2019-04-09 01:11:07 UTC - Barry: Kafka message that send from invoker to controller or loadbalancer ? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554772267093800?thread_ts=1554694672.082200&cid=C3TPCAQG1 ---- 2019-04-09 01:14:43 UTC - Barry: when and what condition invoker will report this message? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554772483094100?thread_ts=1554694672.082200&cid=C3TPCAQG1 ---- 2019-04-09 01:20:22 UTC - Rodric Rabbah: docker failure generally https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554772822094300?thread_ts=1554694672.082200&cid=C3TPCAQG1 ---- 2019-04-09 01:20:50 UTC - Rodric Rabbah: other issues could be network partition affecting database access (cant fetch the code for an action) https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554772850094500?thread_ts=1554694672.082200&cid=C3TPCAQG1 ---- 2019-04-09 05:45:25 UTC - Raja Mahali: Hi All, Good Day. I am looking out some details with respect to security/compliance features for Openwhisk. Looking forward for your inputs on below. Mainly in the aspect of below parameter's : 1) Secured Logging. 2) Data Encryption at motion. 3) Data Encryption at rest ( I believe it is not applicable for OW ) 4) Network Ports to be secured if any ? 5) Usage of certificates for enhanced security. 6) Error codes to be monitored. https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554788725103400?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 05:46:21 UTC - Xue Shuai: Hi, everyone, Is anybody familiar with [owperf](<https://github.com/apache/incubator-openwhisk/blob/bb01428bca/tools/owperf/README.md>)?What is the relationship between `OEA` and `inittime`, `waittime`? If it is code start, `OEA` = `waittime`, or, `OEA` = `inittime`+ `waittime`?Thank you guys!:heart: https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554788781104100?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 06:51:15 UTC - Barry: Yes, it is data access problem, thanks very much:grin: https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554792675104200?thread_ts=1554694672.082200&cid=C3TPCAQG1 ---- 2019-04-09 07:10:46 UTC - Rodric Rabbah: @Erez Hadad ^^ https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554793846104600?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 07:12:31 UTC - Rodric Rabbah: My interpretation of the doc is that it’s the latter. For a cold start it’s both wait and init times combined https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554793951106000?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 07:34:38 UTC - Xue Shuai: sorry for my paste mistake. My original thought: If it is code activation , `OEA` = `inittime`+ `waittime`; If it is a warm activation , initialization will be skip, and the `OEA` = `waittime`@Rodric Rabbah white_check_mark : Rodric Rabbah https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554795278106200?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 07:35:36 UTC - Rodric Rabbah: a warm activation has no inittime https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554795336106400?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 07:48:26 UTC - Xue Shuai: got it. https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554796106106900?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 08:02:03 UTC - Xue Shuai: > OpenWhisk processing overhead from sending the action invocation or trigger fire to the beginning of the action execution. OEA = AS-BI
In my opinion, although both `inittime` and `waittime` are the overhead of OW, `waittime` is related to kafka, controller, and `inittime` is related to invoker. So shall we collect `waittime` and `inittime` separately rather than as a whole to describe OW performance more accurately? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554796923107100?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 11:15:43 UTC - Rodric Rabbah: Why? The combination is system overhead. Wait time isn’t strictly Kafka. It includes time to ready a container (whether to unpause a previous one or create a new one in some cases). If you want more fine grained quantification for wait time you’d have to account for Kafka separately as it’s not recorded by itself on the activation. https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554808543110500?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 11:19:22 UTC - James Thomas: Recent updates to OW JS SDK lead to an unacceptable increase in the package size, we’re looking at a few options to resolve this here: <https://github.com/apache/incubator-openwhisk-client-js/issues/158> If anyone has other suggestions or feedback - add a comment? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554808762112200 ---- 2019-04-09 12:40:34 UTC - Rob Allen: 6.4MB of source code added? What does it _do_ ? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813634112600 ---- 2019-04-09 12:42:07 UTC - Dominic Kim: I think the loading time is the main issue. https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813727113100 ---- 2019-04-09 12:43:17 UTC - Rodric Rabbah: the default configuration for the openwhisk deploying uses ssl between all components: nginx to controller, controller to kafka, kafka to invoker https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813797113300?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:43:48 UTC - Rodric Rabbah: couchdb is deployed over http though unless you enable https https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813828113800?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:44:06 UTC - Rob Allen: I'm sure https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813846114100 ---- 2019-04-09 12:44:24 UTC - Rodric Rabbah: encryption at rest would apply to couchdb and how one deploys that datastore https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813864114200?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:44:52 UTC - Rodric Rabbah: only required ports are open but there isn’t a complete list of these https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813892114400?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:46:02 UTC - Rodric Rabbah: i’m not sure what you mean by 5 — between cli and api controller or something else? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813962114600?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:46:09 UTC - Rodric Rabbah: in any case you’ll need to replace the generated/self-signed certs with trusted ones https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554813969114800?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:46:55 UTC - Rodric Rabbah: error codes to monitor: there isn’t a list but any 40x for web actions and 50x level code in general should be watched https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814015115000?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:47:33 UTC - Rodric Rabbah: for secured logging, do you mean for the system or the user logs? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814053115200?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:47:37 UTC - Rodric Rabbah: it would be great to document all this actually for future reference in a security document in the apache project repo https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814057115400?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:48:05 UTC - Rodric Rabbah: while you didn’t ask, there are also firewall rules one needs to enable to prevent user containers from cross talk https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814085115600?thread_ts=1554788725.103400&cid=C3TPCAQG1 ---- 2019-04-09 12:48:29 UTC - Rodric Rabbah: it’s npm :smile: who knows what any of the libraries do laughing : Rob Allen, James Thomas rolling_on_the_floor_laughing : Upkar Lidder https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814109116100 ---- 2019-04-09 12:50:38 UTC - Michele Sciabarra: can someonee explain me what this thing does: ``` script: "./tools/travis/publish.sh openwhisk ${TRAVIS_TAG%@*} ${TRAVIS_TAG##*@}" ``` https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814238117900 ---- 2019-04-09 12:51:08 UTC - Michele Sciabarra: what is that `%@*` ?? I know what a % and ## in shell are https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814268119000 ---- 2019-04-09 12:51:08 UTC - Martin Broerse: Hello, We might need some support installing OpenWhisk on Ubuntu. This does not need to be free support. Who can we ask? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814268119100?thread_ts=1554814268.119100&cid=C3TPCAQG1 ---- 2019-04-09 12:53:19 UTC - Michele Sciabarra: You mean on Libvirt? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814399119600?thread_ts=1554814268.119100&cid=C3TPCAQG1 ---- 2019-04-09 12:53:29 UTC - Michele Sciabarra: Or in cloud? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814409119800?thread_ts=1554814268.119100&cid=C3TPCAQG1 ---- 2019-04-09 12:59:45 UTC - Xue Shuai: Yeah, the combination is OW system overhead, I'm more concerned about the throughput and latency of OW, so I want to take advantage of the information in activation and the fine grained overhead in every component is is certainly better . https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814785120000?thread_ts=1554788781.104100&cid=C3TPCAQG1 ---- 2019-04-09 13:00:37 UTC - Rodric Rabbah: splits a string in two @Michele Sciabarra https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554814837120400 ---- 2019-04-09 13:04:26 UTC - Xue Shuai: Here is a document for deploy <https://github.com/apache/incubator-openwhisk/blob/master/tools/ubuntu-setup/README.md> Hope to help you. https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554815066120700?thread_ts=1554814268.119100&cid=C3TPCAQG1 ---- 2019-04-09 13:25:29 UTC - Satwik Kolhe: This: <https://gist.github.com/satwikk/5e41a7be55e958e09615f61b700ec0dd> and This by @Michele Sciabarra: <https://github.com/learning-apache-openwhisk/chapter12-deploy/blob/master/user-data.txt> Might help. https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554816329120900?thread_ts=1554814268.119100&cid=C3TPCAQG1 ---- 2019-04-09 13:47:06 UTC - Martin Broerse: @Michele Sciabarra offered to help. @Shuai Xue and @Satwik Kolhe Thanks for the links. https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554817626121300?thread_ts=1554814268.119100&cid=C3TPCAQG1 ---- 2019-04-09 13:47:08 UTC - Michele Sciabarra: and the travis tag is... ? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554817628121500 ---- 2019-04-09 13:47:36 UTC - Michele Sciabarra: something@somewhere? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554817656121800 ---- 2019-04-09 13:47:57 UTC - Michele Sciabarra: because the source of the problem is there, since it publish with the wrong name https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554817677122300 ---- 2019-04-09 14:25:46 UTC - Michele Sciabarra: according docs, TRAVIS_TAG: If the current build is for a git tag, this variable is set to the tag’s name. https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554819946122600 ---- 2019-04-09 14:35:30 UTC - Rodric Rabbah: #*@ splits to @ https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554820530123700 ---- 2019-04-09 14:36:01 UTC - Rodric Rabbah: The other takes from @ to end https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554820561124000 ---- 2019-04-09 14:36:14 UTC - Rodric Rabbah: %@* https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554820574124300 ---- 2019-04-09 14:44:05 UTC - Michele Sciabarra: yup the only problem is what is the value of travis_tag https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554821045124800 ---- 2019-04-09 14:44:19 UTC - Michele Sciabarra: as I do not see tags in the incubator-openwhisk-rutinme-go https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554821059125300 ---- 2019-04-09 14:49:01 UTC - Rodric Rabbah: Echo it ? https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554821341125500 ---- 2019-04-09 22:35:41 UTC - Rodric Rabbah: any committers around to take a look at <https://github.com/apache/incubator-openwhisk-utilities/pull/61> +1 : Carlos Santana thankyou : Rodric Rabbah https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554849341126200 ---- 2019-04-09 22:37:23 UTC - Carlos Santana: There is a `ibm_boto3` python package you can use, this one is already included in ibm python runtimes, the api is S3 compatible here is package that contains actions source code to do CRUD for buckets and objects <https://github.com/ibm-functions/package-cloud-object-storage/tree/master/runtimes/python/actions> https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554849443126300?thread_ts=1554761460.090000&cid=C3TPCAQG1 ---- 2019-04-09 22:38:57 UTC - Carlos Santana: kafka on disk should also be configure with encryption at rest https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1554849537126600?thread_ts=1554788725.103400&cid=C3TPCAQG1 ----
