Jesse Haka

Results 220 comments of Jesse Haka

``` {"log":"INFO 2018-10-09 17:41:08,468 strategy celery.worker.strategy 1 140031597243208 Received task: main.batch.sendspam[2a6e5dc8-5fd2-40bd-8f65-7e7334a14b3f] ETA:[2018-10-10 04:00:00+00:00] \n","stream":"stderr","time":"2018-10-09T17:41:08.468912644Z"} {"log":"INFO 2018-10-09 17:41:08,468 strategy celery.worker.strategy 1 140031597243208 Received task: main.batch.sendspam[2a6e5dc8-5fd2-40bd-8f65-7e7334a14b3f] ETA:[2018-10-10 04:00:00+00:00] \n","stream":"stderr","time":"2018-10-09T17:41:08.468955918Z"} {"log":"INFO 2018-10-09 19:46:04,293...

what is the use-case of using 3 bastions? Bastion is just jumphost for the controlplanes (and nodes). Which in normal situation is not used at all. People should not login...

kOps do support multiple providers but there are differences between providers. At least we are still using old OVS based setup, which means that loadbalancer = 2 virtual machines under...

geoip databases are pretty large, so I think the envoy gateway should download the database from normal http url and then somehow upload that to envoyproxy? Wasm uses http, but...

imo, it does belong to securitypolicy api. If we have like 2 apis: https://foobar.com and https://huuh.com. We want that https://huh.com allows all traffic from everywhere and we want limit https://foobar.com...

@nezdolik right. So basically geoip filter should be before rbac (securitypolicy authorization) and then in authorization we should have possibility deny/allow by header for instance. If authorization is not used,...

https://github.com/kubernetes/kops/blob/944e45081a175b18866dc4f030c88bde0138ab8c/pkg/instancegroups/rollingupdate.go#L219-L223 https://github.com/kubernetes/kops/blob/944e45081a175b18866dc4f030c88bde0138ab8c/pkg/instancegroups/rollingupdate.go#L194-L198 these should return ValidationTimeoutError that it will exit from the rollingupdate loop. Now the interesting part is this https://github.com/kubernetes/kops/blob/944e45081a175b18866dc4f030c88bde0138ab8c/pkg/instancegroups/instancegroups.go#L648-L719 in which part we should really stop updating? Now...