Manifests to reproduce this lab: osus-lab.

Configuring the OpenShift Update Service (OSUS) for a cluster that pulls images through an Artifactory mirror, with the OSUS graph scrape served from a small dedicated repo. Built and validated on a Single-Node OpenShift (SNO) lab.

Core of this is OSUS + manifest-only mirroring (§0, §2-§10). §1 (DNS) is only needed if Artifactory doesn’t already resolve in your environment — skip it if yours does.

Reset the kubeadmin bootstrap password when the original credential is lost and no other cluster-admin identity provider is available.

Prerequisites

• SSH access to a control plane node (as core, with sudo if required).
• oc available on the node or copied in with the recovery kubeconfig.
• htpasswd available to generate the bcrypt hash (install httpd-tools on RHEL, or run from a toolbox/UBI container).
• A new password of at least 23 characters (required by the bootstrap authenticator).

1. SSH to a control plane node

Connect to any healthy control plane node in the cluster.

Deploy the Cluster Observability Operator with its Perses UI plugin, then apply a PersesDashboard that surfaces Red Hat OpenShift AI workbench, pipeline server, and model-serving metrics directly in the OpenShift web console.

This article describes how to enable LLDP (Link Layer Discovery Protocol) on all Ethernet interfaces that are up, using the nmstate operator and a NodeNetworkConfigurationPolicy (NNCP).

Prerequisites: the Kubernetes NMState operator is installed and a NMState instance exists (see Configure OCP network using nmstate operator).

1. Apply the NodeNetworkConfigurationPolicy

The policy below uses nmstate capture to select only Ethernet interfaces that are in state up, then sets lldp.enabled: true on those interfaces. This avoids touching other interface types or down interfaces.