From c62e5214c37d6946bfa0b0e09eef00756143037d Mon Sep 17 00:00:00 2001 From: Shyam Jeedigunta Date: Thu, 19 Jan 2017 14:55:16 +0100 Subject: [PATCH] Refactored kubemark code into provider-specific and provider-independent parts [Part-1] --- cluster/kubemark/{ => gce}/config-default.sh | 2 +- cluster/kubemark/util.sh | 5 +- test/kubemark/cloud-provider-config.sh | 17 + test/kubemark/common.sh | 3 +- test/kubemark/configure-kubectl.sh | 4 +- .../resources/hollow-node_template.json | 4 +- test/kubemark/run-e2e-tests.sh | 5 +- test/kubemark/start-kubemark.sh | 584 ++++++++++-------- test/kubemark/stop-kubemark.sh | 18 +- 9 files changed, 363 insertions(+), 279 deletions(-) rename cluster/kubemark/{ => gce}/config-default.sh (99%) create mode 100644 test/kubemark/cloud-provider-config.sh diff --git a/cluster/kubemark/config-default.sh b/cluster/kubemark/gce/config-default.sh similarity index 99% rename from cluster/kubemark/config-default.sh rename to cluster/kubemark/gce/config-default.sh index 60306151ef..ffdfe6d51d 100644 --- a/cluster/kubemark/config-default.sh +++ b/cluster/kubemark/gce/config-default.sh @@ -1,6 +1,6 @@ #!/bin/bash -# Copyright 2015 The Kubernetes Authors. +# Copyright 2017 The Kubernetes Authors. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/cluster/kubemark/util.sh b/cluster/kubemark/util.sh index a252c5cfcd..3b48f87a25 100644 --- a/cluster/kubemark/util.sh +++ b/cluster/kubemark/util.sh @@ -15,5 +15,6 @@ # limitations under the License. KUBE_ROOT=$(dirname "${BASH_SOURCE}")/../.. -source ${KUBE_ROOT}/cluster/gce/util.sh -source ${KUBE_ROOT}/cluster/kubemark/config-default.sh +source ${KUBE_ROOT}/test/kubemark/cloud-provider-config.sh +source ${KUBE_ROOT}/cluster/${CLOUD_PROVIDER}/util.sh +source ${KUBE_ROOT}/cluster/kubemark/${CLOUD_PROVIDER}/config-default.sh diff --git a/test/kubemark/cloud-provider-config.sh b/test/kubemark/cloud-provider-config.sh new file mode 100644 index 0000000000..9b3475548d --- /dev/null +++ b/test/kubemark/cloud-provider-config.sh @@ -0,0 +1,17 @@ +#!/bin/bash + +# Copyright 2017 The Kubernetes Authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +CLOUD_PROVIDER="${CLOUD_PROVIDER:-gce}" diff --git a/test/kubemark/common.sh b/test/kubemark/common.sh index 7d2dd1552e..c6352f1e24 100644 --- a/test/kubemark/common.sh +++ b/test/kubemark/common.sh @@ -14,7 +14,8 @@ # See the License for the specific language governing permissions and # limitations under the License. -source "${KUBE_ROOT}/cluster/kubemark/config-default.sh" +source "${KUBE_ROOT}/test/kubemark/cloud-provider-config.sh" +source "${KUBE_ROOT}/cluster/kubemark/${CLOUD_PROVIDER}/config-default.sh" source "${KUBE_ROOT}/cluster/kubemark/util.sh" source "${KUBE_ROOT}/cluster/lib/util.sh" diff --git a/test/kubemark/configure-kubectl.sh b/test/kubemark/configure-kubectl.sh index dac4a892b1..3a55de67d3 100644 --- a/test/kubemark/configure-kubectl.sh +++ b/test/kubemark/configure-kubectl.sh @@ -14,9 +14,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -curl https://sdk.cloud.google.com 2> /dev/null | bash -sudo gcloud components update kubectl -q -sudo ln -s /usr/local/share/google/google-cloud-sdk/bin/kubectl /bin/ +# This script assumes that kubectl binary is present in PATH. kubectl config set-cluster hollow-cluster --server=http://localhost:8080 --insecure-skip-tls-verify=true kubectl config set-credentials $(whoami) kubectl config set-context hollow-context --cluster=hollow-cluster --user=$(whoami) diff --git a/test/kubemark/resources/hollow-node_template.json b/test/kubemark/resources/hollow-node_template.json index f998b17b58..784dc9b0ea 100644 --- a/test/kubemark/resources/hollow-node_template.json +++ b/test/kubemark/resources/hollow-node_template.json @@ -80,7 +80,7 @@ "command": [ "/bin/sh", "-c", - "./kubemark.sh --morph=kubelet --name=$(NODE_NAME) --kubeconfig=/kubeconfig/kubelet.kubeconfig $(CONTENT_TYPE) --v=2 1>>/var/logs/kubelet_$(MY_POD_NAME).log 2>&1" + "./kubemark.sh --morph=kubelet --name=$(NODE_NAME) --kubeconfig=/kubeconfig/kubelet.kubeconfig $(CONTENT_TYPE) --v=2 1>>/var/logs/kubelet_$(NODE_NAME).log 2>&1" ], "volumeMounts": [ { @@ -129,7 +129,7 @@ "command": [ "/bin/sh", "-c", - "./kubemark.sh --morph=proxy --name=$(NODE_NAME) --kubeconfig=/kubeconfig/kubeproxy.kubeconfig $(CONTENT_TYPE) --v=2 1>>/var/logs/kube_proxy_$(MY_POD_NAME).log 2>&1" + "./kubemark.sh --morph=proxy --name=$(NODE_NAME) --kubeconfig=/kubeconfig/kubeproxy.kubeconfig $(CONTENT_TYPE) --v=2 1>>/var/logs/kubeproxy_$(NODE_NAME).log 2>&1" ], "volumeMounts": [ { diff --git a/test/kubemark/run-e2e-tests.sh b/test/kubemark/run-e2e-tests.sh index 3ae027087b..1a1fccdd67 100755 --- a/test/kubemark/run-e2e-tests.sh +++ b/test/kubemark/run-e2e-tests.sh @@ -22,8 +22,9 @@ KUBE_ROOT=$(dirname "${BASH_SOURCE}")/../.. # We need an absolute path to KUBE_ROOT ABSOLUTE_ROOT=$(readlink -f ${KUBE_ROOT}) -source ${KUBE_ROOT}/cluster/kubemark/util.sh -source ${KUBE_ROOT}/cluster/kubemark/config-default.sh +source "${KUBE_ROOT}/test/kubemark/cloud-provider-config.sh" +source "${KUBE_ROOT}/cluster/kubemark/util.sh" +source "${KUBE_ROOT}/cluster/kubemark/${CLOUD_PROVIDER}/config-default.sh" echo "Kubemark master name: ${MASTER_NAME}" diff --git a/test/kubemark/start-kubemark.sh b/test/kubemark/start-kubemark.sh index 3e9c0aebdb..e0e74d24a4 100755 --- a/test/kubemark/start-kubemark.sh +++ b/test/kubemark/start-kubemark.sh @@ -14,15 +14,16 @@ # See the License for the specific language governing permissions and # limitations under the License. -# Script that creates a Kubemark cluster with Master running on GCE. +# Script that creates a Kubemark cluster for any given cloud provider. -# Hack to make it work for OS X. Ugh... TMP_ROOT="$(dirname "${BASH_SOURCE}")/../.." KUBE_ROOT=$(readlink -e ${TMP_ROOT} 2> /dev/null || perl -MCwd -e 'print Cwd::abs_path shift' ${TMP_ROOT}) source "${KUBE_ROOT}/test/kubemark/common.sh" -function writeEnvironmentFile() { +# Write all environment variables that we need to pass to the kubemark master, +# locally to the file ${RESOURCE_DIRECTORY}/kubemark-master-env.sh. +function create-master-environment-file { cat > "${RESOURCE_DIRECTORY}/kubemark-master-env.sh" </dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null) -KUBE_PROXY_TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null) -HEAPSTER_TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null) -NODE_PROBLEM_DETECTOR_TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null) - -until gcloud compute ssh --zone="${ZONE}" --project="${PROJECT}" "${MASTER_NAME}" --command="ls" &> /dev/null; do - sleep 1 -done - -password=$(python -c 'import string,random; print("".join(random.SystemRandom().choice(string.ascii_letters + string.digits) for _ in range(16)))') - -run-gcloud-compute-with-retries ssh --zone="${ZONE}" --project="${PROJECT}" "${MASTER_NAME}" \ - --command="sudo mkdir /home/kubernetes -p && sudo mkdir /etc/srv/kubernetes -p && \ - sudo bash -c \"echo ${CA_CERT_BASE64} | base64 --decode > /etc/srv/kubernetes/ca.crt\" && \ - sudo bash -c \"echo ${MASTER_CERT_BASE64} | base64 --decode > /etc/srv/kubernetes/server.cert\" && \ - sudo bash -c \"echo ${MASTER_KEY_BASE64} | base64 --decode > /etc/srv/kubernetes/server.key\" && \ - sudo bash -c \"echo ${KUBECFG_CERT_BASE64} | base64 --decode > /etc/srv/kubernetes/kubecfg.crt\" && \ - sudo bash -c \"echo ${KUBECFG_KEY_BASE64} | base64 --decode > /etc/srv/kubernetes/kubecfg.key\" && \ - sudo bash -c \"echo \"${KUBE_BEARER_TOKEN},admin,admin\" > /etc/srv/kubernetes/known_tokens.csv\" && \ - sudo bash -c \"echo \"${KUBELET_TOKEN},system:node:node-name,uid:kubelet,system:nodes\" >> /etc/srv/kubernetes/known_tokens.csv\" && \ - sudo bash -c \"echo \"${KUBE_PROXY_TOKEN},system:kube-proxy,uid:kube_proxy\" >> /etc/srv/kubernetes/known_tokens.csv\" && \ - sudo bash -c \"echo \"${HEAPSTER_TOKEN},system:heapster,uid:heapster\" >> /etc/srv/kubernetes/known_tokens.csv\" && \ - sudo bash -c \"echo \"${NODE_PROBLEM_DETECTOR_TOKEN},system:node-problem-detector,uid:system:node-problem-detector\" >> /etc/srv/kubernetes/known_tokens.csv\" && \ - sudo bash -c \"echo ${password},admin,admin > /etc/srv/kubernetes/basic_auth.csv\"" - -run-gcloud-compute-with-retries copy-files --zone="${ZONE}" --project="${PROJECT}" \ - "${SERVER_BINARY_TAR}" \ - "${RESOURCE_DIRECTORY}/kubemark-master-env.sh" \ - "${RESOURCE_DIRECTORY}/start-kubemark-master.sh" \ - "${KUBEMARK_DIRECTORY}/configure-kubectl.sh" \ - "${RESOURCE_DIRECTORY}/manifests/etcd.yaml" \ - "${RESOURCE_DIRECTORY}/manifests/etcd-events.yaml" \ - "${RESOURCE_DIRECTORY}/manifests/kube-apiserver.yaml" \ - "${RESOURCE_DIRECTORY}/manifests/kube-scheduler.yaml" \ - "${RESOURCE_DIRECTORY}/manifests/kube-controller-manager.yaml" \ - "${RESOURCE_DIRECTORY}/manifests/kube-addon-manager.yaml" \ - "${RESOURCE_DIRECTORY}/manifests/addons/kubemark-rbac-bindings" \ - "kubernetes@${MASTER_NAME}":/home/kubernetes/ - -gcloud compute ssh "${MASTER_NAME}" --zone="${ZONE}" --project="${PROJECT}" \ - --command="sudo chmod a+x /home/kubernetes/configure-kubectl.sh && \ - sudo chmod a+x /home/kubernetes/start-kubemark-master.sh && \ - sudo bash /home/kubernetes/start-kubemark-master.sh" - -# Setup the docker image for kubemark hollow-node. -MAKE_DIR="${KUBE_ROOT}/cluster/images/kubemark" -KUBEMARK_BIN="$(kube::util::find-binary-for-platform kubemark linux/amd64)" -if [[ -z "${KUBEMARK_BIN}" ]]; then - echo 'Cannot find cmd/kubemark binary' - exit 1 -fi - -echo "Copying kubemark to ${MAKE_DIR}" -cp "${KUBEMARK_BIN}" "${MAKE_DIR}" -CURR_DIR=`pwd` -cd "${MAKE_DIR}" -RETRIES=3 -for attempt in $(seq 1 ${RETRIES}); do - if ! make; then - if [[ $((attempt)) -eq "${RETRIES}" ]]; then - echo "${color_red}Make failed. Exiting.${color_norm}" - exit 1 - fi - echo -e "${color_yellow}Make attempt $(($attempt)) failed. Retrying.${color_norm}" >& 2 - sleep $(($attempt * 5)) - else - break + + if [ "${EVENT_PD:-false}" == "true" ]; then + run-gcloud-compute-with-retries disks create "${MASTER_NAME}-event-pd" \ + ${GCLOUD_COMMON_ARGS} \ + --type "${MASTER_DISK_TYPE}" \ + --size "${MASTER_DISK_SIZE}" fi -done -rm kubemark -cd $CURR_DIR + + run-gcloud-compute-with-retries addresses create "${MASTER_NAME}-ip" \ + --project "${PROJECT}" \ + --region "${REGION}" -q + + MASTER_IP=$(gcloud compute addresses describe "${MASTER_NAME}-ip" \ + --project "${PROJECT}" --region "${REGION}" -q --format='value(address)') + + run-gcloud-compute-with-retries instances create "${MASTER_NAME}" \ + ${GCLOUD_COMMON_ARGS} \ + --address "${MASTER_IP}" \ + --machine-type "${MASTER_SIZE}" \ + --image-project="${MASTER_IMAGE_PROJECT}" \ + --image "${MASTER_IMAGE}" \ + --tags "${MASTER_TAG}" \ + --network "${NETWORK}" \ + --scopes "storage-ro,compute-rw,logging-write" \ + --boot-disk-size "${MASTER_ROOT_DISK_SIZE}" \ + --disk "name=${MASTER_NAME}-pd,device-name=master-pd,mode=rw,boot=no,auto-delete=no" + + if [ "${EVENT_PD:-false}" == "true" ]; then + echo "Attaching ${MASTER_NAME}-event-pd to ${MASTER_NAME}" + run-gcloud-compute-with-retries instances attach-disk "${MASTER_NAME}" \ + ${GCLOUD_COMMON_ARGS} \ + --disk "${MASTER_NAME}-event-pd" \ + --device-name="master-event-pd" + fi + + run-gcloud-compute-with-retries firewall-rules create "${INSTANCE_PREFIX}-kubemark-master-https" \ + --project "${PROJECT}" \ + --network "${NETWORK}" \ + --source-ranges "0.0.0.0/0" \ + --target-tags "${MASTER_TAG}" \ + --allow "tcp:443" +} -# Create kubeconfig for Kubelet. -KUBELET_KUBECONFIG_CONTENTS=$(echo "apiVersion: v1 -kind: Config -users: -- name: kubelet - user: - client-certificate-data: "${KUBELET_CERT_BASE64}" - client-key-data: "${KUBELET_KEY_BASE64}" -clusters: -- name: kubemark - cluster: - certificate-authority-data: "${CA_CERT_BASE64}" - server: https://${MASTER_IP} -contexts: -- context: - cluster: kubemark - user: kubelet - name: kubemark-context -current-context: kubemark-context") +# Generate certs/keys for CA, master, kubelet and kubecfg, and tokens for kubelet +# and kubeproxy. +function generate-pki-config { + ensure-temp-dir + gen-kube-bearertoken + gen-kube-basicauth + create-certs ${MASTER_IP} + KUBELET_TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null) + KUBE_PROXY_TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null) + NODE_PROBLEM_DETECTOR_TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null) + HEAPSTER_TOKEN=$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64 | tr -d "=+/" | dd bs=32 count=1 2>/dev/null) + echo "Generated PKI authentication data for kubemark." +} -# Create kubeconfig for Kubeproxy. -KUBEPROXY_KUBECONFIG_CONTENTS=$(echo "apiVersion: v1 -kind: Config -users: -- name: kube-proxy - user: - token: ${KUBE_PROXY_TOKEN} -clusters: -- name: kubemark - cluster: - insecure-skip-tls-verify: true - server: https://${MASTER_IP} -contexts: -- context: - cluster: kubemark - user: kube-proxy - name: kubemark-context -current-context: kubemark-context") +# Wait for the master to be reachable for executing commands on it. We do this by +# trying to run the bash noop(:) on the master, with 10 retries. +function wait-for-master-reachability { + until gcloud compute ssh --zone="${ZONE}" --project="${PROJECT}" "${MASTER_NAME}" --command=":" &> /dev/null; do + sleep 1 + done + echo "Checked master reachability for remote command execution." +} -# Create kubeconfig for Heapster. -HEAPSTER_KUBECONFIG_CONTENTS=$(echo "apiVersion: v1 -kind: Config -users: -- name: heapster - user: - token: ${HEAPSTER_TOKEN} -clusters: -- name: kubemark - cluster: - insecure-skip-tls-verify: true - server: https://${MASTER_IP} -contexts: -- context: - cluster: kubemark - user: heapster - name: kubemark-context -current-context: kubemark-context") +# Write all the relevant certs/keys/tokens to the master. +function write-pki-config-to-master { + run-gcloud-compute-with-retries ssh --zone="${ZONE}" --project="${PROJECT}" "${MASTER_NAME}" \ + --command="sudo mkdir /home/kubernetes -p && sudo mkdir /etc/srv/kubernetes -p && \ + sudo bash -c \"echo ${CA_CERT_BASE64} | base64 --decode > /etc/srv/kubernetes/ca.crt\" && \ + sudo bash -c \"echo ${MASTER_CERT_BASE64} | base64 --decode > /etc/srv/kubernetes/server.cert\" && \ + sudo bash -c \"echo ${MASTER_KEY_BASE64} | base64 --decode > /etc/srv/kubernetes/server.key\" && \ + sudo bash -c \"echo ${KUBECFG_CERT_BASE64} | base64 --decode > /etc/srv/kubernetes/kubecfg.crt\" && \ + sudo bash -c \"echo ${KUBECFG_KEY_BASE64} | base64 --decode > /etc/srv/kubernetes/kubecfg.key\" && \ + sudo bash -c \"echo \"${KUBE_BEARER_TOKEN},admin,admin\" > /etc/srv/kubernetes/known_tokens.csv\" && \ + sudo bash -c \"echo \"${KUBELET_TOKEN},system:node:node-name,uid:kubelet,system:nodes\" >> /etc/srv/kubernetes/known_tokens.csv\" && \ + sudo bash -c \"echo \"${KUBE_PROXY_TOKEN},system:kube-proxy,uid:kube_proxy\" >> /etc/srv/kubernetes/known_tokens.csv\" && \ + sudo bash -c \"echo \"${HEAPSTER_TOKEN},system:heapster,uid:heapster\" >> /etc/srv/kubernetes/known_tokens.csv\" && \ + sudo bash -c \"echo \"${NODE_PROBLEM_DETECTOR_TOKEN},system:node-problem-detector,uid:system:node-problem-detector\" >> /etc/srv/kubernetes/known_tokens.csv\" && \ + sudo bash -c \"echo ${KUBE_PASSWORD},admin,admin > /etc/srv/kubernetes/basic_auth.csv\"" + echo "Wrote PKI certs, keys, tokens and admin password to master." +} -# Create kubeconfig for NodeProblemDetector. -NPD_KUBECONFIG_CONTENTS=$(echo "apiVersion: v1 -kind: Config -users: -- name: node-problem-detector - user: - token: ${NODE_PROBLEM_DETECTOR_TOKEN} -clusters: -- name: kubemark - cluster: - insecure-skip-tls-verify: true - server: https://${MASTER_IP} -contexts: -- context: - cluster: kubemark - user: node-problem-detector - name: kubemark-npd-context -current-context: kubemark-npd-context") +# Copy all the necessary resource files (scripts/configs/manifests) to the master. +function copy-resource-files-to-master { + run-gcloud-compute-with-retries copy-files --zone="${ZONE}" --project="${PROJECT}" \ + "${SERVER_BINARY_TAR}" \ + "${RESOURCE_DIRECTORY}/kubemark-master-env.sh" \ + "${RESOURCE_DIRECTORY}/start-kubemark-master.sh" \ + "${KUBEMARK_DIRECTORY}/configure-kubectl.sh" \ + "${RESOURCE_DIRECTORY}/manifests/etcd.yaml" \ + "${RESOURCE_DIRECTORY}/manifests/etcd-events.yaml" \ + "${RESOURCE_DIRECTORY}/manifests/kube-apiserver.yaml" \ + "${RESOURCE_DIRECTORY}/manifests/kube-scheduler.yaml" \ + "${RESOURCE_DIRECTORY}/manifests/kube-controller-manager.yaml" \ + "${RESOURCE_DIRECTORY}/manifests/kube-addon-manager.yaml" \ + "${RESOURCE_DIRECTORY}/manifests/addons/kubemark-rbac-bindings" \ + "kubernetes@${MASTER_NAME}":/home/kubernetes/ + echo "Copied server binary, master startup scripts, configs and resource manifests to master." +} -# Create kubeconfig for local kubectl. -LOCAL_KUBECONFIG="${RESOURCE_DIRECTORY}/kubeconfig.kubemark" -cat > "${LOCAL_KUBECONFIG}" << EOF +# Make startup scripts executable and run start-kubemark-master.sh. +function start-master-components { + echo "" + gcloud compute ssh "${MASTER_NAME}" --zone="${ZONE}" --project="${PROJECT}" \ + --command="sudo chmod a+x /home/kubernetes/configure-kubectl.sh && \ + sudo chmod a+x /home/kubernetes/start-kubemark-master.sh && \ + sudo bash /home/kubernetes/start-kubemark-master.sh" + echo "The master has started and is now live." +} + +# Write kubeconfig to ${RESOURCE_DIRECTORY}/kubeconfig.kubemark in order to +# use kubectl locally. +function write-local-kubeconfig { + LOCAL_KUBECONFIG="${RESOURCE_DIRECTORY}/kubeconfig.kubemark" + cat > "${LOCAL_KUBECONFIG}" << EOF apiVersion: v1 kind: Config users: @@ -275,70 +197,216 @@ contexts: name: kubemark-context current-context: kubemark-context EOF + echo "Kubeconfig file for kubemark master written to ${LOCAL_KUBECONFIG}." +} -sed "s/{{numreplicas}}/${NUM_NODES:-10}/g" "${RESOURCE_DIRECTORY}/hollow-node_template.json" > "${RESOURCE_DIRECTORY}/hollow-node.json" -sed -i'' -e "s/{{project}}/${PROJECT}/g" "${RESOURCE_DIRECTORY}/hollow-node.json" -sed -i'' -e "s/{{master_ip}}/${MASTER_IP}/g" "${RESOURCE_DIRECTORY}/hollow-node.json" - -mkdir "${RESOURCE_DIRECTORY}/addons" || true - -sed "s/{{MASTER_IP}}/${MASTER_IP}/g" "${RESOURCE_DIRECTORY}/heapster_template.json" > "${RESOURCE_DIRECTORY}/addons/heapster.json" -metrics_mem_per_node=4 -metrics_mem=$((200 + ${metrics_mem_per_node}*${NUM_NODES:-10})) -sed -i'' -e "s/{{METRICS_MEM}}/${metrics_mem}/g" "${RESOURCE_DIRECTORY}/addons/heapster.json" -eventer_mem_per_node=500 -eventer_mem=$((200 * 1024 + ${eventer_mem_per_node}*${NUM_NODES:-10})) -sed -i'' -e "s/{{EVENTER_MEM}}/${eventer_mem}/g" "${RESOURCE_DIRECTORY}/addons/heapster.json" - -# Create kubemark namespace. -"${KUBECTL}" create -f "${RESOURCE_DIRECTORY}/kubemark-ns.json" -# Create configmap for configuring hollow- kubelet, proxy and npd. -"${KUBECTL}" create configmap "node-configmap" --namespace="kubemark" \ - --from-literal=content.type="${TEST_CLUSTER_API_CONTENT_TYPE}" \ - --from-file=kernel.monitor="${RESOURCE_DIRECTORY}/kernel-monitor.json" -# Create secret for passing kubeconfigs to kubelet, kubeproxy and npd. -"${KUBECTL}" create secret generic "kubeconfig" --type=Opaque --namespace="kubemark" \ - --from-literal=kubelet.kubeconfig="${KUBELET_KUBECONFIG_CONTENTS}" \ - --from-literal=kubeproxy.kubeconfig="${KUBEPROXY_KUBECONFIG_CONTENTS}" \ - --from-literal=heapster.kubeconfig="${HEAPSTER_KUBECONFIG_CONTENTS}" \ - --from-literal=npd.kubeconfig="${NPD_KUBECONFIG_CONTENTS}" -# Create addon pods. -"${KUBECTL}" create -f "${RESOURCE_DIRECTORY}/addons" --namespace="kubemark" -# Create the replication controller for hollow-nodes. -"${KUBECTL}" create -f "${RESOURCE_DIRECTORY}/hollow-node.json" --namespace="kubemark" - -echo "Waiting for all HollowNodes to become Running..." -start=$(date +%s) -nodes=$("${KUBECTL}" --kubeconfig="${LOCAL_KUBECONFIG}" get node 2> /dev/null) || true -ready=$(($(echo "${nodes}" | grep -v "NotReady" | wc -l) - 1)) - -until [[ "${ready}" -ge "${NUM_NODES}" ]]; do - echo -n . - sleep 1 - now=$(date +%s) - # Fail it if it already took more than 30 minutes. - if [ $((now - start)) -gt 1800 ]; then - echo "" - echo "Timeout waiting for all HollowNodes to become Running" - # Try listing nodes again - if it fails it means that API server is not responding - if "${KUBECTL}" --kubeconfig="${LOCAL_KUBECONFIG}" get node &> /dev/null; then - echo "Found only ${ready} ready Nodes while waiting for ${NUM_NODES}." - else - echo "Got error while trying to list Nodes. Probably API server is down." - fi - pods=$("${KUBECTL}" get pods --namespace=kubemark) || true - running=$(($(echo "${pods}" | grep "Running" | wc -l))) - echo "${running} HollowNode pods are reported as 'Running'" - not_running=$(($(echo "${pods}" | grep -v "Running" | wc -l) - 1)) - echo "${not_running} HollowNode pods are reported as NOT 'Running'" - echo $(echo "${pods}" | grep -v "Running") +# Finds the right kubemark binary for 'linux/amd64' platform and uses it to +# create a docker image for hollow-node and upload it to the appropriate +# docker container registry for the cloud provider. +# TODO(shyamjvs): Make the image upload URL and makefile variable w.r.t. provider. +function create-and-upload-hollow-node-image { + MAKE_DIR="${KUBE_ROOT}/cluster/images/kubemark" + KUBEMARK_BIN="$(kube::util::find-binary-for-platform kubemark linux/amd64)" + if [[ -z "${KUBEMARK_BIN}" ]]; then + echo 'Cannot find cmd/kubemark binary' exit 1 fi + + echo "Copying kubemark binary to ${MAKE_DIR}" + cp "${KUBEMARK_BIN}" "${MAKE_DIR}" + CURR_DIR=`pwd` + cd "${MAKE_DIR}" + RETRIES=3 + for attempt in $(seq 1 ${RETRIES}); do + if ! make; then + if [[ $((attempt)) -eq "${RETRIES}" ]]; then + echo "${color_red}Make failed. Exiting.${color_norm}" + exit 1 + fi + echo -e "${color_yellow}Make attempt $(($attempt)) failed. Retrying.${color_norm}" >& 2 + sleep $(($attempt * 5)) + else + break + fi + done + rm kubemark + cd $CURR_DIR + echo "Created and uploaded the kubemark hollow-node image to docker registry." +} + +# Generate secret and configMap for the hollow-node pods to work, prepare +# manifests of the hollow-node and heapster replication controllers from +# templates, and finally create these resources through kubectl. +function create-kube-hollow-node-resources { + # Create kubeconfig for Kubelet. + KUBELET_KUBECONFIG_CONTENTS=$(echo "apiVersion: v1 +kind: Config +users: +- name: kubelet + user: + client-certificate-data: "${KUBELET_CERT_BASE64}" + client-key-data: "${KUBELET_KEY_BASE64}" +clusters: +- name: kubemark + cluster: + certificate-authority-data: "${CA_CERT_BASE64}" + server: https://${MASTER_IP} +contexts: +- context: + cluster: kubemark + user: kubelet + name: kubemark-context +current-context: kubemark-context") + + # Create kubeconfig for Kubeproxy. + KUBEPROXY_KUBECONFIG_CONTENTS=$(echo "apiVersion: v1 +kind: Config +users: +- name: kube-proxy + user: + token: ${KUBE_PROXY_TOKEN} +clusters: +- name: kubemark + cluster: + insecure-skip-tls-verify: true + server: https://${MASTER_IP} +contexts: +- context: + cluster: kubemark + user: kube-proxy + name: kubemark-context +current-context: kubemark-context") + + # Create kubeconfig for Heapster. + HEAPSTER_KUBECONFIG_CONTENTS=$(echo "apiVersion: v1 +kind: Config +users: +- name: heapster + user: + token: ${HEAPSTER_TOKEN} +clusters: +- name: kubemark + cluster: + insecure-skip-tls-verify: true + server: https://${MASTER_IP} +contexts: +- context: + cluster: kubemark + user: heapster + name: kubemark-context +current-context: kubemark-context") + + # Create kubeconfig for NodeProblemDetector. + NPD_KUBECONFIG_CONTENTS=$(echo "apiVersion: v1 +kind: Config +users: +- name: node-problem-detector + user: + token: ${NODE_PROBLEM_DETECTOR_TOKEN} +clusters: +- name: kubemark + cluster: + insecure-skip-tls-verify: true + server: https://${MASTER_IP} +contexts: +- context: + cluster: kubemark + user: node-problem-detector + name: kubemark-context +current-context: kubemark-context") + + # Create kubemark namespace. + "${KUBECTL}" create -f "${RESOURCE_DIRECTORY}/kubemark-ns.json" + + # Create configmap for configuring hollow- kubelet, proxy and npd. + "${KUBECTL}" create configmap "node-configmap" --namespace="kubemark" \ + --from-literal=content.type="${TEST_CLUSTER_API_CONTENT_TYPE}" \ + --from-file=kernel.monitor="${RESOURCE_DIRECTORY}/kernel-monitor.json" + + # Create secret for passing kubeconfigs to kubelet, kubeproxy and npd. + "${KUBECTL}" create secret generic "kubeconfig" --type=Opaque --namespace="kubemark" \ + --from-literal=kubelet.kubeconfig="${KUBELET_KUBECONFIG_CONTENTS}" \ + --from-literal=kubeproxy.kubeconfig="${KUBEPROXY_KUBECONFIG_CONTENTS}" \ + --from-literal=heapster.kubeconfig="${HEAPSTER_KUBECONFIG_CONTENTS}" \ + --from-literal=npd.kubeconfig="${NPD_KUBECONFIG_CONTENTS}" + + # Create addon pods. + # TODO(shyamjvs): Make path to docker image variable in heapster_template.json. + mkdir -p "${RESOURCE_DIRECTORY}/addons" + sed "s/{{MASTER_IP}}/${MASTER_IP}/g" "${RESOURCE_DIRECTORY}/heapster_template.json" > "${RESOURCE_DIRECTORY}/addons/heapster.json" + metrics_mem_per_node=4 + metrics_mem=$((200 + ${metrics_mem_per_node}*${NUM_NODES:-10})) + sed -i'' -e "s/{{METRICS_MEM}}/${metrics_mem}/g" "${RESOURCE_DIRECTORY}/addons/heapster.json" + eventer_mem_per_node=500 + eventer_mem=$((200 * 1024 + ${eventer_mem_per_node}*${NUM_NODES:-10})) + sed -i'' -e "s/{{EVENTER_MEM}}/${eventer_mem}/g" "${RESOURCE_DIRECTORY}/addons/heapster.json" + "${KUBECTL}" create -f "${RESOURCE_DIRECTORY}/addons" --namespace="kubemark" + + # Create the replication controller for hollow-nodes. + # TODO(shyamjvs): Make path to docker image variable in hollow-node_template.json. + sed "s/{{numreplicas}}/${NUM_NODES:-10}/g" "${RESOURCE_DIRECTORY}/hollow-node_template.json" > "${RESOURCE_DIRECTORY}/hollow-node.json" + sed -i'' -e "s/{{project}}/${PROJECT}/g" "${RESOURCE_DIRECTORY}/hollow-node.json" + sed -i'' -e "s/{{master_ip}}/${MASTER_IP}/g" "${RESOURCE_DIRECTORY}/hollow-node.json" + "${KUBECTL}" create -f "${RESOURCE_DIRECTORY}/hollow-node.json" --namespace="kubemark" + + echo "Created secrets, configMaps, replication-controllers required for hollow-nodes." +} + +# Wait until all hollow-nodes are running or there is a timeout. +function wait-for-hollow-nodes-to-run-or-timeout { + echo -n "Waiting for all hollow-nodes to become Running" + start=$(date +%s) nodes=$("${KUBECTL}" --kubeconfig="${LOCAL_KUBECONFIG}" get node 2> /dev/null) || true ready=$(($(echo "${nodes}" | grep -v "NotReady" | wc -l) - 1)) -done -echo "" + + until [[ "${ready}" -ge "${NUM_NODES}" ]]; do + echo -n "." + sleep 1 + now=$(date +%s) + # Fail it if it already took more than 30 minutes. + if [ $((now - start)) -gt 1800 ]; then + echo "" + echo -e "${color_red} Timeout waiting for all hollow-nodes to become Running. ${color_norm}" + # Try listing nodes again - if it fails it means that API server is not responding + if "${KUBECTL}" --kubeconfig="${LOCAL_KUBECONFIG}" get node &> /dev/null; then + echo "Found only ${ready} ready hollow-nodes while waiting for ${NUM_NODES}." + else + echo "Got error while trying to list hollow-nodes. Probably API server is down." + fi + pods=$("${KUBECTL}" get pods --namespace=kubemark) || true + running=$(($(echo "${pods}" | grep "Running" | wc -l))) + echo "${running} hollow-nodes are reported as 'Running'" + not_running=$(($(echo "${pods}" | grep -v "Running" | wc -l) - 1)) + echo "${not_running} hollow-nodes are reported as NOT 'Running'" + echo $(echo "${pods}" | grep -v "Running") + exit 1 + fi + nodes=$("${KUBECTL}" --kubeconfig="${LOCAL_KUBECONFIG}" get node 2> /dev/null) || true + ready=$(($(echo "${nodes}" | grep -v "NotReady" | wc -l) - 1)) + done + echo -e "${color_green} Done!${color_norm}" +} +############################### Main Function ######################################## +# Setup for master. +echo -e "${color_yellow}STARTING SETUP FOR MASTER${color_norm}" +create-master-environment-file +create-master-instance-with-resources +generate-pki-config +wait-for-master-reachability +write-pki-config-to-master +copy-resource-files-to-master +start-master-components + +# Setup for hollow-nodes. +echo "" +echo -e "${color_yellow}STARTING SETUP FOR HOLLOW-NODES${color_norm}" +write-local-kubeconfig +create-and-upload-hollow-node-image +create-kube-hollow-node-resources +wait-for-hollow-nodes-to-run-or-timeout + +echo "" echo "Master IP: ${MASTER_IP}" -echo "Password to kubemark master: ${password}" +echo "Password to kubemark master: ${KUBE_PASSWORD}" echo "Kubeconfig for kubemark master is written in ${LOCAL_KUBECONFIG}" diff --git a/test/kubemark/stop-kubemark.sh b/test/kubemark/stop-kubemark.sh index 0ee2477def..6d5efd05bd 100755 --- a/test/kubemark/stop-kubemark.sh +++ b/test/kubemark/stop-kubemark.sh @@ -14,15 +14,20 @@ # See the License for the specific language governing permissions and # limitations under the License. -# Script that destroys Kubemark clusters and deletes all GCE resources created for Master +# Script that destroys Kubemark cluster and deletes all master resources. + KUBE_ROOT=$(dirname "${BASH_SOURCE}")/../.. source "${KUBE_ROOT}/test/kubemark/common.sh" -"${KUBECTL}" delete -f "${RESOURCE_DIRECTORY}/hollow-kubelet.json" &> /dev/null || true "${KUBECTL}" delete -f "${RESOURCE_DIRECTORY}/addons" &> /dev/null || true +"${KUBECTL}" delete -f "${RESOURCE_DIRECTORY}/hollow-node.json" &> /dev/null || true "${KUBECTL}" delete -f "${RESOURCE_DIRECTORY}/kubemark-ns.json" &> /dev/null || true -rm -rf "${RESOURCE_DIRECTORY}/addons" + +rm -rf "${RESOURCE_DIRECTORY}/addons" \ + "${RESOURCE_DIRECTORY}/kubeconfig.kubemark" \ + "${RESOURCE_DIRECTORY}/hollow-node.json" \ + "${RESOURCE_DIRECTORY}/kubemark-master-env.sh" &> /dev/null || true GCLOUD_COMMON_ARGS="--project ${PROJECT} --zone ${ZONE} --quiet" @@ -51,10 +56,3 @@ if [ "${SEPARATE_EVENT_MACHINE:-false}" == "true" ]; then gcloud compute disks delete "${EVENT_STORE_NAME}-pd" \ ${GCLOUD_COMMON_ARGS} || true fi - -rm -rf "${RESOURCE_DIRECTORY}/addons" "${RESOURCE_DIRECTORY}/kubeconfig.kubemark" &> /dev/null || true -rm "${RESOURCE_DIRECTORY}/ca.crt" \ - "${RESOURCE_DIRECTORY}/kubecfg.crt" \ - "${RESOURCE_DIRECTORY}/kubecfg.key" \ - "${RESOURCE_DIRECTORY}/hollow-node.json" \ - "${RESOURCE_DIRECTORY}/kubemark-master-env.sh" &> /dev/null || true