From 77f1d4b0f1c0185adcc7c7797e482be59117f403 Mon Sep 17 00:00:00 2001 From: neith00 Date: Mon, 16 Oct 2017 15:09:24 +0200 Subject: [PATCH] Revert "Update roadmap" (#1809) * Revert "Debian jessie docs (#1806)" This reverts commit d78577c81075d56253d21d0e2be835397717cdba. * Revert "[contrib/network-storage/glusterfs] adds service for glusterfs endpoint (#1800)" This reverts commit 5fb6b2eaf705fe307b0f65379af395395aef9332. * Revert "[contrib/network-storage/glusterfs] bootstrap for glusterfs nodes (#1799)" This reverts commit 404caa111a105a776cca56f5fed49f87e3e446cd. * Revert "Fixed kubelet standard log environment (#1780)" This reverts commit b83846850072232deb0111e85c42c8e8deab2ab7. * Revert "Add support for fedora atomic host (#1779)" This reverts commit f2235be1d32b466c456eebef9bb829bffe24cce4. * Revert "Update network-plugins to use portmap plugin (#1763)" This reverts commit 6ec45b10f142c963c51981078c1eca02255b2067. * Revert "Update roadmap (#1795)" This reverts commit d9879d8026e7149c9a7e5a665f0bbcce0c7aebf1. --- docs/roadmap.md | 52 ++++++++++++++++------ roles/kubernetes/secrets/files/make-ssl.sh | 2 +- 2 files changed, 39 insertions(+), 15 deletions(-) diff --git a/docs/roadmap.md b/docs/roadmap.md index cf8fa2d9a..9b23ffc1c 100644 --- a/docs/roadmap.md +++ b/docs/roadmap.md @@ -2,9 +2,8 @@ Kubespray's roadmap ================= ### Kubeadm -- Switch to kubeadm deployment as the default method after some bugs are fixed: - * Support for basic auth - * cloudprovider cloud-config mount [#484](https://github.com/kubernetes/kubeadm/issues/484) +- Propose kubeadm as an option in order to setup the kubernetes cluster. +That would probably improve deployment speed and certs management [#553](https://github.com/kubespray/kubespray/issues/553) ### Self deployment (pull-mode) [#320](https://github.com/kubespray/kubespray/issues/320) - the playbook would install and configure docker/rkt and the etcd cluster @@ -13,35 +12,60 @@ Kubespray's roadmap - to be discussed, a way to provide the inventory - **self deployment** of the node from inside a container [#321](https://github.com/kubespray/kubespray/issues/321) -### Provisioning and cloud providers +### Provisionning and cloud providers - [ ] Terraform to provision instances on **GCE, AWS, Openstack, Digital Ocean, Azure** - [ ] On AWS autoscaling, multi AZ - [ ] On Azure autoscaling, create loadbalancer [#297](https://github.com/kubespray/kubespray/issues/297) - [ ] On GCE be able to create a loadbalancer automatically (IAM ?) [#280](https://github.com/kubespray/kubespray/issues/280) -- [x] **TLS boostrap** support for kubelet (covered by kubeadm, but not in standard deployment) [#234](https://github.com/kubespray/kubespray/issues/234) +- [x] **TLS boostrap** support for kubelet [#234](https://github.com/kubespray/kubespray/issues/234) (related issues: https://github.com/kubernetes/kubernetes/pull/20439
https://github.com/kubernetes/kubernetes/issues/18112) ### Tests -- [ ] Run kubernetes e2e tests -- [ ] Test idempotency on on single OS but for all network plugins/container engines +- [x] Run kubernetes e2e tests +- [x] migrate to jenkins +(a test is currently a deployment on a 3 node cluste, testing k8s api, ping between 2 pods) +- [x] Full tests on GCE per day (All OS's, all network plugins) +- [x] trigger a single test per pull request +- [ ] ~~single test with the Ansible version n-1 per day~~ +- [x] Test idempotency on on single OS but for all network plugins/container engines - [ ] single test on AWS per day +- [x] test different achitectures : + - 3 instances, 3 are members of the etcd cluster, 2 of them acting as master and node, 1 as node + - 5 instances, 3 are etcd and nodes, 2 are masters only + - 7 instances, 3 etcd only, 2 masters, 2 nodes - [ ] test scale up cluster: +1 etcd, +1 master, +1 node -- [ ] Reorganize CI test vars into group var files ### Lifecycle +- [ ] Adopt the kubeadm tool by delegating CM tasks it is capable to accomplish well [#553](https://github.com/kubespray/kubespray/issues/553) +- [x] Drain worker node when upgrading k8s components in a worker node. [#154](https://github.com/kubespray/kubespray/issues/154) +- [ ] Drain worker node when shutting down/deleting an instance - [ ] Upgrade granularity: select components to upgrade and skip others ### Networking +- [ ] romana.io support [#160](https://github.com/kubespray/kubespray/issues/160) +- [ ] Configure network policy for Calico. [#159](https://github.com/kubespray/kubespray/issues/159) - [ ] Opencontrail -- [ ] Consolidate network_plugins and kubernetes-apps/network_plugins +- [x] Canal +- [x] Cloud Provider native networking (instead of our network plugins) + +### High availability +- (to be discussed) option to set a loadbalancer for the apiservers like ucarp/packemaker/keepalived +While waiting for the issue [kubernetes/kubernetes#18174](https://github.com/kubernetes/kubernetes/issues/18174) to be fixed. + +### Kubespray-cli +- Delete instances +- `kubespray vagrant` to setup a test cluster locally +- `kubespray azure` for Microsoft Azure support +- switch to Terraform instead of Ansible for provisionning +- update $HOME/.kube/config when a cluster is deployed. Optionally switch to this context ### Kubespray API - Perform all actions through an **API** - Store inventories / configurations of mulltiple clusters - make sure that state of cluster is completely saved in no more than one config file beyond hosts inventory -### Addons (helm or native ansible) +### Addons (with kpm) Include optionals deployments to init the cluster: ##### Monitoring - Heapster / Grafana .... @@ -61,10 +85,10 @@ Include optionals deployments to init the cluster: - Deis Workflow ### Others -- remove nodes (adding is already supported) -- Organize and update documentation (split in categories) -- Refactor downloads so it all runs in the beginning of deployment -- Make bootstrapping OS more consistent +- remove nodes (adding is already supported) +- being able to choose any k8s version (almost done) +- **rkt** support [#59](https://github.com/kubespray/kubespray/issues/59) +- Review documentation (split in categories) - **consul** -> if officialy supported by k8s - flex volumes options (e.g. **torrus** support) [#312](https://github.com/kubespray/kubespray/issues/312) - Clusters federation option (aka **ubernetes**) [#329](https://github.com/kubespray/kubespray/issues/329) diff --git a/roles/kubernetes/secrets/files/make-ssl.sh b/roles/kubernetes/secrets/files/make-ssl.sh index 4e01f9566..e5277c768 100755 --- a/roles/kubernetes/secrets/files/make-ssl.sh +++ b/roles/kubernetes/secrets/files/make-ssl.sh @@ -104,7 +104,7 @@ fi # Nodes if [ -n "$HOSTS" ]; then for host in $HOSTS; do - cn="${host}" + cn="${host%%.*}" gen_key_and_cert "node-${host}" "/CN=system:node:${cn}/O=system:nodes" done fi