Collect tips for external cloud provider migration

[dims]

• [kube-apiserver] ensure DisableCloudProviders is true (by default or explicitly)
• [kubelet] ensure DisableKubeletCloudCredentialProviders is true (by default or explicitly)
• [kubelet] Need to switch on --image-credential-provider-config and --image-credential-provider-bin-dir ( see Set external credential provider to true by default in kube-up.sh #120392 ).
• [kube-controller-manager] Need to switch off node-ipam-controller in the value of --controllers parameter
• Run the extra binaries/containers needed for the cloud version of the controller-manager
  • kube-up.sh example start-cloud-controller-manager
  • cloud-provider-aws getting started
  • cloud-provider-azure docs

[dims]

cc @elmiko @kmala @bridgetkromhout @aojea @andrewsykim

[sftim]

/sig cloud-provider docs

[aojea]

• [kube-controller-manager] Need to switch off node-ipam-controller in the value of --controllers parameter

only if uses the CloudAllocator

cmd/kube-controller-manager/app/core.go: return nil, false, errors.New("--cidr-allocator-type is set to 'CloudAllocator' but cloud provider is not configured")

[elmiko]

thanks for starting this @dims !

[bridgetkromhout]

/triage accepted

[cpanato]

I would like to know if there is any docs regarding the GCE migration, existing clusters and new ones, thanks

we will need this for capg

[elmiko]

@cpanato i'm not finding an GCE specific docs for migration, but we do have these 2 general docs about migrating (depending on whether you are using HA or not):

• https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager
• https://kubernetes.io/docs/tasks/administer-cluster/controller-manager-leader-migration/

we will capture the general tips for migration and troubleshooting in the KEP but for GCE specific guidance this is something that should be requested in the cloud-provider-gcp repository. i have a feeling there will be more requests like this for specific cloud provider documentation and i think we will need to focus our efforts on having the individual providers create documentation as it will not scale well to centralize this knowledge for all providers.

[elmiko]

@dims

[kubelet] Need to switch on --image-credential-provider-config and --image-credential-provider-bin-dir

is this only for gcp?

[dims]

@elmiko for all providers

[dims]

/close

[k8s-ci-robot]

@dims: Closing this issue.

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.