CadolesKube/typhoon
7
0
Fork 0
mirror of https://github.com/puppetmaster/typhoon.git synced 2025-08-11 14:36:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix SELinux race condition on non-bootstrap controllers in multi-controller (#808)

Browse Source 
* Fix race condition for bootstrap-secrets SELinux context on non-bootstrap controllers in multi-controller FCOS clusters
* On first boot from disk on non-bootstrap controllers, adding bootstrap-secrets races with kubelet.service starting, which can cause the secrets assets to have the wrong label until kubelet.service restarts (service, reboot, auto-update)
* This can manifest as `kube-apiserver`, `kube-controller-manager`, and `kube-scheduler` pods crashlooping on spare controllers on first cluster creation
This commit is contained in:
Bo Huang
2020-08-19 21:18:10 -07:00
committed by GitHub
parent 9a07f1d30b
commit aafa38476a
6 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
CHANGES.md
View File

@ -4,7 +4,11 @@ Notable changes between versions.
## Latest
### v1.18.8
### Fedora CoreOS
* Fix SELinux label of bootstrap-secrets on non-bootstrapping controllers ([#808](https://github.com/poseidon/typhoon/pull/808))
## v1.18.8
* Kubernetes [v1.18.8](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.18.md#v1188)
* Migrate from Terraform v0.12.x to v0.13.x ([#804](https://github.com/poseidon/typhoon/pull/804)) (**action required**)