Openshift Flashcards

Openshift Interview Questions

1
Q

What is OpenShift online

A

It is public PaaS of OpenShift community using which one can build and deploy its application on public cloud. It is red hat hosting platform

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is OpenShift ?

A

OpenShift is a cloud development Platform as a Service.It is an open source development platform by which developer develops and deploys application on cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is OpenShift container registry ?

A

Its an inbuilt storage that is used to store Docker images.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Routes in OpenShift?

A

In OpenShift Routes is a way to externalize the services by providing externally reachable hostname.In OpenShift routes are created using routers developed by admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How API are authenticated in OpenShift ?

A

In OpenShift master has inbuilt OAuth server which generates tokens that can be used for API authentication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What type of build strategies are used in OpenShift?

A
  • Docker Strategy
  • Custom Strategy
  • Pipeline Strategy
  • Source-to-image Strategy
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Source-to-image Strategy ?

A

In this from source code images are created.In Source-to-image strategy source code is downloaded and compiled and deployed in same container.From same code image is created

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the identity providers in OAuth?

A
  • HTPassword (Configure the htpasswd identity provider to validate user names and passwords against a flat file generated using htpasswd.)
  • LDAP
  • Basic Authentication
  • GitHub
  • Google
  • OpenID Connect
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Downward API in OpenShift?

A

The Downward API is a mechanism whereby pods can retrieve their metadata without having to call into the Kubernetes API. The following metadata can be retrieved and used to configure the running pods:

  • Labels
  • Annotations
  • Pod name, namespace, and IP address
  • Pod CPU/memory request and limit information
  • Certain information can be mounted into the pod as an environment variable,whereas other information can be accessed as files within a volume.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Build Configurations?

A

Builds are configured and controlled by build configuration resources. Build configurations contain the details of the chosen build strategy as well as the source of the developer-supplied artifacts such as Git location, the details of the builder image to be used, and the output image.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to run Openshift on AWS?

A

Using Red Hat OpenShift Service on AWS (ROSA)
Prerequisites:
- An AWS account.
- A Red Hat account to access OpenShift services.

Installer-Provisioned Infrastructure (IPI)
Prerequisites:
- An AWS account with permissions to create resources.
- A valid OpenShift pull secret from the Red Hat OpenShift Cluster Manager.

User-Provisioned Infrastructure (UPI)
Prerequisites:
Similar to IPI but requires more manual setup of infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How Openshift integrate with AWS service using Red Hat OpenShift Service on AWS (ROSA)

A

Deployment Options

AWS-Specific Services
OpenShift on AWS can leverage AWS-specific services like Amazon RDS for databases, S3 for storage, and Route 53 for DNS management. Other cloud providers may offer similar services but with different integrations and capabilities

Managed Service
Availability:
The Red Hat OpenShift Service on AWS (ROSA) is a fully managed service that simplifies installation and management, which may not be as streamlined on other platforms without similar managed offerings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

While install Openshift on AWS, what’s a difference in ROSA and other installation method like IPI and UPI

A

Infrastructure Management
## Control Plane Management
In ROSA, Red Hat manages the control plane, allowing users to focus on application deployment rather than infrastructure management. In contrast, on other platforms or in self-managed installations (like IPI or UPI), users may need to configure and manage the control plane themselves

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How to run Openshift on Azure

A

Using Azure Red Hat OpenShift (ARO)
Prerequisites:
- An Azure account with sufficient permissions.
- A Red Hat account for accessing OpenShift services.

Manual Installation Using OpenShift Installer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How are build-in operators available in OpenShift

A

All the Openshift components are installed via the Operators
Several common ones are
1. OpenShift GitOps Operator
- Utilizes Argo CD for managing infrastructure and application configurations using GitOps principles. It allows for the creation of templates for common configurations and automates synchronization with secrets managers.

  1. Service Mesh Operator
    • Based on the Istio project, this Operator helps manage the communication between microservices in a distributed application. It enables service discovery, load balancing, authentication, and monitoring, making it easier to manage complex application architectures[1].
  2. OpenShift Pipelines Operator
    • Implements CI/CD capabilities within OpenShift by providing tools for building, deploying, and managing pipelines[1].
  3. OpenShift API for Data Protection (OADP) Operator
    • Leverages the Velero project to facilitate backup and restore operations for applications running on OpenShift. It is designed to handle the specific needs of OpenShift environments[1].
  4. Elasticsearch Operator
    • Automates the deployment and management of Elasticsearch clusters within OpenShift, ensuring that they are configured correctly and can scale as needed
  5. Prometheus Operator
    • Simplifies the deployment and management of Prometheus monitoring instances, allowing users to easily monitor their applications and infrastructure
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the advantages of using OpenShift over AWS EKS or Azure AKS

A
  1. UI
  2. CI/CD
  3. Oberservability
  4. Security
  5. Compliance
17
Q

How to compare Red Hat Advanced Cluster Security for Kubernetes (ACS) to Kyverno

A

Red Hat Advanced Cluster Security (RHACS)
Purpose
1. Comprehensive security for containerized applications throughout their lifecycle.
2. End-to-end security including build, deploy, and runtime phases.
3. Includes components like Central, Scanner, Sensor, Admission Controller, and Collector for monitoring and enforcement.
4. Provides a centralized dashboard for managing security across multiple clusters.

Kyverno
Purpose
1. Policy management for Kubernetes resources.
2. Primarily focused on admission control and resource management
3. Utilizes Kubernetes admission controllers to validate and mutate resources.
4. No dedicated UI; operates through Kubernetes API interactions.

Compliance
- Enforces policies at runtime based on predefined rules and monitors for compliance violations
- Offers compliance auditing with interactive dashboards for various standards (NIST, PCI, HIPAA)

Kyverno
- Validates and mutates resources during creation or updates through admission webhooks
- Lacks built-in compliance auditing capabilities but can enforce policies related to compliance.

18
Q

How do you compare Rancher to Openshift?

A

1 .Ease of Use
Rancher offers a user-friendly interface ideal for beginners, while OpenShift has a steeper learning curve due to its extensive features tailored for enterprise users.

  1. Integration Capabilities
    Rancher supports a wide range of third-party tools and cloud providers, whereas OpenShift integrates deeply with Red Hat products and offers numerous Operators for enhanced functionality.
    Rancher - Application Catalogs - Install method: Helm
    Openshift - Openshift Operator Hub - Install method: Operator
  2. Multi-cluster Management
    Rancher excels in managing multiple Kubernetes clusters from a single interface, while OpenShift also supports this but may be more complex due to its enterprise focus.
  3. Security and Compliance
    OpenShift provides advanced security features and compliance certifications, making it suitable for organizations with stringent security requirements, while Rancher offers solid security but may need additional configurations.
  4. Pricing and Licensing: Rancher is open-source and free to use with optional paid support, whereas OpenShift typically involves higher costs due to its enterprise nature but includes integrated features that justify the investment in complex environments.
    OpenShift opensource version is as OKD - Origin Kubernetes Distribution