you need to adjust your network settings in your install file... see this reference - what your looking for is networking: machineNetwork: cidr: docs.redhat.com/en/documentation/openshift_container_platform_installation/4.17/html/installing_on_azure/installation-config-parameters-azure#installation-configuration-parameters-network_installation-config-parameters-azure

Please it's urgent

@@_l0v3saki you can in the install-config file.

at 21:17 I start to cover some dashboard troubleshooting. unfortunately I'm not running ceph today to provide any further guidance. :(

Here is an example of my ha-proxy configuration github.com/ocpdude/vmware-upi-install/blob/main/haproxy/example-haproxy.cfg For the private CA, there are lots of examples Internet wide, my lab firewall using OpenSSL to generate the certs which I install throughout the lab.

I have a private self-signed certificate domain, anytime I configure something in the lab I use its CA and certificates to use TLS. You may not be using self-signed certificates, so this may not be of need for you.

GHES doesn't offer root access, you have to run sudo commands.

@@OCPdude Thank you. This worked. I am stuck with the LDAP authentication now. I am getting "Invalid LDAP Login credentials" error. User ID and password that is being used is correct. Any suggestions?

@@shahbaazrahi honestly, this could be a few things - a certificate issue, port issue, or dn path issue. docs.github.com/en/[email protected]/admin/identity-and-access-management/using-ldap-for-enterprise-iam/using-ldap#ldap-attributes

@@OCPdude Thanks again. I really appreciate it.

I haven't done it. I suspect you've seen the documentation on GitHub, yeah? docs.github.com/en/[email protected]/packages/working-with-a-github-packages-registry/working-with-the-nuget-registry

Yeah, I've read through all of it. The URLs that they give are not correct for the self hosted GHES. For instance, index.json doesn't seem to exist without subdomain isolation. Then when you turn that on, index.json exists, but the PackagePublish URL described in it doesn't exist.

All of this can be private, I did an older video here studio.kzbin.infoh2QfP9IYzeY/edit that covers it then. Some things may have changed, but it should give you some idea of how to proceed.

Unfortunately no, events that are triggered within GitHub are processed by the Probot app.

@@OCPdude Thanks for the reply. So, I understand that we need to deploy Probot app in separate instance with docker, Kubernetes, etc.,. But we can't run probot app within github right?

@@kalithasanperiyasamy9169 Correct. However, I believe there is a GitHub “action” that can be used. I haven’t investigated it yet.

@@OCPdude Thanks again. I will check Github Action

Thanks for watching!

The user accounts accessible are those OpenShift have access too... whether they're local, ldap, etc. My accounts are linked via ldap integration. 6:52

You can use Ceph with OKD, no problem.

@@OCPdude Do I need to install any driver for that ?

The thing is that I need to create a dynamic storage with elasticsearch and Kibana in my OKD cluster@@OCPdude

@@damianborgi8300 you’ll likely want to leverage the csi drivers. rook.io/docs/rook/v1.12/Getting-Started/intro/ unfortunately (or fortunately) I’m on holiday and unable to find a better link for you. Hopefully with research this will prove helpful.

@@damianborgi8300 maybe this is better github.com/ceph/ceph-csi

Thank you for your questions. I haven't done any videos in awhile,I should get back on this. 😀 1. if you are on GHEC with AAD/Okta integration already, those users will map to the same IdP on GHEC+EMU. For GHES... say LDAP to GHEC(+EMU) w/ AAD/Okta integration, unfortunately managing the user mappings may be a pain. I am not familiar with an easy way to remap user identities, but since users map via their email addresses... if those are the same with LDAP & AAD/Okta, I believe they should align without the need for mannequins. I haven't tested this myself. 2. For a repo-to-repo migration, you could just use the import function GHEC -> GHEC+EMU, or use GEI and then edit your migration script to only include those repo's you wish to migrate. The GEI script would work the same for GHEC as it would for GHES.

@@OCPdude thanks for your quick response. appreciate it. I am in GHEC and using Azure AD with SAML today. Need to migrate to GHEC+EMU. So migrating Org or Repo level using GEI, I will have mannequin users that I will need to reattribute. Got it. Thanks again.

@@MohammadKabir-n4f Since GitHub connects users by email addresses, if you're using the same IdP for each environment - you may not have to deal with mannequins at all.

@@OCPdude That'd be great. Thanks!

Anything captured under 'Events' when you select your MachineSet in OCP?

@@OCPdude I didn't find any events when I select my MachineSet in OCP?

Please try the UPI based install to assign static IP addresses - for IPI, you'd use an CIDR.

Same issue with me are any one know how to solve this @ocpdude

@@mohamedabdallah6493 same issue for me , any suggestion

Did you use the same install directory / files from the previous install? There apparently is some cached data in the directory - so every install/reinstall should be from a clean directory. I'm not sure if this is what happened, but something to try.

@@OCPdude Apparently it seems to be a problem of the enterprise ntbk blocking the redirect oauth I will have to investigate this... another problem of azure removing all resources and automatically recreating the resource (container file) opening cloud shell files are read-only...

It’s local, and a module add on to the gh CLI. It’s easy to install following the documentation in the GEI links provided.

for the demo, it wasn't really needed, but yes, I do generate my own certs & dns entries and accept those along with the ca.

@@OCPdude i mean to get past the grafana error on the ceph dashboard.. looks like you just needed to open a browser on port 3000 and accept the cert.

@@jayarchitect ah, gotcha (good note)

Yes it is.

you can try to remove the key `ceph auth del osd.0` and then `ceph osd rm osd.0`. good luck

Found that the entity (osd.0) key was being stored somewhere and I saw it when i ran ceph auth ls. Now Im having more issues when i run ceph-osd -i 0 --mkfs --mkkey , which create a data store for the OSD. I get error like unable to locate keyring at /var/lib/ceph/osd/ceph-0, although the documentation says to ensure this folder is empty uponing running said command.

Unlike open source Kubernetes, OpenShift platform relies on CoreOS, therefore you must install it from the install scripts. There are 3 options, 1. a single node (master/worker), 2. IPI where a lot of the build is automated for you and 3. UPI where you have the ability to customize your build/deployment. There is also CodeReady Containers (CRC) which is great for small lab environments. In this link, please see "Datacenter or Local" for these options: console.redhat.com/openshift/create/cloud