Allow pods to access the kubernetes API via load balancers

Registered by Antoni Segura Puimedon

It is expected that pods be able to use the Kubernetes API if they choose to do so for, for example, finding out which endpoints a service has, watch resources, etc. To that effect, the kubelet mounts a token for them to be able to talk to the API.

All the pods that do not run on hostnetworking run on our neutron networking. Being as it is, no pods with Neutron networking can access the Kubernetes API unless we make it accessible with Neutron load balancing.

This blueprint is for having pods like kube-dns, dashboard or the kuryr-controller itself have a K8s API loadbalancer in front of of the API to talk to

Blueprint information

Status:
Complete
Approver:
Irena Berezovsky
Priority:
Medium
Drafter:
Antoni Segura Puimedon
Direction:
Approved
Assignee:
Antoni Segura Puimedon
Definition:
Approved
Series goal:
Accepted for pike
Implementation:
Implemented
Milestone target:
milestone icon pike-3
Started by
Antoni Segura Puimedon
Completed by
Antoni Segura Puimedon

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/devstack-support-api-accessing-pods,n,z

Addressed by: https://review.openstack.org/467241
    devstack: Create infra for K8s API accessing pods

https://bugs.launchpad.net/kuryr-kubernetes/+bug/1693378

Addressed by: https://review.openstack.org/468962
    devstack: Retrieve column directly

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.