Re: Packaging CF app as bosh-release
Amit Kumar Gupta
The shared file system aspect is an interesting wrinkle to the problem.
toggle quoted messageShow quoted text
Unless you use some network layer to how you write to the shared file system, e.g. SSHFS, I think apps will not work because they get isolated to run in a container, they're given a chroot "jail" for their file system, and it gets blown away whenever the app is stopped or restarted (which will commonly happen, e.g. during a rolling deploy of the container-runner VMs). Do you have something that currently works? How do your VMs currently access this shared FS? I'm not sure BOSH has the abstractions for choosing a shared, already-existing "persistent disk" to be attached to multiple VMs. I also don't know what happens when you scale your VMs down, because BOSH would generally destroy the associated persistent disk, but you don't want to destroy the shared data. Dmitriy, any idea how BOSH can work with a shared filesystem (e.g. HDFS)? Amit
On Wed, Sep 16, 2015 at 6:54 AM, Kayode Odeyemi <dreyemi(a)gmail.com> wrote:
|
|
Re: Packaging CF app as bosh-release
Paul Bakare
On Wed, Sep 16, 2015 at 3:44 PM, Amit Gupta <agupta(a)pivotal.io> wrote:
Are the spark jobs tasks that you expect to end, or apps that you expectThey are tasks that run forever. The jobs are subscribers to RabbitMQ queues that process messages in batches. Do your jobs need to write to the file system, or do they access aThe jobs write to shared filesystem. Do you need things like a static IP allocated to your jobs?No. Are your spark jobs serving any web traffic?No.
|
|
Re: Packaging CF app as bosh-release
Amit Kumar Gupta
Are the spark jobs tasks that you expect to end, or apps that you expect to
toggle quoted messageShow quoted text
run forever? Do your jobs need to write to the file system, or do they access a shared/distributed file system somehow? Do you need things like a static IP allocated to your jobs? Are your spark jobs serving any web traffic?
On Wed, Sep 16, 2015 at 1:32 AM, Kayode Odeyemi <dreyemi(a)gmail.com> wrote:
|
|
Re: DEA/Warden staging error
Mike Dalessio
Worth noting that the git repo also needs to allow anonymous access. If
toggle quoted messageShow quoted text
it's a private repo, then the 'git clone' is going to fail. Can you verify that you can download the buildpack from your repo without authenticating?
On Tue, Sep 15, 2015 at 7:43 PM, CF Runtime <cfruntime(a)gmail.com> wrote:
It's not something we've ever seen before.
|
|
Re: cc metric: total_users
Klevenz, Stephan <stephan.klevenz@...>
Hi,
toggle quoted messageShow quoted text
I did look deeper into implementation. Actually there are two databases: ccdb and uaadb. Each of them has its own users table. The user count value of the uaadb/users is reported to admin ui and the user count of the ccdb/users is used for total_user metric. A ccdb/users table entry contains just a refid and for getting user details from uaa. So, we have two totals which can be different if users created for uaa which a not cc users. That's fine and this is what I did get from the first answer. But there is a remaining open point. The total of our ccdb/users is bigger than total of uaa/users. This is an inconsistency in ccdb/users which contains references to uaa users that do not exist. If this diffs grows over time then this is maybe a problem. Regards, Stephan Von: CF Runtime Antworten an: "Discussions about Cloud Foundry projects and the system overall." Datum: Mittwoch, 16. September 2015 10:56 An: "Discussions about Cloud Foundry projects and the system overall." Betreff: [cf-dev] Re: Re: Re: Re: cc metric: total_users The users reported by CloudController.total_users are the users the Cloud Controller has in its database. This is normally the same set of users that exist in UAA. However, there is nothing that prevents you from creating users via the UAAC cli tool, or creating new UAA clients that can create users themselves. Joseph OSS Release Integration Team
On Wed, Sep 16, 2015 at 12:03 AM, Voelz, Marco <marco.voelz(a)sap.com<mailto:marco.voelz(a)sap.com>> wrote:
Hi John, thanks for your answer, however, I don’t understand that completely. For the open source version of CF, what does “register in CF console” mean? And what might be an example of “other applications” you are referring to? Thanks and warm regards Marco On 16/09/15 08:29, "Klevenz, Stephan" <stephan.klevenz(a)sap.com<mailto:stephan.klevenz(a)sap.com>> wrote: Thanks for clarification -- Stephan Von: John Liptak Antworten an: "Discussions about Cloud Foundry projects and the system overall." Datum: Dienstag, 15. September 2015 18:17 An: "Discussions about Cloud Foundry projects and the system overall." Betreff: [cf-dev] Re: cc metric: total_users Cloud Controller reports the number of users register in CF console. UAAC reports additional users who may have access to other applications. So they are both correct, depending on what you need. For example, if you call the REST API for a UAAC user that isn't in the CF console, but still call the cloud controller REST API, you will get a 404. On Tue, Sep 15, 2015 at 10:10 AM, Klevenz, Stephan <stephan.klevenz(a)sap.com<mailto:stephan.klevenz(a)sap.com>> wrote: Hi all, I have a question, hopefully a small one :-) The CloudController.total_users metric (/CF\.CloudController\.0\..*\.total_users/) differs from number of users reported by uaac (uaac users command / admin ui). Can someone explain why this differs or which number is the correct one? Regards, Stephan
|
|
Re: User cannot do CF login when UAA is being updated
CF Runtime
If you can't get the list to accept the attachment, you can give it to Dies
and he should be able to get it to us. Joseph OSS Release Integration Team On Tue, Sep 15, 2015 at 7:19 PM, Yunata, Ricky <rickyy(a)fast.au.fujitsu.com> wrote: Hi Joseph,
|
|
Re: cc metric: total_users
CF Runtime
The users reported by CloudController.total_users are the users the Cloud
toggle quoted messageShow quoted text
Controller has in its database. This is normally the same set of users that exist in UAA. However, there is nothing that prevents you from creating users via the UAAC cli tool, or creating new UAA clients that can create users themselves. Joseph OSS Release Integration Team
On Wed, Sep 16, 2015 at 12:03 AM, Voelz, Marco <marco.voelz(a)sap.com> wrote:
Hi John,
|
|
Relationship between HM9000 and router jobs
Sylvain FAUVE
Hello,
My team was working on solving inconsistencies issue on etcd jobs, and realized that two hm9000 jobs were running at same time. When fixing this, we experienced route loss to our apps (then restage apps was needed). As far as I could read/understand there is no direct communication between router and hm9000... Router is getting info from NATS, and NATS gets it from ...? hm9000 ? I wonder which component is sending routes update to the router to keep them alive ? Thank you for your help Regards, Sylvain.
|
|
Re: Packaging CF app as bosh-release
Paul Bakare
On Wed, Sep 16, 2015 at 5:15 AM, Amit Gupta <amitkgupta84(a)gmail.com> wrote:
Can you say a bit more about what you're trying to do? I'm working on an experimental analytics project that leverages logsearch + Apache Spark. So instead of having the Spark jobs as apps, I'm thinking of building a bosh release job for it. Can possibly package anything but that way application will run inside a vm rather than on platform. What are the cons of apps running on VMs instead of warden?
|
|
Re: cc metric: total_users
Marco Voelz
Hi John,
toggle quoted messageShow quoted text
thanks for your answer, however, I don’t understand that completely. For the open source version of CF, what does “register in CF console” mean? And what might be an example of “other applications” you are referring to? Thanks and warm regards Marco
On 16/09/15 08:29, "Klevenz, Stephan" <stephan.klevenz(a)sap.com<mailto:stephan.klevenz(a)sap.com>> wrote:
Thanks for clarification -- Stephan Von: John Liptak Antworten an: "Discussions about Cloud Foundry projects and the system overall." Datum: Dienstag, 15. September 2015 18:17 An: "Discussions about Cloud Foundry projects and the system overall." Betreff: [cf-dev] Re: cc metric: total_users Cloud Controller reports the number of users register in CF console. UAAC reports additional users who may have access to other applications. So they are both correct, depending on what you need. For example, if you call the REST API for a UAAC user that isn't in the CF console, but still call the cloud controller REST API, you will get a 404. On Tue, Sep 15, 2015 at 10:10 AM, Klevenz, Stephan <stephan.klevenz(a)sap.com<mailto:stephan.klevenz(a)sap.com>> wrote: Hi all, I have a question, hopefully a small one :-) The CloudController.total_users metric (/CF\.CloudController\.0\..*\.total_users/) differs from number of users reported by uaac (uaac users command / admin ui). Can someone explain why this differs or which number is the correct one? Regards, Stephan
|
|
Re: cc metric: total_users
Klevenz, Stephan <stephan.klevenz@...>
Thanks for clarification
toggle quoted messageShow quoted text
-- Stephan Von: John Liptak Antworten an: "Discussions about Cloud Foundry projects and the system overall." Datum: Dienstag, 15. September 2015 18:17 An: "Discussions about Cloud Foundry projects and the system overall." Betreff: [cf-dev] Re: cc metric: total_users Cloud Controller reports the number of users register in CF console. UAAC reports additional users who may have access to other applications. So they are both correct, depending on what you need. For example, if you call the REST API for a UAAC user that isn't in the CF console, but still call the cloud controller REST API, you will get a 404.
On Tue, Sep 15, 2015 at 10:10 AM, Klevenz, Stephan <stephan.klevenz(a)sap.com<mailto:stephan.klevenz(a)sap.com>> wrote:
Hi all, I have a question, hopefully a small one :-) The CloudController.total_users metric (/CF\.CloudController\.0\..*\.total_users/) differs from number of users reported by uaac (uaac users command / admin ui). Can someone explain why this differs or which number is the correct one? Regards, Stephan
|
|
Re: Proposal: Decomposing cf-release and Extracting Deployment Strategies
Amit Kumar Gupta
Thanks for the feedback Mike!
toggle quoted messageShow quoted text
Can you tell us more specifically what sort of extensions you need? It would be great if cf-deployment provided an interface that could serve the needs of essentially all operators of CF. Thanks, Amit
On Tue, Sep 15, 2015 at 4:02 PM, Mike Youngstrom <youngm(a)gmail.com> wrote:
This is great stuff! My organization currently maintains our own custom
|
|
Re: Packaging CF app as bosh-release
Ronak Banka
Can possibly package anything but that way application will run inside a vm
toggle quoted messageShow quoted text
rather than on platform.
On Wed, Sep 16, 2015 at 12:02 AM, Kayode Odeyemi <dreyemi(a)gmail.com> wrote:
Hi,
|
|
Re: Packaging CF app as bosh-release
Amit Gupta
Can you say a bit more about what you're trying to do?
|
|
Re: User cannot do CF login when UAA is being updated
Yunata, Ricky <rickyy@...>
Hi Joseph,
Yes that is the case. I have sent my test result but it seems that my e-mail does not get through. How can I sent attachment in this mailing list? Regards, Ricky From: CF Runtime [mailto:cfruntime(a)gmail.com] Sent: Tuesday, 15 September 2015 8:10 PM To: Discussions about Cloud Foundry projects and the system overall. Subject: [cf-dev] Re: Re: Re: Re: User cannot do CF login when UAA is being updated Couple of updates here for clarity. No databases are stored on NFS in any default installation. NFS is only used to store blobstore data. If you are using the postgres job from cf-release, since it is single node there will be downtime during a stemcell deploy. I talked with Dies from Fujitsu earlier and confirmed they are NOT using the postgres job but an external non-cf deployed postgres instance. So during a deploy, the UAA db should be up and available the entire time. The issue they are seeing is that even though the database is up, and I'm guessing there is at least a single node of UAA up during the deploy, there are still login failures. Joseph OSS Release Integration Team On Mon, Sep 14, 2015 at 6:39 PM, Filip Hanik <fhanik(a)pivotal.io<mailto:fhanik(a)pivotal.io>> wrote: Amit, see previous comment. Postgresql database is stored on NFS that is restarted during nfs job update.UAA, while being up, is non functional while the NFS job is updated because it can't get to the DB. On Mon, Sep 14, 2015 at 5:09 PM, Amit Gupta <agupta(a)pivotal.io<mailto:agupta(a)pivotal.io>> wrote: Hi Ricky, My understanding is that you still need help, and the issues Jiang and Alexander raised are different. To avoid confusion, let's keep this thread focused on your issue. Can you confirm that you have two UAA VMs in separate bosh jobs, separate AZs, etc. Can you confirm that when you roll the UAAs, only one goes down at a time? The simplest way to affect a roll is to change some trivial property in the manifest for your UAA jobs. If you're using v215, any of the properties referenced here will do: https://github.com/cloudfoundry/cf-release/blob/v215/jobs/uaa/spec#L321-L335 You should confirm that only one UAA is down at a time, and comes back up before bosh moves on to updating the other UAA. While this roll is happening, can you just do `CF_TRACE=true cf auth USERNAME PASSWORD` in a loop, and if you see one that fails, post the output, along with noting the state of the bosh deploy when the error happens. Thanks, Amit On Mon, Sep 14, 2015 at 10:51 AM, Amit Gupta <agupta(a)pivotal.io<mailto:agupta(a)pivotal.io>> wrote: Ricky, Jiang, Alexander, are the three of you working together? It's hard to tell since you've got Fujitsu, Gmail, and Altoros email addresses. Are you folks talking about the same issue with the same deployment, or three separate issues. Ricky, if you still need assistance with your issue, please let us know. On Mon, Sep 14, 2015 at 10:16 AM, Lomov Alexander <alexander.lomov(a)altoros.com<mailto:alexander.lomov(a)altoros.com>> wrote: Yes, the problem is that postgresql database is stored on NFS that is restarted during nfs job update. I’m sure that you’ll be able to run updates without outage with several customizations. It is hard to tell without knowing your environment, but in common case steps will be following: 1. Add additional instances to nfs job and customize it to make replications (for instance use this docs for release customization [1]) 2. Make your NFS job to update sequently without our jobs updates in parallel (like it is done for postgresql [2]) 3. Check your options in update section [3]. [1] https://help.ubuntu.com/community/HighlyAvailableNFS [2] https://github.com/cloudfoundry/cf-release/blob/master/example_manifests/minimal-aws.yml#L115-L116 [3] https://github.com/cloudfoundry/cf-release/blob/master/example_manifests/minimal-aws.yml#L57-L62 On Sep 14, 2015, at 9:47 AM, Yitao Jiang <jiangyt.cn(a)gmail.com<mailto:jiangyt.cn(a)gmail.com>> wrote: On upgrading the deployment, the uaa not working due the uaadb filesystem hangup.Under my environment , the nfs-wal-server's ip changed which causing uaadb,ccdb hang up. Hard reboot the uaadb, restart uaa service solve the issue. Hopes can help you. On Mon, Sep 14, 2015 at 2:13 PM, Yunata, Ricky <rickyy(a)fast.au.fujitsu.com<mailto:rickyy(a)fast.au.fujitsu.com>> wrote: Hello, I have a question regarding UAA in Cloud Foundry. I’m currently running Cloud Foundry on Openstack. I have 2 availability zones and redundancy of the important VMs including UAA. Whenever I do an upgrade of either stemcell or CF release, user will not be able to do CF login when when CF is updating UAA VM. My question is, is this a normal behaviour? If I have redundant UAA VM, shouldn’t user still be able to still login to the apps even though it’s being updated? I’ve done this test a few times, with different CF version and stemcells and all of them are giving me the same result. The latest test that I’ve done was to upgrade CF version from 212 to 215. Has anyone experienced the same issue? Regards, Ricky Disclaimer The information in this e-mail is confidential and may contain content that is subject to copyright and/or is commercial-in-confidence and is intended only for the use of the above named addressee. If you are not the intended recipient, you are hereby notified that dissemination, copying or use of the information is strictly prohibited. If you have received this e-mail in error, please telephone Fujitsu Australia Software Technology Pty Ltd on + 61 2 9452 9000<tel:%2B%2061%202%209452%209000> or by reply e-mail to the sender and delete the document and all copies thereof. Whereas Fujitsu Australia Software Technology Pty Ltd would not knowingly transmit a virus within an email communication, it is the receiver’s responsibility to scan all communication and any files attached for computer viruses and other defects. Fujitsu Australia Software Technology Pty Ltd does not accept liability for any loss or damage (whether direct, indirect, consequential or economic) however caused, and whether by negligence or otherwise, which may result directly or indirectly from this communication or any files attached. If you do not wish to receive commercial and/or marketing email messages from Fujitsu Australia Software Technology Pty Ltd, please email unsubscribe(a)fast.au.fujitsu.com<mailto:unsubscribe(a)fast.au.fujitsu.com> -- Regards, Yitao jiangyt.github.io<http://jiangyt.github.io/> Disclaimer The information in this e-mail is confidential and may contain content that is subject to copyright and/or is commercial-in-confidence and is intended only for the use of the above named addressee. If you are not the intended recipient, you are hereby notified that dissemination, copying or use of the information is strictly prohibited. If you have received this e-mail in error, please telephone Fujitsu Australia Software Technology Pty Ltd on + 61 2 9452 9000 or by reply e-mail to the sender and delete the document and all copies thereof. Whereas Fujitsu Australia Software Technology Pty Ltd would not knowingly transmit a virus within an email communication, it is the receiver’s responsibility to scan all communication and any files attached for computer viruses and other defects. Fujitsu Australia Software Technology Pty Ltd does not accept liability for any loss or damage (whether direct, indirect, consequential or economic) however caused, and whether by negligence or otherwise, which may result directly or indirectly from this communication or any files attached. If you do not wish to receive commercial and/or marketing email messages from Fujitsu Australia Software Technology Pty Ltd, please email unsubscribe(a)fast.au.fujitsu.com
|
|
Re: DEA/Warden staging error
CF Runtime
It's not something we've ever seen before.
toggle quoted messageShow quoted text
In theory, the warden container needs the git binary, which I think it gets from the cflinuxfs2 stack; and internet access to wherever the git repo lives. If the warden container has both of those things, I can't think of any reason why it wouldn't work. Joseph OSS Release Integration Team
On Tue, Sep 15, 2015 at 2:06 PM, kyle havlovitz <kylehav(a)gmail.com> wrote:
I tried deploying via uploading a buildpack to the CC (had to set up nginx
|
|
Re: Proposal: Decomposing cf-release and Extracting Deployment Strategies
Mike Youngstrom
This is great stuff! My organization currently maintains our own custom
toggle quoted messageShow quoted text
ways to generate manifests, include secure properties, and manage release versions. We would love to base the next generation of our solution on cf-deployment. Have you put any thought into how others might customize or extend cf-deployment? Our needs are very similar to yours just sometimes a little different. Perhaps a private fork periodically merged with a known good release combination (tag) might be appropriate? Or some way to include the same tools into a wholly private repo? Mike
On Tue, Sep 8, 2015 at 1:22 PM, Amit Gupta <agupta(a)pivotal.io> wrote:
Hi all,
|
|
Re: valid org, space and service instance name?
Zach Robinson
The regexes you found are correct. From the database for org and space name the max length is 255.
Thanks, Zach
|
|
Re: anomaly in dealing with SharedDomains
Zach Robinson
Hey Nima,
The expected behavior is that neither a Shared nor Private domain can take over an existing domain. We tried using your example test and found that it passed for both shared and private domains. So we are unable to reproduce a problem here. Are you actually seeing this happen on a live cloudfoundry? Thanks, Zach & Jonathan
|
|
[ANN] python-buildpack v1.5.1 released
Mike Dalessio
python-buildpack v1.5.1 has been released!
---- python-buildpack v1.5.1 - https://github.com/cloudfoundry/python-buildpack/releases/tag/v1.5.1 * Adding support for Python 3.5.0 (https://www.pivotaltracker.com/story/show/103268420) * Output buildpack information in detect script (https://www.pivotaltracker.com/story/show/100757820) Packaged binaries: | name | version | cf_stacks | |-------------|---------|------------| | python | 2.7.10 | cflinuxfs2 | | python | 2.7.9 | cflinuxfs2 | | python | 3.3.5 | cflinuxfs2 | | python | 3.3.6 | cflinuxfs2 | | python | 3.4.2 | cflinuxfs2 | | python | 3.4.3 | cflinuxfs2 | | python | 3.5.0 | cflinuxfs2 | | libffi | 3.1 | cflinuxfs2 | | libmemcache | 1.0.18 | cflinuxfs2 |
|
|