Turning off the legacy mailing lists

2021-08-09 Thread Brenton Leanhardt
Hi, Since OKD 3.x has been deprecated we haven't had any new posts to our dev or users lists. Even looking at the rest of the year there has only been 1 thread on the dev list and 4 on the users list. We've had these lists for over 9 years and I believe they've run their course. I intend to set

OKD 3 users are strongly encouraged to move to 4

2021-01-15 Thread Brenton Leanhardt
time="2021-01-15T16:23:03-05:00" level=warning msg="No one is building OKD 3 anymore!" Hi, I work on the team that maintains OpenShift 3 and develops version 4. Recently I learned there is at least one active 3.x OKD/Origin cluster (ie, a bug was filed that only impacted 3.x OKD, not OpenShift Co

Re: Undelivered Mail Returned to Sender

2017-02-09 Thread Brenton Leanhardt
On Wed, Feb 8, 2017 at 9:59 AM, Brenton Leanhardt wrote: > Hi Aleksandar, > > I'm getting daily updates from our mail and list server admins. It's > still being debugged though it's a mystery exactly what is rewriting the > list alias. > > --Brenton >

Re: Undelivered Mail Returned to Sender

2017-02-08 Thread Brenton Leanhardt
Hi Aleksandar, I'm getting daily updates from our mail and list server admins. It's still being debugged though it's a mystery exactly what is rewriting the list alias. --Brenton On Tue, Feb 7, 2017 at 3:55 PM, Aleksandar Lazic wrote: > FYI, and any news about this topic. > > > F

Re: Hov to install mod_auth_kerb and modify configuration file for apache for applications of console.itos.redhat.com

2016-12-19 Thread Brenton Leanhardt
On Sun, Dec 18, 2016 at 10:04 PM, Fengshuang Tan wrote: > Hi, > > Now I need to kerberize application[2] in openshift[1], I have got the > kerberos keytab, I have to install module mod_auth_kerb firstly and then > modify apache configuration file to use this module, I don't have > permission, cou

Re: Keycloak as oauth provider

2016-09-20 Thread Brenton Leanhardt
On Tue, Sep 20, 2016 at 2:35 PM, Charles Moulliard wrote: > As OpenID is supported by Keycloak, I'm fine to use > (https://docs.openshift.org/latest/install_config/configuring_authentication.html#OpenID) > but that should be great to have an openshift distro packaging keycloak. I might be misunde

Re: scenarios of entire app in a cluster unavailable

2016-09-20 Thread Brenton Leanhardt
On Mon, Sep 19, 2016 at 6:40 PM, Srinivas Naga Kotaru (skotaru) wrote: > Trying to understand on which scenarios all the instances of an application > running from cluster unavailable? > > > > OS upgrade failure?? > > Openshift upgrade bugs/failures/downtime? The best way to mitigate risks from t

automatic node evacuation on shutdown

2016-06-20 Thread Brenton Leanhardt
I vaguely remember hearing that Nodes in origin 1.2 were supposed to evacuate themselves automatically on shutdown. That doesn't seem to be the case. Am I imagining that or is it something in the works for origin 1.3? A quick search in trello didn't reveal anything. --Brenton _

Re: anyone seen this error from ansible install?

2016-06-08 Thread Brenton Leanhardt
Can you provide the version of ansible you are using as well as the RPM or git checkout ref of the playbooks you're using? Thanks, Brenton On Tue, Jun 7, 2016 at 9:01 PM, Alan Jones wrote: > Error followed by /etc/ansible/hosts below. > Alan > --- > TASK: [openshift_facts | Verify Ansible versio

Re: Problem with installation / updating of openshfit origin

2016-04-04 Thread Brenton Leanhardt
On Mon, Apr 4, 2016 at 1:38 AM, David Strejc wrote: > I got following error when I try to update my machines: > > --> Finished Dependency Resolution > Error: docker conflicts with origin-1.1.4-1.git.2.c8de71e.el7.centos.x86_64 > Error: Package: origin-node-1.1.4-1.git.2.c8de71e.el7.centos.x86_64 >

Re: Serious docker upgrade problem -> 1.8 -> 1.9 update breaks system

2016-03-09 Thread Brenton Leanhardt
has these fixes. On Wed, Mar 9, 2016 at 8:52 AM, Brenton Leanhardt wrote: > Yesterday on a system where I upgraded from Docker 1.8 to 1.9 I > started hitting this problem with a previously working etcd container: > > https://github.com/docker/docker/issues/17691 > > The only err

Re: Serious docker upgrade problem -> 1.8 -> 1.9 update breaks system

2016-03-09 Thread Brenton Leanhardt
Yesterday on a system where I upgraded from Docker 1.8 to 1.9 I started hitting this problem with a previously working etcd container: https://github.com/docker/docker/issues/17691 The only error I received when trying to run the container was "Could not find container for entity id ". I feel li

Re: NFS path vs hostpath volumes

2016-03-04 Thread Brenton Leanhardt
We wouldn't recommend allowing untrusted Pods to use hostPath volumes since that would effectively give them root on the Node. Another option would be to use the NFS plugin directly as mentioned in Example 4 on http://stackoverflow.com/questions/35364367/share-persistent-volume-claims-amongst-con

Re: add nodes on-the-fly

2016-02-20 Thread Brenton Leanhardt
On Sat, Feb 20, 2016 at 11:28 AM, Clayton Coleman wrote: > The ansible scripts should be reentrant (if you didn't change your > config files on disk after install), and adding a new node is just > adding the machine to the ansible inventory and rerunning. > There is a scaleup playbook specificall

Re: oc v1.1.2-dirty

2016-02-16 Thread Brenton Leanhardt
ld I had done. At the time that I >> built the SRPM I had a new uncommitted file in my git checkout. I've >> verified that the contents of the RPM are unaffected. We'll address >> this release process deficiency as we get automated builds ready for >> Centos. &g

Re: oc v1.1.2-dirty

2016-02-15 Thread Brenton Leanhardt
On Mon, Feb 15, 2016 at 8:07 AM, Den Cowboy wrote: > Why is this the name of this version? > oc v1.1.2-dirty > > Is it because of the new layout or is it deprecated/broken? I think you'll see this when you perform a build with files in your repository that aren't committed. > >

Re: OSE default SSL certs

2016-02-08 Thread Brenton Leanhardt
to create a certificate request from the preexisting certificates. Then I would sign the CSRs with the CA of my choosing. The Master would still need to have a copy of that CA or at least a subordinate CA. > > > -- > Srinivas Kotaru > > > > > > > On 2/5/16, 12:41 PM,

Re: OSE default SSL certs

2016-02-05 Thread Brenton Leanhardt
On Thu, Feb 4, 2016 at 1:54 PM, Srinivas Naga Kotaru (skotaru) wrote: > As part of OSE 3.X installation we have to generate multiple SSL certs for > clusters objects to communication (master, node, router, registry etc). I > knew all communication with in OSE using SSL. By default we might be > ge

Re: Advanced Installation Origin fails on first attempt

2016-02-03 Thread Brenton Leanhardt
What arguments are you passing to ansible-playbook? If I'm understanding you correctly you say that first it doesn't work, then you modify your inventory file in some way and then it works. However, you don't think the modifications are related to the error. The next time that happens if you could

Re: Offline Install

2016-01-29 Thread Brenton Leanhardt
Hi, See the notes here: https://github.com/openshift/openshift-ansible/blob/master/inventory/byo/hosts.origin.example#L62 That and the section below show you how to specify another registry to be used for all docker pulls as well as using a custom yum repository for RPM installations. --Brenton

Re: sysdig

2016-01-20 Thread Brenton Leanhardt
Looks like you might be hitting this: https://github.com/draios/sysdig/issues/513 On Wed, Jan 20, 2016 at 4:39 PM, Srinivas Naga Kotaru (skotaru) wrote: > Inspired with Monitoring Kubernetes with Sysdig article, thought of playing > around to see how it works. Unfortunately it is not working an

Re: routing/vhost alias

2016-01-20 Thread Brenton Leanhardt
On Wed, Jan 20, 2016 at 2:29 AM, Srinivas Naga Kotaru (skotaru) wrote: > Dale > > Thanks for reply. Am aware of this command but am not sure this is what am > looking > > We have 2 URL for every application. 1st one is generated by openshift > router and 2nd one client generated. Client generated

Re: Router Sharding

2016-01-15 Thread Brenton Leanhardt
enshift.redhat.com/releases_overview.html is a great place to see how cards across all the various trello boards map to releases. > > > -- > Srinivas Kotaru > > > > > > > On 1/15/16, 12:30 PM, "Brenton Leanhardt" wrote: > >>On Fri, Jan 15, 2016 at 12:47

Re: Router Sharding

2016-01-15 Thread Brenton Leanhardt
On Fri, Jan 15, 2016 at 12:47 PM, Srinivas Naga Kotaru (skotaru) wrote: > > Brenton said you guys are working on router sharding > > https://trello.com/c/DtPlixdb/49-8-router-sharding-traffic-ingress > > I didn’t get quite well description. What is this feature, how it is useful, > what are the us

Re: OpensShift SDN

2016-01-15 Thread Brenton Leanhardt
On Fri, Jan 15, 2016 at 9:35 AM, Dan Winship wrote: > On 01/14/2016 05:54 PM, Srinivas Naga Kotaru (skotaru) wrote: >> Dan >> >> One question >> >> Masters also using same port for VXLAN communication with nodes >> right? If we block the port from internal and external subnets >> but if we put mas