raffaelespazzoli
10/17/2022, 5:19 PM{"level":"debug","datastoreReady":true,"dispatchReady":true,"time":"2022-10-17T17:14:38Z","message":"completed dispatcher and datastore readiness checks"}
{"level":"info","grpc.component":"server","grpc.method":"Check","grpc.method_type":"unary","grpc.service":"grpc.health.v1.Health","peer.address":"[::1]:56680","protocol":"grpc","requestID":"029dcbed3eb352a21117e9de95e9e401","grpc.request.deadline":"2022-10-17T17:14:39Z","grpc.start_time":"2022-10-17T17:14:38Z","grpc.code":"OK","grpc.time_ms":"0.015","time":"2022-10-17T17:14:38Z","message":"started call"}
a bunch of these and then ...
{"level":"info","time":"2022-10-17T17:16:27Z","message":"received interrupt"}
{"level":"info","time":"2022-10-17T17:16:27Z","message":"shutting down"}
{"level":"warn","error":"context canceled","time":"2022-10-17T17:16:27Z","message":"completed shutdown of postgres datastore"}
{"level":"info","addr":":50051","network":"tcp","prefix":"grpc","time":"2022-10-17T17:16:27Z","message":"grpc server stopped listening"}
{"level":"info","addr":":8080","prefix":"dashboard","time":"2022-10-17T17:16:27Z","message":"http server stopped serving"}
{"level":"info","addr":":9090","prefix":"metrics","time":"2022-10-17T17:16:27Z","message":"http server stopped serving"}
{"level":"info","addr":":50053","network":"tcp","prefix":"dispatch-cluster","time":"2022-10-17T17:16:27Z","message":"grpc server stopped listening"}
ecordell
10/17/2022, 5:20 PMraffaelespazzoli
10/17/2022, 5:20 PM{
"level": "debug",
"datastoreReady": true,
"dispatchReady": false,
"time": "2022-10-17T17:21:11Z",
"message": "completed dispatcher and datastore readiness checks"
}
ecordell
10/17/2022, 5:22 PMdispatchReady: true
raffaelespazzoli
10/17/2022, 5:25 PM- name: SPICEDB_DISPATCH_UPSTREAM_ADDR
value: 'kubernetes:///myspicedb.spicedb-test:dispatch'
- name: SPICEDB_DISPATCH_CLUSTER_ENABLED
value: 'true'
and for command line argument:
- '--dispatch-cluster-tls-cert-path'
- /certs/tls.crt
- '--dispatch-cluster-tls-key-path'
- /certs/tls.key
- '--dispatch-upstream-ca-path'
- /ca/service-ca.crt
ecordell
10/17/2022, 5:25 PMraffaelespazzoli
10/17/2022, 5:26 PMecordell
10/17/2022, 5:26 PMraffaelespazzoli
10/17/2022, 5:26 PMkubernetes:///myspicedb.spicedb-test:dispatch
what host is checked during the TLS handshake?ecordell
10/17/2022, 5:28 PMraffaelespazzoli
10/17/2022, 5:29 PMmyspicedb.spicedb-test.svc
myspicedb.spicedb-test.svc, myspicedb.spicedb-test.svc.cluster.local
.svc
there?ecordell
10/17/2022, 5:31 PM.svc
to the url, but haven't testedsvcName.svcNamespace
without .svc
raffaelespazzoli
10/17/2022, 5:34 PMecordell
10/17/2022, 5:34 PMraffaelespazzoli
10/17/2022, 5:35 PMecordell
10/17/2022, 5:35 PMraffaelespazzoli
10/17/2022, 5:36 PMsvcName.svcNamespace
is an illegal name and should not be used...ecordell
10/17/2022, 5:46 PM.svc
- update kuberesolver to resolve properly if dns suffixes are includedraffaelespazzoli
10/17/2022, 5:59 PM{"level":"info","grpc.component":"server","grpc.method":"Check","grpc.method_type":"unary","grpc.service":"grpc.health.v1.Health","peer.address":"[::1]:60998","protocol":"grpc","requestID":"4031d98eafda2bb28d303b6b71de1587","grpc.request.deadline":"2022-10-17T18:51:06Z","grpc.start_time":"2022-10-17T18:51:05Z","grpc.code":"OK","grpc.time_ms":"0.018","time":"2022-10-17T18:51:05Z","message":"started call"}
{"level":"info","grpc.component":"server","grpc.method":"Check","grpc.method_type":"unary","grpc.service":"grpc.health.v1.Health","peer.address":"[::1]:60998","protocol":"grpc","requestID":"4031d98eafda2bb28d303b6b71de1587","grpc.request.deadline":"2022-10-17T18:51:06Z","grpc.start_time":"2022-10-17T18:51:05Z","grpc.code":"OK","grpc.time_ms":"0.077","time":"2022-10-17T18:51:05Z","message":"finished call"}
it's unclear but evidently they fail.ecordell
10/17/2022, 6:58 PM- name: GRPC_GO_LOG_SEVERITY_LEVEL
value: info
- name: GRPC_GO_LOG_VERBOSITY_LEVEL
value: "2"
raffaelespazzoli
10/17/2022, 7:29 PM