cf-dev@lists.cloudfoundry.org

Re: Key Rotation Strategies

There is currently no way for users to rotate the cc.db_encryption_key. We're going to schedule some work to look into ways to solve the problem without downtime. Any input would be great, as well as

By CF Runtime · #419 ·

Re: Key Rotation Strategies

We are also very interested in pursuing this capability. Cheers, Christopher Ferris IBM Distinguished Engineer, CTO Open Cloud IBM Software Group, Open Technologies email:

By Christopher B Ferris <chrisfer@...> · #418 ·

Key Rotation Strategies

There are a lot of Keys in my CF deployment manifest. I'd like to be able to rotate them. Most of the keys I could probably just change in a deployment but would cause some downtime or a service

By Mike Youngstrom <youngm@...> · #417 ·

Re: HM9000 metrics

I believe the full crashed Warden container is kept around for an hour. The DEA keeps the Warden handle to the container. The Warden grace time only applies after all handles have been

By CF Runtime · #416 ·

Re: TCP Router VS NoRouter

Thinking a little more about your question Mohamed. In his presentation Mike might have made reference to people making adhoc changes to F5. In our organization today we have a handfull of engineers

By Mike Youngstrom <youngm@...> · #415 ·

Re: Syslog Drain to Logstash Problems

Mike, Thanks for finding that. I've filed a bug <https://www.pivotaltracker.com/story/show/96801752> to get the README fixed. – John Tuley

By John Tuley <jtuley@...> · #414 ·

Re: Syslog Drain to Logstash Problems

I don't have an answer, so here are some diagnostic questions to help you debug: Have you set doppler.blacklisted_syslog_ranges to something that includes your destination? (This would be bad.) Do

By John Tuley <jtuley@...> · #412 ·

Re: Syslog Drain to Logstash Problems

We had the same problem due to missing templates in our manifest. We initially used the example manifest snippet shown at https://github.com/cloudfoundry/loggregator which mentions only the doppler

By MJ · #413 ·

Re: HM9000 metrics

Ok. Just a question: When you say "the DEA will keep its container carcass around for an hour", you mean that the DEA does not remove the container files. However, if Warden grace time is configured

By Pablo Alonso Rodriguez <palonsoro@...> · #411 ·

Re: TCP Router VS NoRouter

Thanks for responding Mohamed. Help me understand what you mean when you refer to opening up the LTM to developers. NoRouter itself must have access to the LTM to update app pool members and such

By Mike Youngstrom <youngm@...> · #410 ·

(No subject)

Interesting. Do you get log output from the application when it's working? I'm curious because you weren't seeing this when it was failing. Trying to understand if the app is not logging properly or

By Daniel Mikusa · #409 ·

(No subject)

I removed static assets as well as many classes that were not used, I left classes related to jetty, javax (managment, ..), apache commons io, and the package (with all classes) where the main class

By Arbi Akhina · #408 ·

Re: HM9000 metrics

Hi Pablo, Ops Metrics is a PCF product and questions about that should be directed to Pivotal customer support. Regarding your second question, about the difference between crashed indices and

By Dieu Cao <dcao@...> · #407 ·

Re: TCP Router VS NoRouter

Apologize for restarting this thread after a few weeks. That's right Mike. Once the LTM opens up to the developers they might start putting in too much functionality into the Load Balancer like

By Owais Mohamed · #406 ·

(No subject)

Interesting. Out of curiosity what did you remove to make it smaller? Static assets? Also have you tried a larger CF install like PWS / BlueMix, just to see if this is an issue specific to

By Daniel Mikusa · #405 ·

(No subject)

Hi, I had to reduce the size of the jar to ~ 51M to get the simple class that runs jetty to work on bosh-lite!!! Is there any kind of size restriction for executable jars?? Here is the system

By Arbi Akhina · #404 ·

Re: Java Buildpack: Stale Files Outside of WEB-INF

daniel.jones(a)engineerbetter.com> wrote: Seems odd. Every time you stage an app, you should get a copy of the latest app bits (i.e. what was pushed up by cf). If you're not getting the latest set

By Daniel Mikusa · #403 ·

HM9000 metrics

Good morning. Recently, I have been revising metrics emitted by CF components. In order to understand HM9000 metrics, I have been reading the metrics documentation (at

By Pablo Alonso Rodriguez <palonsoro@...> · #402 ·

Java Buildpack: Stale Files Outside of WEB-INF

Hi all, If one pushes a .war containing files outside of WEB-INF, deletes the app, then pushes a new version where those files outside of WEB-INF have been changed, these changes are not reflected in

By Daniel Jones · #401 ·

CCDB: deleting records in service_instance_operations where state "in progress"

Hi ccdb=> select COUNT(*) from service_instance_operations where state != 'succeeded' and updated_at < NOW() - INTERVAL '1 days'; count ------- 28 is it ok to delete all those

By Lukas Lehner <weblehner@...> · #400 ·

Messages