[{"content":"Listing du répertoire quarty phil@quarty ~/quarty $ ls -al total 28 drwxr-xr-x. 14 phil phil 4096 27 juin 19:29 . drwxr-xr-x. 3 root root 20 7 sept. 2025 .. drwxr-xr-x. 2 phil phil 24 7 sept. 2025 archetypes drwxr-xr-x. 4 phil phil 51 26 juin 22:28 assets drwxr-xr-x. 3 phil phil 22 26 juin 22:09 config drwxr-xr-x. 4 phil phil 48 26 juin 21:59 content drwxr-xr-x. 2 phil phil 6 7 sept. 2025 data ","date":"2026-06-27T18:00:00+02:00","image":"https://quarty.phthom.net/posts/test-markdown/cover_hu_d5637ff444e23e41.jpg","permalink":"https://quarty.phthom.net/posts/test-markdown/","title":"Test Markdown"},{"content":"OpenShift Main Commands Introdcution This document is a long list of OpenShift commands grouped togather into chapters. I got this list of commands very useful when I started some years ago with OpenShift. I didn\u0026rsquo;t put a lot of comments but some of these commands are self explanatory.\nTroubleshooting Links:\nnodes \u0026gt; working-with-nodes https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html/nodes/working-with-nodes nodes \u0026gt; working-with-pods https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html/nodes/working-with-pods oc get nodes Results\nNAME STATUS ROLES AGE VERSION rhcert5.nca.ihost.com Ready master,worker 129d v1.14.6-152-g117ba1f oc adm top nodes NAME CPU(cores) CPU% MEMORY(bytes) MEMORY% rhcert5.nca.ihost.com 1556m 10% 8247Mi 26% oc describe node mynode Name: rhcert5.nca.ihost.com Roles: master,worker Labels: beta.kubernetes.io/arch=amd64 beta.kubernetes.io/os=linux kubernetes.io/arch=amd64 kubernetes.io/hostname=rhcert5.nca.ihost.com kubernetes.io/os=linux node-role.kubernetes.io/master= node-role.kubernetes.io/worker= node.openshift.io/os_id=rhcos tier=silver Annotations: machineconfiguration.openshift.io/currentConfig: rendered-master-6979578433f9fcbdf38a9d260678ea01 machineconfiguration.openshift.io/desiredConfig: rendered-master-6979578433f9fcbdf38a9d260678ea01 machineconfiguration.openshift.io/reason: machineconfiguration.openshift.io/state: Done volumes.kubernetes.io/controller-managed-attach-detach: true CreationTimestamp: Mon, 08 Feb 2021 15:04:23 +0100 Taints: \u0026lt;none\u0026gt; Unschedulable: false Lease: HolderIdentity: rhcert5.nca.ihost.com AcquireTime: \u0026lt;unset\u0026gt; RenewTime: Fri, 18 Jun 2021 09:31:45 +0200 Allocated resources: (Total limits may be over 100 percent, i.e., overcommitted.) Resource Requests Limits -------- -------- ------ cpu 4160m (26%) 1280m (8%) memory 9834Mi (31%) 787Mi (2%) ephemeral-storage 0 (0%) 0 (0%) hugepages-2Mi 0 (0%) 0 (0%) Events: \u0026lt;none\u0026gt; export kubeconfig=mypath oc login url -u kubeadmin -p password oc login -u admin -p password oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.2.36 True False 129d Cluster version is 4.2.36 oc describe clusterversion Name: version Namespace: Labels: \u0026lt;none\u0026gt; Annotations: \u0026lt;none\u0026gt; API Version: config.openshift.io/v1 Kind: ClusterVersion Metadata: Creation Timestamp: 2021-02-08T14:04:10Z Generation: 2 Resource Version: 42590025 Self Link: /apis/config.openshift.io/v1/clusterversions/version UID: 841e3378-6a16-11eb-898f-005056b57e23 Spec: Channel: stable-4.2 Cluster ID: 3fb0dac2-de58-46bd-ac81-f829c6c5fecb Overrides: Group: apps/v1 Kind: Deployment Name: etcd-quorum-guard Namespace: openshift-machine-config-operator Unmanaged: true Upstream: https://api.openshift.com/api/upgrades_info/v1/graph oc get clusteroperators NAME VERSION AVAILABLE PROGRESSING DEGRADED SINCE authentication 4.2.36 True False False 129d cloud-credential 4.2.36 True False False 129d cluster-autoscaler 4.2.36 True False False 129d console 4.2.36 True False False 129d dns 4.2.36 True False False 76d image-registry 4.2.36 True False False 129d ingress 4.2.36 True False False 129d insights 4.2.36 True False False 129d kube-apiserver 4.2.36 True False False 129d kube-controller-manager 4.2.36 True False False 129d kube-scheduler 4.2.36 True False False 129d machine-api 4.2.36 True False False 129d machine-config 4.2.36 True False False 129d marketplace 4.2.36 True False False 129d monitoring 4.2.36 True False False 4d4h network 4.2.36 True False False 129d node-tuning 4.2.36 True False False 5d5h openshift-apiserver 4.2.36 True False False 4d4h openshift-controller-manager 4.2.36 True False False 9d openshift-samples 4.2.36 True False False 129d operator-lifecycle-manager 4.2.36 True False False 129d operator-lifecycle-manager-catalog 4.2.36 True False False 129d operator-lifecycle-manager-packageserver 4.2.36 True False False 7d10h service-ca 4.2.36 True False False 129d service-catalog-apiserver 4.2.36 True False False 129d service-catalog-controller-manager 4.2.36 True False False 129d storage 4.2.36 True False False 129d oc adm node-logs -u crio mynode Data from the specified boot (-1) is not available: No such boot ID in journal -- Logs begin at Wed 2021-06-16 02:55:46 UTC, end at Fri 2021-06-18 07:40:12 UTC. -- Jun 16 07:08:53 rhcert5.nca.ihost.com crio[2950]: 2021-06-16T07:08:53Z [error] no netns: failed to Statfs \u0026#34;/proc/2327812/ns/net\u0026#34;: no such file or directory Jun 16 07:08:53 rhcert5.nca.ihost.com crio[2950]: 2021-06-16T07:08:53Z [error] cannot set \u0026#34;openshift-sdn\u0026#34; ifname to \u0026#34;eth0\u0026#34;: no netns: failed to Statfs \u0026#34;/proc/2327812/ns/net\u0026#34;: no such file or directory Jun 16 07:08:53 rhcert5.nca.ihost.com crio[2950]: 2021-06-16T07:08:53Z [verbose] Del: openshift-marketplace:redhat-operators-8f8dd5db6-g87dh:openshift-sdn:eth0 {\u0026#34;cniVersion\u0026#34;:\u0026#34;0.3.1\u0026#34;,\u0026#34;name\u0026#34;:\u0026#34;openshift-sdn\u0026#34;,\u0026#34;type\u0026#34;:\u0026#34;openshift-sdn\u0026#34;} oc adm node-logs -u kubelet mynode Jun 16 05:35:11 rhcert5.nca.ihost.com hyperkube[3036]: I0616 05:35:11.403249 3036 kubelet_pods.go:1346] Generating status for \u0026#34;network-operator-7fd8bbd68c-pbn9s_openshift-network-operator(9171e09e-6a16-11eb-898f-005056b57e23)\u0026#34; Jun 16 05:35:11 rhcert5.nca.ihost.com hyperkube[3036]: I0616 05:35:11.403568 3036 status_manager.go:382] Ignoring same status for pod \u0026#34;insights-operator-5f69749bfc-txfgr_openshift-insights(943a7270-6a16-11eb-898f-005056b57e23)\u0026#34;, status: {Phase:Running Conditions:[{Type:Initialized Status:True LastProbeTime:0001-01-01 00:00:00 +0000 UTC LastTransitionTime:2021-02-08 14:06:04 +0000 UTC Reason: Message:} {Type:Ready Status:True LastProbeTime:0001-01-01 00:00:00 +0000 UTC LastTransitionTime:2021-02-08 14:06:28 +0000 UTC Reason: Message:} {Type:ContainersReady Status:True LastProbeTime:0001-01-01 00:00:00 +0000 UTC LastTransitionTime:2021-02-08 14:06:28 +0000 UTC Reason: Message:} {Type:PodScheduled Status:True LastProbeTime:0001-01-01 00:00:00 +0000 UTC LastTransitionTime:2021-02-08 14:06:03 +0000 UTC Reason: Message:}] Message: Reason: NominatedNodeName: HostIP:192.168.63.155 PodIP:10.128.0.6 StartTime:2021-02-08 14:06:04 +0000 UTC InitContainerStatuses:[] ContainerStatuses:[{Name:operator State:{Waiting:nil Running:\u0026amp;ContainerStateRunning{StartedAt:2021-02-08 14:06:28 +0000 UTC,} Terminated:nil} LastTerminationState:{Waiting:nil Running:nil Terminated:nil} Ready:true RestartCount:0 Image:quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:433c5549a50eea48629df55db5c5072621e8aaeb079f5122f1b3e075c83580cc ImageID:quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:433c5549a50eea48629df55db5c5072621e8aaeb079f5122f1b3e075c83580cc ContainerID:cri-o://6ae95505455827a1331819cda6d7e7ffcd751f5a3d7f8e6d6b174aff00809b18}] QOSClass:Burstable} oc debug node/mynode Starting pod/rhcert5ncaihostcom-debug ... To use host binaries, run `chroot /host` chroot host Pod IP: 192.168.63.155 If you don\u0026#39;t see a command prompt, try pressing enter. sh-4.4# chroot host sh-4.4# sh-4.4# sh-4.4# systemctl is-active kubelet active sh-4.4# crictl ps CONTAINER ID IMAGE CREATED STATE NAME ATTEMPT POD ID 34c43bc7263a5 registry.redhat.io/rhel8/support-tools@sha256:d8bf8afb4a8b8293134f63a8254b1a5236489d70ccf2c63c350186a23e439180 30 seconds ago Running container-00 0 5898eb2c04383 c65f9b33cb0ea 245559d091f4f789e173a0866022df0c22e47d413d6ef3ad3892fa2007213e82 4 hours ago Running certified-operators 0 a1f8d9f382ea4 6d63b00934404 4d05c0b0932ebfddb2bd358e0b3fb708ba4d53d72adf9556f26d566ba4ad6423 oc logs mypod -c mycontainer ---\u0026gt; Running application from Python script (app.py) ... * Serving Flask app \u0026#34;app\u0026#34; (lazy loading) * Environment: production WARNING: Do not use the development server in a production environment. Use a production WSGI server instead. * Debug mode: off * Running on http://0.0.0.0:8080/ (Press CTRL+C to quit) oc debug deploy/mydeploy --as-root Starting pod/loadtest-debug ... Pod IP: 10.128.0.25 If you don\u0026#39;t see a command prompt, try pressing enter. (app-root)sh-4.2$ (app-root)sh-4.2$ (app-root)sh-4.2$ ps PID TTY TIME CMD 1 pts/0 00:00:00 sh 24 pts/0 00:00:00 ps oc rsh mypod (app-root)sh-4.2$ ps -efa UID PID PPID C STIME TTY TIME CMD 1000620+ 1 0 0 Jun17 ? 00:00:21 python app.py 1000620+ 34 0 0 07:55 pts/0 00:00:00 /bin/sh 1000620+ 59 34 0 07:55 pts/0 00:00:00 ps -efa oc cp myfile mypod:mypath oc port-forward mypod localport:remoteport oc get pods --log-level 6 oc whoami oc whoami -t oc adm top nodes -l node-role.kubernetes.io/master= NAME CPU(cores) CPU% MEMORY(bytes) MEMORY% rhcert5.nca.ihost.com 1416m 9% 8301Mi 26% oc logs --tail 5 -n myspace mypod -c mycontainer * Environment: production WARNING: Do not use the development server in a production environment. Use a production WSGI server instead. * Debug mode: off * Running on http://0.0.0.0:8080/ (Press CTRL+C to quit) oc debug node/mynode systemctl status kubelet systemctl status cri-o crictl ps --name openvswitch oc new-project myproject oc project myproject oc status oc get events LAST SEEN TYPE REASON OBJECT MESSAGE 25m Normal Scheduled pod/loadtest-debug Successfully assigned schedule-review/loadtest-debug to rhcert5.nca.ihost.com 25m Normal Pulled pod/loadtest-debug Container image \u0026#34;quay.io/redhattraining/loadtest:v1.0\u0026#34; already present on machine 25m Normal Created pod/loadtest-debug Created container loadtest 25m Normal Started pod/loadtest-debug Started container loadtest 24m Normal Killing pod/loadtest-debug Stopping container loadtest Find an image in a registry\nskopeo inspect docker://registry.access.redhat.com/... yum install nano export EDITOR=nano oc edit deploy/mydeploy Identity Providers Links:\nauthentication \u0026gt; configuring-identity-providers https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html/authentication/configuring-identity-providers Examples: htpasswd, keystone, OpenLDAP, GitHub, activeDirectory \u0026hellip;\nAuthentication with X509 certificate in a auth directory\nexport KUBECONFIG=/home/user/auth/kubeconfig oc get nodes Authentication with a virtual user\noc login -u kubeadmin -p shdU_trbi_6ucX_edbu_aqop oc delete secret kubeadmin -n kube-system Get the OAuth custom resource\noc get -o yaml oauth cluster \u0026gt; oauth.yaml apiVersion: config.openshift.io/v1 kind: OAuth metadata: annotations: release.openshift.io/create-only: \u0026#34;true\u0026#34; creationTimestamp: \u0026#34;2021-02-08T14:05:03Z\u0026#34; generation: 2 name: cluster resourceVersion: \u0026#34;40404270\u0026#34; selfLink: /apis/config.openshift.io/v1/oauths/cluster uid: a3d27f98-6a16-11eb-898f-005056b57e23 spec: identityProviders: - htpasswd: fileData: name: htp-secret mappingMethod: claim name: myusers type: HTPasswd Locally define/modify/delete htpasswd file\nyum install htpasswd -y htpasswd -c -B -b htpasswd newuser redhat123 htpasswd -b htpasswd existinguser redhat1234 htpasswd -D htpasswd existinguser Define the htpasswd secret\noc create secret generic htp-secret --from-file htpasswd=/home/user/htpasswd -n openshift-config Listing the secret:\noc extract secret/htp-secret -n openshift-config --to - \u0026gt; temp cat temp htpasswd -D temp manager oc delete user manager oc delete identity manager After Changing the htpasswd file, you must update the secret\noc create secret generic htp-secret --from-file htpasswd=/path/to/your/file --dry-run -o yaml | oc replace -n openshift-config -f - Associate cluster admin privileges to a new user:\noc adm policy add-cluster-role-to-user cluster-admin newuser Listing users, identities, \u0026hellip;\noc get users oc get identity oc edit oauth oc delete user --all oc delete identity -all RBAC (Role Based Access Control) Links\nauthentication \u0026gt; using-rbac https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html/authentication/using-rbac Resources (pods, service \u0026hellip;) \u0026lt;\u0026mdash; Role (get, list, delete \u0026hellip;) \u0026lt;\u0026mdash; Binding \u0026mdash;\u0026gt; Entity (user, group sa)\nRoles: Cluster roles or Local roles\noc adm policy who-can delete user Roles:\nadmin basic-user cluster-admin cluster-status edit self-provisioner view oc get clusterrolebinding -o wide | grep -E \u0026#39;NAME|self-provisioner\u0026#39; NAME AGE self-provisioners 129d oc describe clusterrolebindings self-provisioners Name: self-provisioners Labels: \u0026lt;none\u0026gt; Annotations: rbac.authorization.kubernetes.io/autoupdate: true Role: Kind: ClusterRole Name: self-provisioner Subjects: Kind Name Namespace ---- ---- --------- Group system:authenticated:oauth Remove self-provisioner cluster role from group system:authenticated:oauth\noc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth oc policy add-role-to-user admin myuser oc adm groups new mygroup oc admn groups add-users mygroup myuser oc get groups oc policy add-role-to-group edit mygroup oc policy add-role-to-group view mygroup oc new-app --name httpd httpd:2.4 Secrets Links\nNode \u0026gt; nodes-pods-secrets https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html/nodes/working-with-pods#nodes-pods-secrets-about_nodes-pods-secrets Create a secret from literals\noc create secret generic secret_name --from-literal key1=secret1 --from-literal key2=secret2 Create secret from file to sa\noc secrets add --for mount serviceaccount/serviceaccount-name secret/secret_name Expose a secret in a POD\nenv: - name: MYSQL_ROOT_PASSWORD valueFrom: secretKeyRef: name: demo-secret key: root_password or with oc command\noc set env dc/demo --from=secret/demo-secret --prefix MYPREF Create a new-app deploymentConfig\noc new-app --name myapp --docker-image registry.access.redhat.com/rhscl/mysql-57-rhel7:5.7-47 List all pods for a label with the watch option:\noc get pods -l app=myapp -w Security Context Constaints Links\nAuthentication \u0026gt; Managing-pod-security-policies https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html-single/authentication/index#managing-pod-security-policies List all SCC\noc get scc NAME AGE anyuid 129d hostaccess 129d hostmount-anyuid 129d hostnetwork 129d node-exporter 129d nonroot 129d privileged 129d restricted 129d Describe a specific SCC\noc describe scc anyuid Name: anyuid Priority: 10 Access: Users: \u0026lt;none\u0026gt; Groups: system:cluster-admins Settings: Allow Privileged: false Allow Privilege Escalation: true Default Add Capabilities: \u0026lt;none\u0026gt; Required Drop Capabilities: MKNOD Allowed Capabilities: \u0026lt;none\u0026gt; Allowed Seccomp Profiles: \u0026lt;none\u0026gt; Allowed Volume Types: configMap,downwardAPI,emptyDir,persistentVolumeClaim,projected,secret Allowed Flexvolumes: \u0026lt;all\u0026gt; Allowed Unsafe Sysctls: \u0026lt;none\u0026gt; Forbidden Sysctls: \u0026lt;none\u0026gt; Allow Host Network: false Allow Host Ports: false Allow Host PID: false Allow Host IPC: false Read Only Root Filesystem: false Run As User Strategy: RunAsAny UID: \u0026lt;none\u0026gt; UID Range Min: \u0026lt;none\u0026gt; UID Range Max: \u0026lt;none\u0026gt; SELinux Context Strategy: MustRunAs User: \u0026lt;none\u0026gt; Role: \u0026lt;none\u0026gt; Type: \u0026lt;none\u0026gt; Level: \u0026lt;none\u0026gt; FSGroup Strategy: RunAsAny Ranges: \u0026lt;none\u0026gt; Supplemental Groups Strategy: RunAsAny Ranges: \u0026lt;none\u0026gt; Create a Sarvice Account (sa)\noc create sa saname Associate a SCC to a SA:\noc adm policy add-scc-to-user myscc -z saname Assign SA to a POD\noc set serviceaccount deploymentconfig mydc saname oc set sa deploy mydeploy saname Look at the SCC associated to a pod\noc get pod podname -o yaml | oc adm policy scc-subject-review -f - Services Links\nNetworking \u0026gt; Configuring Networking Policy https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html-single/networking/index#configuring-networkpolicy oc get svc NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE loadtest ClusterIP 172.30.148.181 \u0026lt;none\u0026gt; 80/TCP 28h DNS Operator\noc describe dns.operator/default Cluster Network Operator\noc get Network.config.openshift.io cluster -o yaml apiVersion: config.openshift.io/v1 kind: Network metadata: creationTimestamp: \u0026#34;2021-02-08T14:04:09Z\u0026#34; generation: 2 name: cluster resourceVersion: \u0026#34;1449\u0026#34; selfLink: /apis/config.openshift.io/v1/networks/cluster uid: 8385395b-6a16-11eb-898f-005056b57e23 spec: clusterNetwork: - cidr: 10.128.0.0/14 hostPrefix: 23 externalIP: policy: {} networkType: OpenShiftSDN serviceNetwork: - 172.30.0.0/16 status: clusterNetwork: - cidr: 10.128.0.0/14 hostPrefix: 23 clusterNetworkMTU: 1450 networkType: OpenShiftSDN serviceNetwork: - 172.30.0.0/16 Retreive IP addresses:\noc get service/frontend -o jsonpath=\u0026#34;{.spec.clusterIP}{\u0026#39;\\n\u0026#39;}\u0026#34; Debuging\noc debug -t deployment/mysql --image registry.access.redhat.com/ubi8/ubi:8.0 Routes Links\n####Networking \u0026gt; Configuring Routes\nhttps://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html-single/networking/index#configuring-routes HTTP, HTTPS, SNI, TLSwith SNI\nSecure Routes :\nedge pass-through re-encryption Insecure Routes\noc expose service api-frontend --hostname api.apps.acme.com oc create secret tls todo-certs --cert=certs/training.crt --key=certs/training.key Securing Applications at the edge\noc create route edge myroute --service myservice --hostname --api.apps.acme.com --key api.key --cert api.crt oc create route passthrough todo-https --service todo-https --port 8443 --hostname todo-https.domain.com Anaysing the network trafic\nip a | grep 172.25.250.9 sudo tcpdump -i ens3 -A -n port 80 | grep js oc extract secrets/router-ca --keys tls.crt -n openshift-ingress-operator curl -I -v --cacert tls.crt https://todo-https.com Etapes pour la gestion des certificats:\nopenssl genrsa -out training.key 2048 openssl req -new -subj \u0026#34;/C=US/ST=North Carolina/L=Raleigh/O=Red Hat/CN=todo https.com\u0026#34; -key training.key -out training.csr openssl x509 -req -in training.csr -passin file:passphrase.txt -CA training-CA.pem -CAkey training-CA.key -CAcreateserial -out training.crt -days 1825 -sha256 -extfile training.ext curl -vvI --cacert certs/training-CA.pem https://todo-https.${RHT_OCP4_WILDCARD_DOMAIN} POD SCheduling Links\nNodes \u0026gt; Placement https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html-single/nodes/index#nodes-pods-node-selectors oc get node mypod --show-labels NAME STATUS ROLES AGE VERSION LABELS rhcert5.nca.ihost.com Ready master,worker 129d v1.14.6-152-g117ba1f beta.kubernetes.io/arch=amd64,beta.kubernetes.io/os=linux,kubernetes.io/arch=amd64,kubernetes.io/hostname=rhcert5.nca.ihost.com,kubernetes.io/os=linux,node-role.kubernetes.io/master=,node-role.kubernetes.io/worker=,node.openshift.io/os_id=rhcos,tier=silver oc get node -l env=prod Labelling nodes\noc label node mynode env=dev --overwrite oc label node mynode env- Node List\noc get node mynode --show-labels oc get node -L failure-domain.beta.kubernetes.io/region Controlling POD placement with Node Selector\ntemplate: metadata: creationTimestamp: null labels: app: myapp spec: nodeSelector: env: dev containers: - image: quay.io/redhattraining/scaling:v1.0 Configuring a Node Selector for a Project creation\noc adm new-project demo --node-selector \u0026#34;tier=1\u0026#34; or after project creation\noc annotate namespace demo openshift.io/node-selector=\u0026#34;tier=2\u0026#34; --overwrite Resource Usage and limits Links\nApplications \u0026gt; Limits Requests = minimum resources (cpu or memory) to run a POD on a node\nLimits = maximum limit to run a pod in a node\nspec: containers: - image: quay.io/redhattraining/hello-world-nginx:v1.0 name: hello-world-nginx resources: requests: cpu: \u0026#34;10m\u0026#34; memory: 20Mi limits: cpu: \u0026#34;80m\u0026#34; memory: 100Mi or\noc set resources deploy mydeploy --requests cpu=10m,memory=20Mi --limits cpu=80m,memory=100Mi Resource list for a node\noc describe node mynode Statistics for all nodes\noc adm top nodes -l myworkernode oc adm top pods Quotas Links\nApplications \u0026gt; Quotas https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html-single/applications/index#quotas Resource Quota pods Total number of pods replicationcontrollers Total number of replication controllers services Total number of services secrets Total number of secrets persistentvolumeclaims Total number of persistent volume claims Resource Quota cpu (requests.cpu) Total CPU use across all containers memory (requests.memory) Total memory use across all containers storage (requests.storage) Total storage requests by containers across all persistent volume claims Resource Quota for the scope for a project\noc create quota dev-quota --hard services=10,cpu=1300,memory=1.5Gi oc describe quota dev-quota oc delete resourcequota QUOTA Cluster Quota for all projects owned by myuser\noc create clusterquota user-qa --project-annotation-selector openshift.io/requester=myuser --hard pods=12,secrets=20 Cluster Quota for all projects for a specific label (environment=qa)\noc create clusterquota env-qa --project-label-selector environment=qa --hard pods=10,services=5 Delete a cluster quota\noc delete clusterquota QUOTA Limit Ranges Limits for a single container or a pod\nTo understand the difference between a limit range and a resource quota, consider that a limit range defines valid ranges and default values for a single pod, and a resource quota defines only top values for the sum of all pods in a project. A cluster administrator concerned about resource usage in an OpenShift cluster usually defines both limits and quotas for a project.\nLimite Range for a container or a pod, an image, or a PVC.\nType Resource Name Description Container cpu Minimum and maximum CPU allowed and default CPU set per container memory Minimum and maximum memory allowed and default memory set per container Pod cpu Minimum and maximum CPU allowed across all containers in a pod memory Minimum and maximum memory allowed across all containers in a pod Image storage Maximum size of an image that can be pushed to the internal registry PVC storage Minimum and maximum capacity of the volume that can be requested by one claim Scaling the Application Links\nApplications \u0026gt; Autoscale Deployment \u0026gt; Replicas \u0026gt; template \u0026gt; Containers oc create deploy\nDeploymentConfig \u0026gt; Replicas \u0026gt; Template \u0026gt; Selector oc new-app\nManual\noc scale --replicas 3 deploy/myname oc scale --replicas 3 dc/myname Automatic\noc autoscale dc/myname --min 1 --max 10 --cpu-percent 80 oc autoscale deploy/myname --min 1 --max 10 --cpu-percent 80 List all autoscalers\noc get hpa oc delete hpa myname ","date":"2026-06-26T12:58:00Z","image":"https://quarty.phthom.net/posts/commandes-openshift/cover_hu_df64fd4d2009f83e.png","permalink":"https://quarty.phthom.net/posts/commandes-openshift/","title":"Commandes Openshift"},{"content":"NEWS KUBERNETES Le projet Kubernetes maintient des branches de versions pour les trois versions mineures les plus récentes (1.34, 1.33, 1.32). Kubernetes 1.19 et plus récent reçoivent environ 1 an de support de correctifs. Kubernetes 1.18 et plus ancien ont reçu environ 9 mois de support de correctifs.\nLes versions de Kubernetes sont exprimées sous la forme x.y.z, où x est la version majeure, y est la version mineure et z est la version du correctif, selon la terminologie de Gestion sémantique de version.\n","date":"2025-09-10T00:00:00Z","image":"https://quarty.phthom.net/posts/news-about-k8s/cover_hu_4aecb9b463ca1c76.jpg","permalink":"https://quarty.phthom.net/posts/news-about-k8s/","title":"Kubernetes Version 34"},{"content":"News Découvrez la toute dernière génération d’iPhone avec l’iPhone 17 Pro, l’iPhone 17 et le nouvel iPhone Air. Explorez les nouveaux AirPods Pro 3 dotés de la meilleure Réduction active du bruit intra-auriculaire au monde, et la nouvelle gamme Apple Watch, qui fournit des données de santé plus complètes que jamais.\n","date":"2025-09-09T00:00:00Z","image":"https://quarty.phthom.net/posts/apple-news-in-september-2025/cover_hu_961024150ee0dc47.jpg","permalink":"https://quarty.phthom.net/posts/apple-news-in-september-2025/","title":"Apple 2025 News"},{"content":"OpenShift est un service de plate-forme en tant que service de la société Red Hat qui permet de déployer des projets dans des containers. Pour ce faire, OpenShift utilise les technologies Docker et Kubernetes.\nLe logiciel OKD est libre, qui est son projet amont (anciennement OpenShift Origin). Une version appelée \u0026ldquo;Red Hat OpenShift Container Platform\u0026rdquo; est proposée pour l\u0026rsquo;hébergement en site propre ou en cloud computing[3].\nOpenShift supporte également des applications web, qui elles-mêmes sont supportées par Red Hat Enterprise Linux.\n","date":"2025-09-08T00:00:00Z","image":"https://quarty.phthom.net/posts/openshift-new-version/cover_hu_4aecb9b463ca1c76.jpg","permalink":"https://quarty.phthom.net/posts/openshift-new-version/","title":"Openshift Version 4"},{"content":"OpenShift est un service de plate-forme en tant que service de la société Red Hat qui permet de déployer des projets dans des containers. Pour ce faire, OpenShift utilise les technologies Docker et Kubernetes.\nLe logiciel OKD est libre, qui est son projet amont (anciennement OpenShift Origin). Une version appelée \u0026ldquo;Red Hat OpenShift Container Platform\u0026rdquo; est proposée pour l\u0026rsquo;hébergement en site propre ou en cloud computing[3].\nOpenShift supporte également des applications web, qui elles-mêmes sont supportées par Red Hat Enterprise Linux.\n","date":"2025-09-07T00:00:00Z","image":"https://quarty.phthom.net/posts/openshift/cover_hu_2341f8bf01f13376.jpg","permalink":"https://quarty.phthom.net/posts/openshift/","title":"Openshift"},{"content":"OpenShift est un service de plate-forme en tant que service de la société Red Hat qui permet de déployer des projets dans des containers. Pour ce faire, OpenShift utilise les technologies Docker et Kubernetes.\nLe logiciel OKD est libre, qui est son projet amont (anciennement OpenShift Origin). Une version appelée \u0026ldquo;Red Hat OpenShift Container Platform\u0026rdquo; est proposée pour l\u0026rsquo;hébergement en site propre ou en cloud computing[3].\nOpenShift supporte également des applications web, qui elles-mêmes sont supportées par Red Hat Enterprise Linux.\n","date":"2025-09-06T00:00:00Z","image":"https://quarty.phthom.net/posts/bonjour/cover_hu_961024150ee0dc47.jpg","permalink":"https://quarty.phthom.net/posts/bonjour/","title":"Bonjour"},{"content":"This article offers a sample of basic Markdown syntax that can be used in Hugo content files, also it shows whether basic HTML elements are decorated with CSS in a Hugo theme.\nHeadings The following HTML \u0026lt;h1\u0026gt;—\u0026lt;h6\u0026gt; elements represent six levels of section headings. \u0026lt;h1\u0026gt; is the highest section level while \u0026lt;h6\u0026gt; is the lowest.\nH1 H2 H3 H4 H5 H6 Paragraph Xerum, quo qui aut unt expliquam qui dolut labo. Aque venitatiusda cum, voluptionse latur sitiae dolessi aut parist aut dollo enim qui voluptate ma dolestendit peritin re plis aut quas inctum laceat est volestemque commosa as cus endigna tectur, offic to cor sequas etum rerum idem sintibus eiur? Quianimin porecus evelectur, cum que nis nust voloribus ratem aut omnimi, sitatur? Quiatem. Nam, omnis sum am facea corem alique molestrunt et eos evelece arcillit ut aut eos eos nus, sin conecerem erum fuga. Ri oditatquam, ad quibus unda veliamenimin cusam et facea ipsamus es exerum sitate dolores editium rerore eost, temped molorro ratiae volorro te reribus dolorer sperchicium faceata tiustia prat.\nItatur? Quiatae cullecum rem ent aut odis in re eossequodi nonsequ idebis ne sapicia is sinveli squiatum, core et que aut hariosam ex eat.\nBlockquotes The blockquote element represents content that is quoted from another source, optionally with a citation which must be within a footer or cite element, and optionally with in-line changes such as annotations and abbreviations.\nBlockquote without attribution Tiam, ad mint andaepu dandae nostion secatur sequo quae. Note that you can use Markdown syntax within a blockquote.\nBlockquote with attribution Don\u0026rsquo;t communicate by sharing memory, share memory by communicating. — Rob Pike1\nTables Tables aren\u0026rsquo;t part of the core Markdown spec, but Hugo supports supports them out-of-the-box.\nName Age Bob 27 Alice 23 Inline Markdown within tables Italics Bold Code italics bold code A B C D E F Lorem ipsum dolor sit amet, consectetur adipiscing elit. Phasellus ultricies, sapien non euismod aliquam, dui ligula tincidunt odio, at accumsan nulla sapien eget ex. Proin eleifend dictum ipsum, non euismod ipsum pulvinar et. Vivamus sollicitudin, quam in pulvinar aliquam, metus elit pretium purus Proin sit amet velit nec enim imperdiet vehicula. Ut bibendum vestibulum quam, eu egestas turpis gravida nec Sed scelerisque nec turpis vel viverra. Vivamus vitae pretium sapien Code Blocks Code block with backticks \u0026lt;!doctype html\u0026gt; \u0026lt;html lang=\u0026#34;en\u0026#34;\u0026gt; \u0026lt;head\u0026gt; \u0026lt;meta charset=\u0026#34;utf-8\u0026#34;\u0026gt; \u0026lt;title\u0026gt;Example HTML5 Document\u0026lt;/title\u0026gt; \u0026lt;/head\u0026gt; \u0026lt;body\u0026gt; \u0026lt;p\u0026gt;Test\u0026lt;/p\u0026gt; \u0026lt;/body\u0026gt; \u0026lt;/html\u0026gt; Code block indented with four spaces \u0026lt;!doctype html\u0026gt; \u0026lt;html lang=\u0026quot;en\u0026quot;\u0026gt; \u0026lt;head\u0026gt; \u0026lt;meta charset=\u0026quot;utf-8\u0026quot;\u0026gt; \u0026lt;title\u0026gt;Example HTML5 Document\u0026lt;/title\u0026gt; \u0026lt;/head\u0026gt; \u0026lt;body\u0026gt; \u0026lt;p\u0026gt;Test\u0026lt;/p\u0026gt; \u0026lt;/body\u0026gt; \u0026lt;/html\u0026gt; Diff code block [dependencies.bevy] git = \u0026#34;https://github.com/bevyengine/bevy\u0026#34; rev = \u0026#34;11f52b8c72fc3a568e8bb4a4cd1f3eb025ac2e13\u0026#34; - features = [\u0026#34;dynamic\u0026#34;] + features = [\u0026#34;jpeg\u0026#34;, \u0026#34;dynamic\u0026#34;] One line code block \u0026lt;p\u0026gt;A paragraph\u0026lt;/p\u0026gt; List Types Ordered List First item Second item Third item Unordered List List item Another item And another item Nested list Fruit Apple Orange Banana Dairy Milk Cheese Other Elements — abbr, sub, sup, kbd, mark GIF is a bitmap image format.\nH2O\nXn + Yn = Zn\nPress CTRL + ALT + Delete to end the session.\nMost salamanders are nocturnal, and hunt for insects, worms, and other small creatures.\nThe above quote is excerpted from Rob Pike\u0026rsquo;s talk during Gopherfest, November 18, 2015.\u0026#160;\u0026#x21a9;\u0026#xfe0e;\n","date":"2023-09-07T00:00:00Z","permalink":"https://quarty.phthom.net/posts/markdown-syntax-guide/","title":"Markdown Syntax Guide"},{"content":"Hugo theme Stack supports the creation of interactive image galleries using Markdown. It\u0026rsquo;s powered by PhotoSwipe and its syntax was inspired by Typlog.\nTo use this feature, the image must be in the same directory as the Markdown file, as it uses Hugo\u0026rsquo;s page bundle feature to read the dimensions of the image. External images are not supported.\nSyntax ![Image 1](1.jpg) ![Image 2](2.jpg) Result Photo by mymind and Luke Chesser on Unsplash\n","date":"2023-08-26T00:00:00Z","image":"https://quarty.phthom.net/posts/image-gallery/2_hu_b23eaddf21827006.jpg","permalink":"https://quarty.phthom.net/posts/image-gallery/","title":"Image gallery"},{"content":"Stack has built-in support for math typesetting using KaTeX.\nIt\u0026rsquo;s not enabled by default side-wide, but you can enable it for individual posts by adding math: true to the front matter. Or you can enable it side-wide by adding math = true to the params.article section in config.toml.\nInline math This is an inline mathematical expression: $\\varphi = \\dfrac{1+\\sqrt5}{2}= 1.6180339887…$\n$\\varphi = \\dfrac{1+\\sqrt5}{2}= 1.6180339887…$ Block math $$ \\varphi = 1+\\frac{1} {1+\\frac{1} {1+\\frac{1} {1+\\cdots} } } $$\n$$ \\varphi = 1+\\frac{1} {1+\\frac{1} {1+\\frac{1} {1+\\cdots} } } $$ $$ f(x) = \\int_{-\\infty}^\\infty\\hat f(\\xi),e^{2 \\pi i \\xi x},d\\xi $$\n$$ f(x) = \\int_{-\\infty}^\\infty\\hat f(\\xi)\\,e^{2 \\pi i \\xi x}\\,d\\xi $$ ","date":"2023-08-24T00:00:00Z","permalink":"https://quarty.phthom.net/posts/math-typesetting/","title":"Math Typesetting"}]