Page MenuHomePhabricator

Make maintain-kubeusers run on first attempt
Closed, DeclinedPublic

Description

Right now, to have maintain-kubeusers run, you need to:

  1. touch /etc/kubernetes/tokenauth manually
  2. Start it manually, since the systemd unit expects /data/project and /etc/kubernetes to exist.

maintain-kubeusers running is required for a new api server to start, since it reads /etc/kubernetes/tokenauth for user accounts - including client-infrastructure (kubelet and kube-proxy)

Event Timeline

Restricted Application added a project: Cloud-Services. · View Herald TranscriptFeb 17 2017, 10:38 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
chasemp triaged this task as Medium priority.Feb 17 2017, 10:42 PM
scfc moved this task from Triage to Backlog on the Toolforge board.Feb 18 2017, 2:13 PM