Skip to content

Conversation

@sdodson
Copy link
Member

@sdodson sdodson commented Oct 10, 2019

This enhancement extends openshift-installer to support installation
intexisting AWS VPCs and Subnets.

TODO:

  • Determine which alternatives should be copied over from private google doc
  • Determine structure for installer / platform enhancements, ie:
    • platforms/aws/customer-provisioned-vpc-and-subnets.md platforms/gcp/private-clusters.md
    • installer/aws/customer-provisioned-vpc-and-subnets.md installer/gcp/private-clusters.md
    • other?

@openshift-ci-robot openshift-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Oct 10, 2019
@openshift-ci-robot openshift-ci-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Oct 10, 2019
This enhancement extends `openshift-installer` to support installation
intexisting AWS VPCs and Subnets.
@openshift-ci-robot
Copy link

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: sdodson

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci-robot openshift-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Oct 10, 2019
@sdodson
Copy link
Member Author

sdodson commented Oct 10, 2019

/cc @wking
/uncc @ironcladlou @shawn-hurley

@openshift-ci-robot openshift-ci-robot requested review from wking and removed request for ironcladlou and shawn-hurley October 10, 2019 19:35
subnets or the VPC options like DHCP etc.). Therefore the installer can only
validate the assumptions about the networking setup. The installer may assume
that use has NAT gateways, internet gateways, etc. setup, and installation may
fail if these assumptions are violated. Or the installer may attempt to
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we can get rid of "Or the installer.." here?

Copy link
Member

@wking wking Oct 10, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we're planning to do at least some network validation.


## Alternatives

TODO, some can be ported from this private document https://docs.google.com/document/d/1eNtnrsMUL2efRC5Y8w6CL4f_GxTHrIij8cnyQQnUhW8/edit#heading=h.ttvcmxr8sl3b
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@wking can i get your thoughts on which alternatives items we want to port over from the design document? Most seemed related to CI rather than the implementation itself.

installer cannot modify the networking setup (i.e. the route tables for the
subnets or the VPC options like DHCP etc.). Therefore the installer can only
validate the assumptions about the networking setup. The installer may assume
that use has NAT gateways, internet gateways, etc. setup, and installation may
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: "use" -> "the user"

@wking
Copy link
Member

wking commented Oct 10, 2019

Do we need an enhancement for this? As far as I can tell, it's completely installer-side with no cross-team coordination required. I'd been trying to land motivation and considered alternatived in the individual implementation pivots (so far openshift/installer#2438, openshift/installer#2467, and openshift/installer#2477). If we want a detailed design discussion in a public place, the open installer issue openshift/installer#1083 might be more appropriate.

Destroy will remain mostly unchanged, hinging on the kubernetes.io/cluster/.\*: owned tag. We will need to grow new code to store kubernetes.io/cluster/.\*: shared in metadata.json and remove it from resources on which it is found.

We should probably revert:
- #1268, which began removing instance profiles by name. That was a workaround to recover from openshift-dev clusters which were partially-deleted by the DPP reaper. Folks using the installer’s destroy code won’t need it, and while the risk of accidental name collision is low, I don’t think it’s worth taking that risk.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

based on the conversation in openshift/installer#2461 seems like we are not going to revert 1268 for now.

@sdodson
Copy link
Member Author

sdodson commented Nov 8, 2019

/close

@openshift-ci-robot
Copy link

@sdodson: Closed this PR.

Details

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants