Guided Exercise: Reproducible Deployments with OpenShift Image Streams

Deploy an application that references container images indirectly by using image streams.

Outcomes

You should be able to create image streams and image stream tags, and deploy applications that use image stream tags.

As the student user on the workstation machine, use the lab command to prepare your system for this exercise.

This command ensures that all resources are available for this exercise. It also creates the updates-imagestreams project and the /home/student/DO180/labs/updates-imagestreams/resources.txt file. The resources.txt file contains the name of the images and some commands that you use during the exercise. You can use the file to copy and paste these image names and commands.

[student@workstation ~]$ lab start updates-imagestreams

Procedure 7.3. Instructions

1. Log in to the OpenShift cluster as the developer user with the developer password. Use the updates-imagestreams project.

   1. Log in to the OpenShift cluster.

       [student@workstation ~]$ oc login -u developer -p developer \
         https://api.ocp4.example.com:6443
       Login successful.
       ...output omitted...
      

   2. Set the updates-imagestreams project as the active project.

       [student@workstation ~]$ oc project updates-imagestreams
       ...output omitted...
      

2. Create the versioned-hello image stream and the v1.0 image stream tag from the registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0 image.

   1. Use the oc create is command to create the image stream.

       [student@workstation ~]$ oc create is versioned-hello
       imagestream.image.openshift.io/versioned-hello created
      

   2. Use the oc create istag command to create the image stream tag.

       [student@workstation ~]$ oc create istag versioned-hello:v1.0 \
         --from-image registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0
       imagestreamtag.image.openshift.io/versioned-hello:v1.0 created
      

3. Enable image stream resolution for the versioned-hello image stream so that Kubernetes resources in the current project can use it.

   1. Use the oc set image-lookup command to enable image lookup resolution.

       [student@workstation ~]$ oc set image-lookup versioned-hello
       imagestream.image.openshift.io/versioned-hello image lookup updated
      

   2. Run the oc set image-lookup command without any arguments to verify your work.

       [student@workstation ~]$ oc set image-lookup
       NAME             LOCAL
       versioned-hello  true
      

4. Review the image stream and confirm that the image stream tag refers to the source image by its SHA ID. Verify that the source image in the registry.ocp4.example.com:8443 registry has the same SHA ID.

   1. Retrieve the details of the versioned-hello image stream.

      NOTE

      To improve readability, the instructions truncate the SHA-256 strings.

       [student@workstation ~]$ oc describe is versioned-hello
       Name:           versioned-hello
       Namespace:      updates-imagestreams
       Created:        7 minutes ago
       ...output omitted...
      
       v1.0
         tagged from registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0
      
         * registry.ocp4.example.com:8443/.../versioned-hello@sha256:66e0...105e
             7 minutes ago
      

   2. Use the oc image info command to query the image from the classroom container registry. The SHA image ID is the same as the one from the image stream tag.

       [student@workstation ~]$ oc image info \
         registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0
       Name:          registry.ocp4.example.com:8443/redhattraining/versioned-hello:v1.0
       Digest:        sha256:66e0...105e
       Media Type:    application/vnd.docker.distribution.manifest.v2+json
       ...output omitted...
      

5. Create a deployment named version that uses the versioned-hello:v1.0 image stream tag.

   1. Use the oc create deployment command to create the object. Ignore the warning message.

       [student@workstation ~]$ oc create deployment version --image versioned-hello:v1.0
       Warning: would violate PodSecurity "restricted:v1.24":
        ...output omitted...
       deployment.apps/version created
      

   2. Wait for the pod to start. You might have to rerun the command several times for the pod to report a Running status. The name of the pod on your system probably differs.

       [student@workstation ~]$ oc get pods
       NAME                       READY   STATUS    RESTARTS   AGE
       version-744bf7694b-bzhd2   1/1     Running   0          2m11s
      

6. Confirm that both the deployment and the pod refer to the image by its SHA ID.

   1. Retrieve the image that the deployment uses. The deployment refers to the image from the source registry by its SHA ID. The v1.0 image stream tag also points to that SHA image ID.

       [student@workstation ~]$ oc get deployment -o wide
       ... IMAGES ...
       ... registry.ocp4.example.com:8443/.../versioned-hello@sha256:66e0...105e ...
      

   2. Retrieve the image that the pod is using. The pod is also referring to the image by its SHA ID.

       [student@workstation ~]$ oc get pod version-744bf7694b-bzhd2 \
         -o jsonpath='{.spec.containers[0].image}{"\n"}'
       registry.ocp4.example.com:8443/redhattraining/versioned-hello@sha256:66e0...105e
      

Finish

On the workstation machine, use the lab command to complete this exercise. This step is important to ensure that resources from previous exercises do not impact upcoming exercises.

[student@workstation ~]$ lab finish updates-imagestreams