Re: Multi-tenant security

2017-04-12 Thread Jonathan Yu
s gives you an isolated kernel and pretty solid security (via VT-x), hypervisor breakouts are not completely impossible. [0] http://www.projectatomic.io/blog/2017/02/crio-runtimes/ -- Jonathan Yu / Software Engineer, OpenShift by Red Hat / @jawnsy <https://twitter.com/jawnsy> *“There are

Re: Why I can use insecureEdgeTerminationPolicy: Redirect when I have termination: reencrypt

2017-03-31 Thread Jonathan Yu
___ >> users mailing list >> users@lists.openshift.redhat.com >> http://lists.openshift.redhat.com/openshiftmm/listinfo/users >> > > ___ > users mailing list > users@lists.openshift.redhat.com > http://lists.openshift.redhat.c

Re: Let's encrypt routers

2017-01-17 Thread Jonathan Yu
gt;> France : +33 (0) 3 65 96 02 92 >>> Canada: +1 (418) 478-1175 <%28418%29%20478-1175> >>> USA: +1 (954) 607-7443 <%28954%29%20607-7443> >>> >>> >>> ___ >>> users mailing list >&

Re: openshift-1.4.0.rc1 on EC2

2016-11-29 Thread Jonathan Yu
penshift.redhat.com > http://lists.openshift.redhat.com/openshiftmm/listinfo/users > > -- Jonathan Yu / Software Engineer, OpenShift by Red Hat / Follow me on Twitter @jawnsy <https://twitter.com/jawnsy> *“Restlessness is discontent — and discontent is the first necessity o

Re: Host header in Nginx proxy 400 Bad request

2016-10-21 Thread Jonathan Yu
Hi David, Are your pods in the same project, or different projects? If the same project, you can communicate directly with the destination pod using its service address (*.cluster.local) rather than its external hostname. Can you provide some more detail regarding your application architecture?

Re: RHEL image

2016-10-18 Thread Jonathan Yu
Hi Lionel, On Tue, Oct 18, 2016 at 5:49 PM, Lionel Orellana wrote: > Hi > > Is there an officially supported image of RHEL? I see all the xPaaS images > in the customer portal but nothing about a plain RHEL image like there is > for Centos. > Yes, there is:

Re: How are codes injected into builder image?

2016-10-14 Thread Jonathan Yu
> https://octopussystems.cz > > t: +420734270131 > > e: david.str...@gmail.com > > ___ > users mailing list > users@lists.openshift.redhat.com > http://lists.openshift.redhat.com/openshiftmm/listinfo/users > -- Jonathan Yu, P.Eng

Re: Deploying scala application

2016-10-11 Thread Jonathan Yu
> t: +420734270131 > e: david.str...@gmail.com > > ___ > users mailing list > users@lists.openshift.redhat.com > http://lists.openshift.redhat.com/openshiftmm/listinfo/users > -- Jonathan Yu, P.Eng. / Software Engineer, OpenShift by Red Hat / Twitter

Re: Home origin server CPU question - Hardware junkies

2016-10-02 Thread Jonathan Yu
Hey Grant, Just some general thoughts... - K series chips (including the 6700K you linked) are unlocked (so can be overclocked), but don't come with a stock fan and are often missing features useful for server workloads (though it seems 6700 vs 6700K, the K is only missing "Trusted

Re: Installing OpenShift Origin v1.3.0

2016-09-27 Thread Jonathan Yu
s://github.com/openshift/origin/releases), >> v1.3.0 >> > is the latest release of OpenShift. >> > >> > Thanks >> > Sachin >> > >> > ___ >> > users mailing list >> > users@lists.o

Re: Obtaining routes from within pods

2016-09-23 Thread Jonathan Yu
On Fri, Sep 23, 2016 at 11:19 AM, Gary Franczyk wrote: > From the point of your application, is there a way to tell what the route > name(s) are that point to the pod that your application is in? > Generally, no - after all, you can create multiple routes that point

Re: s2i build set hostname

2016-09-09 Thread Jonathan Yu
container with centralized authentication as > I asked for advice: > > http://lists.openshift.redhat.com/openshift-archives/users/ > 2016-September/msg00026.html > > Thank you > > 2016-09-08 17:36 GMT-03:00 Jonathan Yu <jaw...@redhat.com>: > >> Hey Robson, >>

Re: oc get route

2016-08-16 Thread Jonathan Yu
a refused to connect. > oc get route comes back with nothing. > docker ps on the node does show that haproxy router is running. > > Any ideas on where to look? > > ___ > users mailing list > users@lists.openshift.redhat.com > h

Re: Node startup Failure on SDN

2016-08-16 Thread Jonathan Yu
On Aug 15, 2016 11:08, "Skarbek, John" wrote: > > So I figured it out. Ntp went kaboom on one of our master nodes. > > ERROR: [DCli0015 from diagnostic > ConfigContexts@openshift/origin/pkg/diagnostics/client/config_contexts.go:285] For client config context

Re: no items in "browse catalog" page

2016-08-15 Thread Jonathan Yu
create -f -n test >>> Back to overview >>> >>> >>> Here is a screenshot >>> >>> [image: Inline image 1] >>> >>> ___ >>> users mailin

Re: Multi-Tenant Cluster: Create a separate docker registry for every project?

2016-08-13 Thread Jonathan Yu
to what we ship (a multi-tenant-aware registry) and using that, as it's well-tested and fairly flexible: https://docs.openshift.org/latest/install_config/install/docker_registry.html#advanced-overriding-the-registry-configuration -- Jonathan Yu, P.Eng. / Software Engineer, OpenShift by Red Hat

Re: What actually is required for DNS and Origin?

2016-07-21 Thread Jonathan Yu
_ > users mailing list > users@lists.openshift.redhat.com > http://lists.openshift.redhat.com/openshiftmm/listinfo/users > -- Jonathan Yu, P.Eng. / Software Engineer, OpenShift by Red Hat / Twitter (@jawnsy) is the quickest way to my heart <https

Re: OpenShift Origin assistance desired

2016-04-27 Thread Jonathan Yu
Hey Alex, On Tue, Apr 26, 2016 at 1:06 PM, Alex Wauck wrote: > My employer (www.exosite.com) has a pilot project using OpenShift Origin > and we're looking for a contractor to help in configuring OpenShift and > Kubernetes. AWS experience would be helpful too, since we