Tero Marttila

pharos-cluster kubeconfig outputs logging headers when running in an interactive Docker container

1

Assuming this happens because `docker-compose run` uses `docker run -it`, meaning that the container process has a pty for stdout even though the docker CLI stdout is redirected to a...

The `pharos-cluster reset` should probably also remove the following files: * `/etc/apt/sources.list.d/pharos-kubernetes.list` * `apt-key del D401AB6 ` * we should consider using `/etc/apt/trusted.gpg.d/pharos-kubernetes.gpg` instead of `apt-key add` * `/etc/yum.repos.d/kontena-pharos.repo`

pharos-cluster reset leaves networking routes/rules in place

2

After a `pharos-cluster reset` for a calico cluster, the hosts will still have all of their calico IPIP interfaces, routes and iptables rules in place. ``` root@terom-pharos-worker1:~# ip addr show...

TLS client certs used for service authentication must be rotated before expiry

1

#121 provisions the `heapster` and `metrics-server` stacks with TLS client certs managed via kube `secrets` and `csr` resources. Those certificates will have a validity period of one year, after which...

In case of kubeadm configuration errors (e.g. #328), it seems that `kubeadm init` does not validate that the `kube-controller-manager` is healthy. If the `kube-apiserver` is running but the `kube-controller-manager` is...

If the `[ -e $path ]` fails for any other reason than `ENOENT`, this will still return `false`. That also includes `EACCES`, for cases where the file is not readable...

Re-running `pharos-cluster up` with modified `hosts[*].labels` works for adding or changing labels, but removing a label from the config does not remove the label from the node. Similarly, removing the...

See discussion in #201 [`Pharos::Phases::Base#parse_resource_file`](https://github.com/kontena/pharos-cluster/blob/d5facb2ad3e1b016d79294ac7e69ceaacf124670/lib/pharos/phases/base.rb#L22-L25) is used to read and ERB-evaluate generic config files from `lib/pharos/resources/*` which are not actually kube resources. This happens using `Pharos::YamlFile.new(path).read(vars)`, which is not actually...

Thread-unsafe usage of HttpServletResponse corrupting jetty HttpFields state in reactive ResponseBodyEmitter handlers

19

**Affects:** 5.2.5.RELEASE --- We have a Spring Web MVC + jetty application using SSE for notifications. We recently converted our SSE controller from returning a `SseEmitter` to returning a `Flux

CLI omnibus fails sporadically on sourceforce https -> http mirror redirect

1

Apparently still not fixed even with `source url: "http://tukaani.org/xz/xz-#{version}.tar.gz", unsafe: true` :( See earlier history * https://github.com/chef/omnibus-software/issues/780 * #2903 * #2907 ``` /home/travis/.rvm/rubies/ruby-2.4.2/lib/ruby/2.4.0/open-uri.rb:225:in `open_loop': redirection forbidden: https://downloads.sourceforge.net/project/lzmautils/xz-5.2.3.tar.gz?r=&ts=1513786876&use_mirror=cfhcable -> http://cfhcable.dl.sourceforge.net/project/lzmautils/xz-5.2.3.tar.gz (RuntimeError)...