CadolesKube
/
typhoon
mirror of https://github.com/puppetmaster/typhoon.git
7
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove iSCSI mounts from Kubelet 

* Remove Kubelet `/etc/iscsi` and `iscsiadm` host mounts that
were added on bare-metal, since these no longer work on either
Fedora CoreOS or Flatcar Linux with newer `iscsiadm`
* These special mounts on bare-metal date back to #350 which
added them to provide a way to use iSCSI in Kubernetes v1.10
* Today, storage should be handled by external CSI providers
which handle different storage systems, which doesn't rely
on Kubelet storage utils

Close #907
This commit is contained in:
Dalton Hubble 2020-12-12 11:41:02 -08:00
parent 86e0f806b3
commit dc7be431e0
5 changed files with 4 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGES.md
View File

@ -25,6 +25,10 @@ Notable changes between versions.
* NLB DNS name has both A and AAAA records * NLB DNS name has both A and AAAA records
* NLB to target node traffic is IPv4 (no change) * NLB to target node traffic is IPv4 (no change)
### Bare-Metal
* Remove iSCSI `/etc/iscsi` and `iscsadm` mounts from Kubelet ()
### Fedora CoreOS ### Fedora CoreOS
#### AWS #### AWS

2
bare-metal/fedora-coreos/kubernetes/fcc/controller.yaml
View File

@ -74,8 +74,6 @@ systemd:
--volume /var/log:/var/log \ --volume /var/log:/var/log \
--volume /var/run/lock:/var/run/lock:z \ --volume /var/run/lock:/var/run/lock:z \
--volume /opt/cni/bin:/opt/cni/bin:z \ --volume /opt/cni/bin:/opt/cni/bin:z \
--volume /etc/iscsi:/etc/iscsi \
--volume /sbin/iscsiadm:/sbin/iscsiadm \
$${KUBELET_IMAGE} \ $${KUBELET_IMAGE} \
--anonymous-auth=false \ --anonymous-auth=false \
--authentication-token-webhook \ --authentication-token-webhook \

2
bare-metal/fedora-coreos/kubernetes/fcc/worker.yaml
View File

@ -47,8 +47,6 @@ systemd:
--volume /var/log:/var/log \ --volume /var/log:/var/log \
--volume /var/run/lock:/var/run/lock:z \ --volume /var/run/lock:/var/run/lock:z \
--volume /opt/cni/bin:/opt/cni/bin:z \ --volume /opt/cni/bin:/opt/cni/bin:z \
--volume /etc/iscsi:/etc/iscsi \
--volume /sbin/iscsiadm:/sbin/iscsiadm \
$${KUBELET_IMAGE} \ $${KUBELET_IMAGE} \
--anonymous-auth=false \ --anonymous-auth=false \
--authentication-token-webhook \ --authentication-token-webhook \

2
bare-metal/flatcar-linux/kubernetes/cl/controller.yaml
View File

@ -88,8 +88,6 @@ systemd:
-v /var/lib/kubelet:/var/lib/kubelet:rshared \ -v /var/lib/kubelet:/var/lib/kubelet:rshared \
-v /var/log:/var/log \ -v /var/log:/var/log \
-v /opt/cni/bin:/opt/cni/bin \ -v /opt/cni/bin:/opt/cni/bin \
-v /etc/iscsi:/etc/iscsi \
-v /usr/sbin/iscsiadm:/usr/sbin/iscsiadm \
$${KUBELET_IMAGE} \ $${KUBELET_IMAGE} \
--anonymous-auth=false \ --anonymous-auth=false \
--authentication-token-webhook \ --authentication-token-webhook \

2
bare-metal/flatcar-linux/kubernetes/cl/worker.yaml
View File

@ -63,8 +63,6 @@ systemd:
-v /var/lib/kubelet:/var/lib/kubelet:rshared \ -v /var/lib/kubelet:/var/lib/kubelet:rshared \
-v /var/log:/var/log \ -v /var/log:/var/log \
-v /opt/cni/bin:/opt/cni/bin \ -v /opt/cni/bin:/opt/cni/bin \
-v /etc/iscsi:/etc/iscsi \
-v /usr/sbin/iscsiadm:/usr/sbin/iscsiadm \
$${KUBELET_IMAGE} \ $${KUBELET_IMAGE} \
--anonymous-auth=false \ --anonymous-auth=false \
--authentication-token-webhook \ --authentication-token-webhook \