Re: source IP restriction on routes

2016-10-17 Thread Ram Ranganathan
*Sorry for the duplicate email Sebastian - the users list rejected the original mail* You would need a customized haproxy config template but you could add something like this in the 2 frontends public[_ssl] (or to specific backends if you need more granular control on a per-backend basis): acl a

RE: manage images within internal docker registry

2016-10-17 Thread Walters, Todd
Hi David, I think you need to use 'oadm prune images' to clean up docker images https://docs.openshift.org/latest/admin_guide/pruning_resources.html thanks, todd -Original Message- From: users-boun...@lists.openshift.redhat.com [mailto:users-boun...@lists.openshift.redhat.com] On Behal

Re: How to manage images within Open Shift internal docker registry / HA of docker registry

2016-10-17 Thread Clayton Coleman
> On Oct 17, 2016, at 7:58 AM, David Strejc wrote: > > Is there any way how I can remove unused or old images from internal > Open Shift docker registry? The prune command is intended for that, although it has some limitations described in the docs. > > And other question - is there any docume

How to manage images within Open Shift internal docker registry / HA of docker registry

2016-10-17 Thread David Strejc
Is there any way how I can remove unused or old images from internal Open Shift docker registry? And other question - is there any documentation for HA deployment of Open Shift docker registry as this can be single point of failure? Thank you. David Strejc https://octopussystems.cz t: +420734270

Re: First build through UI fails due to missing secret

2016-10-17 Thread Jordan Liggitt
First, this is a case where additional user-provided credentials are needed for a successful build. The UI doesn't yet provide a way for users to enter secrets during the app creation flow. The work to add this is in progress and tracked in https://trello.com/c/OVlx3edX and is planned for 1.4 Seco

Re: First build through UI fails due to missing secret

2016-10-17 Thread Diego Castro
This is a know issue, sometimes builds fail due lack of secrets. Try delete the following service accounta, dont worry they are recreated automatically: $ oc delete sa default builder deployer -n Diego Castro Gmail Android Em 17 de out de 2016 4:37 AM, "David Strejc" escreveu: > Is there any

Re: source IP restriction on routes

2016-10-17 Thread Frederic Giloux
Hi Sebastian Depending on the granularity you want you can deploy your routers on different nodes, group your routes according to the IPs you want to provide access from and configure IPtables accordingly. For a finer, app specific control you may want to look at network policies but they are st

source IP restriction on routes

2016-10-17 Thread Sebastian Wieseler
Hi guys, Is it possible with router (s, sharding) to restrict access on IP level? We want to expose various applications via various routers, but restrict access via source IP addresses, so that different source IP addresses can only access allowed applications. How can we do that? Thanks a lot

First build through UI fails due to missing secret

2016-10-17 Thread David Strejc
Is there any way how I can setup first build through UI when cloning git which requires key / auth? Now my first build fails and I need to add ssh key as secret to OpenShift and then rerun build with ssh keys. Thank you. David Strejc https://octopussystems.cz t: +420734270131 e: david.str...@gma