[Bug 1264699] New: kubernetes do not respect tpmfiles.d policu
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1264699
Bug ID: 1264699
Summary: kubernetes do not respect tpmfiles.d policu
Product: Fedora
Version: 22
Component: kubernetes
Assignee: jchaloup(a)redhat.com
Reporter: mscherer(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org,
jcajka(a)redhat.com, jchaloup(a)redhat.com,
lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com
Description of problem:
/run/kubernetes is listed as unowned.
]
That's against policy:
https://fedoraproject.org/wiki/Packaging:Tmpfiles.d
Version-Release number of selected component (if applicable):
kubernetes-1.1.0-0.5.gite44c8e6.fc22.x86_64
How reproducible:
each time
Steps to Reproduce:
1. install kubernetes
2. verify with rpm -qf
Actual results:
# rpm -qf /run/kubernetes/
file /run/kubernetes is not owned by any package
Expected results:
file is owned, and with the right permission.
Additional info:
This also mean that something create /run/kubernetes/ owned as root:root, which
prevent kubernetes-apiserver from starting:
Sep 20 14:01:15 gluster2 kube-apiserver[17759]: E0920 14:01:15.230961 17759
server.go:485] Unable to listen for secure (open
/var/run/kubernetes/apiserver.crt: no such file or directory); will try again.
And likely linked to
http://ask.projectatomic.io/en/question/199/missing-apiservercrt-unable-t...
Here is a trivial patch to add that.
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1269449] New: Summary for kubernetes-devel package should be more informative
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1269449
Bug ID: 1269449
Summary: Summary for kubernetes-devel package should be more
informative
Product: Fedora
Version: rawhide
Component: kubernetes
Severity: low
Assignee: jchaloup(a)redhat.com
Reporter: kumarpraveen.nitdgp(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org,
jcajka(a)redhat.com, jchaloup(a)redhat.com,
lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com
Description of problem:
Currently if you check kubernetes-devel package summary section which directly
inherit from master package and not much informative till user check
description section.
Version-Release number of selected component (if applicable):
N/A
How reproducible:
N/A
Actual results:
Summary : Container cluster management
Expected results: (something like below, wording can be changed)
Summary : Libraries to build packages which use
GoogleCloudPlatform/kubernetes
Additional info:
N/A
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1210364] New: Embedded kubelet cadvisor fails to enumerate docker containers
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1210364
Bug ID: 1210364
Summary: Embedded kubelet cadvisor fails to enumerate docker
containers
Product: Fedora
Version: 22
Component: kubernetes
Assignee: jchaloup(a)redhat.com
Reporter: stefw(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org,
jchaloup(a)redhat.com, lsm5(a)redhat.com,
nhorman(a)redhat.com, vbatts(a)redhat.com
Description of problem:
The cAdvisor embedded in kubelet fails to enumerate docker containers. It fails
with the message:
failed to get all Docker containers with error: unable to find data for
container /system.slice/docker-....scope
Version-Release number of selected component (if applicable):
kubernetes-0.13.2-0.5.git8d94c43.fc22.x86_64
How reproducible:
Every time. Tried restarting Docker.
Steps to Reproduce:
1. http://localhost:4194/api/v1.2/docker
1. Or just go to http://localhost:4194 and click on 'Docker Containers' to see
the same thing.
Actual results:
failed to get all Docker containers with error: unable to find data for
container
/system.slice/docker-9dade0a01bf0368b6c0dad722f7e85af98593dde00873e6abb2cfd86d2d2b7a9.scope
Expected results:
Output like this:
{"/system.slice/docker-1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1.scope":{"name":"/system.slice/docker-1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1.scope","aliases":["k8s_ruby-helloworld.8ec853e6_frontend-58wav_default_19192267-d9c8-11e4-b2d6-10c37bdb8410_025ed744","1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1"],"namespace":"docker","spec":{"creation_time":"0001-01-01T00:00:00Z","has_c...
Additional info:
When running standalone cadvisor I get the above expected output.
cadvisor-0.10.1-0.1.gitef7dddf.fc22.x86_64
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1272146] New: Mounted secrets unreadible with SELinux enabled
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1272146
Bug ID: 1272146
Summary: Mounted secrets unreadible with SELinux enabled
Product: Fedora
Version: 23
Component: kubernetes
Severity: high
Assignee: jchaloup(a)redhat.com
Reporter: thijs.elferink(a)topicus.nl
QA Contact: extras-qa(a)fedoraproject.org
CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org,
jcajka(a)redhat.com, jchaloup(a)redhat.com,
lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com
Description of problem:
On a freshly installed Fedora Atomic host (as well as on a CentOS Atomic host);
When mounting a secret in a pod, the mount shows up with garbled permissions
and is inaccessible.
Version-Release number of selected component (if applicable):
ostree images (both have this problem):
TIMESTAMP (UTC) VERSION ID OSNAME
REFSPEC
2015-10-14 11:25:03 23.33 89be310d70 centos-atomic-host
fedora-atomic:fedora-atomic/f23/x86_64/docker-host
2015-10-01 09:32:09 7.20151001 1e9838ce88 centos-atomic-host
centos-atomic-host:centos-atomic-host/7/x86_64/standard
kubernetes node description:
Kernel Version: 4.2.3-300.fc23.x86_64
OS Image: Fedora 23 (Twenty Three)
Container Runtime Version: docker://1.7.0-dev.fc23
Kubelet Version: v1.1.0-alpha.0.1588+e44c8e6661c931
Kube-Proxy Version: v1.1.0-alpha.0.1588+e44c8e6661c931
How reproducible:
always
Steps to Reproduce:
1. fresh fedora/centos atomic host
2. deploy secret (kubectl create -f secret.json)
secret.json:
{
"apiVersion": "v1",
"kind": "Secret",
"metadata" : {
"name": "test-secret"
},
"type": "Opaque",
"data": {
"test-data":"dGVzdDEyMw=="
}
}
3. deploy pod (kubectl create -f test-pod.yaml)
test-pod.yaml:
apiVersion: v1
kind: Pod
metadata:
name: test-pod
spec:
containers:
- name: test
image: busybox
volumeMounts:
- name: "test-volume"
mountPath: "/test"
readOnly: true
command: ["sh"]
args: ["-c 'ls -l /test/test-data; cat /test/test-data'"]
volumes:
- name: "test-volume"
secret:
secretName: "test-secret"
Actual results:
output:
-bash-4.2# kubectl logs test-pod
ls: cannot access /test/test-data: Permission denied
total 0
-????????? ? ? ? ? ? test-data
cat: /test/test-data: Permission denied
Expected results:
output:
-bash-4.2# kubectl logs test-pod
total 4
-r--r--r--. 1 root root 7 Oct 15 08:08 test-data
test123
Additional info:
After disabling SELinux (setenforce 0) the secret is accessible.
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 3 months
[Bug 1326890] New: FTBFS with gcc-go on s390x
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1326890
Bug ID: 1326890
Summary: FTBFS with gcc-go on s390x
Product: Fedora
Version: 24
Component: golang-googlecode-net
Assignee: fpokorny(a)redhat.com
Reporter: dan(a)danny.cz
QA Contact: extras-qa(a)fedoraproject.org
CC: fpokorny(a)redhat.com, golang(a)lists.fedoraproject.org,
jchaloup(a)redhat.com, mattdm(a)redhat.com,
vbatts(a)redhat.com
Blocks: 467765 (ZedoraTracker)
Created attachment 1146911
--> https://bugzilla.redhat.com/attachment.cgi?id=1146911&action=edit
build.log
Build of golang-googlecode-net fails on s390x that uses gcc-go with tons of
errors
...
+ go test -compiler gccgo -gccgoflags '-O2 -g -pipe -Wall
-Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches
-specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -march=z9-109 -mtune=z10 '
golang.org/x/net/ipv4
# golang.org/x/net/ipv4
../../BUILDROOT/golang-googlecode-net-0-0.31.git6acef71.fc24.s390x/usr/share/gocode/src/golang.org/x/net/ipv4/icmp.go:34:2:
error: use of undefined type 'sysICMPFilter'
sysICMPFilter
^
../../BUILDROOT/golang-googlecode-net-0-0.31.git6acef71.fc24.s390x/usr/share/gocode/src/golang.org/x/net/ipv4/control_pktinfo.go:19:11:
error: reference to undefined name 'sysIP_PKTINFO'
m.Type = sysIP_PKTINFO
^
../../BUILDROOT/golang-googlecode-net-0-0.31.git6acef71.fc24.s390x/usr/share/gocode/src/golang.org/x/net/ipv4/control_pktinfo.go:20:27:
error: reference to undefined name 'sysSizeofInetPktinfo'
...
see http://s390.koji.fedoraproject.org/koji/taskinfo?taskID=2183406 for full
logs, or attachment for build.log
Version-Release number of selected component (if applicable):
golang-googlecode-net-0-0.31.git6acef71.fc24
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=467765
[Bug 467765] Fedora for System z (s390): Bug Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 3 months
[Bug 1038683] New: golang appears to contain an ECC implementation
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1038683
Bug ID: 1038683
Summary: golang appears to contain an ECC implementation
Product: Fedora
Version: 20
Component: golang
Assignee: adam(a)spicenitz.org
Reporter: notting(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: adam(a)spicenitz.org, admiller(a)redhat.com,
golang(a)lists.fedoraproject.org, lemenkov(a)gmail.com,
lsm5(a)redhat.com, renich(a)woralelandia.com,
skottler(a)redhat.com, vbatts(a)redhat.com
Blocks: 182235 (FE-Legal), 1019390 (ecc)
Description of problem:
At least, I would assume that's what is in go/src/pkg/crypto/elliptic/.
In Fedora, we only ship certain reviewed curves.
Version-Release number of selected component (if applicable):
1.2-1
How reproducible:
100%
Steps to Reproduce:
1. look at golang's crypto code
Actual results:
Hey, that looks like ECC, and it appears to have been always included.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=182235
[Bug 182235] Fedora Legal Tracker
https://bugzilla.redhat.com/show_bug.cgi?id=1019390
[Bug 1019390] [tracking bug] re-enable ECC/ECDHE/EC/ECDSA/elliptic curves
in Fedora
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 3 months
[Bug 1243479] New: RFE: Ship docker with all RHEL patches
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1243479
Bug ID: 1243479
Summary: RFE: Ship docker with all RHEL patches
Product: Fedora
Version: 22
Component: docker-io
Assignee: ichavero(a)redhat.com
Reporter: riek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: adimania(a)gmail.com, admiller(a)redhat.com,
golang(a)lists.fedoraproject.org, hushan.jia(a)gmail.com,
ichavero(a)redhat.com, jchaloup(a)redhat.com,
jperrin(a)centos.org, lsm5(a)redhat.com,
mgoldman(a)redhat.com, miminar(a)redhat.com,
msamia(a)netsuite.com, s(a)shk.io, thrcka(a)redhat.com,
vbatts(a)redhat.com, wolfy(a)nobugconsulting.ro
In order to ensure that cross-development works for RHEL on Fedora, please ship
docker with all the same patches currently shipped or planned to be shipped in
RHEL.
Specifically please include the secrets patch to allow using RHEL subscriptions
to develop RHEL containers on top of a Fedora workstation.
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 3 months