Load ip_vs kernel module on boot as workaround

* (containerized) kube-proxy warns that it is unable to
load the ip_vs kernel module despite having the correct
mounts. Atomic uses an xz compressed module and modprobe
in the container was not compiled with compression support
* Workaround issue for now by always loading ip_vs on-host
* https://github.com/kubernetes/kubernetes/issues/60
This commit is contained in:
Dalton Hubble 2018-04-25 18:55:51 -07:00
parent d784b0fca6
commit 0a7fab56e2
8 changed files with 16 additions and 0 deletions

View File

@ -80,6 +80,8 @@ write_files:
bootcmd: bootcmd:
- [setenforce, Permissive] - [setenforce, Permissive]
- [systemctl, disable, firewalld, --now] - [systemctl, disable, firewalld, --now]
# https://github.com/kubernetes/kubernetes/issues/60869
- [modprobe, ip_vs]
runcmd: runcmd:
- [systemctl, daemon-reload] - [systemctl, daemon-reload]
- "atomic install --system --name=etcd quay.io/poseidon/etcd:v3.3.3" - "atomic install --system --name=etcd quay.io/poseidon/etcd:v3.3.3"

View File

@ -56,6 +56,8 @@ write_files:
bootcmd: bootcmd:
- [setenforce, Permissive] - [setenforce, Permissive]
- [systemctl, disable, firewalld, --now] - [systemctl, disable, firewalld, --now]
# https://github.com/kubernetes/kubernetes/issues/60869
- [modprobe, ip_vs]
runcmd: runcmd:
- [systemctl, daemon-reload] - [systemctl, daemon-reload]
- [systemctl, enable, cloud-metadata.service] - [systemctl, enable, cloud-metadata.service]

View File

@ -70,6 +70,8 @@ write_files:
bootcmd: bootcmd:
- [setenforce, Permissive] - [setenforce, Permissive]
- [systemctl, disable, firewalld, --now] - [systemctl, disable, firewalld, --now]
# https://github.com/kubernetes/kubernetes/issues/60869
- [modprobe, ip_vs]
runcmd: runcmd:
- [systemctl, daemon-reload] - [systemctl, daemon-reload]
- [hostnamectl, set-hostname, ${domain_name}] - [hostnamectl, set-hostname, ${domain_name}]

View File

@ -46,6 +46,8 @@ write_files:
bootcmd: bootcmd:
- [setenforce, Permissive] - [setenforce, Permissive]
- [systemctl, disable, firewalld, --now] - [systemctl, disable, firewalld, --now]
# https://github.com/kubernetes/kubernetes/issues/60869
- [modprobe, ip_vs]
runcmd: runcmd:
- [systemctl, daemon-reload] - [systemctl, daemon-reload]
- [hostnamectl, set-hostname, ${domain_name}] - [hostnamectl, set-hostname, ${domain_name}]

View File

@ -84,6 +84,8 @@ write_files:
bootcmd: bootcmd:
- [setenforce, Permissive] - [setenforce, Permissive]
- [systemctl, disable, firewalld, --now] - [systemctl, disable, firewalld, --now]
# https://github.com/kubernetes/kubernetes/issues/60869
- [modprobe, ip_vs]
runcmd: runcmd:
- [systemctl, daemon-reload] - [systemctl, daemon-reload]
- "atomic install --system --name=etcd quay.io/poseidon/etcd:v3.3.3" - "atomic install --system --name=etcd quay.io/poseidon/etcd:v3.3.3"

View File

@ -60,6 +60,8 @@ write_files:
bootcmd: bootcmd:
- [setenforce, Permissive] - [setenforce, Permissive]
- [systemctl, disable, firewalld, --now] - [systemctl, disable, firewalld, --now]
# https://github.com/kubernetes/kubernetes/issues/60869
- [modprobe, ip_vs]
runcmd: runcmd:
- [systemctl, daemon-reload] - [systemctl, daemon-reload]
- [systemctl, enable, cloud-metadata.service] - [systemctl, enable, cloud-metadata.service]

View File

@ -81,6 +81,8 @@ write_files:
bootcmd: bootcmd:
- [setenforce, Permissive] - [setenforce, Permissive]
- [systemctl, disable, firewalld, --now] - [systemctl, disable, firewalld, --now]
# https://github.com/kubernetes/kubernetes/issues/60869
- [modprobe, ip_vs]
runcmd: runcmd:
- [systemctl, daemon-reload] - [systemctl, daemon-reload]
- "atomic install --system --name=etcd quay.io/poseidon/etcd:v3.3.3" - "atomic install --system --name=etcd quay.io/poseidon/etcd:v3.3.3"

View File

@ -57,6 +57,8 @@ write_files:
bootcmd: bootcmd:
- [setenforce, Permissive] - [setenforce, Permissive]
- [systemctl, disable, firewalld, --now] - [systemctl, disable, firewalld, --now]
# https://github.com/kubernetes/kubernetes/issues/60869
- [modprobe, ip_vs]
runcmd: runcmd:
- [systemctl, daemon-reload] - [systemctl, daemon-reload]
- [systemctl, enable, cloud-metadata.service] - [systemctl, enable, cloud-metadata.service]