This patch should be probably marked as freeze break request.

Michal

On 31. 08. 21 12:18, David Kirwan wrote:
Thanks Kevin, we think we've addressed this in the latest version at https://gist.github.com/davidkirwan/bd2b84f05a67123a9254e055d336f1e7 <https://gist.github.com/davidkirwan/bd2b84f05a67123a9254e055d336f1e7>

Can you take another look please

On Mon, 30 Aug 2021 at 23:57, Kevin Fenzi <ke...@scrye.com <mailto:ke...@scrye.com>> wrote:

    On Mon, Aug 30, 2021 at 07:49:54AM -0700, Kevin Fenzi wrote:
    > On Mon, Aug 30, 2021 at 07:38:04AM +0530, Akashdeep Dhar wrote:
    > > Hello,
    > >
    > > A small change - "metric-for-apps: DNS patch for prod nodes of
    OCP cluster"
    > > is to be the commit messages.
    > >
    > > Mark and Kevin,
    > >
    > > Could you please update the LetsEncrypt ACME challenge?
    >
    > Just leave those commented out. We get that when we ask for the
    cert(s).
    >
    > Aside that, looks good to me. +1 to push anytime...

    Oh wait. There's another issue here.

    Right now with the 3.11 cluster, we run a vpn connection on all the
    compute nodes. This allows non IAD2 proxies to reach them.

    For theis 4 cluster are we going to:

    1. Somehow run openvpn clients on the nodes

    or

    2. Not going to do that.

    Of course not running vpn on them is easier configuration wise, but it
    means that we don't want to have dns resolve the cluster as 'wildcard'
    (all proxies), but instead just want to resolve to the IAD2 proxies
    directly. For example, koji is like this:

    koji            IN    A     38.145.60.20
    koji            IN    A     38.145.60.21

    Sorry I didn't think of this, need more coffee. ;)

    kevin
    _______________________________________________
    infrastructure mailing list --
    infrastructure@lists.fedoraproject.org
    <mailto:infrastructure@lists.fedoraproject.org>
    To unsubscribe send an email to
    infrastructure-le...@lists.fedoraproject.org
    <mailto:infrastructure-le...@lists.fedoraproject.org>
    Fedora Code of Conduct:
    https://docs.fedoraproject.org/en-US/project/code-of-conduct/
    <https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
    List Guidelines:
    https://fedoraproject.org/wiki/Mailing_list_guidelines
    <https://fedoraproject.org/wiki/Mailing_list_guidelines>
    List Archives:
    
https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
    
<https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org>
    Do not reply to spam on the list, report it:
    https://pagure.io/fedora-infrastructure
    <https://pagure.io/fedora-infrastructure>



--
David Kirwan
Software Engineer

Community Platform Engineering @ Red Hat

T: +(353) 86-8624108 IM: @dkirwan


_______________________________________________
infrastructure mailing list -- infrastructure@lists.fedoraproject.org
To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

_______________________________________________
infrastructure mailing list -- infrastructure@lists.fedoraproject.org
To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to