-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
change machine-config-server port #1180
change machine-config-server port #1180
Conversation
cc: @abhinavdahiya |
f151dbc
to
b977e42
Compare
b977e42
to
efd0c46
Compare
One thing I hadn't considered too is that if we want to change this port in the future, it will also need changes in firewalling (AWS: security groups). Do we have those under cluster management today? If we're going to pull the trigger on this port we should probably be really sure that |
Code changes seem good to me offhand. |
The OpenStack folks seem to have a few 49500 references in their HAProxy watcher: $ git grep 49500 origin/pr/1180 -- data
origin/pr/1180:data/data/openstack/lb/main.tf: source = "data:,listen%20${var.cluster_name}-api-80%0D%0A%20%20%20%20bind%200.0.0.0%3A80%0D%0A%20%20%20%20mode%20tcp%0D%0A%20%20%20%20stats%20enable%0D%0A%20%20%20%20stats%20uri%20%2Fhaproxy%3Fstatus%0D%0A%20%20%20%20balance%20roundrobin%0D%0A%20%20%20%20server%20${var.cluster_name}-bootstrap%20${var.cluster_name}-bootstrap.${var.cluster_domain}%3A80%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-0%20${var.cluster_name}-master-0.${var.cluster_domain}%3A80%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-1%20${var.cluster_name}-master-1.${var.cluster_domain}%3A80%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-2%20${var.cluster_name}-master-2.${var.cluster_domain}%3A80%20check%0D%0A%0D%0Alisten%20${var.cluster_name}-api-6443%0D%0A%20%20%20%20bind%200.0.0.0%3A6443%0D%0A%20%20%20%20mode%20tcp%0D%0A%20%20%20%20stats%20enable%0D%0A%20%20%20%20stats%20uri%20%2Fhaproxy%3Fstatus%0D%0A%20%20%20%20balance%20roundrobin%0D%0A%20%20%20%20server%20${var.cluster_name}-bootstrap%20${var.cluster_name}-bootstrap.${var.cluster_domain}%3A6443%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-0%20${var.cluster_name}-master-0.${var.cluster_domain}%3A6443%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-1%20${var.cluster_name}-master-1.${var.cluster_domain}%3A6443%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-2%20${var.cluster_name}-master-2.${var.cluster_domain}%3A6443%20check%0D%0A%0D%0Alisten%20${var.cluster_name}-api-443%0D%0A%20%20%20%20bind%200.0.0.0%3A443%0D%0A%20%20%20%20mode%20tcp%0D%0A%20%20%20%20stats%20enable%0D%0A%20%20%20%20stats%20uri%20%2Fhaproxy%3Fstatus%0D%0A%20%20%20%20balance%20roundrobin%0D%0A%20%20%20%20server%20${var.cluster_name}-bootstrap%20${var.cluster_name}-bootstrap.${var.cluster_domain}%3A443%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-0%20${var.cluster_name}-master-0.${var.cluster_domain}%3A443%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-1%20${var.cluster_name}-master-1.${var.cluster_domain}%3A443%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-2%20${var.cluster_name}-master-2.${var.cluster_domain}%3A443%20check%0D%0A%0D%0Alisten%20${var.cluster_name}-api-49500%0D%0A%20%20%20%20bind%200.0.0.0%3A49500%0D%0A%20%20%20%20mode%20tcp%0D%0A%20%20%20%20stats%20enable%0D%0A%20%20%20%20stats%20uri%20%2Fhaproxy%3Fstatus%0D%0A%20%20%20%20balance%20roundrobin%0D%0A%20%20%20%20server%20${var.cluster_name}-bootstrap%20${var.cluster_name}-bootstrap.${var.cluster_domain}%3A49500%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-0%20${var.cluster_name}-master-0.${var.cluster_domain}%3A49500%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-1%20${var.cluster_name}-master-1.${var.cluster_domain}%3A49500%20check%0D%0A%20%20%20%20server%20${var.cluster_name}-master-2%20${var.cluster_name}-master-2.${var.cluster_domain}%3A49500%20check" I have no idea how they maintain that (CC @flaper87 ;), but a raw
I'm not aware of any cluster management for security groups. You're wondering about how this would work if someone wanted to upgrade their cluster to an OpenShift release that used a different port? |
@wking I wasn't sure how that was generated either, so I left it in hopes someone would tell me 😄 |
Doesn't seem to be generated (at least, #1185 bumped it and the new version contains strings that do not show up elsewhere in that diff). I expect you can just: $ sed -i s/49500/22623/g data/data/openstack/lb/main.tf |
Right. |
efd0c46
to
5e558f2
Compare
33a7ffa
to
5ac7ef3
Compare
5ac7ef3
to
30d91f2
Compare
@kikisdeliveryservice: The following tests failed, say
Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
@kikisdeliveryservice |
Needs rebase. |
@abhinavdahiya question, the file that keeps needing a rebase (3 time so far) is If you can confirm changing that is ok, I'll rebase and repush. |
@flaper87 / @russellb can you help @kikisdeliveryservice here regarding |
I am fairly certain that it is not auto-generated. Unfortunately, it is a script crammed into a single URL-encoded line that is going to have conflicts whenever anyone makes any change to it. |
thanks @staebler , I'll go ahead and rebase then. |
Change machine-config-server port from 49500 -> 22623 to avoid conflict with local port and node port ranges. Closes machine-config-operator issue: openshift#166
30d91f2
to
ab09bc2
Compare
@kikisdeliveryservice is this ready for a final review? |
@ashcrow yep. removed the WIP :) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks good to me!
/lgtm |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: abhinavdahiya, ashcrow, kikisdeliveryservice The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Commit openshift#1180 changed the MCO port from 4900 to 22623, which broke OpenStack deployments as the replace didn't catch 2 places where the port was still hardcoded. In addition, I've decoded the data URL to make the maintenance of this script easier.
Commit openshift#1180 changed the MCO port from 4900 to 22623, which broke OpenStack deployments as the replace didn't catch 2 places where the port was still hardcoded. In addition, I've decoded the data URL to make the maintenance of this script easier.
Commit openshift#1180 changed the MCO port from 4900 to 22623, which broke OpenStack deployments as the replace didn't catch 2 places where the port was still hardcoded. In addition, I've decoded the data URL to make the maintenance of this script easier.
Commit openshift#1180 changed the MCO port from 4900 to 22623, which broke OpenStack deployments as the replace didn't catch 2 places where the port was still hardcoded. In addition, I've decoded the data URL to make the maintenance of this script easier.
Commit openshift#1180 changed the MCO port from 4900 to 22623, which broke OpenStack deployments as the replace didn't catch 2 places where the port was still hardcoded. In addition, I've decoded the data URL to make the maintenance of this script easier.
Change machine-config-server port from 49500 -> 22623
to avoid conflict with local port and node port ranges.
Closes machine-config-operator issue: 166
Requires: openshift/machine-config-operator#368