Skip to content

Optimize private zone discovery#93

Merged
openshift-merge-robot merged 2 commits intoopenshift:masterfrom
ironcladlou:dns-optimization
Jan 4, 2019
Merged

Optimize private zone discovery#93
openshift-merge-robot merged 2 commits intoopenshift:masterfrom
ironcladlou:dns-optimization

Conversation

@ironcladlou
Copy link
Contributor

@ironcladlou ironcladlou commented Dec 20, 2018

Optimize the private zone discovery algorithm to replace the O(n) AWS API calls
with a single O(1) call to find the zone by its tag.

Needs some more testing. Wildcard DNS e2e is still blocked on a couple other things.

/cc @openshift/sig-network-edge @smarterclayton @wking @csrwng

Optimize the private zone discovery algorithm to replace the O(n) AWS API calls
with a single O(1) call to find the zone by its tag.
@openshift-ci-robot openshift-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Dec 20, 2018
@ironcladlou
Copy link
Contributor Author

ironcladlou commented Dec 20, 2018

Previously, once per startup, the controller would call ListTagsForResource in a tight loop for every zone in the account.

@ironcladlou
Copy link
Contributor Author

openshift/origin#21617 passes against this

@smarterclayton
Copy link
Contributor

Structure looks fine to me.

@smarterclayton
Copy link
Contributor

The hosted zone region lookup thing is a bit wierd

@Miciah
Copy link
Contributor

Miciah commented Jan 3, 2019

/lgtm

@openshift-ci-robot openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Jan 3, 2019
@openshift-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ironcladlou, Miciah

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-bot
Copy link
Contributor

/retest

Please review the full test history for this PR and help us cut down flakes.

2 similar comments
@openshift-bot
Copy link
Contributor

/retest

Please review the full test history for this PR and help us cut down flakes.

@openshift-bot
Copy link
Contributor

/retest

Please review the full test history for this PR and help us cut down flakes.

@openshift-merge-robot openshift-merge-robot merged commit 7687918 into openshift:master Jan 4, 2019
@Miciah
Copy link
Contributor

Miciah commented Jan 8, 2019

@ironcladlou, although tests passed, the following is in the operator's logs from the last (successful) test run:

time="2019-01-04T23:33:09Z" level=error msg="failed to reconcile: failed to ensure clusteringress openshift-ingress-operator/default: failed to ensure DNS for router service openshift-ingress/router-default: failed to discover hosted zones: failed to get tagged resources: AccessDeniedException: User: arn:aws:iam::460538899914:user/origin-ci-robot-provision is not authorized to perform: tag:GetResources\n\tstatus code: 400, request id: 184b3616-1079-11e9-af9c-2f2371f9e33a"

I am seeing the same on another PR from today.

So we need to fix IAM policy to allow GetResources, and we apparently need better test coverage,

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants