Maniphest T136413

Allow accessing kubernetes services / apiserver from bastions
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	yuvipanda
	May 27 2016, 2:11 PM

Tags

Referenced Files

None

Subscribers

View All 9 Subscribers

Description

This requires:

kubectl installed
Flannel installed and running (for being able to hit pod IPs)
kube-proxy installed and running (for being able to hit service IPs)

Details

	Subject	Repo	Branch	Lines +/-
	tools: Allow bastions to talk to flannel etcd	operations/puppet	production	+6 -5
	tools: Fixup k8s bastion role	operations/puppet	production	+87 -8
	k8s: Decouple kubelet from kube-proxy	operations/puppet	production	+5 -8

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		yuvipanda	T129309 Goal: Allow using k8s instead of GridEngine as a backend for webservices
		Resolved		yuvipanda	T136413 Allow accessing kubernetes services / apiserver from bastions

Event Timeline

yuvipanda created this task.May 27 2016, 2:11 PM

Restricted Application added a subscriber: Zppix. · View Herald TranscriptMay 27 2016, 2:11 PM

Change 291239 had a related patch set uploaded (by Yuvipanda):
k8s: Decouple kubelet from kube-proxy

https://gerrit.wikimedia.org/r/291239

gerritbot added a project: Patch-For-Review.May 27 2016, 2:16 PM

Change 291239 merged by Yuvipanda:
k8s: Decouple kubelet from kube-proxy

https://gerrit.wikimedia.org/r/291239

yuvipanda mentioned this in rOPUPbbe7e95d6351: k8s: Decouple kubelet from kube-proxy.May 27 2016, 2:31 PM

I've also uploaded our flannel package to the wikimedia trusty repo.

Change 291243 had a related patch set uploaded (by Yuvipanda):
tools: Fixup k8s bastion role

https://gerrit.wikimedia.org/r/291243

Danny_B removed a project: Tracking-Neverending.May 27 2016, 4:27 PM

It's now running flannel and kube-proxy properly! \o/

Change 291243 merged by Yuvipanda:
tools: Fixup k8s bastion role

https://gerrit.wikimedia.org/r/291243

yuvipanda mentioned this in rOPUP6f687a9e3548: tools: Fixup k8s bastion role.May 29 2016, 7:01 AM

Change 291841 had a related patch set uploaded (by Yuvipanda):
tools: Allow bastions to talk to flannel etcd

https://gerrit.wikimedia.org/r/291841

Change 291841 merged by Yuvipanda:
tools: Allow bastions to talk to flannel etcd

https://gerrit.wikimedia.org/r/291841

yuvipanda mentioned this in rOPUPc630257f944c: tools: Allow bastions to talk to flannel etcd.May 30 2016, 10:32 PM

Done now, kubectl works from both of the bastions.

Re-opening since I didn't document this yet.

And documented https://wikitech.wikimedia.org/wiki/Tools_Kubernetes#Bastion_nodes

yuvipanda mentioned this in rOPUPc3ce7b7f637d: tools: Fixup k8s bastion role.Jun 17 2016, 6:07 PM

yuvipanda mentioned this in rOPUP975187ead11d: tools: Fixup k8s bastion role.

yuvipanda mentioned this in rOPUPfdc23fb8bf2a: tools: Fixup k8s bastion role.

yuvipanda mentioned this in rOPUP36635640de61: tools: Fixup k8s bastion role.

yuvipanda mentioned this in rOPUP125f323d8bc4: tools: Fixup k8s bastion role.

yuvipanda mentioned this in rOPUPd9521012986e: tools: Fixup k8s bastion role.

yuvipanda mentioned this in rOPUPbc2d027300d3: k8s: Decouple kubelet from kube-proxy.

yuvipanda mentioned this in rOPUP2812a669f448: tools: Fixup k8s bastion role.

yuvipanda mentioned this in rOPUPb611e39eddf9: tools: Fixup k8s bastion role.

yuvipanda mentioned this in rOPUPba2457500e1b: tools: Fixup k8s bastion role.

yuvipanda mentioned this in rOPUPddfbb60dff20: tools: Fixup k8s bastion role.

• Phabricator_maintenance removed a subscriber: yuvipanda.Jun 7 2017, 6:42 PM