laoshanxi / app-mesh Goto Github PK

Application can define stdout implement from appsvc or not

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2566

1. prepare Prometheus config file

$ echo -n 'global: 
  scrape_interval: 15s
  evaluation_interval: 15s

scrape_configs:
  - job_name: 'prometheus'
    static_configs:
      - targets: ['127.0.0.1:9090']
  - job_name: 'centos7-appmgr'
    scrape_interval: 10s
    static_configs:
      - targets: ['10.1.241.54:6061']
' | tee /opt/prometheus.yml

2. start Promeeheus container (use host mode networking for container connect host port)

docker run --restart=always -d --net=host --user root --privileged --name prom -v /opt/prometheus.yml:/etc/prometheus/prometheus.yml prom/prometheus

http://10.1.241.54:9090/config

http://10.1.241.54:9090/targets

Support listen IPv6 port

Use cmake to build project

Application does not have ownership, it's better to support a tree structure multi tenant, so specific user could see the sub-tree content.

add a REST to force service exit.

Current remote shell run will print both stderr and stdout to stdout.

App can register to 2+ hosts for HA.

Introduce Consul to eletion Appmanager Master to schedule Apps.

Define a REST according to a application

Usage: appc [COMMAND] [ARG...] [flags]
root@quantaxis-PowerEdge-R610:/home/quantaxis# appc view
Failed to connect to any resolved endpoint
root@quantaxis-PowerEdge-R610:/home/quantaxis# appc reg -n ping -c 'ping www.baidu.com' -o 10
Failed to connect to any resolved endpoint
root@quantaxis-PowerEdge-R610:/home/quantaxis#

appc log --level DEBUG

Target:

1. Application failover
2. Master election
3. Package management (docker could easy for package management)

LDAP auth support

LDAP Server:
https://github.com/osixia/docker-openldap

docker run -p 389:389 -p 636:636 --name my-openldap-container --detach osixia/openldap:1.5.0

LDAP UI:
https://github.com/osixia/docker-phpLDAPadmin

docker run -p 6443:443 \
        --env PHPLDAPADMIN_LDAP_HOSTS=ldap.example.com \
        --detach osixia/phpldapadmin:0.9.0

Sometimes we need to monitor or add schedule for the already running apps, maybe support this function will more helpful.

"ifconfig | grep 127" will be parse to bellow cause error:
fconfig '|' grep 127

GCC4.8.5 can not support regex well, wait to C++14.

Add authentication to http request

Most of the dependency can support Alpine Linux (mainly used for tiny Docker container), but ACE have not support Alpine yet.

Alpine is not glibc but musl libc, see according issue:

DOCGroup/ACE_TAO#914

1. need passless to self

$ appc sh -u admin -c 'su - -c "oc project"'

2. no need passless
   root switch to admin user with login environment:

$ appc sh -b "10.127.21.1" -c 'su - admin -c "oc get nodes"' 

https://github.com/prometheus/mysqld_exporter/

Similar like :
http://debuginfo.centos.org/centos/7/storage/x86_64/

1. watchdog.sh support register a args as application
2. If install in docker container, should support not instsall system service

Here is a simple example of creating a token that will expire in one hour:

auto token = jwt::create()
.set_issuer("auth0")
.set_issued_at(std::chrono::system_clock::now())
.set_expires_at(std::chrono::system_clock::now() + std::chrono::seconds{3600})
.sign(jwt::algorithm::hs256{"secret"});

Allow all configuration to be null, use default value

Solutions:

1. persist configuration file in 3rd storage
2. configuration file name use a unique file name

register timer?