The two docker compose files for ARM based systems were not configured to pass the auth_proxy variables through to the gateway at deploy time. This was causing an error in the gateway which would manifest in the CLI and UI as: `ExternalAuthHandler: Get : unsupported protocol scheme ""`.
This change adds `auth_proxy_url` & `auth_proxy_pass_body` to the two ARM compose files so as to mirror the config of the x86_64 compose file.
Signed-off-by: Richard Gee <richard@technologee.co.uk>
This change means the gateway is used to invoke functions
asynchronously rather than directly so that the scale from zero
path can execute.
Signed-off-by: Alex Ellis <alexellis2@gmail.com>
This commit adds changes to run metrics server in a separate method and
also removed port 8082 from exposed port a/c to review comments.
It also uses a smaller static timeout value for new server.
Signed-off-by: Vivek Singh <vivekkmr45@yahoo.in>
This commit runs a new HTTPServer on port 8082 in a goroutine to serve
/metrics endpoint on a different port.
This also update the configurations and compose files.
Fixes: #1081
Signed-off-by: Vivek Singh <vivekkmr45@yahoo.in>
**What**
- Revert to the original docker tags because we want to for the bump
until after the official release
Signed-off-by: Lucas Roesler <roesler.lucas@gmail.com>
**What**
- Protect the `/system/alert` endpoint when basic auth is enabled
- Update the alert manager config to send the basic auth credentials
- Bump the gateway version
Signed-off-by: Lucas Roesler <roesler.lucas@gmail.com>
- This commit moves us to faas-swarm 0.4.2 which uses basic auth
(when enabled) to prevent functions or other services from
accessing the administrative API endpoints.
Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>
Bumping gateway to latest 0.9.2 release for docker-compose.yml
and docker-compose-armhf.yml files
Signed-off-by: Martin Dekov (VMware) <mdekov@vmware.com>
Code-review/refactoring for #843. Closes#843.
FaaSHandlers has had info and query handlers added to its list
of types for consistency.
Secrets added to queue-worker component ready for next PR.
Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>
Versions now in sync with x86_64:
* `openfaas/gateway:0.8.12-armhf`
* `openfaas/faas-swarm:0.4.1-armhf`
* `openfaas/queue-worker:0.4.9-armhf`
Also moves from functions/ to openfaas/
Signed-off-by: Alex Ellis <alexellis2@gmail.com>
This commit reverts the changes done in #738 to update the default
secret mount path to `/run/secrets/`
Signed-off-by: Vivek Singh <vivekkmr45@yahoo.in>
This changes updates the secret mount path default value to
/var/openfaas/secrets at serveral places. It has been changed
from /run/secrets/ to /var/openfaas/secrets after version 0.8.2
Signed-off-by: Vivek Singh <vivekkmr45@yahoo.in>
This change enables secrets to be read from any mount on disk
rather than hard-coding a certain location which suits Swarm or
K8s. The default value if not specified will look in the Swarm
location of /run/secrets/
README.md (docs) updated and set to off by default.
Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>
* Stop exposing Alertmanager and NATS ports
This commit stops exposing the Prometheus Alertmanager and NATS ports by
default on Swarm.
The respective sections are commented out with a note on re-enabling
them.
Signed-off-by: John McCabe <john@johnmccabe.net>
* Revert queue-worker dev tag in yaml
Signed-off-by: John McCabe <john@johnmccabe.net>
