Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow using odo inside a firewall #3824

Closed
girishramnani opened this issue Aug 24, 2020 · 10 comments
Closed

Allow using odo inside a firewall #3824

girishramnani opened this issue Aug 24, 2020 · 10 comments
Assignees
Labels
area/disconnected-cluster Issues or PRs related to disconnected clusters or clusters with restricted network access area/testing Issues or PRs related to testing, Quality Assurance or Quality Engineering
Projects

Comments

@girishramnani
Copy link
Contributor

girishramnani commented Aug 24, 2020

/kind bug

https://bugzilla.redhat.com/show_bug.cgi?id=1871160

@openshift-ci-robot openshift-ci-robot added the kind/bug Categorizes issue or PR as related to a bug. label Aug 24, 2020
@girishramnani girishramnani added this to For consideration in Sprint 189 via automation Aug 24, 2020
@girishramnani girishramnani moved this from For consideration to To do in Sprint 189 Aug 24, 2020
@amitkrout amitkrout added the area/disconnected-cluster Issues or PRs related to disconnected clusters or clusters with restricted network access label Aug 25, 2020
@amitkrout
Copy link
Contributor

I have aws account to start a cluster however setting up cluster behind a firewall could be a challenge.

Firewall prereq- https://docs.openshift.com/container-platform/4.5/installing/install_config/configuring-firewall.html

@amitkrout
Copy link
Contributor

Copy and pasting @kadel comment from bugzila

Use of registry.access.redhat.com is intentional.
Odo doesn't use registry.redhat.io because this registry requires authentication and we want to make sure that the 
same odo binary can be used on OpenShift and also on Kubernetes by users without Red Hat account.

Not sure if it makes sense to update OCP documentation to add Firewall rule for registry.access.redhat.com if
 nothing else is expected to use this registry.

But it might be good to add something like "In case you plan to use odo with your cluster whitelist also
 registry.access.redhat.com" to https://docs.openshift.com/container-platform/4.5/installing/install_config/configuring-firewall.html

@amitkrout
Copy link
Contributor

@girishramnani What is the ask in the issue ?

To reproduce the issue does not add value as this is expected. So do you want to verify odo functionality after adding the registry.access.redhat.com to the firewall whitelist ?

@amitkrout
Copy link
Contributor

I have pinged the original reporter in bugzila to check it form their end with the suggestion - #3824 (comment)

@prietyc123
Copy link
Contributor

prietyc123 commented Sep 11, 2020

Copy and pasting @kadel comment from bugzila

Use of registry.access.redhat.com is intentional.
Odo doesn't use registry.redhat.io because this registry requires authentication and we want to make sure that the 
same odo binary can be used on OpenShift and also on Kubernetes by users without Red Hat account.

Not sure if it makes sense to update OCP documentation to add Firewall rule for registry.access.redhat.com if
 nothing else is expected to use this registry.

But it might be good to add something like "In case you plan to use odo with your cluster whitelist also
 registry.access.redhat.com" to https://docs.openshift.com/container-platform/4.5/installing/install_config/configuring-firewall.html

As per @kadel comment I can see that its a documentation changes needs to be done. And ofcourse as per the above thread I can see we have to verify the suggested change in our test environment as well. So changing the label brom bug to area testing and need doc.

/area testing
/kind documentation

@openshift-ci-robot openshift-ci-robot added the area/testing Issues or PRs related to testing, Quality Assurance or Quality Engineering label Sep 11, 2020
@prietyc123 prietyc123 added kind/documentation and removed kind/bug Categorizes issue or PR as related to a bug. labels Sep 11, 2020
@amitkrout amitkrout added this to For consideration in Sprint 190 via automation Sep 14, 2020
@amitkrout amitkrout removed this from To do in Sprint 189 Sep 14, 2020
@amitkrout amitkrout moved this from For consideration to To do in Sprint 190 Sep 14, 2020
@amitkrout
Copy link
Contributor

I have gone through some reference video on how to configure firewall for aws account and whitelisting part as per the comment #3824 (comment) but could not try it.

So i am keeping it for next sprint.

@amitkrout amitkrout assigned prietyc123 and unassigned amitkrout Oct 2, 2020
@prietyc123 prietyc123 moved this from To do to In progress in Sprint 190 Oct 5, 2020
@girishramnani girishramnani added this to For consideration in Sprint 191 via automation Oct 5, 2020
@girishramnani girishramnani removed this from In progress in Sprint 190 Oct 5, 2020
@girishramnani girishramnani removed this from For consideration in Sprint 191 Oct 28, 2020
@girishramnani girishramnani added this to For consideration in Sprint 192 via automation Oct 28, 2020
@dharmit
Copy link
Member

dharmit commented Nov 12, 2020

The BZ corresponding to this issue has been inactive since over 2 months. And so is this issue. Is this even relevant? @prietyc123 @girishramnani

@yhontyk
Copy link

yhontyk commented Nov 12, 2020

@dharmit the bugzilla can be closed: openshift/openshift-docs#27092

@kadel
Copy link
Member

kadel commented Nov 13, 2020

@openshift-ci-robot
Copy link
Collaborator

@kadel: Closing this issue.

In response to this:

/close
https://bugzilla.redhat.com/show_bug.cgi?id=1871160#c7

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sprint 192 automation moved this from For consideration to Done Nov 13, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/disconnected-cluster Issues or PRs related to disconnected clusters or clusters with restricted network access area/testing Issues or PRs related to testing, Quality Assurance or Quality Engineering
Projects
No open projects
Sprint 192
  
Done
Development

No branches or pull requests

7 participants