Re: pipeline validation failures

Wed, Sep 16, 2020 at 4:15 PM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: > Hi, > > I'm following the instructions in > https://docs.openshift.com/container-platform/4.5/pipelines/creating-applications-with-cicd-pipelines.html#running-a-pipeline_creating

pipeline validation failures

Hi, I'm following the instructions in https://docs.openshift.com/container-platform/4.5/pipelines/creating-applications-with-cicd-pipelines.html#running-a-pipeline_creating-applications-with-cicd-pipelines , and things break on step 1 of "Running a pipeline". Here is what I get: [zaphod@oc601

Re: when is a "secrets link" needed?

ods with that service account > to use a pull secret automatically. Import isn't related to a service > account, so it uses all pull secrets in the namespace. > > On Thu, Sep 10, 2020 at 9:25 AM Just Marvin < > marvin.the.cynical.ro...@gmail.com> wrote: > >> Hi, >

when is a "secrets link" needed?

Hi, I've observed that for an import-image to work, I don't need to link my pull secret to a service account. I just need to create the secret. Yet, there are other times when the link is absolutely required. (1) if the import-image works without a link to a service account, it must be working

Re: healthchecks and Istio

;m wondering if I asked in the right place. Is there a better mailing list for Red Hat Service Mesh questions? Regards, Marvin On Fri, Sep 4, 2020 at 9:40 AM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: > Hi, > > Found this: https://github.com/istio/istio/issues/262

healthchecks and Istio

Hi, Found this: https://github.com/istio/istio/issues/2628 . Given that this was from 2018, I went and checked the current istio FAQ and didn't see it listed there. Of course, current istio isn't what is bundled into the Red Hat Service Mesh, so I'm not sure what the status is. Is this still t

change in new-app behavior

Hi, When I use an oc v4.3 client against a v4.3 server, I get: [zaphod@oc3027208274 tmp]$ oc new-app --name=special-sm kstephe/security-manager --> Found image 8031044 (5 days old) in image stream "kstephe/security-manager" under tag "latest" for "kstephe/security-manager" * This image w

bound services tokens - how to configure

Hi, I'm looking at the documentation for bound service tokens , and while I'm clear on how the pod itself needs to be configured for using the token, it's not clear

trouble with port forwarding

Hi, I'm port forwarding to a redis server running within my openshift cluster: [zaphod@oc3027208274 ~]$ oc port-forward redis-1-s28xs 6379 Forwarding from 127.0.0.1:6379 -> 6379 Forwarding from [::1]:6379 -> 6379 I also have a redis-cli built in a container which I'm running on my machin

Re: scaleTargetRef for autoscaling

; > Which means you'd lose your scaling every deploy, so I think if you are > using deployment configs, then you'd want to reference those, rather than > the replication controllers that it automatically creates for you. > > Cheers, > > Joel > > On Wed, 17 Jun 20

scaleTargetRef for autoscaling

Hi, The docs say that the scaleTargetRef can point to either the deployment config or the replication controller. Is there a difference in autoscaling behavior if I pick one over the other? Regards, Marvin ___ users mailing list users@lists.openshif

cordoning and tainting - do they apply to openshift pods?

Hi, I'm working with a cluster which has three nodes - which each share the master and worker roles (obviously a demo, not a production cluster). We are trying to demonstrate the cluster response to node failure events, and as part of this work, we are also applying cordon and uncordon operati

Re: image registry problems

owcase how well OpenShift addresses node failures]. If the problem recurs again, I'll add in the details you asked for. Regards, Marvin On Thu, Jun 4, 2020 at 10:18 AM Oleg Bulatov wrote: > Hi Marvin, > > On Thu, Jun 04, 2020 at 08:01:57AM -0400, Just Marvin wrote: > > I went

image registry problems

Hi, I'm encountering pull problems from the internal image registry: [zaphod@oc3027208274 exam]$ oc logs -f bc/ingest-service-poc Cloning "g...@github.some.corp:surge-team-irs-mef/ingest-service.git" ... Commit: 8e51033f0863bae2372dcad6c1fbd9a0dd57ece6 (added postman tests) Au

Re: Not able to see redistribution of workload after node failures

"key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 30 } ] Regards, Marvin On Fri, May 29, 2020 at 12:00 PM Just Marvin < ma

Re: Not able to see redistribution of workload after node failures

" state forever, but the new pod does get into the "Running" state. Which is good. However, 5+ mins to get to this is too long for us. Is there some knob to turn which will allow us to decrease that period of time? Thanks, Marvin On Fri, May 29, 2020 at 10:32 AM Just Marvin < m

Re: Not able to see redistribution of workload after node failures

Hi, My problem has gotten a little worse.I cordoned off a node, rebooted it, and when the node came back up, I see that the pods have been restarted on the newly rebooted node. This seems like a bug. Any thoughts? Regards, Marvin On Fri, May 29, 2020 at 6:49 AM Just Marvin

Not able to see redistribution of workload after node failures

Hi, I'm working on a demonstration of OpenShift where we are trying to showcase its automatic response to various failure events - a big part of the demo being how it responds to node failure. I've got three worker nodes, and a reboot of one happens in < 2 mins. I would expect to see the pods

rebalancing workloads

Hi, If I add new nodes to an openshift v4 cluster, is there a command that will trigger a workload rebalance to take advantage of the new node? Or will I have to do something like delete existing pods so that the scheduler recreates it and upon recreate, it puts it on the new nodes? Regards,

Re: wait for build triggered by new-app

wrote: > what version is your cluster? conditions were only recently added to the > build.status section to OCP 4.4. oc wait doesn't work no resources that > don't have a status.conditions section. > > > > > On Thu, May 7, 2020 at 2:47 PM Just Marvin < > marvin

Re: wait for build triggered by new-app

version Client Version: openshift-clients-4.3.0-201909231341 Server Version: 4.3.12 Kubernetes Version: v1.16.2 [zaphod@oc3027208274 gatt]$ Regards, Marvin On Wed, May 6, 2020 at 1:20 PM Ben Parees wrote: > > > On Wed, May 6, 2020 at 12:50 PM Just Marvin < > marvin.the

Re: wait for build triggered by new-app

ugh the "wait" that I tried to put in place has not worked. [zaphod@oc3027208274 gatt]$ oc get builds NAME TYPE FROM STATUSSTARTED DURATION teams-1 Docker Git@b4dba21 Running 36 seconds ago [zaphod@oc3027208274 gatt]$ What am I doing wrong? Regards,

wait for build triggered by new-app

Hi, I've been trying to write a script that runs various commands following a new-app. These commands will operate on the dc created by new-app, but fail if the resources haven't reached the right stage, so I'd like to wait for the build to complete. Unfortunately, I can't seem to figure out t

Re: helm - revisited

Hi, Anyone? Is there an OpenShift specific version of helm? If so, where would the code for that be? I spent some time searching the openshift github repo and didn't find anything. Regards, Marvin On Sat, Apr 11, 2020 at 11:21 AM Just Marvin < marvin.the.cynical.ro...@gmail.co

helm - revisited

Hi, Now that there is some level of official support [1] within the platform for Helm, I thought I'd delve into how this technology works. Particularly w.r.t special OpenShift-only resources like BuildConfigs and ImageStreams, and DeploymentConfigs. My first experiment with a DeploymentConfig

logging for an openshift service

Hi, Is there a way I can enable logging or otherwise determine which pod (of all the ones that its selector selects) a service is sending requests to? Thanks, Marvin ___ users mailing list users@lists.openshift.redhat.com http://lists.openshift.redh

Re: route not load balancing

Hi, The key was to set the *haproxy.router.openshift.io/disable_cookies <http://haproxy.router.openshift.io/disable_cookies>* annotation to true. Regards, Marvin On Mon, Dec 16, 2019 at 9:53 AM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: > Dan, > > T

Re: route not load balancing

d pod. But this is definitely a cheat for me. I would like to get the "balance" annotation, or whatever is the right approach, working. Is there a way to troubleshoot this and figure out what is going wrong? Regards, Marvin On Mon, Dec 16, 2019 at 8:22 AM Dan Mace wrote: >

Re: route not load balancing

51c weight 256 check inter 5000ms sh-4.2$ I probably want "roundrobin" instead of that, though I would argue the system isn't doing what is implied by "leastconn" either. Is there a way to change that setting to what I need? Regards, Marvin On Sun,

route not load balancing

Hi, I'm using code-ready containers and I've scaled my pod to do, but when I hit it form a for loop in a shell script, I get back results indicating that its only being routed to one of the pods. Is there some setting that I need to tweak to make things load balanced even at low load? [zaphod

[solved] Re: route still not working....

n On Sun, Dec 15, 2019 at 3:30 PM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: > Jean-Francois, > > Hmmthat's not what I'm seeing. I do get logs that indicate that > the liberty server is starting up correctly with the app. In fact, using > por

Re: route still not working....

https://github.com/kstephen314159/simple-stuff.git > > > then the based docker image used will be te default for Java and thus you > pod will not start as it will miss the Liberty runtime. > Check you pod logs > > On Sun, Dec 15, 2019 at 8:51 PM Just Marvin < > marvin.the.cyni

Re: route still not working....

eed to specific the Docker image when you create your app from the > repo > > > > On Sun, Dec 15, 2019 at 8:19 PM Just Marvin < > marvin.the.cynical.ro...@gmail.com> wrote: > >> Hi, >> >> Starting a new thread to clear my head. Its only been 8 hour

route still not working....

Hi, Starting a new thread to clear my head. Its only been 8 hours since I started banging my head on the desk because of this problem, but it feels like 80. A little more background than in my previous thread: - The container I'm working with is websphere-liberty. I can simply do a "..

Re: route not working and I'm at my wits end

Type: text/html < Regards, Marvin On Sat, Dec 14, 2019 at 10:16 PM Erik McCormick wrote: > > > On Sat, Dec 14, 2019, 10:04 PM Just Marvin < > marvin.the.cynical.ro...@gmail.com> wrote: > >> Hi, >> >> I'm able to use port-forwarding to verify

route not working and I'm at my wits end

Hi, I'm able to use port-forwarding to verify that my service is functioning properly. curl -v -u abcd:abcd@ -H "Accept: application/json" --cookie-jar cookie-jar --cookie cookie-jar http://localhost:9080/session-song-demo/sing/song?seen=47 * About to connect() to localhost port 9080 (#0) *

where does CRC store its data?

Hi, On my host system, I see: [zaphod@oc6010654212 code]$ oc get pv NAME CAPACITY ACCESS MODES RECLAIM POLICY STATUS CLAIM STORAGECLASS REASON AGE pv0001 100Gi RWO,ROX,RWXRecycle Bound openshift-image-registry/cr

cronjobs - how does this work?

Hi, I'm poring through the text at https://docs.openshift.com/container-platform/4.2/nodes/jobs/nodes-nodes-jobs.html#nodes-nodes-jobs-creating-cron_nodes-nodes-jobs . Should I interpret spec.jobTemplate.spec.template.spec.containers.command as a command that exists within the container speci

Re: connection to CRC from CRS

ft 4.x installation without specific > configuration, it would behave the same as any other OpenShift 4.x install. > Have you been able to verify if the connector works with a OpenShift > installer deployed cluster, like on AWS or other cloud provider? > > regards, > >

external ips - seems like handwaving in docs

Hi, https://docs.openshift.com/container-platform/4.2/networking/configuring-ingress-cluster-traffic/configuring-ingress-cluster-traffic-service-external-ip.html#nw-creating-project-and-service_configuring-ingress-cluster-traffic-service-external-ip . Step 4 seems like magic. When I do that

Re: sftp service on cluster - how to do it

Tobias, I _will_ have access to load balancers if needed, but at the moment, I need to understand how it works. Assume that I do: what exactly does "proxy to the internal sftp service" mean? I assume "sftp service" would be the service that I set up, but which piece is the proxy? I don't see t

sftp service on cluster - how to do it

Hi, I know its trivial to run an sftp server as a pod on an openshift cluster. The real trick would be to figure out how clients outside the cluster could access this service. How can one accomplish this? Regards, Marvin ___ users mailing list users

Re: connection to CRC from CRS

Hi, One more detail that perhaps need to be addressed: [image: image.png] That oc binary came from the CRC install, so not sure why CRS is unhappy. Regards, Marvin On Sun, Oct 13, 2019 at 10:17 AM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: > Hi, > >

connection to CRC from CRS

Hi, I'm using CodeReady Studio, and trying to point to my CRC install (which I assume should work - please let me know if that is a misguided notion). Here is what I get with the developer/developer oc login: [image: image.png] How do I fix this problem? Regards, Marvin

Re: [crc] expired certs

e, but requested to > use a new version (as you started to use a new download). This can be > resolved with a `crc delete`. > > In newer versions, to be available hopefully soon, these messages will > be clearer as they contain instructions on how to proceed. > > > Gerard &g

Re: [crc] expired certs

omain 'crc' already exists with uuid af77791e-7b48-41a2-8a55-2b2af884c1c7') How do I fix this? Regards, Marvin On Sun, Oct 13, 2019 at 9:22 AM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: > Hi, > > I didn't see any mention of this in the

[crc] expired certs

Hi, Getting this, this morning: INFO Checking if CRC bundle is cached in '$HOME/.crc' INFO Starting stopped VM ... INFO Verifying validity of the cluster certificates ... ERRO Error occurred: Certs have expired, they were valid till: 09 Oct 19 12:47 + [zaphod@oc6010654212 ~]$ How do

Re: istio pods

you show us? (you can remove any sensitive data, like pullSecrets) > > Regards. > > On Thu, Oct 10, 2019 at 1:53 PM Just Marvin < > marvin.the.cynical.ro...@gmail.com> wrote: > >> Samuel, >> >> See below, the output from "oc describe node " for one o

Re: istio pods

; Meanwhile, istio itself can ship with more or less components, ... > > If using EFK: you may be able to lower resources requests/limits for > ElasticSearch > If using Hawkular: same remark regarding Cassandra > Hard to say, without seeing it. But you can probably free up some >

Re: istio pods

u can use "oc describe pod ", to figure out what's going on > with your pod. > could be that you're out of cpu/memory. > > Regards. > > On Sun, Oct 6, 2019 at 9:27 PM Just Marvin < > marvin.the.cynical.ro...@gmail.com> wrote: > >

Re: ocp4 cluster fails to initialize on GCP

lsChainVerboseErrors Is this a potential cause of my problems or an unrelated issue? Regards, Marvin On Mon, Oct 7, 2019 at 1:01 PM W. Trevor King wrote: > On Mon, Oct 7, 2019 at 4:22 AM Just Marvin wrote: > > I went with the default install-config.yaml and there were 3 worker > nodes

Re: ocp4 cluster fails to initialize on GCP

you have no compute machines associated with your cluster". If I'm looking in the wrong direction, please point me in the right direction. Regards, Marvin On Mon, Oct 7, 2019 at 12:53 AM W. Trevor King wrote: > On Sun, Oct 6, 2019 at 9:35 AM Just Marvin wrote: > >

istio pods

Hi, [zaphod@oc3027208274 ocp4.2-aws]$ oc get pods NAME READY STATUSRESTARTS AGE istio-citadel-7cb44f4bb-tccql 1/1 Running 0 9m35s istio-galley-75599dbc67-b4mgx 1/1 Running 0 8m41s istio-policy-56476c984b-c7t8j 0/2 *

Re: ocp4 cluster fails to initialize on GCP

Hi, FYI - was able to use the same downloaded binaries and install successfully on AWS. In AWS, I do get the the widlcarded *.apps A record in the public hosted zone. Regards, Marvin On Sun, Oct 6, 2019 at 8:38 AM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: &g

Re: ocp4 cluster fails to initialize on GCP

W. Trevor King wrote: > On Sat, Oct 5, 2019 at 11:22 AM Just Marvin wrote: > > INFO Destroying the bootstrap resources... > > INFO Waiting up to 30m0s for the cluster at > https://api.one.discworld.a.random.domain:6443 to initialize... > > FATAL failed to initialize the

ocp4 cluster fails to initialize on GCP

Hi, Here is what I get: aphod@oc3027208274 ocp4.2]$ ./openshift-install create cluster INFO Consuming "Install Config" from target directory INFO Creating infrastructure resources... INFO Waiting up to 30m0s for the Kubernetes API at https://api.one.discworld.a.random.domain:6443... INFO API

Re: [OKD/OCP v4]: deployment on a single node using CodeReady Container

Forgot to add the link for the reference: [1] https://code-ready.github.io/crc/ - section 1.4 On Sun, Sep 22, 2019 at 3:35 PM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: > Daniel, > > TBH, I didn't follow a lot of that. But the bit that I did get was >

Re: [OKD/OCP v4]: deployment on a single node using CodeReady Container

very apiserver to come up. Not sure what is going on. Probably, as you mentioned, networking hasn't been set up in a fashion that allows the ssh to work. Regards, Marvin On Sat, Sep 21, 2019 at 3:36 AM Daniel Veillard wrote: > On Fri, Sep 20, 2019 at 04:47:09PM -0400, Just Marvin wro

Re: [OKD/OCP v4]: deployment on a single node using CodeReady Container

fort, networking is the 75% of the > remaining problems > > Daniel > > > On Thu, Sep 19, 2019 at 8:50 PM Just Marvin < > > marvin.the.cynical.ro...@gmail.com> wrote: > > > > > Fernando, > > > > > > Is CRC only expected to run on bare-m

CRC and OpenShift Service Mesh?

Hi, Are these [1] instructions expected to work for CRC as well, or are there different instructions / its not possible to get the istio working on CRC? Regards, Marvin [1] https://docs.openshift.com/container-platform/4.1/service_mesh/service_mesh_install/installing-ossm.html __

Re: [OKD/OCP v4]: deployment on a single node using CodeReady Container

Fernando, Is CRC only expected to run on bare-metal? I tried running it on a VM in GCP and it didn't work, complaining about virtualization problems (sorry - forget the exact error). It runs find on my laptop, but I'd really like to not muddy up my laptop with all kinds of experimental things.

Re: configuring access to registry.redhat.io images

or scripts running the command - so is there a way to turn off that logic? Regards, Marvin On Mon, Sep 16, 2019 at 1:13 PM Just Marvin < marvin.the.cynical.ro...@gmail.com> wrote: > Fernando, > > Thanks for offering a solution. I've run into a different problem with >

Re: configuring access to registry.redhat.io images

t; > > On Mon, Sep 16, 2019 at 1:48 PM Ben Parees wrote: > >> Looks right to me, i'm not sure why new-app is not finding it. >> >> Can you try using the --image-stream openshift/jboss-eap72-openshift >> syntax instead of the ~ syntax and see if it makes a diffe

Re: configuring access to registry.redhat.io images

235 generation: 2 image: sha256:57dd3903b584970353a1b9503bc279a8082376e33dab7dc29825982ad9153235 tag: latest Regards, Marvin On Mon, Sep 16, 2019 at 11:20 AM Ben Parees wrote: > > > On Mon, Sep 16, 2019 at 11:04 AM Just Marvin < > marvin.the.cynical.ro...@gmail.com> wrote

Re: configuring access to registry.redhat.io images

s one of the same application from the > DO288 course. It uses the 'php' image stream from the 'openshift' namespace. > > $ oc new-app php:7.2~https://github.com/RedHatTraining/DO288-apps --name > hello --context-dir php-helloworld > > []s, Fernando Lozano >

configuring access to registry.redhat.io images

Hi, I'm working with code-ready-containers, and I can see that there are image streams that I need in the openshift namespace (for example, the jboss eap 7.2 image). The images themselves are not local - but on registry.redhat.io. My problem is two fold: (1) how do I configure the cluster such

oc expose syntax

Hi, The syntax info here ( https://docs.openshift.com/container-platform/3.11/cli_reference/basic_cli_operations.html#expose ) has me puzzled: (a) whats a generator, and why should I care about them? (b) where is the information on the "port" flag. The Redhat provided course material I'm takin

Re: install questions (on AWS)

ed to pay for 9 (because the first one is free). How does this work? To be clear, I'm asking about v3. I'll ask this and other v4 questions in the forum you pointed me to. Thanks, Marvin On Wed, Mar 6, 2019 at 3:53 PM W. Trevor King wrote: > On Wed, Mar 6, 2019 at 12:38 PM

install questions (on AWS)

Hi, Firstly - is this the right place to ask questions pertaining to the v4 developer preview? If not, would appreciate a pointer to the right place please. I have questions pertaining to how one would install on AWS (v4 or v3). AWS charges for Elastic IP's that are not mapped to a runnin

Re: Having trouble with "oc explain" syntax

Clayton, Appreciate the quick response. Is there an alternative for getting information on the structure of a template? Most of the interesting content in a template is under that "objects" tree. For example, template.objects.spec doesn't work either. I tried "oc explain object" but the tool w