130 Red Hat OpenShift and IBM Cloud Paks on IBM Power Systems: Volume 1
6. Install the latest operating system updates:
7. Update kernel parameters:
ansible -i <inventory_file> nodes,lb -a 'yum -y update --security 
--exclude=cloud-init\*'
 [WARNING]: Consider using the yum module rather than running yum.  If you need to use 
command because yum is insufficient you can add warn=False to this
command task or set command_warnings=False in ansible.cfg to get rid of this message.
mstnode02.domain.example.com | SUCCESS | rc=0 >>
Loaded plugins: product-id, search-disabled-repos, subscription-manager
5 package(s) needed (+0 related) for security, out of 5 available
Resolving Dependencies
--> Running transaction check
---> Package kernel.ppc64le 0:4.14.0-115.14.1.el7a will be installed
...
Output truncated
...
Installed:
  kernel.ppc64le 0:4.14.0-115.14.1.el7a                                         
Updated:
  kernel-bootwrapper.ppc64le 0:4.14.0-115.14.1.el7a                             
  kernel-tools.ppc64le 0:4.14.0-115.14.1.el7a                                   
  kernel-tools-libs.ppc64le 0:4.14.0-115.14.1.el7a                              
  python-perf.ppc64le 0:4.14.0-115.14.1.el7a                                    
Complete!
ansible -i <inventory_file> nodes,lb -m sysctl -a "name=vm.max_map_count 
value=262144 state=present sysctl_set=yes reload=yes"
ansible -i <inventory_file> nodes,lb -m sysctl -a "name=net.ipv4.ip_forward 
value=1 state=present sysctl_set=yes reload=yes"
ansible -i <inventory_file> nodes,lb -m sysctl -a 
"name=fs.inotify.max_user_watches value=65536 state=present sysctl_set=yes 
reload=yes"
mstnode02.domain.example.com | SUCCESS => {
    "changed": true
}
...
Output truncated
...
lbsnode01.domain.example.com | SUCCESS => {
    "changed": true
}
wrknode01.domain.example.com | SUCCESS => {
    "changed": true
}
ansible -i <inventory_file> lb -m sysctl -a "name=net.ipv4.ip_nonlocal_bind 
value=1 state=present sysctl_set=yes reload=yes"
lbsnode01.domain.example.com | SUCCESS => {
    "changed": true
}