From b15c60fa2f8a1cca153b03bbf22a13eae74a4bac Mon Sep 17 00:00:00 2001 From: Dalton Hubble Date: Sat, 7 Sep 2019 13:38:51 -0700 Subject: [PATCH] Update CHANGES for control plane static pod switch * Remove old references to bootkube / self-hosted --- CHANGES.md | 4 ++++ README.md | 2 +- aws/container-linux/kubernetes/bootkube.tf | 2 +- aws/fedora-coreos/kubernetes/bootkube.tf | 2 +- azure/container-linux/kubernetes/bootkube.tf | 2 +- bare-metal/fedora-coreos/kubernetes/bootkube.tf | 2 +- digital-ocean/container-linux/kubernetes/bootkube.tf | 2 +- docs/architecture/operating-systems.md | 2 +- docs/index.md | 2 +- docs/topics/maintenance.md | 2 +- google-cloud/container-linux/kubernetes/bootkube.tf | 2 +- 11 files changed, 14 insertions(+), 10 deletions(-) diff --git a/CHANGES.md b/CHANGES.md index 61cab014..70b48218 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -4,6 +4,10 @@ Notable changes between versions. ## Latest +* Migrate control plane from self-hosted to static pods ([#536](https://github.com/poseidon/typhoon/pull/536)) + * Run `kube-apiserver`, `kube-scheduler`, and `kube-controller-manager` as static pods on each controller + * `kubectl` edits to `kube-apiserver`, `kube-scheduler`, and `kube-controller-manager` are no longer possible (change) + * Remove [bootkube](https://github.com/kubernetes-incubator/bootkube), self-hosted pivot, and `pod-checkpointer` * Update CoreDNS from v1.5.0 to v1.6.2 ([#535](https://github.com/poseidon/typhoon/pull/535)) * Update etcd from v3.3.15 to [v3.4.0](https://github.com/etcd-io/etcd/releases/tag/v3.4.0) * Recommend updating `terraform-provider-ct` plugin from v0.3.2 to [v0.4.0](https://github.com/poseidon/terraform-provider-ct/releases/tag/v0.4.0) diff --git a/README.md b/README.md index 06157cf0..dee65035 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ Typhoon distributes upstream Kubernetes, architectural conventions, and cluster ## Features -* Kubernetes v1.15.3 (upstream, via [kubernetes-incubator/bootkube](https://github.com/kubernetes-incubator/bootkube)) +* Kubernetes v1.15.3 (upstream) * Single or multi-master, [Calico](https://www.projectcalico.org/) or [flannel](https://github.com/coreos/flannel) networking * On-cluster etcd with TLS, [RBAC](https://kubernetes.io/docs/admin/authorization/rbac/)-enabled, [network policy](https://kubernetes.io/docs/concepts/services-networking/network-policies/) * Advanced features like [worker pools](https://typhoon.psdn.io/advanced/worker-pools/), [preemptible](https://typhoon.psdn.io/cl/google-cloud/#preemption) workers, and [snippets](https://typhoon.psdn.io/advanced/customization/#container-linux) customization diff --git a/aws/container-linux/kubernetes/bootkube.tf b/aws/container-linux/kubernetes/bootkube.tf index 6db18ccf..9390a752 100644 --- a/aws/container-linux/kubernetes/bootkube.tf +++ b/aws/container-linux/kubernetes/bootkube.tf @@ -1,4 +1,4 @@ -# Self-hosted Kubernetes assets (kubeconfig, manifests) +# Kubernetes assets (kubeconfig, manifests) module "bootkube" { source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=6e59af71138bc5f784453873074de16e7ee150eb" diff --git a/aws/fedora-coreos/kubernetes/bootkube.tf b/aws/fedora-coreos/kubernetes/bootkube.tf index b11e6cf8..10002329 100644 --- a/aws/fedora-coreos/kubernetes/bootkube.tf +++ b/aws/fedora-coreos/kubernetes/bootkube.tf @@ -1,4 +1,4 @@ -# Self-hosted Kubernetes assets (kubeconfig, manifests) +# Kubernetes assets (kubeconfig, manifests) module "bootkube" { source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=6e59af71138bc5f784453873074de16e7ee150eb" diff --git a/azure/container-linux/kubernetes/bootkube.tf b/azure/container-linux/kubernetes/bootkube.tf index 8cefa6b2..70c889b3 100644 --- a/azure/container-linux/kubernetes/bootkube.tf +++ b/azure/container-linux/kubernetes/bootkube.tf @@ -1,4 +1,4 @@ -# Self-hosted Kubernetes assets (kubeconfig, manifests) +# Kubernetes assets (kubeconfig, manifests) module "bootkube" { source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=6e59af71138bc5f784453873074de16e7ee150eb" diff --git a/bare-metal/fedora-coreos/kubernetes/bootkube.tf b/bare-metal/fedora-coreos/kubernetes/bootkube.tf index a9c0bb60..a977981b 100644 --- a/bare-metal/fedora-coreos/kubernetes/bootkube.tf +++ b/bare-metal/fedora-coreos/kubernetes/bootkube.tf @@ -1,4 +1,4 @@ -# Self-hosted Kubernetes assets (kubeconfig, manifests) +# Kubernetes assets (kubeconfig, manifests) module "bootkube" { source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=6e59af71138bc5f784453873074de16e7ee150eb" diff --git a/digital-ocean/container-linux/kubernetes/bootkube.tf b/digital-ocean/container-linux/kubernetes/bootkube.tf index e279fa9d..b7711aea 100644 --- a/digital-ocean/container-linux/kubernetes/bootkube.tf +++ b/digital-ocean/container-linux/kubernetes/bootkube.tf @@ -1,4 +1,4 @@ -# Self-hosted Kubernetes assets (kubeconfig, manifests) +# Kubernetes assets (kubeconfig, manifests) module "bootkube" { source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=6e59af71138bc5f784453873074de16e7ee150eb" diff --git a/docs/architecture/operating-systems.md b/docs/architecture/operating-systems.md index 3a3b8e4c..9db88649 100644 --- a/docs/architecture/operating-systems.md +++ b/docs/architecture/operating-systems.md @@ -30,7 +30,7 @@ Together, they diversify Typhoon to support a range of container technologies. |-------------------|-----------------|---------------| | single-master | all platforms | all platforms | | multi-master | all platforms | all platforms | -| control plane | self-hosted | self-hosted | +| control plane | static pods | static pods | | kubelet image | upstream hyperkube | upstream hyperkube | | control plane images | upstream hyperkube | upstream hyperkube | | on-host etcd | rkt-fly | podman | diff --git a/docs/index.md b/docs/index.md index b78c9dde..b0d064c9 100644 --- a/docs/index.md +++ b/docs/index.md @@ -11,7 +11,7 @@ Typhoon distributes upstream Kubernetes, architectural conventions, and cluster ## Features -* Kubernetes v1.15.3 (upstream, via [kubernetes-incubator/bootkube](https://github.com/kubernetes-incubator/bootkube)) +* Kubernetes v1.15.3 (upstream) * Single or multi-master, [Calico](https://www.projectcalico.org/) or [flannel](https://github.com/coreos/flannel) networking * On-cluster etcd with TLS, [RBAC](https://kubernetes.io/docs/admin/authorization/rbac/)-enabled, [network policy](https://kubernetes.io/docs/concepts/services-networking/network-policies/) * Advanced features like [worker pools](advanced/worker-pools/), [preemptible](cl/google-cloud/#preemption) workers, and [snippets](advanced/customization/#container-linux) customization diff --git a/docs/topics/maintenance.md b/docs/topics/maintenance.md index d1597d68..2d605085 100644 --- a/docs/topics/maintenance.md +++ b/docs/topics/maintenance.md @@ -110,7 +110,7 @@ Apply complete! Resources: 0 added, 0 changed, 55 destroyed. #### In-place Edits -Typhoon uses a self-hosted Kubernetes control plane which allows certain manifest upgrades to be performed in-place. Components like `apiserver`, `controller-manager`, `scheduler`, `flannel`/`calico`, `coredns`, and `kube-proxy` are run on Kubernetes itself and can be edited via `kubectl`. If you're interested, see the bootkube [upgrade docs](https://github.com/kubernetes-incubator/bootkube/blob/master/Documentation/upgrading.md). +Typhoon uses a static pod Kubernetes control plane which allows certain manifest upgrades to be performed in-place. Components like `kube-apiserver`, `kube-controller-manager`, and `kube-scheduler` are run as static pods. Components `flannel`/`calico`, `coredns`, and `kube-proxy` are scheduled on Kubernetes and can be edited via `kubectl`. In certain scenarios, in-place edits can be useful for quickly rolling out security patches (e.g. bumping `coredns`) or prioritizing speed over the safety of a proper cluster re-provision and transition. diff --git a/google-cloud/container-linux/kubernetes/bootkube.tf b/google-cloud/container-linux/kubernetes/bootkube.tf index 76b31172..4ad35381 100644 --- a/google-cloud/container-linux/kubernetes/bootkube.tf +++ b/google-cloud/container-linux/kubernetes/bootkube.tf @@ -1,4 +1,4 @@ -# Self-hosted Kubernetes assets (kubeconfig, manifests) +# Kubernetes assets (kubeconfig, manifests) module "bootkube" { source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=6e59af71138bc5f784453873074de16e7ee150eb"