|
Proposal: Network connection stability option in Luna Security Provider in Java Buildpack
#cf
First of all, a HUGE thank you for the Luna Security Provider framework in the Java buildpack; I can't express enough how much this has eased deployment and configuration for web applications requiring the level of functionality offered by the HSM.
This is a semi-cross post of an issue posted to the Java Buildpack Git repo [1], and I'm soliciting some feedback. In some networks, the connection to a Luna device may get severed due various configuration options. In these cases, a Java application using the Luna JCA/JCE provider cannot reconnect without restarting the application. One possible mitigation is using the TCPKeepAlive option which can be set in the Chrystoki.conf file. The TCPKeepAlive setting is an optional parameter of the LunaSA Client configuration with 2 possible settings: 0 and 1 where 0 disables it and 1 enables it (the default is 0 if the setting is not present). I've forked the buildpack and have implemented [2] a candidate mechanism using a new configuration options: tcp_keep_alive_enabled. There are obviously other way to provide and implement configuration (ex: leaving the setting absent if the configuration is set to false), so with that said I'm looking for feedback and/or opening up a dialog before submitting a pull request. [1] https://github.com/cloudfoundry/java-buildpack/issues/584 [2] https://github.com/gm2552/java-buildpack/commit/09a089efca0c94279691eb476ec2447ee09f609a
|
|
|
|
Re: CF Networking support for CNI plugin chaining question
Gabriel Rosenhouse <grosenhouse@...>
Last call for Network Integrators: if you have opinions about how we execute CNI configuration, please reach out to our team (#container-networking in Slack, or reply here).
Our first story on this track is here: https://www.pivotaltracker.com/story/show/157025572
|
|
|
|
Re: [cf-bosh] CF Summit EU contributor reg code
Which means…y’all should plan on joining the Day Zero activities - Cert Exams, User Day (if you’re at an end user organization), unconference, trainings, etc. -- Swarna Podila Senior Director, Community | Cloud Foundry Foundation
On Mon, Apr 30, 2018 at 5:31 PM, Chip Childers <cchilders@...> wrote:
|
|
|
|
Re: Call for Demos - CF / K8S Integration SIG Meeting
Jain, Ashish <ashish.jain09@...>
Hi Chip,
Service Fabrik team would like to demonstrate couple of use cases as below:
Best regards, Ashish
From: <cf-dev@...> on behalf of Chip Childers <cchilders@...>
During yesterday's CF/K8S SIG meeting, several speakers proposed demo'ing their various efforts during a future call.
I'd like to formally request replies from anyone interested in giving a demo, and we'll work out an agenda for the next (and future) SIG calls based on responses.
So far, I have an offer from SAP for Dobromir Zahariev to demo the work around service catalog sync between CFAR and K8S.
Anyone else willing?
-chip -- Chip Childers
|
|
|
|
Re: CF Summit EU contributor reg code
Chip Childers <cchilders@...>
Sorry... one correction. The event is Oct 10 and 11, with lots of pre-event activities on the 9th. Sorry about that. :)
On Mon, Apr 30, 2018 at 11:14 AM Chip Childers <cchilders@...> wrote:
--
Chip Childers CTO, Cloud Foundry Foundation 1.267.250.0815
|
|
|
|
CF Summit EU contributor reg code
Chip Childers <cchilders@...>
Hey all, -- Whew... we just got done with CF Summit NA in Boston, but it's time to turn towards Europe! For those that don'e know, we'll be headed back to Basel Switzerland again this year, October 10 to 12. Contributors (those that have contributed docs, code, bug reports) are welcome to use the following code to register: CFEU18CONT More info on the website here: https://www.cloudfoundry.org/event/eusummit2018/ See you all there! -chip Chip Childers CTO, Cloud Foundry Foundation 1.267.250.0815
|
|
|
|
Re: Minimal CF Install for Demos
Benjamin Gandon <benjamin@...>
I have what you need (on GCP), and more because it is a CF distribution. (You'll find out soon that demoing CF is not just about CF.) I've been working on this for almost one year. For the obvious reason that here in France, nobody knows about CF and we desperately needed tools to help in making demos of OSS CF. It fits in 1 VM only. So go deploy the GCP flavor of Easy Foundry, as deployed with the Gstack Bosh Environment. There: https://github.com/gstackio/gstack-bosh-environment Easy Foundry aims at becoming the very first 100% OSS distribution of Cloud Foundry based on BOSH. And Gstack BOSH Environment (GBE) is an automation framework leveraging (and heavily based on) BOSH 2.0 features. The global UX with GBE tries to keep it simple: $ gbe up # for creating the infrastructure $ gbe converge < all | cf > # for converging all deployments towards their expected state (or CF only) But there are stil some preliminary setup steps, first. The GCP setup procedure should definitely work, because it has been my main test case for a long time. Otherwise don't hesitate to give me feedback and ask for support. You'll get it working, I swear! For everyone reading this post, please note that EF and GBE are still Work In Progress. There are many improvements to make before we reach a Gold release, or start incubation as a CF extension. We welcome feedback and pull requests! Regards, /Benjamin GANDON (depuis mon iPhone)
|
|
|
|
Re: [Urgent] High severity vulnerability in PHP versions included in the PHP buildpack
Carlo Alberto Ferraris
`cf better-push` can't come fast enough 😢
On Sat, Apr 28, 2018, 11:50 Stephen Levine <slevine@...> wrote:
|
|
|
|
[Urgent] High severity vulnerability in PHP versions included in the PHP buildpack
Stephen Levine
Hi All, If you use the PHP buildpack in Cloud Foundry, please see below.NOTICE: Multiple upstream vulnerabilities have been discovered in all supported PHP versions in the PHP buildpack. MS-ISAC reports that the most severe of these vulnerabilities could allow an attacker to execute arbitrary code. An attacker could take advantage of this type of vulnerability to steal credentials, modify application code, cause a denial of service attack, or take other malicious actions. ACTION: As soon as possible: Upgrade the PHP buildpack to version 4.3.53. Confirm that PHP apps are configured to use PHP 7.2.5, PHP 7.1.17, PHP 7.0.30, or PHP 5.6.36. Re-stage all PHP apps. UPSTREAM REPORT: https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-php-could-allow-for-arbitrary-code-execution_2018-046/ Thanks, Stephen CF Buildpacks PM
|
|
|
|
Re: Oratos: Containerized Experiments with Loggregator + Log Cache
#loggregator
Chip Childers <cchilders@...>
Love it! The amount of ideas and experiments around integrations with other OSS efforts being shared this last couple of weeks is amazing to see. :)
On Fri, Apr 27, 2018 at 4:21 PM Adam Hevenor <ahevenor@...> wrote:
--
Chip Childers CTO, Cloud Foundry Foundation 1.267.250.0815
|
|
|
|
Re: Call for Demos - CF / K8S Integration SIG Meeting
Jeenal Shah
Hi Chip, We have been building OSBAPI Generic Service Broker "kibosh" bridging the gap between Kubernetes deployments and CF marketplace. We would love to demo that. Here is our repo, and more info on the blog. Let me know what you think. Thanks  Jeenal
On Thu, Apr 26, 2018 at 8:53 AM, Chip Childers <cchilders@...> wrote:
|
|
|
|
Oratos: Containerized Experiments with Loggregator + Log Cache
#loggregator
ορατός • (oratós) m (feminine ορατή, neuter ορατό)
As a follow up to Wednesday's special interest group call about K8s and Cloud Foundry I wanted to share a backlog[1] and slack channel[2] and encourage everyone to get involved in the discussion around experiments to use Loggregator and Log Cache release[3] with Cloud Foundry Container runtime. Some of this has already been tinkered with and we have a working demo that uses fluentd to ingress into Loggregator in a K8's Pod[4]. We are looking to further experiments with the goal of demoing a consistent telemetry experience across CFAR and CFCR. I have proposed similar things in the past[5] so feel free to read more about these ideas, but keep in mind the landscape has changed since that document was written and I'd encourage you to get involved by joining our slack channel if these topics interest you. We'll be posting about progress, and contributing to the conversation about in the monthly community calls as well. 1. https://www.pivotaltracker.com/n/projects/2167209 2. https://cloudfoundry.slack.com/messages/CAD9NBZTK 3. https://github.com/cloudfoundry/log-cache-release 4. https://github.com/cloudfoundry-incubator/loggregator-k8s-deployment 5. https://drive.google.com/open?id=1ISmtxrLW8svIRwzw0je4OH1cOEY3va3E-z45_pfgKBM
|
|
|
|
Re: Call for Demos - CF / K8S Integration SIG Meeting
Chip - we'd love to demo the experiments with k8s loggregator deployment and log-cache integrations and how that can create a consistent observability experience across both CFAR and CFCR.
|
|
|
|
Re: Call for Demos - CF / K8S Integration SIG Meeting
Julz Friedman
Happy to demo Eirini (the artist formerly known as Cube), too. Thanks!
On Fri, 27 Apr 2018 at 17:54 Michael Maximilien <mmaximilien@...> wrote:
|
|
|
|
Re: Call for Demos - CF / K8S Integration SIG Meeting
Michael Maximilien
Hi, DK and I will be presenting BOSH Kube CPI at CF-Day next week* Tuesday May 1st in Copenhagen. We will also (on that day) make all the code public and ready for all to try and provide feedback. We have tested on IBM Cloud, GKE, AKS, and MiniKube. Likely any and all recent Kube clusters should work fine. It's a cool live demo from pretty much scratch deploying and managing non-trivial workloads (CF included). So we need about 20 to 30 minutes with brief slides and QAs. We'd be happy to demo this at next SIG and CAB calls. Best, max * I will be there live in Cope but DK will be in spirit :) or Zoom, if I can shame him some more for not taking the 24 hours round trip flights.
On Thu, Apr 26, 2018 at 8:53 AM, Chip Childers <cchilders@...> wrote:
--
|
|
|
|
Summit EU: CFP and Co-Chair Nominations
Folks,
Wanted to highlight a few highlights and a deadline coming up for our EU Summit:
Please don't hesitate to ping me on email or slack if you have any questions. --Swarna.
|
|
|
|
Call for Demos - CF / K8S Integration SIG Meeting
Chip Childers <cchilders@...>
During yesterday's CF/K8S SIG meeting, several speakers proposed demo'ing their various efforts during a future call. -- I'd like to formally request replies from anyone interested in giving a demo, and we'll work out an agenda for the next (and future) SIG calls based on responses. So far, I have an offer from SAP for Dobromir Zahariev to demo the work around service catalog sync between CFAR and K8S. Anyone else willing? -chip Chip Childers CTO, Cloud Foundry Foundation 1.267.250.0815
|
|
|
|
Re: Understanding hard CPU limits
Stanislav German-Evtushenko
Hi Eric,
The current logic looks a little bit too complicated. Wouldn't it be simpler if it was not using CPU shares in calculation and just using memory share (container memory / cell memory) for this? In that case we could just specify CPU FACTOR which is easy to understand. For example: # Maximum CPU time is proportional to Memory share # In this example scaling factor is 2 CPU_MAX_FACTOR = 2 CELL_CPU = 8 CELL_MEMORY = 16 * 1024^3 # 16 GiB CONTAINER_MEMORY = 4 * 1024^3 # 4 GiB PERIOD = 100000 # 100 ms (default) QUOTA_RATIO = ( CONTAINER_MEMORY / CELL_MEMORY ) * CELL_CPU * CPU_MAX_FACTOR = 1/4 * 8 * 2 = 4 # i.e. 4 CPUs time at max QUOTA = QUOTA_RATIO * PERIOD = 400000 # in ms PERIOD could also be made configurable so that we could adjust this to our latency requirements if needed. Best regards, Stanislav
|
|
|
|
Re: CF / K8S (and related projects) Special Interest Group Call
Jain, Ashish <ashish.jain09@...>
Hi Amulya,
We did a demo on the similar use during the CF summit at Boston https://cfna18.sched.com/event/DdZu/service-fabrik-20-a-more-pluggable-and-flexible-backing-service-shashank-mohan-jain-ashish-jain-sap?iframe=no&w=&sidebar=yes&bg=no . We can definitely connect and discuss more on this.
Best regards, Ashish
From: <cf-dev@...> on behalf of Amulya Sharma <amulya.sharma@...>
Thanks for informational Chip
I am actively working on integrating these two run times To begin with we are using k8 to run our persisted workloads for stateless apps in cloudfoundry persisted workloads will be created by service broker in cloud foundry
Wondering is anyone else working on same love to connect and share what we have so far
Thanks Amulya
On Wed, Apr 25, 2018 at 11:22 AM Chip Childers <cchilders@...>
wrote:
--
Thanks and Regards Amulya Sharma
|
|
|
|
Re: CF / K8S (and related projects) Special Interest Group Call
Chip Childers <cchilders@...>
Lots of folks are working on different aspects. Some rough notes from today's call are here: https://docs.google.com/document/d/1fUssMxFjII01viJcVOXu3RToENW_S11oI96rvnRdlkY/edit Feel free to dive into the URL's noted and / or the more formal project team backlogs.
On Wed, Apr 25, 2018 at 3:26 PM Amulya Sharma <amulya.sharma@...> wrote:
--
Chip Childers CTO, Cloud Foundry Foundation 1.267.250.0815
|
|
|