Skip to content

Conversation

jseldess
Copy link
Contributor

@jseldess jseldess commented Sep 6, 2016

Add step for stopping nodes.

Fixes #614


This change is Reviewable

You can stop the nodes (and therefore the cluster) from any machine with the `cockroach` binary, the CA cert, and a client certificate and key. Make sure the machine you want to use has these files and then stop the nodes:

~~~ shell
$ cockroach quit --host=<node1-hostname> --ca-cert=ca.cert --cert=root.cert --key=root.key
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I assume you checked that calling quit with user root works?

@sploiselle
Copy link
Contributor

Review status: 0 of 1 files reviewed at latest revision, 1 unresolved discussion.


manual-deployment.md, line 241 [r1] (raw file):

--key=root.key
should this be --key=node1.key? and the following two node2.key and node3.key respectively?


Comments from Reviewable

@mberhault
Copy link
Contributor

Review status: 0 of 1 files reviewed at latest revision, 1 unresolved discussion.


manual-deployment.md, line 241 [r1] (raw file):

Previously, sploiselle (Sean Loiselle) wrote…

--key=root.key
should this be --key=node1.key? and the following two node2.key and node3.key respectively?

it would be those keys if we were using the node certificate, but we definitely want it to work as the `root` user

Comments from Reviewable

@sploiselle
Copy link
Contributor

Review status: 0 of 1 files reviewed at latest revision, 1 unresolved discussion, some commit checks failed.


manual-deployment.md, line 241 [r1] (raw file):

Previously, mberhault (marc) wrote…

it would be those keys if we were using the node certificate, but we definitely want it to work as the root user

But the second and third nodes are quit using `node1.key` even though they wouldn't have that file stored on them? Or should all of them use `root.key`?

Comments from Reviewable

@jseldess
Copy link
Contributor Author

jseldess commented Sep 6, 2016

manual-deployment.md, line 241 [r1] (raw file):

Previously, sploiselle (Sean Loiselle) wrote…

But the second and third nodes are quit using node1.key even though they wouldn't have that file stored on them? Or should all of them use root.key?

That's a mistake, @sploiselle. I'll fix that now.

Comments from Reviewable

@jseldess jseldess force-pushed the manual-deploy-update branch from db02629 to 852cced Compare September 6, 2016 18:26
@jseldess jseldess force-pushed the manual-deploy-update branch from 852cced to ddb3e70 Compare September 6, 2016 18:41
@jseldess
Copy link
Contributor Author

jseldess commented Sep 6, 2016

Review status: 0 of 2 files reviewed at latest revision, 1 unresolved discussion.


manual-deployment.md, line 241 [r1] (raw file):

Previously, jseldess wrote…

That's a mistake, @sploiselle. I'll fix that now.

@mberhault, `quit` works with the cert and key for the `root` user on a local secure cluster. But I haven't tested this on GCE. Would it be any different?

@sploiselle, let me know if/how you'd suggest clarifying this step. For example, should add alternate commands if you are quitting from one of the node machines?


Comments from Reviewable

@mberhault
Copy link
Contributor

Review status: 0 of 2 files reviewed at latest revision, 1 unresolved discussion.


manual-deployment.md, line 241 [r1] (raw file):

Previously, jseldess wrote…

@mberhault, quit works with the cert and key for the root user on a local secure cluster. But I haven't tested this on GCE. Would it be any different?

@sploiselle, let me know if/how you'd suggest clarifying this step. For example, should add alternate commands if you are quitting from one of the node machines?

quitting the node on the local machine could be done with the node cert/key, but I'm not sure I would recommend it. It's easier to just send a signal to the process.

Comments from Reviewable

@mberhault
Copy link
Contributor

Review status: 0 of 2 files reviewed at latest revision, 1 unresolved discussion.


manual-deployment.md, line 241 [r1] (raw file):

Previously, mberhault (marc) wrote…

quitting the node on the local machine could be done with the node cert/key, but I'm not sure I would recommend it. It's easier to just send a signal to the process.

it should work just fine on GCE. as long at the root cert/key can be used to talk to the cluster as an application, it should work just fine for `cockroach quit`

Comments from Reviewable

@jseldess jseldess force-pushed the manual-deploy-update branch from ddb3e70 to 9aec076 Compare September 7, 2016 14:32
@jseldess
Copy link
Contributor Author

jseldess commented Sep 7, 2016

manual-deployment.md, line 241 [r1] (raw file):

Previously, mberhault (marc) wrote…

it should work just fine on GCE. as long at the root cert/key can be used to talk to the cluster as an application, it should work just fine for cockroach quit

OK, given that, am I good to merge now?

Comments from Reviewable

@jseldess jseldess merged commit f411fdd into gh-pages Sep 8, 2016
@jseldess jseldess deleted the manual-deploy-update branch September 8, 2016 16:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants