This commit moves the OpenFaaS gateway from using in-process
basic-auth for everything to use an external auth URL instead.
When auth is not enable, this functionality is not added to the
handlers and behaves as before. When enabled, the configured
plugin with authenticate requests.
Tested on Docker Swarm with positive and negative tests.
Signed-off-by: Alex Ellis <alexellis2@gmail.com>
This change means the gateway is used to invoke functions
asynchronously rather than directly so that the scale from zero
path can execute.
Signed-off-by: Alex Ellis <alexellis2@gmail.com>
This commit adds changes to run metrics server in a separate method and
also removed port 8082 from exposed port a/c to review comments.
It also uses a smaller static timeout value for new server.
Signed-off-by: Vivek Singh <vivekkmr45@yahoo.in>
This commit runs a new HTTPServer on port 8082 in a goroutine to serve
/metrics endpoint on a different port.
This also update the configurations and compose files.
Fixes: #1081
Signed-off-by: Vivek Singh <vivekkmr45@yahoo.in>
**What**
- Removes the `alert` label in the scale-up alert
- Updates the annotaitons to use the `function_name` label instead of
the `instance` label that was removed.
- Per prometheus/prometheus#4836 and the related mailing list discussion
https://groups.google.com/d/msg/prometheus-users/7Ul6ngc7Ogs/j_YDszV5BwAJ
the alert value should not be included in the alert labels otherwise
each calculation of the alert is treated like a new alert and then the
use of `for 5s` will not behave as expected.
- Ports the resoltuion openfaas/faas-netes#372
Signed-off-by: Lucas Roesler <roesler.lucas@gmail.com>
- re-vendor queue-worker for publisher via 0.6.0
- bump queue-worker version to 0.6.0 in docker-compose.yml for
AMD64
- use new naming for NATS of nats -> NATS in variables where
required
- add default reconnect of 60 times, 2 seconds apart.
Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>
- adds max_idle_conns_* default values to docker-compose.yml to
make it easier to override as a user doing testing/tuning
- make Golang durations easier to read 300s -> 5m
Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>
**What**
- Bumps the gateway version to 0.10.2 in the default docker-compose file
**Why**
- Finishes the work started in #1049 to enable basic auth for the alert
endpoint, this will allow the deployment via compose to leverage the
basic auth
Signed-off-by: Lucas Roesler <roesler.lucas@gmail.com>
**What**
- Revert to the original docker tags because we want to for the bump
until after the official release
Signed-off-by: Lucas Roesler <roesler.lucas@gmail.com>
**What**
- Protect the `/system/alert` endpoint when basic auth is enabled
- Update the alert manager config to send the basic auth credentials
- Bump the gateway version
Signed-off-by: Lucas Roesler <roesler.lucas@gmail.com>
I changed the version of image to current one,
which implements secret management endpoint
from 0.5.0 to 0.6.1 in docker-compose.yml (x86_64)
Version of openfaas/gateway was also increased to 0.9.14
Signed-off-by: Bart Smykla <bsmykla@vmware.com>
- This commit moves us to faas-swarm 0.4.2 which uses basic auth
(when enabled) to prevent functions or other services from
accessing the administrative API endpoints.
Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>
Bumping gateway to latest 0.9.2 release for docker-compose.yml
and docker-compose-armhf.yml files
Signed-off-by: Martin Dekov (VMware) <mdekov@vmware.com>
Code-review/refactoring for #843. Closes#843.
FaaSHandlers has had info and query handlers added to its list
of types for consistency.
Secrets added to queue-worker component ready for next PR.
Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>
This updates faas-swarm version including a fix for annotations.
In version 0.4.0 the prefix was not removed from the annotation
key, which was causing errors trying to get the value
Signed-off-by: Ivana Yovcheva (VMware) <iyovcheva@vmware.com>
The update to the gateway and faas-swarm add read-only containers
and the ability to use annotations in the function schema.
faas-cli 0.6.17 is required.
Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>
This commit bumps gateway version to 0.8.7 in docker-compose.yml and
also adds `scale_from_zero` environment variable to the gateway.
Fixes: #780
Signed-off-by: Vivek Singh <vivekkmr45@yahoo.in>
