Navigation Menu

Skip to content

Instantly share code, notes, and snippets.

@ensonic
Created November 29, 2022 15:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ensonic/1b6bf557a7028663665ec58a91008b3d to your computer and use it in GitHub Desktop.
Save ensonic/1b6bf557a7028663665ec58a91008b3d to your computer and use it in GitHub Desktop.
> git log HEAD -n1
commit 0eda26aca504938ed8dee1f156df2a8ef0e50192 (HEAD -> disable-dispatch-memory-ds, origin/disable-dispatch-memory-ds)
Author: Víctor Roldán Betancort <vroldanbet@authzed.com>
Date: Thu Nov 24 11:14:43 2022 +0000
disables dispatch for memory datastore
fixes https://github.com/authzed/spicedb-operator/issues/111
users running the repository example where stuck
because the SpiceDB instance spun up had Dispatch API
server disabled, but actual dispatching enabled, so
Check requests errored out.
This adds tests to verify the untested method
ToEnvVarApplyConfiguration() and makes sure
memory datastore does not set dispatchUpstreamAddr
> kubectl describe pod dev-spicedb-7d59744f5b-mbfzh
Name: dev-spicedb-7d59744f5b-mbfzh
Namespace: default
Priority: 0
Service Account: dev
Node: XXXX
Start Time: Tue, 29 Nov 2022 15:52:39 +0100
Labels: app.kubernetes.io/instance=dev-spicedb
authzed.com/cluster=dev
authzed.com/cluster-component=spicedb
authzed.com/managed-by=operator
pod-template-hash=7d59744f5b
Annotations: authzed.com/spicedb-secret: XXXX
authzed.com/spicedb-target-migration: head
Status: Running
IP: 192.168.9.27
IPs:
IP: 192.168.9.27
Controlled By: ReplicaSet/dev-spicedb-7d59744f5b
Containers:
dev-spicedb:
Container ID: containerd://c4adad484b486823b3dcabd475f98cf69aede4888f78e5108696a33fdd71c831
Image: authzed/spicedb:v1.15.0
Image ID: docker.io/authzed/spicedb@sha256:f1cd59fb584ebb06eb20c7ca30a57106ee86e22bd3708cafe7c10052dc352bc5
Ports: 50051/TCP, 50053/TCP, 8443/TCP, 9090/TCP
Host Ports: 0/TCP, 0/TCP, 0/TCP, 0/TCP
Command:
spicedb
serve
State: Running
Started: Tue, 29 Nov 2022 15:52:41 +0100
Ready: True
Restart Count: 0
Liveness: exec [grpc_health_probe -v -addr=localhost:50051] delay=60s timeout=5s period=10s #success=1 #failure=5
Readiness: exec [grpc_health_probe -v -addr=localhost:50051] delay=0s timeout=5s period=10s #success=1 #failure=5
Environment:
SPICEDB_LOG_LEVEL: info
SPICEDB_DISPATCH_UPSTREAM_ADDR: kubernetes:///dev.default:dispatch
SPICEDB_GRPC_PRESHARED_KEY: <set to the key 'preshared_key' in secret 'dev-spicedb-config'> Optional: false
SPICEDB_DATASTORE_ENGINE: memory
SPICEDB_DISPATCH_CLUSTER_ENABLED: false
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-fwmv8 (ro)
Conditions:
Type Status
Initialized True
Ready True
ContainersReady True
PodScheduled True
Volumes:
kube-api-access-fwmv8:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 3607
ConfigMapName: kube-root-ca.crt
ConfigMapOptional: <nil>
DownwardAPI: true
QoS Class: BestEffort
Node-Selectors: <none>
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 14m default-scheduler Successfully assigned default/dev-spicedb-7d59744f5b-mbfzh to ensonic.muc.corp.google.com
Normal Pulled 14m kubelet Container image "authzed/spicedb:v1.15.0" already present on machine
Normal Created 14m kubelet Created container dev-spicedb
Normal Started 14m kubelet Started container dev-spicedb
> kubectl logs dev-spicedb-7d59744f5b-mbfzh
{"level":"info","format":"auto","log_level":"info","provider":"zerolog","async":false,"time":"2022-11-29T14:52:41Z","message":"configured logging"}
{"level":"info","v":0,"provider":"none","endpoint":"","service":"spicedb","insecure":false,"time":"2022-11-29T14:52:41Z","message":"configured opentelemetry tracing"}
{"level":"info","latest-released-version":"v1.15.0","time":"2022-11-29T14:52:41Z","message":"this is the latest released version of SpiceDB"}
{"level":"info","time":"2022-11-29T14:52:41Z","message":"using memory datastore engine"}
{"level":"warn","time":"2022-11-29T14:52:41Z","message":"in-memory datastore is not persistent and not feasible to run in a high availability fashion"}
{"level":"info","initialSlowRequest":"10ms","maxRequests":1000000,"hedgingQuantile":0.95,"time":"2022-11-29T14:52:41Z","message":"request hedging enabled"}
{"level":"info","maxCost":"16 MiB","numCounters":1000,"metrics":false,"time":"2022-11-29T14:52:41Z","message":"configured namespace cache"}
{"level":"info","maxCost":"576 MiB","numCounters":10000,"metrics":false,"time":"2022-11-29T14:52:41Z","message":"configured dispatch cache"}
{"level":"info","addr":":50051","network":"tcp","service":"grpc","workers":0,"insecure":true,"time":"2022-11-29T14:52:41Z","message":"grpc server started serving"}
{"level":"info","addr":":8080","service":"dashboard","insecure":true,"time":"2022-11-29T14:52:41Z","message":"http server started serving"}
{"level":"info","interval":"1h0m0s","endpoint":"https://telemetry.authzed.com","next":"5m25s","time":"2022-11-29T14:52:41Z","message":"telemetry reporter scheduled"}
{"level":"info","addr":":9090","service":"metrics","insecure":true,"time":"2022-11-29T14:52:41Z","message":"http server started serving"}
{"level":"info","grpc.component":"server","grpc.method":"Check","grpc.method_type":"unary","grpc.service":"grpc.health.v1.Health","peer.address":"[::1]:57284","protocol":"grpc","requestID":"bfbd5cbfe9edc428155c30fa598e3a30","grpc.request.deadline":"2022-11-29T14:52:43Z","grpc.start_time":"2022-11-29T14:52:42Z","grpc.code":"OK","grpc.time_ms":"0.16","time":"2022-11-29T14:52:42Z","message":"finished call"}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment