시작하기
초록
1장. 링크 복사링크가 클립보드에 복사되었습니다!
1.1. 사전 요구 사항 링크 복사링크가 클립보드에 복사되었습니다!
1.2. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
- 참고
절차
절차
- 참고
$ aws sts get-caller-identity출력 예
<aws_account_id> arn:aws:iam::<aws_account_id>:user/<username> <aws_user_id>
$ tar xvf rosa-linux.tar.gz$ sudo mv rosa /usr/local/bin/rosa$ rosa version출력 예
1.2.8$ rosa login출력 예
To login to your Red Hat account, get an offline access token at https://console.redhat.com/openshift/token/rosa ? Copy the token and paste it here:참고$ rosa whoami출력 예
AWS Account ID: <aws_account_number> AWS Default Region: us-east-1 AWS ARN: arn:aws:iam::<aws_account_number>:user/<aws_user_name> OCM API: https://api.openshift.com OCM Account ID: <red_hat_account_id> OCM Account Name: Your Name OCM Account Username: you@domain.com OCM Account Email: you@domain.com OCM Organization ID: <org_id> OCM Organization Name: Your organization OCM Organization External ID: <external_org_id>
1.3. 링크 복사링크가 클립보드에 복사되었습니다!
| 구성 요소 | |
|---|---|
|
| |
|
| |
| 암호화 | |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
절차
- 참고참고
$ rosa create ocm-role $ rosa create user-role참고
절차
$ rosa create account-roles
절차
- 참고
- 다음을 클릭합니다.
검증
- 참고
1.4. 링크 복사링크가 클립보드에 복사되었습니다!
절차
$ rosa create admin --cluster=<cluster_name>1 출력 예
W: It is recommended to add an identity provider to login to this cluster. See 'rosa create idp --help' for more information. I: Admin account has been added to cluster '<cluster_name>'. I: Please securely store this generated password. If you lose this password you can delete and recreate the cluster admin user. I: To login, run the following command: oc login https://api.example-cluster.wxyz.p1.openshiftapps.com:6443 --username cluster-admin --password d7Rca-Ba4jy-YeXhs-WU42J I: It may take up to a minute for the account to become active.참고
추가 리소스
1.5. 링크 복사링크가 클립보드에 복사되었습니다!
절차
$ rosa create idp --cluster=<cluster_name> --interactive1 출력 예
I: Interactive mode enabled. Any optional fields can be left empty and a default will be selected. ? Type of identity provider: github ? Identity provider name: github-1 ? Restrict to members of: organizations ? GitHub organizations: <github_org_name>1 ? To use GitHub as an identity provider, you must first register the application: - Open the following URL: https://github.com/organizations/<github_org_name>/settings/applications/new?oauth_application%5Bcallback_url%5D=https%3A%2F%2Foauth-openshift.apps.<cluster_name>/<random_string>.p1.openshiftapps.com%2Foauth2callback%2Fgithub-1&oauth_application%5Bname%5D=<cluster_name>&oauth_application%5Burl%5D=https%3A%2F%2Fconsole-openshift-console.apps.<cluster_name>/<random_string>.p1.openshiftapps.com - Click on 'Register application' ...- 참고
... ? Client ID: <github_client_id>1 ? Client Secret: [? for help] <github_client_secret>2 ? GitHub Enterprise Hostname (optional): ? Mapping method: claim3 I: Configuring IDP for cluster '<cluster_name>' I: Identity Provider 'github-1' has been created. It will take up to 1 minute for this configuration to be enabled. To add cluster administrators, see 'rosa grant user --help'. To login into the console, open https://console-openshift-console.apps.<cluster_name>.<random_string>.p1.openshiftapps.com and click on github-1.참고$ rosa list idps --cluster=<cluster_name>출력 예
NAME TYPE AUTH URL github-1 GitHub https://oauth-openshift.apps.<cluster_name>.<random_string>.p1.openshiftapps.com/oauth2callback/github-1
추가 리소스
절차
절차
$ rosa grant user cluster-admin --user=<idp_user_name> --cluster=<cluster_name>1 출력 예
I: Granted role 'cluster-admins' to user '<idp_user_name>' on cluster '<cluster_name>'$ rosa list users --cluster=<cluster_name>출력 예
ID GROUPS <idp_user_name> cluster-admins
$ rosa grant user dedicated-admin --user=<idp_user_name> --cluster=<cluster_name>출력 예
I: Granted role 'dedicated-admins' to user '<idp_user_name>' on cluster '<cluster_name>'$ rosa list users --cluster=<cluster_name>출력 예
ID GROUPS <idp_user_name> dedicated-admins
1.6. 링크 복사링크가 클립보드에 복사되었습니다!
절차
$ rosa describe cluster -c <cluster_name> | grep Console1 출력 예
Console URL: https://console-openshift-console.apps.example-cluster.wxyz.p1.openshiftapps.com
1.7. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
- 참고
- 생성을 클릭하여 애플리케이션을 배포합니다.
https://nodejs-<project>.<cluster_name>.<hash>.<region>.openshiftapps.com/Welcome to your Node.js application on OpenShift
1.8. 링크 복사링크가 클립보드에 복사되었습니다!
절차
$ rosa revoke user cluster-admin --user=<idp_user_name> --cluster=<cluster_name>1 출력 예
? Are you sure you want to revoke role cluster-admins from user <idp_user_name> in cluster <cluster_name>? Yes I: Revoked role 'cluster-admins' from user '<idp_user_name>' on cluster '<cluster_name>'$ rosa list users --cluster=<cluster_name>출력 예
W: There are no users configured for cluster '<cluster_name>'
$ rosa revoke user dedicated-admin --user=<idp_user_name> --cluster=<cluster_name>출력 예
? Are you sure you want to revoke role dedicated-admins from user <idp_user_name> in cluster <cluster_name>? Yes I: Revoked role 'dedicated-admins' from user '<idp_user_name>' on cluster '<cluster_name>'$ rosa list users --cluster=<cluster_name>출력 예
W: There are no users configured for cluster '<cluster_name>'
절차
1.9. 링크 복사링크가 클립보드에 복사되었습니다!
1.10. 다음 단계 링크 복사링크가 클립보드에 복사되었습니다!
2장. 링크 복사링크가 클립보드에 복사되었습니다!
2.1. 사전 요구 사항 링크 복사링크가 클립보드에 복사되었습니다!
2.2. 링크 복사링크가 클립보드에 복사되었습니다!
2.2.1. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
- 참고
절차
2.2.2. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
- 참고
절차
- 참고
$ aws sts get-caller-identity출력 예
<aws_account_id> arn:aws:iam::<aws_account_id>:user/<username> <aws_user_id>
$ tar xvf rosa-linux.tar.gz$ sudo mv rosa /usr/local/bin/rosa$ rosa version출력 예
1.2.8# rosa completion bash > /etc/bash_completion.d/rosa참고$ rosa login출력 예
To login to your Red Hat account, get an offline access token at https://console.redhat.com/openshift/token/rosa ? Copy the token and paste it here:참고$ rosa whoami출력 예
AWS Account ID: <aws_account_number> AWS Default Region: us-east-1 AWS ARN: arn:aws:iam::<aws_account_number>:user/<aws_user_name> OCM API: https://api.openshift.com OCM Account ID: <red_hat_account_id> OCM Account Name: Your Name OCM Account Username: you@domain.com OCM Account Email: you@domain.com OCM Organization ID: <org_id> OCM Organization Name: Your organization OCM Organization External ID: <external_org_id>
$ rosa download openshift-client$ tar xvf openshift-client-linux.tar.gz$ sudo mv oc /usr/local/bin/oc$ rosa verify openshift-client출력 예
I: Verifying whether OpenShift command-line tool is available... I: Current OpenShift Client Version: 4.9.12
2.3. 링크 복사링크가 클립보드에 복사되었습니다!
추가 리소스
2.4. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
$ rosa create admin --cluster=<cluster_name>1 출력 예
W: It is recommended to add an identity provider to login to this cluster. See 'rosa create idp --help' for more information. I: Admin account has been added to cluster '<cluster_name>'. I: Please securely store this generated password. If you lose this password you can delete and recreate the cluster admin user. I: To login, run the following command: oc login https://api.example-cluster.wxyz.p1.openshiftapps.com:6443 --username cluster-admin --password d7Rca-Ba4jy-YeXhs-WU42J I: It may take up to a minute for the account to become active.참고$ oc login <api_url> --username cluster-admin --password <cluster_admin_password>1 $ oc whoami출력 예
cluster-admin
추가 리소스
2.5. 링크 복사링크가 클립보드에 복사되었습니다!
2.5.1. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
$ rosa create idp --cluster=<cluster_name> --interactive1 출력 예
I: Interactive mode enabled. Any optional fields can be left empty and a default will be selected. ? Type of identity provider: github ? Identity provider name: github-1 ? Restrict to members of: organizations ? GitHub organizations: <github_org_name>1 ? To use GitHub as an identity provider, you must first register the application: - Open the following URL: https://github.com/organizations/<github_org_name>/settings/applications/new?oauth_application%5Bcallback_url%5D=https%3A%2F%2Foauth-openshift.apps.<cluster_name>/<random_string>.p1.openshiftapps.com%2Foauth2callback%2Fgithub-1&oauth_application%5Bname%5D=<cluster_name>&oauth_application%5Burl%5D=https%3A%2F%2Fconsole-openshift-console.apps.<cluster_name>/<random_string>.p1.openshiftapps.com - Click on 'Register application' ...- 참고
... ? Client ID: <github_client_id>1 ? Client Secret: [? for help] <github_client_secret>2 ? GitHub Enterprise Hostname (optional): ? Mapping method: claim3 I: Configuring IDP for cluster '<cluster_name>' I: Identity Provider 'github-1' has been created. It will take up to 1 minute for this configuration to be enabled. To add cluster administrators, see 'rosa grant user --help'. To login into the console, open https://console-openshift-console.apps.<cluster_name>.<random_string>.p1.openshiftapps.com and click on github-1.참고$ rosa list idps --cluster=<cluster_name>출력 예
NAME TYPE AUTH URL github-1 GitHub https://oauth-openshift.apps.<cluster_name>.<random_string>.p1.openshiftapps.com/oauth2callback/github-1
추가 리소스
2.5.2. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
2.5.3. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
$ rosa grant user cluster-admin --user=<idp_user_name> --cluster=<cluster_name>1 출력 예
I: Granted role 'cluster-admins' to user '<idp_user_name>' on cluster '<cluster_name>'$ rosa list users --cluster=<cluster_name>출력 예
ID GROUPS <idp_user_name> cluster-admins
$ rosa grant user dedicated-admin --user=<idp_user_name> --cluster=<cluster_name>출력 예
I: Granted role 'dedicated-admins' to user '<idp_user_name>' on cluster '<cluster_name>'$ rosa list users --cluster=<cluster_name>출력 예
ID GROUPS <idp_user_name> dedicated-admins
2.6. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
$ rosa describe cluster -c <cluster_name> | grep Console1 출력 예
Console URL: https://console-openshift-console.apps.example-cluster.wxyz.p1.openshiftapps.com
2.7. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
- 참고
- 생성을 클릭하여 애플리케이션을 배포합니다.
https://nodejs-<project>.<cluster_name>.<hash>.<region>.openshiftapps.com/Welcome to your Node.js application on OpenShift
2.8. 링크 복사링크가 클립보드에 복사되었습니다!
2.8.1. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
$ rosa revoke user cluster-admin --user=<idp_user_name> --cluster=<cluster_name>1 출력 예
? Are you sure you want to revoke role cluster-admins from user <idp_user_name> in cluster <cluster_name>? Yes I: Revoked role 'cluster-admins' from user '<idp_user_name>' on cluster '<cluster_name>'$ rosa list users --cluster=<cluster_name>출력 예
W: There are no users configured for cluster '<cluster_name>'
$ rosa revoke user dedicated-admin --user=<idp_user_name> --cluster=<cluster_name>출력 예
? Are you sure you want to revoke role dedicated-admins from user <idp_user_name> in cluster <cluster_name>? Yes I: Revoked role 'dedicated-admins' from user '<idp_user_name>' on cluster '<cluster_name>'$ rosa list users --cluster=<cluster_name>출력 예
W: There are no users configured for cluster '<cluster_name>'
2.8.2. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
절차
2.9. 링크 복사링크가 클립보드에 복사되었습니다!
사전 요구 사항
2.10. 다음 단계 링크 복사링크가 클립보드에 복사되었습니다!
3장. 링크 복사링크가 클립보드에 복사되었습니다!
3.1. 링크 복사링크가 클립보드에 복사되었습니다!