Remove mandatory PANDAOPS ENV from docker-compose#356
Remove mandatory PANDAOPS ENV from docker-compose#356kdeme wants to merge 1 commit intoethereum:masterfrom
Conversation
This is in order to allow for running the docker compose setup with non PANDAOPS infrastructure. Else one has to specifically set: export GLADOS_PANDAOPS_SECRET="" export GLADOS_PANDAOPS_ID="" This is not good UX.
|
Added a couple of changes to this PR in #380 |
|
Something looks very fishy here (in the original code, not the PR). In contrast, They do not seem to be configured in the main glados_monitor image, which is working normally AFAIK. So maybe there is some code that loads the PANDAOPS info, but we're not actively using it? I'll keep digging. Here's where these were first added in October, for anyone else who goes spelunking to figure out what's going on: dadd731 |
|
Ok, it looks like in the main monitor code, it's only used for the The |
carver
left a comment
There was a problem hiding this comment.
Is it acceptable to run glados without beacon monitoring for you? If so, then there are a couple options:
- at runtime, list every service you want to start, eliminating
beacon_monitor(I recognize this kind of sucks, but just listing it for completeness and as a workaround while this PR is in progress. See some examples.) - we could add profiles to this docker-compose, and have a much shorter list of things to launch (the profile docs are pretty good)
If you want the beacon monitor to work, then this will take more effort. Perhaps that means a more generalized authorization encoding that defines an endpoint and authorization secret all combined into one, that you can set up to use your own endpoint. (and we can keep using PANDAOPS).
| PANDAOPS_ID: ${GLADOS_PANDAOPS_ID?Glados Pandaops ID Required} | ||
| PANDAOPS_SECRET: ${GLADOS_PANDAOPS_SECRET?Glados Pandaops Secret Required} |
There was a problem hiding this comment.
Just this change seems great (see earlier commentary on PR).
| PANDAOPS_CLIENT_ID: ${GLADOS_PANDAOPS_ID?Glados Pandaops ID Required} | ||
| PANDAOPS_CLIENT_SECRET: ${GLADOS_PANDAOPS_SECRET?Glados Pandaops Secret Required} |
There was a problem hiding this comment.
It appears that this change would break our beacon monitor.
|
I'm happy to pick up the work from here, but it would be nice to know how much folks care about getting beacon monitoring to work in their own glados setups. cc @kdeme |
|
@carver PR #380 keeps the beacon monitor working in the generic case (no auth or basic auth beacon url) but means that the current EF Glados docker-compose will need to be different to the one in this repo. Is that an acceptable solution? or a docker-compose that works both with a generic beacon url and pandaops is needed? |
Yes, this PR was basically an attempt to only fix 1 part. I realized that beacon-monitor would still be broken as things are hardcoded there currently to always use pandaops. Hence the issue #357 I'm fine with merging this PR as is or closing it and doing something better that tackles all. Ideally any pandaops setting would be optional and would be set as is done for these envs: https://github.com/ethereum/glados/blob/master/DOCKER_GUIDE.md#deploying-glados |
This is in order to allow for running the docker compose setup with non PANDAOPS infrastructure.
Else one has to specifically set:
export GLADOS_PANDAOPS_SECRET=""
export GLADOS_PANDAOPS_ID=""
This is not good UX.