Connect the node to the master via the API

[smarterclayton]

Prepare, but do not enable, the Kubelet to serve over TLS as well.

@brenton @jwhonce @liggitt this removes the need for the nodes to talk to etcd

[smarterclayton]

Tested it myself, but need to ensure the ansible scripts are setup. I've exposed .kubeconfig as an argument and env var to openshift start, and openshift start node or openshift start master --kubernetes=<> will use that file to connect to the master. When running an all in one that file is ignored.

[smarterclayton]

This in theory allows us to run on top of GKE

[liggitt]

If we're providing a client, do we still need MasterHost?

[liggitt]

Does the kubelet hand this client off to child pods or controllers? We probably want to nip that in the bud, or at least stub out helper methods so we can distribute clients with more scoped permissions later

[smarterclayton]

No, it's just used for pods and sending events

On Jan 29, 2015, at 8:04 PM, Jordan Liggitt notifications@github.com wrote:

In pkg/cmd/server/kubernetes/node.go:

@@ -46,8 +50,14 @@ type NodeConfig struct {
// The image used as the Kubelet network namespace and volume container.
NetworkContainerImage string

• // A client to connect to etcd
• EtcdClient *etcd.Client
• // Whether to enable TLS serving
• TLS bool

• KubeletCertFile string
• KubeletKeyFile string

• // A client to connect to the master.
• Client *client.Client
  Does the kubelet hand this client off to child pods or controllers? We probably want to nip that in the bud, or at least stub out helper methods so we can distribute clients with more scoped permissions later

—
Reply to this email directly or view it on GitHub.

[smarterclayton]

This is ready for final review - when this lands, it will change how nodes have to be configured.

[openshift-bot]

continuous-integration/openshift-jenkins/merge SUCCESS (https://ci.openshift.redhat.com/jenkins/job/merge_pull_requests_openshift3/757/) (Image: devenv-fedora_652)

[openshift-bot]

Evaluated for origin up to 4aec0c5

[smarterclayton]

[merge]