S3 docker registry performance

2016-06-03 Thread Andrew Lau
Hi, Does anyone have any comparisons of s3 registry performance? We've found it to be quite slow, at least 2-3 times longer then using something like an EBS volume. Here's the config being used: encrypt: true secure: true v4auth: true chunksize: 26214400 I stumbled across

Re: setting kubelet --allow-privileged ?

2016-06-03 Thread Clayton Coleman
Nodes come preconfigured with allow-privileged because SCC already protects the cluster. > On Jun 3, 2016, at 6:56 PM, Alan Jones wrote: > > Friends, > I had a privileged container running under under an OpenShift 3.2 master with > a sock k8s kubelet. > To get that to work, I added the security

setting kubelet --allow-privileged ?

2016-06-03 Thread Alan Jones
Friends, I had a privileged container running under under an OpenShift 3.2 master with a sock k8s kubelet. To get that to work, I added the security context rule: oadm policy add-scc-to-user privileged -z default === AND === the following command line flag to kubelet: --allow-privileged=true I