EX280-Certified OpenShift Administrator Exam Prep Course

Explore the OpenShift web console to manage and configure clusters, switch between administrator and developer perspectives, access projects, and perform tasks like monitoring, resources, and settings.

Master the OpenShift command line interface to login, create projects, view status, deploy apps, inspect pods and logs. Use help, application programming interface resources, and admin commands to manage clusters.

Learn to query, format, and filter OpenShift resources with the OC tool, retrieving pod details, labels, and metadata using YAML or JSON outputs.

Master importing, exporting, and configuring Kubernetes resources in OpenShift using OC apply for declarative updates, OC get -o YAML for exports, and oak extract for secrets and config maps.

Learn to locate and examine container images in OpenShift using image streams and OC commands. Explore image metadata, registry locations (including Quay.io or Docker Hub), and extracting image contents.

Create and delete projects in OpenShift to organize and isolate resources, using the CLI or web console, with projects acting as metadata-enriched Kubernetes namespaces.

Learn to inspect OpenShift resources and monitor cluster health using OC commands (login, get, describe, status) and OC adm, across namespaces and via the web console.

Learn to view and stream OpenShift logs with oc logs using -f, tail, and version filters across pods, builds, deployments, and nodes, and diagnose non-root permission errors in nginx deployments.

Assess the health of an OpenShift cluster by monitoring nodes, etcd, and operators, using commands like oc get nodes, oc adm top nodes, and oc describe node.

Troubleshoot OpenShift container port and pod issues using logs, describe pod, and events to fix image pull failures, resource limits, and scheduling failures, with etcd and network checks.

Navigate and apply OpenShift documentation to install, configure, and administer clusters using docs.openshift.com and OC commands. Deploy applications via developer guides and quickstarts in the documentation.

Configure the http password identity provider in OpenShift, create a password file, and update OAuth to use the secret via web console or CLI. Verify logins and basic access control.

Learn how OpenShift manages regular, system, and service account users and delete a user using the HTTP password identity provider by updating the password file and rotating secrets with OC.

Modify existing user passwords in OpenShift by updating the hashed password identity provider's ht password file and secret, then verify login via the HTTP password option after OAuth pods restart.

Learn to create and manage OpenShift groups, assign group-based roles across projects, and use oc adm groups commands to add or remove users, including default virtual groups.

Master role based access control in OpenShift by modifying user and group permissions, assigning roles, and using role bindings to define permissions on cluster and project resources.

Configure project quotas in OpenShift to cap CPU, memory, and storage, manage object counts, and apply quotas with OC commands and YAML definitions for fair resource allocation.

Explore cluster resource quotas in OpenShift to manage and limit cross-project resource usage, leveraging annotation and label selection to apply fair, multi-project limits across production environments.

Configure project limit ranges to enforce minimum and maximum cpu, memory, and storage requests within a namespace, set default requests and limits, and maintain a resource request/limit ratio.

Configure OpenShift project templates to automatically apply resource quotas and limit ranges to new projects, ensuring consistent governance across development and QA teams.

Configure an HTTP password identity provider named Local Users in OpenShift. Create secret X 280 TX Pass Secret, add users to the TX password file, apply configuration, and verify logins.

Configure an htpasswd identity provider in OpenShift by creating a secret with user credentials, updating the OAuth configuration to use a local users identity provider, and validating logins.

Master role-based access controls in OpenShift by configuring cluster-level permissions in a hands-on lab. Ensure Miriam is the only user with cluster modification permissions within a 15-minute task.

Configure cluster permissions in OpenShift by granting Miriam the cluster admin role and giving Jane self-provisioning rights. Remove kube admin and unnecessary bindings, then verify access for all users.

Configure project permissions in OpenShift by creating projects and assigning admins and view or modify rights through role bindings. Manage role based access controls across Avalon, Atlantis, Garuda, and Cieren.

Configure OpenShift project permissions using a for loop and OC new project command. Grant Jane admin, John view, and Alice edit, then verify access across Avalon, Atlantis, Garuda, and Siren.

Create heroes and Wizards groups in OpenShift, add Alice and Ian, then grant admins for heroes on Neptune, Siren, Triton, Nagus, and grant Wizards view Atlantis and edit Siren.

Create the heroes and Wizards groups, add Alice and Ian Arthur, and assign admin, view, and edit roles across Neptune, Siren, Triton, and Atlantis projects. Verify permissions with OC commands.

Create a custom role View Nagas in the Nagas project with read-only access to pods, deployments, image streams, get, list, and watch; assign it to John and verify access.

Create a custom Venegas role in the Nagguez project with get, list, and watch permissions. Bind it to John, verify the binding, and confirm John can view resources.

Configure resource quotas in OpenShift by creating a Neptune quota for the Neptune project with specific constraints in a 15-minute lab exercise.

Configure and verify OpenShift resource quotas at the project level, defining memory and CPU limits in YAML, testing pod limits and per-pod resources to ensure fair cluster usage.

Configure a limit range named Avalon constraints in the Avalon project to enforce resource limits, then verify by running a pod that exceeds the default memory request within 15 minutes.

Configure OpenShift resource limits with a limit range in the Avalon project, defining per-pod and per-container CPU and memory constraints, using YAML and OC create.

Deploy apps in OpenShift from resource manifests for pods, services, deployments, and routes written in yaml or json, api version, kind, metadata, and spec, using apply, diff, and rollout restart.

Explore three deployment methods in OpenShift: deploying from container images with the oc new-app command, using templates with parameters and labels, and deploying via helm charts.

Deploy OpenShift jobs to run finite, one-time tasks by creating YAML manifests and using oc create. Monitor status, manage failures, and control completion with parallelism, completions, and TTL cleanup.

Manage OpenShift application deployments using rolling, update, and recreate strategies; roll out updates, scale deployments, monitor status, and perform safe rollbacks with history and undo commands.

Master replica sets in OpenShift to maintain the desired number of identical pods, scale with ease, and enable seamless updates and rolling upgrades through deployments' higher-level orchestration.

Define labels and selectors in OpenShift to organize pods, deployments, and services by key-value pairs, use selectors to query resources, and update labels for environments, tiers, and versions.

Explore OpenShift services, including cluster IP, node port, load balancer, and external name, to expose and load balance pods, enable service discovery, and support front-end back-end decoupling.

Explore how OpenShift exposes http and non-http applications to external access using routes, path-based routing, and load balancers. Learn nodeport, custom hostname, and a hands-on demo.

Learn how MetalLB provides a load balancer for bare-metal OpenShift clusters with IP address pools and external IPs, and how Multus enables multiple network interfaces on pods via network attachments.

Explore how OpenShift secrets securely manage passwords, api keys, and certificates, decoupling sensitive data from code and enabling pods to access secrets via environment variables or mounted files.

Explore OpenShift configuration maps, store non-sensitive data as key-value pairs, and inject them into pods as environment variables, mounted files, or command line arguments using oc commands.

Provision and manage persistent storage in OpenShift with persistent volumes and claims, enabling data persistence beyond pod lifecycles and binding PVCs to PVs for pod access.

Define and use storage classes in OpenShift to provision persistent storage via persistent volumes and persistent volume claims, with provisioners, parameters, and reclaim policies for varied performance needs.

Explore how stateful sets in OpenShift manage stateful applications with stable identities and non-shared storage, provisioning unique per-pod persistent volumes via a headless service and ordered deployments.

Understand OpenShift networking components, including the cluster network operator and DNS operator, and learn how ovn-k enables pod and service IP assignment and cluster DNS names.

Secure external and internal traffic in OpenShift by configuring TLS certificates across edge, passthrough, and re-encrypt routes, using self-signed certs and openssl, and testing with curl.

Explore controlling cluster network ingress in OpenShift by using standard Kubernetes ingress objects alongside OpenShift routes, manage ingress controllers with the ingress operator, and expose applications to external traffic.

OpenShift health probes monitor container health and readiness via liveness and readiness checks, using http get, tcp socket, and exec probes to restart containers and manage traffic.

Master resource requests and limits in OpenShift to allocate CPU and memory for containers, using pod and deployment specs, OC set resources, and monitoring with Prometheus and Grafana.

Scale applications in OpenShift by manual scaling and horizontal pod autoscaling, using CPU utilization targets and custom metrics, with a minimum of one replica and up to ten replicas.

Master OpenShift image streams as an abstraction over the internal registry, using CLI commands to create, tag, and manage stream tags, history, and image lookup for Kubernetes.

Identify container image references using tags and digests in OpenShift. Learn how mutable tags differ from immutable digests to improve deployment reliability and security.

Learn how image change triggers automate deployments in OpenShift, updating apps when image streams latest tag changes, using OC set triggers and deployment configurations.

Roll back failed deployments in OpenShift by rolling back to a previous stable revision, updating the deployment configuration, and replacing pods with the selected revision.