![]() Automatic merge from submit-queue federation: Adding support for namespace admission controls in federation-apiserver Now that we have namespaces in federation apiserver, we can support namespace admission controls. There are 3 of these: namespace/autoprovision, namespace/exists and namespace/lifecycle. namespace/autoprovision, namespace/exists should be deprecated in kubernetes(https://github.com/kubernetes/kubernetes/issues/31195). Adding support for namespace/lifecycle to federation-apiserver. As in kube-apiserver, enabling namespace/lifecycle by default. ```release-note Action required: If you have a running federation control plane, you will have to ensure that for all federation resources, the corresponding namespace exists in federation control plane. federation-apiserver now supports NamespaceLifecycle admission control, which is enabled by default. Set the --admission-control flag on the server to change that. ``` cc @kubernetes/sig-cluster-federation @quinton-hoole |
||
---|---|---|
.. | ||
apis | ||
client | ||
cluster | ||
cmd | ||
manifests | ||
pkg | ||
registry/cluster | ||
Makefile | ||
OWNERS | ||
README.md | ||
build.sh | ||
config.default.json |
README.md
Cluster Federation
Kubernetes Cluster Federation enables users to federate multiple Kubernetes clusters. Please see the user guide and the admin guide for more details about setting up and using the Cluster Federation.
Building Kubernetes Cluster Federation
Please see the Kubernetes Development Guide
for initial setup. Once you have the development environment setup
as explained in that guide, you also need to install jq
Building cluster federation should be as simple as running:
make build do=gen
To deploy clusters and install federation components, edit the
config.default.json
file to describe your clusters and run
make build do=deploy
To turn down the federation components and tear down the clusters run:
make build do=destroy
Ideas for improvement
-
Split the
build
phase (make recipe) into multiple phases:init
: pull installer imagesbuild-binaries
build-docker
build
: build-binary + build-dockerpush
: to push the built imagesgenconfig
deploy-clusters
deploy-federation
deploy
: deploy-clusters + deploy-federationdestroy-federation
destroy-clusters
destroy
: destroy-federation + destroy-clustersredeploy-federation
: just redeploys the federation components.
-
Add a
release
phase to run as part of Kubernetes release process that copies only a part of thebuild.sh
script that's relevant to the users into the release. -
Continue with
destroy
phase even in the face of errors.The bash script sets
set -e errexit
which causes the script to exit at the very first error. This should be the default mode for deploying components but not for destroying/cleanup.