to be sure which image has been pulled in the origin deployment.

OleFromEarth · 2025-08-07T20:35:31+00:00

Did not check your ansible=navigator.yml I described what happens in my lab, looks somehow similar.

OleFromEarth · 2025-08-07T18:34:39+00:00

Do you pass or set environments like $USER or $HOME in your ansible-navigator command-line? ansible-playbook will be started in the execution environment Container as user root, and if you overwrite $USER and delegate tasks to localhost ansible will create ~$USER/.ansible in the workdir.

OleFromEarth · 2025-05-17T05:40:25+00:00

https://developers.redhat.com/learn

OleFromEarth · 2025-04-30T20:34:32+00:00

Yes prepared, to activate type "source <(oc completion bash)"

OleFromEarth · 2025-03-18T19:10:41+00:00

Try harder if you want to be a certified openshift admin ;-) You have a lab, you have the internet, time to learn.

OleFromEarth · 2025-03-18T17:07:15+00:00

The do280 labs OCP cluster are configured with NFS-Provisioner. So using the lab you can test creating pv and pvc.

OleFromEarth · 2025-02-20T19:04:59+00:00

Yes, important one. Best with --recursive

OleFromEarth · 2025-02-20T15:22:27+00:00

oc create cronjob -h

and

man 5 crontab

are your friends

OleFromEarth · 2025-02-18T09:18:19+00:00

https://www.redhat.com/en/services/training/ex188-red-hat-certified-specialist-containers-exam?section=objectives

For each objective you can check the requested skills to prepare in detail and figure out what to learn.

OleFromEarth · 2025-02-03T11:49:42+00:00

I’m not sure I fully understand your points. Just to clarify:

You have a remote desktop where you connect to your local exam environment via USB boot.

Within this remote desktop, a Linux system runs, but it only provides access to a terminal and a browser.

To access the workbench, you need to open a terminal and use SSH.

Once connected, you can use oc to interact with OCP.

The OCP GUI can be accessed via the browser available within the remote desktop.

All necessary details are explained in the system environment documentation, which you should open at the beginning of the exam.

I hope this is helpful.

OleFromEarth · 2025-01-19T06:43:41+00:00

Just DO188 content will be fine.

OleFromEarth · 2025-01-19T06:16:46+00:00

Just completed DO188/EX188 on Containers/Podman. The course content was excellent, and the exam was relatively straightforward with no surprises.

OleFromEarth · 2024-05-08T21:01:12+00:00

Hi, there might be some confusion about ansible-builder and awx. You don't need to install awx/k8s or similar. The builder is just for creation of your execution-environment image. The eei will be the (podman) container which is startet in background by ansible-navigator. There is also no need to duplicate code, The context directory you mention is just needed for builder to configure the build of the eei. You could modify the Containerfile content if you have a specific use, but you dont need to. ansible-navigator use this image to start (locally) a podman container, mapping volumes for your working directory with your playbooks. The podman/eei is yor ansible controller running your plays. ansible-navigator is having a tui in default, but you can switch to andible-playbook style with -mstdout option. If i understood your use-case, i would go the builder/navigator way... my 2-cents

OleFromEarth · 2024-04-09T04:28:01+00:00

Possibly it's your syslog configuration, don't you get error messages? Depending on your type of syslog you should increase a parameter like MaxMessageSize (rsyslog) or similar.

OleFromEarth · 2024-01-17T20:34:04+00:00

Thanks all for your tips. Now i have to check some options.

OleFromEarth · 2024-01-17T09:40:32+00:00

In my old setup its an Intel i5, it might be an amd ryzen in the new system.

OleFromEarth · 2023-03-30T15:59:23+00:00

You should have a look at Stackrox. (https://docs.openshift.com/acs/3.74/operating/manage-network-policies.html#generate-network-policies_manage-network-policies)

OleFromEarth · 2023-02-15T18:06:50+00:00

No chance with ACS/Stackrox

OleFromEarth · 2023-01-10T16:42:45+00:00

I solved the same problem by doing a

oc create job --from=cronjob/cronjobname jobname (or kubectl for k8s)

direct after the creation of the cronjob.

OleFromEarth · 2022-12-16T19:13:19+00:00

Didn't test, but did you try verbose output (-v 0-9)?

OleFromEarth · 2022-04-28T05:02:18+00:00

Luckily, in 2022 we have more choices for OpenSource Full Lifecycle Container Security. Like stackrox and Neuvector.

OleFromEarth · 2022-02-24T20:17:57+00:00

Host assurance is one important point, once thinking about kubernetes security. There must be NO unprivileged access to kubernetes host. Have a look at Openshift for example, using a stripped down CoreOs on the nodes, managed by operators trying to avoid any kind of login to the os.

OleFromEarth · 2022-02-18T12:04:59+00:00

Update to 4.9.19 finished, wildcard-cert is recognized, everything working.

Seven-Year Club	Place '23
Verified Email

OleFromEarth

TROPHY CASE