Re: Running sshd in a Docker Container on Openshift

2017-07-13 Thread Tobias Florek
Hi!

> Where do you read OpenSSH is dropping that mode?

I forget to include the list.
See https://www.openssh.com/txt/release-7.5, UsePrivilegeSeparation. I
understand that that will kill using it as non-root.

Cheers,
 Tobias Florek

___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users


Re: oc rsh or oc get pod -w disconnection after few minutes

2017-07-13 Thread Philippe Lafoucrière
We have achieved a lot of tests, and the connection is dropped somewhere in
Openshift, not by the firewall.

As we don't have any proxy, except haproxy.

We've seen
https://docs.openshift.com/container-platform/3.3/install_config/router/default_haproxy_router.html#preventing-connection-failures-during-restarts

Could it be related?
​
We're seeing a disconnection of `oc get events -w` after exactly 30s, which
is exactly the reload time of haproxy.

thanks
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users


Re: Why openshift requires DNS server

2017-07-13 Thread Clayton Coleman
We've discussed it, there are other near term priorities.

On Jul 13, 2017, at 10:36 AM, Fox, Kevin M  wrote:

Is there any intention to contribute it to k8s?

Thanks,
Kevin
--
*From:* dev-boun...@lists.openshift.redhat.com [
dev-boun...@lists.openshift.redhat.com] on behalf of Jordan Liggitt [
jligg...@redhat.com]
*Sent:* Thursday, July 13, 2017 5:57 AM
*To:* Haoran Wang
*Cc:* users@lists.openshift.redhat.com; d...@lists.openshift.redhat.com
*Subject:* Re: Why openshift requires DNS server

> Why does separate dns server need? Could kube-dns be used?

kube-dns is actually a separate dns server as well. Openshift's DNS
implementation resolves some of the scalability issues kube-dns has and is
preferred


On Jul 13, 2017, at 6:20 AM, Haoran Wang  wrote:

Hi,
1. when you setup your cluster, you will have some node that running a
router pod,and  you need have a subdomain for your cluster, for example,
you cluster will use product.example.com, so you need the DNS server
setting forward the request with this DNS name prefix product.example.com to
the router node.

2. Assume create a project named test, and  you deploy an app to the
openshift cluster, you need create a route [1] for external access,  after
you do that, the url you can be access is by test.product.example.com.
 when you access the your app from outside, the general flow will be:

1. public dns server redirect you to your DNS server
2. Your dns server forward your request to one of the  node which have
openshift router pod deployed
3. the router pod(it's running haproxy by default) will forward the request
to the running pods

Hope this can help you. :)


[1]https://docs.openshift.org/latest/dev_guide/routes.html

Regards,
Haoran Wang

OpenShift QE
IRC: haowang
Raycom office - Red Hat China
Direct: +86 10  <+86%2010%206562%207492>65339430(ext-8389430)


On Thu, Jul 13, 2017 at 5:47 PM, bmeng  wrote:

> AFAIK, the kube-dns resolve the service-names inside the cluster.
>
> The dns server required by OpenShift gives the applications external
> accessibility.
>
> With the dns resolution and the route you created for your application,
> you can access your web application anywhere.
>
> On 07/13/2017 05:09 PM, Yu Wei wrote:
>
> Hi,
>
> I'm learning OpenShift by setting up cluster with VMs.
>
> From the document, some content about DNS is as below,
>
> *OpenShift Origin requires a fully functional DNS server in the
> environment. This is ideally a separate host running DNS software and can
> provide name resolution to hosts and containers running on the platform.*
>
>
> Why does separate dns server need? Could kub-dns be used?
>
>
> Thanks,
>
> Jared, (韦煜)
> Software developer
> Interested in open source software, big data, Linux
>
>
> ___
> users mailing 
> listusers@lists.openshift.redhat.comhttp://lists.openshift.redhat.com/openshiftmm/listinfo/users
>
>
>
> ___
> dev mailing list
> d...@lists.openshift.redhat.com
> http://lists.openshift.redhat.com/openshiftmm/listinfo/dev
>
>
___
dev mailing list
d...@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev

___
dev mailing list
d...@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users


Re: Why openshift requires DNS server

2017-07-13 Thread Jordan Liggitt
> Why does separate dns server need? Could kube-dns be used?

kube-dns is actually a separate dns server as well. Openshift's DNS
implementation resolves some of the scalability issues kube-dns has and is
preferred


On Jul 13, 2017, at 6:20 AM, Haoran Wang  wrote:

Hi,
1. when you setup your cluster, you will have some node that running a
router pod,and  you need have a subdomain for your cluster, for example,
you cluster will use product.example.com, so you need the DNS server
setting forward the request with this DNS name prefix product.example.com to
the router node.

2. Assume create a project named test, and  you deploy an app to the
openshift cluster, you need create a route [1] for external access,  after
you do that, the url you can be access is by test.product.example.com.
 when you access the your app from outside, the general flow will be:

1. public dns server redirect you to your DNS server
2. Your dns server forward your request to one of the  node which have
openshift router pod deployed
3. the router pod(it's running haproxy by default) will forward the request
to the running pods

Hope this can help you. :)


[1]https://docs.openshift.org/latest/dev_guide/routes.html

Regards,
Haoran Wang

OpenShift QE
IRC: haowang
Raycom office - Red Hat China
Direct: +86 10  <+86%2010%206562%207492>65339430(ext-8389430)


On Thu, Jul 13, 2017 at 5:47 PM, bmeng  wrote:

> AFAIK, the kube-dns resolve the service-names inside the cluster.
>
> The dns server required by OpenShift gives the applications external
> accessibility.
>
> With the dns resolution and the route you created for your application,
> you can access your web application anywhere.
>
> On 07/13/2017 05:09 PM, Yu Wei wrote:
>
> Hi,
>
> I'm learning OpenShift by setting up cluster with VMs.
>
> From the document, some content about DNS is as below,
>
> *OpenShift Origin requires a fully functional DNS server in the
> environment. This is ideally a separate host running DNS software and can
> provide name resolution to hosts and containers running on the platform.*
>
>
> Why does separate dns server need? Could kub-dns be used?
>
>
> Thanks,
>
> Jared, (韦煜)
> Software developer
> Interested in open source software, big data, Linux
>
>
> ___
> users mailing 
> listusers@lists.openshift.redhat.comhttp://lists.openshift.redhat.com/openshiftmm/listinfo/users
>
>
>
> ___
> dev mailing list
> d...@lists.openshift.redhat.com
> http://lists.openshift.redhat.com/openshiftmm/listinfo/dev
>
>
___
dev mailing list
d...@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users


Re: Why openshift requires DNS server

2017-07-13 Thread bmeng

AFAIK, the kube-dns resolve the service-names inside the cluster.

The dns server required by OpenShift gives the applications external 
accessibility.


With the dns resolution and the route you created for your application, 
you can access your web application anywhere.



On 07/13/2017 05:09 PM, Yu Wei wrote:


Hi,

I'm learning OpenShift by setting up cluster with VMs.

From the document, some content about DNS is as below,

/OpenShift Origin requires a fully functional DNS server in the 
environment. This is ideally a separate host running DNS software and 
can provide name resolution to hosts and containers running on the 
platform./



Why does separate dns server need? Could kub-dns be used?


Thanks,

Jared, (韦煜)
Software developer
Interested in open source software, big data, Linux



___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users


___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users


Why openshift requires DNS server

2017-07-13 Thread Yu Wei
Hi,

I'm learning OpenShift by setting up cluster with VMs.

From the document, some content about DNS is as below,

OpenShift Origin requires a fully functional DNS server in the environment. 
This is ideally a separate host running DNS software and can provide name 
resolution to hosts and containers running on the platform.


Why does separate dns server need? Could kub-dns be used?


Thanks,

Jared, (韦煜)
Software developer
Interested in open source software, big data, Linux
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users