Skip to content
This repository has been archived by the owner on Sep 30, 2020. It is now read-only.

[v0.16.x] Setup Calico Networking Option #1872

Merged
merged 32 commits into from
Jul 3, 2020

Conversation

dominicgunn
Copy link
Contributor

Changes

  • Canal is EOL, and the only other option we offered was AWS CNI. This borrows (steals) the Calico configuration for kops, and dumps it into kube-aws so that we can use that as an option too.
  • This PR also fixes node labelling issues that changed between v1.15.x and v1.16.x, as we can no longer use kubelet to self label kubernetes.io tags, making nodes difficult to differentiate.
  • This PR also removes quay.io as the core provider for calico networking images because they keep falling over.
  • This PR also opens ports 4789 to allow for vxlan networking between ports, and opens communication between workers & controllers for IPnIP tunnelling used by Calico's BGP (also requiring port 179) setup.

@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Jun 8, 2020
@k8s-ci-robot k8s-ci-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Jun 8, 2020
@@ -387,7 +382,8 @@ coreos:
{{- end }}
$KUBELET_OPTS"
Restart=always
RestartSec=10
RestartSec=10

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: extra new line

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I actually added this purposefully to more clearly separate the [Service] and [Install] block similar to other unit definitions here.

We should probably unify on one in another pull request (extra line between unit blocks, or without extra line), what are your thoughts?

Copy link
Contributor

@Fsero Fsero Jun 22, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry for the late response. I'm ok with the extra line but maybe would be much cleared if we use gotmpl comments

Suggested change
RestartSec=10
{{/* END of kubelet [Service] */}}

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm happy with that, I pushed those changes up.

@Fsero
Copy link
Contributor

Fsero commented Jun 8, 2020

Hi @dominicgunn thanks for your efforts and the contribution.

I was looking into Calico docs and didn't see any official information about canal deprecation. Can you share for better context?

Thanks!

tjamet and others added 9 commits June 8, 2020 18:09
Path based access has been deprecated and now returns a redirect error to bucketname.s3.amazonaws.com
as explained in this post:
https://aws.amazon.com/blogs/aws/amazon-s3-path-deprecation-plan-the-rest-of-the-story/

This makes cloudformation to fail as it refers to the now redirected s3
bucket path, and raises the message:
S3 error: The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint. For more information check http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html

There is no strong documentation about what are the updates in China and
Gov regions, consider it follows the same logic.

Change-Id: I9f8bbc47801b120c216d24de701855073506c89c
@codecov-commenter
Copy link

Codecov Report

Merging #1872 into v0.16.x will decrease coverage by 0.00%.
The diff coverage is 0.00%.

Impacted file tree graph

@@             Coverage Diff             @@
##           v0.16.x    #1872      +/-   ##
===========================================
- Coverage    24.41%   24.40%   -0.01%     
===========================================
  Files           98       98              
  Lines         5116     5117       +1     
===========================================
  Hits          1249     1249              
- Misses        3727     3728       +1     
  Partials       140      140              
Impacted Files Coverage Δ
pkg/api/assets.go 0.00% <0.00%> (ø)
pkg/api/region.go 0.00% <0.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f2781f8...44383e8. Read the comment docs.

@cknowles cknowles removed their request for review June 19, 2020 07:00
@cknowles
Copy link
Contributor

Removed myself for review since unfortunately at the moment I don't have an appropriate stack available to check through this.

@k8s-ci-robot k8s-ci-robot added the do-not-merge/invalid-commit-message Indicates that a PR should not merge because it has an invalid commit message. label Jul 3, 2020
@k8s-ci-robot
Copy link
Contributor

Keywords which can automatically close issues and at(@) mentions are not allowed in commit messages.

The list of commits with invalid commit messages:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign dominicgunn
You can assign the PR to them by writing /assign @dominicgunn in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dominicgunn dominicgunn merged commit 4c8ca96 into kubernetes-retired:v0.16.x Jul 3, 2020
@dominicgunn dominicgunn deleted the v0.16.x-calico branch July 3, 2020 16:33
@dominicgunn dominicgunn added this to the v0.16.2 milestone Jul 6, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/invalid-commit-message Indicates that a PR should not merge because it has an invalid commit message. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants