OKD 3.11 Router with HAProxy 2.1 and TLS 1.3

2020-04-11 Thread Aleksandar Lazic
Hi. There was a question in the openshift-dev channel from @Josef how to build the OKD 3.11 Router with newer HAProxy version. I have now created a new OKD Router image with HAProxy 2.1 and TLS 1.3 and pushed it to docker hub. https://hub.docker.com/repository/docker/me2digital/okd-router-hap2

Re: Router

2020-01-25 Thread Aleksandar Lazic
Hi. On 23.01.20 21:44, Srinivas Naga Kotaru (skotaru) wrote: Quick question Is it possible to expose different routers for different routes on same project? One approach is create different projects but we have a use case where we want to expose different routers for different routers. We kne

Re: Follow up on OKD 4

2019-07-27 Thread Aleksandar Lazic
ler/blob/master/CHANGELOG.md#090---2019-01-05 ``` Added There is a new none platform for bring-your-own infrastructure users who want to generate Ignition configurations. The new platform is mostly undocumented; users will usually interact with it via OpenShift Ansible. ``` > O

Re: Follow up on OKD 4

2019-07-27 Thread Aleksandar Lazic
t if a > substantial set of people want that flexibility it’s a great data > point. > >> >> Thanks, >> Kevin >> >> From: dev-boun...@lists.openshift.redhat.com >> [dev-boun...@lists.openshift.redhat.com] on behalf of Josh Berkus >> [jber...@redha

Re: Follow up on OKD 4

2019-07-25 Thread Aleksandar Lazic
HI. Am 25.07.2019 um 06:52 schrieb Michael Gugino: > I think FCoS could be a mutable detail. To start with, support for > plain-old-fedora would be helpful to make the platform more portable, > particularly the MCO and machine-api. If I had to state a goal, it > would be "Bring OKD to the larges

Re: Proposal: Deploy and switch to Discourse

2019-07-17 Thread Aleksandar Lazic
Am 16.07.2019 um 19:11 schrieb Clayton Coleman: > :It would probably be good to solicit feedback via a survey - gather > suggestions, assess how many people prefer the existing communication > mechanisms > we have, etc. Full Ack. As far as I know there are this channels Dev: * dev@lists.openshi

Re: Audit logs can be written

2018-08-15 Thread Aleksandar Lazic
Hi. I'm pretty sure that the directory `/var/lib/origin/openpaas-oscp-audit` does not exist in the api container. The line was copied from a rpm install in 3.7 for 3.10 You can adopt the path in the config or create directory Adopt path: openshift_master_audit_config={"enabled": "true", "auditFi

Re: question about external load balancer

2018-05-15 Thread Aleksandar Lazic
Hi. *better* Is difficult to answer. The *best* solution is which fits to your setup. Which ever solution you choose, the setup must be finished before you start the install because openshift connects to the public host name at install time. I have build the HA master setup with the openshift ro

Re: OpenShift Origin v3.9.0 is now available

2018-04-01 Thread Aleksandar Lazic
Hi. looks like the file does not point to a valid repo. ``` curl -sSL $(curl -sSL https://storage.googleapis.com/origin-ci-test/releases/openshift/origin/v3.9.0/origin.repo |egrep baseurl|cut -d= -f2) NoSuchKeyThe specified key does not exist.No such object: origin-ci-test/logs/test_branch_origi

Re: oc equivalent command to generate a self certificate signed for webhook

2018-03-28 Thread Aleksandar Lazic
Hi. there are the commands `oc adm ca -h` and `oc adm certificate -h` maybe this commands can help you to find a solution. You can use --loglevel=9 tho see which REST calls will be done. Hth Aleks Am 28.03.2018 um 09:13 schrieb Charles Moulliard: > Hi  > > To play with k8s webhook (kube 1.9), it

Re: Design questions around Container logs, EFK & OCP

2018-03-07 Thread Aleksandar Lazic
Hi. Am 07.03.2018 um 23:47 schrieb Mohamed A. Shahat: > Hi All,  > > My first question here, so i am hoping at least for some > acknowledgement !  > > _Background_ > > * OCP v3.7 > Do you use the enterprise version or the opensource one? > > * Several Worker Nodes > * Few Workload types  >

Openshift router with h2 and print_headers

2018-01-14 Thread Aleksandar Lazic
Hi all. I have created a openshift router image with the new haproxy 1.8 . https://hub.docker.com/r/me2digital/openshift-ocp-router-hap18/ The haproxy 1.8 have added a lot of feature and one of them is h2 (=http/2). I have added also a smal lua script which prints the incomming http headers t

Re: Fwd: a proposal to add support for client certificate authentication in OpenShift Routes

2017-11-23 Thread Aleksandar Lazic
Hi Wei. just for my curiosity was this described solution not a possible solution? https://docs.openshift.org/3.6/install_config/router/customized_haproxy_router.html#using-annotations Best Regards aleks -- Originalnachricht -- Von: "Wei Li" An: dev@lists.openshift.redhat.com Gesend

Re[2]: v3.6.1 and v3.7.0-rc.0 released

2017-10-28 Thread Aleksandar Lazic
-- Originalnachricht -- Von: "Rich Megginson" An: "Clayton Coleman" Cc: "dev" Gesendet: 27.10.2017 19:52:39 Betreff: Re: v3.6.1 and v3.7.0-rc.0 released On 10/27/2017 11:43 AM, Clayton Coleman wrote: v3.6.0 images were carried forward, Does that mean the v3.6.0 images were tagged