Re: Infrastructure
by Kevin Fenzi
On Wed, Feb 08, 2023 at 01:07:16PM +0000, Zee Ban wrote:
> My email is zee_ban(a)hotmail.com
ok. Can we help you with something?
kevin
1 year, 1 month
OpenShift: alerting heads up (attention appowners!)
by Kevin Fenzi
Greeting everyone
Thanks to darknao, we have just enabled monitoring by default for our
OpenShift applications. Note that it will not be active until the next
run of the playbook pushes it out. I will look at running playbooks over
the next few days for most projects, but if you are an appowner and want
it sooner, just run your playbook (and let me know I don't need to).
Some notes:
By default it alerts on the things in
./roles/openshift/project/templates/prometheusRules.yml
Which includes cronjobs failing, pods crashing for various reasons, etc.
We can look at expanding this if there's other things that are generally
good to monitor.
Alerts trigger and by default send email to appowners.
You can optionally set alert_users list in your playbook if you like and
it will only send to those users (not to appowners).
If for some reason you do not want any of this monitoring on your
application you can set: alerting: False to avoid it. I'd really like to
know why if you plan on doing that however.
Hopefully this will help us see when things aren't working right before
we get user reports about it. :)
Many thanks again to darknao for setting this up. :)
kevin
1 year, 1 month
Ipsilon documentation
by Aurelien Bompard
Hey folks!
I would like to ask you about Ipsilon and its documentation. I have
made the last significant commits to it over the past few years
(mostly during the AAA project development), and I might be one of the
few people who *kinda* know how it works. At least some parts.
That's not a very good bus factor and I could write some
documentation, since it's pretty important in our authentication
system.
Ipsilon does have documentation here :
https://ipsilon-project.org/doc/intro.html
(and a bit here: https://pagure.io/ipsilon/).
To prioritize what I'll write, I wanted to ask you what you would like
to see in Ipsilon's documentation that is missing today. Could you
check out the existing doc and let me know?
Thanks!
Aurélien
1 year, 1 month
rhel9 and /boot | /boot/efi
by Kevin Fenzi
Greetings everyone.
I've been working on migrating things to rhel9 of late.
I reinstalled a staging virthost or two and found that while rhel8 would
allow /boot and /boot/efi to be on raid, rhel9 does not all this at all.
So, what do people do for this?
1. Just put /boot | /boot/efi on a primary partition on one disk and
hope that disk doesn't die.
2. Put them on one disk, but have duplicate partitions on the other raid
disks and some script that copies the 'primary' copies to the backups
when kernels are changed.
3. Something else more clever?
Whats best practice here? If 2 is the answer, does anyone have already
scripts to do this and tie into dnf for kernel updates?
I'd like to get this sorted out before moving any more bare metal hosts
over to rhel9 if possible.
Thanks,
kevin
1 year, 1 month