Red Hat OpenShift - Revision history

Dracula: /* Important Resource Types */

2026-08-05T21:11:49Z

Important Resource Types

@@ Line 119: / Line 119: @@
+|
 |oc expose
+|
 |}
@@ Line 169: / Line 188: @@
+|
 |No
 |-
 |Secret
@@ Line 260: / Line 284: @@
 * Load balance by default but can be configured with sticky sessions using cookies
 * Routes are probably fine for most use cases
 == Networking ==

2026-08-05T18:25:05Z

Routes and Gateways

← Older revision		Revision as of 18:25, 5 August 2026
Line 259:		Line 259:
	* More advanced than services but require HTTP		* More advanced than services but require HTTP
	* Load balance by default but can be configured with sticky sessions using cookies		* Load balance by default but can be configured with sticky sessions using cookies
			* Routes are probably fine for most use cases

	== Networking ==		== Networking ==

2026-08-05T18:07:07Z

Routes

← Older revision		Revision as of 18:07, 5 August 2026
Line 254:		Line 254:
	\|}		\|}

	=== Routes ===		=== Routes and Gateways ===
			* HTTP stuff ONLY
			* Gateways are basically Ingress 2.0
			* More advanced than services but require HTTP
			* Load balance by default but can be configured with sticky sessions using cookies

	== Networking ==		== Networking ==

2026-08-05T17:13:22Z

Important Resource Types

@@ Line 189: / Line 189: @@
+|
 |No
 |}

2026-08-05T16:01:25Z

Services

← Older revision		Revision as of 16:01, 5 August 2026
Line 243:		Line 243:
	\|No external access (but not designed for it)		\|No external access (but not designed for it)
	\|}		\|}

			=== Routes ===

	== Networking ==		== Networking ==

2026-08-05T15:51:05Z

Services

← Older revision		Revision as of 15:51, 5 August 2026
Line 211:		Line 211:

	Service types:		Service types:
			{\| class="wikitable"
			\|+
			!Type
			!Description
			!Benefits
			!Drawbacks
			\|-
			\|ClusterIP
			\|Default; cluster-internal IP address
			\|Security
			\|No external access
			\|-
			\|LoadBalancer
			\|External IP address
			\|External access
			\|Potentially high-cost; extra security concerns
			\|-
			\|ExternalIP
			\|'''Do not use unless specific requirements;''' Virtual, external IP assigned to a node with failover
			\|External access
			\|Security concerns; conflicts with most security policies
			\|-
			\|NodePort
			\|Opens a specific port on each node between 30000 and 32767
			\|External access
			\|Require direct network connection to nodes; security concerns
			\|-
			\|ExternalName
			\|Map service to external DNS; does not provide external access
			\|
			\|No external access (but not designed for it)
			\|}

	== Networking ==		== Networking ==

2026-08-05T15:43:12Z

Services

← Older revision		Revision as of 15:43, 5 August 2026
Line 208:		Line 208:
	* Services use `selector` fields to identify which pods are included. The pods themselves use `labels`.		* Services use `selector` fields to identify which pods are included. The pods themselves use `labels`.
	* Defaults to `svc-name.project-name.svc.cluster.local`		* Defaults to `svc-name.project-name.svc.cluster.local`
			* Load balancing is round-robin by default

			Service types:

	== Networking ==		== Networking ==

2026-08-05T15:41:07Z

Pod Networking

← Older revision		Revision as of 15:41, 5 August 2026
Line 188:		Line 188:
	\|IPs or FQDNs used by a service		\|IPs or FQDNs used by a service
	\|		\|
	\|		\|No
	\|}		\|}

Line 207:		Line 207:
	* Fixes issues of direct-to-IP communication by adding a stable proxy-IP address that will update dynamically as the backing pods come and go		* Fixes issues of direct-to-IP communication by adding a stable proxy-IP address that will update dynamically as the backing pods come and go
	* Services use `selector` fields to identify which pods are included. The pods themselves use `labels`.		* Services use `selector` fields to identify which pods are included. The pods themselves use `labels`.
			* Defaults to `svc-name.project-name.svc.cluster.local`

	== Networking ==		== Networking ==

2026-08-05T15:39:49Z

Pods

← Older revision		Revision as of 15:39, 5 August 2026
Line 74:		Line 74:
	\|Requires the rsync binary on both host and pod container		\|Requires the rsync binary on both host and pod container
	\|-		\|-
	\|		\|oc expose
	\|		\|Create a service for a deployment
	\|		\|
	\|-		\|-
Line 116:		Line 116:
	\|Simpler		\|Simpler
	\|-		\|-
			\|oc create service
	\|		\|
	\|		\|oc expose
	\|
	\|		\|
	\|}		\|}
Line 148:		Line 148:
	\|Create a set of unique pods		\|Create a set of unique pods
	\|Databases		\|Databases
	\|		\|No
	\|-		\|-
	\|DaemonSet		\|DaemonSet
Line 185:		Line 185:
	\|No		\|No
	\|-		\|-
	\|		\|EndpointSlices
	\|		\|IPs or FQDNs used by a service
	\|		\|
	\|		\|
Line 196:		Line 196:
	* Can include multiple containers		* Can include multiple containers
	* Containers within the pod can share storage/networking		* Containers within the pod can share storage/networking

			=== Pod Networking ===

			* Every container in a pod shares IP and MAC addresses
			* Every container in a pod can access other containers via loopback addresses (localhost)
			* By default, every pod can communicate with every other pod in the cluster

			=== Services ===

			* Fixes issues of direct-to-IP communication by adding a stable proxy-IP address that will update dynamically as the backing pods come and go
			* Services use `selector` fields to identify which pods are included. The pods themselves use `labels`.

	== Networking ==		== Networking ==

2026-08-04T19:36:26Z

Important Resource Types

← Older revision		Revision as of 19:36, 4 August 2026
Line 137:		Line 137:
	\|pod		\|pod
	\|One or more containers; represents a single app		\|One or more containers; represents a single app
	\|~~everything~~		\|
	\|No		\|No
	\|-		\|-
	\|~~deployment~~		\|Deployment
	\|Represents pod templates along with replica sets		\|Represents pod templates along with replica sets
	\|Deploying pods with replicas		\|Deploying pods with replicas
			\|No
			\|-
			\|StatefulSet
			\|Create a set of unique pods
			\|Databases
			\|
			\|-
			\|DaemonSet
			\|Runs copies of pods on every node
			\|storage daemons, log collectors, monitoring
	\|No		\|No
	\|-		\|-
Line 163:		Line 173:
	\|Configs or other data that needs to be kept secure		\|Configs or other data that needs to be kept secure
	\|SSH keys, API keys, OAuth tokens, passwords		\|SSH keys, API keys, OAuth tokens, passwords
			\|No
			\|-
			\|Job
			\|One-off tasks
			\|Initialize database, create/restore from backup
			\|No
			\|-
			\|CronJob
			\|Scheduled tasks
			\|Backups
	\|No		\|No
	\|-		\|-
Line 176:		Line 196:
	* Can include multiple containers		* Can include multiple containers
	* Containers within the pod can share storage/networking		* Containers within the pod can share storage/networking

			== Networking ==

	=== Anki Questions ===		=== Anki Questions ===