Skip to content

Conversation

GSokol
Copy link
Contributor

@GSokol GSokol commented Oct 16, 2018

No description provided.

@codecov-io
Copy link

codecov-io commented Oct 16, 2018

Codecov Report

Merging #127 into master will increase coverage by 0.09%.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff             @@
##           master     #127      +/-   ##
==========================================
+ Coverage   63.46%   63.56%   +0.09%     
==========================================
  Files          24       24              
  Lines        2116     2116              
==========================================
+ Hits         1343     1345       +2     
+ Misses        618      617       -1     
+ Partials      155      154       -1
Impacted Files Coverage Δ
security/vault.go 77.37% <0%> (+1.45%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8b312dd...b7f6134. Read the comment docs.

@Skarlso
Copy link
Member

Skarlso commented Oct 16, 2018

@GSokol Hi!

thank you for your contribution! At a first glance, could you please remove the accidental swap file .ingress.yaml.swp? :)

Thanks!

I'll review some more later on.

@perriea
Copy link

perriea commented Oct 16, 2018

Thanks @GSokol !
I will also participate in this review (#126) :)

Copy link
Member

@Skarlso Skarlso left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some comments and questions regarding the config files.
To be fair, it did start up the Gaia after deploy.

2018-10-16T19:25:11.506Z [WARN ] Gaia: using auto-generated key to sign jwt tokens, do not use in production
2018-10-16T19:25:11.675Z [INFO ] Gaia: vault file doesn't exist. creating...
⇨ http server started on [::]:8080

Makefile Outdated
@@ -29,3 +32,6 @@ test-cover:
go test -v ./... --coverprofile=cover.out

release: compile_frontend static_assets compile_backend

deploy:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please rename this one to deploy-kube or something as just deploy is too ambiguous and could mean anything.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also, might be prudent to add a dry-run option.

@Skarlso Skarlso added the Needs Work The PR still requires some work from the submitter. label Oct 16, 2018
@Skarlso
Copy link
Member

Skarlso commented Oct 17, 2018

Testing:

❯ minikube addons list
- addon-manager: enabled
- coredns: enabled
- dashboard: enabled
- default-storageclass: enabled
- efk: disabled
- freshpod: disabled
- heapster: disabled
- ingress: disabled
- kube-dns: disabled
- metrics-server: disabled
- nvidia-driver-installer: disabled
- nvidia-gpu-device-plugin: disabled
- registry: disabled
- registry-creds: disabled
- storage-provisioner: enabled
❯ kubectl get po -n kube-system
NAME                                    READY   STATUS    RESTARTS   AGE
coredns-c4cffd6dc-6pgtk                 1/1     Running   0          17m
etcd-minikube                           1/1     Running   0          17m
kube-addon-manager-minikube             1/1     Running   0          17m
kube-apiserver-minikube                 1/1     Running   0          16m
kube-controller-manager-minikube        1/1     Running   0          16m
kube-dns-86f4d74b45-r46mm               3/3     Running   0          17m
kube-proxy-bxgrg                        1/1     Running   0          17m
kube-scheduler-minikube                 1/1     Running   0          16m
kubernetes-dashboard-6f4cfc5d87-tfd8s   1/1     Running   0          17m
storage-provisioner                     1/1     Running   0          17m
tiller-deploy-6fd8d857bc-whthh          1/1     Running   0          1m

@GSokol So um.. I don't have the ingress provider.

EDIT oh so I have to create that on my own. Ah..

@Skarlso
Copy link
Member

Skarlso commented Oct 17, 2018

@GSokol yeah it's not working. I enabled ingress, plus refrained from using dnsmasq. I edited my etc host file to contain it.

You are missing one more step or you did something that is not described here. :)

http://gaia.k8s.dev -- trying to call this redirects to HTTPS which I don't know why because the rules aren't saying that.

The ingress provider isn't created unless I do some magic. Which is I guess fine in some case? Is it created for you or are you doing that by hand somehow?

@GSokol
Copy link
Contributor Author

GSokol commented Oct 17, 2018

@Skarlso I really do not remember. I use version 0.25.0. About https -- it seems to me, that's google chrome's problem: kubernetes/ingress-nginx#668.

@GSokol
Copy link
Contributor Author

GSokol commented Oct 17, 2018

@Skarlso Oh, sorry! I've found my tpls! Just several minutes!

@Skarlso
Copy link
Member

Skarlso commented Oct 17, 2018

@GSokol There we go. :P Nice. :) I'll give this a whirl once I get home. Thanks!

Copy link
Member

@Skarlso Skarlso left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@GSokol Fantastic work! Now I could make it work, and everything is working fine. I have a few other modification changes but they are really tiny. :) After that we can merge this baby. Thank you for your perseverance!

@Skarlso
Copy link
Member

Skarlso commented Oct 18, 2018

@GSokol could you please add the scope as well to the ingress for gaia namespace? That seems to be missing form the commit you made. 😊

@GSokol
Copy link
Contributor Author

GSokol commented Oct 19, 2018

@Skarlso

@GSokol could you please add the scope as well to the ingress for gaia namespace? That seems to be missing form the commit you made. 😊

What do you min scope?

@Skarlso
Copy link
Member

Skarlso commented Oct 19, 2018

@GSokol this stuff: - --watch-namespace=gaia this is scope. And you can add something like this:
controller.scope.enabled
controller.scope.namespace
In helm in order to configure the scope of your ingress.

If you don't do that, that means it will handle everything everywhere. Thus if you have an ingress and you need it only for one namespace you specify a scope. And then you can have multiple ingresses for different scopes.

@GSokol
Copy link
Contributor Author

GSokol commented Oct 19, 2018

@Skarlso It's more useful to have only one ingress-controller, that looks for all ingress configs in all namespaces and if you want to disable one, you may do it using helm templates:

{{ if .Values.helm.enabled }}
apiVersion: extensions/v1beta1
kind: Ingress
...
{{ end }}

That's because of ingress-controller is shared resource between different services (and namespaces).

@Skarlso
Copy link
Member

Skarlso commented Oct 19, 2018

On a large project you can have several with different settings.

https://github.com/helm/charts/tree/master/stable/nginx-ingress

Here, if you look for scope that's what it defines.

Also, this: https://github.com/nginxinc/kubernetes-ingress/tree/master/examples/multiple-ingress-controllers

Also, this: https://kubernetes.github.io/ingress-nginx/deploy/

Where this reads...:

The default configuration watches Ingress object from all the namespaces. To change this behavior use the flag --watch-namespace to limit the scope to a particular namespace.

so, normally, I would like to avoid putting an ingress control into a cluster which uses multiple ones that will catch every namespace. Gaia could maybe be deployed into a cluster which runs several things.

@Skarlso
Copy link
Member

Skarlso commented Oct 19, 2018

@GSokol Would you like to change something else, or can I merge this? :)

@Skarlso Skarlso merged commit 3e78a92 into gaia-pipeline:master Oct 20, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Needs Work The PR still requires some work from the submitter.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants