Skip to content
GitLab
Switch branch/tag
This project is mirrored from https://gitee.com/cowcomic/pixie.git. Pull mirroring failed .
Repository mirroring has been paused due to too many failed attempts. It can be resumed by a project maintainer.
  1. 30 Apr, 2021 13 commits
    • Omid Azizi's avatar
      Fix reported size of GRPC messages · 9fdb7eae
      Omid Azizi authored 
      Summary: Size of PB messages was being mis-reported.

Test Plan: None

Reviewers: #stirling, yzhao

Reviewed By: #stirling, yzhao

JIRA Issues: PP-2694

Differential Revision: https://phab.corp.pixielabs.ai/D8470

GitOrigin-RevId: 9b7816c2a347a23363501e14ab8ca5fc62ff67af
      9fdb7eae
    • Michelle Nguyen's avatar
      PC-877 Fix segment secrets to be configs instead · 4504fc8e
      Michelle Nguyen authored 
      Summary:
Updated segment secrets (except staging and prod @michelle) to be configmaps in configs/ directory.

The diff for the secret -> configmap
```
2c2
< kind: Secret
---
> kind: ConfigMap
4c4
<     name: segment-secrets
---
>     name: segment-config
6,7c6
< type: Opaque
< stringData:
---
> data:
```

Test Plan: deploy cloud

Reviewers: michelle, vihang

Reviewed By: vihang

Subscribers: michelle

JIRA Issues: PC-877

Differential Revision: https://phab.corp.pixielabs.ai/D8481

GitOrigin-RevId: 5a7e5a184b21eee80dded3bac4eb0ae6ab0300c1
      4504fc8e
    • Phillip Kuznetsov's avatar
      ensure_namespace now doesn't exit if set -e is called · 19404e58
      Phillip Kuznetsov authored 
      Summary: set -e with ensure_namespace would exit unexpectedly if ns was missing. kubectl get ns returns an error code. Now we capture it and return foo in case of exit code. Migth need to clean up, dependinag on reviewers opinion.

Test Plan: tested to make sure that if ns exists, it doesn't try to create one and if it doesn't, under set -e we don't exit the containing script. The script i used to test was the cloud_prereqs one.

Reviewers: vihang, michelle

Reviewed By: vihang

Differential Revision: https://phab.corp.pixielabs.ai/D8483

GitOrigin-RevId: 8c8eb66f4b3ce1ea2ecfe454164a1823b7d25e05
      19404e58
    • Phillip Kuznetsov's avatar
      [PP-2668] Stop building kratostest image, remove volume dependency, and remove migration container. · 5d27bb15
      Phillip Kuznetsov authored 
      Summary: Kratostest was getting flakey. Removing some of the flake points should help out. Remove the migration container call, remove the volume it needed, and just pull the kratos image instead of trying to build one on top.

Test Plan: Tested kratostest 1000 times.

Reviewers: vihang, zasgar

Reviewed By: vihang

JIRA Issues: PP-2668

Differential Revision: https://phab.corp.pixielabs.ai/D8388

GitOrigin-RevId: 2c98bddb4058f6ad49cbff3731545d5c5a4a247c
      5d27bb15
    • Phillip Kuznetsov's avatar
      Fix postgres port issue by just port-forwarding a different one in ./scripts/load_dev_db.sh · 33bb82e4
      Phillip Kuznetsov authored 
      Summary: we keep getting this issue with ./script/load_dev_db.sh where a running postgres instance gets in the way. To avoid this issue, here's a solution where we get a port that's two above a typical postgres and choose that instead. Slightly better than nothing, but might benefit from a future where we error out saying the port is busy. Kinda hard to do in bash, would recommend we rewrite in golang to really do this properly.

Test Plan: Tested out and after port change, now successfully writes to k8s postgres.

Reviewers: vihang, nserrino, michelle

Reviewed By: vihang

Differential Revision: https://phab.corp.pixielabs.ai/D8487

GitOrigin-RevId: aa770ba0a9fa7c148e0a5729dcc0b4ea9cddfd86
      33bb82e4
    • Michelle Nguyen's avatar
      PC-872 Update artifact tracker to not require GCS service account · 060e1d66
      Michelle Nguyen authored 
      Summary:
users should be able to deploy Pixie cloud without requiring our GCS service account credentials.
part of this work required us to make official releases public (see D8484). these releases should be fetchable from GCS without having any credentials.
rcs are still uploaded to our private bucket and will still need credentials to access.

this diff updates the artifact tracker server so that it loads the credentials only if specified. it also changes which bucket it tries to access based on whether or not the desired artifact is an official release

Test Plan:
tested on staging
1. Deleted the service account secret, verified I can still deploy Vizier with official release, update CLI with official release version
2. Redeployed service account secret, verified I can still fetch Vizier/CLI official releases. also verified deploying a vizier rc works

Reviewers: vihang, zasgar

Reviewed By: vihang

JIRA Issues: PC-872

Differential Revision: https://phab.corp.pixielabs.ai/D8485

GitOrigin-RevId: 7316f54727c21c06db3d6b0115a91631f42fb3ea
      060e1d66
    • Michelle Nguyen's avatar
      PC-872 Update release build to write releases to public directory · d5ecb956
      Michelle Nguyen authored 
      Summary:
users should be able to deploy Pixie Cloud without needing access to our GCS service account.
to do so, we need to make our official releases public. this diff updates our release build so that official releases are written to our pixie-oss bucket. rcs are still written to our private pixie-prod bucket.

Test Plan:
built some rcs with the buckets switched, to ensure that jenkins had the proper permissions for writing to GCS.
verified that the files were written to the correct bucket. (will delete them now)

Reviewers: vihang, zasgar

Reviewed By: vihang

JIRA Issues: PC-872

Differential Revision: https://phab.corp.pixielabs.ai/D8484

GitOrigin-RevId: b9cbd6dcd26d91d331eccc5ec179f5ae7238c231
      d5ecb956
    • Michelle Nguyen's avatar
      PC-874 Make vizier-image-secrets optional · 1b264565
      Michelle Nguyen authored 
      Summary:
Currently the vizier-image-secrets are used in two places:
1. In cli deploys, when deploying vizier versions older than 0.5.22
2. In our template generator, which is run during releases.

the vizier-image-secrets are used in the API server's `GetImageCredentials` rpc call which only the CLI deploy calls.
given that we are now on vizier 0.7.2, we can safely clean up the CLI's handling for viziers older than 0.5.22. since this is the only consumer, we can likely also remove the `GetImageCredentials` call itself. for now I've just made the vizier-image-secrets optional, and that call will error if they dont exist.

Test Plan: ran `px deploy`

Reviewers: vihang, zasgar

Reviewed By: vihang

Differential Revision: https://phab.corp.pixielabs.ai/D8486

GitOrigin-RevId: a2144f54d08a444334b54bcabda65d16365a8a3d
      1b264565
    • Omid Azizi's avatar
      Deflake conn_stats_bpf_test · f269fe1c
      Omid Azizi authored 
      Summary: Deflakes the test. Also changes the behavior in that UPIDs that are not in the context will not be pushed to the tables.

Test Plan: Existing tests.

Reviewers: #stirling, yzhao

Reviewed By: #stirling, yzhao

Subscribers: yzhao

Differential Revision: https://phab.corp.pixielabs.ai/D8465

GitOrigin-RevId: 2634af9eb273e29c94502a6ef4afebd73ed4fd07
      f269fe1c
    • Michelle Nguyen's avatar
      Update slackin URL · 1d65d328
      Michelle Nguyen authored 
      Summary: this should point to our OSS slackin. we also need to update the docs links once we have our OSS docs ready, since users probably wont be hosting the docs on their own domain.

Test Plan: n/a

Reviewers: vihang, zasgar

Reviewed By: vihang

Differential Revision: https://phab.corp.pixielabs.ai/D8478

GitOrigin-RevId: 7405ea810fe5c1799c4a99dada588564355ada8f
      1d65d328
    • Omid Azizi's avatar
      [Cleanup] Control events · 49d2caf9
      Omid Azizi authored 
      Summary: Small clean-up to the structure, such that we don't have to rely on conn_event_t and close_event_t having the same layout.

Test Plan: Existing tests

Reviewers: #stirling, yzhao

Reviewed By: #stirling, yzhao

Differential Revision: https://phab.corp.pixielabs.ai/D8456

GitOrigin-RevId: cbea73fe9fdccc22e2ef077094f80e8918c5166f
      49d2caf9
    • Phillip Kuznetsov's avatar
      PC-878: Moving oss_auth to ory_auth and clarify docs to show that skaffold can... · 2f2a2601
      Phillip Kuznetsov authored 
      PC-878: Moving oss_auth to ory_auth and clarify docs to show that skaffold can run multiple profiles non-exclusively

Summary: skaffold lets you run multiple profiles so adjusting that. And renaming the oss_auth stuff to ory_auth

Test Plan: deployed dev and ory_auth and it worked as intended.

Reviewers: vihang, michelle

Reviewed By: vihang

JIRA Issues: PC-878

Differential Revision: https://phab.corp.pixielabs.ai/D8477

GitOrigin-RevId: ea737d102c9433f681df04c1d3b5a3aeb2483011
      2f2a2601
    • Phillip Kuznetsov's avatar
      Revert "Styling tweak for sign up page" · f4d36ed2
      Phillip Kuznetsov authored 
      Summary: This reverts commit 6016cb5af425c12dd03635d39abc9bf3b4a19032. Styling was only useful with the rest of the changes.

Test Plan: Tested on yarn dev.

Reviewers: michelle

Reviewed By: michelle

Differential Revision: https://phab.corp.pixielabs.ai/D8479

GitOrigin-RevId: 791605b25aba343f2762d9bfbe85de2882ccbbbf
      f4d36ed2
  3. 29 Apr, 2021 15 commits
  5. 28 Apr, 2021 12 commits

免费DevSecOps平台，让您的项目体验完整的DevSecOps流程，让项目更安全