Re: errors accessing egressnetworkpolicies.network.openshift.io when attempting to export project

2018-06-02 Thread Graham Dumpleton 
You should avoid exporting secrets without being more specific by using a label 
selector or by name. This is because you will pick up special secrets related 
to that project instance. Loading those special secrets into a new project may 
break that project. Similar reason as to why have to be careful with service 
accounts and role bindings. Work out just the extra ones required by the 
application.

This is why should not always export secrets.

Graham

> On 2 Jun 2018, at 16:58, Aleksandar Lazic  wrote:
> 
> Hi.
> 
>> On 02/06/2018 13:18, Graham Dumpleton wrote:
>> For the basic Python application you wouldn't need to export most of
>> those and for some doing so would cause problems when you try to load
>> them again.
>> 
>> For a basic application with no secrets, configmaps or persistent
>> volumes, all you need is:
>> 
>>   oc export is,bc,dc,svc,route -o yaml
> 
> Just to be on the save site please add cm (=configmap ) and secrets to
> the export also, for the future case.
> 
> oc export is,bc,dc,svc,route,cm,secrets -o yaml
> 
>> Do not include pods, replicationcontrollers or endpoints.
>> 
>> You also want to be selective about what you export by using a label
>> selector.
>> 
>>   oc export is,bc,dc,svc,route --selector app=yourappname -o yaml
>> 
>> That way you get just what is necessary for the application.
>> 
>> Before they can be reloaded in a fresh project or OpenShift instance,
>> you would usually need to massage the result, especially fixing up
>> image references and reverting them to image stream references.
>> 
>> Overall you are better off to export as a template and edit the result
>> to create a template you can then deploy multiple times, where the
>> application name is parameterised.
> 
> Full ack, the command looks then like this.
> 
> FYI: As always in yaml **don't use TABS**
> 
> ```
> oc export is,bc,dc,svc,route,cm,secrets -o yaml 
> --as-template=MyPersonalTemplate
> ```
> 
> That's the link to the template doc
> https://docs.openshift.org/3.9/dev_guide/templates.html
> 
>> Graham
> 
> Best regards
> Aleks
> 
>>> On 2 Jun 2018, at 2:01 am, Brian Keyes  wrote:
>>> 
>>> I am attempting to follow these instructions
>>> 
>>> https://docs.openshift.com/container-platform/3.7/day_two_guide/project_level_tasks.html
>>>  
>>> 
>>> 
>>> I want to backup THE sample python app and I created a script like this ( 
>>> from the documentation)
>>> 
>>> 
>>> 
>>> 
>>> $ for object in rolebindings serviceaccounts secrets imagestreamtags 
>>> podpreset cms egressnetworkpolicies rolebindingrestrictions limitranges 
>>> resourcequotas pvcs templates cronjobs statefulsets hpas deployments 
>>> replicasets poddisruptionbudget endpoints
>>> do
>>>  oc export $object -o yaml > $object.yaml
>>> done
>>> 
>>> --
>>> but when I run this I get some access denied errors like this , is this 
>>> saying that the objects I am attempting to back up do not exist?
>>> 
>>> 
>>> $ ./exportotherprojects.sh
>>> error: no resources found - nothing to export
>>> the server doesn't have a resource type "cms"
>>> Error from server (Forbidden): User "admin" cannot list 
>>> egressnetworkpolicies.network.openshift.io 
>>>  in the namespace 
>>> "sample-py": User "admin" cannot list 
>>> egressnetworkpolicies.network.openshift.io 
>>>  in project "sample-py" 
>>> (get egressnetworkpolicies.network.openshift.io 
>>> )
>>> error: no resources found - nothing to export
>>> error: no resources found - nothing to export
>>> error: no resources found - nothing to export
>>> the server doesn't have a resource type "pvcs"
>>> error: no resources found - nothing to export
>>> error: no resources found - nothing to export
>>> error: no resources found - nothing to export
>>> the server doesn't have a resource type "hpas"
>>> error: no resources found - nothing to export
>>> error: no resources found - nothing to export
>>> Error from server (Forbidden): User "admin" cannot list 
>>> poddisruptionbudgets.policy in the namespace "sample-py": User "admin" 
>>> cannot list poddisruptionbudgets.policy in project "sample-py" (get 
>>> poddisruptionbudgets.policy)
>>> 
>>> 
>>> thanks
>>> 
>>> ___
>>> users mailing list
>>> users@lists.openshift.redhat.com
>>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>> 
> 
>> ___
>> users mailing list
>> users@lists.openshift.redhat.com
>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
> 

___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Re: errors accessing egressnetworkpolicies.network.openshift.io when attempting to export project

2018-06-02 Thread Aleksandar Lazic 

Hi.

On 02/06/2018 13:18, Graham Dumpleton wrote:

For the basic Python application you wouldn't need to export most of
those and for some doing so would cause problems when you try to load
them again.

For a basic application with no secrets, configmaps or persistent
volumes, all you need is:

   oc export is,bc,dc,svc,route -o yaml


Just to be on the save site please add cm (=configmap ) and secrets to
the export also, for the future case.

oc export is,bc,dc,svc,route,cm,secrets -o yaml


Do not include pods, replicationcontrollers or endpoints.

You also want to be selective about what you export by using a label
selector.

   oc export is,bc,dc,svc,route --selector app=yourappname -o yaml

That way you get just what is necessary for the application.

Before they can be reloaded in a fresh project or OpenShift instance,
you would usually need to massage the result, especially fixing up
image references and reverting them to image stream references.

Overall you are better off to export as a template and edit the result
to create a template you can then deploy multiple times, where the
application name is parameterised.


Full ack, the command looks then like this.

FYI: As always in yaml **don't use TABS**

```
oc export is,bc,dc,svc,route,cm,secrets -o yaml --as-template=MyPersonalTemplate
```

That's the link to the template doc
https://docs.openshift.org/3.9/dev_guide/templates.html


Graham


Best regards
Aleks


On 2 Jun 2018, at 2:01 am, Brian Keyes  wrote:

I am attempting to follow these instructions

https://docs.openshift.com/container-platform/3.7/day_two_guide/project_level_tasks.html
 


I want to backup THE sample python app and I created a script like this ( from 
the documentation)




$ for object in rolebindings serviceaccounts secrets imagestreamtags podpreset 
cms egressnetworkpolicies rolebindingrestrictions limitranges resourcequotas 
pvcs templates cronjobs statefulsets hpas deployments replicasets 
poddisruptionbudget endpoints
do
  oc export $object -o yaml > $object.yaml
done

--
but when I run this I get some access denied errors like this , is this saying 
that the objects I am attempting to back up do not exist?


$ ./exportotherprojects.sh
error: no resources found - nothing to export
the server doesn't have a resource type "cms"
Error from server (Forbidden): User "admin" cannot list egressnetworkpolicies.network.openshift.io 
 in the namespace "sample-py": User "admin" cannot list 
egressnetworkpolicies.network.openshift.io  in project "sample-py" 
(get egressnetworkpolicies.network.openshift.io )
error: no resources found - nothing to export
error: no resources found - nothing to export
error: no resources found - nothing to export
the server doesn't have a resource type "pvcs"
error: no resources found - nothing to export
error: no resources found - nothing to export
error: no resources found - nothing to export
the server doesn't have a resource type "hpas"
error: no resources found - nothing to export
error: no resources found - nothing to export
Error from server (Forbidden): User "admin" cannot list poddisruptionbudgets.policy in the namespace 
"sample-py": User "admin" cannot list poddisruptionbudgets.policy in project "sample-py" 
(get poddisruptionbudgets.policy)


thanks

___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users





___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users


___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Re: errors accessing egressnetworkpolicies.network.openshift.io when attempting to export project

2018-06-01 Thread Graham Dumpleton 
For the basic Python application you wouldn't need to export most of those and 
for some doing so would cause problems when you try to load them again.

For a basic application with no secrets, configmaps or persistent volumes, all 
you need is:

oc export is,bc,dc,svc,route -o yaml


Do not include pods, replicationcontrollers or endpoints.

You also want to be selective about what you export by using a label selector.

oc export is,bc,dc,svc,route --selector app=yourappname -o yaml

That way you get just what is necessary for the application.

Before they can be reloaded in a fresh project or OpenShift instance, you would 
usually need to massage the result, especially fixing up image references and 
reverting them to image stream references.

Overall you are better off to export as a template and edit the result to 
create a template you can then deploy multiple times, where the application 
name is parameterised.

Graham

> On 2 Jun 2018, at 2:01 am, Brian Keyes  wrote:
> 
> I am attempting to follow these instructions 
> 
> https://docs.openshift.com/container-platform/3.7/day_two_guide/project_level_tasks.html
>  
> 
> 
> I want to backup THE sample python app and I created a script like this ( 
> from the documentation)
> 
> 
> 
> 
> $ for object in rolebindings serviceaccounts secrets imagestreamtags 
> podpreset cms egressnetworkpolicies rolebindingrestrictions limitranges 
> resourcequotas pvcs templates cronjobs statefulsets hpas deployments 
> replicasets poddisruptionbudget endpoints
> do
>   oc export $object -o yaml > $object.yaml
> done
> 
> -- 
> but when I run this I get some access denied errors like this , is this 
> saying that the objects I am attempting to back up do not exist?
> 
> 
> $ ./exportotherprojects.sh
> error: no resources found - nothing to export
> the server doesn't have a resource type "cms"
> Error from server (Forbidden): User "admin" cannot list 
> egressnetworkpolicies.network.openshift.io 
>  in the namespace 
> "sample-py": User "admin" cannot list 
> egressnetworkpolicies.network.openshift.io 
>  in project "sample-py" 
> (get egressnetworkpolicies.network.openshift.io 
> )
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> the server doesn't have a resource type "pvcs"
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> the server doesn't have a resource type "hpas"
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> Error from server (Forbidden): User "admin" cannot list 
> poddisruptionbudgets.policy in the namespace "sample-py": User "admin" cannot 
> list poddisruptionbudgets.policy in project "sample-py" (get 
> poddisruptionbudgets.policy)
> 
> 
> thanks 
> 
> ___
> users mailing list
> users@lists.openshift.redhat.com
> http://lists.openshift.redhat.com/openshiftmm/listinfo/users

___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Re: errors accessing egressnetworkpolicies.network.openshift.io when attempting to export project

2018-06-01 Thread Joel Pearson 
I guess that means your admin user doesn’t have the cluster-admin role
On Sat, 2 Jun 2018 at 4:02 am, Brian Keyes  wrote:

> I am attempting to follow these instructions
>
>
> https://docs.openshift.com/container-platform/3.7/day_two_guide/project_level_tasks.html
>
> I want to backup THE sample python app and I created a script like this (
> from the documentation)
>
>
>
>
> $ for object in rolebindings serviceaccounts secrets imagestreamtags 
> podpreset cms egressnetworkpolicies rolebindingrestrictions limitranges 
> resourcequotas pvcs templates cronjobs statefulsets hpas deployments 
> replicasets poddisruptionbudget endpoints
> do
>   oc export $object -o yaml > $object.yaml
> done
>
>
> --
> but when I run this I get some access denied errors like this , is this
> saying that the objects I am attempting to back up do not exist?
>
>
> $ ./exportotherprojects.sh
> error: no resources found - nothing to export
> the server doesn't have a resource type "cms"
> Error from server (Forbidden): User "admin" cannot list
> egressnetworkpolicies.network.openshift.io in the namespace "sample-py":
> User "admin" cannot list egressnetworkpolicies.network.openshift.io in
> project "sample-py" (get egressnetworkpolicies.network.openshift.io)
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> the server doesn't have a resource type "pvcs"
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> the server doesn't have a resource type "hpas"
> error: no resources found - nothing to export
> error: no resources found - nothing to export
> Error from server (Forbidden): User "admin" cannot list
> poddisruptionbudgets.policy in the namespace "sample-py": User "admin"
> cannot list poddisruptionbudgets.policy in project "sample-py" (get
> poddisruptionbudgets.policy)
>
>
> thanks
>
> ___
> users mailing list
> users@lists.openshift.redhat.com
> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

errors accessing egressnetworkpolicies.network.openshift.io when attempting to export project

2018-06-01 Thread Brian Keyes 
I am attempting to follow these instructions

https://docs.openshift.com/container-platform/3.7/day_two_guide/project_level_tasks.html

I want to backup THE sample python app and I created a script like this (
from the documentation)




$ for object in rolebindings serviceaccounts secrets imagestreamtags
podpreset cms egressnetworkpolicies rolebindingrestrictions
limitranges resourcequotas pvcs templates cronjobs statefulsets hpas
deployments replicasets poddisruptionbudget endpoints
do
  oc export $object -o yaml > $object.yaml
done


-- 
but when I run this I get some access denied errors like this , is this
saying that the objects I am attempting to back up do not exist?


$ ./exportotherprojects.sh
error: no resources found - nothing to export
the server doesn't have a resource type "cms"
Error from server (Forbidden): User "admin" cannot list
egressnetworkpolicies.network.openshift.io in the namespace "sample-py":
User "admin" cannot list egressnetworkpolicies.network.openshift.io in
project "sample-py" (get egressnetworkpolicies.network.openshift.io)
error: no resources found - nothing to export
error: no resources found - nothing to export
error: no resources found - nothing to export
the server doesn't have a resource type "pvcs"
error: no resources found - nothing to export
error: no resources found - nothing to export
error: no resources found - nothing to export
the server doesn't have a resource type "hpas"
error: no resources found - nothing to export
error: no resources found - nothing to export
Error from server (Forbidden): User "admin" cannot list
poddisruptionbudgets.policy in the namespace "sample-py": User "admin"
cannot list poddisruptionbudgets.policy in project "sample-py" (get
poddisruptionbudgets.policy)


thanks
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users