{"id":49104,"date":"2026-06-26T14:07:47","date_gmt":"2026-06-26T14:07:47","guid":{"rendered":"https:\/\/www.devopsschool.com\/blog\/?p=49104"},"modified":"2026-06-26T14:07:48","modified_gmt":"2026-06-26T14:07:48","slug":"openshift-local-crc-basic-learning-workflow","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/openshift-local-crc-basic-learning-workflow\/","title":{"rendered":"OpenShift Tutorial \u2013 Deploy and Access Your First Applications using OpenShift Local"},"content":{"rendered":"\n

How to install oc?<\/h2>\n\n\n\n

OpenShift: How to Install OpenShift CLI oc<\/a><\/p>\n\n\n\n

How to login?<\/h2>\n\n\n\n
\n\n\n
oc login https:\/\/api.XXXXXXXXXXXXXX.centralindia.aroapp.io:6443 --username=kubeadmin --password=EgzIY-DJPw2-3NXke-HNYmJ<\/span>\n\noc login --token=sha256~LLnTlPcjcNjWsQRqnSyTn99LSvxwQdm47gaiEdZJa20 --server=https:\/\/api.XXXXXXXXXXXXXX.centralindia.aroapp.io:6443<\/span>\n\ncurl -H \"Authorization: Bearer sha256~LLnTlPcjcNjWsQRqnSyTn99LSvxwQdm47gaiEdZJa20\"<\/span> \"https:\/\/api.XXXXXXXXXXXXXX.centralindia.aroapp.io:6443\/apis\/user.openshift.io\/v1\/users\/~<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\"\"<\/figure>\n\n\n\n
\n\n\n\n
Login to the Openshift using Web Console and CLI<\/strong> using oc<\/h2>\n\n\n
crc console<\/span> --credentials\neval<\/span> $(crc oc-env)\noc login -u kubeadmin -p <password> --insecure-skip-tls-verify\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Copy the admin URL and kubeadmin<\/code> credentials \u2192 open in browser.<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n
rajesh@DM-GYK3HC26H7 ~ % oc login --token=sha256~gJiOSTShZqkioiWgi2IXWA9zf_5vgutfdhwP0tOUEj8 --server=https:\/\/api.crc.testing:6443<\/span>\nLogged into \"https:\/\/api.crc.testing:6443\"<\/span> as<\/span> \"kubeadmin\"<\/span> using the token provided.\n\nYou have access to 65<\/span> projects, the list<\/span> has been suppressed. You can list<\/span> all projects with 'oc projects'<\/span>\n\nUsing project \"default\"<\/span>.\nrajesh@DM-GYK3HC26H7 ~ % curl -H \"Authorization: Bearer sha256~gJiOSTShZqkioiWgi2IXWA9zf_5vgutfdhwP0tOUEj8\"<\/span> \"https:\/\/api.crc.testing:6443\/apis\/user.openshift.io\/v1\/users\/~\"<\/span>\ncurl: (60<\/span>) SSL certificate problem: self<\/span> signed certificate in certificate chain\nMore details here: https:\/\/curl.se\/docs\/sslcerts.html<\/span>\n\ncurl failed to verify the legitimacy of the server and<\/span> therefore could not\nestablish a secure connection to it. To learn more about this situation and<\/span>\nhow to fix it, please visit the web page mentioned above.\nrajesh@DM-GYK3HC26H7 ~ % curl -k -H \"Authorization: Bearer sha256~gJiOSTShZqkioiWgi2IXWA9zf_5vgutfdhwP0tOUEj8\"<\/span> \"https:\/\/api.crc.testing:6443\/apis\/user.openshift.io\/v1\/users\/~\"<\/span>\n{\n  \"kind\"<\/span>: \"User\"<\/span>,\n  \"apiVersion\"<\/span>: \"user.openshift.io\/v1\"<\/span>,\n  \"metadata\"<\/span>: {\n    \"name\"<\/span>: \"kubeadmin\"<\/span>,\n    \"uid\"<\/span>: \"d85326ad-0202-4285-bfd1-bb370c668bc6\"<\/span>,\n    \"resourceVersion\"<\/span>: \"25096\"<\/span>,\n    \"creationTimestamp\"<\/span>: \"2026-05-14T11:10:41Z\"<\/span>,\n    \"managedFields\"<\/span>: [\n      {\n        \"manager\"<\/span>: \"oauth-server\"<\/span>,\n        \"operation\"<\/span>: \"Update\"<\/span>,\n        \"apiVersion\"<\/span>: \"user.openshift.io\/v1\"<\/span>,\n        \"time\"<\/span>: \"2026-05-14T11:10:41Z\"<\/span>,\n        \"fieldsType\"<\/span>: \"FieldsV1\"<\/span>,\n        \"fieldsV1\"<\/span>: {\n          \"f:identities\"<\/span>: {}\n        }\n      }\n    ]\n  },\n  \"identities\"<\/span>: [\n    \"developer:kubeadmin\"<\/span>\n  ],\n  \"groups\"<\/span>: [\n    \"system:authenticated\"<\/span>,\n    \"system:authenticated:oauth\"<\/span>\n  ]\n}%                                                                                                                                                                        rajesh@DM-GYK3HC26H7 ~ % <\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
OpenShift Local CRC Basic Learning Workflow<\/h1>\n\n\n\n
World-Class Step-by-Step Lab Guide After OpenShift Local Is Running<\/h2>\n\n\n\n
Audience: Beginners learning OpenShift, Kubernetes, containers, deployments, services, routes, builds, jobs, storage, ConfigMaps, and Secrets.<\/p>\n\n\n\n
Platform: OpenShift Local on macOS.<\/p>\n\n\n\n
Assumption: OpenShift Local is already installed and started.<\/p>\n\n\n\n
\n\n\n\n
0. Lab Architecture<\/h1>\n\n\n\n
In this lab, you will use two OpenShift projects:<\/p>\n\n\n
lab-web    -> Web apps, Deployment, Service, Route, ConfigMap, Secret, PVC\nlab-batch  -> Jobs and CronJobs\n<\/code><\/span><\/pre>\n\n\n
This helps students understand project switching clearly.<\/p>\n\n\n\n
Core learning flow:<\/p>\n\n\n
Project\n  -> Application\n  -> Deployment\n  -> Pod\n  -> Service\n  -> Route\n  -> Browser \/ curl access\n<\/code><\/span><\/pre>\n\n\n
Extended learning flow:<\/p>\n\n\n
Build from<\/span> Git\n  -> BuildConfig\n  -> Build\n  -> ImageStream\n  -> Deployment\n  -> Service\n  -> Route\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Storage and configuration flow:<\/p>\n\n\n
PersistentVolume\n  -> PersistentVolumeClaim\n  -> Pod mount\n\nConfigMap\n  -> Environment variable \/ mounted file\n\nSecret\n  -> Sensitive environment variable \/ mounted file\n<\/code><\/span><\/pre>\n\n\n
Batch workload flow:<\/p>\n\n\n
Job\n  -> Pod\n  -> Completed task\n\nCronJob\n  -> Job\n  -> Pod\n  -> Repeated scheduled task\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
1. Verify OpenShift Local Status<\/h1>\n\n\n\n
Run:<\/p>\n\n\n
crc status\n<\/code><\/span><\/pre>\n\n\n
Expected:<\/p>\n\n\n
CRC VM:          Running\nOpenShift:       Running\n<\/code><\/span><\/pre>\n\n\n
If OpenShift shows Starting<\/code>, wait until it becomes Running<\/code>.<\/p>\n\n\n\n
\n\n\n\n
2. Load the OpenShift CLI Environment<\/h1>\n\n\n\n
Run:<\/p>\n\n\n
eval<\/span> $(crc oc-env)\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc version\n<\/code><\/span><\/pre>\n\n\n
You should see the OpenShift client version.<\/p>\n\n\n\n
\n\n\n\n
3. Get Login Credentials<\/h1>\n\n\n\n
Run:<\/p>\n\n\n
crc console<\/span> --credentials\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
You should see users like:<\/p>\n\n\n
kubeadmin\ndeveloper\n<\/code><\/span><\/pre>\n\n\n
For most beginner labs, use:<\/p>\n\n\n
Username<\/span>: developer\nPassword<\/span>: developer\n<\/code><\/span>Code language:<\/span> HTTP<\/span> (<\/span>http<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
4. Login to OpenShift Local<\/h1>\n\n\n\n
Run:<\/p>\n\n\n
oc login -u developer -p developer https:\/\/api.crc.testing:6443<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc whoami\n<\/code><\/span><\/pre>\n\n\n
Expected:<\/p>\n\n\n
developer\n<\/code><\/span><\/pre>\n\n\n
Check the cluster API:<\/p>\n\n\n
oc cluster-info\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
5. Understand Projects<\/h1>\n\n\n\n
In OpenShift, a project is a Kubernetes namespace with extra OpenShift features.<\/p>\n\n\n\n
List projects:<\/p>\n\n\n
oc projects\n<\/code><\/span><\/pre>\n\n\n
Check current project:<\/p>\n\n\n
oc project\n<\/code><\/span><\/pre>\n\n\n
Create the first project:<\/p>\n\n\n
oc new<\/span>-project lab-web\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Create the second project:<\/p>\n\n\n
oc new<\/span>-project lab-batch\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Switch back to the web project:<\/p>\n\n\n
oc project lab-web\n<\/code><\/span><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc project\n<\/code><\/span><\/pre>\n\n\n
Expected:<\/p>\n\n\n
Using project \"lab-web\"<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
6. Project Switching Practice<\/h1>\n\n\n\n
Switch to lab-batch<\/code>:<\/p>\n\n\n
oc project lab-batch\n<\/code><\/span><\/pre>\n\n\n
Check resources:<\/p>\n\n\n
oc get<\/span> all\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Switch to lab-web<\/code>:<\/p>\n\n\n
oc project lab-web\n<\/code><\/span><\/pre>\n\n\n
Check resources:<\/p>\n\n\n
oc get<\/span> all\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Important rule:<\/p>\n\n\n
Resources created in lab-web are not visible in lab-batch unless you use<\/span> -A<\/span> or<\/span> specify<\/span> the<\/span> namespace<\/span>.\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Useful cross-project commands:<\/p>\n\n\n
oc get<\/span> pods -A\noc get<\/span> svc -A\noc get<\/span> route -A\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
7. Explore OpenShift ImageStreams<\/h1>\n\n\n\n
Switch to lab-web<\/code>:<\/p>\n\n\n
oc project lab-web\n<\/code><\/span><\/pre>\n\n\n
List ImageStreams available in the openshift<\/code> namespace:<\/p>\n\n\n
oc get<\/span> imagestreams -n openshift\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Find HTTPD:<\/p>\n\n\n
oc get<\/span> imagestreams -n openshift | grep httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Inspect the HTTPD ImageStream:<\/p>\n\n\n
oc describe imagestream httpd -n openshift\n<\/code><\/span><\/pre>\n\n\n
Simple meaning:<\/p>\n\n\n
ImageStream is an OpenShift object that tracks container image versions\/tags.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
8. Deploy First HTTPD Application<\/h1>\n\n\n\n
Deploy HTTPD from OpenShift ImageStream:<\/p>\n\n\n
oc new<\/span>-app --name=my-httpd --image-stream=openshift\/httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check created resources:<\/p>\n\n\n
oc get<\/span> all\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
You should see:<\/p>\n\n\n
deployment.apps\/my-httpd\nreplicaset.apps\/my-httpd-xxxxx\npod\/my-httpd-xxxxx\nservice\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Check pods:<\/p>\n\n\n
oc get<\/span> pods\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Expected:<\/p>\n\n\n
my-httpd-xxxxx   1\/1   Running\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
9. Understand Deployment, ReplicaSet, Pod, and Service<\/h1>\n\n\n\n
Run:<\/p>\n\n\n
oc get<\/span> deployment\noc get<\/span> replicaset\noc get<\/span> pods\noc get<\/span> svc\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Explanation:<\/p>\n\n\n
Deployment  -> Desired application state\nReplicaSet  -> Maintains number of pod replicas\nPod         -> Runs the container\nService     -> Stable internal network endpoint for pods\n<\/code><\/span><\/pre>\n\n\n
Describe the Deployment:<\/p>\n\n\n
oc describe deployment my-httpd\n<\/code><\/span><\/pre>\n\n\n
Describe the Service:<\/p>\n\n\n
oc describe svc my-httpd\n<\/code><\/span><\/pre>\n\n\n
Check Service endpoints:<\/p>\n\n\n
oc get<\/span> endpoints my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Expected:<\/p>\n\n\n
my-httpd<\/span>   10.x<\/span>.x<\/span>.x<\/span>:8080<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
If endpoints show <none><\/code>, the Service is not connected to a running pod.<\/p>\n\n\n\n
\n\n\n\n
10. Expose the Application Using Route<\/h1>\n\n\n\n
A Service is internal. To access the app from browser or curl, create a Route.<\/p>\n\n\n\n
Run:<\/p>\n\n\n
oc expose svc\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Check Route:<\/p>\n\n\n
oc get<\/span> route my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Expected:<\/p>\n\n\n
NAME       HOST\/PORT\nmy-httpd   my-httpd-lab-web.apps-crc.testing\n<\/code><\/span><\/pre>\n\n\n
Get only the URL:<\/p>\n\n\n
oc get route my-httpd -o jsonpath='http:\/\/{.spec.host}{\"\\n\"}'<\/span>\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Access using curl:<\/p>\n\n\n
curl http:\/\/$(oc get route my-httpd -o jsonpath='{.spec.host}')<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Or open in browser:<\/p>\n\n\n
http:\/\/my-httpd-lab-web.apps-crc.testing<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
11. Troubleshoot \u201cApplication Is Not Available\u201d<\/h1>\n\n\n\n
If you see:<\/p>\n\n\n
Application is not available\n<\/code><\/span><\/pre>\n\n\n
Run:<\/p>\n\n\n
oc project\noc get<\/span> pods\noc get<\/span> svc\noc get<\/span> route\noc get<\/span> endpoints my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check whether route exists:<\/p>\n\n\n
oc get<\/span> route -A | grep my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check whether app is in another project:<\/p>\n\n\n
oc get<\/span> all -A | grep my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Common causes:<\/p>\n\n\n
Wrong project\nWrong route hostname\nPod not running\nService has no endpoint\nRoute points to wrong service\nApplication still starting\n<\/code><\/span><\/pre>\n\n\n
Useful debugging commands:<\/p>\n\n\n
oc describe route my-httpd\noc describe svc my-httpd\noc describe deployment my-httpd\noc logs deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
12. Deploy Same HTTPD App in Second Project<\/h1>\n\n\n\n
Now deploy the same app in another project to understand isolation.<\/p>\n\n\n\n
Switch to lab-batch<\/code>:<\/p>\n\n\n
oc project lab-batch\n<\/code><\/span><\/pre>\n\n\n
Deploy HTTPD:<\/p>\n\n\n
oc new<\/span>-app --name=my-httpd --image-stream=openshift\/httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Expose it:<\/p>\n\n\n
oc expose svc\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Check route:<\/p>\n\n\n
oc get<\/span> route my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
You should see a different hostname:<\/p>\n\n\n
my-httpd-lab-batch<\/span>.apps-crc<\/span>.testing<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
Now compare both routes:<\/p>\n\n\n
oc get<\/span> route -A | grep my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Expected:<\/p>\n\n\n
lab-web<\/span>     my-httpd<\/span>   my-httpd-lab-web<\/span>.apps-crc<\/span>.testing<\/span>\nlab-batch<\/span>   my-httpd<\/span>   my-httpd-lab-batch<\/span>.apps-crc<\/span>.testing<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
Access both:<\/p>\n\n\n
curl http:\/\/my-httpd-lab-web.apps-crc.testing<\/span>\ncurl http:\/\/my-httpd-lab-batch.apps-crc.testing<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Important learning:<\/p>\n\n\n
Same app name can exist in different projects.\nEach project gets its own namespace and route hostname.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
13. Delete HTTPD from lab-batch<\/h1>\n\n\n\n
Keep lab-web<\/code> for the rest of the labs.<\/p>\n\n\n\n
Switch to lab-batch<\/code>:<\/p>\n\n\n
oc project lab-batch\n<\/code><\/span><\/pre>\n\n\n
Delete HTTPD resources:<\/p>\n\n\n
oc delete<\/span> all -l app=my-httpd\noc delete<\/span> route my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc get<\/span> all\noc get<\/span> route\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Switch back:<\/p>\n\n\n
oc project lab-web\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
14. Scale the Application<\/h1>\n\n\n\n
Check current pods:<\/p>\n\n\n
oc get<\/span> pods\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Scale to 3 replicas:<\/p>\n\n\n
oc scale deployment\/my-httpd --replicas=3\n<\/code><\/span><\/pre>\n\n\n
Check pods:<\/p>\n\n\n
oc get<\/span> pods -o wide\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check deployment:<\/p>\n\n\n
oc get<\/span> deployment my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Scale back to 1:<\/p>\n\n\n
oc scale deployment\/my-httpd --replicas=1\n<\/code><\/span><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc get<\/span> pods\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Deployment controls how many pod replicas should run.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
15. Check Logs and Open Pod Shell<\/h1>\n\n\n\n
View logs from Deployment:<\/p>\n\n\n
oc logs deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Get pod name:<\/p>\n\n\n
oc get<\/span> pods\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Open shell inside pod:<\/p>\n\n\n
oc rsh deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Inside the container, run:<\/p>\n\n\n
pwd\nls\nwhoami\nexit<\/span>\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Alternative command:<\/p>\n\n\n
oc exec deployment\/my-httpd -- whoami\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
16. Port Forward Service Locally<\/h1>\n\n\n\n
This is useful when Route is not working or when testing private services.<\/p>\n\n\n\n
Run:<\/p>\n\n\n
oc port-forward svc\/my-httpd 18080:8080\n<\/code><\/span><\/pre>\n\n\n
Open another terminal and test:<\/p>\n\n\n
curl http:\/\/localhost:18080<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Stop port-forward using:<\/p>\n\n\n
Ctrl + C\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
17. View Application Status<\/h1>\n\n\n\n
Run:<\/p>\n\n\n
oc status\n<\/code><\/span><\/pre>\n\n\n
This gives a human-friendly summary of the current project.<\/p>\n\n\n\n
Also run:<\/p>\n\n\n
oc get<\/span> all\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
This gives the Kubernetes\/OpenShift resource view.<\/p>\n\n\n\n
\n\n\n\n
18. Add Labels<\/h1>\n\n\n\n
Add a label to the Deployment:<\/p>\n\n\n
oc label deployment\/my-httpd app-type=webserver\n<\/code><\/span><\/pre>\n\n\n
Check labels:<\/p>\n\n\n
oc get<\/span> deployment my-httpd --show-labels\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Find resources by label:<\/p>\n\n\n
oc get<\/span> deployment -l app-type=webserver\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check pod labels:<\/p>\n\n\n
oc get<\/span> pods --show-labels\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Labels are key-value metadata used for selection, grouping, and automation.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
19. Set Resource Requests and Limits<\/h1>\n\n\n\n
Set CPU and memory requests\/limits:<\/p>\n\n\n
oc set<\/span> resources deployment\/my-httpd \\\n  --requests=cpu=100m,memory=128Mi \\\n  --limits=cpu=500m,memory=256Mi\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc describe deployment my-httpd\n<\/code><\/span><\/pre>\n\n\n
Check rollout:<\/p>\n\n\n
oc rollout status deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Requests reserve minimum resources.\nLimits cap maximum resources.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
20. Rollout History and Rollback<\/h1>\n\n\n\n
Make a visible change:<\/p>\n\n\n
oc set<\/span> env deployment\/my-httpd TRAINING_VERSION=v1\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check rollout:<\/p>\n\n\n
oc rollout status deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Check rollout history:<\/p>\n\n\n
oc rollout history deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Make another change:<\/p>\n\n\n
oc set<\/span> env deployment\/my-httpd TRAINING_VERSION=v2\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check environment:<\/p>\n\n\n
oc set<\/span> env deployment\/my-httpd --list\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Rollback:<\/p>\n\n\n
oc rollout undo deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Check again:<\/p>\n\n\n
oc rollout status deployment\/my-httpd\noc set<\/span> env deployment\/my-httpd --list\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
OpenShift\/Kubernetes Deployments support rolling updates and rollback.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
21. Export YAML and Apply YAML<\/h1>\n\n\n\n
Export Deployment YAML:<\/p>\n\n\n
oc get<\/span> deployment my-httpd -o yaml > my-httpd-deployment.yaml\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
View file:<\/p>\n\n\n
cat<\/span> my-httpd-deployment<\/span>.yaml<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
Export Service YAML:<\/p>\n\n\n
oc get<\/span> svc my-httpd -o yaml > my-httpd-service.yaml\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Export Route YAML:<\/p>\n\n\n
oc get<\/span> route my-httpd -o yaml > my-httpd-route.yaml\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
CLI commands create resources.\nYAML defines resources declaratively.\n<\/code><\/span><\/pre>\n\n\n
Do not blindly re-apply exported YAML without cleaning fields like:<\/p>\n\n\n
status\nresourceVersion\nuid\nmanagedFields\ncreationTimestamp\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
22. Create ConfigMap<\/h1>\n\n\n\n
Create a ConfigMap:<\/p>\n\n\n
oc create configmap app-config \\\n  --from<\/span>-literal=APP_MODE=training \\\n  --from<\/span>-literal=WELCOME_MESSAGE=\"Hello from ConfigMap\"<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check ConfigMap:<\/p>\n\n\n
oc get<\/span> configmap\noc describe configmap app-config\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Inject ConfigMap values as environment variables:<\/p>\n\n\n
oc set<\/span> env deployment\/my-httpd --from=configmap\/app-config\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc set<\/span> env deployment\/my-httpd --list\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check inside pod:<\/p>\n\n\n
oc exec deployment\/my-httpd -- env | grep APP_MODE\noc exec deployment\/my-httpd -- env | grep WELCOME_MESSAGE\n<\/code><\/span><\/pre>\n\n\n
Learning:<\/p>\n\n\n
ConfigMap stores non-sensitive configuration.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
23. Create ConfigMap as a File<\/h1>\n\n\n\n
Create an HTML file:<\/p>\n\n\n
cat > index.html <<'EOF'<\/span>\n<html>\n  <body>\n    <h1>Hello from OpenShift Local<\/h1>\n    <p>This page is coming from a ConfigMap mounted into the HTTPD container.<\/p>\n  <\/body>\n<\/html>\nEOF\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Create ConfigMap from file:<\/p>\n\n\n
oc create configmap httpd-index --from<\/span>-file=index.html\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check:<\/p>\n\n\n
oc describe configmap httpd-index\n<\/code><\/span><\/pre>\n\n\n
Mount ConfigMap into the HTTPD document root:<\/p>\n\n\n
oc set<\/span> volume deployment\/my-httpd \\\n  --add \\\n  --name=httpd-index-volume \\\n  --type=configmap \\\n  --configmap-name=httpd-index \\\n  --mount-path=\/var\/www\/html\/index.html \\\n  --sub-path=index.html\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Wait for rollout:<\/p>\n\n\n
oc rollout status deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Access route:<\/p>\n\n\n
curl http:\/\/$(oc get route my-httpd -o jsonpath='{.spec.host}')<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
ConfigMaps can be consumed as<\/span> environment variables or mounted as<\/span> files.\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Note:<\/p>\n\n\n
When using subPath, ConfigMap updates may not automatically appear in the running pod.\nFor beginner labs, restart the pod or rollout the deployment after updating.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
24. Create Secret<\/h1>\n\n\n\n
Create a Secret:<\/p>\n\n\n
oc create secret generic app-secret \\\n  --from<\/span>-literal=DB_USER=student \\\n  --from<\/span>-literal=DB_PASSWORD='redhat123'<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check Secret:<\/p>\n\n\n
oc get<\/span> secret\noc describe secret app-secret\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Do not print real production secrets. This is only a lab.<\/p>\n\n\n\n
Inject Secret as environment variables:<\/p>\n\n\n
oc set<\/span> env deployment\/my-httpd --from=secret\/app-secret --prefix=SECRET_\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc set<\/span> env deployment\/my-httpd --list\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check inside pod:<\/p>\n\n\n
oc exec deployment\/my-httpd -- env | grep SECRET_DB_USER\n<\/code><\/span><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Secret stores sensitive configuration such as<\/span> passwords, tokens, and keys.\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Important:<\/p>\n\n\n
Secrets are not magic. Use<\/span> RBAC<\/span>, encryption<\/span> at<\/span> rest<\/span>, and<\/span> external<\/span> secret<\/span> managers<\/span> for<\/span> production<\/span>-grade<\/span> security<\/span>.\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
25. Build from Source: Git to Deployment<\/h1>\n\n\n\n
This lab requires internet access from the OpenShift Local VM.<\/p>\n\n\n\n
Stay in lab-web<\/code>:<\/p>\n\n\n
oc project lab-web\n<\/code><\/span><\/pre>\n\n\n
Deploy from Git using Source-to-Image:<\/p>\n\n\n
oc new<\/span>-app https:\/\/github.com\/sclorg\/nodejs-ex --name=nodejs-ex<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check generated objects:<\/p>\n\n\n
oc get<\/span> all\noc get<\/span> buildconfig\noc get<\/span> builds\noc get<\/span> imagestream\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Follow the build logs:<\/p>\n\n\n
oc logs -f bc\/nodejs-ex\n<\/code><\/span><\/pre>\n\n\n
If build log command does not work, list builds:<\/p>\n\n\n
oc get<\/span> builds\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Then run:<\/p>\n\n\n
oc logs -f build\/nodejs-ex-1\n<\/code><\/span><\/pre>\n\n\n
Expose the app:<\/p>\n\n\n
oc expose svc\/nodejs-ex\n<\/code><\/span><\/pre>\n\n\n
Check route:<\/p>\n\n\n
oc get<\/span> route nodejs-ex\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Access:<\/p>\n\n\n
curl http:\/\/$(oc get route nodejs-ex -o jsonpath='{.spec.host}')<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Git repository\n  -> BuildConfig\n  -> Build\n  -> ImageStream\n  -> Deployment\n  -> Service\n  -> Route\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
26. Rebuild Source App<\/h1>\n\n\n\n
Start a new build:<\/p>\n\n\n
oc start-build nodejs-ex\n<\/code><\/span><\/pre>\n\n\n
Follow build:<\/p>\n\n\n
oc start-build nodejs-ex --follow\n<\/code><\/span><\/pre>\n\n\n
Check builds:<\/p>\n\n\n
oc get<\/span> builds\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check deployment:<\/p>\n\n\n
oc get<\/span> deployment\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check pods:<\/p>\n\n\n
oc get<\/span> pods\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
BuildConfig defines how source code becomes a runnable image.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
27. Create a Simple Job<\/h1>\n\n\n\n
Switch to batch project:<\/p>\n\n\n
oc project lab-batch\n<\/code><\/span><\/pre>\n\n\n
Create a Job:<\/p>\n\n\n
oc create job hello-job \\\n  --image=registry.access.redhat.com\/ubi9\/ubi-minimal \\\n  -- \/bin\/<\/span>sh -c 'date; echo \"Hello from OpenShift Job\"; sleep 5; echo \"Job completed\"'<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check Job:<\/p>\n\n\n
oc get<\/span> jobs\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check pods:<\/p>\n\n\n
oc get<\/span> pods\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
View logs:<\/p>\n\n\n
oc logs job\/hello-job\n<\/code><\/span><\/pre>\n\n\n
Describe Job:<\/p>\n\n\n
oc describe job hello-job\n<\/code><\/span><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Job runs a task to completion.\nIt is suitable for one-time batch tasks.\n<\/code><\/span><\/pre>\n\n\n
Clean up:<\/p>\n\n\n
oc delete<\/span> job hello-job\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
28. Create a CronJob<\/h1>\n\n\n\n
Create a CronJob that runs every minute:<\/p>\n\n\n
oc create cronjob hello-cron \\\n  --image=registry.access.redhat.com\/ubi9\/ubi-minimal \\\n  --schedule='*\/1 * * * *'<\/span> \\\n  -- \/bin\/<\/span>sh -c 'date; echo \"Hello from OpenShift CronJob\"'<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check CronJob:<\/p>\n\n\n
oc get<\/span> cronjob\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Wait for a minute, then check Jobs:<\/p>\n\n\n
oc get<\/span> jobs\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check pods:<\/p>\n\n\n
oc get<\/span> pods\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
View logs from the latest job pod:<\/p>\n\n\n
oc logs $(oc get<\/span> pods --sort-by=.metadata.creationTimestamp -o name | tail -1)\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Suspend CronJob:<\/p>\n\n\n
oc patch cronjob hello-cron -p '{\"spec\":{\"suspend\":true}}'<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc get<\/span> cronjob hello-cron\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Resume CronJob:<\/p>\n\n\n
oc patch cronjob hello-cron -p '{\"spec\":{\"suspend\":false}}'<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Delete CronJob:<\/p>\n\n\n
oc delete<\/span> cronjob hello-cron\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Delete old Jobs if any remain:<\/p>\n\n\n
oc delete<\/span> jobs --all\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
CronJob creates Jobs on a schedule.\nUse it for<\/span> scheduled tasks such as<\/span> reports, cleanup, and backups.\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
29. Persistent Storage: Check StorageClass<\/h1>\n\n\n\n
Switch to lab-web<\/code>:<\/p>\n\n\n
oc project lab-web\n<\/code><\/span><\/pre>\n\n\n
Check StorageClass:<\/p>\n\n\n
oc get<\/span> storageclass\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
You should usually see a default storage class in OpenShift Local.<\/p>\n\n\n\n
If no default StorageClass exists, your PVC may stay Pending.<\/p>\n\n\n\n
\n\n\n\n
30. Create PVC<\/h1>\n\n\n\n
Create a PVC:<\/p>\n\n\n
cat > pvc.yaml <<'EOF'<\/span>\napiVersion<\/span>: v1\nkind<\/span>: PersistentVolumeClaim\nmetadata<\/span>:\n  name: data-pvc\nspec<\/span>:\n  accessModes:\n    - ReadWriteOnce\n  resources<\/span>:\n    requests:\n      storage: 1<\/span>Gi\nEOF\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Apply:<\/p>\n\n\n
oc<\/span> apply<\/span> -f<\/span> pvc<\/span>.yaml<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
Check:<\/p>\n\n\n
oc get<\/span> pvc\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Expected:<\/p>\n\n\n
data-pvc   Bound\n<\/code><\/span><\/pre>\n\n\n
If it stays Pending:<\/p>\n\n\n
oc describe pvc data-pvc\noc get<\/span> storageclass\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
If your StorageClass has a specific name, update the PVC like this:<\/p>\n\n\n
storageClassName: <your-storage-class-name<\/span>><\/span>\n<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
31. Use PVC in a Deployment<\/h1>\n\n\n\n
Create Deployment that writes data into PVC:<\/p>\n\n\n
cat > pvc-demo.yaml <<'EOF'<\/span>\napiVersion: apps\/v1\nkind: Deployment\nmetadata:\n  name: pvc-demo\nspec:\n  replicas: 1<\/span>\n  selector:\n    matchLabels:\n      app: pvc-demo\n  template:\n    metadata:\n      labels:\n        app: pvc-demo\n    spec:\n      containers:\n        - name: writer\n          image: registry.access.redhat.com\/ubi9\/ubi-minimal\n          command:\n            - \/bin\/sh\n            - -c\n          args:\n            - while<\/span> true<\/span>; do<\/span> date >> \/data\/visits.log; sleep 10<\/span>; done\n          volumeMounts:\n            - name: data\n              mountPath: \/data\n      volumes:\n        - name: data\n          persistentVolumeClaim:\n            claimName: data-pvc\nEOF\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Apply:<\/p>\n\n\n
oc<\/span> apply<\/span> -f<\/span> pvc-demo<\/span>.yaml<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
Check:<\/p>\n\n\n
oc get<\/span> pods\noc get<\/span> pvc\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Read file from the pod:<\/p>\n\n\n
POD=$(oc get pod -l app=pvc-demo -o jsonpath='{.items[0].metadata.name}'<\/span>)\noc exec $POD -- tail -5<\/span> \/data\/visits.log\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Delete pod:<\/p>\n\n\n
oc delete<\/span> pod $POD\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Wait for new pod:<\/p>\n\n\n
oc get<\/span> pods -w\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Stop watch with:<\/p>\n\n\n
Ctrl + C\n<\/code><\/span><\/pre>\n\n\n
Check data again:<\/p>\n\n\n
NEWPOD=$(oc get pod -l app=pvc-demo -o jsonpath='{.items[0].metadata.name}'<\/span>)\noc exec $NEWPOD -- tail -5<\/span> \/data\/visits.log\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Pod was deleted, but data survived because it was stored in PVC.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
32. Understand PV and PVC<\/h1>\n\n\n\n
Check PVC:<\/p>\n\n\n
oc get<\/span> pvc\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check PV:<\/p>\n\n\n
oc get<\/span> pv\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Describe PVC:<\/p>\n\n\n
oc describe pvc data-pvc\n<\/code><\/span><\/pre>\n\n\n
Simple meaning:<\/p>\n\n\n
PV  = Storage available in<\/span> the cluster\nPVC = Request for<\/span> storage from<\/span> a project\/application\nPod = Uses PVC as<\/span> a volume\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
33. Create Manual Deployment, Service, and Route<\/h1>\n\n\n\n
This lab teaches the difference between oc new-app<\/code> and manual object creation.<\/p>\n\n\n\n
Switch to lab-web<\/code>:<\/p>\n\n\n
oc project lab-web\n<\/code><\/span><\/pre>\n\n\n
Create a Deployment manually:<\/p>\n\n\n
cat > manual-httpd.yaml <<'EOF'<\/span>\napiVersion<\/span>: apps\/v1\nkind<\/span>: Deployment\nmetadata<\/span>:\n  name: manual-httpd\nspec<\/span>:\n  replicas: 1<\/span>\n  selector<\/span>:\n    matchLabels:\n      app: manual-httpd\n  template<\/span>:\n    metadata:\n      labels:\n        app: manual-httpd\n    spec<\/span>:\n      containers:\n        - name: httpd\n          image<\/span>: image-registry.openshift-image-registry.svc:5000<\/span>\/openshift\/httpd:latest\n          ports<\/span>:\n            - containerPort: 8080<\/span>\nEOF\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Apply:<\/p>\n\n\n
oc<\/span> apply<\/span> -f<\/span> manual-httpd<\/span>.yaml<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
If the internal image tag latest<\/code> does not exist, check available tags:<\/p>\n\n\n
oc describe imagestream httpd -n openshift\n<\/code><\/span><\/pre>\n\n\n
Then replace latest<\/code> with an available tag such as:<\/p>\n\n\n
2.4-ubi9<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
Check pod:<\/p>\n\n\n
oc get<\/span> pods -l app=manual-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Create Service:<\/p>\n\n\n
oc expose deployment\/manual-httpd --port=8080 --target-port=8080\n<\/code><\/span><\/pre>\n\n\n
Check Service:<\/p>\n\n\n
oc get<\/span> svc manual-httpd\noc get<\/span> endpoints manual-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Create Route:<\/p>\n\n\n
oc expose svc\/manual-httpd\n<\/code><\/span><\/pre>\n\n\n
Check Route:<\/p>\n\n\n
oc get<\/span> route manual-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Access:<\/p>\n\n\n
curl http:\/\/$(oc get route manual-httpd -o jsonpath='{.spec.host}')<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
oc new<\/span>-app creates several objects automatically.\nManual YAML helps you understand each object clearly.\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
34. Readiness and Liveness Probes<\/h1>\n\n\n\n
Add readiness probe:<\/p>\n\n\n
oc set<\/span> probe deployment\/my-httpd \\\n  --readiness \\\n  --get<\/span>-url=http:\/\/:8080\/\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Add liveness probe:<\/p>\n\n\n
oc set<\/span> probe deployment\/my-httpd \\\n  --liveness \\\n  --get<\/span>-url=http:\/\/:8080\/\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check rollout:<\/p>\n\n\n
oc rollout status deployment\/my-httpd\n<\/code><\/span><\/pre>\n\n\n
Describe pod:<\/p>\n\n\n
oc describe pod $(oc get pod -l deployment=my-httpd -o jsonpath='{.items[0].metadata.name}'<\/span>)\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Readiness probe decides whether pod should receive traffic.\nLiveness probe decides whether pod should be restarted.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
35. Events and Troubleshooting<\/h1>\n\n\n\n
View events:<\/p>\n\n\n
oc get<\/span> events --sort-by=.lastTimestamp\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Watch pods:<\/p>\n\n\n
oc get<\/span> pods -w\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Describe failed pod:<\/p>\n\n\n
oc describe pod <pod-name<\/span>><\/span>\n<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
View logs:<\/p>\n\n\n
oc logs <pod-name<\/span>><\/span>\n<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
Previous container logs:<\/p>\n\n\n
oc logs <pod-name<\/span>><\/span> --previous\n<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
Check all resources:<\/p>\n\n\n
oc get<\/span> all\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Common troubleshooting chain:<\/p>\n\n\n
Route\n  -> Service\n  -> Endpoints\n  -> Pod\n  -> Container logs\n  -> Events\n<\/code><\/span><\/pre>\n\n\n
Commands:<\/p>\n\n\n
oc get<\/span> route\noc get<\/span> svc\noc get<\/span> endpoints\noc get<\/span> pods\noc logs deployment\/my-httpd\noc get<\/span> events --sort-by=.lastTimestamp\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
36. Web Console Practice<\/h1>\n\n\n\n
Open console:<\/p>\n\n\n
crc console<\/span>\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Or show credentials:<\/p>\n\n\n
crc console<\/span> --credentials\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
In the console:<\/p>\n\n\n
1.<\/span> Login as<\/span> developer\n2.<\/span> Switch<\/span> to Developer perspective\n3.<\/span> Select lab-web project\n4.<\/span> Go to Topology\n5.<\/span> Click my-httpd\n6.<\/span> Check Route, Pods, Logs, Events\n7.<\/span> Switch<\/span> to lab-batch\n8.<\/span> Check Jobs and<\/span> CronJobs\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
CLI gives speed.\nWeb console<\/span> gives visual understanding.\nUse both.\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
37. RBAC and Permissions Basics<\/h1>\n\n\n\n
Check what you can do:<\/p>\n\n\n
oc auth can-i create pods\noc auth can-i create deployments\noc auth can-i create routes\noc auth can-i get<\/span> secrets\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check who can view pods:<\/p>\n\n\n
oc policy who-can get<\/span> pods\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Check current user:<\/p>\n\n\n
oc whoami\n<\/code><\/span><\/pre>\n\n\n
Learning:<\/p>\n\n\n
RBAC controls who can perform actions on resources.\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
38. Useful OpenShift Discovery Commands<\/h1>\n\n\n\n
Find API resources:<\/p>\n\n\n
oc api-resources\n<\/code><\/span><\/pre>\n\n\n
Find route resource:<\/p>\n\n\n
oc api-resources | grep route\n<\/code><\/span><\/pre>\n\n\n
Find job resources:<\/p>\n\n\n
oc api-resources | grep job\n<\/code><\/span><\/pre>\n\n\n
Explain a resource:<\/p>\n\n\n
oc<\/span> explain<\/span> deployment<\/span>\noc<\/span> explain<\/span> deployment<\/span>.spec<\/span>\noc<\/span> explain<\/span> service<\/span>\noc<\/span> explain<\/span> route<\/span>\noc<\/span> explain<\/span> cronjob<\/span>\n<\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
39. Compare Current Project vs All Projects<\/h1>\n\n\n\n
Current project only:<\/p>\n\n\n
oc get<\/span> pods\noc get<\/span> svc\noc get<\/span> route\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
All projects:<\/p>\n\n\n
oc get<\/span> pods -A\noc get<\/span> svc -A\noc get<\/span> route -A\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Find all HTTPD resources:<\/p>\n\n\n
oc get<\/span> all -A | grep httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Find all routes:<\/p>\n\n\n
oc get<\/span> route -A\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Learning:<\/p>\n\n\n
Most beginner confusion comes from<\/span> being in<\/span> the wrong project.\nAlways run oc project when confused.\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
40. Complete Lab Review<\/h1>\n\n\n\n
At this point, you have practiced:<\/p>\n\n\n
Project creation and switching\nApplication deployment\nDeployment\nReplicaSet\nPod\nService\nRoute\nExpose\nScaling\nLogs\nPod shell\nPort forward\nLabels\nResource requests and limits\nRollout and rollback\nYAML export<\/span>\/apply\nConfigMap\nSecret\nBuild from<\/span> Git\nBuildConfig\nImageStream\nJob\nCronJob\nPVC\nPV\nWeb Console\nRBAC basics\nTroubleshooting\nCleanup\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
41. Clean Up Application Resources Only<\/h1>\n\n\n\n
Switch to lab-web<\/code>:<\/p>\n\n\n
oc project lab-web\n<\/code><\/span><\/pre>\n\n\n
Delete HTTPD app:<\/p>\n\n\n
oc delete<\/span> all -l app=my-httpd\noc delete<\/span> route my-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Delete Node.js app:<\/p>\n\n\n
oc delete<\/span> all -l app=nodejs-ex\noc delete<\/span> route nodejs-ex\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Delete PVC demo:<\/p>\n\n\n
oc delete<\/span> deployment pvc-demo\noc delete<\/span> pvc data-pvc\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Delete manual app:<\/p>\n\n\n
oc delete<\/span> deployment manual-httpd\noc delete<\/span> svc manual-httpd\noc delete<\/span> route manual-httpd\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Delete ConfigMaps and Secrets:<\/p>\n\n\n
oc delete<\/span> configmap app-config httpd-index\noc delete<\/span> secret app-secret\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Switch to lab-batch<\/code>:<\/p>\n\n\n
oc project lab-batch\n<\/code><\/span><\/pre>\n\n\n
Delete batch resources:<\/p>\n\n\n
oc delete<\/span> jobs --all\noc delete<\/span> cronjobs --all\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
42. Clean Up Projects<\/h1>\n\n\n\n
Delete both lab projects:<\/p>\n\n\n
oc delete<\/span> project lab-web\noc delete<\/span> project lab-batch\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Verify:<\/p>\n\n\n
oc projects\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
43. Final One-Page Command Summary<\/h1>\n\n\n
crc status\neval<\/span> $(crc oc-env)\ncrc console --credentials\noc login -u developer -p developer https:\/\/api.crc.testing:6443<\/span>\n\noc new<\/span>-project lab-web\noc new<\/span>-project lab-batch\n\noc project lab-web\noc get imagestreams -n openshift\noc new<\/span>-app --name=my-httpd --image-stream=openshift\/httpd\noc get all\noc expose svc\/my-httpd\noc get route my-httpd\ncurl http:\/\/$(oc get route my-httpd -o jsonpath='{.spec.host}')<\/span>\n\noc scale deployment\/my-httpd --replicas=3<\/span>\noc get pods\noc scale deployment\/my-httpd --replicas=1<\/span>\n\noc logs deployment\/my-httpd\noc rsh deployment\/my-httpd\n\noc create configmap app-config --from-literal=APP_MODE=training\noc set env deployment\/my-httpd --from=configmap\/app-config\n\noc create secret generic app-secret --from-literal=DB_PASSWORD='redhat123'<\/span>\noc set env deployment\/my-httpd --from=secret\/app-secret --prefix=SECRET_\n\noc new<\/span>-app https:\/\/github.com\/sclorg\/nodejs-ex --name=nodejs-ex<\/span>\noc logs -f bc\/nodejs-ex\noc expose svc\/nodejs-ex\ncurl http:\/\/$(oc get route nodejs-ex -o jsonpath='{.spec.host}')<\/span>\n\noc project lab-batch\noc create job hello-job --image=registry.access.redhat.com\/ubi9\/ubi-minimal -- \/bin\/sh -c 'date; echo hello'<\/span>\noc logs job\/hello-job\n\noc create cronjob hello-cron --image=registry.access.redhat.com\/ubi9\/ubi-minimal --schedule='*\/1 * * * *'<\/span> -- \/bin\/sh -c 'date; echo cron'<\/span>\noc get cronjob\noc get jobs\n\noc project lab-web\noc get storageclass\noc apply -f pvc.yaml\noc get pvc\noc apply -f pvc-demo.yaml\n\noc get pods -A\noc get route -A\noc get all -A | grep httpd\n\noc delete project lab-web lab-batch\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
44. Key Mental Model<\/h1>\n\n\n
Project\n  contains application resources\n\nImageStream\n  tracks image versions\n\nDeployment\n  defines desired application state\n\nReplicaSet\n  maintains replicas\n\nPod\n  runs container\n\nService\n  gives stable internal access\n\nRoute\n  gives external browser access\n\nBuildConfig\n  defines how source code becomes an image\n\nJob\n  runs one-time task\n\nCronJob\n  runs scheduled task\n\nPVC\n  requests persistent storage\n\nConfigMap\n  stores non-sensitive config\n\nSecret\n  stores sensitive config\n<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
45. Recommended Teaching Order<\/h1>\n\n\n\n
Use this order in class:<\/p>\n\n\n
1.<\/span> Login and CLI setup\n2.<\/span> Projects and switching\n3.<\/span> HTTPD app from<\/span> ImageStream\n4.<\/span> Service and Route\n5.<\/span> Troubleshooting route\/service\/pod\n6.<\/span> Deploy same app in<\/span> second project\n7.<\/span> Scaling and logs\n8.<\/span> ConfigMap\n9.<\/span> Secret\n10.<\/span> Build from<\/span> Git\n11.<\/span> Jobs\n12.<\/span> CronJobs\n13.<\/span> PVC\/PV\n14.<\/span> YAML and rollout\n15.<\/span> Cleanup\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
46. Important Notes for Students<\/h1>\n\n\n
Do<\/span> not create too many projects without naming discipline.\nAlways check oc project.\nAlways use<\/span> oc<\/span> get<\/span> route<\/span> -A<\/span> if<\/span> you<\/span> cannot<\/span> find<\/span> your<\/span> URL<\/span>.\nA<\/span> Service<\/span> is<\/span> internal<\/span>.\nA<\/span> Route<\/span> is<\/span> external<\/span>.\nA<\/span> Pod<\/span> can<\/span> die<\/span> and<\/span> come<\/span> back<\/span>.\nA<\/span> Deployment<\/span> keeps<\/span> the<\/span> app<\/span> alive<\/span>.\nA<\/span> PVC<\/span> keeps<\/span> data<\/span> beyond<\/span> pod<\/span> restart<\/span>.\nA<\/span> Job<\/span> finishes<\/span>.\nA<\/span> CronJob<\/span> repeats<\/span>.\nA<\/span> ConfigMap<\/span> is<\/span> not<\/span> for<\/span> passwords<\/span>.\nA<\/span> Secret<\/span> is<\/span> for<\/span> sensitive<\/span> data<\/span>, but<\/span> production<\/span> secret<\/span> security<\/span> needs<\/span> RBAC<\/span> and<\/span> encryption<\/span>.\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
47. Best Beginner Troubleshooting Command Set<\/h1>\n\n\n\n
When lost, run:<\/p>\n\n\n
oc project\noc get<\/span> all\noc get<\/span> route\noc get<\/span> endpoints\noc get<\/span> events --sort-by=.lastTimestamp\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
When project confusion happens, run:<\/p>\n\n\n
oc get all -A | grep <app-name<\/span>><\/span>\noc get route -A | grep <app-name<\/span>><\/span>\n<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
When app does not open, run:<\/p>\n\n\n
oc get route\noc describe route <route-name<\/span>><\/span>\noc get svc\noc describe svc <service-name<\/span>><\/span>\noc get endpoints <service-name<\/span>><\/span>\noc get pods\noc logs deployment\/<deployment-name<\/span>><\/span>\n<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
48. Final Outcome<\/h1>\n\n\n\n
After completing this lab, students should be comfortable with:<\/p>\n\n\n
OpenShift Local daily workflow\noc CLI basics\nProject switching\nApplication deployment\nService and Route access\nBuild from<\/span> source\nDeployment lifecycle\nConfig and Secret injection\nBatch and scheduled jobs\nPersistent storage basics\nTroubleshooting\nCleanup\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
This is the right foundation before moving into:<\/p>\n\n\n
Helm\nKustomize\nOperators\nOpenShift Pipelines\nGitOps\nMonitoring\nIngress\/TLS\nRBAC deep dive\nNetworkPolicy\nStateful applications\nProduction OpenShift architecture\n<\/code><\/span><\/pre>","protected":false},"excerpt":{"rendered":"
How to install oc? OpenShift: How to Install OpenShift CLI oc How to login? Login to the Openshift using Web Console and CLI using oc Copy the admin… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[5153],"tags":[],"class_list":["post-49104","post","type-post","status-publish","format-standard","hentry","category-openshift"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=49104"}],"version-history":[{"count":10,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49104\/revisions"}],"predecessor-version":[{"id":77244,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49104\/revisions\/77244"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=49104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=49104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=49104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}