2022-11-17 Indy Container Meeting #48
- Improved CI + Tags PR
- Controller
- Container Tagging
Hyperledger is committed to creating a safe and welcoming community for all. For more information please visit the Hyperledger Code of Conduct. |
---|
Attendance
- Sebastian Schmittner (EECC)
- Christian Bormann (Robert Bosch GmbH)
- Guido Wischrop
- Cristian Kubis
- Philipp Schlarb (esatus AG) <p.schlarb@esatus.com>
Indy Node Controller
- Controller purpose
- Network Restart
- No Ledger Transaction
- Nodes communicate "Action"
- Node Upgrades
- Ledger Transaction
- Network Restart
- Current State
- Controller In seperate Container
- Mounting Docker Socket
- https://github.com/hyperledger/indy-node-container/tree/main/controller
- The principal Controller solution mounting the host docker socket into the controller container might be re-discussed as well
- Controller Container mounting docker socket
- We deliver the orchestrated setup
- Problem: Indy Node calls apt to check for package upgrades before forwarding the upgrade to the controller!
- Process on Container Host
- Quick and Dirty
- Needs Docker rights
- Security Implications!
- Needs Docker rights
- Greatest flexibility
- Needs to survive restarts → e.g. systemd
- Not worth it
- Quick and Dirty
- Kubernetes Operator
- Needs Kubernetes Setup
- Local install (e.g. K3S) not to dificult
- But high maintenance effort
- For production: Tell people to go to a Kubernetes provider!
- Advantage: Runs on e.g. open shift, google, amazon, etc.
- Clean Setup with pure container tech
- Currently: probably to much effort for nobody in ID Union using a Kubernetes based setup
- Biggest problem: No ressources in our group to develop this
- Needs Kubernetes Setup
- Controller Container mounting docker socket
Conclusion
- We keep the current setup of running the Controller.
- We Issue a Change proposal in indy node to refactor all upgrading into the controller
Next Meeting
- Next meeting: 2022-11-11 9:15-10:00 (Berlin time)