Awesome Notes – 11/28

Here are some great resources for OpenShift Container Platform on Power:

UKI Brunch & Learn – Red Hat OpenShift – Multi-Architecture Compute

Glad to see the Multiarchitecture Compute with an Intel Control Plane and Power worker in all its glory. Thanks to Paul Chapman

https://www.linkedin.com/posts/chapmanp_uki-brunch-learn-red-hat-openshift-activity-7133370146890375168-AmuL?utm_source=share&utm_medium=member_desktop

Explore Multi Arch Compute in OpenShift cluster with IBM Power systems

In the ever-evolving landscape of computing, the quest for optimal performance and adaptability remains constant. This study delves into the performance implications of deploying applications on a Multi Arch Compute OpenShift Container Platform (OCP) cluster, comparing it with a cluster exclusively built on IBM Power architecture. Our findings reveal that, with or without Multi Arch Compute, there is no significant impact on performance.

Thanks to @Mel from the IBM Power Systems Performance Team

https://community.ibm.com/community/user/powerdeveloper/blogs/mel-bakhshi/2023/11/28/explore-mac-ocp-on-power

Enabling FIPS Compliance in Openshift Cluster Platform on Power

A new PDEX blog is posted to help the technical experts configure their OpenShift Container Platform on Power and the necessary background to configure FIPS 140-2 compliance.

https://community.ibm.com/community/user/powerdeveloper/blogs/paul-bastide/2023/11/21/enabling-fips-compliance-in-openshift-cluster-plat?CommunityKey=daf9dca2-95e4-4b2c-8722-03cd2275ab63

Encrypting etcd data on OpenShift Container Platform on Power

This article was originally posted to Medium by Gaurav Bankar and has been updated.

And now is posted with updated details for 4.14.

https://community.ibm.com/community/user/powerdeveloper/blogs/paul-bastide/2023/11/21/encrypting-etcd-data-on-power?CommunityKey=daf9dca2-95e4-4b2c-8722-03cd2275ab63

Using TLS Security Profiles on OpenShift Container Platform on IBM Power

This article identifies using cluster operators and components with TLS Security profiles, covers the available security profiles, and how to configure each profile, and verify each profile is properly enabled.

https://community.ibm.com/community/user/powerdeveloper/communities/community-home/recent-community-blogs?communitykey=daf9dca2-95e4-4b2c-8722-03cd2275ab63

Encrypting disks on OpenShift Container Platform on Power Systems

This document outlines the concepts, how to setup an external tang cluster on IBM PowerVS, how to setup a cluster on IBM PowerVS and how to confirm the encrypted disk setup.

https://community.ibm.com/community/user/powerdeveloper/blogs/paul-bastide/2023/11/21/encrypting-disks-on-openshift-container-platform-o?CommunityKey=daf9dca2-95e4-4b2c-8722-03cd2275ab63

Configuring a PCI-DSS compliant OpenShift Container Platform cluster on IBM Power

This article outlines how to verify the profiles, check for the scan results, and configure a compliant cluster.

https://community.ibm.com/community/user/powerdeveloper/blogs/paul-bastide/2023/11/21/configuring-a-pci-dss-compliant-openshift-containe?CommunityKey=daf9dca2-95e4-4b2c-8722-03cd2275ab63

Open Source Container images for Power now available in IBM Container Registry

The OpenSource team has posted new images:

grafana-mimir-build-image	2.9.0	docker pull icr.io/ppc64le-oss/grafana-mimir-build-image-ppc64le:2.9.0	Nov 24, 2023
grafana-mimir-continuous-test	2.9.0	docker pull icr.io/ppc64le-oss/grafana-mimir-continuous-test-ppc64le:2.9.0	Nov 24, 2023
grafana-mimir	2.9.0	docker pull icr.io/ppc64le-oss/grafana-mimir-ppc64le:2.9.0	Nov 24, 2023
grafana-mimir-rules-action	2.9.0	docker pull icr.io/ppc64le-oss/grafana-mimir-rules-action-ppc64le:2.9.0	Nov 24, 2023
grafana-mimirtool	2.9.0	docker pull icr.io/ppc64le-oss/grafana-mimirtool-ppc64le:2.9.0	Nov 24, 2023
grafana-query-tee	2.9.0	docker pull icr.io/ppc64le-oss/grafana-query-tee-ppc64le:2.9.0	Nov 24, 2023
filebrowser	v2.24.2	docker pull icr.io/ppc64le-oss/filebrowser-ppc64le:v2.24.2	Nov 24, 2023
neo4j	5.9.0	docker pull icr.io/ppc64le-oss/neo4j-ppc64le:5.9.0	Nov 24, 2023
kong	3.3.0	docker pull icr.io/ppc64le-oss/kong-ppc64le:3.3.0	Nov 24, 2023

https://community.ibm.com/community/user/powerdeveloper/blogs/priya-seth/2023/04/05/open-source-containers-for-power-in-icr

Multi-arch build pipelines for Power: Automating multi-arch image builds

Multi-arch build pipelines can greatly reduce the complexity of supporting multiple operating systems and architectures. Notably, images built on the Power architecture can seamlessly be supported by other architectures, and vice versa, amplifying the versatility and impact of your applications. Furthermore, automating the processes using various CI tools, not only accelerates the creation of multi-arch images but also ensures consistency, reliability, and ease of integration into diverse software environments.

Building on our exploration of multi-arch pipelines for IBM Power in the first blog, this blog delves into the next frontier: Automation. Automating multi-arch image builds using Continuous Integration (CI) tools has become essential in modern software development. This process allows developers to efficiently create and maintain container images that can run on various CPU architectures, such as IBM Power (ppc64le), x86 (amd64), or ARM ensuring compatibility across diverse hardware environments.

Part 1 https://community.ibm.com/community/user/powerdeveloper/blogs/prajyot-parab/2023/11/27/multi-arch-pipelines-for-ibm-power Part 2 https://community.ibm.com/community/user/powerdeveloper/blogs/prajyot-parab/2023/11/27/automating-multi-arch-image-builds-for-power