From d6664a23652dfb48dd31edd6821668c32c3c585e Mon Sep 17 00:00:00 2001 From: Jordan Liggitt Date: Fri, 22 Feb 2019 11:06:24 -0500 Subject: [PATCH] Prepare switch from beta.kubernetes.io/metadata-proxy-ready to cloud.google.com/metadata-proxy-ready --- cluster/addons/metadata-proxy/gce/metadata-proxy.yaml | 1 + cluster/gce/config-default.sh | 2 ++ cluster/gce/config-test.sh | 2 ++ 3 files changed, 5 insertions(+) diff --git a/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml b/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml index 4c4c29f2d5..92f28103f8 100644 --- a/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml +++ b/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml @@ -88,6 +88,7 @@ spec: fieldPath: metadata.namespace # END_PROMETHEUS_TO_SD nodeSelector: + # TODO(liggitt): switch to cloud.google.com/metadata-proxy-ready=true in v1.16 beta.kubernetes.io/metadata-proxy-ready: "true" beta.kubernetes.io/os: linux terminationGracePeriodSeconds: 30 diff --git a/cluster/gce/config-default.sh b/cluster/gce/config-default.sh index 28437f4724..c13c33050b 100755 --- a/cluster/gce/config-default.sh +++ b/cluster/gce/config-default.sh @@ -211,6 +211,8 @@ ENABLE_METADATA_CONCEALMENT="${ENABLE_METADATA_CONCEALMENT:-false}" # true, fals METADATA_CONCEALMENT_NO_FIREWALL="${METADATA_CONCEALMENT_NO_FIREWALL:-false}" # true, false if [[ ${ENABLE_METADATA_CONCEALMENT:-} == "true" ]]; then # Put the necessary label on the node so the daemonset gets scheduled. + NODE_LABELS="${NODE_LABELS},cloud.google.com/metadata-proxy-ready=true" + # TODO(liggitt): remove this in v1.16 NODE_LABELS="${NODE_LABELS},beta.kubernetes.io/metadata-proxy-ready=true" # Add to the provider custom variables. PROVIDER_VARS="${PROVIDER_VARS:-} ENABLE_METADATA_CONCEALMENT METADATA_CONCEALMENT_NO_FIREWALL" diff --git a/cluster/gce/config-test.sh b/cluster/gce/config-test.sh index a568df26c2..43c9f0a261 100755 --- a/cluster/gce/config-test.sh +++ b/cluster/gce/config-test.sh @@ -251,6 +251,8 @@ ENABLE_METADATA_CONCEALMENT="${ENABLE_METADATA_CONCEALMENT:-true}" # true, false METADATA_CONCEALMENT_NO_FIREWALL="${METADATA_CONCEALMENT_NO_FIREWALL:-false}" # true, false if [[ ${ENABLE_METADATA_CONCEALMENT:-} == "true" ]]; then # Put the necessary label on the node so the daemonset gets scheduled. + NODE_LABELS="${NODE_LABELS},cloud.google.com/metadata-proxy-ready=true" + # TODO(liggitt): remove this in v1.16 NODE_LABELS="${NODE_LABELS},beta.kubernetes.io/metadata-proxy-ready=true" # Add to the provider custom variables. PROVIDER_VARS="${PROVIDER_VARS:-} ENABLE_METADATA_CONCEALMENT METADATA_CONCEALMENT_NO_FIREWALL"