mirror of
				https://github.com/optim-enterprises-bv/kubernetes.git
				synced 2025-11-03 19:58:17 +00:00 
			
		
		
		
	Merge pull request #28938 from madhusudancs/fed14-kubeconfig-secret-name
Automatic merge from submit-queue Change the name of the secret that delivers federation kubeconfig. ```release-note Federation API server kubeconfig secret consumed by federation-controller-manager has a new name. If you are upgrading your Cluster Federation components from v1.3.x, please run this command to migrate the federation-apiserver-secret to federation-apiserver-kubeconfig serect; $ kubectl --namespace=federation get secret federation-apiserver-secret -o json | sed 's/federation-apiserver-secret/federation-apiserver-kubeconfig/g' | kubectl create -f - You might also want to delete the old secret using this command: $ kubectl delete secret --namespace=federation federation-apiserver-secret ``` The current name, federation-apiserver-secret, is very similar to the other secret we have, federation-apiserver-secrets, that delivers somewhat similar data but in a different format. This is extremely confusing, particularly while debugging. This change should soothe the pain. cc @kubernetes/sig-cluster-federation
This commit is contained in:
		@@ -156,7 +156,7 @@ function create-federation-api-objects {
 | 
				
			|||||||
	   create-kubeconfig
 | 
						   create-kubeconfig
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    # Create secret with federation-apiserver's kubeconfig
 | 
					    # Create secret with federation-apiserver's kubeconfig
 | 
				
			||||||
    $host_kubectl create secret generic federation-apiserver-secret --from-file="${KUBECONFIG_DIR}/federation/federation-apiserver/kubeconfig" --namespace="${FEDERATION_NAMESPACE}"
 | 
					    $host_kubectl create secret generic federation-apiserver-kubeconfig --from-file="${KUBECONFIG_DIR}/federation/federation-apiserver/kubeconfig" --namespace="${FEDERATION_NAMESPACE}"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    # Create secrets with all the kubernetes-apiserver's kubeconfigs.
 | 
					    # Create secrets with all the kubernetes-apiserver's kubeconfigs.
 | 
				
			||||||
    # Note: This is used only by the test setup (where kubernetes clusters are
 | 
					    # Note: This is used only by the test setup (where kubernetes clusters are
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -20,6 +20,7 @@ limitations under the License.
 | 
				
			|||||||
package app
 | 
					package app
 | 
				
			||||||
 | 
					
 | 
				
			||||||
import (
 | 
					import (
 | 
				
			||||||
 | 
						"fmt"
 | 
				
			||||||
	"net"
 | 
						"net"
 | 
				
			||||||
	"net/http"
 | 
						"net/http"
 | 
				
			||||||
	"net/http/pprof"
 | 
						"net/http/pprof"
 | 
				
			||||||
@@ -45,8 +46,18 @@ import (
 | 
				
			|||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
const (
 | 
					const (
 | 
				
			||||||
	// "federation-apiserver-secret" is a reserved secret name which stores the kubeconfig for federation-apiserver.
 | 
						// TODO(madhusudancs): Consider making this configurable via a flag.
 | 
				
			||||||
	FederationAPIServerSecretName = "federation-apiserver-secret"
 | 
						// "federation-apiserver-kubeconfig" is a reserved secret name which
 | 
				
			||||||
 | 
						// stores the kubeconfig for federation-apiserver.
 | 
				
			||||||
 | 
						KubeconfigSecretName = "federation-apiserver-kubeconfig"
 | 
				
			||||||
 | 
						// "federation-apiserver-secret" was the old name we used to store
 | 
				
			||||||
 | 
						// Federation API server kubeconfig secret. Unfortunately, this name
 | 
				
			||||||
 | 
						// is very close to "federation-apiserver-secrets" and causes a lot
 | 
				
			||||||
 | 
						// of confusion, particularly while debugging. So deprecating it in
 | 
				
			||||||
 | 
						// favor of the new name but giving people time to migrate.
 | 
				
			||||||
 | 
						// TODO(madhusudancs): this name is deprecated in 1.4 and should be
 | 
				
			||||||
 | 
						// removed in 1.5. Remove it in 1.5.
 | 
				
			||||||
 | 
						DeprecatedKubeconfigSecretName = "federation-apiserver-secret"
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
// NewControllerManagerCommand creates a *cobra.Command object with default parameters
 | 
					// NewControllerManagerCommand creates a *cobra.Command object with default parameters
 | 
				
			||||||
@@ -78,10 +89,17 @@ func Run(s *options.CMServer) error {
 | 
				
			|||||||
		glog.Errorf("unable to register configz: %s", err)
 | 
							glog.Errorf("unable to register configz: %s", err)
 | 
				
			||||||
	}
 | 
						}
 | 
				
			||||||
	// Create the config to talk to federation-apiserver.
 | 
						// Create the config to talk to federation-apiserver.
 | 
				
			||||||
	kubeconfigGetter := util.KubeconfigGetterForSecret(FederationAPIServerSecretName)
 | 
						kubeconfigGetter := util.KubeconfigGetterForSecret(KubeconfigSecretName)
 | 
				
			||||||
	restClientCfg, err := clientcmd.BuildConfigFromKubeconfigGetter(s.Master, kubeconfigGetter)
 | 
						restClientCfg, err := clientcmd.BuildConfigFromKubeconfigGetter(s.Master, kubeconfigGetter)
 | 
				
			||||||
	if err != nil {
 | 
						if err != nil || restClientCfg == nil {
 | 
				
			||||||
		return err
 | 
							// Retry with the deprecated name in 1.4.
 | 
				
			||||||
 | 
							// TODO(madhusudancs): Remove this in 1.5.
 | 
				
			||||||
 | 
							var depErr error
 | 
				
			||||||
 | 
							kubeconfigGetter := util.KubeconfigGetterForSecret(DeprecatedKubeconfigSecretName)
 | 
				
			||||||
 | 
							restClientCfg, depErr = clientcmd.BuildConfigFromKubeconfigGetter(s.Master, kubeconfigGetter)
 | 
				
			||||||
 | 
							if depErr != nil {
 | 
				
			||||||
 | 
								return fmt.Errorf("failed to find the secret containing Federation API server kubeconfig, tried the secret name %s and the deprecated name %s: %v, %v", KubeconfigSecretName, DeprecatedKubeconfigSecretName, err, depErr)
 | 
				
			||||||
 | 
							}
 | 
				
			||||||
	}
 | 
						}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
	// Override restClientCfg qps/burst settings from flags
 | 
						// Override restClientCfg qps/burst settings from flags
 | 
				
			||||||
@@ -115,7 +133,6 @@ func Run(s *options.CMServer) error {
 | 
				
			|||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
func StartControllers(s *options.CMServer, restClientCfg *restclient.Config) error {
 | 
					func StartControllers(s *options.CMServer, restClientCfg *restclient.Config) error {
 | 
				
			||||||
 | 
					 | 
				
			||||||
	ccClientset := federationclientset.NewForConfigOrDie(restclient.AddUserAgent(restClientCfg, "cluster-controller"))
 | 
						ccClientset := federationclientset.NewForConfigOrDie(restclient.AddUserAgent(restClientCfg, "cluster-controller"))
 | 
				
			||||||
	go clustercontroller.NewclusterController(ccClientset, s.ClusterMonitorPeriod.Duration).Run()
 | 
						go clustercontroller.NewclusterController(ccClientset, s.ClusterMonitorPeriod.Duration).Run()
 | 
				
			||||||
	dns, err := dnsprovider.InitDnsProvider(s.DnsProvider, s.DnsConfigFile)
 | 
						dns, err := dnsprovider.InitDnsProvider(s.DnsProvider, s.DnsConfigFile)
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user