chakra j

mongodb recommends disabling hugepages. by default ocp wants it enabled. sol https://jira.mongodb.org/browse/SERVER-20791

$subject use `Azure Managed Service Identity ` instead of password

From v1.9.4, secrets volumes are now mounted in read-only by default. As a temporary workaround I've added "--feature-gates=ReadOnlyAPIDataVolumes=false" to the kubelet args and it works but It is definitely not...

yes.

Currently the GlusterFS role is not entirely idempotent, that is running it multiple times and may not yield the same results. Officially we only support running it once for deployment...

http://openshift-compliance-guide.readthedocs.io/en/latest/sec_conops.html#sec-conops https://www.redhat.com/en/resources/openshift-pci-product-applicability-guide-datasheet

NET_ADMIN privilege will give pod access to * edit host firewalls / routetables

semanage fcontext -a -t svirt_sandbox_file_t "/registry(/.*)?"

`kubectl apply` will look for any pending updates on object and carefully apply changes at the end while kubectl update will overwrite without caring about other processes working on same...

take out all labels from node

1

``` kubectl get no | awk '{print $1}' | while read line; do kubectl label node $line beta.kubernetes.io/arch-; done ```