Skip to content

Adds Managed APIServer Loadbalancer#2

Closed
sbueringer wants to merge 4 commits intopr-implement-reconcile-certsfrom
pr-add-managed-apiserver-lb
Closed

Adds Managed APIServer Loadbalancer#2
sbueringer wants to merge 4 commits intopr-implement-reconcile-certsfrom
pr-add-managed-apiserver-lb

Conversation

@sbueringer
Copy link
Owner

This commit adds the optional feature manage APIServer Loadbalancer. If
the feature is enabled a LoadBalancer for the control plane node(s) is created.
The cluster actuator creates the LoadBalancers and all corresponding objects.
The machine actuator creates and removes LoadBalancer members for control plane
nodes.

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Special notes for your reviewer:

  1. Please confirm that if this PR changes any image versions, then that's the sole change this PR makes.

Release note:


@sbueringer sbueringer force-pushed the pr-implement-reconcile-certs branch 2 times, most recently from d0bb419 to 4e393d7 Compare July 11, 2019 18:04
@sbueringer sbueringer force-pushed the pr-add-managed-apiserver-lb branch from 1601245 to 3c58990 Compare July 11, 2019 18:08
@sbueringer sbueringer force-pushed the pr-implement-reconcile-certs branch from b875d2e to ee1e643 Compare July 13, 2019 08:31
@sbueringer sbueringer force-pushed the pr-add-managed-apiserver-lb branch from 3c58990 to f6dee22 Compare July 13, 2019 12:03
jichenjc and others added 3 commits July 14, 2019 21:27
* Reconcile certificates and store them in the cluster crd

This is heavily inspired bei CAPA. We now reconcile and store certificates
in the Cluster CRD. Thus it's possible to distribute the same CAs over all
control plane nodes (as soon as multi-node control plane supported is
implemented). We also don't have to ssh on the/a control plane node to get
a valid kubeconfig. We now can just generate one from the CA.

* Generate a kubeconfig for the Workload cluster instead of reusing the controllerClient

This enables us to run the controller outside the Workload Cluster, e.g. in a Management
Cluster.

* Add options for local user data

Now it's possible to use a local userdata folder. This is mostly useful
for development to avoid updating the user data Secrets all the time.

* added vaildate certificates

* Removed sshUserName from templates, moved defer storeCluster up
This commit adds the optional feature manage APIServer Loadbalancer. If
the feature is enabled a LoadBalancer for the control plane node(s) is created.
The cluster actuator creates the LoadBalancers and all corresponding objects.
The machine actuator creates and removes LoadBalancer members for control plane
nodes.
@sbueringer sbueringer force-pushed the pr-add-managed-apiserver-lb branch from f6dee22 to 215eef1 Compare July 17, 2019 03:45
@sbueringer
Copy link
Owner Author

Moved to kubernetes-sigs#401

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments