Re: Adding host storage during advanced installation

2018-03-20 Thread Louis Santillan
Patrick, First, I think you're misunderstanding the order of operations here just a bit. `docker-storage-setup` is part of the host preparation steps and happens on all nodes in the cluster before running the Advanced Installer. The Container and PaaS Practice's Consulting Playbooks [0] might

Re: Reverse Proxy using Nginx

2018-03-20 Thread Gaurav Ojha
Oh yes, it is solved. Should have mentioned that previously. Sorry about that. Regards Gaurav On Tue, Mar 20, 2018, 4:05 PM Joel Pearson wrote: > So your problem is solved then? > On Wed, 21 Mar 2018 at 4:47 am, Gaurav Ojha wrote: > >> Hi,

Re: Reverse Proxy using Nginx

2018-03-20 Thread Joel Pearson
So your problem is solved then? On Wed, 21 Mar 2018 at 4:47 am, Gaurav Ojha wrote: > Hi, > > Thanks for the reply. I have router, but have a bunch of APIs behind > gunicorn which I wanted to route through nginx. > > I deployed a nginx image and am using it. > > On Tue, Mar

Re: Reverse Proxy using Nginx

2018-03-20 Thread Gaurav Ojha
Hi, Thanks for the reply. I have router, but have a bunch of APIs behind gunicorn which I wanted to route through nginx. I deployed a nginx image and am using it. On Tue, Mar 20, 2018, 9:43 AM Joel Pearson wrote: > What do you want Nginx for? OpenShift has a

Re: OpenShift Origin 3.9.0 release imminent?

2018-03-20 Thread Clayton Coleman
We found a regression in the subPath behavior, currently waiting for fixes to land. I'm probably going to remove the tag and cut another once that lands. On Tue, Mar 20, 2018 at 4:06 AM, Joel Pearson wrote: > Is the OpenShift Origin 3.9.0 release imminent? I

Re: Pods stuck on Terminating status

2018-03-20 Thread Joel Pearson
I had this at one point, but it was before I cared about the data in that cluster so I just rebuilt it, so you could just rebuild your cluster ;) But in all seriousness sounds like you need to do some etcd surgery, but I have no idea how that works. On Tue, 20 Mar 2018 at 4:00 am, bahhooo

Re: route resolution happens intermittently

2018-03-20 Thread Joel Pearson
Sounds like your DNS configuration is a bit weird. Do you control the DNS server where you put that myapps domain? How did you figure the nodes to use DNS? On Fri, 16 Mar 2018 at 3:47 pm, abdul nizam wrote: > Hi All, > > I have 2 nodes and one master. > I have installed OSE

Re: Reverse Proxy using Nginx

2018-03-20 Thread Joel Pearson
What do you want Nginx for? OpenShift has a component called the Router which routes traffic. It is based on Haproxy. You could run an nginx container that the router will send traffic to, but if you’re just trying to expose other apps. Then just use the built in Router. Unless you’re talking

Re: Nessus Kubernetes CIS compliance check on OpenShift?

2018-03-20 Thread Jordan Liggitt
No, the binary paths, names, configurations, and flags do not map directly to openshift. On Tue, Mar 20, 2018 at 6:27 AM, Porttikivi, Anssi wrote: > Does anyone know, if that could be run against OpenShift? Nessus configuration > for this check needs to see

Adding host storage during advanced installation

2018-03-20 Thread Patrick Hemmer
How are you supposed to add additional storage to the host when using the advanced installation procedure (the openshift-ansible repo)? The documentation (https://docs.openshift.com/container-platform/3.9/install_config/install/host_preparation.html#configuring-docker-storage) says that you have

Nessus Kubernetes CIS compliance check on OpenShift?

2018-03-20 Thread Porttikivi, Anssi
Does anyone know, if that could be run against OpenShift? Nessus configuration for this check needs to see "/etc/kubernetes/apiserver". Obviously that does not exist on OpenShift. Maybe "/var/lib/origin/openshift.local.config/master/openshift-master.kubeconfig" comes close? (I don't have

Re: docker registry backed with glusterfs gives Internal Server Error during builds on 3.7.14

2018-03-20 Thread Sony Philip
Hi Michal, Thank you. But my question was, how did it work when Ansible deployed it during installation vs. a manual change to the registry storage to glusterfs after non glusterfs backed install? And if it worked when Ansible deployed directly with a glusterfs backend vs not working when

Re: docker registry backed with glusterfs gives Internal Server Error during builds on 3.7.14

2018-03-20 Thread Michal Minar
Hello, have you tried setting supplemental groups? https://docs.openshift.org/latest/install_config/persistent_storage/persistent_storage_glusterfs.html#gfs-supplemental-groups Ensure it matches your gid of gluster volume. Also make sure to enable writing to gluster with policy on all your

Re: TSB fails to start

2018-03-20 Thread Tim Dudgeon
I'm just using the default SDN. This seems to be some issue with Origin 3.7.  Switching back to 3.6.1 works fine. I'm struggling to work out what is going on as it is not very reproducible (and 3.7 is broken at present). Tim On 20/03/18 08:10, Joel Pearson wrote: Are you using calico or

Re: TSB fails to start

2018-03-20 Thread Joel Pearson
Are you using calico or something like that? If so why not consider a regular overlay network just to get it working? On Thu, 15 Mar 2018 at 5:26 am, Tim Dudgeon wrote: > A little more on this. > One the nodes that are not working the file >

OpenShift Origin 3.9.0 release imminent?

2018-03-20 Thread Joel Pearson
Is the OpenShift Origin 3.9.0 release imminent? I noticed the tag appeared 4 days ago, but without any detail yet: https://github.com/openshift/origin/releases ___ users mailing list users@lists.openshift.redhat.com

Dynamically Creating Java Keystores in OpenShift

2018-03-20 Thread Sobkowiak, Krzysztof
Hi This article (https://developers.redhat.com/blog/2017/11/22/dynamically-creating-java-keystores-openshift) describes how to use the certificates generated by OpenShift in Java application.  There is an init container configured which imports the pem base certificate into keystore which is