Re: Re-Loading Console / API endpoint certificates

[Clayton Coleman]

Even when you restart, you aren’t seeing the new certs loaded?

On Mar 5, 2018, at 2:58 AM, Alex Stockinger  wrote:

Hi,

I am trying to secure my OpenShift installation's Console / API on port
8443 with let's encrypt certificates. I got this working nicely using the
servingInfo/namedCertificates section in the master-config.yaml file.
However upon certificate renewal the process doesn't seem to pick up the
new certificates.

So my question is: is there a (downtime-free) way to trigger a reload of
the certificates used for port 8443?

Thanks in advance for your help!

Cheers,
Alex

___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Kube state metrics - OpenShift

[Ricardo Lourenço]

Hello,

I have a pod running Kube-state-metrics whose svc target doesn't get
scrapped. It's failing with context deadline exceeded, which should
indicate a timeout?

KSM svc is exposed at http://:8080/metrics

I noticed all the other targets /metrics are https://

Any hints would be really helpful.
Thanks in advance,
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Re: Mounting Volumes inside OpenShift

[Vyacheslav Semushin]

2018-03-04 10:16 GMT+01:00 Gaurav Ojha :

> So, previously on my docker machine, I had a nfs-share/php folder at
> /data/docker which I mounted inside the docker container.
>
> How do I do the same in case of OpenShift? Is there no way to simply mount
> the volume inside OpenShift, or is it a requirement to have a NFS setup and
> then mount the volume through PVC?
>


Have you seen these links? They could help you to achieve what you want:

https://kubernetes.io/docs/concepts/storage/volumes/#nfs
https://github.com/kubernetes/examples/blob/master/staging/volumes/nfs/README.md

HTH

-- 
Slava Semushin | OpenShift
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Re-Loading Console / API endpoint certificates

[Alex Stockinger]

Hi,

I am trying to secure my OpenShift installation's Console / API on port
8443 with let's encrypt certificates. I got this working nicely using the
servingInfo/namedCertificates section in the master-config.yaml file.
However upon certificate renewal the process doesn't seem to pick up the
new certificates.

So my question is: is there a (downtime-free) way to trigger a reload of
the certificates used for port 8443?

Thanks in advance for your help!

Cheers,
Alex
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users