RedHat EX380 - Red Hat Certified Specialist in OpenShift Automation and Integration

Create a group sync config file (example groupsync.yaml)

This file defines how OpenShift queries LDAP for groups and members.

Run a one-time group sync

oc adm groups sync --sync-config=groupsync.yaml --confirm

--confirm actually applies changes (without it, it’s a dry-run preview).

Verify groups created/updated

oc get groups

oc describe group < groupname >

Confirms group objects exist and membership is present.

==========

Patch deployment with preferred podAntiAffinity

oc -n payments patch deploy api --type=merge -p '{

"spec":{"template":{"spec":{"affinity":{

"podAntiAffinity":{

"preferredDuringSchedulingIgnoredDuringExecution":[{

"weight":100,

"podAffinityTerm":{

"labelSelector":{"matchLabels":{"app":"api"}},

"topologyKey":"kubernetes.io/hostname"

}

}]

}

}}}}

}'

Encourages spread across nodes to reduce single-node impact.

Verify spread

oc -n payments get pods -o wide

==========