Guided Exercise: Reproducible Deployments with OpenShift Image Streams

Deploy an application that references container images indirectly by using image streams.

Outcomes

You should be able to create image streams and image stream tags, and deploy applications that use image stream tags.

As the student user on the workstation machine, use the lab command to prepare your system for this exercise.

This command ensures that all resources are available for this exercise. It also creates the updates-imagestreams project and the /home/student/DO180/labs/updates-imagestreams/resources.txt file. The resources.txt file contains the name of the images and some commands that you use during the exercise. You can use the file to copy and paste these image names and commands.

[student@workstation ~]$ lab start updates-imagestreams

Procedure 7.3. Instructions

Log in to the OpenShift cluster as the developer user with the developer password. Use the updates-imagestreams project.

 [student@workstation ~]$ oc login -u developer -p developer \
   https://api.ocp4.example.com:6443
 Login successful.
 ...output omitted...

Set the updates-imagestreams project as the active project.

 [student@workstation ~]$ oc project updates-imagestreams
 ...output omitted...

Create the versioned-hello image stream and the v1.0 image stream tag from the registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0 image.

Use the oc create is command to create the image stream.

 [student@workstation ~]$ oc create is versioned-hello
 imagestream.image.openshift.io/versioned-hello created

Use the oc create istag command to create the image stream tag.

 [student@workstation ~]$ oc create istag versioned-hello:v1.0 \
   --from-image registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0
 imagestreamtag.image.openshift.io/versioned-hello:v1.0 created

Enable image stream resolution for the versioned-hello image stream so that Kubernetes resources in the current project can use it.
1. Use the oc set image-lookup command to enable image lookup resolution.
```
 [student@workstation ~]$ oc set image-lookup versioned-hello
 imagestream.image.openshift.io/versioned-hello image lookup updated
```
2. Run the oc set image-lookup command without any arguments to verify your work.
```
 [student@workstation ~]$ oc set image-lookup
 NAME             LOCAL
 versioned-hello  true
```

Review the image stream and confirm that the image stream tag refers to the source image by its SHA ID. Verify that the source image in the registry.ocp4.example.com:8443 registry has the same SHA ID.

Retrieve the details of the versioned-hello image stream.

NOTE

To improve readability, the instructions truncate the SHA-256 strings.

 [student@workstation ~]$ oc describe is versioned-hello
 Name:           versioned-hello
 Namespace:      updates-imagestreams
 Created:        7 minutes ago
 ...output omitted...

 v1.0
   tagged from registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0

   * registry.ocp4.example.com:8443/.../versioned-hello@sha256:66e0...105e
       7 minutes ago

Use the oc image info command to query the image from the classroom container registry. The SHA image ID is the same as the one from the image stream tag.

 [student@workstation ~]$ oc image info \
   registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0
 Name:          registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0
 Digest:        sha256:66e0...105e
 Media Type:    application/vnd.docker.distribution.manifest.v2+json
 ...output omitted...

Create a deployment named version that uses the versioned-hello:v1.0 image stream tag.

Use the oc create deployment command to create the object. Ignore the warning message.

 [student@workstation ~]$ oc create deployment version --image versioned-hello:v1.0
 Warning: would violate PodSecurity "restricted:v1.24":
  ...output omitted...
 deployment.apps/version created

Wait for the pod to start. You might have to rerun the command several times for the pod to report a Running status. The name of the pod on your system probably differs.
```
 [student@workstation ~]$ oc get pods
 NAME                       READY   STATUS    RESTARTS   AGE
 version-744bf7694b-bzhd2   1/1     Running   0          2m11s
```

Confirm that both the deployment and the pod refer to the image by its SHA ID.
1. Retrieve the image that the deployment uses. The deployment refers to the image from the source registry by its SHA ID. The v1.0 image stream tag also points to that SHA image ID.
```
 [student@workstation ~]$ oc get deployment -o wide
 ... IMAGES ...
 ... registry.ocp4.example.com:8443/.../versioned-hello@sha256:66e0...105e ...
```
2. Retrieve the image that the pod is using. The pod is also referring to the image by its SHA ID.
```
 [student@workstation ~]$ oc get pod version-744bf7694b-bzhd2 \
   -o jsonpath='{.spec.containers[0].image}{"\n"}'
 registry.ocp4.example.com:8443/redhattraining/versioned-hello@sha256:66e0...105e
```

Finish

On the workstation machine, use the lab command to complete this exercise. This step is important to ensure that resources from previous exercises do not impact upcoming exercises.

[student@workstation ~]$ lab finish updates-imagestreams

Guided Exercise: Reproducible Deployments with OpenShift Image Streams

Comments

Guided Exercise Red Hat Openshift Administration I

Guided Exercise: Automatic Image Updates with OpenShift Image Change Triggers

More from this blog

Running the Traefik 3 Hardened Image (nonroot) on Podman: 3 Problems and Their Fixes

Why I Didn’t Trust Bitcoin at First — Until I Found a Way to Solve Its Biggest Problem

How to Create a Free Email Account with a Custom Domain Name in Zoho.com

How to Manage Your Domain for Free Using Cloudflare

How to Buy a Domain Name from IDCloudHost.com

NOTE

Command Palette

Comments

Guided Exercise Red Hat Openshift Administration I

Guided Exercise: Automatic Image Updates with OpenShift Image Change Triggers

More from this blog

NOTE